@yaklabs-ai/plugin-protocol 0.52.1 → 0.54.0

package/dist/index.js

@@ -266,8 +266,10 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.52.1";
+var KAY_PLUGIN_SDK_VERSION = "0.54.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
+  "0.53.0",
+  "0.52.1",
   "0.52.0",
   "0.51.0",
   "0.50.0",
@@ -1806,6 +1808,9 @@ var PLUGIN_CAPABILITY_SLUGS = [
   "skills.write",
   "skills.share",
   "plugins.set-enabled",
+  "sessions.assign-project",
+  "artifacts.resolve-file",
+  "process.run",
   "sessions.annotate",
   "sessions.compact",
   "soul.write",
@@ -1840,6 +1845,7 @@ var PLUGIN_CAPABILITY_SLUGS = [
   "mcp.host-server",
   "prompt.resident",
   "skills.declared-source",
+  "family-folder.root",
   "whiteboard.discover",
   "whiteboard.read",
   "whiteboard.create",
@@ -1854,7 +1860,10 @@ var PRIVATE_PLUGIN_CAPABILITY_SLUGS = [
   "skills.share",
   "plugins.set-enabled",
   "system-prompt.register",
-  "workflows.signals"
+  "workflows.signals",
+  "sessions.assign-project",
+  "artifacts.resolve-file",
+  "process.run"
 ];
 function isPrivateCapabilityClaim(claim) {
   return PRIVATE_PLUGIN_CAPABILITY_SLUGS.includes(claim.slug);
@@ -2006,6 +2015,29 @@ function createAuthoritySchemas(canonical) {
       slug: z11.literal("plugins.set-enabled"),
       envelope: z11.strictObject({})
     }),
+    z11.strictObject({
+      // Set the project of sessions no current call or event is about (accepting a project
+      // suggestion, undoing an automatic filing). Private (PRIVATE_PLUGIN_CAPABILITY_SLUGS): whether
+      // a plugin may write to sessions other than the one it is answering is not decided.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("sessions.assign-project"),
+      envelope: z11.strictObject({})
+    }),
+    z11.strictObject({
+      // Turn an address a session's agent can read into the absolute path of its file. Private
+      // (PRIVATE_PLUGIN_CAPABILITY_SLUGS): a path names where a person's files live on disk.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("artifacts.resolve-file"),
+      envelope: z11.strictObject({})
+    }),
+    z11.strictObject({
+      // Run a program the host bound for this plugin from its app code, each run still checked
+      // against the exact `process.spawn` claim. Private (PRIVATE_PLUGIN_CAPABILITY_SLUGS): the
+      // host binds programs only for plugins it ships.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("process.run"),
+      envelope: z11.strictObject({})
+    }),
     z11.strictObject({
       // Write a steward entry (recap, next steps, title, work headlines) into the session whose
       // event the calling handler is answering. Bound to that session: a call for any other is
@@ -2238,6 +2270,11 @@ function createAuthoritySchemas(canonical) {
       slug: z11.literal("skills.declared-source"),
       envelope: DeclaredSkillSourceEnvelope2
     }),
+    z11.strictObject({
+      target: z11.literal("kay.agent"),
+      slug: z11.literal("family-folder.root"),
+      envelope: z11.strictObject({})
+    }),
     WhiteboardCapabilityClaimV12
   ]);
   const PluginCapabilityRefusalLayer2 = z11.enum(["grant", "binding", "release"]);
@@ -2330,6 +2367,9 @@ function sameClaim(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "sessions.assign-project":
+    case "artifacts.resolve-file":
+    case "process.run":
     case "sessions.annotate":
     case "sessions.compact":
     case "soul.write":
@@ -2349,6 +2389,7 @@ function sameClaim(a, b) {
     case "prompt.resident":
     case "model-selection.register":
     case "system-prompt.register":
+    case "family-folder.root":
       return true;
     case "uri.call":
       return b.slug === "uri.call" && a.envelope.scheme === b.envelope.scheme && a.envelope.verb === b.envelope.verb;
@@ -2421,6 +2462,9 @@ function envelopePairs(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "sessions.assign-project":
+    case "artifacts.resolve-file":
+    case "process.run":
     case "sessions.annotate":
     case "sessions.compact":
     case "soul.write":
@@ -2440,6 +2484,7 @@ function envelopePairs(a, b) {
     case "prompt.resident":
     case "model-selection.register":
     case "system-prompt.register":
+    case "family-folder.root":
       return [];
     case "uri.call":
       return b.slug === "uri.call" ? [
@@ -2898,7 +2943,7 @@ __export(contributions_exports, {
   isUiAppSourceModule: () => isUiAppSourceModule,
   uiAppSourceStylePath: () => uiAppSourceStylePath
 });
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 
 // packages/plugin-protocol/dist/plugin-events.js
 var plugin_events_exports = {};
@@ -3052,6 +3097,53 @@ function pluginSignalPayloadJsonSchema() {
   });
 }
 
+// packages/plugin-protocol/dist/whiteboard.js
+import { z as z13 } from "zod";
+var WhiteboardEntryReference = z13.strictObject({
+  uriTemplate: z13.string().regex(/^[a-z][a-z0-9+.-]*:\/\/[^\s?#{}]+\/\{name\}$/u)
+});
+var WhiteboardValue = JsonValue;
+var WhiteboardEntryEnvelope = z13.strictObject({
+  id: NonEmptyString,
+  typeId: GlobalContributionId,
+  schemaVersion: z13.number().int().positive(),
+  title: z13.string(),
+  authorSessionId: NonEmptyString.nullable()
+});
+var WhiteboardEntrySummary = z13.strictObject({
+  name: NonEmptyString,
+  entry: WhiteboardEntryEnvelope,
+  revision: NonEmptyString
+});
+var WhiteboardEntrySnapshot = WhiteboardEntrySummary.extend({
+  value: WhiteboardValue
+});
+var WhiteboardDiagnostic = z13.strictObject({
+  ruleId: NonEmptyString,
+  severity: z13.enum(["error", "warning"]),
+  message: NonEmptyString
+});
+var WhiteboardEntryInfo = z13.strictObject({
+  name: NonEmptyString,
+  revision: NonEmptyString,
+  entry: WhiteboardEntryEnvelope.optional(),
+  state: z13.enum(["available", "unavailable", "unsupported-version", "invalid"]),
+  mutable: z13.boolean(),
+  diagnostics: z13.array(z13.string())
+});
+var WhiteboardEntryInspection = WhiteboardEntryInfo.extend({
+  value: WhiteboardValue.optional(),
+  text: z13.string(),
+  truncated: z13.boolean()
+});
+var WhiteboardTypeInfo = z13.strictObject({
+  typeId: GlobalContributionId,
+  displayName: NonEmptyString,
+  schemaVersion: z13.number().int().positive(),
+  available: z13.boolean(),
+  reference: WhiteboardEntryReference.optional()
+});
+
 // packages/plugin-protocol/dist/where-expression.js
 var NUMBER_SOURCE = String.raw`-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?`;
 var SEGMENT_SOURCE = "[A-Za-z0-9_][A-Za-z0-9_-]*";
@@ -3401,22 +3493,22 @@ function createContributionsSchemas(canonical) {
   const { AuthSchemeReference: AuthSchemeReference2, AuthServiceReference: AuthServiceReference2, CliAuthEnvVarName: CliAuthEnvVarName2, CliBinaryName: CliBinaryName2, FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginToolName: PluginToolName2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { ScopeRequirement: ScopeRequirement2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const OptionalDisplayName = NonEmptyString3.optional();
-  const ApprovalCardValueName = z13.string().regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/u, "must be a plain field name");
-  const ApprovalCardForm2 = z13.strictObject({
+  const ApprovalCardValueName = z14.string().regex(/^[A-Za-z][A-Za-z0-9_]{0,63}$/u, "must be a plain field name");
+  const ApprovalCardForm2 = z14.strictObject({
     /** Where the write goes: a fixed address, or the card value that names one. */
-    uri: z13.union([
-      z13.strictObject({ fixed: NonEmptyString3 }),
-      z13.strictObject({ value: ApprovalCardValueName })
+    uri: z14.union([
+      z14.strictObject({ fixed: NonEmptyString3 }),
+      z14.strictObject({ value: ApprovalCardValueName })
     ]),
     /** The delivery request fields this kind of card accepts, beyond provider and account. */
-    requestFields: z13.array(ApprovalCardValueName).optional(),
+    requestFields: z14.array(ApprovalCardValueName).optional(),
     /** Payload field to the card value it is filled from. An absent value or empty list is left out. */
-    payload: z13.record(ApprovalCardValueName, ApprovalCardValueName),
+    payload: z14.record(ApprovalCardValueName, ApprovalCardValueName),
     /** Payload fields with a constant value. */
-    fixed: z13.record(ApprovalCardValueName, z13.union([z13.string(), z13.boolean()])).optional()
+    fixed: z14.record(ApprovalCardValueName, z14.union([z14.string(), z14.boolean()])).optional()
   });
   const ApprovalCardStoredForm2 = ApprovalCardForm2.extend({
-    read: z13.strictObject({
+    read: z14.strictObject({
       revision: ApprovalCardValueName,
       body: ApprovalCardValueName,
       subject: ApprovalCardValueName.optional(),
@@ -3427,13 +3519,13 @@ function createContributionsSchemas(canonical) {
       attachments: ApprovalCardValueName.optional()
     })
   });
-  const ApprovalCardField = z13.strictObject({
+  const ApprovalCardField = z14.strictObject({
     key: ApprovalCardValueName,
-    max: z13.number().int().positive()
+    max: z14.number().int().positive()
   });
-  const ApprovalTypeContribution2 = z13.strictObject({
+  const ApprovalTypeContribution2 = z14.strictObject({
     localId: LocalContributionId2,
-    kind: z13.literal("message"),
+    kind: z14.literal("message"),
     /** The URI scheme of `uriModule` that cards of this type write to. */
     provider: UriScheme2,
     /** The local id of this plugin's URI module that handles the write. */
@@ -3441,82 +3533,82 @@ function createContributionsSchemas(canonical) {
     /** Shown when a send's outcome cannot be confirmed: where the person checks. */
     unknownMessage: NonEmptyString3,
     /** The payload fields holding the text a person may edit. A `subject` makes this a mail type. */
-    fields: z13.strictObject({
+    fields: z14.strictObject({
       body: ApprovalCardField,
       subject: ApprovalCardField.optional()
     }),
-    presentation: z13.strictObject({
-      showAccount: z13.boolean(),
-      recipient: z13.enum(["person", "target"])
+    presentation: z14.strictObject({
+      showAccount: z14.boolean(),
+      recipient: z14.enum(["person", "target"])
     }),
     /** One form per kind of card this provider supports. A kind left out is never bound. */
-    forms: z13.strictObject({
+    forms: z14.strictObject({
       inline: ApprovalCardForm2.optional(),
       saved: ApprovalCardForm2.optional(),
       stored: ApprovalCardStoredForm2.optional()
     }),
     /** What the card shows beyond its text, read from the delivery request. */
-    display: z13.strictObject({
+    display: z14.strictObject({
       /** How the renderer reads the body. Absent is Markdown, or plain for a stored draft. */
-      bodyFormat: z13.literal("mrkdwn").optional(),
+      bodyFormat: z14.literal("mrkdwn").optional(),
       /** The request field naming what this card replies to. */
       replyField: ApprovalCardValueName.optional(),
       /** Shown instead of the reply's id when that id means nothing to a person. */
       replyLabel: NonEmptyString3.optional(),
       /** Further request fields shown as labelled lines. */
-      facts: z13.array(z13.strictObject({
+      facts: z14.array(z14.strictObject({
         label: NonEmptyString3,
         field: ApprovalCardValueName
       })).optional()
     }).optional()
   });
-  const ToolIdentity = z13.strictObject({
+  const ToolIdentity = z14.strictObject({
     localId: LocalContributionId2,
     toolName: PluginToolName2,
     displayName: OptionalDisplayName,
     description: NonEmptyString3.optional()
   });
-  const ToolPermission2 = z13.strictObject({
-    kind: z13.enum(["read", "mutate", "destructive", "execute"]),
+  const ToolPermission2 = z14.strictObject({
+    kind: z14.enum(["read", "mutate", "destructive", "execute"]),
     ruleKey: NonEmptyString3.optional(),
     scheme: NonEmptyString3.optional(),
-    resourcePrefix: z13.string().max(256).optional(),
+    resourcePrefix: z14.string().max(256).optional(),
     // Arguments whose string values name the resources a call touches.
-    resourceArgs: z13.array(NonEmptyString3).min(1).optional(),
-    resourceTrim: z13.literal(true).optional(),
-    defaultPermission: z13.enum(["allow", "ask", "never"]).optional(),
+    resourceArgs: z14.array(NonEmptyString3).min(1).optional(),
+    resourceTrim: z14.literal(true).optional(),
+    defaultPermission: z14.enum(["allow", "ask", "never"]).optional(),
     /** First matching rule wins; every condition in its when list must hold. */
-    classificationRules: z13.array(z13.strictObject({
-      when: z13.array(z13.union([
-        z13.strictObject({
+    classificationRules: z14.array(z14.strictObject({
+      when: z14.array(z14.union([
+        z14.strictObject({
           arg: NonEmptyString3,
-          equals: z13.union([
-            z13.string(),
-            z13.number(),
-            z13.boolean(),
-            z13.null()
+          equals: z14.union([
+            z14.string(),
+            z14.number(),
+            z14.boolean(),
+            z14.null()
           ])
         }),
-        z13.strictObject({ arg: NonEmptyString3, present: z13.boolean() })
+        z14.strictObject({ arg: NonEmptyString3, present: z14.boolean() })
       ])).min(1).max(32),
-      kind: z13.enum(["read", "mutate", "destructive", "execute"]),
+      kind: z14.enum(["read", "mutate", "destructive", "execute"]),
       ruleKey: NonEmptyString3.optional()
     })).min(1).max(64).optional()
   });
-  const ToolContribution2 = z13.strictObject({
+  const ToolContribution2 = z14.strictObject({
     ...ToolIdentity.shape,
     parameters: JsonSchema.optional(),
-    executionMode: z13.enum(["sequential", "parallel"]).optional(),
+    executionMode: z14.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
-    promptGuidelines: z13.array(NonEmptyString3).optional(),
+    promptGuidelines: z14.array(NonEmptyString3).optional(),
     permission: ToolPermission2.optional()
   });
-  const AgentToolContribution2 = z13.strictObject({
+  const AgentToolContribution2 = z14.strictObject({
     ...ToolContribution2.shape,
     parameters: JsonSchema.optional(),
-    executionMode: z13.enum(["sequential", "parallel"]).optional(),
+    executionMode: z14.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
-    promptGuidelines: z13.array(NonEmptyString3).optional(),
+    promptGuidelines: z14.array(NonEmptyString3).optional(),
     // A local ref names an auth service declared in this manifest; a dotted ref names another
     // plugin's service, as `UriModuleContribution.authService` does.
     authService: AuthServiceReference2.optional(),
@@ -3524,17 +3616,17 @@ function createContributionsSchemas(canonical) {
     authScheme: LocalContributionId2.optional(),
     permission: ToolPermission2.optional()
   });
-  const ConverterContribution2 = z13.strictObject({
+  const ConverterContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     description: NonEmptyString3.optional(),
     /** MIME types this converter claims - contract data for introspection and
      *  collision checks; runtime match behavior stays the converter's `matches()`. */
-    mimeTypes: z13.array(MimeTypeString2).min(1),
+    mimeTypes: z14.array(MimeTypeString2).min(1),
     /** Extension fallbacks (no dot) used when a probe has no usable MIME type. */
-    extensions: z13.array(FileExtensionToken2).min(1).optional()
+    extensions: z14.array(FileExtensionToken2).min(1).optional()
   });
-  const UriOperationName = z13.enum([
+  const UriOperationName = z14.enum([
     "help",
     "read",
     "write",
@@ -3543,8 +3635,8 @@ function createContributionsSchemas(canonical) {
     "search",
     "delete"
   ]);
-  const UriPermissionDefault = z13.enum(["allow", "ask", "never"]);
-  const UriVerbSentences = z13.strictObject({
+  const UriPermissionDefault = z14.enum(["allow", "ask", "never"]);
+  const UriVerbSentences = z14.strictObject({
     read: NonEmptyString3.exactOptional(),
     list: NonEmptyString3.exactOptional(),
     search: NonEmptyString3.exactOptional(),
@@ -3552,83 +3644,83 @@ function createContributionsSchemas(canonical) {
     edit: NonEmptyString3.exactOptional(),
     delete: NonEmptyString3.exactOptional()
   });
-  const UriPatternInit = z13.strictObject({
+  const UriPatternInit = z14.strictObject({
     protocol: NonEmptyString3.exactOptional(),
     hostname: NonEmptyString3.exactOptional(),
     pathname: NonEmptyString3.exactOptional(),
-    search: z13.string().exactOptional()
+    search: z14.string().exactOptional()
   });
-  const UriClaimContribution = z13.discriminatedUnion("kind", [
-    z13.strictObject({ kind: z13.literal("scheme"), scheme: UriScheme2 }),
-    z13.strictObject({
-      kind: z13.literal("uriPattern"),
+  const UriClaimContribution = z14.discriminatedUnion("kind", [
+    z14.strictObject({ kind: z14.literal("scheme"), scheme: UriScheme2 }),
+    z14.strictObject({
+      kind: z14.literal("uriPattern"),
       pattern: UriPatternInit,
       normalizeTo: NonEmptyString3.exactOptional(),
       route: LocalContributionId2.exactOptional(),
       sourceUrl: NonEmptyString3.exactOptional(),
       title: NonEmptyString3.exactOptional(),
-      examples: z13.array(NonEmptyString3).exactOptional()
+      examples: z14.array(NonEmptyString3).exactOptional()
     }),
-    z13.strictObject({
-      kind: z13.literal("urlPattern"),
+    z14.strictObject({
+      kind: z14.literal("urlPattern"),
       pattern: UriPatternInit,
       normalizeTo: NonEmptyString3.exactOptional(),
       route: LocalContributionId2.exactOptional(),
-      examples: z13.array(NonEmptyString3).exactOptional()
+      examples: z14.array(NonEmptyString3).exactOptional()
     })
   ]);
-  const UriTemplateContribution = z13.strictObject({
+  const UriTemplateContribution = z14.strictObject({
     uri: NonEmptyString3,
     description: NonEmptyString3,
-    operations: z13.array(UriOperationName).exactOptional(),
-    operationDocs: z13.partialRecord(UriOperationName, NonEmptyString3).exactOptional(),
-    operationDefaults: z13.partialRecord(UriOperationName, UriPermissionDefault).exactOptional()
+    operations: z14.array(UriOperationName).exactOptional(),
+    operationDocs: z14.partialRecord(UriOperationName, NonEmptyString3).exactOptional(),
+    operationDefaults: z14.partialRecord(UriOperationName, UriPermissionDefault).exactOptional()
   });
   const UriAuthActionRuleConditions = {
-    operations: z13.array(UriOperationName).min(1).exactOptional(),
-    routes: z13.array(LocalContributionId2).min(1).exactOptional(),
-    query: z13.record(NonEmptyString3, z13.string()).exactOptional()
+    operations: z14.array(UriOperationName).min(1).exactOptional(),
+    routes: z14.array(LocalContributionId2).min(1).exactOptional(),
+    query: z14.record(NonEmptyString3, z14.string()).exactOptional()
   };
-  const UriAuthActionRule = z13.union([
-    z13.strictObject({ ...UriAuthActionRuleConditions, action: NonEmptyString3 }),
-    z13.strictObject({ ...UriAuthActionRuleConditions, public: z13.literal(true) })
+  const UriAuthActionRule = z14.union([
+    z14.strictObject({ ...UriAuthActionRuleConditions, action: NonEmptyString3 }),
+    z14.strictObject({ ...UriAuthActionRuleConditions, public: z14.literal(true) })
   ]);
-  const UriAgentHintContribution = z13.strictObject({
+  const UriAgentHintContribution = z14.strictObject({
     summary: NonEmptyString3,
-    commonFlows: z13.array(z13.strictObject({
+    commonFlows: z14.array(z14.strictObject({
       label: NonEmptyString3,
       when: NonEmptyString3.exactOptional(),
       example: NonEmptyString3
     })).exactOptional(),
     helpUri: NonEmptyString3.exactOptional(),
-    triggers: z13.strictObject({
-      keywords: z13.array(NonEmptyString3).exactOptional(),
-      patterns: z13.array(NonEmptyString3).exactOptional()
+    triggers: z14.strictObject({
+      keywords: z14.array(NonEmptyString3).exactOptional(),
+      patterns: z14.array(NonEmptyString3).exactOptional()
     }).exactOptional(),
-    skills: z13.array(NonEmptyString3).exactOptional()
+    skills: z14.array(NonEmptyString3).exactOptional()
   });
-  const ScreenActionOption = z13.discriminatedUnion("kind", [
-    z13.strictObject({
-      kind: z13.literal("exact"),
+  const ScreenActionOption = z14.discriminatedUnion("kind", [
+    z14.strictObject({
+      kind: z14.literal("exact"),
       description: NonEmptyString3,
-      verb: z13.enum(["read", "write", "edit", "delete"]),
+      verb: z14.enum(["read", "write", "edit", "delete"]),
       uri: NonEmptyString3
     }),
-    z13.strictObject({
-      kind: z13.literal("catch-all"),
+    z14.strictObject({
+      kind: z14.literal("catch-all"),
       description: NonEmptyString3,
-      verb: z13.enum(["read", "write", "edit", "delete"])
+      verb: z14.enum(["read", "write", "edit", "delete"])
     })
   ]);
   const UriModuleFactsShape = {
-    revisionBacked: z13.literal(true).optional(),
-    mailCalibrationSource: z13.literal(true).optional(),
-    screenActions: z13.strictObject({
+    revisionBacked: z14.literal(true).optional(),
+    mailCalibrationSource: z14.literal(true).optional(),
+    screenActions: z14.strictObject({
       scheme: UriScheme2,
-      hosts: z13.array(NonEmptyString3),
-      paths: z13.array(NonEmptyString3).min(1).optional(),
-      apps: z13.array(NonEmptyString3),
-      options: z13.record(NonEmptyString3, ScreenActionOption)
+      hosts: z14.array(NonEmptyString3),
+      paths: z14.array(NonEmptyString3).min(1).optional(),
+      apps: z14.array(NonEmptyString3),
+      options: z14.record(NonEmptyString3, ScreenActionOption)
     }).superRefine((catalog, ctx) => {
       if (catalog.hosts.length === 0 && catalog.apps.length === 0) {
         ctx.addIssue({
@@ -3653,29 +3745,29 @@ function createContributionsSchemas(canonical) {
       }
     }).exactOptional(),
     /** Addresses the module answers, in match order; see `@herd/uri`'s `UriClaim`. */
-    claims: z13.array(UriClaimContribution).min(1).exactOptional(),
+    claims: z14.array(UriClaimContribution).min(1).exactOptional(),
     /** The module's routes, as its scheme-root `help` lists them. */
-    templates: z13.array(UriTemplateContribution).exactOptional(),
-    verbs: z13.strictObject({
-      readable: z13.boolean(),
-      writable: z13.boolean(),
-      editable: z13.boolean(),
-      deletable: z13.boolean().exactOptional(),
-      listable: z13.boolean(),
+    templates: z14.array(UriTemplateContribution).exactOptional(),
+    verbs: z14.strictObject({
+      readable: z14.boolean(),
+      writable: z14.boolean(),
+      editable: z14.boolean(),
+      deletable: z14.boolean().exactOptional(),
+      listable: z14.boolean(),
       /** The module answers `search`. */
-      searchable: z13.boolean().exactOptional()
+      searchable: z14.boolean().exactOptional()
     }).exactOptional(),
     verbDocs: UriVerbSentences.exactOptional(),
-    permissionDefaults: z13.strictObject({
+    permissionDefaults: z14.strictObject({
       read: UriPermissionDefault.exactOptional(),
       write: UriPermissionDefault.exactOptional(),
       edit: UriPermissionDefault.exactOptional(),
       delete: UriPermissionDefault.exactOptional()
     }).exactOptional(),
     /** Which sign-in action each call needs: the action table and the rules that pick one. */
-    authActions: z13.strictObject({
-      actions: z13.record(NonEmptyString3, ScopeRequirement2),
-      rules: z13.array(UriAuthActionRule).min(1)
+    authActions: z14.strictObject({
+      actions: z14.record(NonEmptyString3, ScopeRequirement2),
+      rules: z14.array(UriAuthActionRule).min(1)
     }).superRefine((policy, ctx) => {
       policy.rules.forEach((rule, index) => {
         if ("action" in rule && !(rule.action in policy.actions)) {
@@ -3687,18 +3779,20 @@ function createContributionsSchemas(canonical) {
         }
       });
     }).exactOptional(),
-    requiresConnection: z13.literal(true).exactOptional(),
-    acceptsSourceCopy: z13.literal(false).exactOptional(),
-    acceptsWriteSources: z13.literal(true).exactOptional(),
-    acceptsBytes: z13.literal(true).exactOptional(),
-    ownsLineSelectors: z13.literal(true).exactOptional(),
+    requiresConnection: z14.literal(true).exactOptional(),
+    acceptsSourceCopy: z14.literal(false).exactOptional(),
+    acceptsWriteSources: z14.literal(true).exactOptional(),
+    acceptsBytes: z14.literal(true).exactOptional(),
+    ownsLineSelectors: z14.literal(true).exactOptional(),
     description: NonEmptyString3.exactOptional(),
     agentHint: UriAgentHintContribution.exactOptional()
   };
-  const UriModuleFacts2 = z13.strictObject(UriModuleFactsShape);
-  const UriModuleContribution2 = z13.strictObject({
+  const UriModuleFacts2 = z14.strictObject(UriModuleFactsShape);
+  const UriModuleContribution2 = z14.strictObject({
     localId: LocalContributionId2,
-    schemes: z13.array(UriScheme2).min(1),
+    /** Opaque adapter id for account-bound connections; never namespaced. */
+    adapterId: z14.string().min(1).optional(),
+    schemes: z14.array(UriScheme2).min(1),
     displayName: OptionalDisplayName,
     ...UriModuleFactsShape,
     // A local ref (no dot) must name an auth service declared in this same
@@ -3721,17 +3815,18 @@ function createContributionsSchemas(canonical) {
     // `knownResources` permission grant (`api.knownResources`). Present-means-on
     // (`true` or absent; `false` is not a state). Decision record:
     // `lab/user-plugins/decisions/014-known-resources-ledger.md`.
-    knownResources: z13.literal(true).optional(),
+    knownResources: z14.literal(true).optional(),
     // The module's code defines `describeOperation`, the approval card's facts for a call. The
     // daemon reads it here because it may hold only the manifest (a plugin that runs in the
     // plugin host), and the host refuses a module whose code disagrees.
-    describesOperations: z13.literal(true).optional(),
+    describesOperations: z14.literal(true).optional(),
     // The module's code defines `lookupWebLink`, which finds a resource's page when someone opens
     // it. The daemon reads it here for the same reason, and the host refuses a module whose code
     // disagrees.
-    looksUpWebLinks: z13.literal(true).optional()
+    looksUpWebLinks: z14.literal(true).optional()
   });
   const AppUriModuleContribution2 = UriModuleContribution2.omit({
+    adapterId: true,
     authActions: true,
     authService: true,
     authScheme: true,
@@ -3739,35 +3834,36 @@ function createContributionsSchemas(canonical) {
     describesOperations: true,
     looksUpWebLinks: true
   });
-  const AppDataSourceStore = z13.discriminatedUnion("shape", [
-    z13.strictObject({
-      shape: z13.literal("rows"),
+  const AppDataSourceStore = z14.discriminatedUnion("shape", [
+    z14.strictObject({
+      shape: z14.literal("rows"),
       rowsField: NonEmptyString3,
-      key: z13.array(NonEmptyString3).min(1)
+      key: z14.array(NonEmptyString3).min(1)
     }),
-    z13.strictObject({ shape: z13.literal("value") })
+    z14.strictObject({ shape: z14.literal("value") })
   ]);
-  const AppDataSourceContribution2 = z13.strictObject({
+  const AppDataSourceContribution2 = z14.strictObject({
     localId: LocalContributionId2,
-    scope: z13.enum(["runtime", "account", "session"]),
-    snapshot: z13.strictObject({
-      version: z13.number().int().positive(),
+    scope: z14.enum(["runtime", "account", "session"]),
+    snapshot: z14.strictObject({
+      version: z14.number().int().positive(),
       schema: JsonSchema
     }),
-    change: z13.strictObject({
-      version: z13.number().int().positive(),
+    change: z14.strictObject({
+      version: z14.number().int().positive(),
       schema: JsonSchema,
       /** Review-only claim; source schemas and behavioral tests enforce it because the daemon treats changes as opaque. */
-      semantics: z13.discriminatedUnion("kind", [
-        z13.strictObject({ kind: z13.literal("incremental") }),
-        z13.strictObject({
-          kind: z13.literal("snapshot-replacement"),
-          maxEncodedBytes: z13.number().int().positive(),
+      semantics: z14.discriminatedUnion("kind", [
+        z14.strictObject({ kind: z14.literal("incremental") }),
+        z14.strictObject({
+          kind: z14.literal("snapshot-replacement"),
+          maxEncodedBytes: z14.number().int().positive(),
           rationale: pluginString(canonical).min(1).max(1024)
         })
       ]).optional()
     }),
     read: AppDataSourceRead.optional(),
+    messageDraft: z14.strictObject({ schemes: z14.array(UriScheme2).min(1) }).optional(),
     store: AppDataSourceStore.optional()
   }).superRefine((source, ctx) => {
     if (source.read !== void 0 && source.scope !== "session") {
@@ -3777,6 +3873,13 @@ function createContributionsSchemas(canonical) {
         message: "App-data read operations require session scope."
       });
     }
+    if (source.messageDraft !== void 0 && source.read === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["messageDraft"],
+        message: "Message draft projections require a session read operation."
+      });
+    }
     if (source.store === void 0)
       return;
     const replaces = source.change.semantics?.kind === "snapshot-replacement";
@@ -3788,25 +3891,36 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const WhiteboardTypeStorage2 = z13.discriminatedUnion("kind", [
-    z13.strictObject({ kind: z13.literal("json") }),
-    z13.strictObject({ kind: z13.literal("payload") }),
-    z13.strictObject({
-      kind: z13.literal("markdown"),
+  const WhiteboardTypeStorage2 = z14.discriminatedUnion("kind", [
+    z14.strictObject({ kind: z14.literal("json") }),
+    z14.strictObject({ kind: z14.literal("payload") }),
+    z14.strictObject({
+      kind: z14.literal("markdown"),
       bodyField: NonEmptyString3
     })
   ]);
-  const WhiteboardTypeContribution2 = z13.strictObject({
+  const WhiteboardTypeContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
-    schemaVersion: z13.number().int().positive(),
+    schemaVersion: z14.number().int().positive(),
     storage: WhiteboardTypeStorage2,
-    valueSchema: JsonSchema
+    valueSchema: JsonSchema,
+    directory: z14.array(z14.string().regex(/^[A-Za-z0-9][A-Za-z0-9_-]*$/u)).min(1).optional(),
+    reference: WhiteboardEntryReference.optional(),
+    handover: z14.literal(true).optional()
+  }).superRefine((type, ctx) => {
+    if (type.handover === true && type.storage.kind !== "markdown") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["handover"],
+        message: "Handover content requires Markdown storage."
+      });
+    }
   });
-  const AppDataMaterializerContribution2 = z13.strictObject({
+  const AppDataMaterializerContribution2 = z14.strictObject({
     source: LocalContributionId2
   });
-  const ArtifactUriModuleContribution2 = z13.strictObject({
+  const ArtifactUriModuleContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     /** The single `scheme://` this module owns; also the on-disk artifact kind. */
     scheme: UriScheme2,
@@ -3820,17 +3934,17 @@ function createContributionsSchemas(canonical) {
      * composes its description from the plugin's own display name + scheme - a per-scheme label
      * would have no path to matter, so it is intentionally omitted rather than accepted-and-ignored.
      */
-    editable: z13.boolean().optional(),
+    editable: z14.boolean().optional(),
     /** Opt in to `list` over the kind's stored names. Default false. Mirrors
      * `CreateArtifactUriModuleOptions.listable`. */
-    listable: z13.boolean().optional(),
+    listable: z14.boolean().optional(),
     /**
      * Opt in to `delete` for same-session entries. Default false. Deletion
      * unlinks the stored file - no trash tier; a kind that wants recoverable
      * deletion is not artifact-backed. Mirrors
      * `CreateArtifactUriModuleOptions.deletable`.
      */
-    deletable: z13.boolean().optional(),
+    deletable: z14.boolean().optional(),
     /**
      * Opt in to the `{ content, mode: "append" }` write envelope, which extends
      * stored text instead of replacing it (concurrent-appender-safe: the host
@@ -3838,7 +3952,7 @@ function createContributionsSchemas(canonical) {
      * keep their verbatim round-trip. Mirrors
      * `CreateArtifactUriModuleOptions.appendable`.
      */
-    appendable: z13.boolean().optional(),
+    appendable: z14.boolean().optional(),
     /**
      * Which sessions share one storage namespace. Default `"session"` - the existing
      * per-session behavior (each session gets its own kind directory; other sessions'
@@ -3849,14 +3963,14 @@ function createContributionsSchemas(canonical) {
      * the scope; the host derives the family root from provenance it already holds, so
      * family identity never crosses the SDK boundary.
      */
-    storageScope: z13.enum(["session", "family"]).optional()
+    storageScope: z14.enum(["session", "family"]).optional()
   });
-  const CliBindingContribution2 = z13.strictObject({
+  const CliBindingContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     binary: CliBinaryName2,
-    aliases: z13.array(CliBinaryName2).optional(),
+    aliases: z14.array(CliBinaryName2).optional(),
     /** Where the binary comes from. Omitted => `"vendored"` (decision 007). */
-    provider: z13.enum(["vendored", "path"]).optional(),
+    provider: z14.enum(["vendored", "path"]).optional(),
     // A local ref (no dot) must name an auth service declared in this same
     // manifest; a qualified ref (dotted, e.g. `google.account`) names another
     // plugin's already-minted global id and is recorded, not resolved, here (see
@@ -3869,20 +3983,20 @@ function createContributionsSchemas(canonical) {
      * MUST be absent for a `path` binding, which can never receive a token.
      */
     authEnvVar: CliAuthEnvVarName2.optional(),
-    readOnly: z13.array(NonEmptyString3),
-    write: z13.array(NonEmptyString3)
+    readOnly: z14.array(NonEmptyString3),
+    write: z14.array(NonEmptyString3)
   });
-  const GitHostContribution2 = z13.strictObject({
+  const GitHostContribution2 = z14.strictObject({
     host: GitHostName2,
     authService: LocalContributionId2,
     basicAuthUser: GitBasicAuthUser2
   });
-  const ResourceContribution2 = z13.strictObject({
+  const ResourceContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     description: NonEmptyString3.optional()
   });
-  const SkillContribution2 = z13.strictObject({
+  const SkillContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     /** Model-visible one-liner: when to reach for this skill. */
@@ -3890,18 +4004,18 @@ function createContributionsSchemas(canonical) {
     /** The SKILL.md-style file inside the package carrying the full instructions. */
     path: PackageAssetPath2
   });
-  const PluginSkillSourceDeclaration2 = z13.discriminatedUnion("channel", [
-    z13.strictObject({
-      channel: z13.literal("installer"),
+  const PluginSkillSourceDeclaration2 = z14.discriminatedUnion("channel", [
+    z14.strictObject({
+      channel: z14.literal("installer"),
       localId: LocalContributionId2,
       displayName: OptionalDisplayName,
       /** The package-runner executable, e.g. `npx` - checked against the daemon's allowlist. */
       command: NonEmptyString3,
       /** Its argv, e.g. `["skills", "add", "clerk/skills"]`. */
-      args: z13.array(NonEmptyString3)
+      args: z14.array(NonEmptyString3)
     }),
-    z13.strictObject({
-      channel: z13.literal("git-clone"),
+    z14.strictObject({
+      channel: z14.literal("git-clone"),
       localId: LocalContributionId2,
       displayName: OptionalDisplayName,
       /** The repository locator - canonicalized and hygiene-checked by the daemon. */
@@ -3912,17 +4026,17 @@ function createContributionsSchemas(canonical) {
       subdir: NonEmptyString3.optional()
     })
   ]);
-  const SearchProviderContribution2 = z13.strictObject({
+  const SearchProviderContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
-    schemes: z13.array(UriScheme2).optional()
+    schemes: z14.array(UriScheme2).optional()
   });
-  const InteractionDriverContribution2 = z13.strictObject({
+  const InteractionDriverContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
-    kind: z13.enum(["browser", "computer-use"])
+    kind: z14.enum(["browser", "computer-use"])
   });
-  const EntityResolverContribution2 = z13.strictObject({
+  const EntityResolverContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     /** The `kay.agent` URI module (this manifest's own `contributes.uriModules[].localId`) whose
@@ -3930,17 +4044,17 @@ function createContributionsSchemas(canonical) {
     uriModule: LocalContributionId2,
     /** `person` | `channel` | `repo` | `pull-request` | ... -- drives avatar-first vs glyph-first row
      *  anatomy (N10-R2) and lets the renderer request a narrower `entityTypes` filter. */
-    entityTypes: z13.array(NonEmptyString3).min(1),
+    entityTypes: z14.array(NonEmptyString3).min(1),
     /** The URI namespace/route `search()` is called against, e.g. `slack://directory` or
      *  `github://search/repositories` -- the resolver's fixed search scope; the live user query is
      *  the `search()` call's `query` param, never concatenated into this string. */
     uriHint: NonEmptyString3
   });
-  const AgentRenderContribution2 = z13.strictObject({
+  const AgentRenderContribution2 = z14.strictObject({
     localId: LocalContributionId2,
-    resultKinds: z13.array(NonEmptyString3).min(1)
+    resultKinds: z14.array(NonEmptyString3).min(1)
   });
-  const PluginCardContribution2 = z13.strictObject({
+  const PluginCardContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     description: NonEmptyString3,
     inputs: JsonSchema,
@@ -3948,26 +4062,26 @@ function createContributionsSchemas(canonical) {
     submitEndpoint: LocalContributionId2,
     authService: AuthServiceReference2.optional()
   });
-  const EndpointContribution2 = z13.strictObject({
+  const EndpointContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     requestSchema: JsonSchema.optional(),
     responseSchema: JsonSchema.optional(),
-    auth: z13.strictObject({
+    auth: z14.strictObject({
       service: AuthServiceReference2,
-      schemes: z13.array(AuthSchemeReference2).min(1),
+      schemes: z14.array(AuthSchemeReference2).min(1),
       purpose: NonEmptyString3
     }).optional(),
-    timeoutMs: z13.number().int().positive().optional()
+    timeoutMs: z14.number().int().positive().optional()
   });
-  const WorkflowContribution2 = z13.strictObject({
+  const WorkflowContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     name: NonEmptyString3,
     /** Plain-text purpose, at most 280 characters. */
     description: NonEmptyString3,
     /** How often it runs. The automations engine enforces its scheduling floor. */
-    everyMs: z13.number().int().positive(),
-    auth: z13.strictObject({
+    everyMs: z14.number().int().positive(),
+    auth: z14.strictObject({
       /** A local ref names a service in this manifest; a dotted ref names another plugin's. */
       service: AuthServiceReference2,
       scheme: AuthSchemeReference2,
@@ -3975,7 +4089,7 @@ function createContributionsSchemas(canonical) {
        * Scopes each account's token must hold. Omitted, the host asks for the first scope of the
        * `background-job` grant's `allowedScopes` that the account holds.
        */
-      scopes: z13.array(NonEmptyString3).min(1).optional()
+      scopes: z14.array(NonEmptyString3).min(1).optional()
     }).optional()
   });
   const McpServerUrl2 = pluginString(canonical).min(1).refine((value) => {
@@ -3991,8 +4105,8 @@ function createContributionsSchemas(canonical) {
   }, {
     message: "mcp server url must be https://, or http:// only for localhost/127.0.0.1 test servers"
   });
-  const McpServerAuthMode2 = z13.enum(["oauth", "api-key", "none"]);
-  const McpServerContribution2 = z13.strictObject({
+  const McpServerAuthMode2 = z14.enum(["oauth", "api-key", "none"]);
+  const McpServerContribution2 = z14.strictObject({
     url: McpServerUrl2,
     auth: McpServerAuthMode2.optional(),
     authService: LocalContributionId2.optional()
@@ -4005,24 +4119,24 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const McpServerContributions2 = z13.record(LocalContributionId2, McpServerContribution2);
-  const AppEventSubscription2 = z13.strictObject({
+  const McpServerContributions2 = z14.record(LocalContributionId2, McpServerContribution2);
+  const AppEventSubscription2 = z14.strictObject({
     localId: LocalContributionId2,
     event: NonEmptyString3
   });
-  const ContextContributorContribution2 = z13.strictObject({
+  const ContextContributorContribution2 = z14.strictObject({
     localId: LocalContributionId2.max(64),
     displayName: OptionalDisplayName,
     description: NonEmptyString3.optional()
   });
-  const EventDefinitionVersion = z13.number().int().positive();
-  const PluginEventDefinitionContribution2 = z13.strictObject({
+  const EventDefinitionVersion = z14.number().int().positive();
+  const PluginEventDefinitionContribution2 = z14.strictObject({
     localId: PluginEventLocalId2,
     displayName: OptionalDisplayName,
     description: NonEmptyString3.optional(),
     version: canonical ? EventDefinitionVersion : EventDefinitionVersion.default(1),
     uriScheme: UriScheme2,
-    relatedKeys: z13.array(NonEmptyString3).readonly().optional(),
+    relatedKeys: z14.array(NonEmptyString3).readonly().optional(),
     payloadSchema: JsonSchema.optional(),
     /**
      * This event is a signal: its payload is the shared `PluginSignal` v1 and every publish
@@ -4031,7 +4145,7 @@ function createContributionsSchemas(canonical) {
      * and `relatedKeys` holds `thread` plus any of `from`, `to`, `cc`. Turning it on changes
      * the payload, so bump `version` with it.
      */
-    signal: z13.boolean().optional()
+    signal: z14.boolean().optional()
   }).superRefine((definition, context) => {
     if (definition.signal !== true)
       return;
@@ -4052,42 +4166,42 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const PluginNotificationRuleContribution2 = z13.strictObject({
+  const PluginNotificationRuleContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     /** The same-plugin `eventDefinitions` local id this rule matches. */
     event: PluginEventLocalId2,
-    where: z13.string({ error: (issue) => whereNotAStringMessage(issue.input) }).optional(),
+    where: z14.string({ error: (issue) => whereNotAStringMessage(issue.input) }).optional(),
     rule: JsonObject
   });
-  const PluginProductEventContribution2 = z13.union([
-    z13.strictObject({
+  const PluginProductEventContribution2 = z14.union([
+    z14.strictObject({
       name: NonEmptyString3,
       description: NonEmptyString3.optional(),
-      fields: z13.record(z13.string(), JsonObject).optional()
+      fields: z14.record(z14.string(), JsonObject).optional()
     }),
-    z13.strictObject({ catalogEvent: NonEmptyString3 })
+    z14.strictObject({ catalogEvent: NonEmptyString3 })
   ]);
-  const UiEventSubscriptionContribution2 = z13.strictObject({
+  const UiEventSubscriptionContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     event: NonEmptyString3
   });
-  const DeviceDelegationContribution2 = z13.strictObject({
+  const DeviceDelegationContribution2 = z14.strictObject({
     localId: LocalContributionId2,
-    device: z13.enum(["microphone"]),
-    delegateAs: z13.enum(["clip", "stream", "status"])
+    device: z14.enum(["microphone"]),
+    delegateAs: z14.enum(["clip", "stream", "status"])
   });
-  const CorpusAccess = z13.enum(["read"]);
-  const SessionReaderContribution2 = z13.strictObject({
+  const CorpusAccess = z14.enum(["read"]);
+  const SessionReaderContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     access: canonical ? CorpusAccess : CorpusAccess.default("read")
   });
-  const UiCommandContribution2 = z13.strictObject({
+  const UiCommandContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     title: NonEmptyString3,
     icon: PackageAssetPath2.optional(),
-    button: z13.enum(["tabStrip"]).optional(),
-    menu: z13.enum(["help"]).optional(),
+    button: z14.enum(["tabStrip"]).optional(),
+    menu: z14.enum(["help"]).optional(),
     where: NonEmptyString3.optional()
   }).superRefine((command, ctx) => {
     if (command.where === void 0)
@@ -4108,7 +4222,7 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const UiSlotContribution2 = z13.strictObject({
+  const UiSlotContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     slot: NonEmptyString3,
     title: NonEmptyString3.optional()
@@ -4122,84 +4236,86 @@ function createContributionsSchemas(canonical) {
     "blob",
     "about"
   ]);
-  const ReferenceOpenBehavior2 = z13.discriminatedUnion("kind", [
-    z13.strictObject({ kind: z13.literal("working-document") }),
-    z13.strictObject({ kind: z13.literal("browser-pane") }),
+  const ReferenceOpenBehavior2 = z14.discriminatedUnion("kind", [
+    z14.strictObject({ kind: z14.literal("working-document") }),
+    z14.strictObject({ kind: z14.literal("browser-pane") }),
     /**
      * Open one of the pages this manifest declares in `pages`. The window answers this from the
      * manifest, and the page gets the whole address as its `objectId` unless `addresses` says
      * otherwise. Needs no web address, so a plugin-only resource (`user-todo://items/3`) can pill.
      */
-    z13.strictObject({ kind: z13.literal("page"), pageId: NonEmptyString3 }),
+    z14.strictObject({ kind: z14.literal("page"), pageId: NonEmptyString3 }),
     /**
      * Hand the address's link to an app on this machine. The module's claims fill the link as its
      * `sourceUrl`, and `schemes` names every scheme those links may use: main opens a link only when
      * a loaded plugin declares its scheme here. A plugin the person installed can't declare this.
      */
-    z13.strictObject({
-      kind: z13.literal("local-app"),
-      schemes: z13.array(UriScheme2.refine((scheme) => !NOT_LOCAL_APP_SCHEMES.has(scheme), "Names the web, a file or script, not an app on this machine")).min(1)
+    z14.strictObject({
+      kind: z14.literal("local-app"),
+      schemes: z14.array(UriScheme2.refine((scheme) => !NOT_LOCAL_APP_SCHEMES.has(scheme), "Names the web, a file or script, not an app on this machine")).min(1)
     })
   ]);
-  const ReferencePresentationVariant2 = z13.strictObject({
+  const ReferencePresentationVariant2 = z14.strictObject({
     resourceKind: NonEmptyString3,
     presentationPluginId: PluginId2.optional()
   });
-  const ReferencePresentationVariants2 = z13.record(MimeTypeString2, ReferencePresentationVariant2);
-  const ReferencePresentationUriPattern2 = z13.strictObject({
+  const ReferencePresentationVariants2 = z14.record(MimeTypeString2, ReferencePresentationVariant2);
+  const ReferencePresentationUriPattern2 = z14.strictObject({
     protocol: NonEmptyString3,
-    hostname: NonEmptyString3,
-    pathname: z13.string().optional(),
-    search: z13.string().optional()
+    hostname: z14.string(),
+    pathname: z14.string().optional(),
+    search: z14.string().optional()
   });
-  const ReferencePresentationUrlClaim2 = z13.strictObject({
-    kind: z13.literal("urlPattern"),
+  const ReferencePresentationUrlClaim2 = z14.strictObject({
+    kind: z14.literal("urlPattern"),
     pattern: ReferencePresentationUriPattern2.extend({
-      protocol: z13.enum(["http", "https"])
+      protocol: z14.enum(["http", "https"])
     }),
     /** The claim's mark: an SVG file in the plugin, drawn in its own colours. */
     brandIcon: PackageAssetPath2.optional()
   });
-  const ReferencePresentationTooltip2 = z13.strictObject({
+  const ReferencePresentationTooltip2 = z14.strictObject({
     /** Same-plugin kay.ui app mounted with read-only reference URI context. */
     app: LocalContributionId2,
     pattern: ReferencePresentationUriPattern2
   });
-  const ReferencePresentationAddress2 = z13.strictObject({
+  const ReferencePresentationAddress2 = z14.strictObject({
     pattern: ReferencePresentationUriPattern2,
     objectId: NonEmptyString3.optional(),
-    open: z13.strictObject({ kind: z13.literal("none") }).optional()
+    resourceKind: NonEmptyString3.optional(),
+    label: NonEmptyString3.optional(),
+    open: z14.strictObject({ kind: z14.literal("none") }).optional()
   });
-  const ReferencePresentationAccountLinkPage = z13.strictObject({
+  const ReferencePresentationAccountLinkPage = z14.strictObject({
     /** A literal host name. */
-    hostname: z13.string().regex(/^[a-z0-9.-]+$/, "An account link's hostname is a literal lower-case host name."),
-    pathname: z13.string().optional(),
+    hostname: z14.string().regex(/^[a-z0-9.-]+$/, "An account link's hostname is a literal lower-case host name."),
+    pathname: z14.string().optional(),
     /** A page matching one of these already names its account, so it stays as it is. */
-    unlessPathname: z13.array(z13.string()).min(1).optional(),
+    unlessPathname: z14.array(z14.string()).min(1).optional(),
     /** The path the page opens at, in place of its own. */
-    setPathname: z13.string().startsWith("/").optional(),
+    setPathname: z14.string().startsWith("/").optional(),
     /** Query values to add. A page that already has one of these names stays as it is. */
-    addQuery: z13.record(NonEmptyString3, NonEmptyString3)
+    addQuery: z14.record(NonEmptyString3, NonEmptyString3)
   });
-  const ReferencePresentationAccountLinkAddress = z13.strictObject({
+  const ReferencePresentationAccountLinkAddress = z14.strictObject({
     pattern: ReferencePresentationUriPattern2,
-    url: z13.string().regex(/^https?:\/\//, "An account link's url is a web page.")
+    url: z14.string().regex(/^https?:\/\//, "An account link's url is a web page.")
   });
-  const ReferencePresentationAccountLinks2 = z13.strictObject({
-    label: z13.enum(["email", "name"]).optional(),
-    pages: z13.array(ReferencePresentationAccountLinkPage).min(1).optional(),
-    addresses: z13.array(ReferencePresentationAccountLinkAddress).min(1).optional()
+  const ReferencePresentationAccountLinks2 = z14.strictObject({
+    label: z14.enum(["email", "name"]).optional(),
+    pages: z14.array(ReferencePresentationAccountLinkPage).min(1).optional(),
+    addresses: z14.array(ReferencePresentationAccountLinkAddress).min(1).optional()
   });
-  const ReferencePresentationWords2 = z13.strictObject({
+  const ReferencePresentationWords2 = z14.strictObject({
     /** The row's mark, for a source with no icon of its own. Left out: the plugin's main icon. */
-    glyph: z13.enum(TOOL_GLYPHS).optional(),
+    glyph: z14.enum(TOOL_GLYPHS).optional(),
     /** The thing an address names ("channel" in "Read Slack channel"). Left out: the row reads the scheme's own name. */
     kind: NonEmptyString3.optional(),
     /**
      * A more specific kind by the address's shape. The first row that matches decides, and an
      * address no row matches reads `kind`.
      */
-    kinds: z13.array(z13.strictObject({
+    kinds: z14.array(z14.strictObject({
       pattern: ReferencePresentationUriPattern2,
       kind: NonEmptyString3
     })).min(1).optional(),
@@ -4208,7 +4324,7 @@ function createContributionsSchemas(canonical) {
     /** What the live phrase names ("Slack" in "Reading Slack"). Left out: the bare verb ("Reading"). */
     target: NonEmptyString3.optional(),
     /** `kind` already says which source this is: "Edited plan", not "Edited Plan plan". */
-    kindNamesSource: z13.literal(true).optional()
+    kindNamesSource: z14.literal(true).optional()
   }).superRefine((value, ctx) => {
     if (value.kind === void 0 && (value.glyph !== void 0 || value.kindNamesSource !== void 0 || value.kinds !== void 0)) {
       ctx.addIssue({
@@ -4218,7 +4334,7 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const ReferencePresentationContribution2 = z13.strictObject({
+  const ReferencePresentationContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     /** This manifest's URI module. Leave it out only for an address another layer serves. */
     uriModule: LocalContributionId2.optional(),
@@ -4229,7 +4345,7 @@ function createContributionsSchemas(canonical) {
      */
     scheme: UriScheme2.optional(),
     /** Which of the addresses open the page, and on what. Read by the window. */
-    addresses: z13.array(ReferencePresentationAddress2).min(1).optional(),
+    addresses: z14.array(ReferencePresentationAddress2).min(1).optional(),
     /** Comes with `open`. A presentation with neither only words its module's addresses. */
     resourceKind: NonEmptyString3.optional(),
     /** How the address opens. Left out, it stays plain text. */
@@ -4237,7 +4353,7 @@ function createContributionsSchemas(canonical) {
     /** MIME-specific resource kinds; absent keys use the base presentation. */
     variants: ReferencePresentationVariants2.optional(),
     /** Lexical public URL claims used only for host-rendered browser presentations. */
-    claims: z13.array(ReferencePresentationUrlClaim2).optional(),
+    claims: z14.array(ReferencePresentationUrlClaim2).optional(),
     /** Informational app presentation matched against the canonical resource URI. */
     tooltip: ReferencePresentationTooltip2.optional(),
     /** What the transcript calls this module's addresses. Needs a `uriModule`. */
@@ -4320,8 +4436,15 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const KayUiAppHostCapability2 = z13.enum([
+  const KayUiAppHostCapability2 = z14.enum([
     "navigation.open-session",
+    "navigation.open-external",
+    "configuration.read",
+    "auth-services.read",
+    "connect-flows.read",
+    "connect-flows.dismiss",
+    "support.report",
+    "navigation.open-page",
     // Lets `navigation.openChat` create a blank chat (no message, no model
     // turn) when no session id is given. It never sends anything.
     "sessions.create",
@@ -4331,12 +4454,15 @@ function createContributionsSchemas(canonical) {
     // Draws Bonsai's markdown document view in the app's page (`BonsaiMarkdownDocumentView`).
     // It reads and saves nothing: the app supplies the text and keeps the edits.
     "markdown.document-view",
-    "models.complete",
     // Draws links the host resolves and opens (`BonsaiReferencePill`, `BonsaiReferenceRow`,
     // `BonsaiReferenceMarkdown`). A person's click on one can open a session or another plugin's page.
     "references.open",
     // Server-rated organization billing, distinct from local/provider cost.
     "billing.read",
+    "account.read",
+    "plugins.read",
+    "plugins.settings",
+    "permissions.manage",
     "automations.read",
     "automations.run",
     // Lists the shared artifacts the signed-in account may open and opens one in Bonsai's shared
@@ -4367,16 +4493,16 @@ function createContributionsSchemas(canonical) {
     // rearrange the workspace but never remove something the user would have to notice going missing.
     "workspace.arrange"
   ]);
-  const UiAppCapabilityReference2 = z13.union([
+  const UiAppCapabilityReference2 = z14.union([
     LocalContributionId2,
-    z13.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
+    z14.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
   ]);
-  const UiAppCapabilities2 = z13.strictObject({
-    endpoints: z13.array(UiAppCapabilityReference2).optional(),
-    host: z13.array(KayUiAppHostCapability2).optional(),
+  const UiAppCapabilities2 = z14.strictObject({
+    endpoints: z14.array(UiAppCapabilityReference2).optional(),
+    host: z14.array(KayUiAppHostCapability2).optional(),
     // A local name selects this plugin's source first, otherwise the daemon's.
     // An explicit reference selects only the named plugin.
-    feeds: z13.array(UiAppCapabilityReference2).optional()
+    feeds: z14.array(UiAppCapabilityReference2).optional()
   }).superRefine((capabilities, ctx) => {
     for (const field of ["endpoints", "host", "feeds"]) {
       const seen = /* @__PURE__ */ new Set();
@@ -4393,10 +4519,10 @@ function createContributionsSchemas(canonical) {
       }
     }
   });
-  const UiRailBadge = z13.strictObject({
+  const UiRailBadge = z14.strictObject({
     source: LocalContributionId2,
     where: NonEmptyString3.optional(),
-    label: z13.strictObject({
+    label: z14.strictObject({
       one: NonEmptyString3.optional(),
       other: NonEmptyString3
     })
@@ -4412,48 +4538,52 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
-  const UiRailEntryContribution2 = z13.strictObject({
+  const UiRailEntryContribution2 = z14.strictObject({
     id: LocalContributionId2,
     title: NonEmptyString3,
     icon: PackageAssetPath2.optional(),
     page: NonEmptyString3,
     homeLocation: NonEmptyString3.optional(),
     shortcut: NonEmptyString3.optional(),
-    order: z13.number().finite().optional(),
-    section: z13.enum(["primary", "plugins"]).optional(),
+    order: z14.number().finite().optional(),
+    section: z14.enum(["primary", "plugins"]).optional(),
     badge: UiRailBadge.optional(),
-    panel: z13.strictObject({ body: LocalContributionId2 }).optional(),
-    featureFlagVariant: z13.strictObject({
+    panel: z14.strictObject({ body: LocalContributionId2 }).optional(),
+    featureFlagVariant: z14.strictObject({
       flag: NonEmptyString3,
       title: NonEmptyString3.optional(),
       icon: PackageAssetPath2.optional(),
-      panel: z13.literal(false).optional()
+      panel: z14.literal(false).optional()
     }).optional()
   });
-  const UiToastPreviewContribution2 = z13.strictObject({
+  const UiToastPreviewContribution2 = z14.strictObject({
     rule: LocalContributionId2,
     body: LocalContributionId2,
     address: NonEmptyString3
   });
-  const UiPageContribution2 = z13.strictObject({
+  const UiPageContribution2 = z14.strictObject({
     id: NonEmptyString3,
     title: NonEmptyString3.optional(),
     icon: PackageAssetPath2.optional(),
-    companion: z13.boolean().optional(),
+    companion: z14.boolean().optional(),
+    sessionBinding: z14.enum(["session", "family"]).optional(),
+    /** Lists this page in Settings beside native workspace sections, in the same order scale. */
+    settings: z14.strictObject({ order: z14.number().optional() }).optional(),
+    aliases: z14.array(NonEmptyString3).optional(),
     openedEvent: NonEmptyString3.optional()
   });
-  const UiAppFields = z13.strictObject({
+  const UiAppFields = z14.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
     description: NonEmptyString3.optional(),
     icon: PackageAssetPath2.optional(),
-    runtime: z13.literal("kay.react-app.v1"),
+    runtime: z14.literal("kay.react-app.v1"),
     /** Mounted only by a host-supplied context; never a standalone navigation destination. */
-    contextOnly: z13.literal(true).optional(),
-    sdk: z13.strictObject({ range: NonEmptyString3 }),
+    contextOnly: z14.literal(true).optional(),
+    sdk: z14.strictObject({ range: NonEmptyString3 }),
     entrypoint: TargetEntrypoint2,
-    styles: z13.array(PackageAssetPath2).optional(),
-    assets: z13.array(PackageAssetPath2).optional(),
+    styles: z14.array(PackageAssetPath2).optional(),
+    assets: z14.array(PackageAssetPath2).optional(),
     capabilities: UiAppCapabilities2.optional()
   });
   function stripRetiredUiAppFields(value) {
@@ -4464,36 +4594,36 @@ function createContributionsSchemas(canonical) {
     delete remaining["activityRail"];
     return remaining;
   }
-  const UiAppContribution2 = canonical ? UiAppFields : z13.preprocess(stripRetiredUiAppFields, UiAppFields);
-  const ThemeContribution2 = z13.strictObject({
+  const UiAppContribution2 = canonical ? UiAppFields : z14.preprocess(stripRetiredUiAppFields, UiAppFields);
+  const ThemeContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
-    appearance: z13.enum(["light", "dark"]),
+    appearance: z14.enum(["light", "dark"]),
     tokens: PackageAssetPath2
   });
-  const CommandHandler2 = z13.discriminatedUnion("kind", [
-    z13.strictObject({ kind: z13.literal("skill"), skill: LocalContributionId2 }),
-    z13.strictObject({
-      kind: z13.literal("tool"),
+  const CommandHandler2 = z14.discriminatedUnion("kind", [
+    z14.strictObject({ kind: z14.literal("skill"), skill: LocalContributionId2 }),
+    z14.strictObject({
+      kind: z14.literal("tool"),
       tool: PluginToolName2,
       /** Positional mapping from tokenized `argsText` onto the tool's own input fields - see this
        *  union's doc for the exact tokenize/map/last-field-absorbs rule. */
-      argumentFields: z13.array(NonEmptyString3)
+      argumentFields: z14.array(NonEmptyString3)
     }),
-    z13.strictObject({
-      kind: z13.literal("endpoint"),
+    z14.strictObject({
+      kind: z14.literal("endpoint"),
       endpoint: LocalContributionId2
     })
   ]);
-  const CommandContribution2 = z13.strictObject({
+  const CommandContribution2 = z14.strictObject({
     localId: LocalContributionId2,
     displayName: OptionalDisplayName,
     description: NonEmptyString3,
-    aliases: z13.array(LocalContributionId2).optional(),
+    aliases: z14.array(LocalContributionId2).optional(),
     argumentHint: NonEmptyString3.optional(),
     handler: CommandHandler2
   });
-  const PluginContributionKind2 = z13.enum([
+  const PluginContributionKind2 = z14.enum([
     "tool",
     "converter",
     "uriModule",
@@ -4653,28 +4783,53 @@ __export(manifest_exports, {
   validateKayUiEventSubscription: () => validateKayUiEventSubscription
 });
 
+// packages/plugin-protocol/dist/project-directories.js
+import { z as z15 } from "zod";
+var PluginProjectDirectories = z15.strictObject({
+  /** An endpoint this plugin's app target declares; called with a {@link ProjectDirectoryRequest}. */
+  endpoint: z15.string().min(1),
+  /** A scheme this plugin's URI modules serve; a project is addressed as `<scheme>://<id>`. */
+  scheme: z15.string().min(1)
+});
+var ProjectDirectoryRequest = z15.strictObject({
+  /** The project's stable id. */
+  id: z15.string().min(1)
+});
+var ProjectDirectory = z15.strictObject({
+  id: z15.string().min(1),
+  /** Absolute path of the project's folder. */
+  path: z15.string().min(1),
+  /** Absolute path a new session in this project starts in. */
+  defaultCwd: z15.string().min(1),
+  /** Ancestor project ids, root first. */
+  ancestorIds: z15.array(z15.string().min(1))
+});
+var ProjectDirectoryResponse = z15.strictObject({
+  project: ProjectDirectory.nullable()
+});
+
 // packages/plugin-protocol/dist/shell-commands.js
-import { z as z14 } from "zod";
-var PluginShellCommand = z14.strictObject({
-  name: z14.string().regex(/^[a-z][a-z0-9-]*$/),
-  aliases: z14.array(z14.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
-  endpoint: z14.string().min(1),
-  usage: z14.string().min(1)
+import { z as z16 } from "zod";
+var PluginShellCommand = z16.strictObject({
+  name: z16.string().regex(/^[a-z][a-z0-9-]*$/),
+  aliases: z16.array(z16.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
+  endpoint: z16.string().min(1),
+  usage: z16.string().min(1)
 });
-var ShellCommandOutcome = z14.strictObject({
-  exitCode: z14.number().int(),
+var ShellCommandOutcome = z16.strictObject({
+  exitCode: z16.number().int(),
   envelope: JsonValue,
   result: JsonValue.optional()
 });
-var ShellCommandRequest = z14.strictObject({
-  argv: z14.array(z14.string()),
-  cwd: z14.string(),
-  outcomes: z14.array(ShellCommandOutcome).max(3)
+var ShellCommandRequest = z16.strictObject({
+  argv: z16.array(z16.string()),
+  cwd: z16.string(),
+  outcomes: z16.array(ShellCommandOutcome).max(3)
 });
-var ShellCommandStep = z14.discriminatedUnion("kind", [
-  z14.strictObject({
-    kind: z14.literal("invoke"),
-    toolName: z14.enum([
+var ShellCommandStep = z16.discriminatedUnion("kind", [
+  z16.strictObject({
+    kind: z16.literal("invoke"),
+    toolName: z16.enum([
       "read",
       "list",
       "search",
@@ -4683,24 +4838,24 @@ var ShellCommandStep = z14.discriminatedUnion("kind", [
       "delete",
       "help"
     ]),
-    input: z14.record(z14.string(), JsonValue),
-    flags: z14.record(z14.string(), z14.string())
+    input: z16.record(z16.string(), JsonValue),
+    flags: z16.record(z16.string(), z16.string())
   }),
-  z14.strictObject({
-    kind: z14.literal("finish"),
-    exitCode: z14.number().int(),
-    stdout: z14.string()
+  z16.strictObject({
+    kind: z16.literal("finish"),
+    exitCode: z16.number().int(),
+    stdout: z16.string()
   })
 ]);
 
 // packages/plugin-protocol/dist/manifest.js
-import { z as z16 } from "zod";
+import { z as z18 } from "zod";
 
 // packages/plugin-protocol/dist/workload-purposes.js
-import { z as z15 } from "zod";
-var PluginWorkloadPurpose = z15.strictObject({
-  purpose: z15.string().regex(/^[a-z][a-z0-9-]*$/),
-  workloadClass: z15.enum(["dreaming", "hindsight"])
+import { z as z17 } from "zod";
+var PluginWorkloadPurpose = z17.strictObject({
+  purpose: z17.string().max(128).regex(/^[a-z][a-z0-9_-]*(?:\/[a-z][a-z0-9_-]*)*$/),
+  workloadClass: z17.enum(["dreaming", "hindsight"])
 });
 
 // packages/plugin-protocol/dist/synthetic-contributions.js
@@ -4726,34 +4881,34 @@ function createManifestSchemas(canonical) {
   const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
-  const KayAgentTargetManifest2 = z16.strictObject({
+  const KayAgentTargetManifest2 = z18.strictObject({
     entrypoint: TargetEntrypoint2,
-    contributes: z16.strictObject({
-      tools: z16.array(AgentToolContribution2).optional(),
-      converters: z16.array(ConverterContribution2).optional(),
-      uriModules: z16.array(UriModuleContribution2).optional(),
+    contributes: z18.strictObject({
+      tools: z18.array(AgentToolContribution2).optional(),
+      converters: z18.array(ConverterContribution2).optional(),
+      uriModules: z18.array(UriModuleContribution2).optional(),
       // Host-composed artifact-backed schemes (see `ArtifactUriModuleContribution`): the plugin
       // declares scheme + editability; the daemon binds each to the kernel's artifact lifecycle
       // per session. Separate from `uriModules` (plugin-implemented backends) precisely because
       // the plugin registers NOTHING for these at activation.
-      artifactUriModules: z16.array(ArtifactUriModuleContribution2).optional(),
-      cliBindings: z16.array(CliBindingContribution2).optional(),
+      artifactUriModules: z18.array(ArtifactUriModuleContribution2).optional(),
+      cliBindings: z18.array(CliBindingContribution2).optional(),
       // Which git hosts this plugin's credential serves (see `GitHostContribution`): a
       // declaration, so a plugin for any git backend gets credentialed clones without
       // the daemon learning its name. Sibling of `cliBindings` because both answer the
       // same question - which of this plugin's auth services a host-side consumer
       // resolves - for two different transports.
-      gitHosts: z16.array(GitHostContribution2).optional(),
-      resources: z16.array(ResourceContribution2).optional(),
-      skills: z16.array(SkillContribution2).optional(),
-      searchProviders: z16.array(SearchProviderContribution2).optional(),
-      interactionDrivers: z16.array(InteractionDriverContribution2).optional(),
-      entityResolvers: z16.array(EntityResolverContribution2).optional(),
-      renderers: z16.array(AgentRenderContribution2).optional(),
+      gitHosts: z18.array(GitHostContribution2).optional(),
+      resources: z18.array(ResourceContribution2).optional(),
+      skills: z18.array(SkillContribution2).optional(),
+      searchProviders: z18.array(SearchProviderContribution2).optional(),
+      interactionDrivers: z18.array(InteractionDriverContribution2).optional(),
+      entityResolvers: z18.array(EntityResolverContribution2).optional(),
+      renderers: z18.array(AgentRenderContribution2).optional(),
       // Handler restricted to skill | tool by the manifest-level refinement below (see
       // `CommandContribution`'s doc for why the restriction is not expressed in the type, and
       // `CommandHandler`'s doc for why there is no promptTemplate variant to declare here).
-      commands: z16.array(CommandContribution2).optional()
+      commands: z18.array(CommandContribution2).optional()
     }).optional(),
     /**
      * The plugin's primer skill - the `localId` of one of its own declared
@@ -4789,6 +4944,8 @@ function createManifestSchemas(canonical) {
      * grant a person approved), and a body over 500 words is dropped.
      */
     prompt: PackageAssetPath2.optional(),
+    promptOrder: z18.number().finite().optional(),
+    familyFolder: z18.strictObject({ scope: z18.literal("root") }).optional(),
     /**
      * External origins of skills this plugin claims as its own (see
      * {@link PluginSkillSourceDeclaration}). Acquired by the daemon at boot and landed under the
@@ -4799,61 +4956,61 @@ function createManifestSchemas(canonical) {
      * acquisition, not declared here, so there is nothing for the resolved contract to mint a
      * `globalId` for at parse time.
      */
-    skillSources: z16.array(PluginSkillSourceDeclaration2).optional()
+    skillSources: z18.array(PluginSkillSourceDeclaration2).optional()
   });
-  const KayAppTargetManifest2 = z16.strictObject({
+  const KayAppTargetManifest2 = z18.strictObject({
     // Optional, like `kay.ui`'s: a target may carry only declarative `contributes` (e.g. a plugin
     // that ships nothing but `mcpServers`) with no app-lifetime module for the host to load.
     entrypoint: TargetEntrypoint2.optional(),
-    contributes: z16.strictObject({
+    contributes: z18.strictObject({
       // Session tools implemented by the app-lifetime activation (registered once, injected into
       // every session with a host-stamped session context) - the tool counterpart of `uriModules`
       // below. Same descriptor shape as kay.agent tools; `toolName` shares ONE flat session
       // namespace with them (enforced by the manifest-level refinement below).
-      tools: z16.array(ToolContribution2).optional(),
-      endpoints: z16.array(EndpointContribution2).optional(),
-      cards: z16.array(PluginCardContribution2).optional(),
-      uriModules: z16.array(AppUriModuleContribution2).optional(),
-      dataSources: z16.array(AppDataSourceContribution2).optional(),
-      whiteboardTypes: z16.array(WhiteboardTypeContribution2).optional(),
-      approvalTypes: z16.array(ApprovalTypeContribution2).optional(),
-      workflows: z16.array(WorkflowContribution2).optional(),
-      eventDefinitions: z16.array(PluginEventDefinitionContribution2).optional(),
+      tools: z18.array(ToolContribution2).optional(),
+      endpoints: z18.array(EndpointContribution2).optional(),
+      cards: z18.array(PluginCardContribution2).optional(),
+      uriModules: z18.array(AppUriModuleContribution2).optional(),
+      dataSources: z18.array(AppDataSourceContribution2).optional(),
+      whiteboardTypes: z18.array(WhiteboardTypeContribution2).optional(),
+      approvalTypes: z18.array(ApprovalTypeContribution2).optional(),
+      workflows: z18.array(WorkflowContribution2).optional(),
+      eventDefinitions: z18.array(PluginEventDefinitionContribution2).optional(),
       // Default notification rules over this plugin's own `eventDefinitions`; seeded by the host
       // (see `PluginNotificationRuleContribution`).
-      notificationRules: z16.array(PluginNotificationRuleContribution2).optional(),
-      productEvents: z16.array(PluginProductEventContribution2).optional(),
-      eventSubscriptions: z16.array(AppEventSubscription2).optional(),
-      deviceDelegations: z16.array(DeviceDelegationContribution2).optional(),
-      sessionReaders: z16.array(SessionReaderContribution2).optional(),
-      contextContributors: z16.array(ContextContributorContribution2).optional(),
+      notificationRules: z18.array(PluginNotificationRuleContribution2).optional(),
+      productEvents: z18.array(PluginProductEventContribution2).optional(),
+      eventSubscriptions: z18.array(AppEventSubscription2).optional(),
+      deviceDelegations: z18.array(DeviceDelegationContribution2).optional(),
+      sessionReaders: z18.array(SessionReaderContribution2).optional(),
+      contextContributors: z18.array(ContextContributorContribution2).optional(),
       // Vendored MCP servers this plugin ships (see `McpServerContributions`). Each is hosted only
       // for a plugin holding `mcp.host-server` for its name and URL; that is decided at
       // composition, not here (see ARCHITECTURE.md "Validation Law").
       mcpServers: McpServerContributions2.optional(),
       // Handler restricted to endpoint-only by the manifest-level refinement below.
-      commands: z16.array(CommandContribution2).optional()
+      commands: z18.array(CommandContribution2).optional()
     }).optional()
   });
-  const KayUiTargetManifest2 = z16.strictObject({
+  const KayUiTargetManifest2 = z18.strictObject({
     entrypoint: TargetEntrypoint2.extend({
-      format: z16.literal("compiled-bundle").optional()
+      format: z18.literal("compiled-bundle").optional()
     }).optional(),
-    contributes: z16.strictObject({
-      commands: z16.array(UiCommandContribution2).optional(),
-      slots: z16.array(UiSlotContribution2).optional(),
-      referencePresentations: z16.array(ReferencePresentationContribution2).optional(),
-      apps: z16.array(UiAppContribution2).optional(),
-      railEntries: z16.array(UiRailEntryContribution2).optional(),
-      toastPreviews: z16.array(UiToastPreviewContribution2).optional(),
-      pages: z16.array(UiPageContribution2).optional(),
-      themes: z16.array(ThemeContribution2).optional(),
-      eventSubscriptions: z16.array(UiEventSubscriptionContribution2).optional(),
-      dataMaterializers: z16.array(AppDataMaterializerContribution2).optional()
+    contributes: z18.strictObject({
+      commands: z18.array(UiCommandContribution2).optional(),
+      slots: z18.array(UiSlotContribution2).optional(),
+      referencePresentations: z18.array(ReferencePresentationContribution2).optional(),
+      apps: z18.array(UiAppContribution2).optional(),
+      railEntries: z18.array(UiRailEntryContribution2).optional(),
+      toastPreviews: z18.array(UiToastPreviewContribution2).optional(),
+      pages: z18.array(UiPageContribution2).optional(),
+      themes: z18.array(ThemeContribution2).optional(),
+      eventSubscriptions: z18.array(UiEventSubscriptionContribution2).optional(),
+      dataMaterializers: z18.array(AppDataMaterializerContribution2).optional()
     }).optional()
   });
-  const PluginConfigScope2 = z16.enum(["global", "project", "agent"]);
-  const PluginConfigSectionManifest2 = z16.strictObject({
+  const PluginConfigScope2 = z18.enum(["global", "project", "agent"]);
+  const PluginConfigSectionManifest2 = z18.strictObject({
     section: NonEmptyString3.optional(),
     schema: JsonSchema,
     /**
@@ -4871,23 +5028,23 @@ function createManifestSchemas(canonical) {
      * is the baseline every section has; `agent` has no runtime mapping (the
      * agent/entity fold is downstream of the document protocol).
      */
-    scopes: z16.array(PluginConfigScope2).optional()
+    scopes: z18.array(PluginConfigScope2).optional()
   });
-  const PluginConfigManifest2 = z16.array(PluginConfigSectionManifest2).min(1);
-  const PluginStorageManifest2 = z16.strictObject({
-    sqlite: z16.strictObject({
-      enabled: z16.boolean(),
-      ownerTarget: z16.literal("kay.app").optional(),
+  const PluginConfigManifest2 = z18.array(PluginConfigSectionManifest2).min(1);
+  const PluginStorageManifest2 = z18.strictObject({
+    sqlite: z18.strictObject({
+      enabled: z18.boolean(),
+      ownerTarget: z18.literal("kay.app").optional(),
       migrations: NonEmptyString3.optional()
     }).optional(),
-    dataDir: z16.strictObject({
-      enabled: z16.boolean(),
-      ownerTarget: z16.literal("kay.app").optional(),
+    dataDir: z18.strictObject({
+      enabled: z18.boolean(),
+      ownerTarget: z18.literal("kay.app").optional(),
       sharedWith: PluginId2.optional()
     }).optional()
   });
-  const PluginOAuthClientSupplier2 = z16.enum(["kay", "user"]);
-  const PluginProvisioningProbe2 = z16.strictObject({
+  const PluginOAuthClientSupplier2 = z18.enum(["kay", "user"]);
+  const PluginProvisioningProbe2 = z18.strictObject({
     /**
      * The API endpoint that answers the question. The host sends the service's OWN credential here,
      * so this must belong to the provider that minted it - enforced by the daemon against the
@@ -4895,13 +5052,13 @@ function createManifestSchemas(canonical) {
      */
     url: HttpsUrl2,
     /** Absent => `GET`. */
-    method: z16.enum(["GET"]).optional(),
+    method: z18.enum(["GET"]).optional(),
     /**
      * The statuses that make the response a VERDICT at all. Anything else (a 401 from a stale
      * token, a 5xx, a rate limit) means the probe learned nothing and reports `unknown` - never
      * `unsatisfied`, which would tell a user to go fix setup that is fine.
      */
-    verdictStatuses: z16.array(SignedInStatusCode2).min(1),
+    verdictStatuses: z18.array(SignedInStatusCode2).min(1),
     /**
      * Dot-path to a JSON array in the response body that must be NON-EMPTY for the requirement to
      * count as satisfied (e.g. `installations`). Absent means a verdict status alone is enough.
@@ -4910,7 +5067,7 @@ function createManifestSchemas(canonical) {
      */
     nonEmptyArrayAt: NonEmptyString3.optional()
   });
-  const PluginProvisioningRequirement2 = z16.strictObject({
+  const PluginProvisioningRequirement2 = z18.strictObject({
     /** Stable id, unique within the scheme. */
     id: LocalContributionId2,
     /** Human-facing requirement name, e.g. "GitHub App installation". */
@@ -4927,7 +5084,7 @@ function createManifestSchemas(canonical) {
     probe: PluginProvisioningProbe2
   });
   const PluginProvisioningField = {
-    provisioning: z16.array(PluginProvisioningRequirement2).optional()
+    provisioning: z18.array(PluginProvisioningRequirement2).optional()
   };
   const PluginAuthSchemeDescriptionFields = {
     /** Human-facing flow name; absent, the service's name stands in. */
@@ -4943,17 +5100,21 @@ function createManifestSchemas(canonical) {
   const PluginAuthSchemeOAuthEndpointFields = {
     authorizationUrl: HttpsUrl2,
     tokenUrl: HttpsUrl2,
+    /** Initial connect scopes; absent uses `scopes`, while an empty array requests none. */
+    connectScopes: z18.array(NonEmptyString3).optional(),
     /** Provider-specific query parameters added to the authorize URL. */
-    extraAuthorizeParams: z16.record(NonEmptyString3, z16.string()).optional()
+    extraAuthorizeParams: z18.record(NonEmptyString3, z18.string()).optional(),
+    /** Additional authorization parameters when this service already holds an account. */
+    extraAuthorizeParamsWhenAccountHeld: z18.record(NonEmptyString3, z18.string()).optional()
   };
-  const PluginAuthSchemeAccountLookup = z16.literal("lookup");
-  const PluginAuthSchemeOAuthPkce = z16.strictObject({
+  const PluginAuthSchemeAccountLookup = z18.literal("lookup");
+  const PluginAuthSchemeOAuthPkce = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     ...PluginAuthSchemeOAuthEndpointFields,
     localId: LocalContributionId2,
-    kind: z16.literal("oauth2"),
-    exchange: z16.literal("pkce"),
+    kind: z18.literal("oauth2"),
+    exchange: z18.literal("pkce"),
     byoocProfile: PluginByoocProfile.optional(),
     /**
      * A public client id the plugin ships for its own sign-in. Only an installed plugin's is used:
@@ -4977,7 +5138,7 @@ function createManifestSchemas(canonical) {
      * runs on an untrusted manifest, so a hand-built `["kay","kay"]` must be refused here, not
      * silently normalized).
      */
-    clientSuppliers: z16.array(PluginOAuthClientSupplier2).nonempty().superRefine((suppliers, ctx) => {
+    clientSuppliers: z18.array(PluginOAuthClientSupplier2).nonempty().superRefine((suppliers, ctx) => {
       if (new Set(suppliers).size !== suppliers.length) {
         ctx.addIssue({
           code: "custom",
@@ -4985,7 +5146,7 @@ function createManifestSchemas(canonical) {
         });
       }
     }),
-    scopes: z16.array(NonEmptyString3).optional()
+    scopes: z18.array(NonEmptyString3).optional()
   }).refine((scheme) => scheme.byoocProfile === void 0 || scheme.clientSuppliers.includes("user"), {
     message: "An own-client profile requires the user client supplier.",
     path: ["byoocProfile"]
@@ -4996,33 +5157,33 @@ function createManifestSchemas(canonical) {
     message: "a scheme with its own clientId names where its account comes from (`account`)",
     path: ["account"]
   });
-  const PluginAuthSchemeOAuthConfidential = z16.strictObject({
+  const PluginAuthSchemeOAuthConfidential = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     ...PluginAuthSchemeOAuthEndpointFields,
     localId: LocalContributionId2,
-    kind: z16.literal("oauth2"),
-    exchange: z16.literal("confidential"),
+    kind: z18.literal("oauth2"),
+    exchange: z18.literal("confidential"),
     /** Absent means `["kay"]` - a confidential exchange's secret may only ever be Bonsai's. */
-    clientSuppliers: z16.tuple([z16.literal("kay")]).optional(),
-    scopes: z16.array(NonEmptyString3).optional(),
+    clientSuppliers: z18.tuple([z18.literal("kay")]).optional(),
+    scopes: z18.array(NonEmptyString3).optional(),
     /** Where the account comes from (see {@link PluginAuthSchemeAccountLookup}). */
-    account: z16.union([PluginAuthSchemeAccountLookup, z16.literal("sign-in")])
+    account: z18.union([PluginAuthSchemeAccountLookup, z18.literal("sign-in")])
   });
-  const PluginAuthSchemeOAuth2 = z16.discriminatedUnion("exchange", [
+  const PluginAuthSchemeOAuth2 = z18.discriminatedUnion("exchange", [
     PluginAuthSchemeOAuthPkce,
     PluginAuthSchemeOAuthConfidential
   ]);
-  const PluginAuthSchemeApiKey = z16.strictObject({
+  const PluginAuthSchemeApiKey = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z16.literal("api-key"),
-    scopes: z16.array(NonEmptyString3).optional(),
+    kind: z18.literal("api-key"),
+    scopes: z18.array(NonEmptyString3).optional(),
     /** The connect prompt's label for the key. Absent: "<service name> API key". */
     inputLabel: NonEmptyString3.optional(),
     /** Two or more labeled inputs for a secret that comes in parts; absent asks for one key. */
-    fields: z16.array(z16.strictObject({ id: LocalContributionId2, label: NonEmptyString3 })).min(2).superRefine((fields, ctx) => {
+    fields: z18.array(z18.strictObject({ id: LocalContributionId2, label: NonEmptyString3 })).min(2).superRefine((fields, ctx) => {
       if (new Set(fields.map((field) => field.id)).size !== fields.length) {
         ctx.addIssue({
           code: "custom",
@@ -5031,7 +5192,7 @@ function createManifestSchemas(canonical) {
       }
     }).optional(),
     /** Where and how the person creates the key outside Bonsai. */
-    setup: z16.strictObject({ instructions: NonEmptyString3, url: HttpsUrl2 }).optional(),
+    setup: z18.strictObject({ instructions: NonEmptyString3, url: HttpsUrl2 }).optional(),
     /**
      * `"lookup"`: the plugin checks a key before it is saved and names its account, with the function
      * it registers (`api.auth.registerAccountLookup`). Absent: the key is saved unchecked, under the
@@ -5039,27 +5200,27 @@ function createManifestSchemas(canonical) {
      */
     account: PluginAuthSchemeAccountLookup.optional()
   });
-  const PluginAuthSchemeDelegated = z16.strictObject({
+  const PluginAuthSchemeDelegated = z18.strictObject({
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z16.literal("delegated"),
-    scopes: z16.array(NonEmptyString3).optional()
+    kind: z18.literal("delegated"),
+    scopes: z18.array(NonEmptyString3).optional()
   });
-  const ExternalCliArgument = z16.string().min(1).max(16384).refine((value) => ![...value].some(isUnsafeArgumentCharacter), {
+  const ExternalCliArgument = z18.string().min(1).max(16384).refine((value) => ![...value].some(isUnsafeArgumentCharacter), {
     message: "an argument may hold tabs and line breaks, but no other control character, no invisible character and no bidirectional override"
   });
-  const ExternalCliCommand = z16.string().max(128).regex(/^[A-Za-z0-9][A-Za-z0-9._+-]*$/, {
+  const ExternalCliCommand = z18.string().max(128).regex(/^[A-Za-z0-9][A-Za-z0-9._+-]*$/, {
     message: "a command is an executable's basename (letters, digits, '.', '_', '+', '-'), never a path"
   });
   const ExternalCliHint = NonEmptyString3.max(2048);
-  const ExternalCliArguments = z16.array(ExternalCliArgument).max(64);
+  const ExternalCliArguments = z18.array(ExternalCliArgument).max(64);
   const SignedOutMarker = ExternalCliArgument.refine((value) => value.trim() !== "", { message: "a signed-out marker needs text beyond whitespace" });
-  const PluginExternalCliConnect2 = z16.strictObject({
+  const PluginExternalCliConnect2 = z18.strictObject({
     /** A basename the host finds on `PATH` (`osascript`, `wrangler`), never a path. */
     binary: ExternalCliCommand,
-    probe: z16.strictObject({
+    probe: z18.strictObject({
       args: ExternalCliArguments.min(1),
-      timeoutMs: z16.number().int().min(1).max(12e4).optional(),
+      timeoutMs: z18.number().int().min(1).max(12e4).optional(),
       /**
        * The CLI's own signed-out marker: text a failed probe's output (stderr, else stdout) contains
        * when the CLI is signed out. A failure that carries it is a sign-in problem, and only such a
@@ -5067,13 +5228,13 @@ function createManifestSchemas(canonical) {
        * unavailable. Required when `login` is declared, so a timeout never starts a sign-in. A list
        * is for a CLI with several signed-out messages; any one of them counts.
        */
-      signedOutMarker: z16.union([SignedOutMarker, z16.array(SignedOutMarker).min(1)]).optional()
+      signedOutMarker: z18.union([SignedOutMarker, z18.array(SignedOutMarker).min(1)]).optional()
     }),
     /** The CLI's interactive sign-in. Absent: connect only probes and reports. */
-    login: z16.strictObject({
+    login: z18.strictObject({
       args: ExternalCliArguments.min(1),
-      timeoutMs: z16.number().int().min(1).max(6e5).optional(),
-      pasteCode: z16.strictObject({
+      timeoutMs: z18.number().int().min(1).max(6e5).optional(),
+      pasteCode: z18.strictObject({
         /** The redeeming argv; the host appends the code as its last argument. */
         args: ExternalCliArguments.min(1),
         /** What the prompt says, for a person. */
@@ -5085,12 +5246,12 @@ function createManifestSchemas(canonical) {
      * for display, or hands it to an agent session that runs it behind the ordinary bash approval.
      * Absent for a binary the OS ships (`osascript`).
      */
-    install: z16.strictObject({
+    install: z18.strictObject({
       command: ExternalCliCommand,
       args: ExternalCliArguments
     }).optional(),
     /** Prose for a person: `install` when the binary is missing, `login` when the probe fails. */
-    hints: z16.strictObject({
+    hints: z18.strictObject({
       install: ExternalCliHint,
       login: ExternalCliHint
     })
@@ -5103,50 +5264,50 @@ function createManifestSchemas(canonical) {
       });
     }
   });
-  const PluginAuthSchemeExternalCli = z16.strictObject({
+  const PluginAuthSchemeExternalCli = z18.strictObject({
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z16.literal("external-cli"),
-    scopes: z16.array(NonEmptyString3).optional(),
+    kind: z18.literal("external-cli"),
+    scopes: z18.array(NonEmptyString3).optional(),
     cli: PluginExternalCliConnect2.optional()
   });
-  const PluginAuthScheme2 = z16.discriminatedUnion("kind", [
+  const PluginAuthScheme2 = z18.discriminatedUnion("kind", [
     PluginAuthSchemeOAuth2,
     PluginAuthSchemeApiKey,
     PluginAuthSchemeDelegated,
     PluginAuthSchemeExternalCli
   ]);
-  const PluginWebSessionProbe2 = z16.strictObject({
+  const PluginWebSessionProbe2 = z18.strictObject({
     url: HttpsUrl2,
     /** Absent => `GET`. `POST` sends an empty JSON object body. */
-    method: z16.enum(["GET", "POST"]).optional(),
-    signedInStatuses: z16.array(SignedInStatusCode2).min(1)
+    method: z18.enum(["GET", "POST"]).optional(),
+    signedInStatuses: z18.array(SignedInStatusCode2).min(1)
   });
-  const PluginWebSessionDeclaration2 = z16.strictObject({
+  const PluginWebSessionDeclaration2 = z18.strictObject({
     /** `required`: capabilities degrade without the site login; `recommended`: it only smooths UX. */
-    importance: z16.enum(["required", "recommended"]),
+    importance: z18.enum(["required", "recommended"]),
     loginUrl: HttpsUrl2,
-    cookieDomains: z16.array(RegistrableDomain2).min(1),
+    cookieDomains: z18.array(RegistrableDomain2).min(1),
     probe: PluginWebSessionProbe2,
-    oauthVenue: z16.enum(["embedded", "external"]),
+    oauthVenue: z18.enum(["embedded", "external"]),
     /**
      * Where a page goes first when it opens in one of Bonsai's browser panes and this site login
      * is missing: a sign-in page that continues to the page. A template with `:email` and `:url`
      * (see `UriClaimTemplate`), on a host within `cookieDomains`.
      */
-    signInFirst: z16.string().optional()
+    signInFirst: z18.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
-  const PluginAuthService2 = z16.strictObject({
+  const PluginAuthService2 = z18.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
     /** One plain sentence on what connecting this service gives Bonsai. */
     summary: NonEmptyString3.optional(),
-    schemes: z16.array(PluginAuthScheme2).min(1),
-    purposes: z16.array(NonEmptyString3).min(1),
+    schemes: z18.array(PluginAuthScheme2).min(1),
+    purposes: z18.array(NonEmptyString3).min(1),
     webSession: PluginWebSessionDeclaration2.optional()
   });
-  const PluginAuthManifest2 = z16.strictObject({
-    services: z16.array(PluginAuthService2).optional()
+  const PluginAuthManifest2 = z18.strictObject({
+    services: z18.array(PluginAuthService2).optional()
   });
   function stripRetiredCompatibilityKeys(value) {
     if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -5157,17 +5318,17 @@ function createManifestSchemas(canonical) {
       delete remaining[key];
     return remaining;
   }
-  const PluginCompatibilityFields = z16.strictObject({
-    supportedProtocols: z16.array(KayPluginProtocolVersion).optional(),
+  const PluginCompatibilityFields = z18.strictObject({
+    supportedProtocols: z18.array(KayPluginProtocolVersion).optional(),
     minKayVersion: NonEmptyString3.optional(),
     sdk: NonEmptyString3.optional()
   });
-  const PluginCompatibilityManifest2 = canonical ? PluginCompatibilityFields : z16.preprocess(stripRetiredCompatibilityKeys, PluginCompatibilityFields);
+  const PluginCompatibilityManifest2 = canonical ? PluginCompatibilityFields : z18.preprocess(stripRetiredCompatibilityKeys, PluginCompatibilityFields);
   const KayVersionString2 = NonEmptyString3.regex(SEMVER_PATTERN, {
     message: "version must be semver, for example 1.2.3"
   });
-  const KayPluginManifestV12 = z16.strictObject({
-    protocol: z16.literal(KAY_PLUGIN_PROTOCOL_VERSION),
+  const KayPluginManifestV12 = z18.strictObject({
+    protocol: z18.literal(KAY_PLUGIN_PROTOCOL_VERSION),
     id: PluginId2,
     displayName: NonEmptyString3,
     version: KayVersionString2,
@@ -5195,8 +5356,8 @@ function createManifestSchemas(canonical) {
     icon: PackageAssetPath2.optional(),
     iconDark: PackageAssetPath2.optional(),
     namespace: PluginNamespace2.optional(),
-    targets: z16.strictObject({
-      kay: z16.strictObject({
+    targets: z18.strictObject({
+      kay: z18.strictObject({
         agent: KayAgentTargetManifest2.optional(),
         app: KayAppTargetManifest2.optional(),
         ui: KayUiTargetManifest2.optional()
@@ -5204,8 +5365,9 @@ function createManifestSchemas(canonical) {
     }).optional(),
     config: PluginConfigManifest2.optional(),
     storage: PluginStorageManifest2.optional(),
-    workloadPurposes: z16.array(PluginWorkloadPurpose).optional(),
-    shellCommands: z16.array(PluginShellCommand).optional(),
+    workloadPurposes: z18.array(PluginWorkloadPurpose).optional(),
+    shellCommands: z18.array(PluginShellCommand).optional(),
+    projectDirectories: PluginProjectDirectories.optional(),
     auth: PluginAuthManifest2.optional(),
     permissions: PluginPermissionManifest2.optional(),
     compatibility: PluginCompatibilityManifest2.optional(),
@@ -5215,15 +5377,15 @@ function createManifestSchemas(canonical) {
      * schemes then report `ownedByBonsai`. Honoured only for a plugin that ships with Bonsai: the
      * host reads any other plugin's flag as false. Absent => false.
      */
-    ownedByBonsai: z16.boolean().optional(),
+    ownedByBonsai: z18.boolean().optional(),
     /**
      * Explicit plugin-level dependencies - other plugins this plugin requires to be present in the
      * composed roster. At composition time the runtime checks each id against the accepted
      * registration list and derives a provenance-complete dependency graph (together with implicit
      * auth-service edges from `consumesAuthServices`). Absent => no explicit dependencies.
      */
-    dependencies: z16.strictObject({
-      plugins: z16.array(PluginId2).optional()
+    dependencies: z18.strictObject({
+      plugins: z18.array(PluginId2).optional()
     }).optional()
   }).superRefine((manifest, ctx) => {
     const sharedWith = manifest.storage?.dataDir?.sharedWith;
@@ -5484,6 +5646,105 @@ function createManifestSchemas(canonical) {
       ...(manifest.targets?.kay?.ui?.contributes?.pages ?? []).map((page) => page.id),
       ...(manifest.targets?.kay?.ui?.contributes?.railEntries ?? []).map((entry) => entry.page)
     ]);
+    const pageAliases = /* @__PURE__ */ new Set();
+    for (const [index, page] of (manifest.targets?.kay?.ui?.contributes?.pages ?? []).entries()) {
+      for (const alias of page.aliases ?? []) {
+        if (declaredPageIds.has(alias) || pageAliases.has(alias)) {
+          ctx.addIssue({
+            code: "custom",
+            path: [
+              "targets",
+              "kay",
+              "ui",
+              "contributes",
+              "pages",
+              index,
+              "aliases"
+            ],
+            message: `Page alias ${alias} conflicts with a declared page or alias.`
+          });
+        }
+        pageAliases.add(alias);
+      }
+    }
+    const types = manifest.targets?.kay?.app?.contributes?.whiteboardTypes ?? [];
+    if (types.filter((type) => type.handover === true).length > 1) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["targets", "kay", "app", "contributes", "whiteboardTypes"],
+        message: "A plugin may declare only one handover type."
+      });
+    }
+    const servedSchemes = new Set([
+      ...manifest.targets?.kay?.agent?.contributes?.uriModules ?? [],
+      ...manifest.targets?.kay?.app?.contributes?.uriModules ?? []
+    ].flatMap((module) => module.schemes));
+    if (manifest.projectDirectories !== void 0) {
+      if (!endpointIds.has(manifest.projectDirectories.endpoint)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["projectDirectories", "endpoint"],
+          message: "Project directories must name an endpoint declared by this plugin's app target."
+        });
+      }
+      if (!servedSchemes.has(manifest.projectDirectories.scheme)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["projectDirectories", "scheme"],
+          message: "Project directories must name a scheme this plugin serves."
+        });
+      }
+    }
+    for (const [index, type] of types.entries()) {
+      if ((type.directory !== void 0 || type.handover === true) && manifest.targets?.kay?.agent?.familyFolder?.scope !== "root") {
+        ctx.addIssue({
+          code: "custom",
+          path: [
+            "targets",
+            "kay",
+            "app",
+            "contributes",
+            "whiteboardTypes",
+            index,
+            "directory"
+          ],
+          message: "A root content directory requires a declared family-folder root role."
+        });
+      }
+      const scheme = type.reference?.uriTemplate.split(":", 1)[0];
+      if (scheme !== void 0 && !servedSchemes.has(scheme)) {
+        ctx.addIssue({
+          code: "custom",
+          path: [
+            "targets",
+            "kay",
+            "app",
+            "contributes",
+            "whiteboardTypes",
+            index,
+            "reference"
+          ],
+          message: "A content reference must use a scheme this plugin serves."
+        });
+      }
+    }
+    for (const [index, source] of (manifest.targets?.kay?.app?.contributes?.dataSources ?? []).entries()) {
+      if (source.messageDraft?.schemes.some((scheme) => !servedSchemes.has(scheme))) {
+        ctx.addIssue({
+          code: "custom",
+          path: [
+            "targets",
+            "kay",
+            "app",
+            "contributes",
+            "dataSources",
+            index,
+            "messageDraft"
+          ],
+          message: "A message draft projection must use schemes this plugin serves."
+        });
+      }
+    }
     for (const [index, presentation] of (manifest.targets?.kay?.ui?.contributes?.referencePresentations ?? []).entries()) {
       const path = [
         "targets",
@@ -6018,15 +6279,21 @@ function createManifestSchemas(canonical) {
         });
       }
     }
-    for (const [appIndex, app] of (manifest.targets?.kay?.ui?.contributes?.apps ?? []).entries()) {
+    const endpointSurfaces = (manifest.targets?.kay?.ui?.contributes?.apps ?? []).map((app, index) => ({
+      id: app.localId,
+      kind: "apps",
+      index,
+      capabilities: app.capabilities
+    }));
+    for (const app of endpointSurfaces) {
       for (const [endpointIndex, endpoint] of (app.capabilities?.endpoints ?? []).entries()) {
         const path = [
           "targets",
           "kay",
           "ui",
           "contributes",
-          "apps",
-          appIndex,
+          app.kind,
+          app.index,
           "capabilities",
           "endpoints",
           endpointIndex
@@ -6037,13 +6304,13 @@ function createManifestSchemas(canonical) {
           ctx.addIssue({
             code: "custom",
             path,
-            message: `ui app ${app.localId} references unknown endpoint ${endpoint}`
+            message: `ui app ${app.id} references unknown endpoint ${endpoint}`
           });
         } else if (!invokedUiEndpoints.has(endpoint)) {
           ctx.addIssue({
             code: "custom",
             path,
-            message: `ui app ${app.localId} endpoint ${endpoint} requires a kay.ui invoke grant`
+            message: `ui app ${app.id} endpoint ${endpoint} requires a kay.ui invoke grant`
           });
         }
       }
@@ -6333,7 +6600,7 @@ function pushContributionIds(output, path, items) {
 }
 
 // packages/plugin-protocol/dist/plugin-directory-verdict.js
-import { z as z18 } from "zod";
+import { z as z20 } from "zod";
 
 // packages/plugin-protocol/dist/plugin-load-diagnostic.js
 var PLUGIN_DIAGNOSTIC_MESSAGE_CAP = 300;
@@ -6342,14 +6609,14 @@ function boundPluginDiagnosticMessage(message) {
 }
 
 // packages/plugin-protocol/dist/resolved-contract.js
-import { z as z17 } from "zod";
+import { z as z19 } from "zod";
 function createResolvedContractSchemas(canonical) {
   const { PluginEventLocalId: PluginEventLocalId2 } = canonical ? canonicalPluginEventSchemas : plugin_events_exports;
-  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeStorage: WhiteboardTypeStorage2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, GlobalContributionId: GlobalContributionId2, HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, PluginToolName: PluginToolName2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginExternalCliConnect: PluginExternalCliConnect2, PluginOAuthClientSupplier: PluginOAuthClientSupplier2 } = canonical ? canonicalManifestSchemas : manifest_exports;
   const { ResolvedPluginGrants: ResolvedPluginGrants2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
-  const ResolvedPluginContributionId2 = z17.strictObject({
+  const ResolvedPluginContributionId2 = z19.strictObject({
     target: PluginTargetName,
     kind: PluginContributionKindSchema,
     localId: PluginEventLocalId2,
@@ -6363,54 +6630,55 @@ function createResolvedContractSchemas(canonical) {
       });
     }
   });
-  const ResolvedKayToolId = z17.strictObject({
+  const ResolvedKayToolId = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     toolName: PluginToolName2
   });
-  const ResolvedKayAgentTool2 = z17.strictObject({
+  const ResolvedKayAgentTool2 = z19.strictObject({
     ...ResolvedKayToolId.shape,
     displayName: NonEmptyString3.optional(),
     description: NonEmptyString3.optional(),
     parameters: JsonSchema.optional(),
-    executionMode: z17.enum(["sequential", "parallel"]).optional(),
+    executionMode: z19.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
-    promptGuidelines: z17.array(NonEmptyString3).optional(),
-    requiresAuth: z17.strictObject({
+    promptGuidelines: z19.array(NonEmptyString3).optional(),
+    requiresAuth: z19.strictObject({
       serviceId: GlobalContributionId2,
       schemeId: GlobalContributionId2.optional()
     }).optional(),
     permission: canonical ? canonicalContributionSchemas.ToolPermission.optional() : ToolPermission.optional()
   });
   const ResolvedKayAppTool2 = ResolvedKayAgentTool2.omit({ requiresAuth: true });
-  const ResolvedKayAppDataSource2 = z17.strictObject({
+  const ResolvedKayAppDataSource2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    scope: z17.enum(["runtime", "account", "session"]),
-    snapshot: z17.strictObject({
-      version: z17.number().int().positive(),
-      schema: z17.record(z17.string(), z17.unknown())
+    scope: z19.enum(["runtime", "account", "session"]),
+    snapshot: z19.strictObject({
+      version: z19.number().int().positive(),
+      schema: z19.record(z19.string(), z19.unknown())
     }),
-    change: z17.strictObject({
-      version: z17.number().int().positive(),
-      schema: z17.record(z17.string(), z17.unknown()),
-      semantics: z17.discriminatedUnion("kind", [
-        z17.strictObject({ kind: z17.literal("incremental") }),
-        z17.strictObject({
-          kind: z17.literal("snapshot-replacement"),
-          maxEncodedBytes: z17.number().int().positive(),
+    change: z19.strictObject({
+      version: z19.number().int().positive(),
+      schema: z19.record(z19.string(), z19.unknown()),
+      semantics: z19.discriminatedUnion("kind", [
+        z19.strictObject({ kind: z19.literal("incremental") }),
+        z19.strictObject({
+          kind: z19.literal("snapshot-replacement"),
+          maxEncodedBytes: z19.number().int().positive(),
           rationale: pluginString(canonical).min(1).max(1024)
         })
       ]).optional()
     }),
     read: AppDataSourceRead.optional(),
-    store: z17.discriminatedUnion("shape", [
-      z17.strictObject({
-        shape: z17.literal("rows"),
-        rowsField: z17.string().min(1),
-        key: z17.array(z17.string().min(1)).min(1)
+    messageDraft: z19.strictObject({ schemes: z19.array(UriScheme2).min(1) }).optional(),
+    store: z19.discriminatedUnion("shape", [
+      z19.strictObject({
+        shape: z19.literal("rows"),
+        rowsField: z19.string().min(1),
+        key: z19.array(z19.string().min(1)).min(1)
       }),
-      z17.strictObject({ shape: z17.literal("value") })
+      z19.strictObject({ shape: z19.literal("value") })
     ]).optional()
   }).superRefine((source, ctx) => {
     if (source.read !== void 0 && source.scope !== "session") {
@@ -6430,127 +6698,123 @@ function createResolvedContractSchemas(canonical) {
     /** The auth service that module signs in through, whose accounts a card may send from. */
     authService: GlobalContributionId2.optional()
   });
-  const ResolvedPluginCard2 = z17.strictObject({
+  const ResolvedPluginCard2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     pluginId: PluginId2,
     description: NonEmptyString3,
     inputs: JsonSchema,
-    readEndpoint: z17.strictObject({
+    readEndpoint: z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
-    submitEndpoint: z17.strictObject({
+    submitEndpoint: z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
     authService: GlobalContributionId2.optional()
   });
-  const ResolvedKayAppWorkflow2 = z17.strictObject({
+  const ResolvedKayAppWorkflow2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     name: NonEmptyString3,
     description: NonEmptyString3,
-    everyMs: z17.number().int().positive(),
-    auth: z17.strictObject({
+    everyMs: z19.number().int().positive(),
+    auth: z19.strictObject({
       serviceId: GlobalContributionId2,
       schemeId: GlobalContributionId2,
-      scopes: z17.array(NonEmptyString3).min(1).optional()
+      scopes: z19.array(NonEmptyString3).min(1).optional()
     }).optional()
   });
-  const ResolvedKayAppWhiteboardType2 = z17.strictObject({
-    localId: LocalContributionId2,
-    globalId: GlobalContributionId2,
-    displayName: NonEmptyString3,
-    schemaVersion: z17.number().int().positive(),
-    storage: WhiteboardTypeStorage2,
-    valueSchema: JsonSchema
+  const ResolvedKayAppWhiteboardType2 = WhiteboardTypeContribution2.safeExtend({
+    globalId: GlobalContributionId2
   });
-  const ResolvedKayAppMcpServer2 = z17.strictObject({
+  const ResolvedKayAppMcpServer2 = z19.strictObject({
     name: LocalContributionId2,
     pluginId: PluginId2,
     url: McpServerUrl2,
     auth: McpServerAuthMode2,
     authServiceId: GlobalContributionId2.optional()
   });
-  const ResolvedKayAgentUriModule2 = z17.strictObject({
+  const ResolvedKayAgentUriModule2 = z19.strictObject({
     localId: LocalContributionId2,
+    adapterId: z19.string().min(1).optional(),
     globalId: GlobalContributionId2,
-    schemes: z17.array(UriScheme2).min(1),
+    schemes: z19.array(UriScheme2).min(1),
     displayName: NonEmptyString3.optional(),
     authServiceId: GlobalContributionId2.optional(),
     /** Mirrors `UriModuleContribution.authScheme`; a local ref takes the plugin's namespace. */
     authSchemeId: GlobalContributionId2.optional(),
     /** Mirrors `UriModuleContribution.knownResources` (host-side recording opt-in). */
-    knownResources: z17.literal(true).optional(),
+    knownResources: z19.literal(true).optional(),
     /** Mirrors `UriModuleContribution.describesOperations`. */
-    describesOperations: z17.literal(true).optional(),
+    describesOperations: z19.literal(true).optional(),
     /** Mirrors `UriModuleContribution.looksUpWebLinks`. */
-    looksUpWebLinks: z17.literal(true).optional(),
+    looksUpWebLinks: z19.literal(true).optional(),
     ...UriModuleFacts2.shape
   });
-  const ResolvedKayAgentArtifactUriModule2 = z17.strictObject({
+  const ResolvedKayAgentArtifactUriModule2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     scheme: UriScheme2,
-    editable: z17.boolean(),
-    listable: z17.boolean(),
-    deletable: z17.boolean(),
-    appendable: z17.boolean(),
-    storageScope: z17.enum(["session", "family"])
+    editable: z19.boolean(),
+    listable: z19.boolean(),
+    deletable: z19.boolean(),
+    appendable: z19.boolean(),
+    storageScope: z19.enum(["session", "family"])
   });
-  const ResolvedKayAgentEntityResolver2 = z17.strictObject({
+  const ResolvedKayAgentEntityResolver2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     displayName: NonEmptyString3.optional(),
     uriModule: GlobalContributionId2,
-    entityTypes: z17.array(NonEmptyString3).min(1),
+    entityTypes: z19.array(NonEmptyString3).min(1),
     uriHint: NonEmptyString3
   });
-  const ResolvedKayAgentGitHostClaim2 = z17.strictObject({
+  const ResolvedKayAgentGitHostClaim2 = z19.strictObject({
     host: GitHostName2,
     authServiceId: GlobalContributionId2,
     /** Manifest-declared order; the clone ladder tries them in sequence. */
-    authSchemeIds: z17.array(GlobalContributionId2).min(1),
+    authSchemeIds: z19.array(GlobalContributionId2).min(1),
     /** Non-secret display copy for the claiming service, for clone failure text. */
-    authServiceDisplayName: z17.string(),
+    authServiceDisplayName: z19.string(),
     basicAuthUser: GitBasicAuthUser2
   });
-  const ResolvedKayAgentConverter2 = z17.strictObject({
+  const ResolvedKayAgentConverter2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     description: NonEmptyString3.optional(),
-    mimeTypes: z17.array(MimeTypeString2).min(1),
-    extensions: z17.array(FileExtensionToken2).min(1).optional()
+    mimeTypes: z19.array(MimeTypeString2).min(1),
+    extensions: z19.array(FileExtensionToken2).min(1).optional()
   });
   const ResolvedReferencePresentationUrlClaim = ReferencePresentationUrlClaim2.extend({
-    brandIcon: z17.string().max(64 * 1024).optional()
+    brandIcon: z19.string().max(64 * 1024).optional()
   });
-  const ResolvedReferencePresentation2 = z17.strictObject({
+  const ResolvedReferencePresentation2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     uriModule: GlobalContributionId2.optional(),
     /** The schemes this presentation is about: its `scheme`, or its module's. */
-    schemes: z17.array(UriScheme2).min(1).optional(),
+    schemes: z19.array(UriScheme2).min(1).optional(),
     /** The module's `displayName`: the source's name in a row. */
     displayName: NonEmptyString3.optional(),
     /** The module's auth service, qualified: whose accounts `accountLinks` reads. */
     authService: GlobalContributionId2.optional(),
     accountLinks: ReferencePresentationAccountLinks2.optional(),
-    addresses: z17.array(ReferencePresentationAddress2).min(1).optional(),
+    addresses: z19.array(ReferencePresentationAddress2).min(1).optional(),
     /** Comes with `open`. A presentation with neither only words its module's addresses. */
     resourceKind: NonEmptyString3.optional(),
     open: ReferenceOpenBehavior2.optional(),
     /** MIME-specific resource kinds; absent keys use the base presentation. */
     variants: ReferencePresentationVariants2.optional(),
-    claims: z17.array(ResolvedReferencePresentationUrlClaim).optional(),
-    tooltip: z17.strictObject({
+    claims: z19.array(ResolvedReferencePresentationUrlClaim).optional(),
+    tooltip: z19.strictObject({
       app: GlobalContributionId2,
       pattern: ReferencePresentationUriPattern2
     }).optional(),
     words: ReferencePresentationWords2.optional()
   });
-  const ResolvedPluginProvisioningRequirement2 = z17.strictObject({
+  const ResolvedPluginProvisioningRequirement2 = z19.strictObject({
     id: LocalContributionId2,
     displayName: NonEmptyString3,
     description: NonEmptyString3,
@@ -6560,15 +6824,15 @@ function createResolvedContractSchemas(canonical) {
      * URL degrades to "Reconnect" in the UI instead of a broken link.
      */
     remediationUrl: HttpsUrl2.optional(),
-    probe: z17.strictObject({
+    probe: z19.strictObject({
       url: HttpsUrl2,
-      method: z17.enum(["GET"]),
-      verdictStatuses: z17.array(SignedInStatusCode2).min(1),
+      method: z19.enum(["GET"]),
+      verdictStatuses: z19.array(SignedInStatusCode2).min(1),
       nonEmptyArrayAt: NonEmptyString3.optional()
     })
   });
   const ResolvedProvisioningField = {
-    provisioning: z17.array(ResolvedPluginProvisioningRequirement2).optional()
+    provisioning: z19.array(ResolvedPluginProvisioningRequirement2).optional()
   };
   const ResolvedPluginAuthSchemeDescriptionFields = {
     displayName: NonEmptyString3.optional(),
@@ -6580,118 +6844,120 @@ function createResolvedContractSchemas(canonical) {
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z17.literal("oauth2"),
-    scopes: z17.array(z17.string()).optional(),
+    kind: z19.literal("oauth2"),
+    scopes: z19.array(z19.string()).optional(),
+    connectScopes: z19.array(NonEmptyString3).optional(),
     authorizationUrl: HttpsUrl2,
     tokenUrl: HttpsUrl2,
-    extraAuthorizeParams: z17.record(z17.string(), z17.string()).optional()
+    extraAuthorizeParams: z19.record(z19.string(), z19.string()).optional(),
+    extraAuthorizeParamsWhenAccountHeld: z19.record(NonEmptyString3, z19.string()).optional()
   };
-  const ResolvedPluginAuthSchemeOAuthPkce = z17.strictObject({
+  const ResolvedPluginAuthSchemeOAuthPkce = z19.strictObject({
     ...ResolvedPluginAuthSchemeOAuthBase,
-    exchange: z17.literal("pkce"),
+    exchange: z19.literal("pkce"),
     byoocProfile: PluginByoocProfile.optional(),
-    clientSuppliers: z17.array(PluginOAuthClientSupplier2).nonempty(),
+    clientSuppliers: z19.array(PluginOAuthClientSupplier2).nonempty(),
     clientId: NonEmptyString3.optional(),
     clientSecret: NonEmptyString3.optional(),
-    account: z17.literal("lookup").optional()
+    account: z19.literal("lookup").optional()
   });
-  const ResolvedPluginAuthSchemeOAuthConfidential = z17.strictObject({
+  const ResolvedPluginAuthSchemeOAuthConfidential = z19.strictObject({
     ...ResolvedPluginAuthSchemeOAuthBase,
-    exchange: z17.literal("confidential"),
-    clientSuppliers: z17.tuple([z17.literal("kay")]),
-    account: z17.enum(["lookup", "sign-in"])
+    exchange: z19.literal("confidential"),
+    clientSuppliers: z19.tuple([z19.literal("kay")]),
+    account: z19.enum(["lookup", "sign-in"])
   });
-  const ResolvedPluginAuthSchemeOAuth2 = z17.discriminatedUnion("exchange", [
+  const ResolvedPluginAuthSchemeOAuth2 = z19.discriminatedUnion("exchange", [
     ResolvedPluginAuthSchemeOAuthPkce,
     ResolvedPluginAuthSchemeOAuthConfidential
   ]);
-  const ResolvedPluginAuthSchemeApiKey = z17.strictObject({
+  const ResolvedPluginAuthSchemeApiKey = z19.strictObject({
     ...ResolvedProvisioningField,
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z17.literal("api-key"),
-    scopes: z17.array(z17.string()).optional(),
+    kind: z19.literal("api-key"),
+    scopes: z19.array(z19.string()).optional(),
     /** Resolution applies the manifest's default, "<service name> API key". */
     inputLabel: NonEmptyString3,
-    fields: z17.array(z17.strictObject({ id: z17.string(), label: z17.string() })).optional(),
-    setup: z17.strictObject({ instructions: z17.string(), url: HttpsUrl2 }).optional(),
-    account: z17.literal("lookup").optional()
+    fields: z19.array(z19.strictObject({ id: z19.string(), label: z19.string() })).optional(),
+    setup: z19.strictObject({ instructions: z19.string(), url: HttpsUrl2 }).optional(),
+    account: z19.literal("lookup").optional()
   });
-  const ResolvedPluginAuthSchemeDelegated = z17.strictObject({
+  const ResolvedPluginAuthSchemeDelegated = z19.strictObject({
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z17.literal("delegated"),
-    scopes: z17.array(z17.string()).optional()
+    kind: z19.literal("delegated"),
+    scopes: z19.array(z19.string()).optional()
   });
-  const ResolvedPluginAuthSchemeExternalCli = z17.strictObject({
+  const ResolvedPluginAuthSchemeExternalCli = z19.strictObject({
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z17.literal("external-cli"),
-    scopes: z17.array(z17.string()).optional(),
+    kind: z19.literal("external-cli"),
+    scopes: z19.array(z19.string()).optional(),
     /** The manifest's connect facts, verbatim. */
     cli: PluginExternalCliConnect2.optional()
   });
-  const ResolvedPluginAuthScheme2 = z17.discriminatedUnion("kind", [
+  const ResolvedPluginAuthScheme2 = z19.discriminatedUnion("kind", [
     ResolvedPluginAuthSchemeOAuth2,
     ResolvedPluginAuthSchemeApiKey,
     ResolvedPluginAuthSchemeDelegated,
     ResolvedPluginAuthSchemeExternalCli
   ]);
-  const ResolvedPluginWebSession2 = z17.strictObject({
-    importance: z17.enum(["required", "recommended"]),
+  const ResolvedPluginWebSession2 = z19.strictObject({
+    importance: z19.enum(["required", "recommended"]),
     loginUrl: HttpsUrl2,
-    cookieDomains: z17.array(RegistrableDomain2).min(1),
-    probe: z17.strictObject({
+    cookieDomains: z19.array(RegistrableDomain2).min(1),
+    probe: z19.strictObject({
       url: HttpsUrl2,
-      method: z17.enum(["GET", "POST"]),
-      signedInStatuses: z17.array(SignedInStatusCode2).min(1)
+      method: z19.enum(["GET", "POST"]),
+      signedInStatuses: z19.array(SignedInStatusCode2).min(1)
     }),
-    oauthVenue: z17.enum(["embedded", "external"]),
-    signInFirst: z17.string().optional()
+    oauthVenue: z19.enum(["embedded", "external"]),
+    signInFirst: z19.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
-  const ResolvedPluginAuthService2 = z17.strictObject({
+  const ResolvedPluginAuthService2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    displayName: z17.string(),
-    summary: z17.string().optional(),
-    schemes: z17.array(ResolvedPluginAuthScheme2).min(1),
-    purposes: z17.array(z17.string()).min(1),
+    displayName: z19.string(),
+    summary: z19.string().optional(),
+    schemes: z19.array(ResolvedPluginAuthScheme2).min(1),
+    purposes: z19.array(z19.string()).min(1),
     /** The service's browser half, when the manifest declares one. */
     webSession: ResolvedPluginWebSession2.optional()
   });
-  const ResolvedKayUiAppEndpointCapability2 = z17.union([
-    z17.strictObject({
+  const ResolvedKayUiAppEndpointCapability2 = z19.union([
+    z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
-    z17.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
+    z19.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
   ]);
-  const ResolvedKayUiApp2 = z17.strictObject({
+  const ResolvedKayUiApp2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     displayName: NonEmptyString3,
-    contextOnly: z17.literal(true).optional(),
+    contextOnly: z19.literal(true).optional(),
     description: NonEmptyString3.optional(),
     icon: PackageAssetPath2.optional(),
-    runtime: z17.literal("kay.react-app.v1"),
-    sdk: z17.strictObject({ range: NonEmptyString3 }),
+    runtime: z19.literal("kay.react-app.v1"),
+    sdk: z19.strictObject({ range: NonEmptyString3 }),
     entrypoint: TargetEntrypoint2,
-    styles: z17.array(PackageAssetPath2).optional(),
-    assets: z17.array(PackageAssetPath2).optional(),
-    capabilities: z17.strictObject({
-      endpoints: z17.array(ResolvedKayUiAppEndpointCapability2).optional(),
-      host: z17.array(KayUiAppHostCapability2).optional(),
-      feeds: z17.array((canonical ? canonicalContributionSchemas : contributions_exports).UiAppCapabilityReference).optional()
+    styles: z19.array(PackageAssetPath2).optional(),
+    assets: z19.array(PackageAssetPath2).optional(),
+    capabilities: z19.strictObject({
+      endpoints: z19.array(ResolvedKayUiAppEndpointCapability2).optional(),
+      host: z19.array(KayUiAppHostCapability2).optional(),
+      feeds: z19.array((canonical ? canonicalContributionSchemas : contributions_exports).UiAppCapabilityReference).optional()
     }).optional()
   });
-  const ResolvedPluginContractV12 = z17.strictObject({
-    protocol: z17.literal("kay.plugin.v1"),
+  const ResolvedPluginContractV12 = z19.strictObject({
+    protocol: z19.literal("kay.plugin.v1"),
     pluginId: PluginId2,
     namespace: PluginNamespace2,
-    contributions: z17.array(ResolvedPluginContributionId2),
+    contributions: z19.array(ResolvedPluginContributionId2),
     // The deduplicated set of qualified (dotted) external auth-service ids this
     // plugin references, from agent uriModule, tool and cliBinding
     // `authService` refs, card sign-in refs, and auth-grant `service` refs. Always present - a plugin
@@ -6699,38 +6965,40 @@ function createResolvedContractSchemas(canonical) {
     // is a recorded dependency, not a resolution: there is no runtime plugin
     // loader in v1, so nothing here verifies the reference resolves within a
     // composed roster (a composition-time concern owned elsewhere).
-    consumesAuthServices: z17.array(GlobalContributionId2),
+    consumesAuthServices: z19.array(GlobalContributionId2),
     // The explicit plugin-level dependency ids declared in `dependencies.plugins` on the manifest,
     // deduped and validated at parse time. Always present; a plugin with no explicit dependencies
     // carries an empty array. Composition checks each id against the accepted roster and derives the
     // full dependency graph together with auth-inferred edges from `consumesAuthServices`.
-    explicitDependencies: z17.array(PluginId2),
+    explicitDependencies: z19.array(PluginId2),
     dataDirSharedWith: PluginId2.optional(),
-    workloadPurposes: z17.array(PluginWorkloadPurpose).optional(),
-    shellCommands: z17.array(PluginShellCommand.omit({ endpoint: true }).extend({
+    workloadPurposes: z19.array(PluginWorkloadPurpose).optional(),
+    shellCommands: z19.array(PluginShellCommand.omit({ endpoint: true }).extend({
       endpointId: GlobalContributionId2
     })).optional(),
+    projectDirectories: PluginProjectDirectories.omit({ endpoint: true }).extend({ endpointId: GlobalContributionId2 }).optional(),
     // The auth services this plugin OWNS, carrying the global ids its harness
     // target must register and the credential authority keys on. Always present;
     // a plugin that declares no `auth.services` carries an empty array. The dual
     // of `consumesAuthServices` (services it merely references).
-    authServices: z17.array(ResolvedPluginAuthService2),
+    authServices: z19.array(ResolvedPluginAuthService2),
     grants: ResolvedPluginGrants2.optional(),
-    kayAgentUriModules: z17.array(ResolvedKayAgentUriModule2).optional(),
-    kayAgentArtifactUriModules: z17.array(ResolvedKayAgentArtifactUriModule2).optional(),
-    kayAgentEntityResolvers: z17.array(ResolvedKayAgentEntityResolver2).optional(),
-    kayAgentGitHostClaims: z17.array(ResolvedKayAgentGitHostClaim2).optional(),
-    kayAgentTools: z17.array(ResolvedKayAgentTool2).optional(),
-    kayAppTools: z17.array(ResolvedKayAppTool2).optional(),
-    kayAppApprovalTypes: z17.array(ResolvedKayAppApprovalType2).optional(),
-    kayAppWorkflows: z17.array(ResolvedKayAppWorkflow2).optional(),
-    kayAppCards: z17.array(ResolvedPluginCard2).optional(),
-    kayAppDataSources: z17.array(ResolvedKayAppDataSource2).optional(),
-    kayAppWhiteboardTypes: z17.array(ResolvedKayAppWhiteboardType2).optional(),
-    kayAppMcpServers: z17.array(ResolvedKayAppMcpServer2).optional(),
-    kayAgentConverters: z17.array(ResolvedKayAgentConverter2).optional(),
-    referencePresentations: z17.array(ResolvedReferencePresentation2).optional(),
-    kayUiApps: z17.array(ResolvedKayUiApp2).optional()
+    kayAgentFamilyFolder: z19.strictObject({ scope: z19.literal("root") }).optional(),
+    kayAgentUriModules: z19.array(ResolvedKayAgentUriModule2).optional(),
+    kayAgentArtifactUriModules: z19.array(ResolvedKayAgentArtifactUriModule2).optional(),
+    kayAgentEntityResolvers: z19.array(ResolvedKayAgentEntityResolver2).optional(),
+    kayAgentGitHostClaims: z19.array(ResolvedKayAgentGitHostClaim2).optional(),
+    kayAgentTools: z19.array(ResolvedKayAgentTool2).optional(),
+    kayAppTools: z19.array(ResolvedKayAppTool2).optional(),
+    kayAppApprovalTypes: z19.array(ResolvedKayAppApprovalType2).optional(),
+    kayAppWorkflows: z19.array(ResolvedKayAppWorkflow2).optional(),
+    kayAppCards: z19.array(ResolvedPluginCard2).optional(),
+    kayAppDataSources: z19.array(ResolvedKayAppDataSource2).optional(),
+    kayAppWhiteboardTypes: z19.array(ResolvedKayAppWhiteboardType2).optional(),
+    kayAppMcpServers: z19.array(ResolvedKayAppMcpServer2).optional(),
+    kayAgentConverters: z19.array(ResolvedKayAgentConverter2).optional(),
+    referencePresentations: z19.array(ResolvedReferencePresentation2).optional(),
+    kayUiApps: z19.array(ResolvedKayUiApp2).optional()
   });
   return {
     ResolvedPluginContributionId: ResolvedPluginContributionId2,
@@ -6960,6 +7228,12 @@ function resolveAuthServices(namespace, manifest) {
         const endpointFields = {
           authorizationUrl: scheme.authorizationUrl,
           tokenUrl: scheme.tokenUrl,
+          ...scheme.connectScopes === void 0 ? {} : { connectScopes: [...scheme.connectScopes] },
+          ...scheme.extraAuthorizeParamsWhenAccountHeld === void 0 ? {} : {
+            extraAuthorizeParamsWhenAccountHeld: {
+              ...scheme.extraAuthorizeParamsWhenAccountHeld
+            }
+          },
           ...scheme.extraAuthorizeParams === void 0 ? {} : { extraAuthorizeParams: { ...scheme.extraAuthorizeParams } }
         };
         return scheme.exchange === "pkce" ? {
@@ -7119,6 +7393,7 @@ function resolveKayPluginContractV1(manifest) {
     snapshot: source.snapshot,
     change: source.change,
     ...source.read === void 0 ? {} : { read: source.read },
+    ...source.messageDraft === void 0 ? {} : { messageDraft: source.messageDraft },
     ...source.store === void 0 ? {} : { store: source.store }
   }));
   const kayAppApprovalTypes = manifest.targets?.kay?.app?.contributes?.approvalTypes?.map(({ uriModule, ...type }) => {
@@ -7138,7 +7413,10 @@ function resolveKayPluginContractV1(manifest) {
     displayName: type.displayName,
     schemaVersion: type.schemaVersion,
     storage: type.storage,
-    valueSchema: type.valueSchema
+    valueSchema: type.valueSchema,
+    ...type.directory === void 0 ? {} : { directory: type.directory },
+    ...type.reference === void 0 ? {} : { reference: type.reference },
+    ...type.handover === void 0 ? {} : { handover: type.handover }
   }));
   const kayAppMcpServers = Object.entries(manifest.targets?.kay?.app?.contributes?.mcpServers ?? {}).map(([name, server]) => ({
     name,
@@ -7151,6 +7429,7 @@ function resolveKayPluginContractV1(manifest) {
   }));
   const kayAgentUriModules = manifest.targets?.kay?.agent?.contributes?.uriModules?.map((module) => ({
     localId: module.localId,
+    ...module.adapterId === void 0 ? {} : { adapterId: module.adapterId },
     globalId: resolveGlobalContributionId(namespace, module.localId),
     schemes: [...module.schemes],
     ...module.displayName === void 0 ? {} : { displayName: module.displayName },
@@ -7267,7 +7546,14 @@ function resolveKayPluginContractV1(manifest) {
         endpointId: resolveGlobalContributionId(namespace, endpoint)
       }))
     },
+    ...manifest.projectDirectories === void 0 ? {} : {
+      projectDirectories: {
+        scheme: manifest.projectDirectories.scheme,
+        endpointId: resolveGlobalContributionId(namespace, manifest.projectDirectories.endpoint)
+      }
+    },
     ...grants && Object.keys(grants.byTarget).length > 0 ? { grants } : {},
+    ...manifest.targets?.kay?.agent?.familyFolder === void 0 ? {} : { kayAgentFamilyFolder: manifest.targets.kay.agent.familyFolder },
     ...kayAgentUriModules && kayAgentUriModules.length > 0 ? { kayAgentUriModules } : {},
     ...kayAgentArtifactUriModules && kayAgentArtifactUriModules.length > 0 ? { kayAgentArtifactUriModules } : {},
     ...kayAgentEntityResolvers && kayAgentEntityResolvers.length > 0 ? { kayAgentEntityResolvers } : {},
@@ -7314,7 +7600,7 @@ function presentationSource(namespace, manifest, presentation) {
     } : {}
   };
 }
-function uriModuleFacts({ localId: _localId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, looksUpWebLinks: _looksUpWebLinks, ...facts }) {
+function uriModuleFacts({ localId: _localId, adapterId: _adapterId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, looksUpWebLinks: _looksUpWebLinks, ...facts }) {
   return facts;
 }
 
@@ -7450,14 +7736,14 @@ function kayPluginCompatibilityAdvisories(input) {
     message: boundPluginDiagnosticMessage(`${manifest.displayName} (${manifest.id}) ${advisory.message}`)
   }));
 }
-var ReadableCompatibility = z18.object({
-  supportedProtocols: z18.array(z18.string()).optional().catch(void 0),
+var ReadableCompatibility = z20.object({
+  supportedProtocols: z20.array(z20.string()).optional().catch(void 0),
   minKayVersion: NonEmptyString.optional().catch(void 0),
   sdk: NonEmptyString.optional().catch(void 0)
 });
-var ReadableManifestHead = z18.object({
-  id: z18.string().optional().catch(void 0),
-  displayName: z18.string().optional().catch(void 0),
+var ReadableManifestHead = z20.object({
+  id: z20.string().optional().catch(void 0),
+  displayName: z20.string().optional().catch(void 0),
   compatibility: ReadableCompatibility.optional().catch(void 0)
 });
 function keepNamespaceDerivedTools(contract, grandfathered) {
@@ -7561,28 +7847,28 @@ function errorText(error) {
 }
 
 // packages/plugin-protocol/dist/session-health.js
-import { z as z19 } from "zod";
+import { z as z21 } from "zod";
 var SESSION_HEALTH_EXTENSION_ID = "kay.session-health";
 var SESSION_HEALTH_ENTRY_NAME = "session_health";
 var SESSION_HEALTH_CUSTOM_TYPE = `ext:${SESSION_HEALTH_EXTENSION_ID}:${SESSION_HEALTH_ENTRY_NAME}`;
 var SESSION_HEALTH_CLASSIFIER_IDS = ["jev"];
-var sessionHealthEntrySchema = z19.object({
-  v: z19.literal(1),
-  verdict: z19.enum(["well", "bad", "unknown"]),
+var sessionHealthEntrySchema = z21.object({
+  v: z21.literal(1),
+  verdict: z21.enum(["well", "bad", "unknown"]),
   /**
    * The model's calibrated confidence in `well`, 0..1, or null when the
    * classifier declined to produce one. Never exported raw: the telemetry
    * event carries only the decile bucket.
    */
-  p_well: z19.number().min(0).max(1).nullable(),
-  classifier: z19.enum(SESSION_HEALTH_CLASSIFIER_IDS),
-  classifier_version: z19.string().min(1).max(64),
-  judged_at: z19.number().int().nonnegative(),
-  user_entry_id: z19.string().min(1).max(256),
-  through_entry_id: z19.string().min(1).max(256),
-  usage: z19.strictObject({
-    input_tokens: z19.number().int().nonnegative(),
-    output_tokens: z19.number().int().nonnegative()
+  p_well: z21.number().min(0).max(1).nullable(),
+  classifier: z21.enum(SESSION_HEALTH_CLASSIFIER_IDS),
+  classifier_version: z21.string().min(1).max(64),
+  judged_at: z21.number().int().nonnegative(),
+  user_entry_id: z21.string().min(1).max(256),
+  through_entry_id: z21.string().min(1).max(256),
+  usage: z21.strictObject({
+    input_tokens: z21.number().int().nonnegative(),
+    output_tokens: z21.number().int().nonnegative()
   }).optional()
 });
 function sessionHealthPWellDecile(pWell) {
@@ -7592,23 +7878,28 @@ function sessionHealthPWellDecile(pWell) {
 }
 
 // packages/plugin-protocol/dist/resource-invocations.js
-import { z as z20 } from "zod";
-var CorpusResourceKind = z20.enum([
+import { z as z23 } from "zod";
+
+// packages/plugin-protocol/dist/resource-invocation-cursor.js
+import { z as z22 } from "zod";
+var CorpusResourceInvocationCursor = z22.strictObject({
+  at: z22.iso.datetime({ offset: true }),
+  eventId: z22.string().min(1)
+});
+
+// packages/plugin-protocol/dist/resource-invocations.js
+var CorpusResourceKind = z23.enum([
   "skill",
   "context-file",
   "prompt-command"
 ]);
-var CorpusResourceInvocationCursor = z20.strictObject({
-  at: z20.iso.datetime({ offset: true }),
-  eventId: z20.string().min(1)
-});
-var CorpusResourceInvocationQuery = z20.strictObject({
+var CorpusResourceInvocationQuery = z23.strictObject({
   kind: CorpusResourceKind,
-  since: z20.iso.datetime({ offset: true }),
-  until: z20.iso.datetime({ offset: true }),
+  since: z23.iso.datetime({ offset: true }),
+  until: z23.iso.datetime({ offset: true }),
   after: CorpusResourceInvocationCursor.optional(),
-  limit: z20.number().int().min(1).max(1e3).optional(),
-  rootCreatedByKind: z20.enum(AGENT_RUNTIME_SESSION_CREATOR_KINDS).optional()
+  limit: z23.number().int().min(1).max(1e3).optional(),
+  rootCreatedByKind: z23.enum(AGENT_RUNTIME_SESSION_CREATOR_KINDS).optional()
 }).refine((value) => Date.parse(value.since) < Date.parse(value.until), {
   message: "since must precede until"
 });
@@ -7788,14 +8079,14 @@ function skillSuggestionEvidenceItems(evidence, options = {}) {
 }
 
 // packages/plugin-protocol/dist/ui-app-package.js
-import { z as z21 } from "zod";
+import { z as z24 } from "zod";
 var KAY_UI_APP_PACKAGE_PROTOCOL = "kay.ui.app-package.v1";
 var KAY_UI_BUNDLE_INDEX_PROTOCOL = "kay.ui.bundle-index.v1";
-var KayUiBundleOutputPath = z21.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
-var KayUiBundleIndexV1 = z21.strictObject({
-  protocol: z21.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
+var KayUiBundleOutputPath = z24.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
+var KayUiBundleIndexV1 = z24.strictObject({
+  protocol: z24.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
   entryPath: KayUiBundleOutputPath,
-  files: z21.array(z21.strictObject({
+  files: z24.array(z24.strictObject({
     path: KayUiBundleOutputPath,
     mediaType: NonEmptyString
   })).min(1)
@@ -7822,19 +8113,19 @@ var KayUiBundleIndexV1 = z21.strictObject({
 function parseKayUiBundleIndexV1(input) {
   return KayUiBundleIndexV1.parse(input);
 }
-var KayUiAppPackageFile = z21.strictObject({
+var KayUiAppPackageFile = z24.strictObject({
   path: PackageAssetPath,
   mediaType: NonEmptyString,
-  bytes: z21.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
+  bytes: z24.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
     message: "app package file bytes must not be empty"
   })
 });
-var KayUiAppPackageV1 = z21.strictObject({
-  protocol: z21.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
+var KayUiAppPackageV1 = z24.strictObject({
+  protocol: z24.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
   appLocalId: LocalContributionId,
   entry: KayUiAppPackageFile,
-  styles: z21.array(KayUiAppPackageFile).optional(),
-  assets: z21.array(KayUiAppPackageFile).optional()
+  styles: z24.array(KayUiAppPackageFile).optional(),
+  assets: z24.array(KayUiAppPackageFile).optional()
 }).superRefine((appPackage, ctx) => {
   if (appPackage.entry.mediaType !== "application/javascript") {
     ctx.addIssue({
@@ -7870,72 +8161,29 @@ function parseKayUiAppPackageV1(input) {
   return KayUiAppPackageV1.parse(input);
 }
 
-// packages/plugin-protocol/dist/whiteboard.js
-import { z as z22 } from "zod";
-var WhiteboardValue = JsonValue;
-var WhiteboardEntryEnvelope = z22.strictObject({
-  id: NonEmptyString,
-  typeId: GlobalContributionId,
-  schemaVersion: z22.number().int().positive(),
-  title: z22.string(),
-  authorSessionId: NonEmptyString.nullable()
-});
-var WhiteboardEntrySummary = z22.strictObject({
-  name: NonEmptyString,
-  entry: WhiteboardEntryEnvelope,
-  revision: NonEmptyString
-});
-var WhiteboardEntrySnapshot = WhiteboardEntrySummary.extend({
-  value: WhiteboardValue
-});
-var WhiteboardDiagnostic = z22.strictObject({
-  ruleId: NonEmptyString,
-  severity: z22.enum(["error", "warning"]),
-  message: NonEmptyString
-});
-var WhiteboardEntryInfo = z22.strictObject({
-  name: NonEmptyString,
-  revision: NonEmptyString,
-  entry: WhiteboardEntryEnvelope.optional(),
-  state: z22.enum(["available", "unavailable", "unsupported-version", "invalid"]),
-  mutable: z22.boolean(),
-  diagnostics: z22.array(z22.string())
-});
-var WhiteboardEntryInspection = WhiteboardEntryInfo.extend({
-  value: WhiteboardValue.optional(),
-  text: z22.string(),
-  truncated: z22.boolean()
-});
-var WhiteboardTypeInfo = z22.strictObject({
-  typeId: GlobalContributionId,
-  displayName: NonEmptyString,
-  schemaVersion: z22.number().int().positive(),
-  available: z22.boolean()
-});
-
 // packages/plugin-protocol/dist/product-events.js
-import { z as z23 } from "zod";
+import { z as z25 } from "zod";
 var exportable = {
-  class: z23.literal("exportable"),
-  optional: z23.boolean().optional()
+  class: z25.literal("exportable"),
+  optional: z25.boolean().optional()
 };
-var PluginProductEventField = z23.union([
-  z23.strictObject({ class: z23.literal("local") }),
-  z23.strictObject({
+var PluginProductEventField = z25.union([
+  z25.strictObject({ class: z25.literal("local") }),
+  z25.strictObject({
     ...exportable,
-    type: z23.literal("enum"),
-    values: z23.array(z23.string())
+    type: z25.literal("enum"),
+    values: z25.array(z25.string())
   }),
-  z23.strictObject({
+  z25.strictObject({
     ...exportable,
-    type: z23.literal("number"),
-    min: z23.number(),
-    max: z23.number(),
-    integer: z23.boolean().optional()
+    type: z25.literal("number"),
+    min: z25.number(),
+    max: z25.number(),
+    integer: z25.boolean().optional()
   }),
-  z23.strictObject({
+  z25.strictObject({
     ...exportable,
-    type: z23.enum([
+    type: z25.enum([
       "boolean",
       "id",
       "identifier",
@@ -7951,9 +8199,9 @@ function isPluginProductEventName(name) {
 }
 
 // packages/plugin-protocol/dist/artifact-outputs.js
-import { z as z24 } from "zod";
+import { z as z26 } from "zod";
 var ARTIFACT_OUTPUT_PAGE_MAX = 200;
-var Segment = z24.string().min(1).max(1024).refine((value) => !/[^A-Za-z0-9._-]/.test(value)).refine((value) => value !== "." && value !== "..");
+var Segment = z26.string().min(1).max(1024).refine((value) => !/[^A-Za-z0-9._-]/.test(value)).refine((value) => value !== "." && value !== "..");
 function parseArtifactOutputUri(uri) {
   const match = /^output:\/\/([^/]+)\/([^/]+)$/.exec(uri);
   if (match === null || !Segment.safeParse(match[1]).success || !Segment.safeParse(match[2]).success)
@@ -7963,12 +8211,12 @@ function parseArtifactOutputUri(uri) {
 function isCanonicalArtifactOutputUri(uri) {
   return parseArtifactOutputUri(uri) !== void 0;
 }
-var ArtifactOutputUri = z24.string().refine(isCanonicalArtifactOutputUri, "Expected a canonical output://session/name URI");
-var ArtifactOutputChange = z24.union([
-  z24.strictObject({
-    uris: z24.array(ArtifactOutputUri).min(1).max(ARTIFACT_OUTPUT_PAGE_MAX)
+var ArtifactOutputUri = z26.string().refine(isCanonicalArtifactOutputUri, "Expected a canonical output://session/name URI");
+var ArtifactOutputChange = z26.union([
+  z26.strictObject({
+    uris: z26.array(ArtifactOutputUri).min(1).max(ARTIFACT_OUTPUT_PAGE_MAX)
   }),
-  z24.strictObject({ sessionId: Segment })
+  z26.strictObject({ sessionId: Segment })
 ]);
 
 // packages/plugin-protocol/dist/credential-text.js
@@ -8011,25 +8259,25 @@ function isCredentialShapedText(value) {
 }
 
 // packages/plugin-protocol/dist/ui-module-bundle.js
-import { z as z25 } from "zod";
+import { z as z27 } from "zod";
 var KAY_UI_MODULE_BUNDLE_PROTOCOL = "kay.ui.module-bundle.v1";
 var KAY_UI_MODULE_FILE_MAX_BYTES = 8 * 1024 * 1024;
 var KAY_UI_MODULE_BUNDLE_MAX_BYTES = 32 * 1024 * 1024;
 var KAY_UI_MODULE_BUNDLE_MAX_FILES = 256;
-var OutputPath = z25.string().min(1).max(1024).refine((value) => {
+var OutputPath = z27.string().min(1).max(1024).refine((value) => {
   const parsed = KayUiBundleIndexV1.shape.entryPath.safeParse(value);
   return parsed.success && parsed.data === value && value.split("/").every((part) => part !== "" && part !== ".") && // oxlint-disable-next-line eslint/no-control-regex -- Untrusted artifact paths must reject literal control characters.
   !/[\u0000-\u001f?#:%]/.test(value);
 }, { message: "bundle path must contain only unambiguous relative segments" });
-var Sha256 = z25.string().regex(/^[a-f0-9]{64}$/);
-var KayUiModuleBundleIndexV1 = z25.strictObject({
-  protocol: z25.literal(KAY_UI_MODULE_BUNDLE_PROTOCOL),
+var Sha256 = z27.string().regex(/^[a-f0-9]{64}$/);
+var KayUiModuleBundleIndexV1 = z27.strictObject({
+  protocol: z27.literal(KAY_UI_MODULE_BUNDLE_PROTOCOL),
   entryPath: OutputPath,
-  stylePaths: z25.array(OutputPath).max(KAY_UI_MODULE_BUNDLE_MAX_FILES),
-  files: z25.array(z25.strictObject({
+  stylePaths: z27.array(OutputPath).max(KAY_UI_MODULE_BUNDLE_MAX_FILES),
+  files: z27.array(z27.strictObject({
     path: OutputPath,
-    mediaType: z25.string().min(1).max(128).regex(/^[a-zA-Z0-9!#$&^_.+-]+\/[a-zA-Z0-9!#$&^_.+-]+$/),
-    byteLength: z25.number().int().min(1).max(KAY_UI_MODULE_FILE_MAX_BYTES),
+    mediaType: z27.string().min(1).max(128).regex(/^[a-zA-Z0-9!#$&^_.+-]+\/[a-zA-Z0-9!#$&^_.+-]+$/),
+    byteLength: z27.number().int().min(1).max(KAY_UI_MODULE_FILE_MAX_BYTES),
     sha256: Sha256
   })).min(1).max(KAY_UI_MODULE_BUNDLE_MAX_FILES)
 }).superRefine((index, ctx) => {
@@ -8059,9 +8307,9 @@ var KayUiModuleBundleIndexV1 = z25.strictObject({
       message: "bundle exceeds byte cap"
     });
 });
-var KayUiModuleBundleReference = z25.strictObject({
+var KayUiModuleBundleReference = z27.strictObject({
   generationId: Sha256,
-  revision: z25.string().min(1).max(4096).refine((value) => value.trim() === value),
+  revision: z27.string().min(1).max(4096).refine((value) => value.trim() === value),
   index: KayUiModuleBundleIndexV1
 });
 export {
@@ -8228,6 +8476,7 @@ export {
   PluginPickerRound,
   PluginProductEventContribution,
   PluginProductEventField,
+  PluginProjectDirectories,
   PluginProvisioningProbe,
   PluginProvisioningRequirement,
   PluginShellCommand,
@@ -8241,6 +8490,9 @@ export {
   PluginWebSessionDeclaration,
   PluginWebSessionProbe,
   PluginWorkloadPurpose,
+  ProjectDirectory,
+  ProjectDirectoryRequest,
+  ProjectDirectoryResponse,
   RENAMED_PLUGIN_CAPABILITY_SLUGS,
   RESERVED_DIRECTORY_PLUGIN_ID_PREFIXES,
   RETIRED_COMPATIBILITY_KEYS,
@@ -8338,6 +8590,7 @@ export {
   WhiteboardEntryEnvelope,
   WhiteboardEntryInfo,
   WhiteboardEntryInspection,
+  WhiteboardEntryReference,
   WhiteboardEntrySnapshot,
   WhiteboardEntrySummary,
   WhiteboardTypeContribution,