@yaklabs-ai/plugin-protocol 0.54.1 → 0.55.0

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.54.1"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.55.0"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.54.1",
+  "version": "0.55.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/index.d.ts

@@ -1801,6 +1801,7 @@ declare namespace authoringContributionSchemas {
         AppDataSourceContribution,
         WhiteboardTypeStorage,
         WhiteboardTypeContribution,
+        WorkingDocumentProviderContribution,
         AppDataMaterializerContribution,
         ArtifactUriModuleContribution,
         CliBindingContribution,
@@ -2770,6 +2771,23 @@ declare const canonicalContributionSchemas: {
         }, z.core.$strict>>;
         handover: z.ZodOptional<z.ZodLiteral<true>>;
     }, z.core.$strict>;
+    WorkingDocumentProviderContribution: z.ZodObject<{
+        localId: z.ZodString;
+        displayName: z.ZodString;
+        schemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        authService: z.ZodOptional<z.ZodString>;
+        authScheme: z.ZodOptional<z.ZodString>;
+        scopeRequirement: z.ZodOptional<z.ZodObject<{
+            purpose: z.ZodString;
+            alternatives: z.ZodArray<z.ZodObject<{
+                allOf: z.ZodArray<z.ZodObject<{
+                    scope: z.ZodString;
+                    reason: z.ZodExactOptional<z.ZodString>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
     AppDataMaterializerContribution: z.ZodObject<{
         source: z.ZodString;
     }, z.core.$strict>;
@@ -3512,6 +3530,7 @@ declare const canonicalContributionSchemas: {
         eventSubscription: "eventSubscription";
         appDataSource: "appDataSource";
         whiteboardType: "whiteboardType";
+        workingDocumentProvider: "workingDocumentProvider";
         approvalType: "approvalType";
         workflow: "workflow";
         contextContributor: "contextContributor";
@@ -4897,8 +4916,16 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  *
  * 0.54.1 adds manifest-declared plugin workers on both backend targets and exposes the canonical
  * transcript placement and answer-stretch rules through the SDK.
+ *
+ * 0.54.2 lets a signal list the files that came with it (epic #15668). `PluginSignal` gains an
+ * optional `attachments`: each file's name, media type, size and the address its bytes are read
+ * from, never the bytes. Gmail lists a mail's attachments there, so Flows can file them. Additive:
+ * a plugin that publishes attachments declares ^0.54.2.
+ *
+ * 0.55.0 carries managed MCP calls over resource writes in both daemon and plugin-host code.
+ * Existing agent and background MCP call shapes remain supported.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.54.1";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.55.0";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -5574,6 +5601,23 @@ export declare const KayAppTargetManifest: z.ZodObject<{
             }, z.core.$strict>>;
             handover: z.ZodOptional<z.ZodLiteral<true>>;
         }, z.core.$strict>>>;
+        workingDocumentProviders: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            localId: z.ZodString;
+            displayName: z.ZodString;
+            schemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            authService: z.ZodOptional<z.ZodString>;
+            authScheme: z.ZodOptional<z.ZodString>;
+            scopeRequirement: z.ZodOptional<z.ZodObject<{
+                purpose: z.ZodString;
+                alternatives: z.ZodArray<z.ZodObject<{
+                    allOf: z.ZodArray<z.ZodObject<{
+                        scope: z.ZodString;
+                        reason: z.ZodExactOptional<z.ZodString>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
         approvalTypes: z.ZodOptional<z.ZodArray<z.ZodObject<{
             localId: z.ZodString;
             kind: z.ZodLiteral<"message">;
@@ -6509,6 +6553,23 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                         }, z.core.$strict>>;
                         handover: z.ZodOptional<z.ZodLiteral<true>>;
                     }, z.core.$strict>>>;
+                    workingDocumentProviders: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        localId: z.ZodString;
+                        displayName: z.ZodString;
+                        schemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                        authService: z.ZodOptional<z.ZodString>;
+                        authScheme: z.ZodOptional<z.ZodString>;
+                        scopeRequirement: z.ZodOptional<z.ZodObject<{
+                            purpose: z.ZodString;
+                            alternatives: z.ZodArray<z.ZodObject<{
+                                allOf: z.ZodArray<z.ZodObject<{
+                                    scope: z.ZodString;
+                                    reason: z.ZodExactOptional<z.ZodString>;
+                                }, z.core.$strict>>;
+                            }, z.core.$strict>>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>>;
                     approvalTypes: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
                         kind: z.ZodLiteral<"message">;
@@ -8673,6 +8734,15 @@ export declare const PLUGIN_NOTIFICATION_RULE_HOST_KEYS: readonly ["id", "match"
  */
 export declare const PLUGIN_PRODUCT_EVENT_NAME_PATTERN: RegExp;
 
+/** An attachment's file name, at most this many characters. */
+export declare const PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX = 255;
+
+/** An attachment's media type (`application/pdf`), at most this many characters. */
+export declare const PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX = 127;
+
+/** At most this many entries in a signal's `attachments`; a source lists the first ones. */
+export declare const PLUGIN_SIGNAL_ATTACHMENTS_MAX = 10;
+
 /** The `kind` values of `PluginSignal` v1. `status` is system state that clears itself. */
 export declare const PLUGIN_SIGNAL_KINDS: readonly ["message", "request", "mention", "invite", "status"];
 
@@ -11386,6 +11456,7 @@ export declare const PluginContributionKind: z.ZodEnum<{
     eventSubscription: "eventSubscription";
     appDataSource: "appDataSource";
     whiteboardType: "whiteboardType";
+    workingDocumentProvider: "workingDocumentProvider";
     approvalType: "approvalType";
     workflow: "workflow";
     contextContributor: "contextContributor";
@@ -12415,6 +12486,12 @@ export declare const PluginSignal: z.ZodObject<{
         open: "open";
         resolved: "resolved";
     }>>;
+    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        type: z.ZodString;
+        size: z.ZodNumber;
+        uri: z.ZodString;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 
 export declare type PluginSignal = z.infer<typeof PluginSignal>;
@@ -12459,6 +12536,12 @@ export declare const PluginSignalPublish: z.ZodObject<{
             open: "open";
             resolved: "resolved";
         }>>;
+        attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            type: z.ZodString;
+            size: z.ZodNumber;
+            uri: z.ZodString;
+        }, z.core.$strict>>>;
     }, z.core.$strict>;
     related: z.ZodObject<{
         thread: z.ZodString;
@@ -13567,6 +13650,27 @@ export declare const ResolvedKayAppWorkflow: z.ZodObject<{
 
 export declare type ResolvedKayAppWorkflow = z.infer<typeof ResolvedKayAppWorkflow>;
 
+export declare const ResolvedKayAppWorkingDocumentProvider: z.ZodObject<{
+    localId: z.ZodString;
+    globalId: z.ZodString;
+    displayName: z.ZodString;
+    schemes: z.ZodArray<z.ZodString>;
+    hosts: z.ZodArray<z.ZodString>;
+    authServiceId: z.ZodOptional<z.ZodString>;
+    authSchemeId: z.ZodOptional<z.ZodString>;
+    scopeRequirement: z.ZodOptional<z.ZodObject<{
+        purpose: z.ZodString;
+        alternatives: z.ZodArray<z.ZodObject<{
+            allOf: z.ZodArray<z.ZodObject<{
+                scope: z.ZodString;
+                reason: z.ZodExactOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+export declare type ResolvedKayAppWorkingDocumentProvider = z.infer<typeof ResolvedKayAppWorkingDocumentProvider>;
+
 export declare const ResolvedKayUiApp: z.ZodObject<{
     localId: z.ZodString;
     globalId: z.ZodString;
@@ -14054,6 +14158,7 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             eventSubscription: "eventSubscription";
             appDataSource: "appDataSource";
             whiteboardType: "whiteboardType";
+            workingDocumentProvider: "workingDocumentProvider";
             approvalType: "approvalType";
             workflow: "workflow";
             contextContributor: "contextContributor";
@@ -15113,6 +15218,24 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
         handover: z.ZodOptional<z.ZodLiteral<true>>;
         globalId: z.ZodString;
     }, z.core.$strict>>>;
+    kayAppWorkingDocumentProviders: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        localId: z.ZodString;
+        globalId: z.ZodString;
+        displayName: z.ZodString;
+        schemes: z.ZodArray<z.ZodString>;
+        hosts: z.ZodArray<z.ZodString>;
+        authServiceId: z.ZodOptional<z.ZodString>;
+        authSchemeId: z.ZodOptional<z.ZodString>;
+        scopeRequirement: z.ZodOptional<z.ZodObject<{
+            purpose: z.ZodString;
+            alternatives: z.ZodArray<z.ZodObject<{
+                allOf: z.ZodArray<z.ZodObject<{
+                    scope: z.ZodString;
+                    reason: z.ZodExactOptional<z.ZodString>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>>;
     kayAppMcpServers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         pluginId: z.ZodString;
@@ -15344,6 +15467,7 @@ export declare const ResolvedPluginContributionId: z.ZodObject<{
         eventSubscription: "eventSubscription";
         appDataSource: "appDataSource";
         whiteboardType: "whiteboardType";
+        workingDocumentProvider: "workingDocumentProvider";
         approvalType: "approvalType";
         workflow: "workflow";
         contextContributor: "contextContributor";
@@ -18190,4 +18314,24 @@ export declare const WorkflowContribution: z.ZodObject<{
 
 export declare type WorkflowContribution = z.infer<typeof WorkflowContribution>;
 
+export declare const WorkingDocumentProviderContribution: z.ZodObject<{
+    localId: z.ZodString;
+    displayName: z.ZodString;
+    schemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    authService: z.ZodOptional<z.ZodString>;
+    authScheme: z.ZodOptional<z.ZodString>;
+    scopeRequirement: z.ZodOptional<z.ZodObject<{
+        purpose: z.ZodString;
+        alternatives: z.ZodArray<z.ZodObject<{
+            allOf: z.ZodArray<z.ZodObject<{
+                scope: z.ZodString;
+                reason: z.ZodExactOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+export declare type WorkingDocumentProviderContribution = z.infer<typeof WorkingDocumentProviderContribution>;
+
 export { }

package/dist/index.js

@@ -260,8 +260,10 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.54.1";
+var KAY_PLUGIN_SDK_VERSION = "0.55.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
+  "0.54.2",
+  "0.54.1",
   "0.54.0",
   "0.53.0",
   "0.52.1",
@@ -2934,6 +2936,7 @@ __export(contributions_exports, {
   WhiteboardTypeContribution: () => WhiteboardTypeContribution,
   WhiteboardTypeStorage: () => WhiteboardTypeStorage,
   WorkflowContribution: () => WorkflowContribution,
+  WorkingDocumentProviderContribution: () => WorkingDocumentProviderContribution,
   canonicalContributionSchemas: () => canonicalContributionSchemas,
   isUiAppSourceModule: () => isUiAppSourceModule,
   uiAppSourceStylePath: () => uiAppSourceStylePath
@@ -2945,6 +2948,9 @@ var plugin_events_exports = {};
 __export(plugin_events_exports, {
   PLUGIN_EVENT_ID_MAX_BYTES: () => PLUGIN_EVENT_ID_MAX_BYTES,
   PLUGIN_EVENT_REFUSED_ERROR_NAME: () => PLUGIN_EVENT_REFUSED_ERROR_NAME,
+  PLUGIN_SIGNAL_ATTACHMENTS_MAX: () => PLUGIN_SIGNAL_ATTACHMENTS_MAX,
+  PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX: () => PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX,
+  PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX: () => PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX,
   PLUGIN_SIGNAL_KINDS: () => PLUGIN_SIGNAL_KINDS,
   PLUGIN_SIGNAL_LABELS_MAX: () => PLUGIN_SIGNAL_LABELS_MAX,
   PLUGIN_SIGNAL_LABEL_MAX: () => PLUGIN_SIGNAL_LABEL_MAX,
@@ -2980,6 +2986,9 @@ var PLUGIN_SIGNAL_TITLE_MAX = 300;
 var PLUGIN_SIGNAL_SNIPPET_MAX = 500;
 var PLUGIN_SIGNAL_LABELS_MAX = 20;
 var PLUGIN_SIGNAL_LABEL_MAX = 64;
+var PLUGIN_SIGNAL_ATTACHMENTS_MAX = 10;
+var PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX = 255;
+var PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX = 127;
 var PLUGIN_SIGNAL_RELATED_KEYS = [
   "thread",
   "from",
@@ -3051,7 +3060,19 @@ function createPluginEventsSchemas(canonical) {
     addressed: z12.enum(["direct", "cc", "mention", "group", "none"]).optional(),
     labels: z12.array(z12.string().min(1).max(PLUGIN_SIGNAL_LABEL_MAX)).max(PLUGIN_SIGNAL_LABELS_MAX).optional(),
     dueAt: PluginEventTimestamp2.optional(),
-    state: z12.enum(["open", "resolved"]).optional()
+    state: z12.enum(["open", "resolved"]).optional(),
+    /**
+     * Files that came with the item, such as a mail's attachments: each one's name, media type,
+     * size in bytes, and the address its bytes are read from. Never the bytes themselves. A
+     * source leaves out what it knows is not a document of the person's (a mail's inline
+     * signature image), and lists at most `PLUGIN_SIGNAL_ATTACHMENTS_MAX`.
+     */
+    attachments: z12.array(z12.strictObject({
+      name: z12.string().min(1).max(PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX),
+      type: z12.string().min(1).max(PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX),
+      size: z12.number().int().nonnegative(),
+      uri: PluginEventUri2
+    })).max(PLUGIN_SIGNAL_ATTACHMENTS_MAX).optional()
   }).refine((signal) => signal.state === void 0 || signal.kind === "status", {
     message: "state is only for a status signal",
     path: ["state"]
@@ -3886,6 +3907,42 @@ function createContributionsSchemas(canonical) {
       });
     }
   });
+  const WorkingDocumentProviderContribution2 = z14.strictObject({
+    localId: LocalContributionId2,
+    /** What it pulls, as a short noun phrase for copy: `a Google Doc`. */
+    displayName: NonEmptyString3,
+    /** URI schemes it claims (`gdrive`), compared without case. */
+    schemes: z14.array(UriScheme2).min(1).optional(),
+    /** Web hosts it claims (`docs.google.com`), compared without case. */
+    hosts: z14.array(NonEmptyString3).min(1).optional(),
+    /** The sign-in its token comes from, as on a URI module. */
+    authService: AuthServiceReference2.optional(),
+    /** The scheme of `authService` every call uses, as on a URI module. */
+    authScheme: AuthSchemeReference2.optional(),
+    /** What a stored grant must carry; absent means any credential of the scheme. */
+    scopeRequirement: ScopeRequirement2.optional()
+  }).superRefine((provider, ctx) => {
+    if (provider.schemes === void 0 && provider.hosts === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        message: "A working-document provider must claim a scheme or a host."
+      });
+    }
+    if (provider.authService === void 0 !== (provider.authScheme === void 0)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["authScheme"],
+        message: "authService and authScheme are declared together."
+      });
+    }
+    if (provider.scopeRequirement !== void 0 && provider.authService === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["scopeRequirement"],
+        message: "A scope requirement needs an authService."
+      });
+    }
+  });
   const WhiteboardTypeStorage2 = z14.discriminatedUnion("kind", [
     z14.strictObject({ kind: z14.literal("json") }),
     z14.strictObject({ kind: z14.literal("payload") }),
@@ -4632,6 +4689,7 @@ function createContributionsSchemas(canonical) {
     "eventSubscription",
     "appDataSource",
     "whiteboardType",
+    "workingDocumentProvider",
     "approvalType",
     "workflow",
     "contextContributor",
@@ -4662,6 +4720,7 @@ function createContributionsSchemas(canonical) {
     AppDataSourceContribution: AppDataSourceContribution2,
     WhiteboardTypeStorage: WhiteboardTypeStorage2,
     WhiteboardTypeContribution: WhiteboardTypeContribution2,
+    WorkingDocumentProviderContribution: WorkingDocumentProviderContribution2,
     AppDataMaterializerContribution: AppDataMaterializerContribution2,
     ArtifactUriModuleContribution: ArtifactUriModuleContribution2,
     CliBindingContribution: CliBindingContribution2,
@@ -4713,7 +4772,7 @@ function createContributionsSchemas(canonical) {
     PluginContributionKind: PluginContributionKind2
   };
 }
-var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, PluginCardContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationAccountLinks, ReferencePresentationWords, ReferencePresentationContribution, KayUiAppHostCapability, UiAppCapabilityReference, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
+var { ApprovalCardForm, ApprovalCardStoredForm, ApprovalTypeContribution, UriModuleFacts, ToolContribution, ToolPermission, AgentToolContribution, ConverterContribution, UriModuleContribution, AppUriModuleContribution, AppDataSourceContribution, WhiteboardTypeStorage, WhiteboardTypeContribution, WorkingDocumentProviderContribution, AppDataMaterializerContribution, ArtifactUriModuleContribution, CliBindingContribution, GitHostContribution, ResourceContribution, SkillContribution, PluginSkillSourceDeclaration, SearchProviderContribution, InteractionDriverContribution, EntityResolverContribution, AgentRenderContribution, EndpointContribution, PluginCardContribution, WorkflowContribution, McpServerUrl, McpServerAuthMode, McpServerContribution, McpServerContributions, AppEventSubscription, ContextContributorContribution, PluginEventDefinitionContribution, PluginNotificationRuleContribution, PluginProductEventContribution, UiEventSubscriptionContribution, DeviceDelegationContribution, SessionReaderContribution, UiCommandContribution, UiSlotContribution, ReferenceOpenBehavior, ReferencePresentationVariant, ReferencePresentationVariants, ReferencePresentationUriPattern, ReferencePresentationUrlClaim, ReferencePresentationTooltip, ReferencePresentationAddress, ReferencePresentationAccountLinks, ReferencePresentationWords, ReferencePresentationContribution, KayUiAppHostCapability, UiAppCapabilityReference, UiAppCapabilities, UiRailEntryContribution, UiToastPreviewContribution, UiPageContribution, UiAppContribution, ThemeContribution, CommandHandler, CommandContribution, PluginContributionKind } = createContributionsSchemas(false);
 var canonicalContributionSchemas = createContributionsSchemas(true);
 var UI_APP_SOURCE_MODULE = /\.(?:tsx|ts|jsx)$/;
 function isUiAppSourceModule(module) {
@@ -4868,7 +4927,7 @@ var KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS = [
 var KAY_UI_NATIVE_EVENT_ALLOWLIST = new Set(KAY_UI_NATIVE_EVENT_SUBSCRIPTIONS);
 var RETIRED_COMPATIBILITY_KEYS = ["policy"];
 function createManifestSchemas(canonical) {
-  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
+  const { AgentRenderContribution: AgentRenderContribution2, ApprovalTypeContribution: ApprovalTypeContribution2, WorkflowContribution: WorkflowContribution2, PluginCardContribution: PluginCardContribution2, AppDataMaterializerContribution: AppDataMaterializerContribution2, AppDataSourceContribution: AppDataSourceContribution2, AppUriModuleContribution: AppUriModuleContribution2, AppEventSubscription: AppEventSubscription2, ArtifactUriModuleContribution: ArtifactUriModuleContribution2, CliBindingContribution: CliBindingContribution2, CommandContribution: CommandContribution2, ContextContributorContribution: ContextContributorContribution2, ConverterContribution: ConverterContribution2, SessionReaderContribution: SessionReaderContribution2, DeviceDelegationContribution: DeviceDelegationContribution2, EndpointContribution: EndpointContribution2, EntityResolverContribution: EntityResolverContribution2, GitHostContribution: GitHostContribution2, McpServerContributions: McpServerContributions2, PluginEventDefinitionContribution: PluginEventDefinitionContribution2, PluginNotificationRuleContribution: PluginNotificationRuleContribution2, PluginProductEventContribution: PluginProductEventContribution2, ResourceContribution: ResourceContribution2, ReferencePresentationContribution: ReferencePresentationContribution2, PluginSkillSourceDeclaration: PluginSkillSourceDeclaration2, InteractionDriverContribution: InteractionDriverContribution2, SearchProviderContribution: SearchProviderContribution2, SkillContribution: SkillContribution2, ThemeContribution: ThemeContribution2, AgentToolContribution: AgentToolContribution2, ToolContribution: ToolContribution2, UiCommandContribution: UiCommandContribution2, UiAppContribution: UiAppContribution2, UiRailEntryContribution: UiRailEntryContribution2, UiToastPreviewContribution: UiToastPreviewContribution2, UiPageContribution: UiPageContribution2, UiEventSubscriptionContribution: UiEventSubscriptionContribution2, UiSlotContribution: UiSlotContribution2, UriModuleContribution: UriModuleContribution2, WhiteboardTypeContribution: WhiteboardTypeContribution2, WorkingDocumentProviderContribution: WorkingDocumentProviderContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginPermissionManifest: PluginPermissionManifest2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const KayAgentTargetManifest2 = z18.strictObject({
@@ -4963,6 +5022,8 @@ function createManifestSchemas(canonical) {
       uriModules: z18.array(AppUriModuleContribution2).optional(),
       dataSources: z18.array(AppDataSourceContribution2).optional(),
       whiteboardTypes: z18.array(WhiteboardTypeContribution2).optional(),
+      // Document sources whose pull, push and revision check the app entrypoint registers.
+      workingDocumentProviders: z18.array(WorkingDocumentProviderContribution2).optional(),
       approvalTypes: z18.array(ApprovalTypeContribution2).optional(),
       workflows: z18.array(WorkflowContribution2).optional(),
       eventDefinitions: z18.array(PluginEventDefinitionContribution2).optional(),
@@ -5565,6 +5626,34 @@ function createManifestSchemas(canonical) {
       });
     }
     reportDuplicateLocalIds(ctx, ["targets", "kay", "app", "contributes", "whiteboardTypes"], manifest.targets?.kay?.app?.contributes?.whiteboardTypes, "Whiteboard type");
+    reportDuplicateLocalIds(ctx, ["targets", "kay", "app", "contributes", "workingDocumentProviders"], manifest.targets?.kay?.app?.contributes?.workingDocumentProviders, "Working-document provider");
+    for (const [index, provider] of (manifest.targets?.kay?.app?.contributes?.workingDocumentProviders ?? []).entries()) {
+      const path = [
+        "targets",
+        "kay",
+        "app",
+        "contributes",
+        "workingDocumentProviders",
+        index
+      ];
+      if (manifest.targets?.kay?.app?.entrypoint === void 0) {
+        ctx.addIssue({
+          code: "custom",
+          path,
+          message: `working-document provider ${provider.localId} needs a kay.app entrypoint to implement it`
+        });
+      }
+      if (provider.authService === void 0)
+        continue;
+      const granted = manifest.permissions?.byTarget["kay.app"]?.auth?.some((grant) => grant.service === provider.authService && grant.operations.includes("resolve"));
+      if (granted !== true) {
+        ctx.addIssue({
+          code: "custom",
+          path: [...path, "authService"],
+          message: `working-document provider ${provider.localId} needs a kay.app auth grant that resolves ${provider.authService}`
+        });
+      }
+    }
     const uiAppIds = new Set(manifest.targets?.kay?.ui?.contributes?.apps?.map((app) => app.localId) ?? []);
     for (const [index, entry] of (manifest.targets?.kay?.ui?.contributes?.railEntries ?? []).entries()) {
       const body = entry.panel?.body;
@@ -6540,6 +6629,7 @@ function collectKayAppContributionIds(manifest) {
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "uriModules"], contributes?.uriModules);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "dataSources"], contributes?.dataSources);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "whiteboardTypes"], contributes?.whiteboardTypes);
+  pushContributionIds(output, ["targets", "kay", "app", "contributes", "workingDocumentProviders"], contributes?.workingDocumentProviders);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "eventDefinitions"], contributes?.eventDefinitions);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "eventSubscriptions"], contributes?.eventSubscriptions);
   pushContributionIds(output, ["targets", "kay", "app", "contributes", "deviceDelegations"], contributes?.deviceDelegations);
@@ -6610,7 +6700,7 @@ function createResolvedContractSchemas(canonical) {
   const { ApprovalTypeContribution: ApprovalTypeContribution2, KayUiAppHostCapability: KayUiAppHostCapability2, McpServerAuthMode: McpServerAuthMode2, McpServerUrl: McpServerUrl2, PluginContributionKind: PluginContributionKindSchema, ReferenceOpenBehavior: ReferenceOpenBehavior2, ReferencePresentationUriPattern: ReferencePresentationUriPattern2, ReferencePresentationAccountLinks: ReferencePresentationAccountLinks2, ReferencePresentationAddress: ReferencePresentationAddress2, ReferencePresentationUrlClaim: ReferencePresentationUrlClaim2, ReferencePresentationVariants: ReferencePresentationVariants2, ReferencePresentationWords: ReferencePresentationWords2, UriModuleFacts: UriModuleFacts2, WhiteboardTypeContribution: WhiteboardTypeContribution2 } = canonical ? canonicalContributionSchemas : contributions_exports;
   const { FileExtensionToken: FileExtensionToken2, GitBasicAuthUser: GitBasicAuthUser2, GitHostName: GitHostName2, GlobalContributionId: GlobalContributionId2, HttpsUrl: HttpsUrl2, LocalContributionId: LocalContributionId2, MimeTypeString: MimeTypeString2, NonEmptyString: NonEmptyString3, PackageAssetPath: PackageAssetPath2, PluginId: PluginId2, PluginNamespace: PluginNamespace2, PluginToolName: PluginToolName2, RegistrableDomain: RegistrableDomain2, SignedInStatusCode: SignedInStatusCode2, TargetEntrypoint: TargetEntrypoint2, UriScheme: UriScheme2 } = canonical ? canonicalCommonSchemas : common_exports;
   const { PluginExternalCliConnect: PluginExternalCliConnect2, PluginOAuthClientSupplier: PluginOAuthClientSupplier2 } = canonical ? canonicalManifestSchemas : manifest_exports;
-  const { ResolvedPluginGrants: ResolvedPluginGrants2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
+  const { ResolvedPluginGrants: ResolvedPluginGrants2, ScopeRequirement: ScopeRequirement2 } = canonical ? canonicalPermissionSchemas : permissions_exports;
   const ResolvedPluginContributionId2 = z19.strictObject({
     target: PluginTargetName,
     kind: PluginContributionKindSchema,
@@ -6731,6 +6821,16 @@ function createResolvedContractSchemas(canonical) {
     auth: McpServerAuthMode2,
     authServiceId: GlobalContributionId2.optional()
   });
+  const ResolvedKayAppWorkingDocumentProvider2 = z19.strictObject({
+    localId: LocalContributionId2,
+    globalId: GlobalContributionId2,
+    displayName: NonEmptyString3,
+    schemes: z19.array(UriScheme2),
+    hosts: z19.array(NonEmptyString3),
+    authServiceId: GlobalContributionId2.optional(),
+    authSchemeId: GlobalContributionId2.optional(),
+    scopeRequirement: ScopeRequirement2.optional()
+  });
   const ResolvedKayAgentUriModule2 = z19.strictObject({
     localId: LocalContributionId2,
     adapterId: z19.string().min(1).optional(),
@@ -6994,6 +7094,7 @@ function createResolvedContractSchemas(canonical) {
     kayAppCards: z19.array(ResolvedPluginCard2).optional(),
     kayAppDataSources: z19.array(ResolvedKayAppDataSource2).optional(),
     kayAppWhiteboardTypes: z19.array(ResolvedKayAppWhiteboardType2).optional(),
+    kayAppWorkingDocumentProviders: z19.array(ResolvedKayAppWorkingDocumentProvider2).optional(),
     kayAppMcpServers: z19.array(ResolvedKayAppMcpServer2).optional(),
     kayAgentConverters: z19.array(ResolvedKayAgentConverter2).optional(),
     referencePresentations: z19.array(ResolvedReferencePresentation2).optional(),
@@ -7008,6 +7109,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedPluginCard: ResolvedPluginCard2,
     ResolvedKayAppDataSource: ResolvedKayAppDataSource2,
     ResolvedKayAppWhiteboardType: ResolvedKayAppWhiteboardType2,
+    ResolvedKayAppWorkingDocumentProvider: ResolvedKayAppWorkingDocumentProvider2,
     ResolvedKayAppMcpServer: ResolvedKayAppMcpServer2,
     ResolvedKayAgentUriModule: ResolvedKayAgentUriModule2,
     ResolvedKayAgentArtifactUriModule: ResolvedKayAgentArtifactUriModule2,
@@ -7024,7 +7126,7 @@ function createResolvedContractSchemas(canonical) {
     ResolvedPluginContractV1: ResolvedPluginContractV12
   };
 }
-var { ResolvedKayAppApprovalType, ResolvedKayAppWorkflow, ResolvedPluginCard, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
+var { ResolvedKayAppApprovalType, ResolvedKayAppWorkflow, ResolvedPluginCard, ResolvedPluginContributionId, ResolvedKayAgentTool, ResolvedKayAppTool, ResolvedKayAppDataSource, ResolvedKayAppWhiteboardType, ResolvedKayAppWorkingDocumentProvider, ResolvedKayAppMcpServer, ResolvedKayAgentUriModule, ResolvedKayAgentArtifactUriModule, ResolvedKayAgentEntityResolver, ResolvedKayAgentGitHostClaim, ResolvedKayAgentConverter, ResolvedReferencePresentation, ResolvedPluginProvisioningRequirement, ResolvedPluginAuthScheme, ResolvedPluginWebSession, ResolvedPluginAuthService, ResolvedKayUiAppEndpointCapability, ResolvedKayUiApp, ResolvedPluginContractV1 } = createResolvedContractSchemas(false);
 var canonicalResolvedContractSchemas = createResolvedContractSchemas(true);
 function narrowestAccountSelectors() {
   return [{ kind: "active" }];
@@ -7064,6 +7166,7 @@ function collectContributionSources(manifest) {
   pushAll(output, "kay.app", "uriModule", app?.uriModules);
   pushAll(output, "kay.app", "appDataSource", app?.dataSources);
   pushAll(output, "kay.app", "whiteboardType", app?.whiteboardTypes);
+  pushAll(output, "kay.app", "workingDocumentProvider", app?.workingDocumentProviders);
   pushAll(output, "kay.app", "approvalType", app?.approvalTypes);
   pushAll(output, "kay.app", "workflow", app?.workflows);
   pushAll(output, "kay.app", "command", app?.commands);
@@ -7165,6 +7268,9 @@ function collectConsumedAuthServiceIds(manifest) {
   for (const card of manifest.targets?.kay?.app?.contributes?.cards ?? []) {
     add(card.authService);
   }
+  for (const provider of manifest.targets?.kay?.app?.contributes?.workingDocumentProviders ?? []) {
+    add(provider.authService);
+  }
   for (const target of KAY_PLUGIN_TARGET_NAMES) {
     for (const grant of manifest.permissions?.byTarget[target]?.auth ?? []) {
       add(grant.service);
@@ -7417,6 +7523,20 @@ function resolveKayPluginContractV1(manifest) {
     ...type.reference === void 0 ? {} : { reference: type.reference },
     ...type.handover === void 0 ? {} : { handover: type.handover }
   }));
+  const kayAppWorkingDocumentProviders = manifest.targets?.kay?.app?.contributes?.workingDocumentProviders?.map((provider) => ({
+    localId: provider.localId,
+    globalId: resolveGlobalContributionId(namespace, provider.localId),
+    displayName: provider.displayName,
+    schemes: (provider.schemes ?? []).map((scheme) => scheme.toLowerCase()),
+    hosts: (provider.hosts ?? []).map((host) => host.toLowerCase()),
+    ...provider.authService === void 0 ? {} : {
+      authServiceId: isQualifiedAuthServiceRef(provider.authService) ? provider.authService : resolveGlobalContributionId(namespace, provider.authService)
+    },
+    ...provider.authScheme === void 0 ? {} : {
+      authSchemeId: isQualifiedAuthSchemeRef(provider.authScheme) ? provider.authScheme : resolveGlobalContributionId(namespace, provider.authScheme)
+    },
+    ...provider.scopeRequirement === void 0 ? {} : { scopeRequirement: provider.scopeRequirement }
+  }));
   const kayAppMcpServers = Object.entries(manifest.targets?.kay?.app?.contributes?.mcpServers ?? {}).map(([name, server]) => ({
     name,
     pluginId: manifest.id,
@@ -7565,6 +7685,7 @@ function resolveKayPluginContractV1(manifest) {
     ...kayAppWorkflows && kayAppWorkflows.length > 0 ? { kayAppWorkflows } : {},
     ...kayAppDataSources && kayAppDataSources.length > 0 ? { kayAppDataSources } : {},
     ...kayAppWhiteboardTypes && kayAppWhiteboardTypes.length > 0 ? { kayAppWhiteboardTypes } : {},
+    ...kayAppWorkingDocumentProviders && kayAppWorkingDocumentProviders.length > 0 ? { kayAppWorkingDocumentProviders } : {},
     ...kayAppMcpServers.length > 0 ? { kayAppMcpServers } : {},
     ...kayAgentConverters && kayAgentConverters.length > 0 ? { kayAgentConverters } : {},
     ...referencePresentations && referencePresentations.length > 0 ? { referencePresentations } : {},
@@ -8446,6 +8567,9 @@ export {
   PLUGIN_ICON_SHAPE_ATTRIBUTE,
   PLUGIN_NOTIFICATION_RULE_HOST_KEYS,
   PLUGIN_PRODUCT_EVENT_NAME_PATTERN,
+  PLUGIN_SIGNAL_ATTACHMENTS_MAX,
+  PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX,
+  PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX,
   PLUGIN_SIGNAL_KINDS,
   PLUGIN_SIGNAL_LABELS_MAX,
   PLUGIN_SIGNAL_LABEL_MAX,
@@ -8538,6 +8662,7 @@ export {
   ResolvedKayAppTool,
   ResolvedKayAppWhiteboardType,
   ResolvedKayAppWorkflow,
+  ResolvedKayAppWorkingDocumentProvider,
   ResolvedKayUiApp,
   ResolvedKayUiAppEndpointCapability,
   ResolvedPluginAuthScheme,
@@ -8612,6 +8737,7 @@ export {
   WhiteboardTypeStorage,
   WhiteboardValue,
   WorkflowContribution,
+  WorkingDocumentProviderContribution,
   appDataSourceDeclaration,
   approvalKindSchema,
   boundPluginDiagnosticMessage,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.54.1",
+  "version": "0.55.0",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",