Extension Management Center
Authenticated operator workflows over Kernel-authoritative state.
# Inventory
Inspect package identity, type, version, assurance and lifecycle state.
# Install / Enable / Disable / Upgrade / Uninstall
Every operation calls the public Kernel control plane, obeys state/dependency gates and rereads authoritative state. Upgrade requires a complete immutable candidate and migration set.
# Configuration
Writes pass through package schema validation and remain package-scoped.
# Dependency diagnostics
Read required, optional, version and activation blockers from Kernel resolution. The product does not invent ordering.
# Capability summary
Display declared and granted capabilities. Conditional decisions remain host-owned and forbidden type/capability pairs cannot be granted.
# Theme selection and state
Select by presentation scope and reread selected, Core default, effective and fallback state. Enabled and effective remain distinct.
# Structured diagnostics
Stable codes support operator action while user-facing text can be localized. The management product does not expose private Kernel stores.