@yaklabs-ai/plugin-protocol 0.45.0 → 0.47.0

package/dist/index.js

@@ -36,7 +36,13 @@ function declaredUiIconPaths(manifest) {
         label: `kay.ui command '${command.localId}' icon`,
         path: command.icon
       }
-    ])
+    ]),
+    ...(contributes?.referencePresentations ?? []).flatMap((presentation) => (presentation.claims ?? []).flatMap((claim) => claim.brandIcon === void 0 ? [] : [
+      {
+        label: `kay.ui reference presentation '${presentation.localId}' brand icon`,
+        path: claim.brandIcon
+      }
+    ]))
   ];
 }
 
@@ -254,7 +260,7 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.45.0";
+var KAY_PLUGIN_SDK_VERSION = "0.47.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.42.0",
   "0.42.1",
@@ -379,6 +385,13 @@ function refineWebSessionScopeConfined(webSession, ctx) {
       message: "probe.url host must fall within a declared cookie domain"
     });
   }
+  if (webSession.signInFirst !== void 0 && !confined(webSession.signInFirst)) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["signInFirst"],
+      message: "signInFirst host must fall within a declared cookie domain"
+    });
+  }
 }
 
 // packages/plugin-protocol/dist/app-data-read.js
@@ -2762,6 +2775,7 @@ __export(contributions_exports, {
   PluginProductEventContribution: () => PluginProductEventContribution,
   PluginSkillSourceDeclaration: () => PluginSkillSourceDeclaration,
   ReferenceOpenBehavior: () => ReferenceOpenBehavior,
+  ReferencePresentationAccountLinks: () => ReferencePresentationAccountLinks,
   ReferencePresentationAddress: () => ReferencePresentationAddress,
   ReferencePresentationContribution: () => ReferencePresentationContribution,
   ReferencePresentationTooltip: () => ReferencePresentationTooltip,
@@ -2771,11 +2785,8 @@ __export(contributions_exports, {
   ReferencePresentationVariants: () => ReferencePresentationVariants,
   ReferencePresentationWords: () => ReferencePresentationWords,
   ResourceContribution: () => ResourceContribution,
-  ResultRendererContribution: () => ResultRendererContribution,
-  RichViewContribution: () => RichViewContribution,
   SearchProviderContribution: () => SearchProviderContribution,
   SessionReaderContribution: () => SessionReaderContribution,
-  SettingsPanelContribution: () => SettingsPanelContribution,
   SkillContribution: () => SkillContribution,
   ThemeContribution: () => ThemeContribution,
   ToolContribution: () => ToolContribution,
@@ -2793,7 +2804,9 @@ __export(contributions_exports, {
   WhiteboardTypeContribution: () => WhiteboardTypeContribution,
   WhiteboardTypeStorage: () => WhiteboardTypeStorage,
   WorkflowContribution: () => WorkflowContribution,
-  canonicalContributionSchemas: () => canonicalContributionSchemas
+  canonicalContributionSchemas: () => canonicalContributionSchemas,
+  isUiAppSourceModule: () => isUiAppSourceModule,
+  uiAppSourceStylePath: () => uiAppSourceStylePath
 });
 import { z as z12 } from "zod";
 
@@ -2950,7 +2963,21 @@ function pluginSignalPayloadJsonSchema() {
 }
 
 // packages/plugin-protocol/dist/where-expression.js
-var TOKEN = /\s*(?:(\|\||&&|==|!=|!|\(|\))|'([^']*)'|"([^"]*)"|([A-Za-z][A-Za-z0-9]*(?:\.[A-Za-z][A-Za-z0-9]*)*))/y;
+var NUMBER_SOURCE = String.raw`-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?`;
+var SEGMENT_SOURCE = "[A-Za-z0-9_][A-Za-z0-9_-]*";
+var TOKEN = new RegExp(String.raw`\s*(?:(\|\||&&|==|!=|!|\(|\))` + String.raw`|'((?:[^'\\]|\\[\s\S])*)'|"((?:[^"\\]|\\[\s\S])*)"` + // A number that runs on into a key's characters is a key: `1.5.2`, `1-a`.
+String.raw`|(${NUMBER_SOURCE})(?![A-Za-z0-9_.-])` + `|(${SEGMENT_SOURCE}(?:\\.${SEGMENT_SOURCE})*))`, "y");
+var WHOLE_NUMBER = new RegExp(`^${NUMBER_SOURCE}$`);
+var WHOLE_KEY = new RegExp(`^${SEGMENT_SOURCE}(?:\\.${SEGMENT_SOURCE})*$`);
+function unescapeString(text) {
+  return text.replace(/\\([\s\S])/g, (_, character) => {
+    if (character === "\\" || character === "'" || character === '"') {
+      return character;
+    }
+    throw new Error(`unknown escape '\\${character}'; a string can escape only \\, ' and "`);
+  });
+}
+var MAX_TOKENS = 2e3;
 function tokenize(source) {
   const tokens = [];
   TOKEN.lastIndex = 0;
@@ -2960,13 +2987,21 @@ function tokenize(source) {
     if (match === null) {
       throw new Error(`unexpected text at '${source.slice(start).trim()}'`);
     }
-    const [, operator, single, double, word] = match;
+    if (tokens.length === MAX_TOKENS) {
+      throw new Error(`the expression has more than ${MAX_TOKENS} parts`);
+    }
+    const [, operator, single, double, number, word] = match;
     if (operator !== void 0)
       tokens.push({ kind: "operator", text: operator });
+    else if (number !== void 0)
+      tokens.push({ kind: "number", text: number });
     else if (word !== void 0)
       tokens.push({ kind: "word", text: word });
     else
-      tokens.push({ kind: "string", text: single ?? double ?? "" });
+      tokens.push({
+        kind: "string",
+        text: unescapeString(single ?? double ?? "")
+      });
   }
   return tokens;
 }
@@ -3018,6 +3053,14 @@ function parseTokens(tokens, keyTypes) {
   };
   const parseKeyAtom = (key) => {
     const keyType = keyTypes?.[key];
+    const next = tokens[position];
+    if (next?.kind === "word" && next.text === "contains") {
+      if (keyTypes !== void 0) {
+        throw new Error(`'${key}' is not a list; compare it with == or !=`);
+      }
+      position += 1;
+      return { kind: "contains", key, value: parseLiteral("contains") };
+    }
     const negated = takeOperator("!=");
     if (!negated && !takeOperator("==")) {
       if (keyType === "string") {
@@ -3025,22 +3068,29 @@ function parseTokens(tokens, keyTypes) {
       }
       return { kind: "key", key };
     }
-    const value = parseLiteral();
+    const value = parseLiteral("== or !=");
     if (keyType !== void 0 && typeof value !== keyType) {
       throw new Error(`'${key}' compares to a ${keyType}`);
     }
     return { kind: "equals", key, value, negated };
   };
-  const parseLiteral = () => {
+  const parseLiteral = (after) => {
     const token = tokens[position];
     position += 1;
     if (token?.kind === "string")
       return token.text;
+    if (token?.kind === "number") {
+      const value = Number(token.text);
+      if (!Number.isFinite(value)) {
+        throw new Error(`the number ${token.text} is too large`);
+      }
+      return value;
+    }
     if (token?.kind === "word" && token.text === "true")
       return true;
     if (token?.kind === "word" && token.text === "false")
       return false;
-    throw new Error("expected a string, true or false after == or !=");
+    throw new Error(`expected a string, number, true or false after ${after}`);
   };
   const where = parseOr();
   const extra = tokens[position];
@@ -3055,6 +3105,80 @@ function parseWhere(source, keyTypes) {
     return { ok: false, message: error.message };
   }
 }
+function whereKeyUses(where) {
+  switch (where.kind) {
+    case "literal":
+      return [];
+    case "key":
+      return [{ key: where.key, use: "bare" }];
+    case "equals":
+      return [{ key: where.key, use: "compared" }];
+    case "contains":
+      return [{ key: where.key, use: "contained" }];
+    case "not":
+      return whereKeyUses(where.operand);
+    case "and":
+    case "or":
+      return [...whereKeyUses(where.left), ...whereKeyUses(where.right)];
+  }
+}
+function formatWhereLiteral(value) {
+  return typeof value === "string" ? `'${value.replace(/[\\']/g, "\\$&")}'` : String(value);
+}
+function whereClausesAsExpression(clauses, looksInsideLists = () => false) {
+  if (!Array.isArray(clauses) || clauses.length === 0)
+    return void 0;
+  const written = [];
+  for (const clause of clauses) {
+    if (typeof clause !== "object" || clause === null)
+      return void 0;
+    const { path, equals } = clause;
+    if (Object.keys(clause).length !== 2 || typeof path !== "string" || !WHOLE_KEY.test(path) || !(typeof equals === "string" || typeof equals === "boolean" || typeof equals === "number" && Number.isFinite(equals))) {
+      return void 0;
+    }
+    if (path === "true" || path === "false" || WHOLE_NUMBER.test(path)) {
+      written.push("false");
+      continue;
+    }
+    const literal = formatWhereLiteral(equals);
+    written.push(looksInsideLists(path) ? `(${path} == ${literal} || ${path} contains ${literal})` : `${path} == ${literal}`);
+  }
+  return written.join(" && ");
+}
+function whereNotAStringMessage(value) {
+  const expression = whereClausesAsExpression(value);
+  if (expression !== void 0) {
+    return `where is now an expression, not a list of {path, equals}: write \`${expression}\`, and use \`contains\` to look inside a list`;
+  }
+  return Array.isArray(value) ? "where is now an expression, not a list of {path, equals}, for example `payload.status == 'open' && payload.labels contains 'urgent'`" : "where must be an expression string";
+}
+var WHERE_MAX_BYTES = 256 * 1024;
+function whereProblem(value) {
+  if (typeof value !== "string")
+    return whereNotAStringMessage(value);
+  if (new TextEncoder().encode(value).length > WHERE_MAX_BYTES) {
+    return `where must be at most ${WHERE_MAX_BYTES} bytes of UTF-8`;
+  }
+  const parsed = parseWhere(value);
+  return parsed.ok ? void 0 : `where is not a valid expression: ${parsed.message}`;
+}
+var MAX_EVENT_KEY_BYTES = 256;
+var MAX_EVENT_KEY_SEGMENTS = 10;
+function eventWhereProblem(value) {
+  const problem = whereProblem(value);
+  if (problem !== void 0)
+    return problem;
+  const parsed = parseWhere(value);
+  if (!parsed.ok)
+    return void 0;
+  for (const { key } of whereKeyUses(parsed.where)) {
+    const segments = key.split(".");
+    if (new TextEncoder().encode(key).length > MAX_EVENT_KEY_BYTES || segments.length > MAX_EVENT_KEY_SEGMENTS || segments.some((segment) => !/^[a-zA-Z_]/.test(segment) || ["__proto__", "prototype", "constructor"].includes(segment))) {
+      return `where key '${key}' must be a safe dot path of at most ${MAX_EVENT_KEY_SEGMENTS} identifier segments and ${MAX_EVENT_KEY_BYTES} bytes`;
+    }
+  }
+  return void 0;
+}
 function resolve(where, read) {
   switch (where.kind) {
     case "literal":
@@ -3069,6 +3193,12 @@ function resolve(where, read) {
         return void 0;
       return value === where.value !== where.negated;
     }
+    case "contains": {
+      const value = read(where.key);
+      if (value === void 0)
+        return void 0;
+      return Array.isArray(value) && value.includes(where.value);
+    }
     case "not": {
       const operand = resolve(where.operand, read);
       return operand === void 0 ? void 0 : !operand;
@@ -3115,6 +3245,15 @@ function declarationsOfKind(plugins, kind) {
 function declaredReferencePresentations(plugins) {
   return plugins.flatMap((plugin) => (plugin.contributes["referencePresentations"] ?? []).map((declaration) => ({ plugin, declaration })));
 }
+function declaredLocalAppSchemes(plugins) {
+  return new Set(declaredReferencePresentations(plugins).flatMap(({ declaration }) => declaration.open?.kind === "local-app" ? declaration.schemes ?? [] : []));
+}
+function isDeclaredLocalAppLink(url, plugins) {
+  if (!URL.canParse(url))
+    return false;
+  const scheme = new URL(url).protocol.slice(0, -1).toLowerCase();
+  return declaredReferencePresentations(plugins).some(({ declaration }) => declaration.open?.kind === "local-app" && declaration.open.schemes.includes(scheme));
+}
 function declaredCommandId(pluginId, localId) {
   return `${pluginId}/${localId}`;
 }
@@ -3425,14 +3564,19 @@ function createContributionsSchemas(canonical) {
     // The module's code defines `describeOperation`, the approval card's facts for a call. The
     // daemon reads it here because it may hold only the manifest (a plugin that runs in the
     // plugin host), and the host refuses a module whose code disagrees.
-    describesOperations: z12.literal(true).optional()
+    describesOperations: z12.literal(true).optional(),
+    // The module's code defines `lookupWebLink`, which finds a resource's page when someone opens
+    // it. The daemon reads it here for the same reason, and the host refuses a module whose code
+    // disagrees.
+    looksUpWebLinks: z12.literal(true).optional()
   });
   const AppUriModuleContribution2 = UriModuleContribution2.omit({
     authActions: true,
     authService: true,
     authScheme: true,
     knownResources: true,
-    describesOperations: true
+    describesOperations: true,
+    looksUpWebLinks: true
   });
   const AppDataSourceStore = z12.discriminatedUnion("shape", [
     z12.strictObject({
@@ -3496,10 +3640,7 @@ function createContributionsSchemas(canonical) {
     displayName: NonEmptyString3,
     schemaVersion: z12.number().int().positive(),
     storage: WhiteboardTypeStorage2,
-    valueSchema: JsonSchema,
-    presentation: z12.strictObject({
-      app: LocalContributionId2
-    }).optional()
+    valueSchema: JsonSchema
   });
   const AppDataMaterializerContribution2 = z12.strictObject({
     source: LocalContributionId2
@@ -3754,7 +3895,7 @@ function createContributionsSchemas(canonical) {
     localId: LocalContributionId2,
     /** The same-plugin `eventDefinitions` local id this rule matches. */
     event: PluginEventLocalId2,
-    where: z12.array(JsonObject).optional(),
+    where: z12.string({ error: (issue) => whereNotAStringMessage(issue.input) }).optional(),
     rule: JsonObject
   });
   const PluginProductEventContribution2 = z12.union([
@@ -3811,15 +3952,15 @@ function createContributionsSchemas(canonical) {
     slot: NonEmptyString3,
     title: NonEmptyString3.optional()
   });
-  const SettingsPanelContribution2 = z12.strictObject({
-    localId: LocalContributionId2,
-    title: NonEmptyString3,
-    configSection: NonEmptyString3.optional()
-  });
-  const ResultRendererContribution2 = z12.strictObject({
-    localId: LocalContributionId2,
-    resultKinds: z12.array(NonEmptyString3).min(1)
-  });
+  const NOT_LOCAL_APP_SCHEMES = /* @__PURE__ */ new Set([
+    "http",
+    "https",
+    "file",
+    "javascript",
+    "data",
+    "blob",
+    "about"
+  ]);
   const ReferenceOpenBehavior2 = z12.discriminatedUnion("kind", [
     z12.strictObject({ kind: z12.literal("working-document") }),
     z12.strictObject({ kind: z12.literal("browser-pane") }),
@@ -3828,14 +3969,22 @@ function createContributionsSchemas(canonical) {
      * manifest, and the page gets the whole address as its `objectId` unless `addresses` says
      * otherwise. Needs no web address, so a plugin-only resource (`user-todo://items/3`) can pill.
      */
-    z12.strictObject({ kind: z12.literal("page"), pageId: NonEmptyString3 })
+    z12.strictObject({ kind: z12.literal("page"), pageId: NonEmptyString3 }),
+    /**
+     * Hand the address's link to an app on this machine. The module's claims fill the link as its
+     * `sourceUrl`, and `schemes` names every scheme those links may use: main opens a link only when
+     * a loaded plugin declares its scheme here. A plugin the person installed can't declare this.
+     */
+    z12.strictObject({
+      kind: z12.literal("local-app"),
+      schemes: z12.array(UriScheme2.refine((scheme) => !NOT_LOCAL_APP_SCHEMES.has(scheme), "Names the web, a file or script, not an app on this machine")).min(1)
+    })
   ]);
   const ReferencePresentationVariant2 = z12.strictObject({
     resourceKind: NonEmptyString3,
     presentationPluginId: PluginId2.optional()
   });
   const ReferencePresentationVariants2 = z12.record(MimeTypeString2, ReferencePresentationVariant2);
-  const InlineSvg = z12.string().max(64 * 1024).refine((value) => /^\s*(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*(?:<!DOCTYPE[^>]*>\s*)?<svg[\s>]/iu.test(value), { message: "brandIcon must be inline SVG markup." });
   const ReferencePresentationUriPattern2 = z12.strictObject({
     protocol: NonEmptyString3,
     hostname: NonEmptyString3,
@@ -3847,7 +3996,8 @@ function createContributionsSchemas(canonical) {
     pattern: ReferencePresentationUriPattern2.extend({
       protocol: z12.enum(["http", "https"])
     }),
-    brandIcon: InlineSvg.optional()
+    /** The claim's mark: an SVG file in the plugin, drawn in its own colours. */
+    brandIcon: PackageAssetPath2.optional()
   });
   const ReferencePresentationTooltip2 = z12.strictObject({
     /** Same-plugin kay.ui app mounted with read-only reference URI context. */
@@ -3859,6 +4009,26 @@ function createContributionsSchemas(canonical) {
     objectId: NonEmptyString3.optional(),
     open: z12.strictObject({ kind: z12.literal("none") }).optional()
   });
+  const ReferencePresentationAccountLinkPage = z12.strictObject({
+    /** A literal host name. */
+    hostname: z12.string().regex(/^[a-z0-9.-]+$/, "An account link's hostname is a literal lower-case host name."),
+    pathname: z12.string().optional(),
+    /** A page matching one of these already names its account, so it stays as it is. */
+    unlessPathname: z12.array(z12.string()).min(1).optional(),
+    /** The path the page opens at, in place of its own. */
+    setPathname: z12.string().startsWith("/").optional(),
+    /** Query values to add. A page that already has one of these names stays as it is. */
+    addQuery: z12.record(NonEmptyString3, NonEmptyString3)
+  });
+  const ReferencePresentationAccountLinkAddress = z12.strictObject({
+    pattern: ReferencePresentationUriPattern2,
+    url: z12.string().regex(/^https?:\/\//, "An account link's url is a web page.")
+  });
+  const ReferencePresentationAccountLinks2 = z12.strictObject({
+    label: z12.enum(["email", "name"]).optional(),
+    pages: z12.array(ReferencePresentationAccountLinkPage).min(1).optional(),
+    addresses: z12.array(ReferencePresentationAccountLinkAddress).min(1).optional()
+  });
   const ReferencePresentationWords2 = z12.strictObject({
     /** The row's mark, for a source with no icon of its own. Left out: the plugin's main icon. */
     glyph: z12.enum(TOOL_GLYPHS).optional(),
@@ -3910,7 +4080,9 @@ function createContributionsSchemas(canonical) {
     /** Informational app presentation matched against the canonical resource URI. */
     tooltip: ReferencePresentationTooltip2.optional(),
     /** What the transcript calls this module's addresses. Needs a `uriModule`. */
-    words: ReferencePresentationWords2.optional()
+    words: ReferencePresentationWords2.optional(),
+    /** How this module's web pages open under the right account. Needs a `uriModule`. */
+    accountLinks: ReferencePresentationAccountLinks2.optional()
   }).superRefine((value, ctx) => {
     if (value.open === void 0 !== (value.resourceKind === void 0)) {
       ctx.addIssue({
@@ -3919,13 +4091,20 @@ function createContributionsSchemas(canonical) {
         message: "open and resourceKind come together: name both or neither."
       });
     }
-    if (value.open === void 0 && value.words === void 0) {
+    if (value.open === void 0 && value.words === void 0 && value.accountLinks === void 0) {
       ctx.addIssue({
         code: "custom",
         path: ["words"],
         message: "A reference presentation that opens nothing must have words."
       });
     }
+    if (value.accountLinks !== void 0 && value.uriModule === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["accountLinks"],
+        message: "Account links belong to a URI module: name its uriModule."
+      });
+    }
     if (value.words !== void 0 && value.uriModule === void 0) {
       ctx.addIssue({
         code: "custom",
@@ -3980,11 +4159,6 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const RichViewContribution2 = z12.strictObject({
-    localId: LocalContributionId2,
-    title: NonEmptyString3,
-    route: NonEmptyString3.optional()
-  });
   const KayUiAppHostCapability2 = z12.enum([
     "navigation.open-session",
     // Lets `navigation.openChat` create a blank chat (no message, no model
@@ -4163,10 +4337,7 @@ function createContributionsSchemas(canonical) {
     "mcpServer",
     "uiCommand",
     "uiSlot",
-    "settingsPanel",
-    "resultRenderer",
     "referencePresentation",
-    "view",
     "app",
     "theme",
     "authService",
@@ -4215,8 +4386,6 @@ function createContributionsSchemas(canonical) {
     SessionReaderContribution: SessionReaderContribution2,
     UiCommandContribution: UiCommandContribution2,
     UiSlotContribution: UiSlotContribution2,
-    SettingsPanelContribution: SettingsPanelContribution2,
-    ResultRendererContribution: ResultRendererContribution2,
     ReferenceOpenBehavior: ReferenceOpenBehavior2,
     ReferencePresentationVariant: ReferencePresentationVariant2,
     ReferencePresentationVariants: ReferencePresentationVariants2,
@@ -4224,9 +4393,9 @@ function createContributionsSchemas(canonical) {
     ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2,
     ReferencePresentationTooltip: ReferencePresentationTooltip2,
     ReferencePresentationAddress: ReferencePresentationAddress2,
+    ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2,
     ReferencePresentationWords: ReferencePresentationWords2,
     ReferencePresentationContribution: ReferencePresentationContribution2,
-    RichViewContribution: RichViewContribution2,
     KayUiAppHostCapability: KayUiAppHostCapability2,
     UiAppCapabilities: UiAppCapabilities2,
     UiRailEntryContribution: UiRailEntryContribution2,
@@ -4239,8 +4408,15 @@ function createContributionsSchemas(canonical) {
     PluginContributionKind: PluginContributionKind2
   };
 }
-var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, PluginCardContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, SettingsPanelContribution, ResultRendererContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationWords, ReferencePresentationContribution, RichViewContribution, KayUiAppHostCapability, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
+var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, PluginCardContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationAccountLinks, ReferencePresentationWords, ReferencePresentationContribution, KayUiAppHostCapability, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
 var canonicalContributionSchemas = createContributionsSchemas(true);
+var UI_APP_SOURCE_MODULE = /\.(?:tsx|ts|jsx)$/;
+function isUiAppSourceModule(module) {
+  return UI_APP_SOURCE_MODULE.test(module);
+}
+function uiAppSourceStylePath(module) {
+  return module.replace(UI_APP_SOURCE_MODULE, ".css");
+}
 
 // packages/plugin-protocol/dist/icon-shape.js
 var SVG_PROLOG = String.raw`^\s*(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*(?:<!DOCTYPE[^>]*>\s*)?`;
@@ -4313,7 +4489,7 @@ var KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS = [
 var KAY_UI_NATIVE_EVENT_ALLOWLIST = new Set(KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS);
 var RETIRED_COMPATIBILITY_KEYS = ["policy"];
 function createManifestSchemas(canonical) {
-  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, ResultRendererContribution: ResultRendererContribution2, RichViewContribution: RichViewContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, SettingsPanelContribution: SettingsPanelContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const KayAgentTargetManifest2 = z13.strictObject({
@@ -4432,10 +4608,7 @@ function createManifestSchemas(canonical) {
     contributes: z13.strictObject({
       commands: z13.array(UiCommandContribution2).optional(),
       slots: z13.array(UiSlotContribution2).optional(),
-      settingsPanels: z13.array(SettingsPanelContribution2).optional(),
-      resultRenderers: z13.array(ResultRendererContribution2).optional(),
       referencePresentations: z13.array(ReferencePresentationContribution2).optional(),
-      views: z13.array(RichViewContribution2).optional(),
       apps: z13.array(UiAppContribution2).optional(),
       railEntries: z13.array(UiRailEntryContribution2).optional(),
       toastPreviews: z13.array(UiToastPreviewContribution2).optional(),
@@ -4716,7 +4889,13 @@ function createManifestSchemas(canonical) {
     loginUrl: HttpsUrl2,
     cookieDomains: z13.array(RegistrableDomain2).min(1),
     probe: PluginWebSessionProbe2,
-    oauthVenue: z13.enum(["embedded", "external"])
+    oauthVenue: z13.enum(["embedded", "external"]),
+    /**
+     * Where a page goes first when it opens in one of Bonsai's browser panes and this site login
+     * is missing: a sign-in page that continues to the page. A template with `:email` and `:url`
+     * (see `UriClaimTemplate`), on a host within `cookieDomains`.
+     */
+    signInFirst: z13.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
   const PluginAuthService2 = z13.strictObject({
     localId: LocalContributionId2,
@@ -4950,24 +5129,6 @@ function createManifestSchemas(canonical) {
     }
     reportDuplicateLocalIds(ctx, ["targets", "kay", "app", "contributes", "whiteboardTypes"], manifest.targets?.kay?.app?.contributes?.whiteboardTypes, "Whiteboard type");
     const uiAppIds = new Set(manifest.targets?.kay?.ui?.contributes?.apps?.map((app) => app.localId) ?? []);
-    for (const [index, type] of (manifest.targets?.kay?.app?.contributes?.whiteboardTypes ?? []).entries()) {
-      if (type.presentation !== void 0 && !uiAppIds.has(type.presentation.app)) {
-        ctx.addIssue({
-          code: "custom",
-          path: [
-            "targets",
-            "kay",
-            "app",
-            "contributes",
-            "whiteboardTypes",
-            index,
-            "presentation",
-            "app"
-          ],
-          message: `Whiteboard type ${type.localId} references unknown ui app ${type.presentation.app}`
-        });
-      }
-    }
     for (const [index, entry] of (manifest.targets?.kay?.ui?.contributes?.railEntries ?? []).entries()) {
       const body = entry.panel?.body;
       const app = manifest.targets?.kay?.ui?.contributes?.apps?.find((candidate) => candidate.localId === body);
@@ -5825,10 +5986,7 @@ function collectDeclaredContributionIds(manifest) {
   const ui = manifest.targets?.kay?.ui?.contributes;
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "commands"], ui?.commands);
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "slots"], ui?.slots);
-  pushContributionIds(output, ["targets", "kay", "ui", "contributes", "settingsPanels"], ui?.settingsPanels);
-  pushContributionIds(output, ["targets", "kay", "ui", "contributes", "resultRenderers"], ui?.resultRenderers);
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "referencePresentations"], ui?.referencePresentations);
-  pushContributionIds(output, ["targets", "kay", "ui", "contributes", "views"], ui?.views);
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "apps"], ui?.apps);
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "themes"], ui?.themes);
   pushContributionIds(output, ["targets", "kay", "ui", "contributes", "eventSubscriptions"], ui?.eventSubscriptions);
@@ -5867,7 +6025,7 @@ function boundPluginDiagnosticMessage(message) {
 import { z as z14 } from "zod";
 function createResolvedContractSchemas(canonical) {
   const { PluginEventLocalId: PluginEventLocalId2 } = canonical ? canonicalPluginEventSchemas : plugin_events_exports;
-  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeStorage: WhiteboardTypeStorage2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeStorage: WhiteboardTypeStorage2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, GlobalContributionId: GlobalContributionId2, HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, PluginToolName: PluginToolName2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginExternalCliConnect: PluginExternalCliConnect2, PluginOAuthClientSupplier: PluginOAuthClientSupplier2 } = canonical ? canonicalManifestSchemas : manifest_exports;
   const { ResolvedPluginGrants: ResolvedPluginGrants2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
@@ -5986,10 +6144,7 @@ function createResolvedContractSchemas(canonical) {
     displayName: NonEmptyString3,
     schemaVersion: z14.number().int().positive(),
     storage: WhiteboardTypeStorage2,
-    valueSchema: JsonSchema,
-    presentation: z14.strictObject({
-      app: GlobalContributionId2
-    }).optional()
+    valueSchema: JsonSchema
   });
   const ResolvedKayAppMcpServer2 = z14.strictObject({
     name: LocalContributionId2,
@@ -6010,6 +6165,8 @@ function createResolvedContractSchemas(canonical) {
     knownResources: z14.literal(true).optional(),
     /** Mirrors `UriModuleContribution.describesOperations`. */
     describesOperations: z14.literal(true).optional(),
+    /** Mirrors `UriModuleContribution.looksUpWebLinks`. */
+    looksUpWebLinks: z14.literal(true).optional(),
     ...UriModuleFacts2.shape
   });
   const ResolvedKayAgentArtifactUriModule2 = z14.strictObject({
@@ -6046,6 +6203,9 @@ function createResolvedContractSchemas(canonical) {
     mimeTypes: z14.array(MimeTypeString2).min(1),
     extensions: z14.array(FileExtensionToken2).min(1).optional()
   });
+  const ResolvedReferencePresentationUrlClaim = ReferencePresentationUrlClaim2.extend({
+    brandIcon: z14.string().max(64 * 1024).optional()
+  });
   const ResolvedReferencePresentation2 = z14.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
@@ -6054,13 +6214,16 @@ function createResolvedContractSchemas(canonical) {
     schemes: z14.array(UriScheme2).min(1).optional(),
     /** The module's `displayName`: the source's name in a row. */
     displayName: NonEmptyString3.optional(),
+    /** The module's auth service, qualified: whose accounts `accountLinks` reads. */
+    authService: GlobalContributionId2.optional(),
+    accountLinks: ReferencePresentationAccountLinks2.optional(),
     addresses: z14.array(ReferencePresentationAddress2).min(1).optional(),
     /** Comes with `open`. A presentation with neither only words its module's addresses. */
     resourceKind: NonEmptyString3.optional(),
     open: ReferenceOpenBehavior2.optional(),
     /** MIME-specific resource kinds; absent keys use the base presentation. */
     variants: ReferencePresentationVariants2.optional(),
-    claims: z14.array(ReferencePresentationUrlClaim2).optional(),
+    claims: z14.array(ResolvedReferencePresentationUrlClaim).optional(),
     tooltip: z14.strictObject({
       app: GlobalContributionId2,
       pattern: ReferencePresentationUriPattern2
@@ -6165,7 +6328,8 @@ function createResolvedContractSchemas(canonical) {
       method: z14.enum(["GET", "POST"]),
       signedInStatuses: z14.array(SignedInStatusCode2).min(1)
     }),
-    oauthVenue: z14.enum(["embedded", "external"])
+    oauthVenue: z14.enum(["embedded", "external"]),
+    signInFirst: z14.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
   const ResolvedPluginAuthService2 = z14.strictObject({
     localId: LocalContributionId2,
@@ -6316,10 +6480,7 @@ function collectContributionSources(manifest) {
   const ui = manifest.targets?.kay?.ui?.contributes;
   pushAll(output, "kay.ui", "uiCommand", ui?.commands);
   pushAll(output, "kay.ui", "uiSlot", ui?.slots);
-  pushAll(output, "kay.ui", "settingsPanel", ui?.settingsPanels);
-  pushAll(output, "kay.ui", "resultRenderer", ui?.resultRenderers);
   pushAll(output, "kay.ui", "referencePresentation", ui?.referencePresentations);
-  pushAll(output, "kay.ui", "view", ui?.views);
   pushAll(output, "kay.ui", "app", ui?.apps);
   pushAll(output, "kay.ui", "theme", ui?.themes);
   pushAll(output, "kay.ui", "eventSubscription", ui?.eventSubscriptions);
@@ -6435,7 +6596,8 @@ function resolveAuthServices(namespace, manifest) {
           method: service.webSession.probe.method ?? "GET",
           signedInStatuses: [...service.webSession.probe.signedInStatuses]
         },
-        oauthVenue: service.webSession.oauthVenue
+        oauthVenue: service.webSession.oauthVenue,
+        ...service.webSession.signInFirst === void 0 ? {} : { signInFirst: service.webSession.signInFirst }
       }
     },
     schemes: service.schemes.map((scheme) => {
@@ -6645,12 +6807,7 @@ function resolveKayPluginContractV1(manifest) {
     displayName: type.displayName,
     schemaVersion: type.schemaVersion,
     storage: type.storage,
-    valueSchema: type.valueSchema,
-    ...type.presentation === void 0 ? {} : {
-      presentation: {
-        app: resolveGlobalContributionId(namespace, type.presentation.app)
-      }
-    }
+    valueSchema: type.valueSchema
   }));
   const kayAppMcpServers = Object.entries(manifest.targets?.kay?.app?.contributes?.mcpServers ?? {}).map(([name, server]) => ({
     name,
@@ -6674,6 +6831,7 @@ function resolveKayPluginContractV1(manifest) {
     },
     ...module.knownResources === void 0 ? {} : { knownResources: module.knownResources },
     ...module.describesOperations === void 0 ? {} : { describesOperations: module.describesOperations },
+    ...module.looksUpWebLinks === void 0 ? {} : { looksUpWebLinks: module.looksUpWebLinks },
     ...uriModuleFacts(module)
   }));
   const kayAgentArtifactUriModules = manifest.targets?.kay?.agent?.contributes?.artifactUriModules?.map((module) => ({
@@ -6709,13 +6867,14 @@ function resolveKayPluginContractV1(manifest) {
     ...presentation.uriModule === void 0 ? {} : {
       uriModule: resolveGlobalContributionId(namespace, presentation.uriModule)
     },
-    ...presentationSource(manifest, presentation),
+    ...presentationSource(namespace, manifest, presentation),
     ...presentation.addresses === void 0 ? {} : { addresses: presentation.addresses },
     ...presentation.open === void 0 || presentation.resourceKind === void 0 ? {} : {
       resourceKind: presentation.resourceKind,
       open: presentation.open
     },
     ...presentation.words === void 0 ? {} : { words: { ...presentation.words } },
+    ...presentation.accountLinks === void 0 ? {} : { accountLinks: presentation.accountLinks },
     ...presentation.tooltip === void 0 ? {} : {
       tooltip: {
         app: resolveGlobalContributionId(namespace, presentation.tooltip.app),
@@ -6800,19 +6959,23 @@ function safeResolveKayPluginContractV1(manifest) {
     throw error;
   }
 }
-function presentationSource(manifest, presentation) {
+function presentationSource(namespace, manifest, presentation) {
   const contributes = manifest.targets?.kay;
   const module = [
     ...contributes?.agent?.contributes?.uriModules ?? [],
     ...contributes?.app?.contributes?.uriModules ?? []
   ].find((candidate) => candidate.localId === presentation.uriModule);
   const schemes = presentation.scheme === void 0 ? module?.schemes : [presentation.scheme];
+  const authService = module !== void 0 && "authService" in module ? module.authService : void 0;
   return {
     ...schemes === void 0 ? {} : { schemes: [...schemes] },
-    ...module?.displayName === void 0 ? {} : { displayName: module.displayName }
+    ...module?.displayName === void 0 ? {} : { displayName: module.displayName },
+    ...typeof authService === "string" ? {
+      authService: isQualifiedAuthServiceRef(authService) ? authService : resolveGlobalContributionId(namespace, authService)
+    } : {}
   };
 }
-function uriModuleFacts({ localId: _localId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, ...facts }) {
+function uriModuleFacts({ localId: _localId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, looksUpWebLinks: _looksUpWebLinks, ...facts }) {
   return facts;
 }
 
@@ -7408,11 +7571,7 @@ var WhiteboardTypeInfo = z19.strictObject({
   typeId: GlobalContributionId,
   displayName: NonEmptyString,
   schemaVersion: z19.number().int().positive(),
-  available: z19.boolean(),
-  /** A plugin-owned readonly presentation; absent types use the host fallback. */
-  presentation: z19.strictObject({
-    app: GlobalContributionId
-  }).optional()
+  available: z19.boolean()
 });
 
 // packages/plugin-protocol/dist/product-events.js
@@ -7746,6 +7905,7 @@ export {
   RETIRED_PLUGIN_CAPABILITY_SLUGS,
   RETIRED_WEB_SESSION_ROW_KEYS,
   ReferenceOpenBehavior,
+  ReferencePresentationAccountLinks,
   ReferencePresentationAddress,
   ReferencePresentationContribution,
   ReferencePresentationTooltip,
@@ -7782,8 +7942,6 @@ export {
   ResolvedReferencePresentation,
   ResolvedTargetGrantSet,
   ResourceContribution,
-  ResultRendererContribution,
-  RichViewContribution,
   SEMVER_PATTERN,
   SESSION_HEALTH_CLASSIFIER_IDS,
   SESSION_HEALTH_CUSTOM_TYPE,
@@ -7802,7 +7960,6 @@ export {
   SessionProvenanceRecord,
   SessionReaderContribution,
   SessionRelationship,
-  SettingsPanelContribution,
   SignedInStatusCode,
   SkillContribution,
   StorageGrantRequest,
@@ -7824,6 +7981,7 @@ export {
   UriModuleContribution,
   UriScheme,
   WEB_SESSION_CSRF_SELECTOR_PATTERN,
+  WHERE_MAX_BYTES,
   WebSessionCsrfSelector,
   WebSessionGrantRequest,
   WhiteboardCapabilityClaimV1,
@@ -7851,25 +8009,30 @@ export {
   configSectionKeysForManifest,
   declarationsOfKind,
   declaredCommandId,
+  declaredLocalAppSchemes,
   declaredReferencePresentations,
   declaredUiIconPaths,
   dedupeClaims,
   deriveDirectoryPluginToolName,
   evaluateCommandWhere,
   evaluateWhere,
+  eventWhereProblem,
   finalizeArtifactProvenanceEnvelope,
   findSkillSuggestionCitations,
+  formatWhereLiteral,
   hasClaim,
   hostWithinDomain,
   isCanonicalArtifactOutputUri,
   isCompatible,
   isCredentialShapedText,
+  isDeclaredLocalAppLink,
   isKayPluginCompatibilityRefusal,
   isPluginProductEventName,
   isPrivateCapabilityClaim,
   isQualifiedAuthSchemeRef,
   isQualifiedAuthServiceRef,
   isSupportedSemverRange,
+  isUiAppSourceModule,
   judgeKayPluginDirectory,
   kayPluginCompatibilityAdvisories,
   kayPluginHostCompatibility,
@@ -7910,8 +8073,13 @@ export {
   skillSuggestionEvidenceKey,
   turnMessageOrigin,
   turnPacket,
+  uiAppSourceStylePath,
   urlHostWithinDomain,
   validateKayUiEventSubscription,
   webSessionPathWithinPrefix,
+  whereClausesAsExpression,
+  whereKeyUses,
+  whereNotAStringMessage,
+  whereProblem,
   whiteboardCapabilityClaim
 };