@ryuhq/sdk 0.1.14 → 0.2.0

package/dist/manifest.cjs

@@ -22,10 +22,13 @@ var manifest_exports = {};
 __export(manifest_exports, {
   AppDependencySchema: () => AppDependencySchema,
   CapabilityReqSchema: () => CapabilityReqSchema,
+  ChatWidgetTemplateSchema: () => ChatWidgetTemplateSchema,
   CompanionSurfaceSchema: () => CompanionSurfaceSchema,
   ContributesSchema: () => ContributesSchema,
   EnginesReqSchema: () => EnginesReqSchema,
   HookEventContributionSchema: () => HookEventContributionSchema,
+  McpServerAuthSchema: () => McpServerAuthSchema,
+  McpServerDeclSchema: () => McpServerDeclSchema,
   OutputStyleContributionSchema: () => OutputStyleContributionSchema,
   PiExtensionContributionSchema: () => PiExtensionContributionSchema,
   PluginManifestSchema: () => PluginManifestSchema,
@@ -44,7 +47,7 @@ __export(manifest_exports, {
 });
 module.exports = __toCommonJS(manifest_exports);
 
-// ../../node_modules/.bun/tsup@8.5.1+7a7b737fa55947b7/node_modules/tsup/assets/cjs_shims.js
+// ../../node_modules/.bun/tsup@8.5.1+276f2dd5f44b8d39/node_modules/tsup/assets/cjs_shims.js
 var getImportMetaUrl = () => typeof document === "undefined" ? new URL(`file:${__filename}`).href : document.currentScript && document.currentScript.tagName.toUpperCase() === "SCRIPT" ? document.currentScript.src : new URL("main.js", document.baseURI).href;
 var importMetaUrl = /* @__PURE__ */ getImportMetaUrl();
 
@@ -196,8 +199,30 @@ var WidgetContributionSchema = import_zod.z.object({
   /** Default display mode (`inline` | `fullscreen` | `pip`). */
   default_display_mode: import_zod.z.string().default(DEFAULT_WIDGET_DISPLAY_MODE)
 });
+var ChatWidgetTemplateSchema = import_zod.z.object({
+  id: import_zod.z.string().regex(/^[a-z0-9][a-z0-9._:-]*$/),
+  title: import_zod.z.string().min(1),
+  description: import_zod.z.string().optional(),
+  triggers: import_zod.z.array(import_zod.z.string()).default([]),
+  examples: import_zod.z.array(import_zod.z.string()).default([]),
+  backing: import_zod.z.object({
+    tool_id: import_zod.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:/-]*$/).optional(),
+    view_id: import_zod.z.string().regex(/^[a-z0-9][a-z0-9._:-]*$/).optional()
+  }),
+  display_mode: import_zod.z.string().min(1),
+  safe_action_ids: import_zod.z.array(import_zod.z.string().regex(/^[a-z0-9][a-z0-9._-]*$/)).default([]),
+  availability: import_zod.z.string().default("available")
+}).superRefine((value, ctx) => {
+  const count = Number(Boolean(value.backing.tool_id)) + Number(Boolean(value.backing.view_id));
+  if (count !== 1 && value.availability === "available") {
+    ctx.addIssue({ code: "custom", path: ["backing"], message: "available templates need exactly one backing tool_id or view_id" });
+  }
+  if (count > 1) {
+    ctx.addIssue({ code: "custom", path: ["backing"], message: "backing must declare at most one of tool_id or view_id" });
+  }
+});
 var ToolAppConfigSchema = import_zod.z.object({
-  /** MCP tool slug this runnable wraps — the fully-qualified `<server>__<name>` id. */
+  /** MCP tool slug this runnable wraps — the fully-qualified `<server>.<name>` id. */
   slug: import_zod.z.string().min(1),
   /** The tool description the model reads when choosing it. Carried here because a
    *  packed app's manifest is the only channel (there is no `generated.rs`); Core's
@@ -224,6 +249,11 @@ var ContributesSchema = import_zod.z.object({
    *  signing, leaving an app that emits events nothing is allowed to subscribe to. */
   hook_events: import_zod.z.array(HookEventContributionSchema).default([]),
   composer_controls: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** Chat feature descriptors whose behavior is implemented by the host shell.
+   * Mirrors the Rust-side `Contributes.chat_features`; keeping this field in the
+   * authoring schema prevents `ryu pack` from silently deleting a plugin's chat
+   * feature declaration before signing. */
+  chat_features: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   settings_tabs: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   slash_commands: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   /** App widgets (Ryu Apps). Each binds a render tool id to its
@@ -231,6 +261,8 @@ var ContributesSchema = import_zod.z.object({
    *  `Contributes.widgets` field, without which the CLI's zod parse would strip
    *  every widget an app authored here declares. */
   widgets: import_zod.z.array(WidgetContributionSchema).default([]),
+  /** Metadata-only chat widget templates. */
+  chat_widget_templates: import_zod.z.array(ChatWidgetTemplateSchema).optional(),
   /** App-registered sidebar sections (header + live list) and buttons (single nav
    *  rows). Loosely typed here — the shell owns the spec vocabulary — matching how
    *  `composer_controls`/`settings_tabs` are declared. Mirrors the Rust-side
@@ -243,6 +275,13 @@ var ContributesSchema = import_zod.z.object({
    *  Rust-side `Contributes.dock_panels`; without it the CLI's zod parse would
    *  strip the dock panel an app declares here. */
   dock_panels: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** App-registered live activities (the desktop "Dynamic Island" cards). Loosely
+   *  typed for the same reason as the surfaces above — the shell owns the
+   *  `spec` vocabulary. Mirrors the Rust-side `Contributes.live_activities`;
+   *  without it the CLI's zod parse would strip every live activity an app
+   *  declares here, so a packed bundle would ship a dock that silently stays
+   *  empty. */
+  live_activities: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   /** Deletable data categories the app owns — one "Delete all X" row in Settings
    *  → Danger Zone. Mirrors the Rust-side `Contributes.data_categories`; without
    *  it the CLI's zod parse would strip the declaration before signing, and the
@@ -280,7 +319,10 @@ var ContributesSchema = import_zod.z.object({
    *  bug: the styles' `.md` files are not carried by the bundle either, so there
    *  would be no residue to notice — the plugin would install clean and contribute
    *  nothing. */
-  output_styles: import_zod.z.array(OutputStyleContributionSchema).default([])
+  output_styles: import_zod.z.array(OutputStyleContributionSchema).default([]),
+  /** Per-message actions contributed by an enabled plugin. Kept as loose records
+   *  so renderer-specific `kind`/`args` payloads survive `ryu pack` unchanged. */
+  message_actions: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([])
 });
 var SetupStepSchema = import_zod.z.object({
   /** Card heading (e.g. the companion app name). */
@@ -361,6 +403,61 @@ var EnginesReqSchema = import_zod.z.object({
   /** Floor for the Next.js web app. */
   web: import_zod.z.string().optional()
 });
+var McpServerAuthSchema = import_zod.z.object({
+  client_id: import_zod.z.string().min(1).optional(),
+  type: import_zod.z.literal("oauth")
+}).strict();
+var McpServerDeclSchema = import_zod.z.object({
+  args: import_zod.z.array(import_zod.z.string()).default([]),
+  auth: McpServerAuthSchema.optional(),
+  command: import_zod.z.string().optional(),
+  command_env: import_zod.z.string().optional(),
+  description: import_zod.z.string().optional(),
+  enabled: import_zod.z.boolean().default(true),
+  env: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).default({}),
+  headers: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).default({}),
+  type: import_zod.z.enum(["stdio", "http", "streamable-http", "streamable_http", "sse"]).optional(),
+  url: import_zod.z.url().optional()
+}).superRefine((server, context) => {
+  if (!(server.command || server.url)) {
+    context.addIssue({
+      code: "custom",
+      message: "an MCP server requires command or url"
+    });
+  }
+  if (!server.auth) {
+    return;
+  }
+  if (server.command || server.type === "stdio" || !server.url) {
+    context.addIssue({
+      code: "custom",
+      message: "OAuth is supported only for remote HTTP MCP servers"
+    });
+    return;
+  }
+  if (Object.keys(server.headers).some(
+    (name) => name.toLowerCase() === "authorization"
+  )) {
+    context.addIssue({
+      code: "custom",
+      message: "OAuth cannot be combined with a static Authorization header"
+    });
+  }
+  const url = new URL(server.url);
+  const loopback = url.hostname === "localhost" || url.hostname.startsWith("127.") || url.hostname === "[::1]" || url.hostname === "::1";
+  if (url.username || url.password || url.hash) {
+    context.addIssue({
+      code: "custom",
+      message: "OAuth MCP URLs cannot contain credentials or fragments"
+    });
+  }
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) {
+    context.addIssue({
+      code: "custom",
+      message: "OAuth MCP URLs must use HTTPS except on loopback"
+    });
+  }
+});
 var PluginManifestSchema = import_zod.z.object({
   /** Reverse-domain unique identifier (e.g. `"com.example.my-plugin"`). */
   id: import_zod.z.string().min(1, "id is required"),
@@ -392,6 +489,8 @@ var PluginManifestSchema = import_zod.z.object({
    * Declarations only — grant enforcement is the Gateway's responsibility.
    */
   permission_grants: import_zod.z.array(import_zod.z.string()).default([]),
+  /** Remote or stdio MCP servers registered by this plugin. */
+  mcp_servers: import_zod.z.record(import_zod.z.string(), McpServerDeclSchema).optional(),
   /**
    * Optional Companion surface (an in-desktop overlay or sidebar panel).
    * Absent when the plugin has no Companion surface.
@@ -485,10 +584,16 @@ var PluginManifestSchema = import_zod.z.object({
       url: import_zod.z.string().optional()
     })
   ]).optional(),
+  /** Public source repository URL (Claude/Codex `repository`). */
+  repository: import_zod.z.string().url().optional(),
+  /** True when the provider operates outside the local Ryu runtime. */
+  external: import_zod.z.boolean().optional(),
   /** Project/marketing homepage — maps to the listing `website` (Claude field). */
   homepage: import_zod.z.string().optional(),
   /** Free-text search keywords (Claude field). */
   keywords: import_zod.z.array(import_zod.z.string()).optional(),
+  /** Stable Marketplace filter labels (Ryu extension). */
+  tags: import_zod.z.array(import_zod.z.string()).optional(),
   /** Taxonomy category beyond the runnable kinds (Claude field). */
   category: import_zod.z.string().optional(),
   /** SPDX-ish license identifier (Claude field). */
@@ -502,6 +607,8 @@ var PluginManifestSchema = import_zod.z.object({
    * from `iconUrl` (a raster logo). Falls back to `iconUrl` when omitted.
    */
   icon: import_zod.z.string().optional(),
+  /** Optional detail-page hero banner metadata forwarded to the marketplace. */
+  banner: import_zod.z.record(import_zod.z.string(), import_zod.z.unknown()).optional(),
   /**
    * Dithered-gradient background for the card's icon square (Ryu extension),
    * mirroring dither-kit's `DitherGradient` props. `from`/`to` are a palette-colour
@@ -533,6 +640,22 @@ var PluginManifestSchema = import_zod.z.object({
    * array of steps guiding the user through post-install configuration.
    */
   setup: import_zod.z.union([SetupStepSchema, import_zod.z.array(SetupStepSchema)]).optional()
+}).superRefine((manifest, context) => {
+  const hasOAuthServer = Object.values(manifest.mcp_servers ?? {}).some(
+    (server) => server.auth?.type === "oauth"
+  );
+  if (!hasOAuthServer) {
+    return;
+  }
+  for (const grant of ["mcp:server", "identity.read"]) {
+    if (!manifest.permission_grants.includes(grant)) {
+      context.addIssue({
+        code: "custom",
+        message: `OAuth MCP servers require the ${grant} permission grant`,
+        path: ["permission_grants"]
+      });
+    }
+  }
 });
 function validatePluginId(id) {
   loadNative().validatePluginId(id);
@@ -547,10 +670,13 @@ function coreManifestJsonSchema() {
 0 && (module.exports = {
   AppDependencySchema,
   CapabilityReqSchema,
+  ChatWidgetTemplateSchema,
   CompanionSurfaceSchema,
   ContributesSchema,
   EnginesReqSchema,
   HookEventContributionSchema,
+  McpServerAuthSchema,
+  McpServerDeclSchema,
   OutputStyleContributionSchema,
   PiExtensionContributionSchema,
   PluginManifestSchema,

package/dist/manifest.d.cts

@@ -182,6 +182,23 @@ declare const WidgetContributionSchema: z.ZodObject<{
     default_display_mode: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
 type WidgetContribution = z.infer<typeof WidgetContributionSchema>;
+/** Metadata-only chat affordance. The host owns rendering and dispatch; the
+ * manifest carries identifiers and copy only. */
+declare const ChatWidgetTemplateSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    backing: z.ZodObject<{
+        tool_id: z.ZodOptional<z.ZodString>;
+        view_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    display_mode: z.ZodString;
+    safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    availability: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+type ChatWidgetTemplate = z.infer<typeof ChatWidgetTemplateSchema>;
 /**
  * The `config` blob carried by a Ryu App's `kind:"tool"` runnable. Core's strict
  * `ToolConfig` (`apps/core/src/plugin_manifest/schema.rs`) requires `slug` and
@@ -203,7 +220,7 @@ type ToolAppConfig = z.infer<typeof ToolAppConfigSchema>;
 /**
  * The `contributes` block. Mirrors `Contributes` in
  * `apps/core/src/plugin_manifest/mod.rs`. The declarative UI surfaces
- * (`composer_controls` / `settings_tabs` / `slash_commands`) are passed verbatim
+ * (`composer_controls` / `chat_features` / `settings_tabs` / `slash_commands`) are passed verbatim
  * to the desktop renderer, so they are typed loosely here (records).
  */
 declare const ContributesSchema: z.ZodObject<{
@@ -226,6 +243,7 @@ declare const ContributesSchema: z.ZodObject<{
         payload_example: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>>;
     composer_controls: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    chat_features: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     settings_tabs: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     slash_commands: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     widgets: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -235,9 +253,24 @@ declare const ContributesSchema: z.ZodObject<{
         mime: z.ZodDefault<z.ZodString>;
         default_display_mode: z.ZodDefault<z.ZodString>;
     }, z.core.$strip>>>;
+    chat_widget_templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        backing: z.ZodObject<{
+            tool_id: z.ZodOptional<z.ZodString>;
+            view_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        display_mode: z.ZodString;
+        safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        availability: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>>;
     sidebar_sections: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     sidebar_buttons: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     dock_panels: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    live_activities: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     data_categories: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     lsp_servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     pi_extensions: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -250,6 +283,7 @@ declare const ContributesSchema: z.ZodObject<{
         file: z.ZodOptional<z.ZodString>;
         source: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    message_actions: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
 }, z.core.$strip>;
 type Contributes = z.infer<typeof ContributesSchema>;
 /**
@@ -359,6 +393,33 @@ declare const EnginesReqSchema: z.ZodObject<{
     web: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type EnginesReq = z.infer<typeof EnginesReqSchema>;
+declare const McpServerAuthSchema: z.ZodObject<{
+    client_id: z.ZodOptional<z.ZodString>;
+    type: z.ZodLiteral<"oauth">;
+}, z.core.$strict>;
+declare const McpServerDeclSchema: z.ZodObject<{
+    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    auth: z.ZodOptional<z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        type: z.ZodLiteral<"oauth">;
+    }, z.core.$strict>>;
+    command: z.ZodOptional<z.ZodString>;
+    command_env: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    type: z.ZodOptional<z.ZodEnum<{
+        stdio: "stdio";
+        http: "http";
+        "streamable-http": "streamable-http";
+        streamable_http: "streamable_http";
+        sse: "sse";
+    }>>;
+    url: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+type McpServerAuth = z.infer<typeof McpServerAuthSchema>;
+type McpServerDecl = z.infer<typeof McpServerDeclSchema>;
 /**
  * Full schema for a `manifest.json` Plugin manifest. Mirrors `PluginManifest` in
  * `apps/core/src/plugin_manifest/mod.rs`.
@@ -387,6 +448,27 @@ declare const PluginManifestSchema: z.ZodObject<{
         config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>>;
     permission_grants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    mcp_servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        auth: z.ZodOptional<z.ZodObject<{
+            client_id: z.ZodOptional<z.ZodString>;
+            type: z.ZodLiteral<"oauth">;
+        }, z.core.$strict>>;
+        command: z.ZodOptional<z.ZodString>;
+        command_env: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        type: z.ZodOptional<z.ZodEnum<{
+            stdio: "stdio";
+            http: "http";
+            "streamable-http": "streamable-http";
+            streamable_http: "streamable_http";
+            sse: "sse";
+        }>>;
+        url: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>>;
     companion: z.ZodOptional<z.ZodObject<{
         label: z.ZodString;
         icon: z.ZodOptional<z.ZodString>;
@@ -413,6 +495,7 @@ declare const PluginManifestSchema: z.ZodObject<{
             payload_example: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, z.core.$strip>>>;
         composer_controls: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        chat_features: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         settings_tabs: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         slash_commands: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         widgets: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -422,9 +505,24 @@ declare const PluginManifestSchema: z.ZodObject<{
             mime: z.ZodDefault<z.ZodString>;
             default_display_mode: z.ZodDefault<z.ZodString>;
         }, z.core.$strip>>>;
+        chat_widget_templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            backing: z.ZodObject<{
+                tool_id: z.ZodOptional<z.ZodString>;
+                view_id: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            display_mode: z.ZodString;
+            safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            availability: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip>>>;
         sidebar_sections: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         sidebar_buttons: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         dock_panels: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        live_activities: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         data_categories: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         lsp_servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         pi_extensions: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -437,6 +535,7 @@ declare const PluginManifestSchema: z.ZodObject<{
             file: z.ZodOptional<z.ZodString>;
             source: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
+        message_actions: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     }, z.core.$strip>>;
     requires: z.ZodOptional<z.ZodObject<{
         apps: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -492,12 +591,16 @@ declare const PluginManifestSchema: z.ZodObject<{
         email: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>]>>;
+    repository: z.ZodOptional<z.ZodString>;
+    external: z.ZodOptional<z.ZodBoolean>;
     homepage: z.ZodOptional<z.ZodString>;
     keywords: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
     category: z.ZodOptional<z.ZodString>;
     license: z.ZodOptional<z.ZodString>;
     iconUrl: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
+    banner: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     iconDither: z.ZodOptional<z.ZodObject<{
         from: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
         to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
@@ -543,4 +646,4 @@ declare function validateManifestStrict(manifestJson: string): string;
  */
 declare function coreManifestJsonSchema(): unknown;
 
-export { type AppDependency, AppDependencySchema, type CapabilityReq, CapabilityReqSchema, type CompanionSurface, CompanionSurfaceSchema, type Contributes, ContributesSchema, type EnginesReq, EnginesReqSchema, type HookEventContribution, HookEventContributionSchema, type OutputStyleContribution, OutputStyleContributionSchema, type PiExtensionContribution, PiExtensionContributionSchema, type PluginManifest, PluginManifestSchema, type Requires, RequiresSchema, type RunnableKind, RunnableKindSchema, type RunnableMeta, RunnableMetaSchema, type SetupStep, SetupStepSchema, type Surface, SurfaceSchema, type ToolAppConfig, ToolAppConfigSchema, type TurnHookContribution, TurnHookContributionSchema, type WidgetContribution, WidgetContributionSchema, coreManifestJsonSchema, labelImpersonatesSystemChrome, validateManifestStrict, validatePluginId };
+export { type AppDependency, AppDependencySchema, type CapabilityReq, CapabilityReqSchema, type ChatWidgetTemplate, ChatWidgetTemplateSchema, type CompanionSurface, CompanionSurfaceSchema, type Contributes, ContributesSchema, type EnginesReq, EnginesReqSchema, type HookEventContribution, HookEventContributionSchema, type McpServerAuth, McpServerAuthSchema, type McpServerDecl, McpServerDeclSchema, type OutputStyleContribution, OutputStyleContributionSchema, type PiExtensionContribution, PiExtensionContributionSchema, type PluginManifest, PluginManifestSchema, type Requires, RequiresSchema, type RunnableKind, RunnableKindSchema, type RunnableMeta, RunnableMetaSchema, type SetupStep, SetupStepSchema, type Surface, SurfaceSchema, type ToolAppConfig, ToolAppConfigSchema, type TurnHookContribution, TurnHookContributionSchema, type WidgetContribution, WidgetContributionSchema, coreManifestJsonSchema, labelImpersonatesSystemChrome, validateManifestStrict, validatePluginId };

package/dist/manifest.d.ts

@@ -182,6 +182,23 @@ declare const WidgetContributionSchema: z.ZodObject<{
     default_display_mode: z.ZodDefault<z.ZodString>;
 }, z.core.$strip>;
 type WidgetContribution = z.infer<typeof WidgetContributionSchema>;
+/** Metadata-only chat affordance. The host owns rendering and dispatch; the
+ * manifest carries identifiers and copy only. */
+declare const ChatWidgetTemplateSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    backing: z.ZodObject<{
+        tool_id: z.ZodOptional<z.ZodString>;
+        view_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    display_mode: z.ZodString;
+    safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    availability: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+type ChatWidgetTemplate = z.infer<typeof ChatWidgetTemplateSchema>;
 /**
  * The `config` blob carried by a Ryu App's `kind:"tool"` runnable. Core's strict
  * `ToolConfig` (`apps/core/src/plugin_manifest/schema.rs`) requires `slug` and
@@ -203,7 +220,7 @@ type ToolAppConfig = z.infer<typeof ToolAppConfigSchema>;
 /**
  * The `contributes` block. Mirrors `Contributes` in
  * `apps/core/src/plugin_manifest/mod.rs`. The declarative UI surfaces
- * (`composer_controls` / `settings_tabs` / `slash_commands`) are passed verbatim
+ * (`composer_controls` / `chat_features` / `settings_tabs` / `slash_commands`) are passed verbatim
  * to the desktop renderer, so they are typed loosely here (records).
  */
 declare const ContributesSchema: z.ZodObject<{
@@ -226,6 +243,7 @@ declare const ContributesSchema: z.ZodObject<{
         payload_example: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>>;
     composer_controls: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    chat_features: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     settings_tabs: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     slash_commands: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     widgets: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -235,9 +253,24 @@ declare const ContributesSchema: z.ZodObject<{
         mime: z.ZodDefault<z.ZodString>;
         default_display_mode: z.ZodDefault<z.ZodString>;
     }, z.core.$strip>>>;
+    chat_widget_templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        backing: z.ZodObject<{
+            tool_id: z.ZodOptional<z.ZodString>;
+            view_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        display_mode: z.ZodString;
+        safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        availability: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>>>;
     sidebar_sections: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     sidebar_buttons: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     dock_panels: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    live_activities: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     data_categories: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     lsp_servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     pi_extensions: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -250,6 +283,7 @@ declare const ContributesSchema: z.ZodObject<{
         file: z.ZodOptional<z.ZodString>;
         source: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
+    message_actions: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
 }, z.core.$strip>;
 type Contributes = z.infer<typeof ContributesSchema>;
 /**
@@ -359,6 +393,33 @@ declare const EnginesReqSchema: z.ZodObject<{
     web: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type EnginesReq = z.infer<typeof EnginesReqSchema>;
+declare const McpServerAuthSchema: z.ZodObject<{
+    client_id: z.ZodOptional<z.ZodString>;
+    type: z.ZodLiteral<"oauth">;
+}, z.core.$strict>;
+declare const McpServerDeclSchema: z.ZodObject<{
+    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    auth: z.ZodOptional<z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        type: z.ZodLiteral<"oauth">;
+    }, z.core.$strict>>;
+    command: z.ZodOptional<z.ZodString>;
+    command_env: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    type: z.ZodOptional<z.ZodEnum<{
+        stdio: "stdio";
+        http: "http";
+        "streamable-http": "streamable-http";
+        streamable_http: "streamable_http";
+        sse: "sse";
+    }>>;
+    url: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+type McpServerAuth = z.infer<typeof McpServerAuthSchema>;
+type McpServerDecl = z.infer<typeof McpServerDeclSchema>;
 /**
  * Full schema for a `manifest.json` Plugin manifest. Mirrors `PluginManifest` in
  * `apps/core/src/plugin_manifest/mod.rs`.
@@ -387,6 +448,27 @@ declare const PluginManifestSchema: z.ZodObject<{
         config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>>;
     permission_grants: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    mcp_servers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        auth: z.ZodOptional<z.ZodObject<{
+            client_id: z.ZodOptional<z.ZodString>;
+            type: z.ZodLiteral<"oauth">;
+        }, z.core.$strict>>;
+        command: z.ZodOptional<z.ZodString>;
+        command_env: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        type: z.ZodOptional<z.ZodEnum<{
+            stdio: "stdio";
+            http: "http";
+            "streamable-http": "streamable-http";
+            streamable_http: "streamable_http";
+            sse: "sse";
+        }>>;
+        url: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip>>>;
     companion: z.ZodOptional<z.ZodObject<{
         label: z.ZodString;
         icon: z.ZodOptional<z.ZodString>;
@@ -413,6 +495,7 @@ declare const PluginManifestSchema: z.ZodObject<{
             payload_example: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         }, z.core.$strip>>>;
         composer_controls: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        chat_features: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         settings_tabs: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         slash_commands: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         widgets: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -422,9 +505,24 @@ declare const PluginManifestSchema: z.ZodObject<{
             mime: z.ZodDefault<z.ZodString>;
             default_display_mode: z.ZodDefault<z.ZodString>;
         }, z.core.$strip>>>;
+        chat_widget_templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            triggers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            examples: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            backing: z.ZodObject<{
+                tool_id: z.ZodOptional<z.ZodString>;
+                view_id: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            display_mode: z.ZodString;
+            safe_action_ids: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            availability: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip>>>;
         sidebar_sections: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         sidebar_buttons: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         dock_panels: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        live_activities: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         data_categories: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         lsp_servers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         pi_extensions: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -437,6 +535,7 @@ declare const PluginManifestSchema: z.ZodObject<{
             file: z.ZodOptional<z.ZodString>;
             source: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
+        message_actions: z.ZodDefault<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     }, z.core.$strip>>;
     requires: z.ZodOptional<z.ZodObject<{
         apps: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -492,12 +591,16 @@ declare const PluginManifestSchema: z.ZodObject<{
         email: z.ZodOptional<z.ZodString>;
         url: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>]>>;
+    repository: z.ZodOptional<z.ZodString>;
+    external: z.ZodOptional<z.ZodBoolean>;
     homepage: z.ZodOptional<z.ZodString>;
     keywords: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
     category: z.ZodOptional<z.ZodString>;
     license: z.ZodOptional<z.ZodString>;
     iconUrl: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
+    banner: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     iconDither: z.ZodOptional<z.ZodObject<{
         from: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
         to: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
@@ -543,4 +646,4 @@ declare function validateManifestStrict(manifestJson: string): string;
  */
 declare function coreManifestJsonSchema(): unknown;
 
-export { type AppDependency, AppDependencySchema, type CapabilityReq, CapabilityReqSchema, type CompanionSurface, CompanionSurfaceSchema, type Contributes, ContributesSchema, type EnginesReq, EnginesReqSchema, type HookEventContribution, HookEventContributionSchema, type OutputStyleContribution, OutputStyleContributionSchema, type PiExtensionContribution, PiExtensionContributionSchema, type PluginManifest, PluginManifestSchema, type Requires, RequiresSchema, type RunnableKind, RunnableKindSchema, type RunnableMeta, RunnableMetaSchema, type SetupStep, SetupStepSchema, type Surface, SurfaceSchema, type ToolAppConfig, ToolAppConfigSchema, type TurnHookContribution, TurnHookContributionSchema, type WidgetContribution, WidgetContributionSchema, coreManifestJsonSchema, labelImpersonatesSystemChrome, validateManifestStrict, validatePluginId };
+export { type AppDependency, AppDependencySchema, type CapabilityReq, CapabilityReqSchema, type ChatWidgetTemplate, ChatWidgetTemplateSchema, type CompanionSurface, CompanionSurfaceSchema, type Contributes, ContributesSchema, type EnginesReq, EnginesReqSchema, type HookEventContribution, HookEventContributionSchema, type McpServerAuth, McpServerAuthSchema, type McpServerDecl, McpServerDeclSchema, type OutputStyleContribution, OutputStyleContributionSchema, type PiExtensionContribution, PiExtensionContributionSchema, type PluginManifest, PluginManifestSchema, type Requires, RequiresSchema, type RunnableKind, RunnableKindSchema, type RunnableMeta, RunnableMetaSchema, type SetupStep, SetupStepSchema, type Surface, SurfaceSchema, type ToolAppConfig, ToolAppConfigSchema, type TurnHookContribution, TurnHookContributionSchema, type WidgetContribution, WidgetContributionSchema, coreManifestJsonSchema, labelImpersonatesSystemChrome, validateManifestStrict, validatePluginId };

package/dist/manifest.js

@@ -1,10 +1,13 @@
 import {
   AppDependencySchema,
   CapabilityReqSchema,
+  ChatWidgetTemplateSchema,
   CompanionSurfaceSchema,
   ContributesSchema,
   EnginesReqSchema,
   HookEventContributionSchema,
+  McpServerAuthSchema,
+  McpServerDeclSchema,
   OutputStyleContributionSchema,
   PiExtensionContributionSchema,
   PluginManifestSchema,
@@ -20,14 +23,17 @@ import {
   labelImpersonatesSystemChrome,
   validateManifestStrict,
   validatePluginId
-} from "./chunk-AO2KJRDD.js";
+} from "./chunk-IEUQ3CDG.js";
 export {
   AppDependencySchema,
   CapabilityReqSchema,
+  ChatWidgetTemplateSchema,
   CompanionSurfaceSchema,
   ContributesSchema,
   EnginesReqSchema,
   HookEventContributionSchema,
+  McpServerAuthSchema,
+  McpServerDeclSchema,
   OutputStyleContributionSchema,
   PiExtensionContributionSchema,
   PluginManifestSchema,