@yaklabs-ai/plugin-protocol 0.48.1 → 0.50.0

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.48.1"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.50.0"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.48.1",
+  "version": "0.50.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/index.d.ts

@@ -4736,8 +4736,16 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * 0.48.0 adds the models.complete UI capability.
  *
  * 0.48.1 adds app-tool metadata, conditional tool permissions and screen-action declarations.
+ *
+ * 0.49.0 adds sessionless URI calls on both backend targets. It removes app.memory and its note
+ * types; callers use the resource surface instead. Previously admitted SDK contracts are no
+ * longer served because they included app.memory on notebook hosts. No compatibility alias
+ * restores it; callers migrate and declare ^0.49.0.
+ *
+ * 0.50.0 adds explicit cross-plugin endpoint calls on both backend targets. The URI-only 0.49.0
+ * contract remains served.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.48.1";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.50.0";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -8122,7 +8130,7 @@ export declare function parseSemver(value: string): ParsedSemver | undefined;
 export declare function parseWhere(source: string, keyTypes?: WhereKeyTypes): WhereParseResult;
 
 /** Every capability slug {@link PluginCapabilityClaimV1} can express, for exhaustive table checks. */
-export declare const PLUGIN_CAPABILITY_SLUGS: readonly ["sessions.run", "network.connect", "web-session.request", "web-session.download", "process.spawn", "sessions.read", "signals.read", "memory.read", "memory.write", "skills.read", "skills.write", "skills.share", "plugins.set-enabled", "sessions.annotate", "sessions.compact", "soul.write", "tools.describe", "workspace.command", "sessions.create", "sessions.update", "models.complete", "systemOne.use", "automations.write", "automations.run", "workflows.define", "workflows.signals", "session-events.subscribe", "agents.run", "dynamic-context.register", "app-data.register", "knowledge-source.register", "artifacts.read", "session-artifacts.read", "session-artifacts.create", "account.assert", "account.update", "agents.permissions", "tool-interception.register", "interaction.surface", "config.declare-section", "auth.own-service", "auth.shared-identity", "cli.bind", "mcp.host-server", "prompt.resident", "skills.declared-source", "whiteboard.discover", "whiteboard.read", "whiteboard.create", "whiteboard.update", "whiteboard.remove", "model-selection.register", "system-prompt.register"];
+export declare const PLUGIN_CAPABILITY_SLUGS: readonly ["sessions.run", "network.connect", "web-session.request", "web-session.download", "process.spawn", "sessions.read", "signals.read", "uri.call", "endpoints.invoke", "skills.read", "skills.write", "skills.share", "plugins.set-enabled", "sessions.annotate", "sessions.compact", "soul.write", "tools.describe", "workspace.command", "sessions.create", "sessions.update", "models.complete", "systemOne.use", "automations.write", "automations.run", "workflows.define", "workflows.signals", "session-events.subscribe", "agents.run", "dynamic-context.register", "app-data.register", "knowledge-source.register", "artifacts.read", "session-artifacts.read", "session-artifacts.create", "account.assert", "account.update", "agents.permissions", "tool-interception.register", "interaction.surface", "config.declare-section", "auth.own-service", "auth.shared-identity", "cli.bind", "mcp.host-server", "prompt.resident", "skills.declared-source", "whiteboard.discover", "whiteboard.read", "whiteboard.create", "whiteboard.update", "whiteboard.remove", "model-selection.register", "system-prompt.register"];
 
 /** Diagnostic messages carry plugin-controlled text (parse errors, module errors); bound it so a
  *  hostile or accidental multi-megabyte error can never blow up a log line or a render surface. */
@@ -8681,13 +8689,19 @@ export declare const PluginCapabilityClaimInputV1: z.ZodCustom<{
     slug: "signals.read";
     envelope: Record<string, never>;
 } | {
-    target: "kay.app";
-    slug: "memory.read";
-    envelope: Record<string, never>;
+    target: "kay.agent" | "kay.app";
+    slug: "uri.call";
+    envelope: {
+        scheme: string;
+        verb: "search" | "list" | "read" | "write" | "edit" | "delete";
+    };
 } | {
-    target: "kay.app";
-    slug: "memory.write";
-    envelope: Record<string, never>;
+    target: "kay.agent" | "kay.app";
+    slug: "endpoints.invoke";
+    envelope: {
+        pluginId: string;
+        endpointId: string;
+    };
 } | {
     target: "kay.app";
     slug: "skills.read";
@@ -8942,13 +8956,19 @@ export declare const PluginCapabilityClaimInputV1: z.ZodCustom<{
     slug: "signals.read";
     envelope: Record<string, never>;
 } | {
-    target: "kay.app";
-    slug: "memory.read";
-    envelope: Record<string, never>;
+    target: "kay.agent" | "kay.app";
+    slug: "uri.call";
+    envelope: {
+        scheme: string;
+        verb: "search" | "list" | "read" | "write" | "edit" | "delete";
+    };
 } | {
-    target: "kay.app";
-    slug: "memory.write";
-    envelope: Record<string, never>;
+    target: "kay.agent" | "kay.app";
+    slug: "endpoints.invoke";
+    envelope: {
+        pluginId: string;
+        endpointId: string;
+    };
 } | {
     target: "kay.app";
     slug: "skills.read";
@@ -9199,13 +9219,32 @@ export declare const PluginCapabilityClaimV1: z.ZodDiscriminatedUnion<[z.ZodObje
     slug: z.ZodLiteral<"signals.read">;
     envelope: z.ZodObject<{}, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
-    target: z.ZodLiteral<"kay.app">;
-    slug: z.ZodLiteral<"memory.read">;
-    envelope: z.ZodObject<{}, z.core.$strict>;
+    target: z.ZodEnum<{
+        "kay.agent": "kay.agent";
+        "kay.app": "kay.app";
+    }>;
+    slug: z.ZodLiteral<"uri.call">;
+    envelope: z.ZodObject<{
+        scheme: z.ZodString;
+        verb: z.ZodEnum<{
+            search: "search";
+            list: "list";
+            read: "read";
+            write: "write";
+            edit: "edit";
+            delete: "delete";
+        }>;
+    }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
-    target: z.ZodLiteral<"kay.app">;
-    slug: z.ZodLiteral<"memory.write">;
-    envelope: z.ZodObject<{}, z.core.$strict>;
+    target: z.ZodEnum<{
+        "kay.agent": "kay.agent";
+        "kay.app": "kay.app";
+    }>;
+    slug: z.ZodLiteral<"endpoints.invoke">;
+    envelope: z.ZodObject<{
+        pluginId: z.ZodString;
+        endpointId: z.ZodString;
+    }, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
     target: z.ZodLiteral<"kay.app">;
     slug: z.ZodLiteral<"skills.read">;
@@ -9502,13 +9541,32 @@ export declare const PluginCapabilityDecisionV1: z.ZodDiscriminatedUnion<[z.ZodO
         slug: z.ZodLiteral<"signals.read">;
         envelope: z.ZodObject<{}, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.read">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"uri.call">;
+        envelope: z.ZodObject<{
+            scheme: z.ZodString;
+            verb: z.ZodEnum<{
+                search: "search";
+                list: "list";
+                read: "read";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.write">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"endpoints.invoke">;
+        envelope: z.ZodObject<{
+            pluginId: z.ZodString;
+            endpointId: z.ZodString;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"skills.read">;
@@ -9804,13 +9862,32 @@ export declare const PluginCapabilityDecisionV1: z.ZodDiscriminatedUnion<[z.ZodO
             slug: z.ZodLiteral<"signals.read">;
             envelope: z.ZodObject<{}, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
-            target: z.ZodLiteral<"kay.app">;
-            slug: z.ZodLiteral<"memory.read">;
-            envelope: z.ZodObject<{}, z.core.$strict>;
+            target: z.ZodEnum<{
+                "kay.agent": "kay.agent";
+                "kay.app": "kay.app";
+            }>;
+            slug: z.ZodLiteral<"uri.call">;
+            envelope: z.ZodObject<{
+                scheme: z.ZodString;
+                verb: z.ZodEnum<{
+                    search: "search";
+                    list: "list";
+                    read: "read";
+                    write: "write";
+                    edit: "edit";
+                    delete: "delete";
+                }>;
+            }, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
-            target: z.ZodLiteral<"kay.app">;
-            slug: z.ZodLiteral<"memory.write">;
-            envelope: z.ZodObject<{}, z.core.$strict>;
+            target: z.ZodEnum<{
+                "kay.agent": "kay.agent";
+                "kay.app": "kay.app";
+            }>;
+            slug: z.ZodLiteral<"endpoints.invoke">;
+            envelope: z.ZodObject<{
+                pluginId: z.ZodString;
+                endpointId: z.ZodString;
+            }, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
             target: z.ZodLiteral<"kay.app">;
             slug: z.ZodLiteral<"skills.read">;
@@ -10140,13 +10217,32 @@ export declare const PluginCapabilityRefusalV1: z.ZodObject<{
         slug: z.ZodLiteral<"signals.read">;
         envelope: z.ZodObject<{}, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.read">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"uri.call">;
+        envelope: z.ZodObject<{
+            scheme: z.ZodString;
+            verb: z.ZodEnum<{
+                search: "search";
+                list: "list";
+                read: "read";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.write">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"endpoints.invoke">;
+        envelope: z.ZodObject<{
+            pluginId: z.ZodString;
+            endpointId: z.ZodString;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"skills.read">;
@@ -14743,8 +14839,8 @@ export declare const RETIRED_COMPATIBILITY_KEYS: readonly ["policy"];
  */
 export declare const RETIRED_PERMISSION_ASK_KEYS: readonly ["network", "process", "filesystem", "corpus", "paths", "workspace", "sessions", "automations", "hindsight", "agents", "dynamicContext", "appData", "toolInterception", "account", "device", "config", "workflows", "whiteboard"];
 
-/** Capability slugs retired in SDK 0.13.0; a stored grant naming one is ignored, never refused. */
-export declare const RETIRED_PLUGIN_CAPABILITY_SLUGS: readonly ["filesystem.read", "filesystem.write"];
+/** Retired capability slugs; a stored grant naming one is ignored, never refused. */
+export declare const RETIRED_PLUGIN_CAPABILITY_SLUGS: readonly ["filesystem.read", "filesystem.write", "memory.read", "memory.write"];
 
 /**
  * The one retired FIELD inside a surviving row: a `webSession` row's `operations` only ever fed the

package/dist/index.js

@@ -260,15 +260,8 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.48.1";
-var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
-  "0.48.0",
-  "0.47.0",
-  "0.42.0",
-  "0.42.1",
-  "0.43.0",
-  "0.44.0"
-];
+var KAY_PLUGIN_SDK_VERSION = "0.50.0";
+var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = ["0.49.0"];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",
   "kay.app",
@@ -1731,7 +1724,9 @@ function retiredPermissionAsksIn(rawManifest) {
 // packages/plugin-protocol/dist/authority.js
 var RETIRED_PLUGIN_CAPABILITY_SLUGS = [
   "filesystem.read",
-  "filesystem.write"
+  "filesystem.write",
+  "memory.read",
+  "memory.write"
 ];
 var RENAMED_PLUGIN_CAPABILITY_SLUGS = {
   "jev.use": "systemOne.use",
@@ -1745,8 +1740,8 @@ var PLUGIN_CAPABILITY_SLUGS = [
   "process.spawn",
   "sessions.read",
   "signals.read",
-  "memory.read",
-  "memory.write",
+  "uri.call",
+  "endpoints.invoke",
   "skills.read",
   "skills.write",
   "skills.share",
@@ -1812,7 +1807,7 @@ var AGENT_PERMISSION_RULE_FIELDS = [
   "mode"
 ];
 function createAuthoritySchemas(canonical) {
-  const { ArtifactGenerationId: ArtifactGenerationId2, NonEmptyString: NonEmptyString3 } = canonical ? canonicalCommonSchemas : common_exports;
+  const { ArtifactGenerationId: ArtifactGenerationId2, NonEmptyString: NonEmptyString3, UriScheme: UriScheme2, PluginId: PluginId2, LocalContributionId: LocalContributionId2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginAgentDefinitionPermissionRule: PluginAgentDefinitionPermissionRule2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const WhiteboardCapabilityScope2 = z10.enum(["own-types", "all-types"]);
   const WhiteboardCapabilityOperation2 = z10.enum([
@@ -1903,14 +1898,20 @@ function createAuthoritySchemas(canonical) {
       envelope: z10.strictObject({})
     }),
     z10.strictObject({
-      target: z10.literal("kay.app"),
-      slug: z10.literal("memory.read"),
-      envelope: z10.strictObject({})
+      target: z10.enum(["kay.agent", "kay.app"]),
+      slug: z10.literal("uri.call"),
+      envelope: z10.strictObject({
+        scheme: UriScheme2,
+        verb: z10.enum(["read", "list", "search", "write", "edit", "delete"])
+      })
     }),
     z10.strictObject({
-      target: z10.literal("kay.app"),
-      slug: z10.literal("memory.write"),
-      envelope: z10.strictObject({})
+      target: z10.enum(["kay.agent", "kay.app"]),
+      slug: z10.literal("endpoints.invoke"),
+      envelope: z10.strictObject({
+        pluginId: PluginId2,
+        endpointId: LocalContributionId2
+      })
     }),
     z10.strictObject({
       // Read every managed skill and its history: identity, versions, revisions, changes against
@@ -2256,8 +2257,6 @@ function sameClaim(a, b) {
     case "sessions.update":
     case "sessions.read":
     case "signals.read":
-    case "memory.read":
-    case "memory.write":
     case "skills.read":
     case "skills.write":
     case "skills.share":
@@ -2282,6 +2281,10 @@ function sameClaim(a, b) {
     case "model-selection.register":
     case "system-prompt.register":
       return true;
+    case "uri.call":
+      return b.slug === "uri.call" && a.envelope.scheme === b.envelope.scheme && a.envelope.verb === b.envelope.verb;
+    case "endpoints.invoke":
+      return b.slug === "endpoints.invoke" && a.envelope.pluginId === b.envelope.pluginId && a.envelope.endpointId === b.envelope.endpointId;
     case "network.connect":
       return b.slug === "network.connect" && a.envelope.connect === b.envelope.connect;
     case "web-session.request":
@@ -2343,8 +2346,6 @@ function envelopePairs(a, b) {
     case "sessions.update":
     case "sessions.read":
     case "signals.read":
-    case "memory.read":
-    case "memory.write":
     case "skills.read":
     case "skills.write":
     case "skills.share":
@@ -2369,6 +2370,16 @@ function envelopePairs(a, b) {
     case "model-selection.register":
     case "system-prompt.register":
       return [];
+    case "uri.call":
+      return b.slug === "uri.call" ? [
+        [a.envelope.scheme, b.envelope.scheme],
+        [a.envelope.verb, b.envelope.verb]
+      ] : [];
+    case "endpoints.invoke":
+      return b.slug === "endpoints.invoke" ? [
+        [a.envelope.pluginId, b.envelope.pluginId],
+        [a.envelope.endpointId, b.envelope.endpointId]
+      ] : [];
     case "network.connect":
       return b.slug === "network.connect" ? [[a.envelope.connect, b.envelope.connect]] : [];
     case "web-session.request":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.48.1",
+  "version": "0.50.0",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",