refactor(host): expose getHostAPI(); host-bin drops duplicate adapter; storage-sqlite manifest honesty

host CR-1: createHost.getHostAPI() returns the canonical post-activation HostAPI
(registration closed) via a single builder — host-bin deletes its
buildPostActivationHostAPI duplicate and calls host.getHostAPI().
storage-sqlite CR-2: remove false contributes.services:["storage"] (backend is a
kernel bootstrap dep injected as HostDeps.storageFactory, not a bus service);
document the intentional no-op activate.

typecheck clean, 218 tests pass, biome clean; live boot + curl verified.

1 files changed, 63 insertions, 0 deletions

diff --git a/packages/kernel/src/host/host.test.ts b/packages/kernel/src/host/host.test.ts
index 82d5177..11c2356 100644
--- a/packages/kernel/src/host/host.test.ts
+++ b/packages/kernel/src/host/host.test.ts
@@ -687,4 +687,67 @@ describe("createHost", () => {
 			expect(host.getDisabled()).toHaveLength(0);
 		});
 	});
+
+	describe("getHostAPI", () => {
+		it("returns a HostAPI whose read-views reflect registrations from activation", async () => {
+			const tool = createFakeTool("read-file");
+			const provider = createFakeProvider("anthropic");
+			const auth = createFakeAuth("apikey");
+
+			const ext = createExtension("multi-ext", {
+				activate: (host) => {
+					host.defineTool(tool);
+					host.defineProvider(provider);
+					host.defineAuth(auth);
+				},
+			});
+
+			const host = createHost([ext], deps);
+			await host.activate();
+
+			const api = host.getHostAPI();
+
+			expect(api.getTools().size).toBe(1);
+			expect(api.getTools().get("read-file")).toBe(tool);
+
+			expect(api.getProviders().size).toBe(1);
+			expect(api.getProviders().get("anthropic")).toBe(provider);
+
+			expect(api.getAuthProviders().size).toBe(1);
+			expect(api.getAuthProvider("apikey")).toBe(auth);
+		});
+
+		it("throws on defineTool after activation", async () => {
+			const ext = createExtension("ext", { activate: () => {} });
+			const host = createHost([ext], deps);
+			await host.activate();
+
+			const api = host.getHostAPI();
+			expect(() => api.defineTool(createFakeTool("late"))).toThrow(
+				"Registration not available after activation",
+			);
+		});
+
+		it("throws on defineProvider after activation", async () => {
+			const ext = createExtension("ext", { activate: () => {} });
+			const host = createHost([ext], deps);
+			await host.activate();
+
+			const api = host.getHostAPI();
+			expect(() => api.defineProvider(createFakeProvider("late"))).toThrow(
+				"Registration not available after activation",
+			);
+		});
+
+		it("throws on defineAuth after activation", async () => {
+			const ext = createExtension("ext", { activate: () => {} });
+			const host = createHost([ext], deps);
+			await host.activate();
+
+			const api = host.getHostAPI();
+			expect(() => api.defineAuth(createFakeAuth("late"))).toThrow(
+				"Registration not available after activation",
+			);
+		});
+	});
 });