@yaklabs-ai/plugin-protocol 0.13.7 → 0.13.9

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.13.7"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.13.9"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.13.7",
+  "version": "0.13.9",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [],

package/dist/index.d.ts

@@ -2059,7 +2059,7 @@ export declare const KAY_EVENT_PUBLISHER_ID: "kay";
 declare const KAY_PLUGIN_COMPATIBILITY_REFUSAL_CODES: readonly ["unsupported-protocol", "sdk-range-unsatisfied", "sdk-range-unsupported", "host-sdk-version-invalid"];
 
 /** Released SDK contracts still implemented by the host, alongside its current SDK. */
-export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5", "0.9.0", "0.9.1", "0.10.0", "0.11.0", "0.11.1", "0.12.0", "0.12.1", "0.12.2", "0.12.3", "0.12.4", "0.12.5", "0.13.0", "0.13.1", "0.13.2", "0.13.3", "0.13.4", "0.13.5", "0.13.6"];
+export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5", "0.9.0", "0.9.1", "0.10.0", "0.11.0", "0.11.1", "0.12.0", "0.12.1", "0.12.2", "0.12.3", "0.12.4", "0.12.5", "0.13.0", "0.13.1", "0.13.2", "0.13.3", "0.13.4", "0.13.5", "0.13.6", "0.13.7", "0.13.8"];
 
 /** The file whose presence makes a directory a plugin. A directory without one is not a plugin. */
 export declare const KAY_PLUGIN_MANIFEST_FILENAME = "kay-plugin.json";
@@ -2352,8 +2352,21 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * `skills.declared-source`). Additive: a plugin compiled against 0.13.6 never imports the new
  * subpaths, and its manifest parses unchanged. A plugin that imports one declares `^0.13.7`, so
  * an older host refuses a directory or repository plugin at load instead of the import failing.
+ *
+ * 0.13.8 takes the PATCH slot under the addition rule, as `api.withJev` did in 0.8.1: one new
+ * member on the api a plugin RECEIVES, `api.systemOne` / `app.systemOne` (`@bonsai/plugin-sdk/
+ * system-one`), the System One client for `decide` and `extract` on Jev, Clef, Clef Flash and
+ * Clairic. It is non-optional for the same reason `withJev` is, and a host with no System One
+ * binds a client that throws `not-served`. `withJev` stays for every compatible plugin. A
+ * plugin that calls `systemOne` declares `^0.13.8`, so an older host refuses it at load instead
+ * of the member being absent.
+ *
+ * 0.13.9 adds `@bonsai/plugin-sdk/zod`: the host's `z` on an entry with no other import, for
+ * code a `kay.ui` page also loads (`kay-agent` exports the same `z`). Additive: a plugin compiled
+ * against 0.13.8 never imports it. A plugin that imports it declares `^0.13.9`, so an older host
+ * refuses a directory or repository plugin at load instead of the import failing.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.13.7";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.13.9";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -3808,8 +3821,9 @@ export declare type McpServerAuthMode = z.infer<typeof McpServerAuthMode>;
  * or omitted `auth`) requires `authService`; `auth: "none"` may omit it. `authService` is a local
  * id that must resolve within this same manifest; unlike `uriModule.authService`, qualified foreign
  * service refs are not permitted because the MCP binding belongs to the plugin that ships it.
- * Declaring `mcpServers` at
- * all is bundled-plugin-only — enforced at composition, not by this schema (see `ARCHITECTURE.md`).
+ * A declared server is hosted
+ * only for a plugin holding `mcp.host-server` for its name and URL (the release's own plugins hold
+ * it) — decided at composition, not by this schema (see `ARCHITECTURE.md`).
  */
 export declare const McpServerContribution: z.ZodObject<{
     url: z.ZodString;
@@ -6373,9 +6387,9 @@ export declare type ResolvedKayAppDataSource = z.infer<typeof ResolvedKayAppData
  * always carries its applied default (`"oauth"` when the manifest omits it), matching this file's
  * applied-default posture elsewhere (e.g. `ResolvedPluginWebSession`'s probe `method`). The
  * manifest-local `authService` is resolved to this plugin's namespace-qualified `authServiceId`.
- * Bundled-plugin-only enforcement and cross-plugin `name` collisions are NOT this package's to
- * decide (see ARCHITECTURE.md) — both need the full plugin roster, which a single resolved
- * manifest cannot see.
+ * Whether a server is hosted (the `mcp.host-server` grant) and cross-plugin `name` collisions are
+ * NOT this package's to decide (see ARCHITECTURE.md) — both need the full plugin roster and its
+ * decisions, which a single resolved manifest cannot see.
  */
 export declare const ResolvedKayAppMcpServer: z.ZodObject<{
     name: z.ZodString;

package/dist/index.js

@@ -136,7 +136,7 @@ var JsonSchema = z2.record(z2.string(), JsonValue);
 // packages/plugin-protocol/dist/common.js
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.13.7";
+var KAY_PLUGIN_SDK_VERSION = "0.13.9";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.8.0",
   "0.8.1",
@@ -161,7 +161,9 @@ var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.13.3",
   "0.13.4",
   "0.13.5",
-  "0.13.6"
+  "0.13.6",
+  "0.13.7",
+  "0.13.8"
 ];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",
@@ -2914,9 +2916,9 @@ var KayAgentTargetManifest = z10.strictObject({
    * routing, so it should say what the capability is and when to reach for it, not how to
    * operate it — that is the primer's job, and the host appends the primer route after the body.
    *
-   * Policy the HOST applies (never trust this field alone): a body over 500 words is dropped,
-   * and a directory/repository-origin plugin's declaration is ignored — a third-party manifest
-   * does not buy prompt residency (mirrors the skill-exposure clamp).
+   * Policy the HOST applies (never trust this field alone): the doc renders only for a plugin
+   * holding the `prompt.resident` claim (Bonsai's own plugins hold it; any other plugin needs a
+   * grant a person approved), and a body over 500 words is dropped.
    */
   prompt: PackageAssetPath.optional(),
   /**
@@ -2953,8 +2955,8 @@ var KayAppTargetManifest = z10.strictObject({
     deviceDelegations: z10.array(DeviceDelegationContribution).optional(),
     corpusConsumers: z10.array(CorpusContribution).optional(),
     contextContributors: z10.array(ContextContributorContribution).optional(),
-    // Vendored MCP servers this plugin ships (see `McpServerContributions`). Bundled-plugin-only
-    // in practice; this package cannot see plugin origin, so that ceiling is enforced at
+    // Vendored MCP servers this plugin ships (see `McpServerContributions`). Each is hosted only
+    // for a plugin holding `mcp.host-server` for its name and URL; that is decided at
     // composition, not here (see ARCHITECTURE.md "Validation Law").
     mcpServers: McpServerContributions.optional(),
     // Handler restricted to endpoint-only by the manifest-level refinement below.
@@ -4794,6 +4796,9 @@ function referencedPaths(manifest) {
   if (manifest.iconDark !== void 0) {
     refs.push({ label: "iconDark", path: manifest.iconDark });
   }
+  if (kayAgent?.prompt !== void 0) {
+    refs.push({ label: "kay.agent prompt", path: kayAgent.prompt });
+  }
   for (const skill of kayAgent?.contributes?.skills ?? []) {
     refs.push({ label: `skill '${skill.localId}'`, path: skill.path });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.13.7",
+  "version": "0.13.9",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",