@ryuhq/sdk 0.2.0 → 0.2.2

package/dist/cli.cjs

@@ -692,10 +692,18 @@ var ChatWidgetTemplateSchema = import_zod.z.object({
 }).superRefine((value, ctx) => {
   const count = Number(Boolean(value.backing.tool_id)) + Number(Boolean(value.backing.view_id));
   if (count !== 1 && value.availability === "available") {
-    ctx.addIssue({ code: "custom", path: ["backing"], message: "available templates need exactly one backing tool_id or view_id" });
+    ctx.addIssue({
+      code: "custom",
+      path: ["backing"],
+      message: "available templates need exactly one backing tool_id or view_id"
+    });
   }
   if (count > 1) {
-    ctx.addIssue({ code: "custom", path: ["backing"], message: "backing must declare at most one of tool_id or view_id" });
+    ctx.addIssue({
+      code: "custom",
+      path: ["backing"],
+      message: "backing must declare at most one of tool_id or view_id"
+    });
   }
 });
 var ToolAppConfigSchema = import_zod.z.object({
@@ -718,6 +726,33 @@ var ToolAppConfigSchema = import_zod.z.object({
   /** Optional status label shown when the render tool finishes. */
   invoked: import_zod.z.string().optional()
 });
+var SlashCommandOptionSchema = import_zod.z.object({
+  description: import_zod.z.string().optional(),
+  label: import_zod.z.string().min(1),
+  value: import_zod.z.string().min(1)
+}).passthrough();
+var SlashCommandCustomOptionSchema = import_zod.z.union([
+  import_zod.z.literal(true),
+  import_zod.z.object({
+    description: import_zod.z.string().optional(),
+    label: import_zod.z.string().min(1).optional()
+  }).passthrough()
+]);
+var SlashCommandArgumentSchema = import_zod.z.object({
+  allow_custom: import_zod.z.boolean().optional(),
+  custom: SlashCommandCustomOptionSchema.optional(),
+  description: import_zod.z.string().optional(),
+  name: import_zod.z.string().min(1),
+  options: import_zod.z.array(SlashCommandOptionSchema).optional()
+}).passthrough();
+var SlashCommandContributionSchema = import_zod.z.object({
+  args: import_zod.z.array(SlashCommandArgumentSchema).optional(),
+  body: import_zod.z.string().optional(),
+  command: import_zod.z.string().min(1),
+  description: import_zod.z.string().optional(),
+  id: import_zod.z.string().optional(),
+  parameters: import_zod.z.array(SlashCommandArgumentSchema).optional()
+}).passthrough();
 var ContributesSchema = import_zod.z.object({
   turn_hooks: import_zod.z.array(TurnHookContributionSchema).default([]),
   /** App events this plugin EMITS — the provider half of the hook system, whose
@@ -732,7 +767,7 @@ var ContributesSchema = import_zod.z.object({
    * feature declaration before signing. */
   chat_features: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
   settings_tabs: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
-  slash_commands: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  slash_commands: import_zod.z.array(SlashCommandContributionSchema).default([]),
   /** App widgets (Ryu Apps). Each binds a render tool id to its
    *  `ui://widget/<slug>.html` template. Mirrors the Rust-side
    *  `Contributes.widgets` field, without which the CLI's zod parse would strip
@@ -799,7 +834,10 @@ var ContributesSchema = import_zod.z.object({
   output_styles: import_zod.z.array(OutputStyleContributionSchema).default([]),
   /** Per-message actions contributed by an enabled plugin. Kept as loose records
    *  so renderer-specific `kind`/`args` payloads survive `ryu pack` unchanged. */
-  message_actions: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([])
+  message_actions: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([]),
+  /** Buttons contributed to the floating text-selection toolbar. Kept as loose
+   *  records so host-owned dispatch args survive `ryu pack` unchanged. */
+  selection_actions: import_zod.z.array(import_zod.z.record(import_zod.z.string(), import_zod.z.unknown())).default([])
 });
 var SetupStepSchema = import_zod.z.object({
   /** Card heading (e.g. the companion app name). */
@@ -949,6 +987,9 @@ var PluginManifestSchema = import_zod.z.object({
     /^\d+\.\d+\.\d+(?:-[\w.]+)?(?:\+[\w.]+)?$/,
     "version must be a valid semver string (e.g. 1.0.0)"
   ),
+  /** Core-owned release maturity metadata. The Rust contract validates the
+   *  richer shape; the SDK authoring parser must preserve it for pack/publish. */
+  stability: import_zod.z.unknown().optional(),
   /**
    * Lower-case hex `sha256(utf8_bytes(ui_code))` binding the plugin's bundled
    * sandboxed-UI code to this manifest. `ryu pack` / `ryu publish` compute it and
@@ -966,8 +1007,26 @@ var PluginManifestSchema = import_zod.z.object({
    * Declarations only — grant enforcement is the Gateway's responsibility.
    */
   permission_grants: import_zod.z.array(import_zod.z.string()).default([]),
+  /** Deny-by-default sandbox permissions. Core remains authoritative; this
+   *  schema mirrors the fields so `ryu pack` cannot strip them. */
+  permissions: import_zod.z.object({
+    fs: import_zod.z.object({
+      read: import_zod.z.array(import_zod.z.string()).default([]),
+      write: import_zod.z.array(import_zod.z.string()).default([])
+    }).optional(),
+    child_process: import_zod.z.boolean().optional(),
+    run: import_zod.z.array(import_zod.z.string()).default([]),
+    network: import_zod.z.union([import_zod.z.boolean(), import_zod.z.array(import_zod.z.string())]).optional(),
+    tool: import_zod.z.array(import_zod.z.string()).default([])
+  }).optional(),
+  /** Core-owned permission presentation levels. Preserved verbatim here and
+   *  validated by Core's authoritative manifest contract. */
+  permission_levels: import_zod.z.unknown().optional(),
   /** Remote or stdio MCP servers registered by this plugin. */
   mcp_servers: import_zod.z.record(import_zod.z.string(), McpServerDeclSchema).optional(),
+  /** Core-owned sidecar declarations. Their full process/HTTP schema stays in
+   *  the Rust contract; this authoring layer must never strip them. */
+  sidecars: import_zod.z.unknown().optional(),
   /**
    * Optional Companion surface (an in-desktop overlay or sidebar panel).
    * Absent when the plugin has no Companion surface.
@@ -1003,6 +1062,9 @@ var PluginManifestSchema = import_zod.z.object({
    * an unsupported-target plugin stays installable and inspectable.
    */
   targets: import_zod.z.array(SurfaceSchema).default([]),
+  /** Rich per-surface declarations (`support`, UI, contributed commands, …).
+   *  Core owns and validates the nested vocabulary. */
+  surfaces: import_zod.z.unknown().optional(),
   /**
    * Host version floors — the semver requirement each surface must satisfy for
    * this plugin to install. Mirrors Core's `EnginesReq`
@@ -1117,7 +1179,7 @@ var PluginManifestSchema = import_zod.z.object({
    * array of steps guiding the user through post-install configuration.
    */
   setup: import_zod.z.union([SetupStepSchema, import_zod.z.array(SetupStepSchema)]).optional()
-}).superRefine((manifest, context) => {
+}).passthrough().superRefine((manifest, context) => {
   const hasOAuthServer = Object.values(manifest.mcp_servers ?? {}).some(
     (server) => server.auth?.type === "oauth"
   );
@@ -1157,7 +1219,7 @@ function printUsage() {
   );
 }
 function exitError(message) {
-  process.stderr.write(`error: ${message}
+  (0, import_node_fs.writeSync)(process.stderr.fd, `error: ${message}
 `);
   process.exit(1);
 }
@@ -1210,13 +1272,30 @@ function loadManifest(dir) {
 }
 var CODE_FILE_DIRS = ["hooks", "adapters"];
 var CODE_FILE_PATH = /^(hooks|adapters)\/[A-Za-z0-9_][A-Za-z0-9._-]*\.m?js$/;
+function containedPackageFile(dir, rel, label) {
+  let realRoot;
+  let realTarget;
+  try {
+    realRoot = (0, import_node_fs.realpathSync)(dir);
+    realTarget = (0, import_node_fs.realpathSync)((0, import_node_path.join)(dir, rel));
+  } catch (error) {
+    exitError(`${label}: could not resolve '${rel}': ${String(error)}`);
+  }
+  const fromRoot = (0, import_node_path.relative)(realRoot, realTarget);
+  if (fromRoot === ".." || fromRoot.startsWith(`..${import_node_path.sep}`) || (0, import_node_path.isAbsolute)(fromRoot)) {
+    exitError(
+      `${label}: '${rel}' resolves outside the plugin package (${realTarget})`
+    );
+  }
+  return realTarget;
+}
 function readCodeFile(dir, rel, label) {
   if (!CODE_FILE_PATH.test(rel)) {
     exitError(
       `${label}: code_file '${rel}' must be exactly '<${CODE_FILE_DIRS.join("|")}>/<name>.js' with no traversal`
     );
   }
-  const path = (0, import_node_path.join)(dir, rel);
+  const path = containedPackageFile(dir, rel, label);
   let body;
   try {
     body = (0, import_node_fs.readFileSync)(path, "utf8");
@@ -1266,7 +1345,7 @@ function inlineOutputStyleFiles(manifest, dir) {
     }
     let body;
     try {
-      body = (0, import_node_fs.readFileSync)((0, import_node_path.join)(dir, rel), "utf8");
+      body = (0, import_node_fs.readFileSync)(containedPackageFile(dir, rel, label), "utf8");
     } catch (err) {
       exitError(`${label}: could not read file '${rel}': ${String(err)}`);
     }
@@ -1312,6 +1391,12 @@ function resolveUiFormat(manifest) {
       return "html";
     }
   }
+  for (const widget of manifest.contributes?.widgets ?? []) {
+    const entry = widget.ui_entry;
+    if (typeof entry === "string" && entry.trim().toLowerCase().endsWith(".html")) {
+      return "html";
+    }
+  }
   return "js";
 }
 function readUiEntryHtml(dir, uiEntry) {

package/dist/cli.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env bun
-import {
-  PluginManifestSchema
-} from "./chunk-IEUQ3CDG.js";
 import {
   AGENT_PLUGIN_MANIFEST_FILE,
   AGENT_PLUGIN_MCP_FILE,
   isAgentPluginManifest,
   toAgentPlugin
 } from "./chunk-JX6DDRXV.js";
+import {
+  PluginManifestSchema
+} from "./chunk-NZKVOSC2.js";
 import {
   ModelClient
 } from "./chunk-HACAGK65.js";
@@ -21,10 +21,12 @@ import {
   existsSync,
   mkdirSync,
   readFileSync,
+  realpathSync,
   rmSync,
-  writeFileSync
+  writeFileSync,
+  writeSync
 } from "fs";
-import { join, resolve } from "path";
+import { isAbsolute, join, relative, resolve, sep } from "path";
 
 // src/cli/dev.ts
 import { createInterface } from "readline";
@@ -241,7 +243,7 @@ function printUsage() {
   );
 }
 function exitError(message) {
-  process.stderr.write(`error: ${message}
+  writeSync(process.stderr.fd, `error: ${message}
 `);
   process.exit(1);
 }
@@ -294,13 +296,30 @@ function loadManifest(dir) {
 }
 var CODE_FILE_DIRS = ["hooks", "adapters"];
 var CODE_FILE_PATH = /^(hooks|adapters)\/[A-Za-z0-9_][A-Za-z0-9._-]*\.m?js$/;
+function containedPackageFile(dir, rel, label) {
+  let realRoot;
+  let realTarget;
+  try {
+    realRoot = realpathSync(dir);
+    realTarget = realpathSync(join(dir, rel));
+  } catch (error) {
+    exitError(`${label}: could not resolve '${rel}': ${String(error)}`);
+  }
+  const fromRoot = relative(realRoot, realTarget);
+  if (fromRoot === ".." || fromRoot.startsWith(`..${sep}`) || isAbsolute(fromRoot)) {
+    exitError(
+      `${label}: '${rel}' resolves outside the plugin package (${realTarget})`
+    );
+  }
+  return realTarget;
+}
 function readCodeFile(dir, rel, label) {
   if (!CODE_FILE_PATH.test(rel)) {
     exitError(
       `${label}: code_file '${rel}' must be exactly '<${CODE_FILE_DIRS.join("|")}>/<name>.js' with no traversal`
     );
   }
-  const path = join(dir, rel);
+  const path = containedPackageFile(dir, rel, label);
   let body;
   try {
     body = readFileSync(path, "utf8");
@@ -350,7 +369,7 @@ function inlineOutputStyleFiles(manifest, dir) {
     }
     let body;
     try {
-      body = readFileSync(join(dir, rel), "utf8");
+      body = readFileSync(containedPackageFile(dir, rel, label), "utf8");
     } catch (err) {
       exitError(`${label}: could not read file '${rel}': ${String(err)}`);
     }
@@ -396,6 +415,12 @@ function resolveUiFormat(manifest) {
       return "html";
     }
   }
+  for (const widget of manifest.contributes?.widgets ?? []) {
+    const entry = widget.ui_entry;
+    if (typeof entry === "string" && entry.trim().toLowerCase().endsWith(".html")) {
+      return "html";
+    }
+  }
   return "js";
 }
 function readUiEntryHtml(dir, uiEntry) {