@ryuhq/sdk 0.1.3 → 0.1.5

package/dist/agent-plugin.cjs

@@ -0,0 +1,242 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/agent-plugin.ts
+var agent_plugin_exports = {};
+__export(agent_plugin_exports, {
+  AGENT_PLUGINS_SPEC_VERSION: () => AGENT_PLUGINS_SPEC_VERSION,
+  AGENT_PLUGIN_EXTENSION_NS: () => AGENT_PLUGIN_EXTENSION_NS,
+  AGENT_PLUGIN_MANIFEST_FILE: () => AGENT_PLUGIN_MANIFEST_FILE,
+  AGENT_PLUGIN_MCP_FILE: () => AGENT_PLUGIN_MCP_FILE,
+  AGENT_PLUGIN_MCP_SCHEMA_URL: () => AGENT_PLUGIN_MCP_SCHEMA_URL,
+  AGENT_PLUGIN_SCHEMA_URL: () => AGENT_PLUGIN_SCHEMA_URL,
+  isAgentPluginManifest: () => isAgentPluginManifest,
+  toAgentPlugin: () => toAgentPlugin,
+  toSpecName: () => toSpecName
+});
+module.exports = __toCommonJS(agent_plugin_exports);
+var AGENT_PLUGINS_SPEC_VERSION = "1.0.0";
+var AGENT_PLUGIN_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+var AGENT_PLUGIN_MCP_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+var AGENT_PLUGIN_EXTENSION_NS = "com.ryuhq.ryu";
+var AGENT_PLUGIN_MANIFEST_FILE = "plugin.json";
+var AGENT_PLUGIN_MCP_FILE = "mcp.json";
+function isAgentPluginManifest(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return false;
+  }
+  const schema = value.$schema;
+  return typeof schema === "string" && schema.startsWith("https://agent-plugins.org/schemas/");
+}
+var SPEC_NAME_MAX = 64;
+var ILLEGAL_NAME_CHARS = /[^a-z0-9.-]+/g;
+var REPEATED_HYPHENS = /-{2,}/g;
+var REPEATED_DOTS = /\.{2,}/g;
+var LEADING_NON_ALNUM = /^[^a-z0-9]+/;
+var TRAILING_NON_ALNUM = /[^a-z0-9]+$/;
+var WHITESPACE = /\s/;
+function toSpecName(id) {
+  const normalized = id.trim().toLowerCase().replace(/^@/, "").replace(/[/_]/g, ".").replace(ILLEGAL_NAME_CHARS, "-").replace(REPEATED_HYPHENS, "-").replace(REPEATED_DOTS, ".").replace(LEADING_NON_ALNUM, "").replace(TRAILING_NON_ALNUM, "").slice(0, SPEC_NAME_MAX).replace(TRAILING_NON_ALNUM, "");
+  if (!normalized) {
+    throw new Error(
+      `plugin id ${JSON.stringify(id)} has no spec-legal name projection`
+    );
+  }
+  return normalized;
+}
+function asString(value) {
+  return typeof value === "string" && value.trim() ? value : void 0;
+}
+function asStringArray(value) {
+  if (!Array.isArray(value)) {
+    return;
+  }
+  const strings = value.filter((v) => typeof v === "string");
+  return strings.length > 0 ? strings : void 0;
+}
+function toSpecAuthor(value) {
+  const bare = asString(value);
+  if (bare) {
+    return { name: bare };
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return;
+  }
+  const source = value;
+  const author = {};
+  const name = asString(source.name);
+  const email = asString(source.email);
+  const url = asString(source.url);
+  if (name) {
+    author.name = name;
+  }
+  if (email) {
+    author.email = email;
+  }
+  if (url) {
+    author.url = url;
+  }
+  return Object.keys(author).length > 0 ? author : void 0;
+}
+function toSpecEnv(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return;
+  }
+  const env = {};
+  for (const [key, raw] of Object.entries(value)) {
+    if (typeof raw === "string") {
+      env[key] = raw;
+    }
+  }
+  return Object.keys(env).length > 0 ? env : void 0;
+}
+function toSpecServer(name, decl) {
+  const extras = {};
+  const commandEnv = asString(decl.command_env);
+  const description = asString(decl.description);
+  if (commandEnv) {
+    extras.command_env = commandEnv;
+  }
+  if (description) {
+    extras.description = description;
+  }
+  if (decl.enabled === false) {
+    extras.enabled = false;
+    return {
+      extras,
+      note: `mcp server '${name}' is disabled in the native manifest and was omitted from ${AGENT_PLUGIN_MCP_FILE}`
+    };
+  }
+  const command = asString(decl.command);
+  if (!command) {
+    return {
+      extras,
+      note: `mcp server '${name}' has no command and was omitted`
+    };
+  }
+  if (WHITESPACE.test(command)) {
+    return {
+      extras,
+      note: `mcp server '${name}' command ${JSON.stringify(command)} is not a single executable token and was omitted`
+    };
+  }
+  if (command.startsWith("/") || command.startsWith("~")) {
+    return {
+      extras,
+      note: `mcp server '${name}' command ${JSON.stringify(command)} is an absolute path (spec allows a bare name or './' relative path) and was omitted`
+    };
+  }
+  const server = { type: "stdio", command };
+  const args = asStringArray(decl.args);
+  if (args) {
+    server.args = args;
+  }
+  const env = toSpecEnv(decl.env);
+  if (env) {
+    server.env = env;
+  }
+  return { server, extras };
+}
+function toAgentPlugin(manifest) {
+  const id = asString(manifest.id);
+  if (!id) {
+    throw new Error("manifest has no id");
+  }
+  const notes = [];
+  const ryu = {
+    id,
+    displayName: asString(manifest.name) ?? id
+  };
+  const plugin = {
+    $schema: AGENT_PLUGIN_SCHEMA_URL,
+    name: toSpecName(id)
+  };
+  const version = asString(manifest.version);
+  if (version) {
+    plugin.version = version;
+  }
+  const description = asString(manifest.description) ?? asString(manifest.tagline);
+  if (description) {
+    plugin.description = description;
+  }
+  const author = toSpecAuthor(manifest.author);
+  if (author) {
+    plugin.author = author;
+  }
+  const homepage = asString(manifest.homepage);
+  if (homepage) {
+    plugin.homepage = homepage;
+  }
+  const repository = asString(manifest.repository);
+  if (repository) {
+    plugin.repository = repository;
+  }
+  const license = asString(manifest.license);
+  if (license) {
+    plugin.license = license;
+  }
+  const keywords = asStringArray(manifest.keywords);
+  if (keywords) {
+    plugin.keywords = keywords;
+  }
+  const declared = manifest.mcp_servers;
+  const servers = {};
+  const mcpExtras = {};
+  if (declared && typeof declared === "object" && !Array.isArray(declared)) {
+    for (const [name, raw] of Object.entries(
+      declared
+    )) {
+      if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        notes.push(`mcp server '${name}' is not an object and was omitted`);
+        continue;
+      }
+      const { server, extras, note } = toSpecServer(
+        name,
+        raw
+      );
+      if (Object.keys(extras).length > 0) {
+        mcpExtras[name] = extras;
+      }
+      if (note) {
+        notes.push(note);
+      }
+      if (server) {
+        servers[name] = server;
+      }
+    }
+  }
+  if (Object.keys(mcpExtras).length > 0) {
+    ryu.mcp = mcpExtras;
+  }
+  plugin.extensions = { [AGENT_PLUGIN_EXTENSION_NS]: ryu };
+  const mcp = Object.keys(servers).length > 0 ? { $schema: AGENT_PLUGIN_MCP_SCHEMA_URL, mcpServers: servers } : null;
+  return { plugin, mcp, notes };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AGENT_PLUGINS_SPEC_VERSION,
+  AGENT_PLUGIN_EXTENSION_NS,
+  AGENT_PLUGIN_MANIFEST_FILE,
+  AGENT_PLUGIN_MCP_FILE,
+  AGENT_PLUGIN_MCP_SCHEMA_URL,
+  AGENT_PLUGIN_SCHEMA_URL,
+  isAgentPluginManifest,
+  toAgentPlugin,
+  toSpecName
+});

package/dist/agent-plugin.d.cts

@@ -0,0 +1,159 @@
+/**
+ * Agent Plugins v1.0.0 export — the interop face of a Ryu `manifest.json`.
+ *
+ * The Agent Plugins Specification (https://agent-plugins.org/, TSC: Amazon,
+ * Cursor, Microsoft, OpenAI, Vercel) defines a small portable floor: a plugin is
+ * a directory with `plugin.json`, Agent Skills under `skills/<slug>/SKILL.md`,
+ * and MCP servers in `mcp.json`. Nothing else is portable.
+ *
+ * ## Why this is a SECOND file, not a migration
+ *
+ * The spec manifest schema is **closed** (§5.2): the only permitted top-level
+ * fields are `$schema`, `name`, `version`, `description`, `author`, `homepage`,
+ * `repository`, `license`, `keywords`, and `extensions`. Every field that makes a
+ * Ryu manifest a Ryu manifest — `id`, `runnables`, `contributes`, `surfaces`,
+ * `engines`, `permission_grants`, `mcp_servers`, `companion`, `ui_code_sha256` —
+ * is an unknown field there. So `manifest.json` can never *be* a conformant
+ * `plugin.json`; it can only be projected into one.
+ *
+ * `manifest.json` therefore stays the single source of truth and this module
+ * DERIVES the interop pair (`plugin.json` + `mcp.json`) from it. Nothing is
+ * hand-maintained, so the pair cannot desync — the same reason the packaged
+ * manifests are compiled in from their package home instead of copied (AGENTS.md).
+ *
+ * For the same reason `extensions` carries only what cannot be re-derived by a
+ * reader of the spec files: the real scoped id, the display name, and the
+ * per-server MCP fields the spec's closed server variants forced us to strip. It
+ * is deliberately NOT a copy of the whole native manifest — that would be a second
+ * source of truth with a stale-copy failure mode.
+ *
+ * Both `plugins-store/*` and `apps-store/*` use this one `PluginManifest` shape, so
+ * one converter covers both stores.
+ */
+/** Agent Plugins spec version this module targets. */
+declare const AGENT_PLUGINS_SPEC_VERSION = "1.0.0";
+/**
+ * Canonical manifest schema identifier (§5.2). MUST be this exact string — a
+ * client selects its validation rules from the value and MUST NOT fetch it.
+ */
+declare const AGENT_PLUGIN_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+/** Canonical `mcp.json` schema identifier (§7.2.1). */
+declare const AGENT_PLUGIN_MCP_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+/**
+ * Our reverse-domain client extension namespace (§8) — the key in `extensions`
+ * AND, when a plugin ships Ryu-only files, the top-level directory name.
+ *
+ * The spec asks for a domain the client controls, kept stable indefinitely, so
+ * this is a one-way door: changing it later orphans every published plugin's Ryu
+ * data. Derived from the `@ryuhq` npm scope / `ryuhq.com`.
+ */
+declare const AGENT_PLUGIN_EXTENSION_NS = "com.ryuhq.ryu";
+/** Spec file name for the manifest (§5.1). */
+declare const AGENT_PLUGIN_MANIFEST_FILE = "plugin.json";
+/** Spec file name for the MCP configuration (§7.2.1). */
+declare const AGENT_PLUGIN_MCP_FILE = "mcp.json";
+/**
+ * Whether a parsed JSON value is an Agent Plugins spec manifest rather than a
+ * native Ryu one.
+ *
+ * This predicate is load-bearing, not cosmetic. `plugin.json` is BOTH the spec's
+ * manifest name and a legacy alias for our own `manifest.json` (Core's
+ * `MANIFEST_FILE_NAMES` and the CLI's copy of it both still accept it). Once a
+ * plugin directory carries an exported spec `plugin.json`, any resolver that
+ * blindly takes the first matching name can pick the wrong file and reject the
+ * plugin for having no `id`/`runnables`.
+ *
+ * The discriminator is unambiguous: a spec manifest MUST carry `$schema` with the
+ * canonical agent-plugins.org identifier (§5.2), and no native manifest has ever
+ * had that field.
+ */
+declare function isAgentPluginManifest(value: unknown): boolean;
+/** Author object — the only three fields the spec permits (§5.4). */
+type AgentPluginAuthor = {
+    name?: string;
+    email?: string;
+    url?: string;
+};
+/** Ryu data carried under {@link AGENT_PLUGIN_EXTENSION_NS}. */
+type RyuExtensionData = {
+    /** The real scoped plugin id (`@ryu/advisor`) — unrecoverable from spec `name`. */
+    id: string;
+    /** Human display name; spec `name` is a slug, not a display string. */
+    displayName: string;
+    /** Per-MCP-server fields the spec's closed server variants do not allow. */
+    mcp?: Record<string, RyuMcpServerExtras>;
+};
+/** Native MCP fields stripped out of the exported `mcp.json`. */
+type RyuMcpServerExtras = {
+    /** Env var that overrides `command` with an absolute path at spawn. */
+    command_env?: string;
+    /** Human description for our MCP listing endpoint. */
+    description?: string;
+    /**
+     * Present and `false` when the native manifest disables the server. Such a
+     * server is OMITTED from `mcp.json` entirely — the spec has no `enabled` flag,
+     * so emitting the entry would make a foreign client spawn something we
+     * deliberately do not.
+     */
+    enabled?: false;
+};
+/** A conformant `plugin.json` (§5.2). */
+type AgentPluginJson = {
+    $schema: string;
+    name: string;
+    version?: string;
+    description?: string;
+    author?: AgentPluginAuthor;
+    homepage?: string;
+    repository?: string;
+    license?: string;
+    keywords?: string[];
+    extensions: Record<string, unknown>;
+};
+/** A stdio server entry (§7.2.1) — the only variant we export. */
+type AgentPluginStdioServer = {
+    type: "stdio";
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+};
+/** A conformant `mcp.json` (§7.2.1). */
+type AgentPluginMcpJson = {
+    $schema: string;
+    mcpServers: Record<string, AgentPluginStdioServer>;
+};
+/** What {@link toAgentPlugin} produces, plus what it had to leave behind. */
+type AgentPluginExport = {
+    /** The `plugin.json` contents. */
+    plugin: AgentPluginJson;
+    /** The `mcp.json` contents, or null when the plugin exports no server. */
+    mcp: AgentPluginMcpJson | null;
+    /**
+     * Human-readable notes about anything dropped or rewritten, so a lossy export
+     * is visible at the call site instead of silent.
+     */
+    notes: string[];
+};
+/**
+ * Project a Ryu plugin id onto a spec-legal `name` (§5.5): 1–64 chars of
+ * `a-z 0-9 - .`, alphanumeric at both ends, no `--` and no `..`.
+ *
+ * Our ids are all `@scope/name`, which is illegal there (`@` and `/`), so
+ * `@ryu/advisor` becomes `ryu.advisor`. Periods ARE legal, which is what makes the
+ * mapping readable rather than a hash. The mapping is lossy by construction (two
+ * ids could collide after normalization), so the true id always rides in
+ * `extensions` and this value is never treated as an identity on our side.
+ */
+declare function toSpecName(id: string): string;
+/**
+ * Project a Ryu `manifest.json` onto the Agent Plugins interop pair.
+ *
+ * Takes the RAW parsed manifest (not the SDK's narrower zod type) because the
+ * fields that matter for export — notably `mcp_servers` — live in Core's richer
+ * model. Throws only when the id cannot be projected onto a spec-legal name;
+ * every other lossy step is reported through {@link AgentPluginExport.notes}.
+ */
+declare function toAgentPlugin(manifest: Record<string, unknown>): AgentPluginExport;
+
+export { AGENT_PLUGINS_SPEC_VERSION, AGENT_PLUGIN_EXTENSION_NS, AGENT_PLUGIN_MANIFEST_FILE, AGENT_PLUGIN_MCP_FILE, AGENT_PLUGIN_MCP_SCHEMA_URL, AGENT_PLUGIN_SCHEMA_URL, type AgentPluginAuthor, type AgentPluginExport, type AgentPluginJson, type AgentPluginMcpJson, type AgentPluginStdioServer, type RyuExtensionData, type RyuMcpServerExtras, isAgentPluginManifest, toAgentPlugin, toSpecName };

package/dist/agent-plugin.d.ts

@@ -0,0 +1,159 @@
+/**
+ * Agent Plugins v1.0.0 export — the interop face of a Ryu `manifest.json`.
+ *
+ * The Agent Plugins Specification (https://agent-plugins.org/, TSC: Amazon,
+ * Cursor, Microsoft, OpenAI, Vercel) defines a small portable floor: a plugin is
+ * a directory with `plugin.json`, Agent Skills under `skills/<slug>/SKILL.md`,
+ * and MCP servers in `mcp.json`. Nothing else is portable.
+ *
+ * ## Why this is a SECOND file, not a migration
+ *
+ * The spec manifest schema is **closed** (§5.2): the only permitted top-level
+ * fields are `$schema`, `name`, `version`, `description`, `author`, `homepage`,
+ * `repository`, `license`, `keywords`, and `extensions`. Every field that makes a
+ * Ryu manifest a Ryu manifest — `id`, `runnables`, `contributes`, `surfaces`,
+ * `engines`, `permission_grants`, `mcp_servers`, `companion`, `ui_code_sha256` —
+ * is an unknown field there. So `manifest.json` can never *be* a conformant
+ * `plugin.json`; it can only be projected into one.
+ *
+ * `manifest.json` therefore stays the single source of truth and this module
+ * DERIVES the interop pair (`plugin.json` + `mcp.json`) from it. Nothing is
+ * hand-maintained, so the pair cannot desync — the same reason the packaged
+ * manifests are compiled in from their package home instead of copied (AGENTS.md).
+ *
+ * For the same reason `extensions` carries only what cannot be re-derived by a
+ * reader of the spec files: the real scoped id, the display name, and the
+ * per-server MCP fields the spec's closed server variants forced us to strip. It
+ * is deliberately NOT a copy of the whole native manifest — that would be a second
+ * source of truth with a stale-copy failure mode.
+ *
+ * Both `plugins-store/*` and `apps-store/*` use this one `PluginManifest` shape, so
+ * one converter covers both stores.
+ */
+/** Agent Plugins spec version this module targets. */
+declare const AGENT_PLUGINS_SPEC_VERSION = "1.0.0";
+/**
+ * Canonical manifest schema identifier (§5.2). MUST be this exact string — a
+ * client selects its validation rules from the value and MUST NOT fetch it.
+ */
+declare const AGENT_PLUGIN_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json";
+/** Canonical `mcp.json` schema identifier (§7.2.1). */
+declare const AGENT_PLUGIN_MCP_SCHEMA_URL = "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json";
+/**
+ * Our reverse-domain client extension namespace (§8) — the key in `extensions`
+ * AND, when a plugin ships Ryu-only files, the top-level directory name.
+ *
+ * The spec asks for a domain the client controls, kept stable indefinitely, so
+ * this is a one-way door: changing it later orphans every published plugin's Ryu
+ * data. Derived from the `@ryuhq` npm scope / `ryuhq.com`.
+ */
+declare const AGENT_PLUGIN_EXTENSION_NS = "com.ryuhq.ryu";
+/** Spec file name for the manifest (§5.1). */
+declare const AGENT_PLUGIN_MANIFEST_FILE = "plugin.json";
+/** Spec file name for the MCP configuration (§7.2.1). */
+declare const AGENT_PLUGIN_MCP_FILE = "mcp.json";
+/**
+ * Whether a parsed JSON value is an Agent Plugins spec manifest rather than a
+ * native Ryu one.
+ *
+ * This predicate is load-bearing, not cosmetic. `plugin.json` is BOTH the spec's
+ * manifest name and a legacy alias for our own `manifest.json` (Core's
+ * `MANIFEST_FILE_NAMES` and the CLI's copy of it both still accept it). Once a
+ * plugin directory carries an exported spec `plugin.json`, any resolver that
+ * blindly takes the first matching name can pick the wrong file and reject the
+ * plugin for having no `id`/`runnables`.
+ *
+ * The discriminator is unambiguous: a spec manifest MUST carry `$schema` with the
+ * canonical agent-plugins.org identifier (§5.2), and no native manifest has ever
+ * had that field.
+ */
+declare function isAgentPluginManifest(value: unknown): boolean;
+/** Author object — the only three fields the spec permits (§5.4). */
+type AgentPluginAuthor = {
+    name?: string;
+    email?: string;
+    url?: string;
+};
+/** Ryu data carried under {@link AGENT_PLUGIN_EXTENSION_NS}. */
+type RyuExtensionData = {
+    /** The real scoped plugin id (`@ryu/advisor`) — unrecoverable from spec `name`. */
+    id: string;
+    /** Human display name; spec `name` is a slug, not a display string. */
+    displayName: string;
+    /** Per-MCP-server fields the spec's closed server variants do not allow. */
+    mcp?: Record<string, RyuMcpServerExtras>;
+};
+/** Native MCP fields stripped out of the exported `mcp.json`. */
+type RyuMcpServerExtras = {
+    /** Env var that overrides `command` with an absolute path at spawn. */
+    command_env?: string;
+    /** Human description for our MCP listing endpoint. */
+    description?: string;
+    /**
+     * Present and `false` when the native manifest disables the server. Such a
+     * server is OMITTED from `mcp.json` entirely — the spec has no `enabled` flag,
+     * so emitting the entry would make a foreign client spawn something we
+     * deliberately do not.
+     */
+    enabled?: false;
+};
+/** A conformant `plugin.json` (§5.2). */
+type AgentPluginJson = {
+    $schema: string;
+    name: string;
+    version?: string;
+    description?: string;
+    author?: AgentPluginAuthor;
+    homepage?: string;
+    repository?: string;
+    license?: string;
+    keywords?: string[];
+    extensions: Record<string, unknown>;
+};
+/** A stdio server entry (§7.2.1) — the only variant we export. */
+type AgentPluginStdioServer = {
+    type: "stdio";
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+    cwd?: string;
+};
+/** A conformant `mcp.json` (§7.2.1). */
+type AgentPluginMcpJson = {
+    $schema: string;
+    mcpServers: Record<string, AgentPluginStdioServer>;
+};
+/** What {@link toAgentPlugin} produces, plus what it had to leave behind. */
+type AgentPluginExport = {
+    /** The `plugin.json` contents. */
+    plugin: AgentPluginJson;
+    /** The `mcp.json` contents, or null when the plugin exports no server. */
+    mcp: AgentPluginMcpJson | null;
+    /**
+     * Human-readable notes about anything dropped or rewritten, so a lossy export
+     * is visible at the call site instead of silent.
+     */
+    notes: string[];
+};
+/**
+ * Project a Ryu plugin id onto a spec-legal `name` (§5.5): 1–64 chars of
+ * `a-z 0-9 - .`, alphanumeric at both ends, no `--` and no `..`.
+ *
+ * Our ids are all `@scope/name`, which is illegal there (`@` and `/`), so
+ * `@ryu/advisor` becomes `ryu.advisor`. Periods ARE legal, which is what makes the
+ * mapping readable rather than a hash. The mapping is lossy by construction (two
+ * ids could collide after normalization), so the true id always rides in
+ * `extensions` and this value is never treated as an identity on our side.
+ */
+declare function toSpecName(id: string): string;
+/**
+ * Project a Ryu `manifest.json` onto the Agent Plugins interop pair.
+ *
+ * Takes the RAW parsed manifest (not the SDK's narrower zod type) because the
+ * fields that matter for export — notably `mcp_servers` — live in Core's richer
+ * model. Throws only when the id cannot be projected onto a spec-legal name;
+ * every other lossy step is reported through {@link AgentPluginExport.notes}.
+ */
+declare function toAgentPlugin(manifest: Record<string, unknown>): AgentPluginExport;
+
+export { AGENT_PLUGINS_SPEC_VERSION, AGENT_PLUGIN_EXTENSION_NS, AGENT_PLUGIN_MANIFEST_FILE, AGENT_PLUGIN_MCP_FILE, AGENT_PLUGIN_MCP_SCHEMA_URL, AGENT_PLUGIN_SCHEMA_URL, type AgentPluginAuthor, type AgentPluginExport, type AgentPluginJson, type AgentPluginMcpJson, type AgentPluginStdioServer, type RyuExtensionData, type RyuMcpServerExtras, isAgentPluginManifest, toAgentPlugin, toSpecName };

package/dist/agent-plugin.js

@@ -0,0 +1,22 @@
+import {
+  AGENT_PLUGINS_SPEC_VERSION,
+  AGENT_PLUGIN_EXTENSION_NS,
+  AGENT_PLUGIN_MANIFEST_FILE,
+  AGENT_PLUGIN_MCP_FILE,
+  AGENT_PLUGIN_MCP_SCHEMA_URL,
+  AGENT_PLUGIN_SCHEMA_URL,
+  isAgentPluginManifest,
+  toAgentPlugin,
+  toSpecName
+} from "./chunk-G6FLVEC4.js";
+export {
+  AGENT_PLUGINS_SPEC_VERSION,
+  AGENT_PLUGIN_EXTENSION_NS,
+  AGENT_PLUGIN_MANIFEST_FILE,
+  AGENT_PLUGIN_MCP_FILE,
+  AGENT_PLUGIN_MCP_SCHEMA_URL,
+  AGENT_PLUGIN_SCHEMA_URL,
+  isAgentPluginManifest,
+  toAgentPlugin,
+  toSpecName
+};

package/dist/{chunk-XTUK5I6I.js → chunk-CUY2QOFC.js}

@@ -118,6 +118,20 @@ var PiExtensionContributionSchema = z.object({
   /** Optional one-liner describing what the extension adds to the agent. */
   description: z.string().optional()
 });
+var OutputStyleContributionSchema = z.object({
+  /** Stable id for this style within the plugin (`[a-z0-9][a-z0-9._-]*`). It is
+   *  also the persisted selection key, so it must survive a settings key and a URL
+   *  path. */
+  id: z.string().min(1),
+  /** SOURCE form: path to the Markdown file, relative to the plugin root —
+   *  exactly `output-styles/<name>.md`. `ryu pack` replaces this with `source`. */
+  file: z.string().min(1).optional(),
+  /** WIRE form: the file's contents verbatim, frontmatter INCLUDED. The whole file
+   *  rather than a pre-split body plus mirrored `name`/`description` keys, so a
+   *  plugin style and a user's own `output-styles/*.md` go through one parser and
+   *  the frontmatter stays the single source of truth for a style's metadata. */
+  source: z.string().optional()
+});
 var DEFAULT_WIDGET_MIME = "text/html+skybridge";
 var DEFAULT_WIDGET_DISPLAY_MODE = "inline";
 var WidgetContributionSchema = z.object({
@@ -208,7 +222,15 @@ var ContributesSchema = z.object({
    *  Typed (not a loose record) because Ryu owns this vocabulary — three fields,
    *  all of them Core-interpreted — unlike `lsp_servers`, whose entry shape is
    *  Claude Code's to extend. */
-  pi_extensions: z.array(PiExtensionContributionSchema).default([])
+  pi_extensions: z.array(PiExtensionContributionSchema).default([]),
+  /** Output styles the plugin ships — Markdown files that rewrite the system
+   *  prompt's voice. Mirrors the Rust-side `Contributes.output_styles`; without it
+   *  the CLI's zod parse would strip the declaration, and `ryu pack` would sign a
+   *  bundle whose styles simply do not exist. Worse than the usual case of that
+   *  bug: the styles' `.md` files are not carried by the bundle either, so there
+   *  would be no residue to notice — the plugin would install clean and contribute
+   *  nothing. */
+  output_styles: z.array(OutputStyleContributionSchema).default([])
 });
 var SetupStepSchema = z.object({
   /** Card heading (e.g. the companion app name). */
@@ -446,6 +468,7 @@ export {
   TurnHookContributionSchema,
   HookEventContributionSchema,
   PiExtensionContributionSchema,
+  OutputStyleContributionSchema,
   WidgetContributionSchema,
   ToolAppConfigSchema,
   ContributesSchema,