@yaklabs-ai/plugin-protocol 0.44.0 → 0.45.0

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.44.0"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.45.0"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.44.0",
+  "version": "0.45.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [],

package/dist/index.d.ts

@@ -1669,6 +1669,7 @@ declare namespace authoringContributionSchemas {
         EntityResolverContribution,
         AgentRenderContribution,
         EndpointContribution,
+        PluginCardContribution,
         WorkflowContribution,
         McpServerUrl,
         McpServerAuthMode,
@@ -1706,7 +1707,8 @@ declare namespace authoringContributionSchemas {
         CommandHandler,
         CommandContribution,
         PluginContributionKind,
-        canonicalContributionSchemas
+        canonicalContributionSchemas,
+        PluginCardResult
     }
 }
 
@@ -2541,6 +2543,14 @@ declare const canonicalContributionSchemas: {
         }, z.core.$strict>>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>;
+    PluginCardContribution: z.ZodObject<{
+        localId: z.ZodString;
+        description: z.ZodString;
+        inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+        readEndpoint: z.ZodString;
+        submitEndpoint: z.ZodString;
+        authService: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
     WorkflowContribution: z.ZodObject<{
         localId: z.ZodString;
         name: z.ZodString;
@@ -3048,6 +3058,7 @@ declare const canonicalContributionSchemas: {
         interactionDriver: "interactionDriver";
         entityResolver: "entityResolver";
         agentRenderer: "agentRenderer";
+        pluginCard: "pluginCard";
         eventDefinition: "eventDefinition";
         eventSubscription: "eventSubscription";
         appDataSource: "appDataSource";
@@ -4315,8 +4326,10 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  *
  * 0.44.0 adds `words.kinds` to a reference presentation (#15905): an ordered list of address patterns
  * and the kind each one names. Additive: a plugin that lists them declares ^0.44.0.
+ *
+ * 0.45.0 adds declared plugin cards and app.implementCard for their read/submit endpoints.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.44.0";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.45.0";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -4671,6 +4684,14 @@ export declare const KayAppTargetManifest: z.ZodObject<{
             }, z.core.$strict>>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
+        cards: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            localId: z.ZodString;
+            description: z.ZodString;
+            inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+            readEndpoint: z.ZodString;
+            submitEndpoint: z.ZodString;
+            authService: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
         uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
             description: z.ZodExactOptional<z.ZodString>;
             localId: z.ZodString;
@@ -5464,6 +5485,14 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                         }, z.core.$strict>>;
                         timeoutMs: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strict>>>;
+                    cards: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        localId: z.ZodString;
+                        description: z.ZodString;
+                        inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+                        readEndpoint: z.ZodString;
+                        submitEndpoint: z.ZodString;
+                        authService: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>;
                     uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         description: z.ZodExactOptional<z.ZodString>;
                         localId: z.ZodString;
@@ -9715,6 +9744,26 @@ export declare type PluginCapabilityRefusalV1 = z.infer<typeof PluginCapabilityR
 
 export declare type PluginCapabilitySlug = (typeof PLUGIN_CAPABILITY_SLUGS)[number];
 
+export declare const PluginCardContribution: z.ZodObject<{
+    localId: z.ZodString;
+    description: z.ZodString;
+    inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+    readEndpoint: z.ZodString;
+    submitEndpoint: z.ZodString;
+    authService: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+
+export declare type PluginCardContribution = z.infer<typeof PluginCardContribution>;
+
+export declare type PluginCardResult<T> = {
+    readonly ok: true;
+    readonly data: T;
+} | {
+    readonly ok: false;
+    readonly reason: "needs-auth" | "failed";
+    readonly message: string;
+};
+
 export declare const PluginCompatibilityManifest: z.ZodObject<{
     supportedProtocols: z.ZodOptional<z.ZodArray<z.ZodLiteral<"kay.plugin.v1">>>;
     minKayVersion: z.ZodOptional<z.ZodString>;
@@ -9779,6 +9828,7 @@ export declare const PluginContributionKind: z.ZodEnum<{
     interactionDriver: "interactionDriver";
     entityResolver: "entityResolver";
     agentRenderer: "agentRenderer";
+    pluginCard: "pluginCard";
     eventDefinition: "eventDefinition";
     eventSubscription: "eventSubscription";
     appDataSource: "appDataSource";
@@ -12002,6 +12052,25 @@ export declare const ResolvedPluginAuthService: z.ZodObject<{
 
 export declare type ResolvedPluginAuthService = z.infer<typeof ResolvedPluginAuthService>;
 
+export declare const ResolvedPluginCard: z.ZodObject<{
+    localId: z.ZodString;
+    globalId: z.ZodString;
+    pluginId: z.ZodString;
+    description: z.ZodString;
+    inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+    readEndpoint: z.ZodObject<{
+        localId: z.ZodString;
+        globalId: z.ZodString;
+    }, z.core.$strict>;
+    submitEndpoint: z.ZodObject<{
+        localId: z.ZodString;
+        globalId: z.ZodString;
+    }, z.core.$strict>;
+    authService: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+
+export declare type ResolvedPluginCard = z.infer<typeof ResolvedPluginCard>;
+
 export declare const ResolvedPluginContractV1: z.ZodObject<{
     protocol: z.ZodLiteral<"kay.plugin.v1">;
     pluginId: z.ZodString;
@@ -12030,6 +12099,7 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             interactionDriver: "interactionDriver";
             entityResolver: "entityResolver";
             agentRenderer: "agentRenderer";
+            pluginCard: "pluginCard";
             eventDefinition: "eventDefinition";
             eventSubscription: "eventSubscription";
             appDataSource: "appDataSource";
@@ -12827,6 +12897,22 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>>;
+    kayAppCards: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        localId: z.ZodString;
+        globalId: z.ZodString;
+        pluginId: z.ZodString;
+        description: z.ZodString;
+        inputs: z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>;
+        readEndpoint: z.ZodObject<{
+            localId: z.ZodString;
+            globalId: z.ZodString;
+        }, z.core.$strict>;
+        submitEndpoint: z.ZodObject<{
+            localId: z.ZodString;
+            globalId: z.ZodString;
+        }, z.core.$strict>;
+        authService: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
     kayAppDataSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
         localId: z.ZodString;
         globalId: z.ZodString;
@@ -13066,6 +13152,7 @@ export declare const ResolvedPluginContributionId: z.ZodObject<{
         interactionDriver: "interactionDriver";
         entityResolver: "entityResolver";
         agentRenderer: "agentRenderer";
+        pluginCard: "pluginCard";
         eventDefinition: "eventDefinition";
         eventSubscription: "eventSubscription";
         appDataSource: "appDataSource";

package/dist/index.js

@@ -254,11 +254,12 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.44.0";
+var KAY_PLUGIN_SDK_VERSION = "0.45.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.42.0",
   "0.42.1",
-  "0.43.0"
+  "0.43.0",
+  "0.44.0"
 ];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",
@@ -2754,6 +2755,7 @@ __export(contributions_exports, {
   McpServerContributions: () => McpServerContributions,
   McpServerUrl: () => McpServerUrl,
   PLUGIN_NOTIFICATION_RULE_HOST_KEYS: () => PLUGIN_NOTIFICATION_RULE_HOST_KEYS,
+  PluginCardContribution: () => PluginCardContribution,
   PluginContributionKind: () => PluginContributionKind,
   PluginEventDefinitionContribution: () => PluginEventDefinitionContribution,
   PluginNotificationRuleContribution: () => PluginNotificationRuleContribution,
@@ -3636,6 +3638,14 @@ function createContributionsSchemas(canonical) {
     localId: LocalContributionId2,
     resultKinds: z12.array(NonEmptyString3).min(1)
   });
+  const PluginCardContribution2 = z12.strictObject({
+    localId: LocalContributionId2,
+    description: NonEmptyString3,
+    inputs: JsonSchema,
+    readEndpoint: LocalContributionId2,
+    submitEndpoint: LocalContributionId2,
+    authService: AuthServiceReference2.optional()
+  });
   const EndpointContribution2 = z12.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
@@ -4138,6 +4148,7 @@ function createContributionsSchemas(canonical) {
     "entityResolver",
     "agentRenderer",
     "endpoint",
+    "pluginCard",
     "command",
     "eventDefinition",
     "eventSubscription",
@@ -4188,6 +4199,7 @@ function createContributionsSchemas(canonical) {
     EntityResolverContribution: EntityResolverContribution2,
     AgentRenderContribution: AgentRenderContribution2,
     EndpointContribution: EndpointContribution2,
+    PluginCardContribution: PluginCardContribution2,
     WorkflowContribution: WorkflowContribution2,
     McpServerUrl: McpServerUrl2,
     McpServerAuthMode: McpServerAuthMode2,
@@ -4227,7 +4239,7 @@ function createContributionsSchemas(canonical) {
     PluginContributionKind: PluginContributionKind2
   };
 }
-var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, SettingsPanelContribution, ResultRendererContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationWords, ReferencePresentationContribution, RichViewContribution, KayUiAppHostCapability, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
+var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, PluginCardContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, SettingsPanelContribution, ResultRendererContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationWords, ReferencePresentationContribution, RichViewContribution, KayUiAppHostCapability, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
 var canonicalContributionSchemas = createContributionsSchemas(true);
 
 // packages/plugin-protocol/dist/icon-shape.js
@@ -4301,7 +4313,7 @@ var KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS = [
 var KAY_UI_NATIVE_EVENT_ALLOWLIST = new Set(KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS);
 var RETIRED_COMPATIBILITY_KEYS = ["policy"];
 function createManifestSchemas(canonical) {
-  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, ResultRendererContribution: ResultRendererContribution2, RichViewContribution: RichViewContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, SettingsPanelContribution: SettingsPanelContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, ResultRendererContribution: ResultRendererContribution2, RichViewContribution: RichViewContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, SettingsPanelContribution: SettingsPanelContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const KayAgentTargetManifest2 = z13.strictObject({
@@ -4390,6 +4402,7 @@ function createManifestSchemas(canonical) {
       // namespace with them (enforced by the manifest-level refinement below).
       tools: z13.array(ToolContribution2).optional(),
       endpoints: z13.array(EndpointContribution2).optional(),
+      cards: z13.array(PluginCardContribution2).optional(),
       uriModules: z13.array(AppUriModuleContribution2).optional(),
       dataSources: z13.array(AppDataSourceContribution2).optional(),
       whiteboardTypes: z13.array(WhiteboardTypeContribution2).optional(),
@@ -5120,6 +5133,39 @@ function createManifestSchemas(canonical) {
         message: `signal event ${definition.localId} must use a URI scheme one of this plugin's own URI modules serves; '${definition.uriScheme}' is not among them`
       });
     }
+    for (const [index, card] of (manifest.targets?.kay?.app?.contributes?.cards ?? []).entries()) {
+      const path = ["targets", "kay", "app", "contributes", "cards", index];
+      if (manifest.targets?.kay?.app?.entrypoint === void 0) {
+        ctx.addIssue({
+          code: "custom",
+          path,
+          message: `plugin card ${card.localId} needs a kay.app entrypoint to implement it`
+        });
+      }
+      for (const field of ["readEndpoint", "submitEndpoint"]) {
+        if (!endpointIds.has(card[field])) {
+          ctx.addIssue({
+            code: "custom",
+            path: [...path, field],
+            message: `plugin card ${card.localId} references unknown endpoint ${card[field]}`
+          });
+        }
+      }
+      if (card.readEndpoint === card.submitEndpoint) {
+        ctx.addIssue({
+          code: "custom",
+          path: [...path, "submitEndpoint"],
+          message: `plugin card ${card.localId} needs distinct read and submit endpoints`
+        });
+      }
+      if (card.authService !== void 0 && !isQualifiedAuthServiceRef(card.authService) && !authServices.has(card.authService)) {
+        ctx.addIssue({
+          code: "custom",
+          path: [...path, "authService"],
+          message: `plugin card ${card.localId} references unknown auth service ${card.authService}`
+        });
+      }
+    }
     reportDuplicateLocalIds(ctx, ["targets", "kay", "app", "contributes", "workflows"], manifest.targets?.kay?.app?.contributes?.workflows, "workflow");
     for (const [index, workflow] of (manifest.targets?.kay?.app?.contributes?.workflows ?? []).entries()) {
       const path = [
@@ -5744,6 +5790,7 @@ function collectKayAppContributionIds(manifest) {
   const contributes = manifest.targets?.kay?.app?.contributes;
   const output = [];
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "approvalTypes"], contributes?.approvalTypes);
+  pushContributionIds(output, ["targets", "kay", "app", "contributes", "cards"], contributes?.cards);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "workflows"], contributes?.workflows);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "tools"], contributes?.tools);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "endpoints"], contributes?.endpoints);
@@ -5905,6 +5952,22 @@ function createResolvedContractSchemas(canonical) {
     /** The auth service that module signs in through, whose accounts a card may send from. */
     authService: GlobalContributionId2.optional()
   });
+  const ResolvedPluginCard2 = z14.strictObject({
+    localId: LocalContributionId2,
+    globalId: GlobalContributionId2,
+    pluginId: PluginId2,
+    description: NonEmptyString3,
+    inputs: JsonSchema,
+    readEndpoint: z14.strictObject({
+      localId: LocalContributionId2,
+      globalId: GlobalContributionId2
+    }),
+    submitEndpoint: z14.strictObject({
+      localId: LocalContributionId2,
+      globalId: GlobalContributionId2
+    }),
+    authService: GlobalContributionId2.optional()
+  });
   const ResolvedKayAppWorkflow2 = z14.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
@@ -6143,7 +6206,7 @@ function createResolvedContractSchemas(canonical) {
     contributions: z14.array(ResolvedPluginContributionId2),
     // The deduplicated set of qualified (dotted) external auth-service ids this
     // plugin references, from agent uriModule, tool and cliBinding
-    // `authService` refs, and auth-grant `service` refs. Always present - a plugin
+    // `authService` refs, card sign-in refs, and auth-grant `service` refs. Always present - a plugin
     // that only references its own local services carries an empty array. This
     // is a recorded dependency, not a resolution: there is no runtime plugin
     // loader in v1, so nothing here verifies the reference resolves within a
@@ -6168,6 +6231,7 @@ function createResolvedContractSchemas(canonical) {
     kayAppTools: z14.array(ResolvedKayAppTool2).optional(),
     kayAppApprovalTypes: z14.array(ResolvedKayAppApprovalType2).optional(),
     kayAppWorkflows: z14.array(ResolvedKayAppWorkflow2).optional(),
+    kayAppCards: z14.array(ResolvedPluginCard2).optional(),
     kayAppDataSources: z14.array(ResolvedKayAppDataSource2).optional(),
     kayAppWhiteboardTypes: z14.array(ResolvedKayAppWhiteboardType2).optional(),
     kayAppMcpServers: z14.array(ResolvedKayAppMcpServer2).optional(),
@@ -6181,6 +6245,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedKayAppTool: ResolvedKayAppTool2,
     ResolvedKayAppApprovalType: ResolvedKayAppApprovalType2,
     ResolvedKayAppWorkflow: ResolvedKayAppWorkflow2,
+    ResolvedPluginCard: ResolvedPluginCard2,
     ResolvedKayAppDataSource: ResolvedKayAppDataSource2,
     ResolvedKayAppWhiteboardType: ResolvedKayAppWhiteboardType2,
     ResolvedKayAppMcpServer: ResolvedKayAppMcpServer2,
@@ -6199,7 +6264,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedPluginContractV1: ResolvedPluginContractV12
   };
 }
-var { ResolvedKayAppApprovalType, ResolvedKayAppWorkflow, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
+var { ResolvedKayAppApprovalType, ResolvedKayAppWorkflow, ResolvedPluginCard, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
 var canonicalResolvedContractSchemas = createResolvedContractSchemas(true);
 function narrowestAccountSelectors() {
   return [{ kind: "active" }];
@@ -6235,6 +6300,7 @@ function collectContributionSources(manifest) {
   const app = manifest.targets?.kay?.app?.contributes;
   pushAll(output, "kay.app", "tool", app?.tools);
   pushAll(output, "kay.app", "endpoint", app?.endpoints);
+  pushAll(output, "kay.app", "pluginCard", app?.cards);
   pushAll(output, "kay.app", "uriModule", app?.uriModules);
   pushAll(output, "kay.app", "appDataSource", app?.dataSources);
   pushAll(output, "kay.app", "whiteboardType", app?.whiteboardTypes);
@@ -6339,6 +6405,9 @@ function collectConsumedAuthServiceIds(manifest) {
   for (const binding of manifest.targets?.kay?.agent?.contributes?.cliBindings ?? []) {
     add(binding.authService);
   }
+  for (const card of manifest.targets?.kay?.app?.contributes?.cards ?? []) {
+    add(card.authService);
+  }
   for (const target of KAY_PLUGIN_TARGET_NAMES) {
     for (const grant of manifest.permissions?.byTarget[target]?.auth ?? []) {
       add(grant.service);
@@ -6521,6 +6590,24 @@ function resolveKayPluginContractV1(manifest) {
     globalId: resolveGlobalContributionId(namespace, tool.localId),
     toolName: tool.toolName
   }));
+  const kayAppCards = manifest.targets?.kay?.app?.contributes?.cards?.map((card) => ({
+    localId: card.localId,
+    globalId: resolveGlobalContributionId(namespace, card.localId),
+    pluginId: manifest.id,
+    description: card.description,
+    inputs: card.inputs,
+    readEndpoint: {
+      localId: card.readEndpoint,
+      globalId: resolveGlobalContributionId(namespace, card.readEndpoint)
+    },
+    submitEndpoint: {
+      localId: card.submitEndpoint,
+      globalId: resolveGlobalContributionId(namespace, card.submitEndpoint)
+    },
+    ...card.authService === void 0 ? {} : {
+      authService: isQualifiedAuthServiceRef(card.authService) ? card.authService : resolveGlobalContributionId(namespace, card.authService)
+    }
+  }));
   const kayAppWorkflows = manifest.targets?.kay?.app?.contributes?.workflows?.map(({ auth, ...workflow }) => ({
     ...workflow,
     globalId: resolveGlobalContributionId(namespace, workflow.localId),
@@ -6689,6 +6776,7 @@ function resolveKayPluginContractV1(manifest) {
     ...kayAgentGitHostClaims.length > 0 ? { kayAgentGitHostClaims } : {},
     ...kayAgentTools && kayAgentTools.length > 0 ? { kayAgentTools } : {},
     ...kayAppTools && kayAppTools.length > 0 ? { kayAppTools } : {},
+    ...kayAppCards && kayAppCards.length > 0 ? { kayAppCards } : {},
     ...kayAppApprovalTypes && kayAppApprovalTypes.length > 0 ? { kayAppApprovalTypes } : {},
     ...kayAppWorkflows && kayAppWorkflows.length > 0 ? { kayAppWorkflows } : {},
     ...kayAppDataSources && kayAppDataSources.length > 0 ? { kayAppDataSources } : {},
@@ -7616,6 +7704,7 @@ export {
   PluginCapabilityRefusalCode,
   PluginCapabilityRefusalLayer,
   PluginCapabilityRefusalV1,
+  PluginCardContribution,
   PluginCompatibilityManifest,
   PluginConfigManifest,
   PluginConfigScope,
@@ -7684,6 +7773,7 @@ export {
   ResolvedKayUiAppEndpointCapability,
   ResolvedPluginAuthScheme,
   ResolvedPluginAuthService,
+  ResolvedPluginCard,
   ResolvedPluginContractV1,
   ResolvedPluginContributionId,
   ResolvedPluginGrants,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.44.0",
+  "version": "0.45.0",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",