@yaklabs-ai/plugin-protocol 0.12.3 → 0.12.4

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@kay/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.12.3"
+    "@kay/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.12.4"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [],

package/dist/index.d.ts

@@ -1396,9 +1396,21 @@ export declare type CliBinaryName = z.infer<typeof CliBinaryName>;
  * `aliases`) carry a read/write split the approval policy honors, and — for a
  * vendored binary — a credential injected into the child process env under
  * `authEnvVar`, resolved from `authService`. `readOnly`/`write` are argv prefix
- * strings (e.g. `"apps list"`) the plugin advertises as read vs write — contract
+ * strings (e.g. `"apps list"`) the plugin advertises as read vs write: contract
  * data consumed by approval policy and the prompt, not enforced here.
  *
+ * How the host matches a prefix (#10220): it splits the prefix on single spaces
+ * and compares each word with the command's argv at the same position, starting
+ * with the first argument after the binary. Options are never skipped or
+ * interpreted, so `"apps list"` matches `fly apps list --json` but not
+ * `fly --verbose apps list` or `fly apps --org x list`. A command that matches
+ * no prefix is unknown and goes through the user's approval policy. A `write`
+ * match wins over a `readOnly` match. A prefix with an empty word (a leading,
+ * trailing or doubled space) never matches. So list a read only when its
+ * leading words alone make it a read, and expect a command written option-first
+ * to ask: that is the price of an option value never posing as a subcommand
+ * (`vercel --cwd ls deploy` deploys from the directory `ls`).
+ *
  * `provider` (decision 007) selects where the binary comes from:
  *
  * - `"vendored"` (the default when omitted) — a binary from `@kay/vendored-cli`'s
@@ -1961,7 +1973,7 @@ export declare const KAY_APP_DATA_SNAPSHOT_MAX_BYTES: number;
 export declare const KAY_EVENT_PUBLISHER_ID: "kay";
 
 /** Released SDK contracts still implemented by the host, alongside its current SDK. */
-export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5", "0.9.0", "0.9.1", "0.10.0", "0.11.0", "0.11.1", "0.12.0", "0.12.1", "0.12.2"];
+export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5", "0.9.0", "0.9.1", "0.10.0", "0.11.0", "0.11.1", "0.12.0", "0.12.1", "0.12.2", "0.12.3"];
 
 export declare const KAY_PLUGIN_PROTOCOL_PACKAGE_NAME: "@kay/plugin-protocol";
 
@@ -2151,8 +2163,15 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * older host refuses the whole manifest at parse (`manifest-schema-invalid`), before any range
  * check runs. A plugin that declares it still declares `^0.12.3`, so the install-time version
  * checks name the mismatch instead of a schema error.
+ *
+ * 0.12.4 adds `app.repos` (`KayAppRepos`): `resolve(folder)` answers which git checkout encloses a
+ * folder (repo root, primary checkout, common dir, remotes, origin), and `linkedWorktrees(commonDir)`
+ * lists git's linked-worktree registry, both read by the host asynchronously under a time limit and
+ * answering `unknown` rather than throwing. Always present and ungated, like `app.paths`. Additive:
+ * a plugin compiled against 0.12.3 never reads it. A plugin that calls it declares `^0.12.4`, so an
+ * older host refuses a directory or repository plugin at load instead of the call failing.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.12.3";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.12.4";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 

package/dist/index.js

@@ -115,7 +115,7 @@ import { z as z2 } from "zod";
 import { z } from "zod";
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@kay/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.12.3";
+var KAY_PLUGIN_SDK_VERSION = "0.12.4";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.8.0",
   "0.8.1",
@@ -130,7 +130,8 @@ var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.11.1",
   "0.12.0",
   "0.12.1",
-  "0.12.2"
+  "0.12.2",
+  "0.12.3"
 ];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",