@vellumai/plugin-api 0.12.2-dev.202609171017.61d51c8 → 0.12.2-dev.202609171418.b9a2adf

package/index.d.ts

@@ -4629,22 +4629,29 @@ export declare function createLiveVoiceConnection(options: {
 /**
  * Plugin-facing credential resolution.
  *
- * {@link resolveCredential} returns a stored credential's plaintext value — the
- * same value `assistant credentials reveal` prints — resolving a reference that
- * is either a credential UUID or a `"service/field"` string, exactly as the
- * reveal path does (see {@link ../tools/credentials/resolve.resolveCredentialRef}
- * and the `credentials/reveal` route).
+ * {@link resolveCredential} returns a stored credential's plaintext value
+ * (the same value `assistant credentials reveal` prints), resolving a
+ * reference that is either a credential UUID or a `"service/field"` string,
+ * exactly as the reveal path does (see
+ * {@link ../tools/credentials/resolve.resolveCredentialRef} and the
+ * `credentials/reveal` route).
  *
  * ## Plugin scoping
  *
- * When a plugin is in context (its hook, tool, or one of its own
- * `/x/plugins/<name>/` routes is executing, tracked by
- * {@link ../plugins/plugin-execution-context.getCurrentPluginName}), resolution
- * is restricted: the plugin may only resolve credentials whose `service`
- * equals its manifest name (`imessage/api_key` for plugin `imessage`). It
- * cannot read another service (`openai/api_key`, `openai/imessage`). Outside
- * any plugin context (host-internal callers, CLI, tests) the resolver is
- * unscoped and behaves like a direct reveal.
+ * When a plugin is in context, resolution is restricted to credentials
+ * whose `service` equals the plugin's runtime install-directory name
+ * (`sms/account_sid` for plugin `sms`). Context is:
+ *
+ * 1. In-process AsyncLocalStorage from `runInPluginContext` (hooks, plugin
+ *    tools, plugin routes).
+ * 2. `VELLUM_PLUGIN_NAME` on a bash or skill-sandbox child.
+ * 3. The process entry path, when it sits under
+ *    `plugins/<service>/skills/<skill>/{scripts,tools}/`.
+ *
+ * Outside any plugin context the resolver is unscoped and behaves like a
+ * direct reveal. A standalone child has an empty in-process metadata
+ * cache; when plugin context is set, a cache miss consults the live
+ * credential catalog so an empty cache is not reported as "not found".
  */
 /**
  * Raised when a credential cannot be resolved: the reference does not match a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/plugin-api",
-  "version": "0.12.2-dev.202609171017.61d51c8",
+  "version": "0.12.2-dev.202609171418.b9a2adf",
   "description": "Public TypeScript authoring contract for Vellum assistant plugins.",
   "license": "MIT",
   "type": "module",