Host extension map

Host organizes sessions, inference, permissions, Box, and optional services as lifecycle extensions. registry.ts registers them; each extension.ts declares an ID, dependencies, startup, and cleanup. The Dune boot coordinator orders dependencies and detects missing peers or cycles.

Read the core path first

session owns persistent sessions; transcript handles messages and run scheduling; turn-execution supplies execution services; inference supplies models and related capabilities. The Harness composes Agent behavior in packages/grok-bot-harness. Start with local-exec / local-tool-permission for Mac tools, or mcp for tool-service integration.

The groups below describe responsibilities. Retained registration code does not mean a remote service is enabled in the local profile. Each guide includes dependencies extracted from source and concrete implementation entry points.

Identity, settings, and permissions

Extension	Responsibility
auth	Host identity, credential renewal, and selected-team context.
settings	Persists workspace settings and publishes changes to other extensions.
experiments	Supplies feature gates, dynamic configuration, and development overrides.
privacy-mode	Manages privacy mode and shared privacy state.
local-tool-permission	Resolves ask / never / always policies for Mac tools and handles approval requests.
auto-review	Provides automatic tool-action review and waits for review outcomes.
action-audit	Records action audits and connects the audit backend.
team-admin-policy	Exposes team administration policy to dependent services.

Conversations and tasks

Extension	Responsibility
session	Creates and recovers Agent sessions, databases, state, and persistence paths.
transcript	Accepts messages, schedules turns, coordinates Agent lifecycle, and stores transcripts.
turn-execution	Provides execution services for an individual turn.
server-agent-proxy	Proxies server-side Agent interactions and idle lifecycle.
agent-identity	Manages Agent names, identity capabilities, and historical identity backfills.
resume-ownership	Coordinates run-resume ownership, Box rooms, and migration barriers.
state-backstop	Provides fallback handling for Host state.
transcript-publish	Publishes transcript entries to subscribers.
content-search	Indexes and searches Agent content.
memory	Manages Agent memory state, synthesis, and retained sync paths.

Models, tools, and execution

Extension	Responsibility
inference	Provides model inference, web tools, transcription, and voice previews to the Host.
mcp	Manages Host MCP services and installs plugin Skills into the workspace.
local-exec	Bridges execution requests to the user's computer through Gateway or server adapters.
forever-box	Manages the long-lived Box and disk-pressure handling.
box-lifecycle	Coordinates Box lifecycle events.
box-timezone	Manages Box timezone configuration.
attachments	Attachment storage, image/video renditions, and retained image-generation interfaces.

Credentials and browser

Extension	Responsibility
secrets	Stores Bot secrets and manages carrying them between Bots.
credential-provider	Coordinates credential providers, browser filling, and verification follow-ups.
credential-fill	Executes and clears credential filling through browser control.
user-form-vault	Stores and manages user form data.
chrome-cookie-import	Retains the Chrome cookie-import service.
cookie-origin-approval	Provides origin-scoped approval for cookie use.
browser-ua	Manages browser user agents, fingerprints, and Web Bot markers.
webauthn-proxy	Proxies browser WebAuthn requests.

Automation and retained services

Extension	Responsibility
automations	Automation triggers, manual runs, listener integrations, and retained cloud sync.
cloud-agents	Retains cloud Agent polling, update streams, and artifact caching.
box-store-sync	Object-store synchronization, snapshots, packing, and transfer for Box state.
remote-agent-messaging	Retains remote Agent communication and member-turn coordination.
notify-bus	Connects the notification bus and provides a notification client.
notifications	Notification extension and mobile push delivery.
email	Retains email-service integration.
messages-grants	Manages Messages permission requests and their expiry.
cycle-usage	Reads and exposes usage-cycle information.
managed-setup	Manages deployment settings, team rules, and managed Skills.
user-skills-cache	Caches and organizes user Skill files.
bot-template-share	Stores and shares Bot templates.
working-state-export	Exports working state and manages warming eligibility.

Diagnostics and desktop support

Extension	Responsibility
telemetry	Aggregates Host diagnostics, structured logs, metrics, and lifecycle events.
codebase-telemetry	Connects codebase snapshots and telemetry controllers to the Host.
source-map	Provides source-map diagnostic services.
host-upgrade	Retains Host bundle acquisition, upgrades, and upgrade markers.
feedback	Handles feedback sampling, prompt storage, and product feedback.
teach-recording	Provides the Host teaching-recording service.
trays	Manages tray-related Host state and services.
wallpaper	Manages the Box desktop wallpaper.

Change an extension

Read extension.ts dependencies before the service implementation. For interface changes, locate context.deps callers. Preserve onStop cleanup and asynchronous cancellation; never implement changes directly in .runtime outputs. Changes to the extension set also involve extension-ids.generated.ts and the registry.

Host · Architecture · Build profiles · Development