@capybara-hq/kernel 0.1.0-rc.21 → 0.1.0-rc.22

package/dist/catalog/org-catalog.controller.d.ts

@@ -7,7 +7,7 @@ import { type OrgContext } from "../orgs/org.guard.js";
 import type { ConnectorDetail, ToolIssue } from "../tools/connectors.service.js";
 import type { MarketplaceImportResult } from "./catalog.service.js";
 import type { CatalogIcon, OrgCatalogDetail, OrgCatalogItem, OrgInstallResult } from "./catalog-content.js";
-import { CatalogGuideQuery, CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, OrgPluginInstallBody, OrgPluginSwitchBody } from "./org-catalog.schemas.js";
+import { CatalogGuideQuery, CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, NetworkRequestBody, OrgPluginInstallBody, OrgPluginSwitchBody } from "./org-catalog.schemas.js";
 import { OrgCatalogService } from "./org-catalog.service.js";
 import { PluginInstaller, type PluginInstallView, type UninstallPreview, type UninstallReport } from "./plugin-install.js";
 import { CatalogRequestsService, type CatalogRequestView } from "./requests.service.js";
@@ -57,6 +57,8 @@ declare const DecideBody: z.ZodObject<{
  * - `POST catalog/:itemId/requests` (`catalog.request`; `access` needs an org admin): requests
  *   under plugin scope (spec §5.1), `enable` into the org admins' inbox, `access` to the super
  *   admin; `POST marketplace-requests` (org admins): an `import` request for a marketplace entry;
+ * - `POST catalog-requests/network` (`catalog.request`, web sessions only): a member asks the org
+ *   admins to allow hosts in the org's sandbox network (network ask-to-allow spec §5.3);
  * - `PUT catalog/:itemId/switch` (scope phase 1): `{ enabled: true, inputs? }` installs -> 200 `{ item }`;
  *   `{ enabled: false, confirm? }` -> 200 `{ preview, confirm }`, then with the hash 200 `{ item }`;
  * - `POST catalog/:itemId/install` (an alias of switching on, no longer creates requests): the route only requires `catalog.read`; the service re-checks
@@ -69,8 +71,8 @@ declare const DecideBody: z.ZodObject<{
  *   admin (`PUT /admin/catalog/items/:id/update`, ruling F2);
  * - `POST connector-templates/:templateId/connectors` (`connectors.manage`): one more connector
  *   from a platform connector template on in the org (ruling P4-T6-8);
- * - `POST catalog-requests/:id/decide` (`catalog.decide`, org admins; `enable` and
- *   `connector_setup` requests, `{ approve, reason? }`; a `connector_setup` request is only
+ * - `POST catalog-requests/:id/decide` (`catalog.decide`, org admins; `enable`,
+ *   `network_allowlist` and `connector_setup` requests, `{ approve, reason? }`; a `connector_setup` request is only
  *   rejected here, ruling P4-T6-6), `POST catalog-requests/:id/dismiss` (the requester, a decided
  *   request).
  */
@@ -156,6 +158,14 @@ export declare class OrgCatalogController {
         installs: PluginInstallView[];
     }>;
     uninstall(principal: Principal, org: OrgContext, installId: string): Promise<UninstallReport>;
+    /**
+     * A member asks the org admins to allow hosts in the org's sandbox egress (from a blocked
+     * command's card) -> 201 `{ request }` (an identical pending request of the member is returned).
+     * Web sessions only: a personal token, a service token or an agent never files one.
+     */
+    networkRequest(principal: Principal, org: OrgContext, body: z.infer<typeof NetworkRequestBody>): Promise<{
+        request: CatalogRequestView;
+    }>;
     decide(principal: Principal, org: OrgContext, id: string, body: z.infer<typeof DecideBody>): Promise<{
         request: CatalogRequestView;
     }>;

package/dist/catalog/org-catalog.controller.js

@@ -11,12 +11,12 @@ import { Controller, Delete, Get, HttpCode, Inject, Param, Post, Put, Res } from
 import { z } from "zod";
 import { PluginGuides } from "../extensions/plugin-guides.js";
 import { orgIconScope, PluginIcons } from "../extensions/plugin-icons.js";
-import { CurrentPrincipal, patTokenId, requireUser, SuperAdmin, } from "../identity/principal.js";
+import { CurrentPrincipal, patTokenId, requireUser, SessionOnly, SuperAdmin, } from "../identity/principal.js";
 import { createZodDto } from "../infra/validation/create-zod-dto.js";
 import { ZBody, ZQuery } from "../infra/validation/zod-params.js";
 import { CurrentOrg, OrgAction } from "../orgs/org.guard.js";
 import { roleAtLeast } from "../orgs/roles.js";
-import { CatalogConnectorInput, CatalogGuideQuery, CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, OrgPluginInstallBody, OrgPluginSwitchBody, } from "./org-catalog.schemas.js";
+import { CatalogConnectorInput, CatalogGuideQuery, CatalogMarketplaceRequestBody, CatalogRequestBody, CatalogRequestsListQuery, NetworkRequestBody, OrgPluginInstallBody, OrgPluginSwitchBody, } from "./org-catalog.schemas.js";
 import { OrgCatalogService } from "./org-catalog.service.js";
 import { PluginInstaller, } from "./plugin-install.js";
 import { CatalogRequestsService } from "./requests.service.js";
@@ -67,6 +67,8 @@ class OrgTemplateConnectorBody extends createZodDto(TemplateConnectorBody, "OrgT
 }
 class CatalogRequestBodyDto extends createZodDto(CatalogRequestBody, "CatalogRequestBody") {
 }
+class NetworkRequestBodyDto extends createZodDto(NetworkRequestBody, "NetworkRequestBody") {
+}
 class CatalogMarketplaceRequestBodyDto extends createZodDto(CatalogMarketplaceRequestBody, "CatalogMarketplaceRequestBody") {
 }
 /**
@@ -75,6 +77,8 @@ class CatalogMarketplaceRequestBodyDto extends createZodDto(CatalogMarketplaceRe
  * - `POST catalog/:itemId/requests` (`catalog.request`; `access` needs an org admin): requests
  *   under plugin scope (spec §5.1), `enable` into the org admins' inbox, `access` to the super
  *   admin; `POST marketplace-requests` (org admins): an `import` request for a marketplace entry;
+ * - `POST catalog-requests/network` (`catalog.request`, web sessions only): a member asks the org
+ *   admins to allow hosts in the org's sandbox network (network ask-to-allow spec §5.3);
  * - `PUT catalog/:itemId/switch` (scope phase 1): `{ enabled: true, inputs? }` installs -> 200 `{ item }`;
  *   `{ enabled: false, confirm? }` -> 200 `{ preview, confirm }`, then with the hash 200 `{ item }`;
  * - `POST catalog/:itemId/install` (an alias of switching on, no longer creates requests): the route only requires `catalog.read`; the service re-checks
@@ -87,8 +91,8 @@ class CatalogMarketplaceRequestBodyDto extends createZodDto(CatalogMarketplaceRe
  *   admin (`PUT /admin/catalog/items/:id/update`, ruling F2);
  * - `POST connector-templates/:templateId/connectors` (`connectors.manage`): one more connector
  *   from a platform connector template on in the org (ruling P4-T6-8);
- * - `POST catalog-requests/:id/decide` (`catalog.decide`, org admins; `enable` and
- *   `connector_setup` requests, `{ approve, reason? }`; a `connector_setup` request is only
+ * - `POST catalog-requests/:id/decide` (`catalog.decide`, org admins; `enable`,
+ *   `network_allowlist` and `connector_setup` requests, `{ approve, reason? }`; a `connector_setup` request is only
  *   rejected here, ruling P4-T6-6), `POST catalog-requests/:id/dismiss` (the requester, a decided
  *   request).
  */
@@ -216,6 +220,15 @@ let OrgCatalogController = class OrgCatalogController {
         const tokenId = patTokenId(p);
         return this.catalog.uninstall(org.orgId, p.account.id, installId, tokenId);
     }
+    /**
+     * A member asks the org admins to allow hosts in the org's sandbox egress (from a blocked
+     * command's card) -> 201 `{ request }` (an identical pending request of the member is returned).
+     * Web sessions only: a personal token, a service token or an agent never files one.
+     */
+    async networkRequest(principal, org, body) {
+        const p = requireUser(principal);
+        return { request: await this.requests.requestNetwork(org.orgId, p.account.id, body) };
+    }
     async decide(principal, org, id, body) {
         const p = requireUser(principal);
         const tokenId = patTokenId(p);
@@ -319,6 +332,15 @@ __decorate([
     __param(1, CurrentOrg()),
     __param(2, Param("installId"))
 ], OrgCatalogController.prototype, "uninstall", null);
+__decorate([
+    Post("catalog-requests/network"),
+    HttpCode(201),
+    SessionOnly(),
+    OrgAction("catalog.request"),
+    __param(0, CurrentPrincipal()),
+    __param(1, CurrentOrg()),
+    __param(2, ZBody(NetworkRequestBodyDto))
+], OrgCatalogController.prototype, "networkRequest", null);
 __decorate([
     Post("catalog-requests/:id/decide"),
     HttpCode(200),

package/dist/catalog/org-catalog.schemas.d.ts

@@ -7,6 +7,19 @@ export declare const CatalogRequestBody: z.ZodObject<{
     }>;
     note: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
+/** The most hosts one network request asks for. */
+export declare const NETWORK_REQUEST_HOSTS_MAX = 20;
+/**
+ * A member asks the org admins to allow hosts in the org's sandbox egress (network ask-to-allow
+ * spec §5.3): exact hosts (no wildcard), lowercased, each passing `validateAllowHost`; the
+ * conversation and agent the blocked command ran in, for the admins' context.
+ */
+export declare const NetworkRequestBody: z.ZodObject<{
+    hosts: z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    note: z.ZodOptional<z.ZodString>;
+    conversationId: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
 /** An org admin's request for a marketplace entry not in the catalog yet. */
 export declare const CatalogMarketplaceRequestBody: z.ZodObject<{
     marketplaceId: z.ZodString;

package/dist/catalog/org-catalog.schemas.js

@@ -1,3 +1,4 @@
+import { validateAllowHost } from "@capybara-hq/plugin-sdk";
 import { z } from "zod";
 import { CredentialValue } from "../tools/connectors.schemas.js";
 export const CatalogRequestBody = z
@@ -6,6 +7,39 @@ export const CatalogRequestBody = z
     note: z.string().max(1000).optional(),
 })
     .strict();
+/** The most hosts one network request asks for. */
+export const NETWORK_REQUEST_HOSTS_MAX = 20;
+/**
+ * A member asks the org admins to allow hosts in the org's sandbox egress (network ask-to-allow
+ * spec §5.3): exact hosts (no wildcard), lowercased, each passing `validateAllowHost`; the
+ * conversation and agent the blocked command ran in, for the admins' context.
+ */
+export const NetworkRequestBody = z
+    .object({
+    hosts: z
+        .array(z
+        .string()
+        .max(253)
+        .transform((h) => h.trim().toLowerCase())
+        .superRefine((h, ctx) => {
+        if (h.startsWith("*.")) {
+            ctx.addIssue({
+                code: "custom",
+                message: `${h}: ask for an exact host, not a wildcard`,
+            });
+            return;
+        }
+        for (const message of validateAllowHost(h)) {
+            ctx.addIssue({ code: "custom", message: `${h}: ${message}` });
+        }
+    }))
+        .min(1)
+        .max(NETWORK_REQUEST_HOSTS_MAX),
+    note: z.string().max(500).optional(),
+    conversationId: z.string().min(1).max(100).optional(),
+    agentId: z.string().min(1).max(100).optional(),
+})
+    .strict();
 /** An org admin's request for a marketplace entry not in the catalog yet. */
 export const CatalogMarketplaceRequestBody = z
     .object({

package/dist/catalog/org-plugin-uploads.controller.js

@@ -78,7 +78,6 @@ let OrgPluginUploadsController = class OrgPluginUploadsController {
         return this.uploads.confirm(actor.account.id, org.orgId, params.stagingId, {
             reviewHash: body.reviewHash,
             ...(body.shareable !== undefined && { shareable: body.shareable }),
-            ...(body.pinnedSuggestions !== undefined && { pinnedSuggestions: body.pinnedSuggestions }),
         }, actorOpts(actor));
     }
 };

package/dist/catalog/org-plugin-uploads.d.ts

@@ -64,7 +64,6 @@ export declare class OrgPluginUploads {
     confirm(actor: string, orgId: string, stagingId: string, input: {
         reviewHash: string;
         shareable?: boolean;
-        pinnedSuggestions?: string[];
     }, opts?: ActorOpts): Promise<OrgUploadResult>;
     /** The review with the update preview of a new version and the combined hash (P3-12). */
     private withUpdate;

package/dist/catalog/org-plugin-uploads.js

@@ -70,9 +70,6 @@ let OrgPluginUploads = class OrgPluginUploads {
             await this.scope.enqueueSync(r.item.id);
             return { item: r.item, outcome: r.firstVersion ? "installed" : "updated" };
         }
-        if (input.pinnedSuggestions !== undefined) {
-            throw new ApiError("validation_failed", "pinnedSuggestions: a new version keeps the plugin's own pinned suggestions", [{ path: "pinnedSuggestions", message: "not allowed for a new version" }]);
-        }
         // The one hash covers the review and the update (P3-12): both recomputed now
         const preview = await this.updater.previewForOwner(orgId, st.itemId, st.version, st.target);
         if (input.reviewHash !== ownerUpdateHash(st.reviewHash, preview.diffHash)) {

package/dist/catalog/org-plugin-uploads.schemas.d.ts

@@ -9,7 +9,6 @@ export declare const OrgOwnedPluginParams: z.ZodObject<{
 export declare const OrgUploadConfirmBody: z.ZodObject<{
     reviewHash: z.ZodString;
     shareable: z.ZodOptional<z.ZodBoolean>;
-    pinnedSuggestions: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 export declare const OrgOwnedShareableBody: z.ZodObject<{
     shareable: z.ZodBoolean;

package/dist/catalog/org-plugin-uploads.schemas.js

@@ -6,8 +6,6 @@ export const OrgUploadConfirmBody = z
     reviewHash: z.string().min(1).max(128),
     /** The org shares the new item with other orgs (default false, P3-16). */
     shareable: z.boolean().optional(),
-    /** Skill names suggested as pinned (spec §9.1); omitted keeps the plugin's flags. */
-    pinnedSuggestions: z.array(z.string().min(1).max(64)).max(50).optional(),
 })
     .strict();
 export const OrgOwnedShareableBody = z.object({ shareable: z.boolean() }).strict();

package/dist/catalog/platform-components.d.ts

@@ -68,7 +68,6 @@ interface SkillStep {
     prefix: string;
     files: SkillPackageFile[];
     manifest: SkillManifest;
-    suggestPinned: boolean;
 }
 interface TemplateStep {
     name: string;

package/dist/catalog/platform-components.js

@@ -242,7 +242,7 @@ let PlatformComponents = class PlatformComponents {
             throw versionStale();
         const cur = await t
             .selectFrom("platform_skill_versions")
-            .select(["source_format", "suggest_pinned"])
+            .select(["source_format"])
             .where("skill_id", "=", v.platformId)
             .where("version", "=", row.current_version)
             .executeTakeFirstOrThrow();
@@ -260,7 +260,6 @@ let PlatformComponents = class PlatformComponents {
             object_prefix: v.prefix,
             catalog_version: null,
             source_format: cur.source_format,
-            suggest_pinned: cur.suggest_pinned,
             created_by: actorAccountId,
         })
             .execute();
@@ -318,7 +317,7 @@ let PlatformComponents = class PlatformComponents {
             throw ownedByOrg("skill", live.name);
         const cur = await t
             .selectFrom("platform_skill_versions")
-            .select(["source_format", "suggest_pinned"])
+            .select(["source_format"])
             .where("skill_id", "=", live.id)
             .where("version", "=", live.current_version)
             .executeTakeFirstOrThrow();
@@ -337,7 +336,6 @@ let PlatformComponents = class PlatformComponents {
             object_prefix: prefix,
             catalog_version: null,
             source_format: cur.source_format,
-            suggest_pinned: cur.suggest_pinned,
             updated_on_own: true,
             created_by: actor.accountId,
         })
@@ -374,7 +372,7 @@ let PlatformComponents = class PlatformComponents {
             throw ownedByOrg("agent template", live.name);
         const cur = await t
             .selectFrom("platform_agent_template_versions")
-            .select(["source_format", "suggest_pinned"])
+            .select(["source_format"])
             .where("template_id", "=", live.id)
             .where("version", "=", live.current_version)
             .executeTakeFirstOrThrow();
@@ -392,7 +390,6 @@ let PlatformComponents = class PlatformComponents {
             object_prefix: prefix,
             catalog_version: null,
             source_format: cur.source_format,
-            suggest_pinned: cur.suggest_pinned,
             updated_on_own: true,
             created_by: actor.accountId,
         })
@@ -482,7 +479,6 @@ let PlatformComponents = class PlatformComponents {
                 prefix: syncVersionPrefix(platformSkillPrefix(id, to), version),
                 files,
                 manifest: skillManifest(pkg),
-                suggestPinned: s.pinned === true,
             });
         }
         const agents = await readCatalogAgentTemplates(this.files, v);
@@ -661,7 +657,6 @@ let PlatformComponents = class PlatformComponents {
                 object_prefix: s.prefix,
                 catalog_version: plan.version,
                 source_format: plan.sourceFormat,
-                suggest_pinned: s.suggestPinned,
             })
                 .execute();
             out.skills.push({

package/dist/catalog/plugin-import.d.ts

@@ -237,8 +237,6 @@ export interface PluginReview {
         body: string;
         path: string;
         files: number;
-        /** The plugin suggests pinning the skill (plugin.json `pinned`; changed at confirm). */
-        suggestPinned: boolean;
     }[];
     connectorTemplates: PluginReviewTemplate[];
     /**
@@ -553,12 +551,6 @@ export declare class PluginImport {
         scope?: PluginScope;
         /** The orgs of a `named` scope. */
         orgs?: string[];
-        /**
-         * The skills (by name, each in the review) suggested as pinned when an agent selects them
-         * (spec §9.1); replaces the plugin's `pinned` flags in the stored manifest. Omitted keeps
-         * them. An admin decision like the scope, so not part of `reviewHash`.
-         */
-        pinnedSuggestions?: string[];
         /** An org upload's new item: shared with other orgs by its owner (default false, P3-16). */
         shareable?: boolean;
     }, opts?: ActorOpts & {

package/dist/catalog/plugin-import.js

@@ -54,7 +54,7 @@ import { CatalogItemLock } from "./locks.js";
 import { assertNameFree, assertPackageFree, assertShareable, packageOwner, releaseExtensionClaim, shareGate, usableBy, } from "./ownership.js";
 import { PlatformComponents } from "./platform-components.js";
 import { PLATFORM_MIGRATION_JOB } from "./platform-migration.js";
-import { PluginPackageError, packagePath, readPluginFiles, readPluginPackage, themeApiError, } from "./plugin-package.js";
+import { PluginPackageError, readPluginFiles, readPluginPackage, themeApiError, } from "./plugin-package.js";
 import { hasImportRequests, importRequestOf, resolveImportRequests } from "./request-rules.js";
 import { assertNameNotReserved } from "./reserved-names.js";
 import { addScopeOrg } from "./scope-orgs.js";
@@ -725,7 +725,7 @@ let PluginImport = class PluginImport {
         const src = row.source;
         if (input.reviewHash !== review.reviewHash)
             throw reviewStale(review);
-        const manifest = withPinned(staged.manifest, review, input.pinnedSuggestions);
+        const manifest = staged.manifest;
         const reviewed = review.extension;
         // Read the stored package outside the transaction (unless it was already installed as is, or
         // an org upload, which approves nothing)
@@ -938,7 +938,6 @@ let PluginImport = class PluginImport {
                 stagingId,
                 scope: actual.scope,
                 ...(actual.scope === "named" && { orgs: actual.orgs }),
-                suggestedPinned: pinnedNames(manifest, review),
                 ...(now && { extension: { name: now.name, version: now.version, action: now.action } }),
             },
         });
@@ -1416,7 +1415,6 @@ let PluginImport = class PluginImport {
         const m = pkg.manifest;
         const notLoaded = [];
         const templatePaths = new Map();
-        const pinned = new Map((m.skills ?? []).map((s) => [packagePath(s.path), s.pinned === true]));
         const problems = [];
         const stored = new Map();
         const keep = (path) => {
@@ -1449,7 +1447,6 @@ let PluginImport = class PluginImport {
                     body: "errors" in md ? "" : md.body,
                     path: `./${s.dir}`,
                     files: files.length,
-                    suggestPinned: pinned.get(s.dir) === true,
                 });
                 for (const f of s.files)
                     keepObject(`${s.dir}/${f}`);
@@ -1714,17 +1711,13 @@ PluginImport = __decorate([
 export { PluginImport };
 /**
  * plugin.json as stored on the version: skills and connector templates listed explicitly (what was
- * scanned when the manifest omitted them), `pinned` kept from the listing.
+ * scanned when the manifest omitted them).
  */
 function normalizedManifest(pkg) {
-    const pinned = new Map((pkg.manifest.skills ?? []).map((s) => [packagePath(s.path), s.pinned]));
     const { agents: _, themes: __, ...manifest } = pkg.manifest;
     return {
         ...manifest,
-        skills: pkg.skills.map((s) => {
-            const p = pinned.get(s.dir);
-            return { path: `./${s.dir}`, ...(p !== undefined && { pinned: p }) };
-        }),
+        skills: pkg.skills.map((s) => ({ path: `./${s.dir}` })),
         connectorTemplates: pkg.connectorTemplates.map((t) => ({ path: `./${t.path}` })),
         // listed only when there are any, so the stored manifests of other plugins stay as they were
         ...(pkg.agentTemplates.length > 0 && {
@@ -1860,30 +1853,6 @@ function licenseOf(files) {
     }
     return { truncated: false };
 }
-/**
- * The manifest with the confirm's suggested pinning: `names` (each a skill of the review, else
- * `validation_failed`) marks those skills `pinned: true` and clears the flag on the others;
- * undefined keeps the plugin's flags.
- */
-function withPinned(m, review, names) {
-    if (names === undefined)
-        return m;
-    const byName = new Map(review.skills.map((s) => [s.name, s.path]));
-    const unknown = names.filter((n) => !byName.has(n));
-    if (unknown.length > 0) {
-        throw new ApiError("validation_failed", `pinnedSuggestions: ${unknown.map((n) => JSON.stringify(n)).join(", ")} ${unknown.length === 1 ? "is not a skill" : "are not skills"} of this plugin`);
-    }
-    const paths = new Set(names.map((n) => byName.get(n)));
-    return {
-        ...m,
-        skills: (m.skills ?? []).map(({ pinned: _, ...s }) => paths.has(s.path) ? { ...s, pinned: true } : s),
-    };
-}
-/** Names of the skills the stored manifest suggests pinning (for the audit). */
-function pinnedNames(m, review) {
-    const byPath = new Map(review.skills.map((s) => [s.path, s.name]));
-    return (m.skills ?? []).filter((s) => s.pinned === true).map((s) => byPath.get(s.path) ?? s.path);
-}
 /**
  * The staging rows a route may see (P3-8): the platform's (`org_id` null) without an owner, else
  * the owner org's.

package/dist/catalog/plugin-install.d.ts

@@ -432,8 +432,8 @@ export declare class PluginInstaller {
     /**
      * Uninstall (the plugin's component actions, see `requiredActions`, re-checked under the org row
      * lock, one transaction). Removes only components with created=true:
-     * - a skill is kept when an agent selects it (used_by_agents) or another plugin install in this
-     *   org uses it too (used_by_other_install);
+     * - a skill is kept when an agent names it (an inline sub-agent template's `skills`;
+     *   used_by_agents) or another plugin install in this org uses it too (used_by_other_install);
      * - a connector is kept when an agent references it (used_by_agents);
      * - an extension is kept when another plugin install uses it too (used_by_other_install), a
      *   connector still uses a connector it provides (used_by_connectors), or another enabled

package/dist/catalog/plugin-install.js

@@ -1067,8 +1067,8 @@ let PluginInstaller = class PluginInstaller {
     /**
      * Uninstall (the plugin's component actions, see `requiredActions`, re-checked under the org row
      * lock, one transaction). Removes only components with created=true:
-     * - a skill is kept when an agent selects it (used_by_agents) or another plugin install in this
-     *   org uses it too (used_by_other_install);
+     * - a skill is kept when an agent names it (an inline sub-agent template's `skills`;
+     *   used_by_agents) or another plugin install in this org uses it too (used_by_other_install);
      * - a connector is kept when an agent references it (used_by_agents);
      * - an extension is kept when another plugin install uses it too (used_by_other_install), a
      *   connector still uses a connector it provides (used_by_connectors), or another enabled

package/dist/catalog/plugin-package.d.ts

@@ -121,6 +121,13 @@ export declare function contentDigest(files: ReadonlyMap<string, Uint8Array>): s
  * zero are not valid semver).
  */
 export declare const archiveFallbackVersion: (digest: string) => string;
+/**
+ * A `plugin.json` with the fields the SDK no longer has dropped: `skills[].pinned` (the pinned
+ * suggestion, gone with pinning; skills default-on spec §8). Stored packages are history and still
+ * carry it, so every reader of a package passes the manifest through here before parsing. Anything
+ * else (not JSON, not an object) is returned as is for the parser to report.
+ */
+export declare function withoutRemovedManifestFields(text: string): unknown;
 /** Largest icon (plugin or connector template) in bytes. */
 export declare const PLUGIN_ICON_MAX_BYTES: number;
 /**

package/dist/catalog/plugin-package.js

@@ -52,6 +52,32 @@ export function contentDigest(files) {
  */
 export const archiveFallbackVersion = (digest) => `0.0.0-sha256.h${digest.slice(0, 12)}`;
 const isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+/**
+ * A `plugin.json` with the fields the SDK no longer has dropped: `skills[].pinned` (the pinned
+ * suggestion, gone with pinning; skills default-on spec §8). Stored packages are history and still
+ * carry it, so every reader of a package passes the manifest through here before parsing. Anything
+ * else (not JSON, not an object) is returned as is for the parser to report.
+ */
+export function withoutRemovedManifestFields(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+    if (!isObj(raw) || !Array.isArray(raw.skills))
+        return raw;
+    return {
+        ...raw,
+        skills: raw.skills.map((s) => {
+            if (!isObj(s) || !("pinned" in s))
+                return s;
+            const { pinned: _, ...rest } = s;
+            return rest;
+        }),
+    };
+}
 const decode = (data) => {
     try {
         return new TextDecoder("utf-8", { fatal: true }).decode(data);
@@ -227,7 +253,7 @@ export function readPluginFiles(files, opts) {
         const undeclared = clientUndeclared(text);
         if (undeclared !== undefined)
             throw new PluginPackageError("client.undeclared", [undeclared]);
-        const parsed = parsePluginManifest(text);
+        const parsed = parsePluginManifest(withoutRemovedManifestFields(text));
         if ("errors" in parsed) {
             return invalid(parsed.errors.map((e) => `${PLUGIN_MANIFEST_FILE}: ${e}`));
         }

package/dist/catalog/plugin-upgrade.d.ts

@@ -179,12 +179,11 @@ export type UpdateTarget = VersionRow;
  *   permissions wait for the admin's approval as for any extension upgrade), then one transaction
  *   under the item name's lock that recomputes the diff (`plugin.upgrade_stale` on a difference)
  *   and writes the platform versions (`PlatformComponents.syncFromVersion`, which records
- *   `platform_synced_version`), the pinned suggestions of unchanged skills, the removals (a
- *   component no agent uses is soft-deleted, so unpinned linked copies go with it; pinned copies
- *   keep their own version; a removed connector template leaves its connectors as the orgs' own),
- *   clears the pins of linked copies, fans changed templates out to every connector made from them
- *   (`applyTemplateIn`, under each org's row lock, credentials cleared only for a changed
- *   credential shape), moves every org install to the version and audits
+ *   `platform_synced_version`), the removals (a component no agent uses is soft-deleted, so
+ *   unpinned linked copies go with it; pinned copies keep their own version; a removed connector
+ *   template leaves its connectors as the orgs' own), clears the pins of linked copies, fans
+ *   changed templates out to every connector made from them (`applyTemplateIn`, under each org's
+ *   row lock, credentials cleared only for a changed credential shape), moves every org install to the version and audits
  *   `plugin.platform_updated`; the scope sync of the item and its dependencies is enqueued after
  *   the commit (orgs get new dependencies by rule 9). A failure rolls the transaction back and
  *   puts the extension back where it was (audit `plugin.platform_update_failed`, 502

package/dist/catalog/plugin-upgrade.js

@@ -106,12 +106,11 @@ const filesDigest = (row) => skillFilesDigest(row.files.map((f) => ({ path: f.pa
  *   permissions wait for the admin's approval as for any extension upgrade), then one transaction
  *   under the item name's lock that recomputes the diff (`plugin.upgrade_stale` on a difference)
  *   and writes the platform versions (`PlatformComponents.syncFromVersion`, which records
- *   `platform_synced_version`), the pinned suggestions of unchanged skills, the removals (a
- *   component no agent uses is soft-deleted, so unpinned linked copies go with it; pinned copies
- *   keep their own version; a removed connector template leaves its connectors as the orgs' own),
- *   clears the pins of linked copies, fans changed templates out to every connector made from them
- *   (`applyTemplateIn`, under each org's row lock, credentials cleared only for a changed
- *   credential shape), moves every org install to the version and audits
+ *   `platform_synced_version`), the removals (a component no agent uses is soft-deleted, so
+ *   unpinned linked copies go with it; pinned copies keep their own version; a removed connector
+ *   template leaves its connectors as the orgs' own), clears the pins of linked copies, fans
+ *   changed templates out to every connector made from them (`applyTemplateIn`, under each org's
+ *   row lock, credentials cleared only for a changed credential shape), moves every org install to the version and audits
  *   `plugin.platform_updated`; the scope sync of the item and its dependencies is enqueued after
  *   the commit (orgs get new dependencies by rule 9). A failure rolls the transaction back and
  *   puts the extension back where it was (audit `plugin.platform_update_failed`, 502
@@ -523,16 +522,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
                 throw stale();
             throw e;
         }
-        for (const [id, pinned] of diff.suggest) {
-            await t
-                .updateTable("platform_skill_versions as v")
-                .set({ suggest_pinned: pinned })
-                .from("platform_skills as s")
-                .whereRef("s.id", "=", "v.skill_id")
-                .whereRef("s.current_version", "=", "v.version")
-                .where("s.id", "=", id)
-                .execute();
-        }
         // Removals (spec §7.3): kept while agents use it; otherwise soft-deleted
         const now = sql `now()`;
         for (const c of diff.components) {
@@ -826,7 +815,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
         // The platform's components of the plugin and the target's
         const live = await this.liveComponents(itemId);
         const components = [];
-        const suggest = new Map();
         const direction = (fromVersion) => fromVersion === null || compareVersions(to.version, fromVersion) >= 0
             ? "upgrade"
             : "downgrade";
@@ -847,7 +835,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
             return {
                 name: n,
                 digest: dirDigest(to, packagePath(entry?.path)),
-                pinned: entry?.pinned === true,
             };
         });
         for (const s of toSkills) {
@@ -857,8 +844,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
                 continue;
             }
             const same = skillFilesDigest(l.manifest.files) === s.digest;
-            if (same && l.suggestPinned !== s.pinned)
-                suggest.set(l.id, s.pinned);
             components.push({
                 kind: "skill",
                 id: l.id,
@@ -1248,7 +1233,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
             connectors,
             connectorOrgs,
             ...(themes !== undefined && { themes }),
-            suggest,
             contents,
             dependencies,
             diffHash,
@@ -1374,7 +1358,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
             "v.manifest",
             "v.catalog_version",
             "v.updated_on_own",
-            "v.suggest_pinned",
         ])
             .where("p.catalog_item_id", "=", itemId)
             .where("p.deleted_at", "is", null)
@@ -1388,7 +1371,6 @@ let PlatformPluginUpdater = class PlatformPluginUpdater {
             catalogVersion: r.catalog_version,
             updatedOnOwn: r.updated_on_own,
             ownScope: r.scope_mode === "own",
-            suggestPinned: r.suggest_pinned,
         }));
         const agentTemplates = (await db
             .selectFrom("platform_agent_templates as p")