@yaklabs-ai/plugin-protocol 0.53.0 → 0.54.0

package/dist/index.js

@@ -266,8 +266,9 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.53.0";
+var KAY_PLUGIN_SDK_VERSION = "0.54.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
+  "0.53.0",
   "0.52.1",
   "0.52.0",
   "0.51.0",
@@ -1807,6 +1808,9 @@ var PLUGIN_CAPABILITY_SLUGS = [
   "skills.write",
   "skills.share",
   "plugins.set-enabled",
+  "sessions.assign-project",
+  "artifacts.resolve-file",
+  "process.run",
   "sessions.annotate",
   "sessions.compact",
   "soul.write",
@@ -1856,7 +1860,10 @@ var PRIVATE_PLUGIN_CAPABILITY_SLUGS = [
   "skills.share",
   "plugins.set-enabled",
   "system-prompt.register",
-  "workflows.signals"
+  "workflows.signals",
+  "sessions.assign-project",
+  "artifacts.resolve-file",
+  "process.run"
 ];
 function isPrivateCapabilityClaim(claim) {
   return PRIVATE_PLUGIN_CAPABILITY_SLUGS.includes(claim.slug);
@@ -2008,6 +2015,29 @@ function createAuthoritySchemas(canonical) {
       slug: z11.literal("plugins.set-enabled"),
       envelope: z11.strictObject({})
     }),
+    z11.strictObject({
+      // Set the project of sessions no current call or event is about (accepting a project
+      // suggestion, undoing an automatic filing). Private (PRIVATE_PLUGIN_CAPABILITY_SLUGS): whether
+      // a plugin may write to sessions other than the one it is answering is not decided.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("sessions.assign-project"),
+      envelope: z11.strictObject({})
+    }),
+    z11.strictObject({
+      // Turn an address a session's agent can read into the absolute path of its file. Private
+      // (PRIVATE_PLUGIN_CAPABILITY_SLUGS): a path names where a person's files live on disk.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("artifacts.resolve-file"),
+      envelope: z11.strictObject({})
+    }),
+    z11.strictObject({
+      // Run a program the host bound for this plugin from its app code, each run still checked
+      // against the exact `process.spawn` claim. Private (PRIVATE_PLUGIN_CAPABILITY_SLUGS): the
+      // host binds programs only for plugins it ships.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("process.run"),
+      envelope: z11.strictObject({})
+    }),
     z11.strictObject({
       // Write a steward entry (recap, next steps, title, work headlines) into the session whose
       // event the calling handler is answering. Bound to that session: a call for any other is
@@ -2337,6 +2367,9 @@ function sameClaim(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "sessions.assign-project":
+    case "artifacts.resolve-file":
+    case "process.run":
     case "sessions.annotate":
     case "sessions.compact":
     case "soul.write":
@@ -2429,6 +2462,9 @@ function envelopePairs(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "sessions.assign-project":
+    case "artifacts.resolve-file":
+    case "process.run":
     case "sessions.annotate":
     case "sessions.compact":
     case "soul.write":
@@ -3754,6 +3790,8 @@ function createContributionsSchemas(canonical) {
   const UriModuleFacts2 = z14.strictObject(UriModuleFactsShape);
   const UriModuleContribution2 = z14.strictObject({
     localId: LocalContributionId2,
+    /** Opaque adapter id for account-bound connections; never namespaced. */
+    adapterId: z14.string().min(1).optional(),
     schemes: z14.array(UriScheme2).min(1),
     displayName: OptionalDisplayName,
     ...UriModuleFactsShape,
@@ -3788,6 +3826,7 @@ function createContributionsSchemas(canonical) {
     looksUpWebLinks: z14.literal(true).optional()
   });
   const AppUriModuleContribution2 = UriModuleContribution2.omit({
+    adapterId: true,
     authActions: true,
     authService: true,
     authScheme: true,
@@ -4399,6 +4438,13 @@ function createContributionsSchemas(canonical) {
   });
   const KayUiAppHostCapability2 = z14.enum([
     "navigation.open-session",
+    "navigation.open-external",
+    "configuration.read",
+    "auth-services.read",
+    "connect-flows.read",
+    "connect-flows.dismiss",
+    "support.report",
+    "navigation.open-page",
     // Lets `navigation.openChat` create a blank chat (no message, no model
     // turn) when no session id is given. It never sends anything.
     "sessions.create",
@@ -4408,12 +4454,15 @@ function createContributionsSchemas(canonical) {
     // Draws Bonsai's markdown document view in the app's page (`BonsaiMarkdownDocumentView`).
     // It reads and saves nothing: the app supplies the text and keeps the edits.
     "markdown.document-view",
-    "models.complete",
     // Draws links the host resolves and opens (`BonsaiReferencePill`, `BonsaiReferenceRow`,
     // `BonsaiReferenceMarkdown`). A person's click on one can open a session or another plugin's page.
     "references.open",
     // Server-rated organization billing, distinct from local/provider cost.
     "billing.read",
+    "account.read",
+    "plugins.read",
+    "plugins.settings",
+    "permissions.manage",
     "automations.read",
     "automations.run",
     // Lists the shared artifacts the signed-in account may open and opens one in Bonsai's shared
@@ -4518,6 +4567,8 @@ function createContributionsSchemas(canonical) {
     icon: PackageAssetPath2.optional(),
     companion: z14.boolean().optional(),
     sessionBinding: z14.enum(["session", "family"]).optional(),
+    /** Lists this page in Settings beside native workspace sections, in the same order scale. */
+    settings: z14.strictObject({ order: z14.number().optional() }).optional(),
     aliases: z14.array(NonEmptyString3).optional(),
     openedEvent: NonEmptyString3.optional()
   });
@@ -4732,28 +4783,53 @@ __export(manifest_exports, {
   validateKayUiEventSubscription: () => validateKayUiEventSubscription
 });
 
-// packages/plugin-protocol/dist/shell-commands.js
+// packages/plugin-protocol/dist/project-directories.js
 import { z as z15 } from "zod";
-var PluginShellCommand = z15.strictObject({
-  name: z15.string().regex(/^[a-z][a-z0-9-]*$/),
-  aliases: z15.array(z15.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
+var PluginProjectDirectories = z15.strictObject({
+  /** An endpoint this plugin's app target declares; called with a {@link ProjectDirectoryRequest}. */
   endpoint: z15.string().min(1),
-  usage: z15.string().min(1)
+  /** A scheme this plugin's URI modules serve; a project is addressed as `<scheme>://<id>`. */
+  scheme: z15.string().min(1)
+});
+var ProjectDirectoryRequest = z15.strictObject({
+  /** The project's stable id. */
+  id: z15.string().min(1)
+});
+var ProjectDirectory = z15.strictObject({
+  id: z15.string().min(1),
+  /** Absolute path of the project's folder. */
+  path: z15.string().min(1),
+  /** Absolute path a new session in this project starts in. */
+  defaultCwd: z15.string().min(1),
+  /** Ancestor project ids, root first. */
+  ancestorIds: z15.array(z15.string().min(1))
+});
+var ProjectDirectoryResponse = z15.strictObject({
+  project: ProjectDirectory.nullable()
+});
+
+// packages/plugin-protocol/dist/shell-commands.js
+import { z as z16 } from "zod";
+var PluginShellCommand = z16.strictObject({
+  name: z16.string().regex(/^[a-z][a-z0-9-]*$/),
+  aliases: z16.array(z16.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
+  endpoint: z16.string().min(1),
+  usage: z16.string().min(1)
 });
-var ShellCommandOutcome = z15.strictObject({
-  exitCode: z15.number().int(),
+var ShellCommandOutcome = z16.strictObject({
+  exitCode: z16.number().int(),
   envelope: JsonValue,
   result: JsonValue.optional()
 });
-var ShellCommandRequest = z15.strictObject({
-  argv: z15.array(z15.string()),
-  cwd: z15.string(),
-  outcomes: z15.array(ShellCommandOutcome).max(3)
+var ShellCommandRequest = z16.strictObject({
+  argv: z16.array(z16.string()),
+  cwd: z16.string(),
+  outcomes: z16.array(ShellCommandOutcome).max(3)
 });
-var ShellCommandStep = z15.discriminatedUnion("kind", [
-  z15.strictObject({
-    kind: z15.literal("invoke"),
-    toolName: z15.enum([
+var ShellCommandStep = z16.discriminatedUnion("kind", [
+  z16.strictObject({
+    kind: z16.literal("invoke"),
+    toolName: z16.enum([
       "read",
       "list",
       "search",
@@ -4762,24 +4838,24 @@ var ShellCommandStep = z15.discriminatedUnion("kind", [
       "delete",
       "help"
     ]),
-    input: z15.record(z15.string(), JsonValue),
-    flags: z15.record(z15.string(), z15.string())
+    input: z16.record(z16.string(), JsonValue),
+    flags: z16.record(z16.string(), z16.string())
   }),
-  z15.strictObject({
-    kind: z15.literal("finish"),
-    exitCode: z15.number().int(),
-    stdout: z15.string()
+  z16.strictObject({
+    kind: z16.literal("finish"),
+    exitCode: z16.number().int(),
+    stdout: z16.string()
   })
 ]);
 
 // packages/plugin-protocol/dist/manifest.js
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 
 // packages/plugin-protocol/dist/workload-purposes.js
-import { z as z16 } from "zod";
-var PluginWorkloadPurpose = z16.strictObject({
-  purpose: z16.string().regex(/^[a-z][a-z0-9-]*$/),
-  workloadClass: z16.enum(["dreaming", "hindsight"])
+import { z as z17 } from "zod";
+var PluginWorkloadPurpose = z17.strictObject({
+  purpose: z17.string().max(128).regex(/^[a-z][a-z0-9_-]*(?:\/[a-z][a-z0-9_-]*)*$/),
+  workloadClass: z17.enum(["dreaming", "hindsight"])
 });
 
 // packages/plugin-protocol/dist/synthetic-contributions.js
@@ -4805,34 +4881,34 @@ function createManifestSchemas(canonical) {
   const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
-  const KayAgentTargetManifest2 = z17.strictObject({
+  const KayAgentTargetManifest2 = z18.strictObject({
     entrypoint: TargetEntrypoint2,
-    contributes: z17.strictObject({
-      tools: z17.array(AgentToolContribution2).optional(),
-      converters: z17.array(ConverterContribution2).optional(),
-      uriModules: z17.array(UriModuleContribution2).optional(),
+    contributes: z18.strictObject({
+      tools: z18.array(AgentToolContribution2).optional(),
+      converters: z18.array(ConverterContribution2).optional(),
+      uriModules: z18.array(UriModuleContribution2).optional(),
       // Host-composed artifact-backed schemes (see `ArtifactUriModuleContribution`): the plugin
       // declares scheme + editability; the daemon binds each to the kernel's artifact lifecycle
       // per session. Separate from `uriModules` (plugin-implemented backends) precisely because
       // the plugin registers NOTHING for these at activation.
-      artifactUriModules: z17.array(ArtifactUriModuleContribution2).optional(),
-      cliBindings: z17.array(CliBindingContribution2).optional(),
+      artifactUriModules: z18.array(ArtifactUriModuleContribution2).optional(),
+      cliBindings: z18.array(CliBindingContribution2).optional(),
       // Which git hosts this plugin's credential serves (see `GitHostContribution`): a
       // declaration, so a plugin for any git backend gets credentialed clones without
       // the daemon learning its name. Sibling of `cliBindings` because both answer the
       // same question - which of this plugin's auth services a host-side consumer
       // resolves - for two different transports.
-      gitHosts: z17.array(GitHostContribution2).optional(),
-      resources: z17.array(ResourceContribution2).optional(),
-      skills: z17.array(SkillContribution2).optional(),
-      searchProviders: z17.array(SearchProviderContribution2).optional(),
-      interactionDrivers: z17.array(InteractionDriverContribution2).optional(),
-      entityResolvers: z17.array(EntityResolverContribution2).optional(),
-      renderers: z17.array(AgentRenderContribution2).optional(),
+      gitHosts: z18.array(GitHostContribution2).optional(),
+      resources: z18.array(ResourceContribution2).optional(),
+      skills: z18.array(SkillContribution2).optional(),
+      searchProviders: z18.array(SearchProviderContribution2).optional(),
+      interactionDrivers: z18.array(InteractionDriverContribution2).optional(),
+      entityResolvers: z18.array(EntityResolverContribution2).optional(),
+      renderers: z18.array(AgentRenderContribution2).optional(),
       // Handler restricted to skill | tool by the manifest-level refinement below (see
       // `CommandContribution`'s doc for why the restriction is not expressed in the type, and
       // `CommandHandler`'s doc for why there is no promptTemplate variant to declare here).
-      commands: z17.array(CommandContribution2).optional()
+      commands: z18.array(CommandContribution2).optional()
     }).optional(),
     /**
      * The plugin's primer skill - the `localId` of one of its own declared
@@ -4868,8 +4944,8 @@ function createManifestSchemas(canonical) {
      * grant a person approved), and a body over 500 words is dropped.
      */
     prompt: PackageAssetPath2.optional(),
-    promptOrder: z17.number().finite().optional(),
-    familyFolder: z17.strictObject({ scope: z17.literal("root") }).optional(),
+    promptOrder: z18.number().finite().optional(),
+    familyFolder: z18.strictObject({ scope: z18.literal("root") }).optional(),
     /**
      * External origins of skills this plugin claims as its own (see
      * {@link PluginSkillSourceDeclaration}). Acquired by the daemon at boot and landed under the
@@ -4880,61 +4956,61 @@ function createManifestSchemas(canonical) {
      * acquisition, not declared here, so there is nothing for the resolved contract to mint a
      * `globalId` for at parse time.
      */
-    skillSources: z17.array(PluginSkillSourceDeclaration2).optional()
+    skillSources: z18.array(PluginSkillSourceDeclaration2).optional()
   });
-  const KayAppTargetManifest2 = z17.strictObject({
+  const KayAppTargetManifest2 = z18.strictObject({
     // Optional, like `kay.ui`'s: a target may carry only declarative `contributes` (e.g. a plugin
     // that ships nothing but `mcpServers`) with no app-lifetime module for the host to load.
     entrypoint: TargetEntrypoint2.optional(),
-    contributes: z17.strictObject({
+    contributes: z18.strictObject({
       // Session tools implemented by the app-lifetime activation (registered once, injected into
       // every session with a host-stamped session context) - the tool counterpart of `uriModules`
       // below. Same descriptor shape as kay.agent tools; `toolName` shares ONE flat session
       // namespace with them (enforced by the manifest-level refinement below).
-      tools: z17.array(ToolContribution2).optional(),
-      endpoints: z17.array(EndpointContribution2).optional(),
-      cards: z17.array(PluginCardContribution2).optional(),
-      uriModules: z17.array(AppUriModuleContribution2).optional(),
-      dataSources: z17.array(AppDataSourceContribution2).optional(),
-      whiteboardTypes: z17.array(WhiteboardTypeContribution2).optional(),
-      approvalTypes: z17.array(ApprovalTypeContribution2).optional(),
-      workflows: z17.array(WorkflowContribution2).optional(),
-      eventDefinitions: z17.array(PluginEventDefinitionContribution2).optional(),
+      tools: z18.array(ToolContribution2).optional(),
+      endpoints: z18.array(EndpointContribution2).optional(),
+      cards: z18.array(PluginCardContribution2).optional(),
+      uriModules: z18.array(AppUriModuleContribution2).optional(),
+      dataSources: z18.array(AppDataSourceContribution2).optional(),
+      whiteboardTypes: z18.array(WhiteboardTypeContribution2).optional(),
+      approvalTypes: z18.array(ApprovalTypeContribution2).optional(),
+      workflows: z18.array(WorkflowContribution2).optional(),
+      eventDefinitions: z18.array(PluginEventDefinitionContribution2).optional(),
       // Default notification rules over this plugin's own `eventDefinitions`; seeded by the host
       // (see `PluginNotificationRuleContribution`).
-      notificationRules: z17.array(PluginNotificationRuleContribution2).optional(),
-      productEvents: z17.array(PluginProductEventContribution2).optional(),
-      eventSubscriptions: z17.array(AppEventSubscription2).optional(),
-      deviceDelegations: z17.array(DeviceDelegationContribution2).optional(),
-      sessionReaders: z17.array(SessionReaderContribution2).optional(),
-      contextContributors: z17.array(ContextContributorContribution2).optional(),
+      notificationRules: z18.array(PluginNotificationRuleContribution2).optional(),
+      productEvents: z18.array(PluginProductEventContribution2).optional(),
+      eventSubscriptions: z18.array(AppEventSubscription2).optional(),
+      deviceDelegations: z18.array(DeviceDelegationContribution2).optional(),
+      sessionReaders: z18.array(SessionReaderContribution2).optional(),
+      contextContributors: z18.array(ContextContributorContribution2).optional(),
       // Vendored MCP servers this plugin ships (see `McpServerContributions`). Each is hosted only
       // for a plugin holding `mcp.host-server` for its name and URL; that is decided at
       // composition, not here (see ARCHITECTURE.md "Validation Law").
       mcpServers: McpServerContributions2.optional(),
       // Handler restricted to endpoint-only by the manifest-level refinement below.
-      commands: z17.array(CommandContribution2).optional()
+      commands: z18.array(CommandContribution2).optional()
     }).optional()
   });
-  const KayUiTargetManifest2 = z17.strictObject({
+  const KayUiTargetManifest2 = z18.strictObject({
     entrypoint: TargetEntrypoint2.extend({
-      format: z17.literal("compiled-bundle").optional()
+      format: z18.literal("compiled-bundle").optional()
     }).optional(),
-    contributes: z17.strictObject({
-      commands: z17.array(UiCommandContribution2).optional(),
-      slots: z17.array(UiSlotContribution2).optional(),
-      referencePresentations: z17.array(ReferencePresentationContribution2).optional(),
-      apps: z17.array(UiAppContribution2).optional(),
-      railEntries: z17.array(UiRailEntryContribution2).optional(),
-      toastPreviews: z17.array(UiToastPreviewContribution2).optional(),
-      pages: z17.array(UiPageContribution2).optional(),
-      themes: z17.array(ThemeContribution2).optional(),
-      eventSubscriptions: z17.array(UiEventSubscriptionContribution2).optional(),
-      dataMaterializers: z17.array(AppDataMaterializerContribution2).optional()
+    contributes: z18.strictObject({
+      commands: z18.array(UiCommandContribution2).optional(),
+      slots: z18.array(UiSlotContribution2).optional(),
+      referencePresentations: z18.array(ReferencePresentationContribution2).optional(),
+      apps: z18.array(UiAppContribution2).optional(),
+      railEntries: z18.array(UiRailEntryContribution2).optional(),
+      toastPreviews: z18.array(UiToastPreviewContribution2).optional(),
+      pages: z18.array(UiPageContribution2).optional(),
+      themes: z18.array(ThemeContribution2).optional(),
+      eventSubscriptions: z18.array(UiEventSubscriptionContribution2).optional(),
+      dataMaterializers: z18.array(AppDataMaterializerContribution2).optional()
     }).optional()
   });
-  const PluginConfigScope2 = z17.enum(["global", "project", "agent"]);
-  const PluginConfigSectionManifest2 = z17.strictObject({
+  const PluginConfigScope2 = z18.enum(["global", "project", "agent"]);
+  const PluginConfigSectionManifest2 = z18.strictObject({
     section: NonEmptyString3.optional(),
     schema: JsonSchema,
     /**
@@ -4952,23 +5028,23 @@ function createManifestSchemas(canonical) {
      * is the baseline every section has; `agent` has no runtime mapping (the
      * agent/entity fold is downstream of the document protocol).
      */
-    scopes: z17.array(PluginConfigScope2).optional()
+    scopes: z18.array(PluginConfigScope2).optional()
   });
-  const PluginConfigManifest2 = z17.array(PluginConfigSectionManifest2).min(1);
-  const PluginStorageManifest2 = z17.strictObject({
-    sqlite: z17.strictObject({
-      enabled: z17.boolean(),
-      ownerTarget: z17.literal("kay.app").optional(),
+  const PluginConfigManifest2 = z18.array(PluginConfigSectionManifest2).min(1);
+  const PluginStorageManifest2 = z18.strictObject({
+    sqlite: z18.strictObject({
+      enabled: z18.boolean(),
+      ownerTarget: z18.literal("kay.app").optional(),
       migrations: NonEmptyString3.optional()
     }).optional(),
-    dataDir: z17.strictObject({
-      enabled: z17.boolean(),
-      ownerTarget: z17.literal("kay.app").optional(),
+    dataDir: z18.strictObject({
+      enabled: z18.boolean(),
+      ownerTarget: z18.literal("kay.app").optional(),
       sharedWith: PluginId2.optional()
     }).optional()
   });
-  const PluginOAuthClientSupplier2 = z17.enum(["kay", "user"]);
-  const PluginProvisioningProbe2 = z17.strictObject({
+  const PluginOAuthClientSupplier2 = z18.enum(["kay", "user"]);
+  const PluginProvisioningProbe2 = z18.strictObject({
     /**
      * The API endpoint that answers the question. The host sends the service's OWN credential here,
      * so this must belong to the provider that minted it - enforced by the daemon against the
@@ -4976,13 +5052,13 @@ function createManifestSchemas(canonical) {
      */
     url: HttpsUrl2,
     /** Absent => `GET`. */
-    method: z17.enum(["GET"]).optional(),
+    method: z18.enum(["GET"]).optional(),
     /**
      * The statuses that make the response a VERDICT at all. Anything else (a 401 from a stale
      * token, a 5xx, a rate limit) means the probe learned nothing and reports `unknown` - never
      * `unsatisfied`, which would tell a user to go fix setup that is fine.
      */
-    verdictStatuses: z17.array(SignedInStatusCode2).min(1),
+    verdictStatuses: z18.array(SignedInStatusCode2).min(1),
     /**
      * Dot-path to a JSON array in the response body that must be NON-EMPTY for the requirement to
      * count as satisfied (e.g. `installations`). Absent means a verdict status alone is enough.
@@ -4991,7 +5067,7 @@ function createManifestSchemas(canonical) {
      */
     nonEmptyArrayAt: NonEmptyString3.optional()
   });
-  const PluginProvisioningRequirement2 = z17.strictObject({
+  const PluginProvisioningRequirement2 = z18.strictObject({
     /** Stable id, unique within the scheme. */
     id: LocalContributionId2,
     /** Human-facing requirement name, e.g. "GitHub App installation". */
@@ -5008,7 +5084,7 @@ function createManifestSchemas(canonical) {
     probe: PluginProvisioningProbe2
   });
   const PluginProvisioningField = {
-    provisioning: z17.array(PluginProvisioningRequirement2).optional()
+    provisioning: z18.array(PluginProvisioningRequirement2).optional()
   };
   const PluginAuthSchemeDescriptionFields = {
     /** Human-facing flow name; absent, the service's name stands in. */
@@ -5024,17 +5100,21 @@ function createManifestSchemas(canonical) {
   const PluginAuthSchemeOAuthEndpointFields = {
     authorizationUrl: HttpsUrl2,
     tokenUrl: HttpsUrl2,
+    /** Initial connect scopes; absent uses `scopes`, while an empty array requests none. */
+    connectScopes: z18.array(NonEmptyString3).optional(),
     /** Provider-specific query parameters added to the authorize URL. */
-    extraAuthorizeParams: z17.record(NonEmptyString3, z17.string()).optional()
+    extraAuthorizeParams: z18.record(NonEmptyString3, z18.string()).optional(),
+    /** Additional authorization parameters when this service already holds an account. */
+    extraAuthorizeParamsWhenAccountHeld: z18.record(NonEmptyString3, z18.string()).optional()
   };
-  const PluginAuthSchemeAccountLookup = z17.literal("lookup");
-  const PluginAuthSchemeOAuthPkce = z17.strictObject({
+  const PluginAuthSchemeAccountLookup = z18.literal("lookup");
+  const PluginAuthSchemeOAuthPkce = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     ...PluginAuthSchemeOAuthEndpointFields,
     localId: LocalContributionId2,
-    kind: z17.literal("oauth2"),
-    exchange: z17.literal("pkce"),
+    kind: z18.literal("oauth2"),
+    exchange: z18.literal("pkce"),
     byoocProfile: PluginByoocProfile.optional(),
     /**
      * A public client id the plugin ships for its own sign-in. Only an installed plugin's is used:
@@ -5058,7 +5138,7 @@ function createManifestSchemas(canonical) {
      * runs on an untrusted manifest, so a hand-built `["kay","kay"]` must be refused here, not
      * silently normalized).
      */
-    clientSuppliers: z17.array(PluginOAuthClientSupplier2).nonempty().superRefine((suppliers, ctx) => {
+    clientSuppliers: z18.array(PluginOAuthClientSupplier2).nonempty().superRefine((suppliers, ctx) => {
       if (new Set(suppliers).size !== suppliers.length) {
         ctx.addIssue({
           code: "custom",
@@ -5066,7 +5146,7 @@ function createManifestSchemas(canonical) {
         });
       }
     }),
-    scopes: z17.array(NonEmptyString3).optional()
+    scopes: z18.array(NonEmptyString3).optional()
   }).refine((scheme) => scheme.byoocProfile === void 0 || scheme.clientSuppliers.includes("user"), {
     message: "An own-client profile requires the user client supplier.",
     path: ["byoocProfile"]
@@ -5077,33 +5157,33 @@ function createManifestSchemas(canonical) {
     message: "a scheme with its own clientId names where its account comes from (`account`)",
     path: ["account"]
   });
-  const PluginAuthSchemeOAuthConfidential = z17.strictObject({
+  const PluginAuthSchemeOAuthConfidential = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     ...PluginAuthSchemeOAuthEndpointFields,
     localId: LocalContributionId2,
-    kind: z17.literal("oauth2"),
-    exchange: z17.literal("confidential"),
+    kind: z18.literal("oauth2"),
+    exchange: z18.literal("confidential"),
     /** Absent means `["kay"]` - a confidential exchange's secret may only ever be Bonsai's. */
-    clientSuppliers: z17.tuple([z17.literal("kay")]).optional(),
-    scopes: z17.array(NonEmptyString3).optional(),
+    clientSuppliers: z18.tuple([z18.literal("kay")]).optional(),
+    scopes: z18.array(NonEmptyString3).optional(),
     /** Where the account comes from (see {@link PluginAuthSchemeAccountLookup}). */
-    account: z17.union([PluginAuthSchemeAccountLookup, z17.literal("sign-in")])
+    account: z18.union([PluginAuthSchemeAccountLookup, z18.literal("sign-in")])
   });
-  const PluginAuthSchemeOAuth2 = z17.discriminatedUnion("exchange", [
+  const PluginAuthSchemeOAuth2 = z18.discriminatedUnion("exchange", [
     PluginAuthSchemeOAuthPkce,
     PluginAuthSchemeOAuthConfidential
   ]);
-  const PluginAuthSchemeApiKey = z17.strictObject({
+  const PluginAuthSchemeApiKey = z18.strictObject({
     ...PluginProvisioningField,
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z17.literal("api-key"),
-    scopes: z17.array(NonEmptyString3).optional(),
+    kind: z18.literal("api-key"),
+    scopes: z18.array(NonEmptyString3).optional(),
     /** The connect prompt's label for the key. Absent: "<service name> API key". */
     inputLabel: NonEmptyString3.optional(),
     /** Two or more labeled inputs for a secret that comes in parts; absent asks for one key. */
-    fields: z17.array(z17.strictObject({ id: LocalContributionId2, label: NonEmptyString3 })).min(2).superRefine((fields, ctx) => {
+    fields: z18.array(z18.strictObject({ id: LocalContributionId2, label: NonEmptyString3 })).min(2).superRefine((fields, ctx) => {
       if (new Set(fields.map((field) => field.id)).size !== fields.length) {
         ctx.addIssue({
           code: "custom",
@@ -5112,7 +5192,7 @@ function createManifestSchemas(canonical) {
       }
     }).optional(),
     /** Where and how the person creates the key outside Bonsai. */
-    setup: z17.strictObject({ instructions: NonEmptyString3, url: HttpsUrl2 }).optional(),
+    setup: z18.strictObject({ instructions: NonEmptyString3, url: HttpsUrl2 }).optional(),
     /**
      * `"lookup"`: the plugin checks a key before it is saved and names its account, with the function
      * it registers (`api.auth.registerAccountLookup`). Absent: the key is saved unchecked, under the
@@ -5120,27 +5200,27 @@ function createManifestSchemas(canonical) {
      */
     account: PluginAuthSchemeAccountLookup.optional()
   });
-  const PluginAuthSchemeDelegated = z17.strictObject({
+  const PluginAuthSchemeDelegated = z18.strictObject({
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z17.literal("delegated"),
-    scopes: z17.array(NonEmptyString3).optional()
+    kind: z18.literal("delegated"),
+    scopes: z18.array(NonEmptyString3).optional()
   });
-  const ExternalCliArgument = z17.string().min(1).max(16384).refine((value) => ![...value].some(isUnsafeArgumentCharacter), {
+  const ExternalCliArgument = z18.string().min(1).max(16384).refine((value) => ![...value].some(isUnsafeArgumentCharacter), {
     message: "an argument may hold tabs and line breaks, but no other control character, no invisible character and no bidirectional override"
   });
-  const ExternalCliCommand = z17.string().max(128).regex(/^[A-Za-z0-9][A-Za-z0-9._+-]*$/, {
+  const ExternalCliCommand = z18.string().max(128).regex(/^[A-Za-z0-9][A-Za-z0-9._+-]*$/, {
     message: "a command is an executable's basename (letters, digits, '.', '_', '+', '-'), never a path"
   });
   const ExternalCliHint = NonEmptyString3.max(2048);
-  const ExternalCliArguments = z17.array(ExternalCliArgument).max(64);
+  const ExternalCliArguments = z18.array(ExternalCliArgument).max(64);
   const SignedOutMarker = ExternalCliArgument.refine((value) => value.trim() !== "", { message: "a signed-out marker needs text beyond whitespace" });
-  const PluginExternalCliConnect2 = z17.strictObject({
+  const PluginExternalCliConnect2 = z18.strictObject({
     /** A basename the host finds on `PATH` (`osascript`, `wrangler`), never a path. */
     binary: ExternalCliCommand,
-    probe: z17.strictObject({
+    probe: z18.strictObject({
       args: ExternalCliArguments.min(1),
-      timeoutMs: z17.number().int().min(1).max(12e4).optional(),
+      timeoutMs: z18.number().int().min(1).max(12e4).optional(),
       /**
        * The CLI's own signed-out marker: text a failed probe's output (stderr, else stdout) contains
        * when the CLI is signed out. A failure that carries it is a sign-in problem, and only such a
@@ -5148,13 +5228,13 @@ function createManifestSchemas(canonical) {
        * unavailable. Required when `login` is declared, so a timeout never starts a sign-in. A list
        * is for a CLI with several signed-out messages; any one of them counts.
        */
-      signedOutMarker: z17.union([SignedOutMarker, z17.array(SignedOutMarker).min(1)]).optional()
+      signedOutMarker: z18.union([SignedOutMarker, z18.array(SignedOutMarker).min(1)]).optional()
     }),
     /** The CLI's interactive sign-in. Absent: connect only probes and reports. */
-    login: z17.strictObject({
+    login: z18.strictObject({
       args: ExternalCliArguments.min(1),
-      timeoutMs: z17.number().int().min(1).max(6e5).optional(),
-      pasteCode: z17.strictObject({
+      timeoutMs: z18.number().int().min(1).max(6e5).optional(),
+      pasteCode: z18.strictObject({
         /** The redeeming argv; the host appends the code as its last argument. */
         args: ExternalCliArguments.min(1),
         /** What the prompt says, for a person. */
@@ -5166,12 +5246,12 @@ function createManifestSchemas(canonical) {
      * for display, or hands it to an agent session that runs it behind the ordinary bash approval.
      * Absent for a binary the OS ships (`osascript`).
      */
-    install: z17.strictObject({
+    install: z18.strictObject({
       command: ExternalCliCommand,
       args: ExternalCliArguments
     }).optional(),
     /** Prose for a person: `install` when the binary is missing, `login` when the probe fails. */
-    hints: z17.strictObject({
+    hints: z18.strictObject({
       install: ExternalCliHint,
       login: ExternalCliHint
     })
@@ -5184,50 +5264,50 @@ function createManifestSchemas(canonical) {
       });
     }
   });
-  const PluginAuthSchemeExternalCli = z17.strictObject({
+  const PluginAuthSchemeExternalCli = z18.strictObject({
     ...PluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
-    kind: z17.literal("external-cli"),
-    scopes: z17.array(NonEmptyString3).optional(),
+    kind: z18.literal("external-cli"),
+    scopes: z18.array(NonEmptyString3).optional(),
     cli: PluginExternalCliConnect2.optional()
   });
-  const PluginAuthScheme2 = z17.discriminatedUnion("kind", [
+  const PluginAuthScheme2 = z18.discriminatedUnion("kind", [
     PluginAuthSchemeOAuth2,
     PluginAuthSchemeApiKey,
     PluginAuthSchemeDelegated,
     PluginAuthSchemeExternalCli
   ]);
-  const PluginWebSessionProbe2 = z17.strictObject({
+  const PluginWebSessionProbe2 = z18.strictObject({
     url: HttpsUrl2,
     /** Absent => `GET`. `POST` sends an empty JSON object body. */
-    method: z17.enum(["GET", "POST"]).optional(),
-    signedInStatuses: z17.array(SignedInStatusCode2).min(1)
+    method: z18.enum(["GET", "POST"]).optional(),
+    signedInStatuses: z18.array(SignedInStatusCode2).min(1)
   });
-  const PluginWebSessionDeclaration2 = z17.strictObject({
+  const PluginWebSessionDeclaration2 = z18.strictObject({
     /** `required`: capabilities degrade without the site login; `recommended`: it only smooths UX. */
-    importance: z17.enum(["required", "recommended"]),
+    importance: z18.enum(["required", "recommended"]),
     loginUrl: HttpsUrl2,
-    cookieDomains: z17.array(RegistrableDomain2).min(1),
+    cookieDomains: z18.array(RegistrableDomain2).min(1),
     probe: PluginWebSessionProbe2,
-    oauthVenue: z17.enum(["embedded", "external"]),
+    oauthVenue: z18.enum(["embedded", "external"]),
     /**
      * Where a page goes first when it opens in one of Bonsai's browser panes and this site login
      * is missing: a sign-in page that continues to the page. A template with `:email` and `:url`
      * (see `UriClaimTemplate`), on a host within `cookieDomains`.
      */
-    signInFirst: z17.string().optional()
+    signInFirst: z18.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
-  const PluginAuthService2 = z17.strictObject({
+  const PluginAuthService2 = z18.strictObject({
     localId: LocalContributionId2,
     displayName: NonEmptyString3,
     /** One plain sentence on what connecting this service gives Bonsai. */
     summary: NonEmptyString3.optional(),
-    schemes: z17.array(PluginAuthScheme2).min(1),
-    purposes: z17.array(NonEmptyString3).min(1),
+    schemes: z18.array(PluginAuthScheme2).min(1),
+    purposes: z18.array(NonEmptyString3).min(1),
     webSession: PluginWebSessionDeclaration2.optional()
   });
-  const PluginAuthManifest2 = z17.strictObject({
-    services: z17.array(PluginAuthService2).optional()
+  const PluginAuthManifest2 = z18.strictObject({
+    services: z18.array(PluginAuthService2).optional()
   });
   function stripRetiredCompatibilityKeys(value) {
     if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -5238,17 +5318,17 @@ function createManifestSchemas(canonical) {
       delete remaining[key];
     return remaining;
   }
-  const PluginCompatibilityFields = z17.strictObject({
-    supportedProtocols: z17.array(KayPluginProtocolVersion).optional(),
+  const PluginCompatibilityFields = z18.strictObject({
+    supportedProtocols: z18.array(KayPluginProtocolVersion).optional(),
     minKayVersion: NonEmptyString3.optional(),
     sdk: NonEmptyString3.optional()
   });
-  const PluginCompatibilityManifest2 = canonical ? PluginCompatibilityFields : z17.preprocess(stripRetiredCompatibilityKeys, PluginCompatibilityFields);
+  const PluginCompatibilityManifest2 = canonical ? PluginCompatibilityFields : z18.preprocess(stripRetiredCompatibilityKeys, PluginCompatibilityFields);
   const KayVersionString2 = NonEmptyString3.regex(SEMVER_PATTERN, {
     message: "version must be semver, for example 1.2.3"
   });
-  const KayPluginManifestV12 = z17.strictObject({
-    protocol: z17.literal(KAY_PLUGIN_PROTOCOL_VERSION),
+  const KayPluginManifestV12 = z18.strictObject({
+    protocol: z18.literal(KAY_PLUGIN_PROTOCOL_VERSION),
     id: PluginId2,
     displayName: NonEmptyString3,
     version: KayVersionString2,
@@ -5276,8 +5356,8 @@ function createManifestSchemas(canonical) {
     icon: PackageAssetPath2.optional(),
     iconDark: PackageAssetPath2.optional(),
     namespace: PluginNamespace2.optional(),
-    targets: z17.strictObject({
-      kay: z17.strictObject({
+    targets: z18.strictObject({
+      kay: z18.strictObject({
         agent: KayAgentTargetManifest2.optional(),
         app: KayAppTargetManifest2.optional(),
         ui: KayUiTargetManifest2.optional()
@@ -5285,8 +5365,9 @@ function createManifestSchemas(canonical) {
     }).optional(),
     config: PluginConfigManifest2.optional(),
     storage: PluginStorageManifest2.optional(),
-    workloadPurposes: z17.array(PluginWorkloadPurpose).optional(),
-    shellCommands: z17.array(PluginShellCommand).optional(),
+    workloadPurposes: z18.array(PluginWorkloadPurpose).optional(),
+    shellCommands: z18.array(PluginShellCommand).optional(),
+    projectDirectories: PluginProjectDirectories.optional(),
     auth: PluginAuthManifest2.optional(),
     permissions: PluginPermissionManifest2.optional(),
     compatibility: PluginCompatibilityManifest2.optional(),
@@ -5296,15 +5377,15 @@ function createManifestSchemas(canonical) {
      * schemes then report `ownedByBonsai`. Honoured only for a plugin that ships with Bonsai: the
      * host reads any other plugin's flag as false. Absent => false.
      */
-    ownedByBonsai: z17.boolean().optional(),
+    ownedByBonsai: z18.boolean().optional(),
     /**
      * Explicit plugin-level dependencies - other plugins this plugin requires to be present in the
      * composed roster. At composition time the runtime checks each id against the accepted
      * registration list and derives a provenance-complete dependency graph (together with implicit
      * auth-service edges from `consumesAuthServices`). Absent => no explicit dependencies.
      */
-    dependencies: z17.strictObject({
-      plugins: z17.array(PluginId2).optional()
+    dependencies: z18.strictObject({
+      plugins: z18.array(PluginId2).optional()
     }).optional()
   }).superRefine((manifest, ctx) => {
     const sharedWith = manifest.storage?.dataDir?.sharedWith;
@@ -5598,6 +5679,22 @@ function createManifestSchemas(canonical) {
       ...manifest.targets?.kay?.agent?.contributes?.uriModules ?? [],
       ...manifest.targets?.kay?.app?.contributes?.uriModules ?? []
     ].flatMap((module) => module.schemes));
+    if (manifest.projectDirectories !== void 0) {
+      if (!endpointIds.has(manifest.projectDirectories.endpoint)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["projectDirectories", "endpoint"],
+          message: "Project directories must name an endpoint declared by this plugin's app target."
+        });
+      }
+      if (!servedSchemes.has(manifest.projectDirectories.scheme)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["projectDirectories", "scheme"],
+          message: "Project directories must name a scheme this plugin serves."
+        });
+      }
+    }
     for (const [index, type] of types.entries()) {
       if ((type.directory !== void 0 || type.handover === true) && manifest.targets?.kay?.agent?.familyFolder?.scope !== "root") {
         ctx.addIssue({
@@ -6182,15 +6279,21 @@ function createManifestSchemas(canonical) {
         });
       }
     }
-    for (const [appIndex, app] of (manifest.targets?.kay?.ui?.contributes?.apps ?? []).entries()) {
+    const endpointSurfaces = (manifest.targets?.kay?.ui?.contributes?.apps ?? []).map((app, index) => ({
+      id: app.localId,
+      kind: "apps",
+      index,
+      capabilities: app.capabilities
+    }));
+    for (const app of endpointSurfaces) {
       for (const [endpointIndex, endpoint] of (app.capabilities?.endpoints ?? []).entries()) {
         const path = [
           "targets",
           "kay",
           "ui",
           "contributes",
-          "apps",
-          appIndex,
+          app.kind,
+          app.index,
           "capabilities",
           "endpoints",
           endpointIndex
@@ -6201,13 +6304,13 @@ function createManifestSchemas(canonical) {
           ctx.addIssue({
             code: "custom",
             path,
-            message: `ui app ${app.localId} references unknown endpoint ${endpoint}`
+            message: `ui app ${app.id} references unknown endpoint ${endpoint}`
           });
         } else if (!invokedUiEndpoints.has(endpoint)) {
           ctx.addIssue({
             code: "custom",
             path,
-            message: `ui app ${app.localId} endpoint ${endpoint} requires a kay.ui invoke grant`
+            message: `ui app ${app.id} endpoint ${endpoint} requires a kay.ui invoke grant`
           });
         }
       }
@@ -6497,7 +6600,7 @@ function pushContributionIds(output, path, items) {
 }
 
 // packages/plugin-protocol/dist/plugin-directory-verdict.js
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 
 // packages/plugin-protocol/dist/plugin-load-diagnostic.js
 var PLUGIN_DIAGNOSTIC_MESSAGE_CAP = 300;
@@ -6506,14 +6609,14 @@ function boundPluginDiagnosticMessage(message) {
 }
 
 // packages/plugin-protocol/dist/resolved-contract.js
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 function createResolvedContractSchemas(canonical) {
   const { PluginEventLocalId: PluginEventLocalId2 } = canonical ? canonicalPluginEventSchemas : plugin_events_exports;
   const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, GlobalContributionId: GlobalContributionId2, HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, PluginToolName: PluginToolName2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginExternalCliConnect: PluginExternalCliConnect2, PluginOAuthClientSupplier: PluginOAuthClientSupplier2 } = canonical ? canonicalManifestSchemas : manifest_exports;
   const { ResolvedPluginGrants: ResolvedPluginGrants2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
-  const ResolvedPluginContributionId2 = z18.strictObject({
+  const ResolvedPluginContributionId2 = z19.strictObject({
     target: PluginTargetName,
     kind: PluginContributionKindSchema,
     localId: PluginEventLocalId2,
@@ -6527,55 +6630,55 @@ function createResolvedContractSchemas(canonical) {
       });
     }
   });
-  const ResolvedKayToolId = z18.strictObject({
+  const ResolvedKayToolId = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     toolName: PluginToolName2
   });
-  const ResolvedKayAgentTool2 = z18.strictObject({
+  const ResolvedKayAgentTool2 = z19.strictObject({
     ...ResolvedKayToolId.shape,
     displayName: NonEmptyString3.optional(),
     description: NonEmptyString3.optional(),
     parameters: JsonSchema.optional(),
-    executionMode: z18.enum(["sequential", "parallel"]).optional(),
+    executionMode: z19.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
-    promptGuidelines: z18.array(NonEmptyString3).optional(),
-    requiresAuth: z18.strictObject({
+    promptGuidelines: z19.array(NonEmptyString3).optional(),
+    requiresAuth: z19.strictObject({
       serviceId: GlobalContributionId2,
       schemeId: GlobalContributionId2.optional()
     }).optional(),
     permission: canonical ? canonicalContributionSchemas.ToolPermission.optional() : ToolPermission.optional()
   });
   const ResolvedKayAppTool2 = ResolvedKayAgentTool2.omit({ requiresAuth: true });
-  const ResolvedKayAppDataSource2 = z18.strictObject({
+  const ResolvedKayAppDataSource2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    scope: z18.enum(["runtime", "account", "session"]),
-    snapshot: z18.strictObject({
-      version: z18.number().int().positive(),
-      schema: z18.record(z18.string(), z18.unknown())
+    scope: z19.enum(["runtime", "account", "session"]),
+    snapshot: z19.strictObject({
+      version: z19.number().int().positive(),
+      schema: z19.record(z19.string(), z19.unknown())
     }),
-    change: z18.strictObject({
-      version: z18.number().int().positive(),
-      schema: z18.record(z18.string(), z18.unknown()),
-      semantics: z18.discriminatedUnion("kind", [
-        z18.strictObject({ kind: z18.literal("incremental") }),
-        z18.strictObject({
-          kind: z18.literal("snapshot-replacement"),
-          maxEncodedBytes: z18.number().int().positive(),
+    change: z19.strictObject({
+      version: z19.number().int().positive(),
+      schema: z19.record(z19.string(), z19.unknown()),
+      semantics: z19.discriminatedUnion("kind", [
+        z19.strictObject({ kind: z19.literal("incremental") }),
+        z19.strictObject({
+          kind: z19.literal("snapshot-replacement"),
+          maxEncodedBytes: z19.number().int().positive(),
           rationale: pluginString(canonical).min(1).max(1024)
         })
       ]).optional()
     }),
     read: AppDataSourceRead.optional(),
-    messageDraft: z18.strictObject({ schemes: z18.array(UriScheme2).min(1) }).optional(),
-    store: z18.discriminatedUnion("shape", [
-      z18.strictObject({
-        shape: z18.literal("rows"),
-        rowsField: z18.string().min(1),
-        key: z18.array(z18.string().min(1)).min(1)
+    messageDraft: z19.strictObject({ schemes: z19.array(UriScheme2).min(1) }).optional(),
+    store: z19.discriminatedUnion("shape", [
+      z19.strictObject({
+        shape: z19.literal("rows"),
+        rowsField: z19.string().min(1),
+        key: z19.array(z19.string().min(1)).min(1)
       }),
-      z18.strictObject({ shape: z18.literal("value") })
+      z19.strictObject({ shape: z19.literal("value") })
     ]).optional()
   }).superRefine((source, ctx) => {
     if (source.read !== void 0 && source.scope !== "session") {
@@ -6595,122 +6698,123 @@ function createResolvedContractSchemas(canonical) {
     /** The auth service that module signs in through, whose accounts a card may send from. */
     authService: GlobalContributionId2.optional()
   });
-  const ResolvedPluginCard2 = z18.strictObject({
+  const ResolvedPluginCard2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     pluginId: PluginId2,
     description: NonEmptyString3,
     inputs: JsonSchema,
-    readEndpoint: z18.strictObject({
+    readEndpoint: z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
-    submitEndpoint: z18.strictObject({
+    submitEndpoint: z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
     authService: GlobalContributionId2.optional()
   });
-  const ResolvedKayAppWorkflow2 = z18.strictObject({
+  const ResolvedKayAppWorkflow2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     name: NonEmptyString3,
     description: NonEmptyString3,
-    everyMs: z18.number().int().positive(),
-    auth: z18.strictObject({
+    everyMs: z19.number().int().positive(),
+    auth: z19.strictObject({
       serviceId: GlobalContributionId2,
       schemeId: GlobalContributionId2,
-      scopes: z18.array(NonEmptyString3).min(1).optional()
+      scopes: z19.array(NonEmptyString3).min(1).optional()
     }).optional()
   });
   const ResolvedKayAppWhiteboardType2 = WhiteboardTypeContribution2.safeExtend({
     globalId: GlobalContributionId2
   });
-  const ResolvedKayAppMcpServer2 = z18.strictObject({
+  const ResolvedKayAppMcpServer2 = z19.strictObject({
     name: LocalContributionId2,
     pluginId: PluginId2,
     url: McpServerUrl2,
     auth: McpServerAuthMode2,
     authServiceId: GlobalContributionId2.optional()
   });
-  const ResolvedKayAgentUriModule2 = z18.strictObject({
+  const ResolvedKayAgentUriModule2 = z19.strictObject({
     localId: LocalContributionId2,
+    adapterId: z19.string().min(1).optional(),
     globalId: GlobalContributionId2,
-    schemes: z18.array(UriScheme2).min(1),
+    schemes: z19.array(UriScheme2).min(1),
     displayName: NonEmptyString3.optional(),
     authServiceId: GlobalContributionId2.optional(),
     /** Mirrors `UriModuleContribution.authScheme`; a local ref takes the plugin's namespace. */
     authSchemeId: GlobalContributionId2.optional(),
     /** Mirrors `UriModuleContribution.knownResources` (host-side recording opt-in). */
-    knownResources: z18.literal(true).optional(),
+    knownResources: z19.literal(true).optional(),
     /** Mirrors `UriModuleContribution.describesOperations`. */
-    describesOperations: z18.literal(true).optional(),
+    describesOperations: z19.literal(true).optional(),
     /** Mirrors `UriModuleContribution.looksUpWebLinks`. */
-    looksUpWebLinks: z18.literal(true).optional(),
+    looksUpWebLinks: z19.literal(true).optional(),
     ...UriModuleFacts2.shape
   });
-  const ResolvedKayAgentArtifactUriModule2 = z18.strictObject({
+  const ResolvedKayAgentArtifactUriModule2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     scheme: UriScheme2,
-    editable: z18.boolean(),
-    listable: z18.boolean(),
-    deletable: z18.boolean(),
-    appendable: z18.boolean(),
-    storageScope: z18.enum(["session", "family"])
+    editable: z19.boolean(),
+    listable: z19.boolean(),
+    deletable: z19.boolean(),
+    appendable: z19.boolean(),
+    storageScope: z19.enum(["session", "family"])
   });
-  const ResolvedKayAgentEntityResolver2 = z18.strictObject({
+  const ResolvedKayAgentEntityResolver2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     displayName: NonEmptyString3.optional(),
     uriModule: GlobalContributionId2,
-    entityTypes: z18.array(NonEmptyString3).min(1),
+    entityTypes: z19.array(NonEmptyString3).min(1),
     uriHint: NonEmptyString3
   });
-  const ResolvedKayAgentGitHostClaim2 = z18.strictObject({
+  const ResolvedKayAgentGitHostClaim2 = z19.strictObject({
     host: GitHostName2,
     authServiceId: GlobalContributionId2,
     /** Manifest-declared order; the clone ladder tries them in sequence. */
-    authSchemeIds: z18.array(GlobalContributionId2).min(1),
+    authSchemeIds: z19.array(GlobalContributionId2).min(1),
     /** Non-secret display copy for the claiming service, for clone failure text. */
-    authServiceDisplayName: z18.string(),
+    authServiceDisplayName: z19.string(),
     basicAuthUser: GitBasicAuthUser2
   });
-  const ResolvedKayAgentConverter2 = z18.strictObject({
+  const ResolvedKayAgentConverter2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     description: NonEmptyString3.optional(),
-    mimeTypes: z18.array(MimeTypeString2).min(1),
-    extensions: z18.array(FileExtensionToken2).min(1).optional()
+    mimeTypes: z19.array(MimeTypeString2).min(1),
+    extensions: z19.array(FileExtensionToken2).min(1).optional()
   });
   const ResolvedReferencePresentationUrlClaim = ReferencePresentationUrlClaim2.extend({
-    brandIcon: z18.string().max(64 * 1024).optional()
+    brandIcon: z19.string().max(64 * 1024).optional()
   });
-  const ResolvedReferencePresentation2 = z18.strictObject({
+  const ResolvedReferencePresentation2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     uriModule: GlobalContributionId2.optional(),
     /** The schemes this presentation is about: its `scheme`, or its module's. */
-    schemes: z18.array(UriScheme2).min(1).optional(),
+    schemes: z19.array(UriScheme2).min(1).optional(),
     /** The module's `displayName`: the source's name in a row. */
     displayName: NonEmptyString3.optional(),
     /** The module's auth service, qualified: whose accounts `accountLinks` reads. */
     authService: GlobalContributionId2.optional(),
     accountLinks: ReferencePresentationAccountLinks2.optional(),
-    addresses: z18.array(ReferencePresentationAddress2).min(1).optional(),
+    addresses: z19.array(ReferencePresentationAddress2).min(1).optional(),
     /** Comes with `open`. A presentation with neither only words its module's addresses. */
     resourceKind: NonEmptyString3.optional(),
     open: ReferenceOpenBehavior2.optional(),
     /** MIME-specific resource kinds; absent keys use the base presentation. */
     variants: ReferencePresentationVariants2.optional(),
-    claims: z18.array(ResolvedReferencePresentationUrlClaim).optional(),
-    tooltip: z18.strictObject({
+    claims: z19.array(ResolvedReferencePresentationUrlClaim).optional(),
+    tooltip: z19.strictObject({
       app: GlobalContributionId2,
       pattern: ReferencePresentationUriPattern2
     }).optional(),
     words: ReferencePresentationWords2.optional()
   });
-  const ResolvedPluginProvisioningRequirement2 = z18.strictObject({
+  const ResolvedPluginProvisioningRequirement2 = z19.strictObject({
     id: LocalContributionId2,
     displayName: NonEmptyString3,
     description: NonEmptyString3,
@@ -6720,15 +6824,15 @@ function createResolvedContractSchemas(canonical) {
      * URL degrades to "Reconnect" in the UI instead of a broken link.
      */
     remediationUrl: HttpsUrl2.optional(),
-    probe: z18.strictObject({
+    probe: z19.strictObject({
       url: HttpsUrl2,
-      method: z18.enum(["GET"]),
-      verdictStatuses: z18.array(SignedInStatusCode2).min(1),
+      method: z19.enum(["GET"]),
+      verdictStatuses: z19.array(SignedInStatusCode2).min(1),
       nonEmptyArrayAt: NonEmptyString3.optional()
     })
   });
   const ResolvedProvisioningField = {
-    provisioning: z18.array(ResolvedPluginProvisioningRequirement2).optional()
+    provisioning: z19.array(ResolvedPluginProvisioningRequirement2).optional()
   };
   const ResolvedPluginAuthSchemeDescriptionFields = {
     displayName: NonEmptyString3.optional(),
@@ -6740,118 +6844,120 @@ function createResolvedContractSchemas(canonical) {
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z18.literal("oauth2"),
-    scopes: z18.array(z18.string()).optional(),
+    kind: z19.literal("oauth2"),
+    scopes: z19.array(z19.string()).optional(),
+    connectScopes: z19.array(NonEmptyString3).optional(),
     authorizationUrl: HttpsUrl2,
     tokenUrl: HttpsUrl2,
-    extraAuthorizeParams: z18.record(z18.string(), z18.string()).optional()
+    extraAuthorizeParams: z19.record(z19.string(), z19.string()).optional(),
+    extraAuthorizeParamsWhenAccountHeld: z19.record(NonEmptyString3, z19.string()).optional()
   };
-  const ResolvedPluginAuthSchemeOAuthPkce = z18.strictObject({
+  const ResolvedPluginAuthSchemeOAuthPkce = z19.strictObject({
     ...ResolvedPluginAuthSchemeOAuthBase,
-    exchange: z18.literal("pkce"),
+    exchange: z19.literal("pkce"),
     byoocProfile: PluginByoocProfile.optional(),
-    clientSuppliers: z18.array(PluginOAuthClientSupplier2).nonempty(),
+    clientSuppliers: z19.array(PluginOAuthClientSupplier2).nonempty(),
     clientId: NonEmptyString3.optional(),
     clientSecret: NonEmptyString3.optional(),
-    account: z18.literal("lookup").optional()
+    account: z19.literal("lookup").optional()
   });
-  const ResolvedPluginAuthSchemeOAuthConfidential = z18.strictObject({
+  const ResolvedPluginAuthSchemeOAuthConfidential = z19.strictObject({
     ...ResolvedPluginAuthSchemeOAuthBase,
-    exchange: z18.literal("confidential"),
-    clientSuppliers: z18.tuple([z18.literal("kay")]),
-    account: z18.enum(["lookup", "sign-in"])
+    exchange: z19.literal("confidential"),
+    clientSuppliers: z19.tuple([z19.literal("kay")]),
+    account: z19.enum(["lookup", "sign-in"])
   });
-  const ResolvedPluginAuthSchemeOAuth2 = z18.discriminatedUnion("exchange", [
+  const ResolvedPluginAuthSchemeOAuth2 = z19.discriminatedUnion("exchange", [
     ResolvedPluginAuthSchemeOAuthPkce,
     ResolvedPluginAuthSchemeOAuthConfidential
   ]);
-  const ResolvedPluginAuthSchemeApiKey = z18.strictObject({
+  const ResolvedPluginAuthSchemeApiKey = z19.strictObject({
     ...ResolvedProvisioningField,
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z18.literal("api-key"),
-    scopes: z18.array(z18.string()).optional(),
+    kind: z19.literal("api-key"),
+    scopes: z19.array(z19.string()).optional(),
     /** Resolution applies the manifest's default, "<service name> API key". */
     inputLabel: NonEmptyString3,
-    fields: z18.array(z18.strictObject({ id: z18.string(), label: z18.string() })).optional(),
-    setup: z18.strictObject({ instructions: z18.string(), url: HttpsUrl2 }).optional(),
-    account: z18.literal("lookup").optional()
+    fields: z19.array(z19.strictObject({ id: z19.string(), label: z19.string() })).optional(),
+    setup: z19.strictObject({ instructions: z19.string(), url: HttpsUrl2 }).optional(),
+    account: z19.literal("lookup").optional()
   });
-  const ResolvedPluginAuthSchemeDelegated = z18.strictObject({
+  const ResolvedPluginAuthSchemeDelegated = z19.strictObject({
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z18.literal("delegated"),
-    scopes: z18.array(z18.string()).optional()
+    kind: z19.literal("delegated"),
+    scopes: z19.array(z19.string()).optional()
   });
-  const ResolvedPluginAuthSchemeExternalCli = z18.strictObject({
+  const ResolvedPluginAuthSchemeExternalCli = z19.strictObject({
     ...ResolvedPluginAuthSchemeDescriptionFields,
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    kind: z18.literal("external-cli"),
-    scopes: z18.array(z18.string()).optional(),
+    kind: z19.literal("external-cli"),
+    scopes: z19.array(z19.string()).optional(),
     /** The manifest's connect facts, verbatim. */
     cli: PluginExternalCliConnect2.optional()
   });
-  const ResolvedPluginAuthScheme2 = z18.discriminatedUnion("kind", [
+  const ResolvedPluginAuthScheme2 = z19.discriminatedUnion("kind", [
     ResolvedPluginAuthSchemeOAuth2,
     ResolvedPluginAuthSchemeApiKey,
     ResolvedPluginAuthSchemeDelegated,
     ResolvedPluginAuthSchemeExternalCli
   ]);
-  const ResolvedPluginWebSession2 = z18.strictObject({
-    importance: z18.enum(["required", "recommended"]),
+  const ResolvedPluginWebSession2 = z19.strictObject({
+    importance: z19.enum(["required", "recommended"]),
     loginUrl: HttpsUrl2,
-    cookieDomains: z18.array(RegistrableDomain2).min(1),
-    probe: z18.strictObject({
+    cookieDomains: z19.array(RegistrableDomain2).min(1),
+    probe: z19.strictObject({
       url: HttpsUrl2,
-      method: z18.enum(["GET", "POST"]),
-      signedInStatuses: z18.array(SignedInStatusCode2).min(1)
+      method: z19.enum(["GET", "POST"]),
+      signedInStatuses: z19.array(SignedInStatusCode2).min(1)
     }),
-    oauthVenue: z18.enum(["embedded", "external"]),
-    signInFirst: z18.string().optional()
+    oauthVenue: z19.enum(["embedded", "external"]),
+    signInFirst: z19.string().optional()
   }).superRefine(refineWebSessionScopeConfined);
-  const ResolvedPluginAuthService2 = z18.strictObject({
+  const ResolvedPluginAuthService2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
-    displayName: z18.string(),
-    summary: z18.string().optional(),
-    schemes: z18.array(ResolvedPluginAuthScheme2).min(1),
-    purposes: z18.array(z18.string()).min(1),
+    displayName: z19.string(),
+    summary: z19.string().optional(),
+    schemes: z19.array(ResolvedPluginAuthScheme2).min(1),
+    purposes: z19.array(z19.string()).min(1),
     /** The service's browser half, when the manifest declares one. */
     webSession: ResolvedPluginWebSession2.optional()
   });
-  const ResolvedKayUiAppEndpointCapability2 = z18.union([
-    z18.strictObject({
+  const ResolvedKayUiAppEndpointCapability2 = z19.union([
+    z19.strictObject({
       localId: LocalContributionId2,
       globalId: GlobalContributionId2
     }),
-    z18.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
+    z19.strictObject({ pluginId: PluginId2, localId: LocalContributionId2 })
   ]);
-  const ResolvedKayUiApp2 = z18.strictObject({
+  const ResolvedKayUiApp2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
     displayName: NonEmptyString3,
-    contextOnly: z18.literal(true).optional(),
+    contextOnly: z19.literal(true).optional(),
     description: NonEmptyString3.optional(),
     icon: PackageAssetPath2.optional(),
-    runtime: z18.literal("kay.react-app.v1"),
-    sdk: z18.strictObject({ range: NonEmptyString3 }),
+    runtime: z19.literal("kay.react-app.v1"),
+    sdk: z19.strictObject({ range: NonEmptyString3 }),
     entrypoint: TargetEntrypoint2,
-    styles: z18.array(PackageAssetPath2).optional(),
-    assets: z18.array(PackageAssetPath2).optional(),
-    capabilities: z18.strictObject({
-      endpoints: z18.array(ResolvedKayUiAppEndpointCapability2).optional(),
-      host: z18.array(KayUiAppHostCapability2).optional(),
-      feeds: z18.array((canonical ? canonicalContributionSchemas : contributions_exports).UiAppCapabilityReference).optional()
+    styles: z19.array(PackageAssetPath2).optional(),
+    assets: z19.array(PackageAssetPath2).optional(),
+    capabilities: z19.strictObject({
+      endpoints: z19.array(ResolvedKayUiAppEndpointCapability2).optional(),
+      host: z19.array(KayUiAppHostCapability2).optional(),
+      feeds: z19.array((canonical ? canonicalContributionSchemas : contributions_exports).UiAppCapabilityReference).optional()
     }).optional()
   });
-  const ResolvedPluginContractV12 = z18.strictObject({
-    protocol: z18.literal("kay.plugin.v1"),
+  const ResolvedPluginContractV12 = z19.strictObject({
+    protocol: z19.literal("kay.plugin.v1"),
     pluginId: PluginId2,
     namespace: PluginNamespace2,
-    contributions: z18.array(ResolvedPluginContributionId2),
+    contributions: z19.array(ResolvedPluginContributionId2),
     // The deduplicated set of qualified (dotted) external auth-service ids this
     // plugin references, from agent uriModule, tool and cliBinding
     // `authService` refs, card sign-in refs, and auth-grant `service` refs. Always present - a plugin
@@ -6859,39 +6965,40 @@ function createResolvedContractSchemas(canonical) {
     // is a recorded dependency, not a resolution: there is no runtime plugin
     // loader in v1, so nothing here verifies the reference resolves within a
     // composed roster (a composition-time concern owned elsewhere).
-    consumesAuthServices: z18.array(GlobalContributionId2),
+    consumesAuthServices: z19.array(GlobalContributionId2),
     // The explicit plugin-level dependency ids declared in `dependencies.plugins` on the manifest,
     // deduped and validated at parse time. Always present; a plugin with no explicit dependencies
     // carries an empty array. Composition checks each id against the accepted roster and derives the
     // full dependency graph together with auth-inferred edges from `consumesAuthServices`.
-    explicitDependencies: z18.array(PluginId2),
+    explicitDependencies: z19.array(PluginId2),
     dataDirSharedWith: PluginId2.optional(),
-    workloadPurposes: z18.array(PluginWorkloadPurpose).optional(),
-    shellCommands: z18.array(PluginShellCommand.omit({ endpoint: true }).extend({
+    workloadPurposes: z19.array(PluginWorkloadPurpose).optional(),
+    shellCommands: z19.array(PluginShellCommand.omit({ endpoint: true }).extend({
       endpointId: GlobalContributionId2
     })).optional(),
+    projectDirectories: PluginProjectDirectories.omit({ endpoint: true }).extend({ endpointId: GlobalContributionId2 }).optional(),
     // The auth services this plugin OWNS, carrying the global ids its harness
     // target must register and the credential authority keys on. Always present;
     // a plugin that declares no `auth.services` carries an empty array. The dual
     // of `consumesAuthServices` (services it merely references).
-    authServices: z18.array(ResolvedPluginAuthService2),
+    authServices: z19.array(ResolvedPluginAuthService2),
     grants: ResolvedPluginGrants2.optional(),
-    kayAgentFamilyFolder: z18.strictObject({ scope: z18.literal("root") }).optional(),
-    kayAgentUriModules: z18.array(ResolvedKayAgentUriModule2).optional(),
-    kayAgentArtifactUriModules: z18.array(ResolvedKayAgentArtifactUriModule2).optional(),
-    kayAgentEntityResolvers: z18.array(ResolvedKayAgentEntityResolver2).optional(),
-    kayAgentGitHostClaims: z18.array(ResolvedKayAgentGitHostClaim2).optional(),
-    kayAgentTools: z18.array(ResolvedKayAgentTool2).optional(),
-    kayAppTools: z18.array(ResolvedKayAppTool2).optional(),
-    kayAppApprovalTypes: z18.array(ResolvedKayAppApprovalType2).optional(),
-    kayAppWorkflows: z18.array(ResolvedKayAppWorkflow2).optional(),
-    kayAppCards: z18.array(ResolvedPluginCard2).optional(),
-    kayAppDataSources: z18.array(ResolvedKayAppDataSource2).optional(),
-    kayAppWhiteboardTypes: z18.array(ResolvedKayAppWhiteboardType2).optional(),
-    kayAppMcpServers: z18.array(ResolvedKayAppMcpServer2).optional(),
-    kayAgentConverters: z18.array(ResolvedKayAgentConverter2).optional(),
-    referencePresentations: z18.array(ResolvedReferencePresentation2).optional(),
-    kayUiApps: z18.array(ResolvedKayUiApp2).optional()
+    kayAgentFamilyFolder: z19.strictObject({ scope: z19.literal("root") }).optional(),
+    kayAgentUriModules: z19.array(ResolvedKayAgentUriModule2).optional(),
+    kayAgentArtifactUriModules: z19.array(ResolvedKayAgentArtifactUriModule2).optional(),
+    kayAgentEntityResolvers: z19.array(ResolvedKayAgentEntityResolver2).optional(),
+    kayAgentGitHostClaims: z19.array(ResolvedKayAgentGitHostClaim2).optional(),
+    kayAgentTools: z19.array(ResolvedKayAgentTool2).optional(),
+    kayAppTools: z19.array(ResolvedKayAppTool2).optional(),
+    kayAppApprovalTypes: z19.array(ResolvedKayAppApprovalType2).optional(),
+    kayAppWorkflows: z19.array(ResolvedKayAppWorkflow2).optional(),
+    kayAppCards: z19.array(ResolvedPluginCard2).optional(),
+    kayAppDataSources: z19.array(ResolvedKayAppDataSource2).optional(),
+    kayAppWhiteboardTypes: z19.array(ResolvedKayAppWhiteboardType2).optional(),
+    kayAppMcpServers: z19.array(ResolvedKayAppMcpServer2).optional(),
+    kayAgentConverters: z19.array(ResolvedKayAgentConverter2).optional(),
+    referencePresentations: z19.array(ResolvedReferencePresentation2).optional(),
+    kayUiApps: z19.array(ResolvedKayUiApp2).optional()
   });
   return {
     ResolvedPluginContributionId: ResolvedPluginContributionId2,
@@ -7121,6 +7228,12 @@ function resolveAuthServices(namespace, manifest) {
         const endpointFields = {
           authorizationUrl: scheme.authorizationUrl,
           tokenUrl: scheme.tokenUrl,
+          ...scheme.connectScopes === void 0 ? {} : { connectScopes: [...scheme.connectScopes] },
+          ...scheme.extraAuthorizeParamsWhenAccountHeld === void 0 ? {} : {
+            extraAuthorizeParamsWhenAccountHeld: {
+              ...scheme.extraAuthorizeParamsWhenAccountHeld
+            }
+          },
           ...scheme.extraAuthorizeParams === void 0 ? {} : { extraAuthorizeParams: { ...scheme.extraAuthorizeParams } }
         };
         return scheme.exchange === "pkce" ? {
@@ -7316,6 +7429,7 @@ function resolveKayPluginContractV1(manifest) {
   }));
   const kayAgentUriModules = manifest.targets?.kay?.agent?.contributes?.uriModules?.map((module) => ({
     localId: module.localId,
+    ...module.adapterId === void 0 ? {} : { adapterId: module.adapterId },
     globalId: resolveGlobalContributionId(namespace, module.localId),
     schemes: [...module.schemes],
     ...module.displayName === void 0 ? {} : { displayName: module.displayName },
@@ -7432,6 +7546,12 @@ function resolveKayPluginContractV1(manifest) {
         endpointId: resolveGlobalContributionId(namespace, endpoint)
       }))
     },
+    ...manifest.projectDirectories === void 0 ? {} : {
+      projectDirectories: {
+        scheme: manifest.projectDirectories.scheme,
+        endpointId: resolveGlobalContributionId(namespace, manifest.projectDirectories.endpoint)
+      }
+    },
     ...grants && Object.keys(grants.byTarget).length > 0 ? { grants } : {},
     ...manifest.targets?.kay?.agent?.familyFolder === void 0 ? {} : { kayAgentFamilyFolder: manifest.targets.kay.agent.familyFolder },
     ...kayAgentUriModules && kayAgentUriModules.length > 0 ? { kayAgentUriModules } : {},
@@ -7480,7 +7600,7 @@ function presentationSource(namespace, manifest, presentation) {
     } : {}
   };
 }
-function uriModuleFacts({ localId: _localId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, looksUpWebLinks: _looksUpWebLinks, ...facts }) {
+function uriModuleFacts({ localId: _localId, adapterId: _adapterId, schemes: _schemes, displayName: _displayName, authService: _authService, authScheme: _authScheme, knownResources: _knownResources, describesOperations: _describesOperations, looksUpWebLinks: _looksUpWebLinks, ...facts }) {
   return facts;
 }
 
@@ -7616,14 +7736,14 @@ function kayPluginCompatibilityAdvisories(input) {
     message: boundPluginDiagnosticMessage(`${manifest.displayName} (${manifest.id}) ${advisory.message}`)
   }));
 }
-var ReadableCompatibility = z19.object({
-  supportedProtocols: z19.array(z19.string()).optional().catch(void 0),
+var ReadableCompatibility = z20.object({
+  supportedProtocols: z20.array(z20.string()).optional().catch(void 0),
   minKayVersion: NonEmptyString.optional().catch(void 0),
   sdk: NonEmptyString.optional().catch(void 0)
 });
-var ReadableManifestHead = z19.object({
-  id: z19.string().optional().catch(void 0),
-  displayName: z19.string().optional().catch(void 0),
+var ReadableManifestHead = z20.object({
+  id: z20.string().optional().catch(void 0),
+  displayName: z20.string().optional().catch(void 0),
   compatibility: ReadableCompatibility.optional().catch(void 0)
 });
 function keepNamespaceDerivedTools(contract, grandfathered) {
@@ -7727,28 +7847,28 @@ function errorText(error) {
 }
 
 // packages/plugin-protocol/dist/session-health.js
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 var SESSION_HEALTH_EXTENSION_ID = "kay.session-health";
 var SESSION_HEALTH_ENTRY_NAME = "session_health";
 var SESSION_HEALTH_CUSTOM_TYPE = `ext:${SESSION_HEALTH_EXTENSION_ID}:${SESSION_HEALTH_ENTRY_NAME}`;
 var SESSION_HEALTH_CLASSIFIER_IDS = ["jev"];
-var sessionHealthEntrySchema = z20.object({
-  v: z20.literal(1),
-  verdict: z20.enum(["well", "bad", "unknown"]),
+var sessionHealthEntrySchema = z21.object({
+  v: z21.literal(1),
+  verdict: z21.enum(["well", "bad", "unknown"]),
   /**
    * The model's calibrated confidence in `well`, 0..1, or null when the
    * classifier declined to produce one. Never exported raw: the telemetry
    * event carries only the decile bucket.
    */
-  p_well: z20.number().min(0).max(1).nullable(),
-  classifier: z20.enum(SESSION_HEALTH_CLASSIFIER_IDS),
-  classifier_version: z20.string().min(1).max(64),
-  judged_at: z20.number().int().nonnegative(),
-  user_entry_id: z20.string().min(1).max(256),
-  through_entry_id: z20.string().min(1).max(256),
-  usage: z20.strictObject({
-    input_tokens: z20.number().int().nonnegative(),
-    output_tokens: z20.number().int().nonnegative()
+  p_well: z21.number().min(0).max(1).nullable(),
+  classifier: z21.enum(SESSION_HEALTH_CLASSIFIER_IDS),
+  classifier_version: z21.string().min(1).max(64),
+  judged_at: z21.number().int().nonnegative(),
+  user_entry_id: z21.string().min(1).max(256),
+  through_entry_id: z21.string().min(1).max(256),
+  usage: z21.strictObject({
+    input_tokens: z21.number().int().nonnegative(),
+    output_tokens: z21.number().int().nonnegative()
   }).optional()
 });
 function sessionHealthPWellDecile(pWell) {
@@ -7758,23 +7878,28 @@ function sessionHealthPWellDecile(pWell) {
 }
 
 // packages/plugin-protocol/dist/resource-invocations.js
-import { z as z21 } from "zod";
-var CorpusResourceKind = z21.enum([
+import { z as z23 } from "zod";
+
+// packages/plugin-protocol/dist/resource-invocation-cursor.js
+import { z as z22 } from "zod";
+var CorpusResourceInvocationCursor = z22.strictObject({
+  at: z22.iso.datetime({ offset: true }),
+  eventId: z22.string().min(1)
+});
+
+// packages/plugin-protocol/dist/resource-invocations.js
+var CorpusResourceKind = z23.enum([
   "skill",
   "context-file",
   "prompt-command"
 ]);
-var CorpusResourceInvocationCursor = z21.strictObject({
-  at: z21.iso.datetime({ offset: true }),
-  eventId: z21.string().min(1)
-});
-var CorpusResourceInvocationQuery = z21.strictObject({
+var CorpusResourceInvocationQuery = z23.strictObject({
   kind: CorpusResourceKind,
-  since: z21.iso.datetime({ offset: true }),
-  until: z21.iso.datetime({ offset: true }),
+  since: z23.iso.datetime({ offset: true }),
+  until: z23.iso.datetime({ offset: true }),
   after: CorpusResourceInvocationCursor.optional(),
-  limit: z21.number().int().min(1).max(1e3).optional(),
-  rootCreatedByKind: z21.enum(AGENT_RUNTIME_SESSION_CREATOR_KINDS).optional()
+  limit: z23.number().int().min(1).max(1e3).optional(),
+  rootCreatedByKind: z23.enum(AGENT_RUNTIME_SESSION_CREATOR_KINDS).optional()
 }).refine((value) => Date.parse(value.since) < Date.parse(value.until), {
   message: "since must precede until"
 });
@@ -7954,14 +8079,14 @@ function skillSuggestionEvidenceItems(evidence, options = {}) {
 }
 
 // packages/plugin-protocol/dist/ui-app-package.js
-import { z as z22 } from "zod";
+import { z as z24 } from "zod";
 var KAY_UI_APP_PACKAGE_PROTOCOL = "kay.ui.app-package.v1";
 var KAY_UI_BUNDLE_INDEX_PROTOCOL = "kay.ui.bundle-index.v1";
-var KayUiBundleOutputPath = z22.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
-var KayUiBundleIndexV1 = z22.strictObject({
-  protocol: z22.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
+var KayUiBundleOutputPath = z24.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
+var KayUiBundleIndexV1 = z24.strictObject({
+  protocol: z24.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
   entryPath: KayUiBundleOutputPath,
-  files: z22.array(z22.strictObject({
+  files: z24.array(z24.strictObject({
     path: KayUiBundleOutputPath,
     mediaType: NonEmptyString
   })).min(1)
@@ -7988,19 +8113,19 @@ var KayUiBundleIndexV1 = z22.strictObject({
 function parseKayUiBundleIndexV1(input) {
   return KayUiBundleIndexV1.parse(input);
 }
-var KayUiAppPackageFile = z22.strictObject({
+var KayUiAppPackageFile = z24.strictObject({
   path: PackageAssetPath,
   mediaType: NonEmptyString,
-  bytes: z22.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
+  bytes: z24.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
     message: "app package file bytes must not be empty"
   })
 });
-var KayUiAppPackageV1 = z22.strictObject({
-  protocol: z22.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
+var KayUiAppPackageV1 = z24.strictObject({
+  protocol: z24.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
   appLocalId: LocalContributionId,
   entry: KayUiAppPackageFile,
-  styles: z22.array(KayUiAppPackageFile).optional(),
-  assets: z22.array(KayUiAppPackageFile).optional()
+  styles: z24.array(KayUiAppPackageFile).optional(),
+  assets: z24.array(KayUiAppPackageFile).optional()
 }).superRefine((appPackage, ctx) => {
   if (appPackage.entry.mediaType !== "application/javascript") {
     ctx.addIssue({
@@ -8037,28 +8162,28 @@ function parseKayUiAppPackageV1(input) {
 }
 
 // packages/plugin-protocol/dist/product-events.js
-import { z as z23 } from "zod";
+import { z as z25 } from "zod";
 var exportable = {
-  class: z23.literal("exportable"),
-  optional: z23.boolean().optional()
+  class: z25.literal("exportable"),
+  optional: z25.boolean().optional()
 };
-var PluginProductEventField = z23.union([
-  z23.strictObject({ class: z23.literal("local") }),
-  z23.strictObject({
+var PluginProductEventField = z25.union([
+  z25.strictObject({ class: z25.literal("local") }),
+  z25.strictObject({
     ...exportable,
-    type: z23.literal("enum"),
-    values: z23.array(z23.string())
+    type: z25.literal("enum"),
+    values: z25.array(z25.string())
   }),
-  z23.strictObject({
+  z25.strictObject({
     ...exportable,
-    type: z23.literal("number"),
-    min: z23.number(),
-    max: z23.number(),
-    integer: z23.boolean().optional()
+    type: z25.literal("number"),
+    min: z25.number(),
+    max: z25.number(),
+    integer: z25.boolean().optional()
   }),
-  z23.strictObject({
+  z25.strictObject({
     ...exportable,
-    type: z23.enum([
+    type: z25.enum([
       "boolean",
       "id",
       "identifier",
@@ -8074,9 +8199,9 @@ function isPluginProductEventName(name) {
 }
 
 // packages/plugin-protocol/dist/artifact-outputs.js
-import { z as z24 } from "zod";
+import { z as z26 } from "zod";
 var ARTIFACT_OUTPUT_PAGE_MAX = 200;
-var Segment = z24.string().min(1).max(1024).refine((value) => !/[^A-Za-z0-9._-]/.test(value)).refine((value) => value !== "." && value !== "..");
+var Segment = z26.string().min(1).max(1024).refine((value) => !/[^A-Za-z0-9._-]/.test(value)).refine((value) => value !== "." && value !== "..");
 function parseArtifactOutputUri(uri) {
   const match = /^output:\/\/([^/]+)\/([^/]+)$/.exec(uri);
   if (match === null || !Segment.safeParse(match[1]).success || !Segment.safeParse(match[2]).success)
@@ -8086,12 +8211,12 @@ function parseArtifactOutputUri(uri) {
 function isCanonicalArtifactOutputUri(uri) {
   return parseArtifactOutputUri(uri) !== void 0;
 }
-var ArtifactOutputUri = z24.string().refine(isCanonicalArtifactOutputUri, "Expected a canonical output://session/name URI");
-var ArtifactOutputChange = z24.union([
-  z24.strictObject({
-    uris: z24.array(ArtifactOutputUri).min(1).max(ARTIFACT_OUTPUT_PAGE_MAX)
+var ArtifactOutputUri = z26.string().refine(isCanonicalArtifactOutputUri, "Expected a canonical output://session/name URI");
+var ArtifactOutputChange = z26.union([
+  z26.strictObject({
+    uris: z26.array(ArtifactOutputUri).min(1).max(ARTIFACT_OUTPUT_PAGE_MAX)
   }),
-  z24.strictObject({ sessionId: Segment })
+  z26.strictObject({ sessionId: Segment })
 ]);
 
 // packages/plugin-protocol/dist/credential-text.js
@@ -8134,25 +8259,25 @@ function isCredentialShapedText(value) {
 }
 
 // packages/plugin-protocol/dist/ui-module-bundle.js
-import { z as z25 } from "zod";
+import { z as z27 } from "zod";
 var KAY_UI_MODULE_BUNDLE_PROTOCOL = "kay.ui.module-bundle.v1";
 var KAY_UI_MODULE_FILE_MAX_BYTES = 8 * 1024 * 1024;
 var KAY_UI_MODULE_BUNDLE_MAX_BYTES = 32 * 1024 * 1024;
 var KAY_UI_MODULE_BUNDLE_MAX_FILES = 256;
-var OutputPath = z25.string().min(1).max(1024).refine((value) => {
+var OutputPath = z27.string().min(1).max(1024).refine((value) => {
   const parsed = KayUiBundleIndexV1.shape.entryPath.safeParse(value);
   return parsed.success && parsed.data === value && value.split("/").every((part) => part !== "" && part !== ".") && // oxlint-disable-next-line eslint/no-control-regex -- Untrusted artifact paths must reject literal control characters.
   !/[\u0000-\u001f?#:%]/.test(value);
 }, { message: "bundle path must contain only unambiguous relative segments" });
-var Sha256 = z25.string().regex(/^[a-f0-9]{64}$/);
-var KayUiModuleBundleIndexV1 = z25.strictObject({
-  protocol: z25.literal(KAY_UI_MODULE_BUNDLE_PROTOCOL),
+var Sha256 = z27.string().regex(/^[a-f0-9]{64}$/);
+var KayUiModuleBundleIndexV1 = z27.strictObject({
+  protocol: z27.literal(KAY_UI_MODULE_BUNDLE_PROTOCOL),
   entryPath: OutputPath,
-  stylePaths: z25.array(OutputPath).max(KAY_UI_MODULE_BUNDLE_MAX_FILES),
-  files: z25.array(z25.strictObject({
+  stylePaths: z27.array(OutputPath).max(KAY_UI_MODULE_BUNDLE_MAX_FILES),
+  files: z27.array(z27.strictObject({
     path: OutputPath,
-    mediaType: z25.string().min(1).max(128).regex(/^[a-zA-Z0-9!#$&^_.+-]+\/[a-zA-Z0-9!#$&^_.+-]+$/),
-    byteLength: z25.number().int().min(1).max(KAY_UI_MODULE_FILE_MAX_BYTES),
+    mediaType: z27.string().min(1).max(128).regex(/^[a-zA-Z0-9!#$&^_.+-]+\/[a-zA-Z0-9!#$&^_.+-]+$/),
+    byteLength: z27.number().int().min(1).max(KAY_UI_MODULE_FILE_MAX_BYTES),
     sha256: Sha256
   })).min(1).max(KAY_UI_MODULE_BUNDLE_MAX_FILES)
 }).superRefine((index, ctx) => {
@@ -8182,9 +8307,9 @@ var KayUiModuleBundleIndexV1 = z25.strictObject({
       message: "bundle exceeds byte cap"
     });
 });
-var KayUiModuleBundleReference = z25.strictObject({
+var KayUiModuleBundleReference = z27.strictObject({
   generationId: Sha256,
-  revision: z25.string().min(1).max(4096).refine((value) => value.trim() === value),
+  revision: z27.string().min(1).max(4096).refine((value) => value.trim() === value),
   index: KayUiModuleBundleIndexV1
 });
 export {
@@ -8351,6 +8476,7 @@ export {
   PluginPickerRound,
   PluginProductEventContribution,
   PluginProductEventField,
+  PluginProjectDirectories,
   PluginProvisioningProbe,
   PluginProvisioningRequirement,
   PluginShellCommand,
@@ -8364,6 +8490,9 @@ export {
   PluginWebSessionDeclaration,
   PluginWebSessionProbe,
   PluginWorkloadPurpose,
+  ProjectDirectory,
+  ProjectDirectoryRequest,
+  ProjectDirectoryResponse,
   RENAMED_PLUGIN_CAPABILITY_SLUGS,
   RESERVED_DIRECTORY_PLUGIN_ID_PREFIXES,
   RETIRED_COMPATIBILITY_KEYS,