@ryuhq/sdk 0.0.5 → 0.1.2

package/dist/agent.cjs

@@ -152,7 +152,10 @@ function dataUrlToBytes(dataUrl) {
     }
     return { bytes, mediaType };
   }
-  return { bytes: new TextEncoder().encode(decodeURIComponent(payload)), mediaType };
+  return {
+    bytes: new TextEncoder().encode(decodeURIComponent(payload)),
+    mediaType
+  };
 }
 function bytesToDataUrl(bytes, mediaType) {
   let binary = "";

package/dist/agent.d.cts

@@ -1,3 +1,3 @@
-export { A as Agent, b as AgentConfig, c as AgentEvent, U as AgentEventAuthRequired, V as AgentEventError, W as AgentEventResult, X as AgentEventText, Y as AgentEventToolCall, Z as AgentEventToolResult, d as AgentTool, _ as AssistantMessage, $ as Elicitation, E as Endpoint, h as GenerateResult, a0 as LoopConfig, a1 as LoopMessage, a2 as ModelCallOptions, a3 as ModelCallResult, a4 as ModelUsage, Q as QueryInput, n as QueryOptions, t as RemoteToolRef, a5 as RyuToolOptions, a6 as ToolCall, a7 as ToolExecContext, a8 as ToolExecResult, a9 as ToolFunctionDef, aa as callModelWithTools, y as createAgent, ab as detectElicitation, ac as executeTool, N as query, ad as resolveToolDefs, ae as runAgentLoop, O as ryuTool } from './index-CEbS1SlS.cjs';
+export { A as Agent, b as AgentConfig, c as AgentEvent, U as AgentEventAuthRequired, V as AgentEventError, W as AgentEventResult, X as AgentEventText, Y as AgentEventToolCall, Z as AgentEventToolResult, d as AgentTool, _ as AssistantMessage, $ as Elicitation, E as Endpoint, h as GenerateResult, a0 as LoopConfig, a1 as LoopMessage, a2 as ModelCallOptions, a3 as ModelCallResult, a4 as ModelUsage, Q as QueryInput, n as QueryOptions, t as RemoteToolRef, a5 as RyuToolOptions, a6 as ToolCall, a7 as ToolExecContext, a8 as ToolExecResult, a9 as ToolFunctionDef, aa as callModelWithTools, y as createAgent, ab as detectElicitation, ac as executeTool, N as query, ad as resolveToolDefs, ae as runAgentLoop, O as ryuTool } from './index-BvAB5eMk.cjs';
 import './manifest.cjs';
 import 'zod';

package/dist/agent.d.ts

@@ -1,3 +1,3 @@
-export { A as Agent, b as AgentConfig, c as AgentEvent, U as AgentEventAuthRequired, V as AgentEventError, W as AgentEventResult, X as AgentEventText, Y as AgentEventToolCall, Z as AgentEventToolResult, d as AgentTool, _ as AssistantMessage, $ as Elicitation, E as Endpoint, h as GenerateResult, a0 as LoopConfig, a1 as LoopMessage, a2 as ModelCallOptions, a3 as ModelCallResult, a4 as ModelUsage, Q as QueryInput, n as QueryOptions, t as RemoteToolRef, a5 as RyuToolOptions, a6 as ToolCall, a7 as ToolExecContext, a8 as ToolExecResult, a9 as ToolFunctionDef, aa as callModelWithTools, y as createAgent, ab as detectElicitation, ac as executeTool, N as query, ad as resolveToolDefs, ae as runAgentLoop, O as ryuTool } from './index-DAxq7Y0R.js';
+export { A as Agent, b as AgentConfig, c as AgentEvent, U as AgentEventAuthRequired, V as AgentEventError, W as AgentEventResult, X as AgentEventText, Y as AgentEventToolCall, Z as AgentEventToolResult, d as AgentTool, _ as AssistantMessage, $ as Elicitation, E as Endpoint, h as GenerateResult, a0 as LoopConfig, a1 as LoopMessage, a2 as ModelCallOptions, a3 as ModelCallResult, a4 as ModelUsage, Q as QueryInput, n as QueryOptions, t as RemoteToolRef, a5 as RyuToolOptions, a6 as ToolCall, a7 as ToolExecContext, a8 as ToolExecResult, a9 as ToolFunctionDef, aa as callModelWithTools, y as createAgent, ab as detectElicitation, ac as executeTool, N as query, ad as resolveToolDefs, ae as runAgentLoop, O as ryuTool } from './index-B6SkaAjJ.js';
 import './manifest.js';
 import 'zod';

package/dist/agent.js

@@ -8,7 +8,7 @@ import {
   resolveToolDefs,
   runAgentLoop,
   ryuTool
-} from "./chunk-KPKMMGVC.js";
+} from "./chunk-MTUBUPIV.js";
 import "./chunk-ODFEUVPW.js";
 export {
   Agent,

package/dist/{chunk-KPKMMGVC.js → chunk-MTUBUPIV.js}

@@ -24,7 +24,10 @@ function dataUrlToBytes(dataUrl) {
     }
     return { bytes, mediaType };
   }
-  return { bytes: new TextEncoder().encode(decodeURIComponent(payload)), mediaType };
+  return {
+    bytes: new TextEncoder().encode(decodeURIComponent(payload)),
+    mediaType
+  };
 }
 function bytesToDataUrl(bytes, mediaType) {
   let binary = "";

package/dist/{chunk-GXHL5CO7.js → chunk-XTUK5I6I.js}

@@ -76,7 +76,47 @@ var TurnHookContributionSchema = z.object({
   /** Turn boundary this fires on. Today only `"post_assistant_turn"`. */
   on: z.string().min(1).default("post_assistant_turn"),
   /** The JS hook body executed in the sandbox (returns a directive). */
-  code: z.string().min(1)
+  code: z.string().min(1).optional(),
+  /** Path to the hook body, relative to the plugin root (`hooks/<name>.js`). */
+  code_file: z.string().min(1).optional(),
+  /**
+   * Cheap pre-gate mirroring Core's `HookMatch` (serde name `match` on
+   * `TurnHookContribution.run_when`). MUST round-trip through this schema:
+   * `ryu pack`/`publish` persist `safeParse(...).data`, so a field missing here
+   * is silently STRIPPED before signing — a tool-gated `pre_tool_use` hook
+   * (e.g. `tools: ["bash*"]`) would lose its gate and run on EVERY tool call.
+   */
+  match: z.object({
+    /** Run only if the request set this composer flag true. */
+    flag: z.string().optional(),
+    /** Run if the last user message starts with any of these prefixes. */
+    commands: z.array(z.string()).default([]),
+    /** Run if the plugin has stored state for this conversation. */
+    stateful: z.boolean().default(false),
+    /** Run if `ctx.tool_name` matches any of these `*`-wildcard patterns. */
+    tools: z.array(z.string()).default([])
+  }).optional()
+}).refine((h) => Boolean(h.code) !== Boolean(h.code_file), {
+  message: "a turn hook must declare exactly one of 'code' (inline body) or 'code_file' (path to hooks/<name>.js)",
+  path: ["code_file"]
+});
+var HookEventContributionSchema = z.object({
+  /** Fully-qualified event id: `<plugin id>#<event name>`, e.g. `@acme/meetings#meeting.ended`. */
+  id: z.string().min(1),
+  /** Human-readable title for the event picker. */
+  title: z.string().min(1),
+  /** What the event means and when it fires. */
+  description: z.string().optional(),
+  /** Example of the `ctx.event` payload. Documentation, not a validated schema. */
+  payload_example: z.record(z.string(), z.unknown()).optional()
+});
+var PiExtensionContributionSchema = z.object({
+  /** Stable id for this extension within the plugin (`[a-z0-9][a-z0-9._-]*`). */
+  id: z.string().min(1),
+  /** Path to the source, relative to the plugin root: `pi-extensions/<name>.ts`. */
+  file: z.string().min(1),
+  /** Optional one-liner describing what the extension adds to the agent. */
+  description: z.string().optional()
 });
 var DEFAULT_WIDGET_MIME = "text/html+skybridge";
 var DEFAULT_WIDGET_DISPLAY_MODE = "inline";
@@ -114,6 +154,11 @@ var ToolAppConfigSchema = z.object({
 });
 var ContributesSchema = z.object({
   turn_hooks: z.array(TurnHookContributionSchema).default([]),
+  /** App events this plugin EMITS — the provider half of the hook system, whose
+   *  consumer half is `turn_hooks`. Mirrors the Rust `Contributes.hook_events`;
+   *  omitting it here would have `ryu pack` strip every declared event before
+   *  signing, leaving an app that emits events nothing is allowed to subscribe to. */
+  hook_events: z.array(HookEventContributionSchema).default([]),
   composer_controls: z.array(z.record(z.string(), z.unknown())).default([]),
   settings_tabs: z.array(z.record(z.string(), z.unknown())).default([]),
   slash_commands: z.array(z.record(z.string(), z.unknown())).default([]),
@@ -121,7 +166,49 @@ var ContributesSchema = z.object({
    *  `ui://widget/<slug>.html` template. Mirrors the Rust-side
    *  `Contributes.widgets` field, without which the CLI's zod parse would strip
    *  every widget an app authored here declares. */
-  widgets: z.array(WidgetContributionSchema).default([])
+  widgets: z.array(WidgetContributionSchema).default([]),
+  /** App-registered sidebar sections (header + live list) and buttons (single nav
+   *  rows). Loosely typed here — the shell owns the spec vocabulary — matching how
+   *  `composer_controls`/`settings_tabs` are declared. Mirrors the Rust-side
+   *  `Contributes.sidebar_sections` / `Contributes.sidebar_buttons`. */
+  sidebar_sections: z.array(z.record(z.string(), z.unknown())).default([]),
+  sidebar_buttons: z.array(z.record(z.string(), z.unknown())).default([]),
+  /** App-registered workspace dock panels (a tab in the desktop's bottom/right
+   *  dock). Loosely typed for the same reason as the surfaces above — the shell
+   *  owns the `panel` render-mode vocabulary and the `spec` payload. Mirrors the
+   *  Rust-side `Contributes.dock_panels`; without it the CLI's zod parse would
+   *  strip the dock panel an app declares here. */
+  dock_panels: z.array(z.record(z.string(), z.unknown())).default([]),
+  /** Deletable data categories the app owns — one "Delete all X" row in Settings
+   *  → Danger Zone. Mirrors the Rust-side `Contributes.data_categories`; without
+   *  it the CLI's zod parse would strip the declaration before signing, and the
+   *  app's danger-zone row would simply never appear on any node that installed
+   *  the packed bundle. Loosely typed here for the same reason as the surfaces
+   *  above — Core is the layer that types it, because Core is the layer that has
+   *  to resolve the id to something that can actually delete the rows. */
+  data_categories: z.array(z.record(z.string(), z.unknown())).default([]),
+  /** Language servers the plugin declares, keyed by server name — the mirror of
+   *  Claude Code's `.lsp.json` / `lspServers`, so a config written for either host
+   *  loads in the other. Mirrors the Rust-side `Contributes.lsp_servers`; without
+   *  it the CLI's zod parse would strip every language server a plugin declares,
+   *  before the manifest is signed.
+   *
+   *  The ENTRY is deliberately a loose record and not a 13-field `z.object()`
+   *  mirroring `LspServerContribution`. Claude Code owns this field vocabulary,
+   *  not Ryu: a typed object here would strip a field from a newer Claude release
+   *  on its way through `ryu pack` — the same silent-deletion bug this field
+   *  exists to fix, one level down. Core is the layer that types it, because Core
+   *  is the layer that acts on it. */
+  lsp_servers: z.record(z.string(), z.record(z.string(), z.unknown())).default({}),
+  /** Pi extensions the plugin ships — TypeScript the managed `ryu` (Pi) agent
+   *  loads at process start. Mirrors the Rust-side `Contributes.pi_extensions`;
+   *  without it the CLI's zod parse would strip the declaration before signing,
+   *  and the packed plugin would ship a `pi-extensions/` folder nothing loads.
+   *
+   *  Typed (not a loose record) because Ryu owns this vocabulary — three fields,
+   *  all of them Core-interpreted — unlike `lsp_servers`, whose entry shape is
+   *  Claude Code's to extend. */
+  pi_extensions: z.array(PiExtensionContributionSchema).default([])
 });
 var SetupStepSchema = z.object({
   /** Card heading (e.g. the companion app name). */
@@ -302,6 +389,25 @@ var PluginManifestSchema = z.object({
   license: z.string().optional(),
   /** Square logo/icon URL for the listing card + detail header. */
   iconUrl: z.string().optional(),
+  /**
+   * Icon-primitive id for the listing card (Ryu extension): an Iconify/icons0
+   * `prefix:name`, a bare Hugeicons name, or a URL, resolved by the shared `Icon`
+   * primitive. A monochrome GLYPH masked with the current text colour — distinct
+   * from `iconUrl` (a raster logo). Falls back to `iconUrl` when omitted.
+   */
+  icon: z.string().optional(),
+  /**
+   * Dithered-gradient background for the card's icon square (Ryu extension),
+   * mirroring dither-kit's `DitherGradient` props. `from`/`to` are a palette-colour
+   * name (`green`, `blue`, `purple`, `pink`, `orange`, `red`, `grey`) or a hue
+   * number (0–360); `direction` is where `to` ends up. Renders behind the glyph in
+   * place of a flat `iconBackground`; the render layer validates + falls back.
+   */
+  iconDither: z.object({
+    from: z.union([z.string(), z.number()]),
+    to: z.union([z.string(), z.number()]).optional(),
+    direction: z.enum(["up", "down", "left", "right"]).optional()
+  }).optional(),
   /** Ordered App-Store-style screenshot gallery URLs (Ryu extension). */
   screenshots: z.array(z.string()).optional(),
   /** Privacy policy URL surfaced on detail (Ryu extension). */
@@ -338,6 +444,8 @@ export {
   labelImpersonatesSystemChrome,
   CompanionSurfaceSchema,
   TurnHookContributionSchema,
+  HookEventContributionSchema,
+  PiExtensionContributionSchema,
   WidgetContributionSchema,
   ToolAppConfigSchema,
   ContributesSchema,

package/dist/cli.cjs

@@ -362,7 +362,47 @@ var TurnHookContributionSchema = import_zod.z.object({
   /** Turn boundary this fires on. Today only `"post_assistant_turn"`. */
   on: import_zod.z.string().min(1).default("post_assistant_turn"),
   /** The JS hook body executed in the sandbox (returns a directive). */
-  code: import_zod.z.string().min(1)
+  code: import_zod.z.string().min(1).optional(),
+  /** Path to the hook body, relative to the plugin root (`hooks/<name>.js`). */
+  code_file: import_zod.z.string().min(1).optional(),
+  /**
+   * Cheap pre-gate mirroring Core's `HookMatch` (serde name `match` on
+   * `TurnHookContribution.run_when`). MUST round-trip through this schema:
+   * `ryu pack`/`publish` persist `safeParse(...).data`, so a field missing here
+   * is silently STRIPPED before signing — a tool-gated `pre_tool_use` hook
+   * (e.g. `tools: ["bash*"]`) would lose its gate and run on EVERY tool call.
+   */
+  match: import_zod.z.object({
+    /** Run only if the request set this composer flag true. */
+    flag: import_zod.z.string().optional(),
+    /** Run if the last user message starts with any of these prefixes. */
+    commands: import_zod.z.array(import_zod.z.string()).default([]),
+    /** Run if the plugin has stored state for this conversation. */
+    stateful: import_zod.z.boolean().default(false),
+    /** Run if `ctx.tool_name` matches any of these `*`-wildcard patterns. */
+    tools: import_zod.z.array(import_zod.z.string()).default([])
+  }).optional()
+}).refine((h) => Boolean(h.code) !== Boolean(h.code_file), {
+  message: "a turn hook must declare exactly one of 'code' (inline body) or 'code_file' (path to hooks/<name>.js)",
+  path: ["code_file"]
+});
+var HookEventContributionSchema = import_zod.z.object({
+  /** Fully-qualified event id: `<plugin id>#<event name>`, e.g. `@acme/meetings#meeting.ended`. */
+  id: import_zod.z.string().min(1),
+  /** Human-readable title for the event picker. */
+  title: import_zod.z.string().min(1),
+  /** What the event means and when it fires. */
+  description: import_zod.z.string().optional(),
+  /** Example of the `ctx.event` payload. Documentation, not a validated schema. */
+  payload_example: import_zod.z.record(import_zod.z.string(), import_zod.z.unknown()).optional()
+});
+var PiExtensionContributionSchema = import_zod.z.object({
+  /** Stable id for this extension within the plugin (`[a-z0-9][a-z0-9._-]*`). */
+  id: import_zod.z.string().min(1),
+  /** Path to the source, relative to the plugin root: `pi-extensions/<name>.ts`. */
+  file: import_zod.z.string().min(1),
+  /** Optional one-liner describing what the extension adds to the agent. */
+  description: import_zod.z.string().optional()
 });
 var DEFAULT_WIDGET_MIME = "text/html+skybridge";
 var DEFAULT_WIDGET_DISPLAY_MODE = "inline";
@@ -400,6 +440,11 @@ var ToolAppConfigSchema = import_zod.z.object({
 });
 var ContributesSchema = import_zod.z.object({
   turn_hooks: import_zod.z.array(TurnHookContributionSchema).default([]),
+  /** App events this plugin EMITS — the provider half of the hook system, whose
+   *  consumer half is `turn_hooks`. Mirrors the Rust `Contributes.hook_events`;
+   *  omitting it here would have `ryu pack` strip every declared event before
+   *  signing, leaving an app that emits events nothing is allowed to subscribe to. */
+  hook_events: import_zod.z.array(HookEventContributionSchema).default([]),
   composer_controls: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   settings_tabs: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   slash_commands: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
@@ -407,7 +452,49 @@ var ContributesSchema = import_zod.z.object({
    *  `ui://widget/<slug>.html` template. Mirrors the Rust-side
    *  `Contributes.widgets` field, without which the CLI's zod parse would strip
    *  every widget an app authored here declares. */
-  widgets: import_zod.z.array(WidgetContributionSchema).default([])
+  widgets: import_zod.z.array(WidgetContributionSchema).default([]),
+  /** App-registered sidebar sections (header + live list) and buttons (single nav
+   *  rows). Loosely typed here — the shell owns the spec vocabulary — matching how
+   *  `composer_controls`/`settings_tabs` are declared. Mirrors the Rust-side
+   *  `Contributes.sidebar_sections` / `Contributes.sidebar_buttons`. */
+  sidebar_sections: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  sidebar_buttons: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** App-registered workspace dock panels (a tab in the desktop's bottom/right
+   *  dock). Loosely typed for the same reason as the surfaces above — the shell
+   *  owns the `panel` render-mode vocabulary and the `spec` payload. Mirrors the
+   *  Rust-side `Contributes.dock_panels`; without it the CLI's zod parse would
+   *  strip the dock panel an app declares here. */
+  dock_panels: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** Deletable data categories the app owns — one "Delete all X" row in Settings
+   *  → Danger Zone. Mirrors the Rust-side `Contributes.data_categories`; without
+   *  it the CLI's zod parse would strip the declaration before signing, and the
+   *  app's danger-zone row would simply never appear on any node that installed
+   *  the packed bundle. Loosely typed here for the same reason as the surfaces
+   *  above — Core is the layer that types it, because Core is the layer that has
+   *  to resolve the id to something that can actually delete the rows. */
+  data_categories: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** Language servers the plugin declares, keyed by server name — the mirror of
+   *  Claude Code's `.lsp.json` / `lspServers`, so a config written for either host
+   *  loads in the other. Mirrors the Rust-side `Contributes.lsp_servers`; without
+   *  it the CLI's zod parse would strip every language server a plugin declares,
+   *  before the manifest is signed.
+   *
+   *  The ENTRY is deliberately a loose record and not a 13-field `z.object()`
+   *  mirroring `LspServerContribution`. Claude Code owns this field vocabulary,
+   *  not Ryu: a typed object here would strip a field from a newer Claude release
+   *  on its way through `ryu pack` — the same silent-deletion bug this field
+   *  exists to fix, one level down. Core is the layer that types it, because Core
+   *  is the layer that acts on it. */
+  lsp_servers: import_zod.z.record(import_zod.z.string(), import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default({}),
+  /** Pi extensions the plugin ships — TypeScript the managed `ryu` (Pi) agent
+   *  loads at process start. Mirrors the Rust-side `Contributes.pi_extensions`;
+   *  without it the CLI's zod parse would strip the declaration before signing,
+   *  and the packed plugin would ship a `pi-extensions/` folder nothing loads.
+   *
+   *  Typed (not a loose record) because Ryu owns this vocabulary — three fields,
+   *  all of them Core-interpreted — unlike `lsp_servers`, whose entry shape is
+   *  Claude Code's to extend. */
+  pi_extensions: import_zod.z.array(PiExtensionContributionSchema).default([])
 });
 var SetupStepSchema = import_zod.z.object({
   /** Card heading (e.g. the companion app name). */
@@ -588,6 +675,25 @@ var PluginManifestSchema = import_zod.z.object({
   license: import_zod.z.string().optional(),
   /** Square logo/icon URL for the listing card + detail header. */
   iconUrl: import_zod.z.string().optional(),
+  /**
+   * Icon-primitive id for the listing card (Ryu extension): an Iconify/icons0
+   * `prefix:name`, a bare Hugeicons name, or a URL, resolved by the shared `Icon`
+   * primitive. A monochrome GLYPH masked with the current text colour — distinct
+   * from `iconUrl` (a raster logo). Falls back to `iconUrl` when omitted.
+   */
+  icon: import_zod.z.string().optional(),
+  /**
+   * Dithered-gradient background for the card's icon square (Ryu extension),
+   * mirroring dither-kit's `DitherGradient` props. `from`/`to` are a palette-colour
+   * name (`green`, `blue`, `purple`, `pink`, `orange`, `red`, `grey`) or a hue
+   * number (0–360); `direction` is where `to` ends up. Renders behind the glyph in
+   * place of a flat `iconBackground`; the render layer validates + falls back.
+   */
+  iconDither: import_zod.z.object({
+    from: import_zod.z.union([import_zod.z.string(), import_zod.z.number()]),
+    to: import_zod.z.union([import_zod.z.string(), import_zod.z.number()]).optional(),
+    direction: import_zod.z.enum(["up", "down", "left", "right"]).optional()
+  }).optional(),
   /** Ordered App-Store-style screenshot gallery URLs (Ryu extension). */
   screenshots: import_zod.z.array(import_zod.z.string()).optional(),
   /** Privacy policy URL surfaced on detail (Ryu extension). */
@@ -619,8 +725,8 @@ function printUsage() {
       "Ryu dev SDK",
       "",
       "Usage:",
-      "  bunx ryu pack <dir>      Validate and bundle a plugin.json Plugin",
-      "  bunx ryu publish <dir>   Validate and publish a plugin.json Plugin to the Ryu Marketplace",
+      "  bunx ryu pack <dir>      Validate and bundle a manifest.json Plugin",
+      "  bunx ryu publish <dir>   Validate and publish a manifest.json Plugin to the Ryu Marketplace",
       "  bunx ryu dev <entry>     Run a Runnable locally with an interactive chat loop",
       ""
     ].join("\n")
@@ -631,10 +737,17 @@ function exitError(message) {
 `);
   process.exit(1);
 }
+var MANIFEST_FILE_NAMES = [
+  "manifest.json",
+  "plugin.json",
+  "ryu.json"
+];
 function loadManifest(dir) {
-  const manifestPath = (0, import_node_path.join)(dir, "plugin.json");
-  if (!(0, import_node_fs.existsSync)(manifestPath)) {
-    exitError(`plugin.json not found in: ${dir}`);
+  const manifestPath = MANIFEST_FILE_NAMES.map((name) => (0, import_node_path.join)(dir, name)).find(
+    (candidate) => (0, import_node_fs.existsSync)(candidate)
+  );
+  if (!manifestPath) {
+    exitError(`manifest.json not found in: ${dir}`);
   }
   let raw;
   try {
@@ -646,16 +759,56 @@ function loadManifest(dir) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    exitError(`plugin.json is not valid JSON: ${manifestPath}`);
+    exitError(`manifest.json is not valid JSON: ${manifestPath}`);
   }
   const result = PluginManifestSchema.safeParse(parsed);
   if (!result.success) {
     const first = result.error.issues[0];
     const field = first?.path.join(".") ?? "unknown";
     const message = first?.message ?? "validation failed";
-    exitError(`plugin.json validation failed at '${field}': ${message}`);
+    exitError(`manifest.json validation failed at '${field}': ${message}`);
+  }
+  return inlineCodeFiles(result.data, dir);
+}
+var CODE_FILE_DIRS = ["hooks", "adapters"];
+var CODE_FILE_PATH = /^(hooks|adapters)\/[A-Za-z0-9_][A-Za-z0-9._-]*\.m?js$/;
+function readCodeFile(dir, rel, label) {
+  if (!CODE_FILE_PATH.test(rel)) {
+    exitError(
+      `${label}: code_file '${rel}' must be exactly '<${CODE_FILE_DIRS.join("|")}>/<name>.js' with no traversal`
+    );
+  }
+  const path = (0, import_node_path.join)(dir, rel);
+  let body;
+  try {
+    body = (0, import_node_fs.readFileSync)(path, "utf8");
+  } catch (err) {
+    exitError(`${label}: could not read code_file '${rel}': ${String(err)}`);
+  }
+  if (!body.trim()) {
+    exitError(`${label}: code_file '${rel}' is empty`);
+  }
+  return body;
+}
+function inlineCodeFiles(manifest, dir) {
+  const out = manifest;
+  for (const hook of out.contributes?.turn_hooks ?? []) {
+    const rel = hook.code_file;
+    if (typeof rel === "string") {
+      hook.code = readCodeFile(dir, rel, `turn hook '${String(hook.id)}'`);
+      hook.code_file = void 0;
+    }
+  }
+  for (const entry of out.provides ?? []) {
+    for (const [verb, binding] of Object.entries(entry.tools ?? {})) {
+      const rel = binding.adapter?.code_file;
+      if (binding.adapter && typeof rel === "string") {
+        binding.adapter.code = readCodeFile(dir, rel, `adapter '${verb}'`);
+        binding.adapter.code_file = void 0;
+      }
+    }
   }
-  return result.data;
+  return out;
 }
 function resolveUiEntry(manifest) {
   for (const runnable of manifest.runnables) {

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env bun
 import {
   PluginManifestSchema
-} from "./chunk-GXHL5CO7.js";
+} from "./chunk-XTUK5I6I.js";
 import {
   ModelClient,
   resolveGatewayUrl
@@ -215,8 +215,8 @@ function printUsage() {
       "Ryu dev SDK",
       "",
       "Usage:",
-      "  bunx ryu pack <dir>      Validate and bundle a plugin.json Plugin",
-      "  bunx ryu publish <dir>   Validate and publish a plugin.json Plugin to the Ryu Marketplace",
+      "  bunx ryu pack <dir>      Validate and bundle a manifest.json Plugin",
+      "  bunx ryu publish <dir>   Validate and publish a manifest.json Plugin to the Ryu Marketplace",
       "  bunx ryu dev <entry>     Run a Runnable locally with an interactive chat loop",
       ""
     ].join("\n")
@@ -227,10 +227,17 @@ function exitError(message) {
 `);
   process.exit(1);
 }
+var MANIFEST_FILE_NAMES = [
+  "manifest.json",
+  "plugin.json",
+  "ryu.json"
+];
 function loadManifest(dir) {
-  const manifestPath = join(dir, "plugin.json");
-  if (!existsSync(manifestPath)) {
-    exitError(`plugin.json not found in: ${dir}`);
+  const manifestPath = MANIFEST_FILE_NAMES.map((name) => join(dir, name)).find(
+    (candidate) => existsSync(candidate)
+  );
+  if (!manifestPath) {
+    exitError(`manifest.json not found in: ${dir}`);
   }
   let raw;
   try {
@@ -242,16 +249,56 @@ function loadManifest(dir) {
   try {
     parsed = JSON.parse(raw);
   } catch {
-    exitError(`plugin.json is not valid JSON: ${manifestPath}`);
+    exitError(`manifest.json is not valid JSON: ${manifestPath}`);
   }
   const result = PluginManifestSchema.safeParse(parsed);
   if (!result.success) {
     const first = result.error.issues[0];
     const field = first?.path.join(".") ?? "unknown";
     const message = first?.message ?? "validation failed";
-    exitError(`plugin.json validation failed at '${field}': ${message}`);
+    exitError(`manifest.json validation failed at '${field}': ${message}`);
+  }
+  return inlineCodeFiles(result.data, dir);
+}
+var CODE_FILE_DIRS = ["hooks", "adapters"];
+var CODE_FILE_PATH = /^(hooks|adapters)\/[A-Za-z0-9_][A-Za-z0-9._-]*\.m?js$/;
+function readCodeFile(dir, rel, label) {
+  if (!CODE_FILE_PATH.test(rel)) {
+    exitError(
+      `${label}: code_file '${rel}' must be exactly '<${CODE_FILE_DIRS.join("|")}>/<name>.js' with no traversal`
+    );
+  }
+  const path = join(dir, rel);
+  let body;
+  try {
+    body = readFileSync(path, "utf8");
+  } catch (err) {
+    exitError(`${label}: could not read code_file '${rel}': ${String(err)}`);
+  }
+  if (!body.trim()) {
+    exitError(`${label}: code_file '${rel}' is empty`);
+  }
+  return body;
+}
+function inlineCodeFiles(manifest, dir) {
+  const out = manifest;
+  for (const hook of out.contributes?.turn_hooks ?? []) {
+    const rel = hook.code_file;
+    if (typeof rel === "string") {
+      hook.code = readCodeFile(dir, rel, `turn hook '${String(hook.id)}'`);
+      hook.code_file = void 0;
+    }
+  }
+  for (const entry of out.provides ?? []) {
+    for (const [verb, binding] of Object.entries(entry.tools ?? {})) {
+      const rel = binding.adapter?.code_file;
+      if (binding.adapter && typeof rel === "string") {
+        binding.adapter.code = readCodeFile(dir, rel, `adapter '${verb}'`);
+        binding.adapter.code_file = void 0;
+      }
+    }
   }
-  return result.data;
+  return out;
 }
 function resolveUiEntry(manifest) {
   for (const runnable of manifest.runnables) {

package/dist/{index-DAxq7Y0R.d.ts → index-B6SkaAjJ.d.ts}

@@ -637,9 +637,6 @@ interface ToolOptions<TInput extends Record<string, unknown>, TOutput> {
  * be forwarded verbatim to Core's MCP/ACP layer.
  */
 interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, unknown>, TOutput = unknown> extends Runnable<TInput, TOutput> {
-    readonly kind: "tool";
-    /** JSON Schema for this tool's input — compatible with Core's ToolInfo.schema. */
-    readonly schema: ToolSchema;
     /**
      * The `run` body serialized for Core's `inline_deno` tool backend — the exact
      * same technique `defineTurnHook` uses for its `code`. This is what makes a
@@ -658,6 +655,9 @@ interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, u
      * the sandbox form is the second parameter aliased to `host`.
      */
     readonly code: string;
+    readonly kind: "tool";
+    /** JSON Schema for this tool's input — compatible with Core's ToolInfo.schema. */
+    readonly schema: ToolSchema;
 }
 /**
  * Create a Runnable tool with input validation.
@@ -690,7 +690,7 @@ interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, u
  */
 declare function defineTool<TInput extends Record<string, unknown> = Record<string, unknown>, TOutput = unknown>(options: ToolOptions<TInput, TOutput>): ToolRunnable<TInput, TOutput>;
 /**
- * Convert a {@link ToolRunnable} into a `plugin.json` `kind:"tool"` runnable that
+ * Convert a {@link ToolRunnable} into a `manifest.json` `kind:"tool"` runnable that
  * ships its `run` body as Core's `inline_deno` backend. The emitted config
  * mirrors Core's `ToolConfig` (`apps/core/src/plugin_manifest/schema.rs`):
  * `{ slug, backend:"inline_deno", code, description?, input_schema }`. Core

package/dist/{index-CEbS1SlS.d.cts → index-BvAB5eMk.d.cts}

@@ -637,9 +637,6 @@ interface ToolOptions<TInput extends Record<string, unknown>, TOutput> {
  * be forwarded verbatim to Core's MCP/ACP layer.
  */
 interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, unknown>, TOutput = unknown> extends Runnable<TInput, TOutput> {
-    readonly kind: "tool";
-    /** JSON Schema for this tool's input — compatible with Core's ToolInfo.schema. */
-    readonly schema: ToolSchema;
     /**
      * The `run` body serialized for Core's `inline_deno` tool backend — the exact
      * same technique `defineTurnHook` uses for its `code`. This is what makes a
@@ -658,6 +655,9 @@ interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, u
      * the sandbox form is the second parameter aliased to `host`.
      */
     readonly code: string;
+    readonly kind: "tool";
+    /** JSON Schema for this tool's input — compatible with Core's ToolInfo.schema. */
+    readonly schema: ToolSchema;
 }
 /**
  * Create a Runnable tool with input validation.
@@ -690,7 +690,7 @@ interface ToolRunnable<TInput extends Record<string, unknown> = Record<string, u
  */
 declare function defineTool<TInput extends Record<string, unknown> = Record<string, unknown>, TOutput = unknown>(options: ToolOptions<TInput, TOutput>): ToolRunnable<TInput, TOutput>;
 /**
- * Convert a {@link ToolRunnable} into a `plugin.json` `kind:"tool"` runnable that
+ * Convert a {@link ToolRunnable} into a `manifest.json` `kind:"tool"` runnable that
  * ships its `run` body as Core's `inline_deno` backend. The emitted config
  * mirrors Core's `ToolConfig` (`apps/core/src/plugin_manifest/schema.rs`):
  * `{ slug, backend:"inline_deno", code, description?, input_schema }`. Core