@vellumai/plugin-api 0.10.7-dev.202607091111.4355283 → 0.10.7-dev.202607091507.bac9bfe

package/index.d.ts

@@ -2063,7 +2063,7 @@ declare interface HostBashRequest {
     command: string;
     working_dir?: string;
     timeout_seconds?: number;
-    /** Extra environment variables to inject into the subprocess (e.g. VELLUM_UNTRUSTED_SHELL). */
+    /** Extra environment variables to inject into the subprocess (e.g. __CONVERSATION_ID). */
     env?: Record<string, string>;
     /** When set, route this request only to the client with this ID. */
     targetClientId?: string;
@@ -2724,18 +2724,24 @@ declare const OpenUrlEventSchema: z.ZodObject<{
 }, z.core.$strip>;
 
 /**
- * Identifies which extension owns a tool (skill / plugin / MCP server).
- * Tracked by the tool registry keyed by tool name, not stored on the `Tool`
- * object itself — query via {@link ../tools/registry.getToolOwner}.
+ * Identifies what owns a tool: the built-in default set, or a skill / plugin /
+ * MCP server / workspace override. Tracked by the tool registry keyed by tool
+ * name, not stored on the `Tool` object itself — query via
+ * {@link ../tools/registry.getToolOwner}.
  */
 declare interface OwnerInfo {
     kind: OwnerKind;
-    /** ID of the owning extension (skill id / plugin name / MCP server id / workspace path). */
+    /** ID of the owner: skill id / plugin name / MCP server id / workspace path, or `"default"` for built-ins. */
     id: string;
 }
 
-/** The kind of extension that owns a tool. Core tools have no owner. */
-declare type OwnerKind = "skill" | "mcp" | "plugin" | "workspace";
+/**
+ * The kind of entity that owns a tool. `"default"` is the built-in tool set
+ * that ships with the assistant; the others are extension surfaces. Every
+ * *registered* tool has an owner — {@link ../tools/registry.getToolOwner}
+ * returns `undefined` only for a name that is not registered at all.
+ */
+declare type OwnerKind = "default" | "skill" | "mcp" | "plugin" | "workspace";
 
 declare interface PartnerAudit {
     risk: RiskLevel_2;
@@ -3635,6 +3641,13 @@ declare interface ShowPlatformLogin {
  * The `assistantVersion` field mirrors the init context's so plugins that stash
  * a version stamp at init can compare against the same name on tear-down
  * without keeping their own copy.
+ *
+ * **`shutdown` may run in a different process than `init`.** A managed
+ * `uninstall` runs it in whichever process performs the removal (the CLI or the
+ * daemon), which is not necessarily the daemon process that ran `init`. Do not
+ * close over in-memory state established at `init` (open handles, timers,
+ * module-level singletons) and expect to tear it down here — reconstruct
+ * anything you need from the plugin's config and `data/` directory instead.
  */
 export declare interface ShutdownContext {
     /** Assistant semver for compatibility checks inside the plugin. */
@@ -3651,8 +3664,10 @@ export declare interface ShutdownContext {
  * - `disable` — the plugin was disabled at runtime (e.g. a `.disabled`
  *   sentinel was added, or a feature flag turned it off).
  * - `reload` — a source file inside the plugin directory changed and the
- *   plugin is being redeployed in place; the old version's `shutdown` runs
- *   before the new version is imported and its `init` fires.
+ *   plugin is being redeployed in place; `shutdown` runs before the new version
+ *   is imported and its `init` fires. Note the `shutdown` that runs is the one
+ *   currently on disk, which is the previous version *unless* the edit was to
+ *   `shutdown` itself.
  */
 declare type ShutdownReason = "shutdown" | "uninstall" | "disable" | "reload";
 
@@ -4087,9 +4102,9 @@ export declare interface ToolContext {
      * "Always Allow" rules, or non-interactive auto-approve shortcuts may
      * bypass the prompt. This flag is independently sufficient: it
      * promotes allow → prompt decisions on its own and suppresses
-     * temporary override options in the prompt UI. Used by
-     * `manage_secure_command_tool` to ensure a human reviews each secure
-     * bundle installation.
+     * temporary override options in the prompt UI. Used by the `run_workflow`
+     * launch path so a human consents to a run whose capability manifest grants
+     * side-effecting tools.
      * @legacy
      */
     requireFreshApproval?: boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/plugin-api",
-  "version": "0.10.7-dev.202607091111.4355283",
+  "version": "0.10.7-dev.202607091507.bac9bfe",
   "description": "Public TypeScript authoring contract for Vellum assistant plugins.",
   "license": "MIT",
   "type": "module",