@yaklabs-ai/plugin-protocol 0.29.0 → 0.31.0

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.29.0"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.31.0"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.29.0",
+  "version": "0.31.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [],

package/dist/index.d.ts

@@ -1564,6 +1564,7 @@ declare namespace authoringCommonSchemas {
         hostWithinDomain,
         urlHostWithinDomain,
         refineWebSessionScopeConfined,
+        KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES,
         KAY_PLUGIN_PROTOCOL_VERSION,
         KAY_PLUGIN_PROTOCOL_PACKAGE_NAME,
         KAY_PLUGIN_SDK_VERSION,
@@ -1634,6 +1635,7 @@ declare namespace authoringContributionSchemas {
         EntityResolverContribution,
         AgentRenderContribution,
         EndpointContribution,
+        WorkflowContribution,
         McpServerUrl,
         McpServerAuthMode,
         McpServerContribution,
@@ -1659,7 +1661,7 @@ declare namespace authoringContributionSchemas {
         RichViewContribution,
         KayUiAppHostCapability,
         UiAppCapabilities,
-        UiAppActivityRail,
+        UiRailEntryContribution,
         UiAppContribution,
         ThemeContribution,
         CommandHandler,
@@ -2477,6 +2479,17 @@ declare const canonicalContributionSchemas: {
         requestSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>>;
         responseSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>>;
     }, z.core.$strict>;
+    WorkflowContribution: z.ZodObject<{
+        localId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        everyMs: z.ZodNumber;
+        auth: z.ZodOptional<z.ZodObject<{
+            service: z.ZodString;
+            scheme: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
     McpServerUrl: z.ZodString;
     McpServerAuthMode: z.ZodEnum<{
         oauth: "oauth";
@@ -2698,15 +2711,18 @@ declare const canonicalContributionSchemas: {
             "workspace.arrange": "workspace.arrange";
         }>>>;
     }, z.core.$strict>;
-    UiAppActivityRail: z.ZodObject<{
+    UiRailEntryContribution: z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        page: z.ZodString;
+        homeLocation: z.ZodOptional<z.ZodString>;
+        shortcut: z.ZodOptional<z.ZodString>;
+        order: z.ZodOptional<z.ZodNumber>;
         section: z.ZodOptional<z.ZodEnum<{
             primary: "primary";
             plugins: "plugins";
         }>>;
-        order: z.ZodOptional<z.ZodNumber>;
-        icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            svg: z.ZodString;
-        }, z.core.$strict>]>>;
     }, z.core.$strict>;
     UiAppContribution: z.ZodObject<{
         localId: z.ZodString;
@@ -2746,17 +2762,45 @@ declare const canonicalContributionSchemas: {
                 "workspace.arrange": "workspace.arrange";
             }>>>;
         }, z.core.$strict>>;
-        activityRail: z.ZodOptional<z.ZodObject<{
-            section: z.ZodOptional<z.ZodEnum<{
-                primary: "primary";
-                plugins: "plugins";
-            }>>;
-            order: z.ZodOptional<z.ZodNumber>;
-            icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-                svg: z.ZodString;
-            }, z.core.$strict>]>>;
+    }, z.core.$strict> | z.ZodPreprocess<z.ZodObject<{
+        localId: z.ZodString;
+        displayName: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        runtime: z.ZodLiteral<"kay.react-app.v1">;
+        contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
+        sdk: z.ZodObject<{
+            range: z.ZodString;
+        }, z.core.$strict>;
+        entrypoint: z.ZodObject<{
+            module: z.ZodString;
+            export: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+        styles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        assets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        capabilities: z.ZodOptional<z.ZodObject<{
+            endpoints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            host: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                "sessions.create": "sessions.create";
+                "memory.read": "memory.read";
+                "skills.read": "skills.read";
+                "automations.run": "automations.run";
+                "artifacts.read": "artifacts.read";
+                "navigation.open-session": "navigation.open-session";
+                "artifacts.preview": "artifacts.preview";
+                "cost.read": "cost.read";
+                "billing.read": "billing.read";
+                "context.read": "context.read";
+                "usage.read": "usage.read";
+                "self-improvement.read": "self-improvement.read";
+                "automations.read": "automations.read";
+                "shared-artifacts.read": "shared-artifacts.read";
+                "workspace.place-pane": "workspace.place-pane";
+                "workspace.pane-header": "workspace.pane-header";
+                "workspace.arrange": "workspace.arrange";
+            }>>>;
         }, z.core.$strict>>;
-    }, z.core.$strict>;
+    }, z.core.$strict>, unknown>;
     ThemeContribution: z.ZodObject<{
         localId: z.ZodString;
         displayName: z.ZodString;
@@ -2818,6 +2862,7 @@ declare const canonicalContributionSchemas: {
         appDataSource: "appDataSource";
         whiteboardType: "whiteboardType";
         approvalType: "approvalType";
+        workflow: "workflow";
         contextContributor: "contextContributor";
         transcriptionProvider: "transcriptionProvider";
         deviceDelegation: "deviceDelegation";
@@ -3093,6 +3138,18 @@ export declare const DeclaredSkillSourceEnvelope: z.ZodDiscriminatedUnion<[z.Zod
 
 export declare type DeclaredSkillSourceEnvelope = z.infer<typeof DeclaredSkillSourceEnvelope>;
 
+declare interface DeclaredUiIconPath {
+    readonly label: string;
+    readonly path: string;
+}
+
+/**
+ * Every icon file a manifest's `kay.ui` section declares. The directory scan reads them, the
+ * containment check covers them, and a compiled plugin supplies their contents, so a new kind with
+ * an icon adds one line here and all three follow.
+ */
+export declare function declaredUiIconPaths(manifest: KayPluginManifestV1): readonly DeclaredUiIconPath[];
+
 /** Drop repeats under {@link sameClaim}, preserving first-seen order (a sort settles the rest). */
 export declare function dedupeClaims(claims: readonly PluginCapabilityClaimV1[]): PluginCapabilityClaimV1[];
 
@@ -3344,7 +3401,7 @@ export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly string[];
 /** The file whose presence makes a directory a plugin. A directory without one is not a plugin. */
 export declare const KAY_PLUGIN_MANIFEST_FILENAME = "kay-plugin.json";
 
-/** Manifest byte cap: a larger file is refused unread. */
+/** Manifest byte cap, including declared app-data schemas; larger files are refused unread. */
 export declare const KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES: number;
 
 export declare const KAY_PLUGIN_PROTOCOL_PACKAGE_NAME: "@bonsai/plugin-protocol";
@@ -3923,8 +3980,19 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * whichever process runs the plugin. A plugin's simulator file exports `createPluginSimulator`
  * (`KayPluginSimulatorFactory`). A clean break: only this repo's plugins read the old member, and
  * a plugin with no simulator is unaffected, so 0.28.0 stays served.
+ *
+ * 0.30.0 lets a scheduled workflow be described as data (#15722). `contributes.workflows` under
+ * `kay.app` declares its name, schedule and sign-in, and `app.implementWorkflow(localId, run)`
+ * supplies what a run does: each run is handed the workflow's accounts and tokens, so the code
+ * runs the same in the daemon and in the plugin host. Additive: `app.workflows.define` stays, and
+ * a plugin that declares a workflow declares ^0.30.0.
+ *
+ * 0.31.0 lets a plugin declare its rail entries as data (#15896). `railEntries` under `kay.ui`
+ * `contributes` names each entry's title, page, shortcut and icon file. It replaces `activityRail` on a
+ * UI app, which is stripped from a manifest that still carries it, so that manifest loses only the
+ * rail button. A plugin that declares a rail entry declares ^0.31.0.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.29.0";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.31.0";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -4515,6 +4583,17 @@ export declare const KayAppTargetManifest: z.ZodObject<{
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>>;
+        workflows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            localId: z.ZodString;
+            name: z.ZodString;
+            description: z.ZodString;
+            everyMs: z.ZodNumber;
+            auth: z.ZodOptional<z.ZodObject<{
+                service: z.ZodString;
+                scheme: z.ZodString;
+                scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
         eventDefinitions: z.ZodOptional<z.ZodArray<z.ZodObject<{
             localId: z.ZodString;
             displayName: z.ZodOptional<z.ZodString>;
@@ -5268,6 +5347,17 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                             }, z.core.$strict>>>;
                         }, z.core.$strict>>;
                     }, z.core.$strict>>>;
+                    workflows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        localId: z.ZodString;
+                        name: z.ZodString;
+                        description: z.ZodString;
+                        everyMs: z.ZodNumber;
+                        auth: z.ZodOptional<z.ZodObject<{
+                            service: z.ZodString;
+                            scheme: z.ZodString;
+                            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>>;
                     eventDefinitions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
                         displayName: z.ZodOptional<z.ZodString>;
@@ -5450,16 +5540,57 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                                 "workspace.arrange": "workspace.arrange";
                             }>>>;
                         }, z.core.$strict>>;
-                        activityRail: z.ZodOptional<z.ZodObject<{
-                            section: z.ZodOptional<z.ZodEnum<{
-                                primary: "primary";
-                                plugins: "plugins";
-                            }>>;
-                            order: z.ZodOptional<z.ZodNumber>;
-                            icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-                                svg: z.ZodString;
-                            }, z.core.$strict>]>>;
+                    }, z.core.$strict> | z.ZodPreprocess<z.ZodObject<{
+                        localId: z.ZodString;
+                        displayName: z.ZodString;
+                        description: z.ZodOptional<z.ZodString>;
+                        icon: z.ZodOptional<z.ZodString>;
+                        runtime: z.ZodLiteral<"kay.react-app.v1">;
+                        contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
+                        sdk: z.ZodObject<{
+                            range: z.ZodString;
+                        }, z.core.$strict>;
+                        entrypoint: z.ZodObject<{
+                            module: z.ZodString;
+                            export: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>;
+                        styles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        assets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        capabilities: z.ZodOptional<z.ZodObject<{
+                            endpoints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            host: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                                "sessions.create": "sessions.create";
+                                "memory.read": "memory.read";
+                                "skills.read": "skills.read";
+                                "automations.run": "automations.run";
+                                "artifacts.read": "artifacts.read";
+                                "navigation.open-session": "navigation.open-session";
+                                "artifacts.preview": "artifacts.preview";
+                                "cost.read": "cost.read";
+                                "billing.read": "billing.read";
+                                "context.read": "context.read";
+                                "usage.read": "usage.read";
+                                "self-improvement.read": "self-improvement.read";
+                                "automations.read": "automations.read";
+                                "shared-artifacts.read": "shared-artifacts.read";
+                                "workspace.place-pane": "workspace.place-pane";
+                                "workspace.pane-header": "workspace.pane-header";
+                                "workspace.arrange": "workspace.arrange";
+                            }>>>;
                         }, z.core.$strict>>;
+                    }, z.core.$strict>, unknown>>>;
+                    railEntries: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        title: z.ZodString;
+                        icon: z.ZodOptional<z.ZodString>;
+                        page: z.ZodString;
+                        homeLocation: z.ZodOptional<z.ZodString>;
+                        shortcut: z.ZodOptional<z.ZodString>;
+                        order: z.ZodOptional<z.ZodNumber>;
+                        section: z.ZodOptional<z.ZodEnum<{
+                            primary: "primary";
+                            plugins: "plugins";
+                        }>>;
                     }, z.core.$strict>>>;
                     themes: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
@@ -6503,16 +6634,57 @@ export declare const KayUiTargetManifest: z.ZodObject<{
                     "workspace.arrange": "workspace.arrange";
                 }>>>;
             }, z.core.$strict>>;
-            activityRail: z.ZodOptional<z.ZodObject<{
-                section: z.ZodOptional<z.ZodEnum<{
-                    primary: "primary";
-                    plugins: "plugins";
-                }>>;
-                order: z.ZodOptional<z.ZodNumber>;
-                icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-                    svg: z.ZodString;
-                }, z.core.$strict>]>>;
+        }, z.core.$strict> | z.ZodPreprocess<z.ZodObject<{
+            localId: z.ZodString;
+            displayName: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodString>;
+            runtime: z.ZodLiteral<"kay.react-app.v1">;
+            contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
+            sdk: z.ZodObject<{
+                range: z.ZodString;
+            }, z.core.$strict>;
+            entrypoint: z.ZodObject<{
+                module: z.ZodString;
+                export: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            styles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            assets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            capabilities: z.ZodOptional<z.ZodObject<{
+                endpoints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                host: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    "sessions.create": "sessions.create";
+                    "memory.read": "memory.read";
+                    "skills.read": "skills.read";
+                    "automations.run": "automations.run";
+                    "artifacts.read": "artifacts.read";
+                    "navigation.open-session": "navigation.open-session";
+                    "artifacts.preview": "artifacts.preview";
+                    "cost.read": "cost.read";
+                    "billing.read": "billing.read";
+                    "context.read": "context.read";
+                    "usage.read": "usage.read";
+                    "self-improvement.read": "self-improvement.read";
+                    "automations.read": "automations.read";
+                    "shared-artifacts.read": "shared-artifacts.read";
+                    "workspace.place-pane": "workspace.place-pane";
+                    "workspace.pane-header": "workspace.pane-header";
+                    "workspace.arrange": "workspace.arrange";
+                }>>>;
             }, z.core.$strict>>;
+        }, z.core.$strict>, unknown>>>;
+        railEntries: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            title: z.ZodString;
+            icon: z.ZodOptional<z.ZodString>;
+            page: z.ZodString;
+            homeLocation: z.ZodOptional<z.ZodString>;
+            shortcut: z.ZodOptional<z.ZodString>;
+            order: z.ZodOptional<z.ZodNumber>;
+            section: z.ZodOptional<z.ZodEnum<{
+                primary: "primary";
+                plugins: "plugins";
+            }>>;
         }, z.core.$strict>>>;
         themes: z.ZodOptional<z.ZodArray<z.ZodObject<{
             localId: z.ZodString;
@@ -8935,6 +9107,7 @@ export declare const PluginContributionKind: z.ZodEnum<{
     appDataSource: "appDataSource";
     whiteboardType: "whiteboardType";
     approvalType: "approvalType";
+    workflow: "workflow";
     contextContributor: "contextContributor";
     transcriptionProvider: "transcriptionProvider";
     deviceDelegation: "deviceDelegation";
@@ -10513,21 +10686,26 @@ export declare const ResolvedKayAppWhiteboardType: z.ZodObject<{
 
 export declare type ResolvedKayAppWhiteboardType = z.infer<typeof ResolvedKayAppWhiteboardType>;
 
+export declare const ResolvedKayAppWorkflow: z.ZodObject<{
+    localId: z.ZodString;
+    globalId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    everyMs: z.ZodNumber;
+    auth: z.ZodOptional<z.ZodObject<{
+        serviceId: z.ZodString;
+        schemeId: z.ZodString;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+export declare type ResolvedKayAppWorkflow = z.infer<typeof ResolvedKayAppWorkflow>;
+
 export declare const ResolvedKayUiApp: z.ZodObject<{
     localId: z.ZodString;
     globalId: z.ZodString;
     displayName: z.ZodString;
     contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
-    activityRail: z.ZodOptional<z.ZodObject<{
-        section: z.ZodOptional<z.ZodEnum<{
-            primary: "primary";
-            plugins: "plugins";
-        }>>;
-        order: z.ZodOptional<z.ZodNumber>;
-        icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            svg: z.ZodString;
-        }, z.core.$strict>]>>;
-    }, z.core.$strict>>;
     description: z.ZodOptional<z.ZodString>;
     icon: z.ZodOptional<z.ZodString>;
     runtime: z.ZodLiteral<"kay.react-app.v1">;
@@ -10916,6 +11094,7 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             appDataSource: "appDataSource";
             whiteboardType: "whiteboardType";
             approvalType: "approvalType";
+            workflow: "workflow";
             contextContributor: "contextContributor";
             transcriptionProvider: "transcriptionProvider";
             deviceDelegation: "deviceDelegation";
@@ -11687,6 +11866,18 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
         moduleId: z.ZodString;
         authService: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
+    kayAppWorkflows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        localId: z.ZodString;
+        globalId: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodString;
+        everyMs: z.ZodNumber;
+        auth: z.ZodOptional<z.ZodObject<{
+            serviceId: z.ZodString;
+            schemeId: z.ZodString;
+            scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
     kayAppDataSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
         localId: z.ZodString;
         globalId: z.ZodString;
@@ -11802,16 +11993,6 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
         globalId: z.ZodString;
         displayName: z.ZodString;
         contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
-        activityRail: z.ZodOptional<z.ZodObject<{
-            section: z.ZodOptional<z.ZodEnum<{
-                primary: "primary";
-                plugins: "plugins";
-            }>>;
-            order: z.ZodOptional<z.ZodNumber>;
-            icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-                svg: z.ZodString;
-            }, z.core.$strict>]>>;
-        }, z.core.$strict>>;
         description: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
         runtime: z.ZodLiteral<"kay.react-app.v1">;
@@ -11883,6 +12064,7 @@ export declare const ResolvedPluginContributionId: z.ZodObject<{
         appDataSource: "appDataSource";
         whiteboardType: "whiteboardType";
         approvalType: "approvalType";
+        workflow: "workflow";
         contextContributor: "contextContributor";
         transcriptionProvider: "transcriptionProvider";
         deviceDelegation: "deviceDelegation";
@@ -13412,19 +13594,6 @@ export declare interface TurnPacketMessage {
     readonly origin: TurnMessageOrigin;
 }
 
-export declare const UiAppActivityRail: z.ZodObject<{
-    section: z.ZodOptional<z.ZodEnum<{
-        primary: "primary";
-        plugins: "plugins";
-    }>>;
-    order: z.ZodOptional<z.ZodNumber>;
-    icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-        svg: z.ZodString;
-    }, z.core.$strict>]>>;
-}, z.core.$strict>;
-
-export declare type UiAppActivityRail = z.infer<typeof UiAppActivityRail>;
-
 export declare const UiAppCapabilities: z.ZodObject<{
     endpoints: z.ZodOptional<z.ZodArray<z.ZodString>>;
     host: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -13488,17 +13657,45 @@ export declare const UiAppContribution: z.ZodObject<{
             "workspace.arrange": "workspace.arrange";
         }>>>;
     }, z.core.$strict>>;
-    activityRail: z.ZodOptional<z.ZodObject<{
-        section: z.ZodOptional<z.ZodEnum<{
-            primary: "primary";
-            plugins: "plugins";
-        }>>;
-        order: z.ZodOptional<z.ZodNumber>;
-        icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
-            svg: z.ZodString;
-        }, z.core.$strict>]>>;
+}, z.core.$strict> | z.ZodPreprocess<z.ZodObject<{
+    localId: z.ZodString;
+    displayName: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    icon: z.ZodOptional<z.ZodString>;
+    runtime: z.ZodLiteral<"kay.react-app.v1">;
+    contextOnly: z.ZodOptional<z.ZodLiteral<true>>;
+    sdk: z.ZodObject<{
+        range: z.ZodString;
+    }, z.core.$strict>;
+    entrypoint: z.ZodObject<{
+        module: z.ZodString;
+        export: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    styles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    assets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    capabilities: z.ZodOptional<z.ZodObject<{
+        endpoints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        host: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "sessions.create": "sessions.create";
+            "memory.read": "memory.read";
+            "skills.read": "skills.read";
+            "automations.run": "automations.run";
+            "artifacts.read": "artifacts.read";
+            "navigation.open-session": "navigation.open-session";
+            "artifacts.preview": "artifacts.preview";
+            "cost.read": "cost.read";
+            "billing.read": "billing.read";
+            "context.read": "context.read";
+            "usage.read": "usage.read";
+            "self-improvement.read": "self-improvement.read";
+            "automations.read": "automations.read";
+            "shared-artifacts.read": "shared-artifacts.read";
+            "workspace.place-pane": "workspace.place-pane";
+            "workspace.pane-header": "workspace.pane-header";
+            "workspace.arrange": "workspace.arrange";
+        }>>>;
     }, z.core.$strict>>;
-}, z.core.$strict>;
+}, z.core.$strict>, unknown>;
 
 export declare type UiAppContribution = z.infer<typeof UiAppContribution>;
 
@@ -13518,6 +13715,22 @@ export declare const UiEventSubscriptionContribution: z.ZodObject<{
 
 export declare type UiEventSubscriptionContribution = z.infer<typeof UiEventSubscriptionContribution>;
 
+export declare const UiRailEntryContribution: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    icon: z.ZodOptional<z.ZodString>;
+    page: z.ZodString;
+    homeLocation: z.ZodOptional<z.ZodString>;
+    shortcut: z.ZodOptional<z.ZodString>;
+    order: z.ZodOptional<z.ZodNumber>;
+    section: z.ZodOptional<z.ZodEnum<{
+        primary: "primary";
+        plugins: "plugins";
+    }>>;
+}, z.core.$strict>;
+
+export declare type UiRailEntryContribution = z.infer<typeof UiRailEntryContribution>;
+
 export declare const UiSlotContribution: z.ZodObject<{
     localId: z.ZodString;
     slot: z.ZodString;
@@ -14108,4 +14321,18 @@ export declare const WhiteboardValue: z.ZodType<JsonValue, unknown, z.core.$ZodT
 
 export declare type WhiteboardValue = z.infer<typeof WhiteboardValue>;
 
+export declare const WorkflowContribution: z.ZodObject<{
+    localId: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodString;
+    everyMs: z.ZodNumber;
+    auth: z.ZodOptional<z.ZodObject<{
+        service: z.ZodString;
+        scheme: z.ZodString;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+export declare type WorkflowContribution = z.infer<typeof WorkflowContribution>;
+
 export { }

package/dist/index.js

@@ -10,6 +10,12 @@ var KAY_APP_DATA_CHANGE_MAX_BYTES = 256 * 1024;
 var KAY_APP_DATA_READ_REQUEST_MAX_BYTES = 64 * 1024;
 var KAY_APP_DATA_READ_RESULT_MAX_BYTES = 16 * 1024 * 1024;
 
+// packages/plugin-protocol/dist/ui-icon-paths.js
+function declaredUiIconPaths(manifest) {
+  const contributes = manifest.targets?.kay?.ui?.contributes;
+  return (contributes?.railEntries ?? []).flatMap((entry) => entry.icon === void 0 ? [] : [{ label: `kay.ui rail entry '${entry.id}' icon`, path: entry.icon }]);
+}
+
 // packages/plugin-protocol/dist/approval-types.js
 import { z } from "zod";
 var APPROVAL_KINDS = [
@@ -173,6 +179,7 @@ __export(common_exports, {
   JsonValue: () => JsonValue,
   KAY_EVENT_PUBLISHER_ID: () => KAY_EVENT_PUBLISHER_ID,
   KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: () => KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS,
+  KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES: () => KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES,
   KAY_PLUGIN_PROTOCOL_PACKAGE_NAME: () => KAY_PLUGIN_PROTOCOL_PACKAGE_NAME,
   KAY_PLUGIN_PROTOCOL_VERSION: () => KAY_PLUGIN_PROTOCOL_VERSION,
   KAY_PLUGIN_SDK_VERSION: () => KAY_PLUGIN_SDK_VERSION,
@@ -220,13 +227,16 @@ var JsonObject = z4.record(z4.string(), JsonValue);
 var JsonSchema = z4.record(z4.string(), JsonValue);
 
 // packages/plugin-protocol/dist/common.js
+var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.29.0";
+var KAY_PLUGIN_SDK_VERSION = "0.31.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.26.3",
   "0.27.1",
-  "0.28.0"
+  "0.28.0",
+  "0.29.0",
+  "0.30.0"
 ];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",
@@ -2715,16 +2725,17 @@ __export(contributions_exports, {
   ThemeContribution: () => ThemeContribution,
   ToolContribution: () => ToolContribution,
   ToolPermission: () => ToolPermission,
-  UiAppActivityRail: () => UiAppActivityRail,
   UiAppCapabilities: () => UiAppCapabilities,
   UiAppContribution: () => UiAppContribution,
   UiCommandContribution: () => UiCommandContribution,
   UiEventSubscriptionContribution: () => UiEventSubscriptionContribution,
+  UiRailEntryContribution: () => UiRailEntryContribution,
   UiSlotContribution: () => UiSlotContribution,
   UriModuleContribution: () => UriModuleContribution,
   UriModuleFacts: () => UriModuleFacts,
   WhiteboardTypeContribution: () => WhiteboardTypeContribution,
   WhiteboardTypeStorage: () => WhiteboardTypeStorage,
+  WorkflowContribution: () => WorkflowContribution,
   canonicalContributionSchemas: () => canonicalContributionSchemas
 });
 import { z as z12 } from "zod";
@@ -3275,6 +3286,24 @@ function createContributionsSchemas(canonical) {
     requestSchema: JsonSchema.optional(),
     responseSchema: JsonSchema.optional()
   });
+  const WorkflowContribution2 = z12.strictObject({
+    localId: LocalContributionId2,
+    name: NonEmptyString3,
+    /** Plain-text purpose, at most 280 characters. */
+    description: NonEmptyString3,
+    /** How often it runs. The automations engine enforces its scheduling floor. */
+    everyMs: z12.number().int().positive(),
+    auth: z12.strictObject({
+      /** A local ref names a service in this manifest; a dotted ref names another plugin's. */
+      service: AuthServiceReference2,
+      scheme: AuthSchemeReference2,
+      /**
+       * Scopes each account's token must hold. Omitted, the host asks for the first scope of the
+       * `background-job` grant's `allowedScopes` that the account holds.
+       */
+      scopes: z12.array(NonEmptyString3).min(1).optional()
+    }).optional()
+  });
   const McpServerUrl2 = pluginString(canonical).min(1).refine((value) => {
     let parsed;
     try {
@@ -3484,12 +3513,17 @@ function createContributionsSchemas(canonical) {
       }
     }
   });
-  const UiAppActivityRail2 = z12.strictObject({
-    section: z12.enum(["primary", "plugins"]).optional(),
+  const UiRailEntryContribution2 = z12.strictObject({
+    id: LocalContributionId2,
+    title: NonEmptyString3,
+    icon: PackageAssetPath2.optional(),
+    page: NonEmptyString3,
+    homeLocation: NonEmptyString3.optional(),
+    shortcut: NonEmptyString3.optional(),
     order: z12.number().finite().optional(),
-    icon: z12.union([NonEmptyString3, z12.strictObject({ svg: NonEmptyString3 })]).optional()
+    section: z12.enum(["primary", "plugins"]).optional()
   });
-  const UiAppContribution2 = z12.strictObject({
+  const UiAppFields = z12.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
     description: NonEmptyString3.optional(),
@@ -3501,9 +3535,17 @@ function createContributionsSchemas(canonical) {
     entrypoint: TargetEntrypoint2,
     styles: z12.array(PackageAssetPath2).optional(),
     assets: z12.array(PackageAssetPath2).optional(),
-    capabilities: UiAppCapabilities2.optional(),
-    activityRail: UiAppActivityRail2.optional()
+    capabilities: UiAppCapabilities2.optional()
   });
+  function stripRetiredUiAppFields(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+      return value;
+    }
+    const remaining = { ...value };
+    delete remaining["activityRail"];
+    return remaining;
+  }
+  const UiAppContribution2 = canonical ? UiAppFields : z12.preprocess(stripRetiredUiAppFields, UiAppFields);
   const ThemeContribution2 = z12.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
@@ -3551,6 +3593,7 @@ function createContributionsSchemas(canonical) {
     "appDataSource",
     "whiteboardType",
     "approvalType",
+    "workflow",
     "contextContributor",
     "transcriptionProvider",
     "deviceDelegation",
@@ -3594,6 +3637,7 @@ function createContributionsSchemas(canonical) {
     EntityResolverContribution: EntityResolverContribution2,
     AgentRenderContribution: AgentRenderContribution2,
     EndpointContribution: EndpointContribution2,
+    WorkflowContribution: WorkflowContribution2,
     McpServerUrl: McpServerUrl2,
     McpServerAuthMode: McpServerAuthMode2,
     McpServerContribution: McpServerContribution2,
@@ -3619,7 +3663,7 @@ function createContributionsSchemas(canonical) {
     RichViewContribution: RichViewContribution2,
     KayUiAppHostCapability: KayUiAppHostCapability2,
     UiAppCapabilities: UiAppCapabilities2,
-    UiAppActivityRail: UiAppActivityRail2,
+    UiRailEntryContribution: UiRailEntryContribution2,
     UiAppContribution: UiAppContribution2,
     ThemeContribution: ThemeContribution2,
     CommandHandler: CommandHandler2,
@@ -3627,7 +3671,7 @@ function createContributionsSchemas(canonical) {
     PluginContributionKind: PluginContributionKind2
   };
 }
-var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, SettingsPanelContribution, ResultRendererContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationContribution, RichViewContribution, KayUiAppHostCapability, UiAppCapabilities, UiAppActivityRail, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
+var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, SettingsPanelContribution, ResultRendererContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationContribution, RichViewContribution, KayUiAppHostCapability, UiAppCapabilities, UiRailEntryContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
 var canonicalContributionSchemas = createContributionsSchemas(true);
 
 // packages/plugin-protocol/dist/icon-shape.js
@@ -3701,7 +3745,7 @@ var KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS = [
 var KAY_UI_NATIVE_EVENT_ALLOWLIST = new Set(KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS);
 var RETIRED_COMPATIBILITY_KEYS = ["policy"];
 function createManifestSchemas(canonical) {
-  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, ResultRendererContribution: ResultRendererContribution2, RichViewContribution: RichViewContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, SettingsPanelContribution: SettingsPanelContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, ResultRendererContribution: ResultRendererContribution2, RichViewContribution: RichViewContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, SettingsPanelContribution: SettingsPanelContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const KayAgentTargetManifest2 = z13.strictObject({
@@ -3794,6 +3838,7 @@ function createManifestSchemas(canonical) {
       dataSources: z13.array(AppDataSourceContribution2).optional(),
       whiteboardTypes: z13.array(WhiteboardTypeContribution2).optional(),
       approvalTypes: z13.array(ApprovalTypeContribution2).optional(),
+      workflows: z13.array(WorkflowContribution2).optional(),
       eventDefinitions: z13.array(PluginEventDefinitionContribution2).optional(),
       // Default notification rules over this plugin's own `eventDefinitions`; seeded by the host
       // (see `PluginNotificationRuleContribution`).
@@ -3822,6 +3867,7 @@ function createManifestSchemas(canonical) {
       referencePresentations: z13.array(ReferencePresentationContribution2).optional(),
       views: z13.array(RichViewContribution2).optional(),
       apps: z13.array(UiAppContribution2).optional(),
+      railEntries: z13.array(UiRailEntryContribution2).optional(),
       themes: z13.array(ThemeContribution2).optional(),
       eventSubscriptions: z13.array(UiEventSubscriptionContribution2).optional(),
       dataMaterializers: z13.array(AppDataMaterializerContribution2).optional()
@@ -4374,6 +4420,35 @@ function createManifestSchemas(canonical) {
         });
       }
     }
+    reportDuplicateLocalIds(ctx, ["targets", "kay", "app", "contributes", "workflows"], manifest.targets?.kay?.app?.contributes?.workflows, "workflow");
+    for (const [index, workflow] of (manifest.targets?.kay?.app?.contributes?.workflows ?? []).entries()) {
+      const path = [
+        "targets",
+        "kay",
+        "app",
+        "contributes",
+        "workflows",
+        index
+      ];
+      if (manifest.targets?.kay?.app?.entrypoint === void 0) {
+        ctx.addIssue({
+          code: "custom",
+          path,
+          message: `workflow ${workflow.localId} needs a kay.app entrypoint to implement it`
+        });
+      }
+      const { auth } = workflow;
+      if (auth === void 0)
+        continue;
+      const granted = manifest.permissions?.byTarget["kay.app"]?.auth?.some((grant) => grant.service === auth.service && grant.operations.includes("list") && grant.operations.includes("resolve") && (grant.purposes === void 0 || grant.purposes.includes("background-job")));
+      if (granted !== true) {
+        ctx.addIssue({
+          code: "custom",
+          path: [...path, "auth", "service"],
+          message: `workflow ${workflow.localId} needs a kay.app auth grant on ${auth.service} with the list and resolve operations and the background-job purpose`
+        });
+      }
+    }
     const syntheticContributionIds = collectSyntheticContributionIds(manifest);
     for (const contribution of collectDeclaredContributionIds(manifest)) {
       if (syntheticContributionIds.has(contribution.localId)) {
@@ -4922,6 +4997,7 @@ function collectKayAppContributionIds(manifest) {
   const contributes = manifest.targets?.kay?.app?.contributes;
   const output = [];
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "approvalTypes"], contributes?.approvalTypes);
+  pushContributionIds(output, ["targets", "kay", "app", "contributes", "workflows"], contributes?.workflows);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "tools"], contributes?.tools);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "endpoints"], contributes?.endpoints);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "uriModules"], contributes?.uriModules);
@@ -4997,7 +5073,7 @@ function boundPluginDiagnosticMessage(message) {
 import { z as z14 } from "zod";
 function createResolvedContractSchemas(canonical) {
   const { PluginEventLocalId: PluginEventLocalId2 } = canonical ? canonicalPluginEventSchemas : plugin_events_exports;
-  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, UiAppActivityRail: UiAppActivityRail2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeStorage: WhiteboardTypeStorage2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeStorage: WhiteboardTypeStorage2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, GlobalContributionId: GlobalContributionId2, HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, PluginToolName: PluginToolName2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginExternalCliConnect: PluginExternalCliConnect2, PluginOAuthClientSupplier: PluginOAuthClientSupplier2 } = canonical ? canonicalManifestSchemas : manifest_exports;
   const { ResolvedPluginGrants: ResolvedPluginGrants2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
@@ -5071,6 +5147,18 @@ function createResolvedContractSchemas(canonical) {
     /** The auth service that module signs in through, whose accounts a card may send from. */
     authService: GlobalContributionId2.optional()
   });
+  const ResolvedKayAppWorkflow2 = z14.strictObject({
+    localId: LocalContributionId2,
+    globalId: GlobalContributionId2,
+    name: NonEmptyString3,
+    description: NonEmptyString3,
+    everyMs: z14.number().int().positive(),
+    auth: z14.strictObject({
+      serviceId: GlobalContributionId2,
+      schemeId: GlobalContributionId2,
+      scopes: z14.array(NonEmptyString3).min(1).optional()
+    }).optional()
+  });
   const ResolvedKayAppWhiteboardType2 = z14.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
@@ -5270,7 +5358,6 @@ function createResolvedContractSchemas(canonical) {
     globalId: GlobalContributionId2,
     displayName: NonEmptyString3,
     contextOnly: z14.literal(true).optional(),
-    activityRail: UiAppActivityRail2.optional(),
     description: NonEmptyString3.optional(),
     icon: PackageAssetPath2.optional(),
     runtime: z14.literal("kay.react-app.v1"),
@@ -5314,6 +5401,7 @@ function createResolvedContractSchemas(canonical) {
     kayAgentTools: z14.array(ResolvedKayAgentTool2).optional(),
     kayAppTools: z14.array(ResolvedKayAppTool2).optional(),
     kayAppApprovalTypes: z14.array(ResolvedKayAppApprovalType2).optional(),
+    kayAppWorkflows: z14.array(ResolvedKayAppWorkflow2).optional(),
     kayAppDataSources: z14.array(ResolvedKayAppDataSource2).optional(),
     kayAppWhiteboardTypes: z14.array(ResolvedKayAppWhiteboardType2).optional(),
     kayAppMcpServers: z14.array(ResolvedKayAppMcpServer2).optional(),
@@ -5326,6 +5414,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedKayAgentTool: ResolvedKayAgentTool2,
     ResolvedKayAppTool: ResolvedKayAppTool2,
     ResolvedKayAppApprovalType: ResolvedKayAppApprovalType2,
+    ResolvedKayAppWorkflow: ResolvedKayAppWorkflow2,
     ResolvedKayAppDataSource: ResolvedKayAppDataSource2,
     ResolvedKayAppWhiteboardType: ResolvedKayAppWhiteboardType2,
     ResolvedKayAppMcpServer: ResolvedKayAppMcpServer2,
@@ -5344,7 +5433,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedPluginContractV1: ResolvedPluginContractV12
   };
 }
-var { ResolvedKayAppApprovalType, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
+var { ResolvedKayAppApprovalType, ResolvedKayAppWorkflow, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
 var canonicalResolvedContractSchemas = createResolvedContractSchemas(true);
 function narrowestAccountSelectors() {
   return [{ kind: "active" }];
@@ -5384,6 +5473,7 @@ function collectContributionSources(manifest) {
   pushAll(output, "kay.app", "appDataSource", app?.dataSources);
   pushAll(output, "kay.app", "whiteboardType", app?.whiteboardTypes);
   pushAll(output, "kay.app", "approvalType", app?.approvalTypes);
+  pushAll(output, "kay.app", "workflow", app?.workflows);
   pushAll(output, "kay.app", "command", app?.commands);
   pushAll(output, "kay.app", "eventDefinition", app?.eventDefinitions);
   pushAll(output, "kay.app", "eventSubscription", app?.eventSubscriptions);
@@ -5662,6 +5752,17 @@ function resolveKayPluginContractV1(manifest) {
     globalId: resolveGlobalContributionId(namespace, tool.localId),
     toolName: tool.toolName
   }));
+  const kayAppWorkflows = manifest.targets?.kay?.app?.contributes?.workflows?.map(({ auth, ...workflow }) => ({
+    ...workflow,
+    globalId: resolveGlobalContributionId(namespace, workflow.localId),
+    ...auth === void 0 ? {} : {
+      auth: {
+        serviceId: isQualifiedAuthServiceRef(auth.service) ? auth.service : resolveGlobalContributionId(namespace, auth.service),
+        schemeId: isQualifiedAuthSchemeRef(auth.scheme) ? auth.scheme : resolveGlobalContributionId(namespace, auth.scheme),
+        ...auth.scopes === void 0 ? {} : { scopes: auth.scopes }
+      }
+    }
+  }));
   const kayAppDataSources = manifest.targets?.kay?.app?.contributes?.dataSources?.map((source) => ({
     localId: source.localId,
     globalId: resolveGlobalContributionId(namespace, source.localId),
@@ -5771,7 +5872,6 @@ function resolveKayPluginContractV1(manifest) {
     localId: app.localId,
     globalId: resolveGlobalContributionId(namespace, app.localId),
     ...app.contextOnly === void 0 ? {} : { contextOnly: app.contextOnly },
-    ...app.activityRail === void 0 ? {} : { activityRail: app.activityRail },
     displayName: app.displayName,
     ...app.description === void 0 ? {} : { description: app.description },
     ...app.icon === void 0 ? {} : { icon: app.icon },
@@ -5812,6 +5912,7 @@ function resolveKayPluginContractV1(manifest) {
     ...kayAgentTools && kayAgentTools.length > 0 ? { kayAgentTools } : {},
     ...kayAppTools && kayAppTools.length > 0 ? { kayAppTools } : {},
     ...kayAppApprovalTypes && kayAppApprovalTypes.length > 0 ? { kayAppApprovalTypes } : {},
+    ...kayAppWorkflows && kayAppWorkflows.length > 0 ? { kayAppWorkflows } : {},
     ...kayAppDataSources && kayAppDataSources.length > 0 ? { kayAppDataSources } : {},
     ...kayAppWhiteboardTypes && kayAppWhiteboardTypes.length > 0 ? { kayAppWhiteboardTypes } : {},
     ...kayAppMcpServers.length > 0 ? { kayAppMcpServers } : {},
@@ -5839,7 +5940,6 @@ function uriModuleFacts({ localId: _localId, schemes: _schemes, displayName: _di
 
 // packages/plugin-protocol/dist/plugin-directory-verdict.js
 var KAY_PLUGIN_MANIFEST_FILENAME = "kay-plugin.json";
-var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 64 * 1024;
 var RESERVED_DIRECTORY_PLUGIN_ID_PREFIXES = ["herd.", "kay."];
 async function judgeKayPluginDirectory(input) {
   const { tree, root, dir, host } = input;
@@ -6066,6 +6166,7 @@ function referencedPaths(manifest) {
       refs.push({ label: `kay.ui app '${app.localId}' icon`, path: app.icon });
     }
   }
+  refs.push(...declaredUiIconPaths(manifest));
   return refs;
 }
 function firstIssue(issues) {
@@ -6698,6 +6799,7 @@ export {
   ResolvedKayAppMcpServer,
   ResolvedKayAppTool,
   ResolvedKayAppWhiteboardType,
+  ResolvedKayAppWorkflow,
   ResolvedKayUiApp,
   ResolvedKayUiAppEndpointCapability,
   ResolvedPluginAuthScheme,
@@ -6740,11 +6842,11 @@ export {
   ThemeContribution,
   ToolContribution,
   ToolPermission,
-  UiAppActivityRail,
   UiAppCapabilities,
   UiAppContribution,
   UiCommandContribution,
   UiEventSubscriptionContribution,
+  UiRailEntryContribution,
   UiSlotContribution,
   UriModuleContribution,
   UriScheme,
@@ -6764,6 +6866,7 @@ export {
   WhiteboardTypeInfo,
   WhiteboardTypeStorage,
   WhiteboardValue,
+  WorkflowContribution,
   approvalKindSchema,
   boundPluginDiagnosticMessage,
   captureArtifactProvenance,
@@ -6772,6 +6875,7 @@ export {
   compareClaims,
   compareSemver,
   configSectionKeysForManifest,
+  declaredUiIconPaths,
   dedupeClaims,
   deriveDirectoryPluginToolName,
   finalizeArtifactProvenanceEnvelope,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.29.0",
+  "version": "0.31.0",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",