@yaklabs-ai/plugin-protocol 0.55.0 → 0.55.1

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.55.0"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.55.1"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.55.0",
+  "version": "0.55.1",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/index.d.ts

@@ -122,6 +122,9 @@ export declare const AgentToolContribution: z.ZodObject<{
         resourcePrefix: z.ZodOptional<z.ZodString>;
         resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+        resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+            preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         defaultPermission: z.ZodOptional<z.ZodEnum<{
             never: "never";
             allow: "allow";
@@ -144,10 +147,10 @@ export declare const AgentToolContribution: z.ZodObject<{
             ruleKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
-    localId: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
     toolName: z.ZodString;
     displayName: z.ZodOptional<z.ZodString>;
-    description: z.ZodOptional<z.ZodString>;
+    localId: z.ZodString;
 }, z.core.$strict>;
 
 export declare type AgentToolContribution = z.infer<typeof AgentToolContribution>;
@@ -2232,6 +2235,9 @@ declare const canonicalContributionSchemas: {
             resourcePrefix: z.ZodOptional<z.ZodString>;
             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
             defaultPermission: z.ZodOptional<z.ZodEnum<{
                 never: "never";
                 allow: "allow";
@@ -2254,6 +2260,9 @@ declare const canonicalContributionSchemas: {
                 ruleKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;
         }, z.core.$strict>>;
+        availability: z.ZodOptional<z.ZodObject<{
+            scope: z.ZodLiteral<"app">;
+        }, z.core.$strict>>;
         localId: z.ZodString;
         toolName: z.ZodString;
         displayName: z.ZodOptional<z.ZodString>;
@@ -2271,6 +2280,9 @@ declare const canonicalContributionSchemas: {
         resourcePrefix: z.ZodOptional<z.ZodString>;
         resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+        resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+            preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         defaultPermission: z.ZodOptional<z.ZodEnum<{
             never: "never";
             allow: "allow";
@@ -2315,6 +2327,9 @@ declare const canonicalContributionSchemas: {
             resourcePrefix: z.ZodOptional<z.ZodString>;
             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
             defaultPermission: z.ZodOptional<z.ZodEnum<{
                 never: "never";
                 allow: "allow";
@@ -2337,10 +2352,10 @@ declare const canonicalContributionSchemas: {
                 ruleKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>>;
         }, z.core.$strict>>;
-        localId: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         toolName: z.ZodString;
         displayName: z.ZodOptional<z.ZodString>;
-        description: z.ZodOptional<z.ZodString>;
+        localId: z.ZodString;
     }, z.core.$strict>;
     ConverterContribution: z.ZodObject<{
         localId: z.ZodString;
@@ -2352,6 +2367,7 @@ declare const canonicalContributionSchemas: {
     UriModuleContribution: z.ZodObject<{
         authService: z.ZodOptional<z.ZodString>;
         authScheme: z.ZodOptional<z.ZodString>;
+        requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         knownResources: z.ZodOptional<z.ZodLiteral<true>>;
         describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
         looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
@@ -3248,6 +3264,7 @@ declare const canonicalContributionSchemas: {
         "connect-flows.read": "connect-flows.read";
         "connect-flows.dismiss": "connect-flows.dismiss";
         "support.report": "support.report";
+        "report-evidence.read": "report-evidence.read";
         "navigation.open-page": "navigation.open-page";
         "sessions.create": "sessions.create";
         "models.complete": "models.complete";
@@ -3285,6 +3302,7 @@ declare const canonicalContributionSchemas: {
             "connect-flows.read": "connect-flows.read";
             "connect-flows.dismiss": "connect-flows.dismiss";
             "support.report": "support.report";
+            "report-evidence.read": "report-evidence.read";
             "navigation.open-page": "navigation.open-page";
             "sessions.create": "sessions.create";
             "models.complete": "models.complete";
@@ -3390,6 +3408,7 @@ declare const canonicalContributionSchemas: {
                 "connect-flows.read": "connect-flows.read";
                 "connect-flows.dismiss": "connect-flows.dismiss";
                 "support.report": "support.report";
+                "report-evidence.read": "report-evidence.read";
                 "navigation.open-page": "navigation.open-page";
                 "sessions.create": "sessions.create";
                 "models.complete": "models.complete";
@@ -3444,6 +3463,7 @@ declare const canonicalContributionSchemas: {
                 "connect-flows.read": "connect-flows.read";
                 "connect-flows.dismiss": "connect-flows.dismiss";
                 "support.report": "support.report";
+                "report-evidence.read": "report-evidence.read";
                 "navigation.open-page": "navigation.open-page";
                 "sessions.create": "sessions.create";
                 "models.complete": "models.complete";
@@ -3514,9 +3534,9 @@ declare const canonicalContributionSchemas: {
         resource: "resource";
         storage: "storage";
         uriModule: "uriModule";
+        app: "app";
         authService: "authService";
         command: "command";
-        app: "app";
         skill: "skill";
         converter: "converter";
         artifactUriModule: "artifactUriModule";
@@ -4924,8 +4944,12 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  *
  * 0.55.0 carries managed MCP calls over resource writes in both daemon and plugin-host code.
  * Existing agent and background MCP call shapes remain supported.
+ *
+ * 0.55.1 adds canonical path resources on declared tool permissions, asynchronous display-only
+ * tool previews with cancellation, app-scoped availability snapshots and app-target output
+ * artifact usage declarations. A plugin using these declares ^0.55.1.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.55.0";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.55.1";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -4971,6 +4995,9 @@ export declare const KayAgentTargetManifest: z.ZodObject<{
                 resourcePrefix: z.ZodOptional<z.ZodString>;
                 resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+                resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                    preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strict>>;
                 defaultPermission: z.ZodOptional<z.ZodEnum<{
                     never: "never";
                     allow: "allow";
@@ -4993,10 +5020,10 @@ export declare const KayAgentTargetManifest: z.ZodObject<{
                     ruleKey: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
-            localId: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
             toolName: z.ZodString;
             displayName: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
+            localId: z.ZodString;
         }, z.core.$strict>>>;
         converters: z.ZodOptional<z.ZodArray<z.ZodObject<{
             localId: z.ZodString;
@@ -5008,6 +5035,7 @@ export declare const KayAgentTargetManifest: z.ZodObject<{
         uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
             authService: z.ZodOptional<z.ZodString>;
             authScheme: z.ZodOptional<z.ZodString>;
+            requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             knownResources: z.ZodOptional<z.ZodLiteral<true>>;
             describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
             looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
@@ -5317,6 +5345,9 @@ export declare const KayAppTargetManifest: z.ZodObject<{
         module: z.ZodString;
         export: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
+    artifacts: z.ZodOptional<z.ZodObject<{
+        outputs: z.ZodLiteral<true>;
+    }, z.core.$strict>>;
     contributes: z.ZodOptional<z.ZodObject<{
         tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
             parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>>;
@@ -5338,6 +5369,9 @@ export declare const KayAppTargetManifest: z.ZodObject<{
                 resourcePrefix: z.ZodOptional<z.ZodString>;
                 resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+                resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                    preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strict>>;
                 defaultPermission: z.ZodOptional<z.ZodEnum<{
                     never: "never";
                     allow: "allow";
@@ -5360,6 +5394,9 @@ export declare const KayAppTargetManifest: z.ZodObject<{
                     ruleKey: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>>;
             }, z.core.$strict>>;
+            availability: z.ZodOptional<z.ZodObject<{
+                scope: z.ZodLiteral<"app">;
+            }, z.core.$strict>>;
             localId: z.ZodString;
             toolName: z.ZodString;
             displayName: z.ZodOptional<z.ZodString>;
@@ -5926,6 +5963,9 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                             resourcePrefix: z.ZodOptional<z.ZodString>;
                             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+                            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            }, z.core.$strict>>;
                             defaultPermission: z.ZodOptional<z.ZodEnum<{
                                 never: "never";
                                 allow: "allow";
@@ -5948,10 +5988,10 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                                 ruleKey: z.ZodOptional<z.ZodString>;
                             }, z.core.$strict>>>;
                         }, z.core.$strict>>;
-                        localId: z.ZodString;
+                        description: z.ZodOptional<z.ZodString>;
                         toolName: z.ZodString;
                         displayName: z.ZodOptional<z.ZodString>;
-                        description: z.ZodOptional<z.ZodString>;
+                        localId: z.ZodString;
                     }, z.core.$strict>>>;
                     converters: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
@@ -5963,6 +6003,7 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                     uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         authService: z.ZodOptional<z.ZodString>;
                         authScheme: z.ZodOptional<z.ZodString>;
+                        requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
                         knownResources: z.ZodOptional<z.ZodLiteral<true>>;
                         describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
                         looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
@@ -6269,6 +6310,9 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                     module: z.ZodString;
                     export: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
+                artifacts: z.ZodOptional<z.ZodObject<{
+                    outputs: z.ZodLiteral<true>;
+                }, z.core.$strict>>;
                 contributes: z.ZodOptional<z.ZodObject<{
                     tools: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         parameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<authoringCommonSchemas.JsonValue, unknown, z.core.$ZodTypeInternals<authoringCommonSchemas.JsonValue, unknown>>>>;
@@ -6290,6 +6334,9 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                             resourcePrefix: z.ZodOptional<z.ZodString>;
                             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
                             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+                            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            }, z.core.$strict>>;
                             defaultPermission: z.ZodOptional<z.ZodEnum<{
                                 never: "never";
                                 allow: "allow";
@@ -6312,6 +6359,9 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                                 ruleKey: z.ZodOptional<z.ZodString>;
                             }, z.core.$strict>>>;
                         }, z.core.$strict>>;
+                        availability: z.ZodOptional<z.ZodObject<{
+                            scope: z.ZodLiteral<"app">;
+                        }, z.core.$strict>>;
                         localId: z.ZodString;
                         toolName: z.ZodString;
                         displayName: z.ZodOptional<z.ZodString>;
@@ -6908,6 +6958,7 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                                 "connect-flows.read": "connect-flows.read";
                                 "connect-flows.dismiss": "connect-flows.dismiss";
                                 "support.report": "support.report";
+                                "report-evidence.read": "report-evidence.read";
                                 "navigation.open-page": "navigation.open-page";
                                 "sessions.create": "sessions.create";
                                 "models.complete": "models.complete";
@@ -6962,6 +7013,7 @@ export declare const KayPluginManifestV1: z.ZodObject<{
                                 "connect-flows.read": "connect-flows.read";
                                 "connect-flows.dismiss": "connect-flows.dismiss";
                                 "support.report": "support.report";
+                                "report-evidence.read": "report-evidence.read";
                                 "navigation.open-page": "navigation.open-page";
                                 "sessions.create": "sessions.create";
                                 "models.complete": "models.complete";
@@ -7987,6 +8039,7 @@ export declare const KayUiAppHostCapability: z.ZodEnum<{
     "connect-flows.read": "connect-flows.read";
     "connect-flows.dismiss": "connect-flows.dismiss";
     "support.report": "support.report";
+    "report-evidence.read": "report-evidence.read";
     "navigation.open-page": "navigation.open-page";
     "sessions.create": "sessions.create";
     "models.complete": "models.complete";
@@ -8278,6 +8331,7 @@ export declare const KayUiTargetManifest: z.ZodObject<{
                     "connect-flows.read": "connect-flows.read";
                     "connect-flows.dismiss": "connect-flows.dismiss";
                     "support.report": "support.report";
+                    "report-evidence.read": "report-evidence.read";
                     "navigation.open-page": "navigation.open-page";
                     "sessions.create": "sessions.create";
                     "models.complete": "models.complete";
@@ -8332,6 +8386,7 @@ export declare const KayUiTargetManifest: z.ZodObject<{
                     "connect-flows.read": "connect-flows.read";
                     "connect-flows.dismiss": "connect-flows.dismiss";
                     "support.report": "support.report";
+                    "report-evidence.read": "report-evidence.read";
                     "navigation.open-page": "navigation.open-page";
                     "sessions.create": "sessions.create";
                     "models.complete": "models.complete";
@@ -11440,9 +11495,9 @@ export declare const PluginContributionKind: z.ZodEnum<{
     resource: "resource";
     storage: "storage";
     uriModule: "uriModule";
+    app: "app";
     authService: "authService";
     command: "command";
-    app: "app";
     skill: "skill";
     converter: "converter";
     artifactUriModule: "artifactUriModule";
@@ -13190,6 +13245,9 @@ export declare const ResolvedKayAgentTool: z.ZodObject<{
         resourcePrefix: z.ZodOptional<z.ZodString>;
         resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+        resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+            preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         defaultPermission: z.ZodOptional<z.ZodEnum<{
             never: "never";
             allow: "allow";
@@ -13414,6 +13472,7 @@ export declare const ResolvedKayAgentUriModule: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
     authServiceId: z.ZodOptional<z.ZodString>;
     authSchemeId: z.ZodOptional<z.ZodString>;
+    requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     knownResources: z.ZodOptional<z.ZodLiteral<true>>;
     describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
     looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
@@ -13585,6 +13644,9 @@ export declare const ResolvedKayAppTool: z.ZodObject<{
         resourcePrefix: z.ZodOptional<z.ZodString>;
         resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+        resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+            preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         defaultPermission: z.ZodOptional<z.ZodEnum<{
             never: "never";
             allow: "allow";
@@ -13608,6 +13670,9 @@ export declare const ResolvedKayAppTool: z.ZodObject<{
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
     globalId: z.ZodString;
+    availability: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodLiteral<"app">;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 
 export declare type ResolvedKayAppTool = z.infer<typeof ResolvedKayAppTool>;
@@ -13704,6 +13769,7 @@ export declare const ResolvedKayUiApp: z.ZodObject<{
             "connect-flows.read": "connect-flows.read";
             "connect-flows.dismiss": "connect-flows.dismiss";
             "support.report": "support.report";
+            "report-evidence.read": "report-evidence.read";
             "navigation.open-page": "navigation.open-page";
             "sessions.create": "sessions.create";
             "models.complete": "models.complete";
@@ -14142,9 +14208,9 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             resource: "resource";
             storage: "storage";
             uriModule: "uriModule";
+            app: "app";
             authService: "authService";
             command: "command";
-            app: "app";
             skill: "skill";
             converter: "converter";
             artifactUriModule: "artifactUriModule";
@@ -14918,6 +14984,7 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
         displayName: z.ZodOptional<z.ZodString>;
         authServiceId: z.ZodOptional<z.ZodString>;
         authSchemeId: z.ZodOptional<z.ZodString>;
+        requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         knownResources: z.ZodOptional<z.ZodLiteral<true>>;
         describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
         looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
@@ -14976,6 +15043,9 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             resourcePrefix: z.ZodOptional<z.ZodString>;
             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
             defaultPermission: z.ZodOptional<z.ZodEnum<{
                 never: "never";
                 allow: "allow";
@@ -15002,6 +15072,209 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
         globalId: z.ZodString;
         toolName: z.ZodString;
     }, z.core.$strict>>>;
+    kayAppArtifacts: z.ZodOptional<z.ZodObject<{
+        outputs: z.ZodLiteral<true>;
+    }, z.core.$strict>>;
+    kayAppUriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        revisionBacked: z.ZodOptional<z.ZodLiteral<true>>;
+        mailCalibrationSource: z.ZodOptional<z.ZodLiteral<true>>;
+        screenActions: z.ZodExactOptional<z.ZodObject<{
+            scheme: z.ZodString;
+            hosts: z.ZodArray<z.ZodString>;
+            paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            apps: z.ZodArray<z.ZodString>;
+            options: z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"exact">;
+                description: z.ZodString;
+                verb: z.ZodEnum<{
+                    read: "read";
+                    write: "write";
+                    edit: "edit";
+                    delete: "delete";
+                }>;
+                uri: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"catch-all">;
+                description: z.ZodString;
+                verb: z.ZodEnum<{
+                    read: "read";
+                    write: "write";
+                    edit: "edit";
+                    delete: "delete";
+                }>;
+            }, z.core.$strict>], "kind">>;
+        }, z.core.$strict>>;
+        claims: z.ZodExactOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"scheme">;
+            scheme: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"uriPattern">;
+            pattern: z.ZodObject<{
+                protocol: z.ZodExactOptional<z.ZodString>;
+                hostname: z.ZodExactOptional<z.ZodString>;
+                pathname: z.ZodExactOptional<z.ZodString>;
+                search: z.ZodExactOptional<z.ZodString>;
+            }, z.core.$strict>;
+            normalizeTo: z.ZodExactOptional<z.ZodString>;
+            route: z.ZodExactOptional<z.ZodString>;
+            sourceUrl: z.ZodExactOptional<z.ZodString>;
+            title: z.ZodExactOptional<z.ZodString>;
+            examples: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"urlPattern">;
+            pattern: z.ZodObject<{
+                protocol: z.ZodExactOptional<z.ZodString>;
+                hostname: z.ZodExactOptional<z.ZodString>;
+                pathname: z.ZodExactOptional<z.ZodString>;
+                search: z.ZodExactOptional<z.ZodString>;
+            }, z.core.$strict>;
+            normalizeTo: z.ZodExactOptional<z.ZodString>;
+            route: z.ZodExactOptional<z.ZodString>;
+            examples: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>], "kind">>>;
+        templates: z.ZodExactOptional<z.ZodArray<z.ZodObject<{
+            uri: z.ZodString;
+            description: z.ZodString;
+            operations: z.ZodExactOptional<z.ZodArray<z.ZodEnum<{
+                search: "search";
+                read: "read";
+                list: "list";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+                help: "help";
+            }>>>;
+            operationDocs: z.ZodExactOptional<z.ZodRecord<z.ZodEnum<{
+                search: "search";
+                read: "read";
+                list: "list";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+                help: "help";
+            }> & z.core.$partial, z.ZodString>>;
+            operationDefaults: z.ZodExactOptional<z.ZodRecord<z.ZodEnum<{
+                search: "search";
+                read: "read";
+                list: "list";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+                help: "help";
+            }> & z.core.$partial, z.ZodEnum<{
+                never: "never";
+                allow: "allow";
+                ask: "ask";
+            }>>>;
+        }, z.core.$strict>>>;
+        verbs: z.ZodExactOptional<z.ZodObject<{
+            readable: z.ZodBoolean;
+            writable: z.ZodBoolean;
+            editable: z.ZodBoolean;
+            deletable: z.ZodExactOptional<z.ZodBoolean>;
+            listable: z.ZodBoolean;
+            searchable: z.ZodExactOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        verbDocs: z.ZodExactOptional<z.ZodObject<{
+            read: z.ZodExactOptional<z.ZodString>;
+            list: z.ZodExactOptional<z.ZodString>;
+            search: z.ZodExactOptional<z.ZodString>;
+            write: z.ZodExactOptional<z.ZodString>;
+            edit: z.ZodExactOptional<z.ZodString>;
+            delete: z.ZodExactOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        permissionDefaults: z.ZodExactOptional<z.ZodObject<{
+            read: z.ZodExactOptional<z.ZodEnum<{
+                never: "never";
+                allow: "allow";
+                ask: "ask";
+            }>>;
+            write: z.ZodExactOptional<z.ZodEnum<{
+                never: "never";
+                allow: "allow";
+                ask: "ask";
+            }>>;
+            edit: z.ZodExactOptional<z.ZodEnum<{
+                never: "never";
+                allow: "allow";
+                ask: "ask";
+            }>>;
+            delete: z.ZodExactOptional<z.ZodEnum<{
+                never: "never";
+                allow: "allow";
+                ask: "ask";
+            }>>;
+        }, z.core.$strict>>;
+        authActions: z.ZodExactOptional<z.ZodObject<{
+            actions: z.ZodRecord<z.ZodString, z.ZodObject<{
+                purpose: z.ZodString;
+                alternatives: z.ZodArray<z.ZodObject<{
+                    allOf: z.ZodArray<z.ZodObject<{
+                        scope: z.ZodString;
+                        reason: z.ZodExactOptional<z.ZodString>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            rules: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+                action: z.ZodString;
+                operations: z.ZodExactOptional<z.ZodArray<z.ZodEnum<{
+                    search: "search";
+                    read: "read";
+                    list: "list";
+                    write: "write";
+                    edit: "edit";
+                    delete: "delete";
+                    help: "help";
+                }>>>;
+                routes: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+                query: z.ZodExactOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strict>, z.ZodObject<{
+                public: z.ZodLiteral<true>;
+                operations: z.ZodExactOptional<z.ZodArray<z.ZodEnum<{
+                    search: "search";
+                    read: "read";
+                    list: "list";
+                    write: "write";
+                    edit: "edit";
+                    delete: "delete";
+                    help: "help";
+                }>>>;
+                routes: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+                query: z.ZodExactOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strict>]>>;
+        }, z.core.$strict>>;
+        requiresConnection: z.ZodExactOptional<z.ZodLiteral<true>>;
+        acceptsSourceCopy: z.ZodExactOptional<z.ZodLiteral<false>>;
+        acceptsWriteSources: z.ZodExactOptional<z.ZodLiteral<true>>;
+        acceptsBytes: z.ZodExactOptional<z.ZodLiteral<true>>;
+        ownsLineSelectors: z.ZodExactOptional<z.ZodLiteral<true>>;
+        description: z.ZodExactOptional<z.ZodString>;
+        agentHint: z.ZodExactOptional<z.ZodObject<{
+            summary: z.ZodString;
+            commonFlows: z.ZodExactOptional<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                when: z.ZodExactOptional<z.ZodString>;
+                example: z.ZodString;
+            }, z.core.$strict>>>;
+            helpUri: z.ZodExactOptional<z.ZodString>;
+            triggers: z.ZodExactOptional<z.ZodObject<{
+                keywords: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+                patterns: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            skills: z.ZodExactOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        localId: z.ZodString;
+        adapterId: z.ZodOptional<z.ZodString>;
+        globalId: z.ZodString;
+        schemes: z.ZodArray<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        authServiceId: z.ZodOptional<z.ZodString>;
+        authSchemeId: z.ZodOptional<z.ZodString>;
+        requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        knownResources: z.ZodOptional<z.ZodLiteral<true>>;
+        describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
+        looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>>;
     kayAppTools: z.ZodOptional<z.ZodArray<z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
         toolName: z.ZodString;
@@ -15026,6 +15299,9 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             resourcePrefix: z.ZodOptional<z.ZodString>;
             resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+            resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+                preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
             defaultPermission: z.ZodOptional<z.ZodEnum<{
                 never: "never";
                 allow: "allow";
@@ -15049,6 +15325,9 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
             }, z.core.$strict>>>;
         }, z.core.$strict>>;
         globalId: z.ZodString;
+        availability: z.ZodOptional<z.ZodObject<{
+            scope: z.ZodLiteral<"app">;
+        }, z.core.$strict>>;
     }, z.core.$strict>>>;
     kayAppApprovalTypes: z.ZodOptional<z.ZodArray<z.ZodObject<{
         kind: z.ZodLiteral<"message">;
@@ -15409,6 +15688,7 @@ export declare const ResolvedPluginContractV1: z.ZodObject<{
                 "connect-flows.read": "connect-flows.read";
                 "connect-flows.dismiss": "connect-flows.dismiss";
                 "support.report": "support.report";
+                "report-evidence.read": "report-evidence.read";
                 "navigation.open-page": "navigation.open-page";
                 "sessions.create": "sessions.create";
                 "models.complete": "models.complete";
@@ -15451,9 +15731,9 @@ export declare const ResolvedPluginContributionId: z.ZodObject<{
         resource: "resource";
         storage: "storage";
         uriModule: "uriModule";
+        app: "app";
         authService: "authService";
         command: "command";
-        app: "app";
         skill: "skill";
         converter: "converter";
         artifactUriModule: "artifactUriModule";
@@ -17144,6 +17424,9 @@ export declare const ToolContribution: z.ZodObject<{
         resourcePrefix: z.ZodOptional<z.ZodString>;
         resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+        resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+            preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         defaultPermission: z.ZodOptional<z.ZodEnum<{
             never: "never";
             allow: "allow";
@@ -17166,6 +17449,9 @@ export declare const ToolContribution: z.ZodObject<{
             ruleKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
+    availability: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodLiteral<"app">;
+    }, z.core.$strict>>;
     localId: z.ZodString;
     toolName: z.ZodString;
     displayName: z.ZodOptional<z.ZodString>;
@@ -17189,6 +17475,9 @@ export declare const ToolPermission: z.ZodObject<{
     resourcePrefix: z.ZodOptional<z.ZodString>;
     resourceArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
     resourceTrim: z.ZodOptional<z.ZodLiteral<true>>;
+    resourcePathNormalization: z.ZodOptional<z.ZodObject<{
+        preserveUriSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
     defaultPermission: z.ZodOptional<z.ZodEnum<{
         never: "never";
         allow: "allow";
@@ -17304,6 +17593,7 @@ export declare const UiAppCapabilities: z.ZodObject<{
         "connect-flows.read": "connect-flows.read";
         "connect-flows.dismiss": "connect-flows.dismiss";
         "support.report": "support.report";
+        "report-evidence.read": "report-evidence.read";
         "navigation.open-page": "navigation.open-page";
         "sessions.create": "sessions.create";
         "models.complete": "models.complete";
@@ -17368,6 +17658,7 @@ export declare const UiAppContribution: z.ZodObject<{
             "connect-flows.read": "connect-flows.read";
             "connect-flows.dismiss": "connect-flows.dismiss";
             "support.report": "support.report";
+            "report-evidence.read": "report-evidence.read";
             "navigation.open-page": "navigation.open-page";
             "sessions.create": "sessions.create";
             "models.complete": "models.complete";
@@ -17422,6 +17713,7 @@ export declare const UiAppContribution: z.ZodObject<{
             "connect-flows.read": "connect-flows.read";
             "connect-flows.dismiss": "connect-flows.dismiss";
             "support.report": "support.report";
+            "report-evidence.read": "report-evidence.read";
             "navigation.open-page": "navigation.open-page";
             "sessions.create": "sessions.create";
             "models.complete": "models.complete";
@@ -17576,6 +17868,7 @@ export declare type UiToastPreviewContribution = z.infer<typeof UiToastPreviewCo
 export declare const UriModuleContribution: z.ZodObject<{
     authService: z.ZodOptional<z.ZodString>;
     authScheme: z.ZodOptional<z.ZodString>;
+    requiredScopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     knownResources: z.ZodOptional<z.ZodLiteral<true>>;
     describesOperations: z.ZodOptional<z.ZodLiteral<true>>;
     looksUpWebLinks: z.ZodOptional<z.ZodLiteral<true>>;

package/dist/index.js

@@ -260,8 +260,9 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.55.0";
+var KAY_PLUGIN_SDK_VERSION = "0.55.1";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
+  "0.55.0",
   "0.54.2",
   "0.54.1",
   "0.54.0",
@@ -3592,6 +3593,9 @@ function createContributionsSchemas(canonical) {
     // Arguments whose string values name the resources a call touches.
     resourceArgs: z14.array(NonEmptyString3).min(1).optional(),
     resourceTrim: z14.literal(true).optional(),
+    resourcePathNormalization: z14.strictObject({
+      preserveUriSchemes: z14.array(UriScheme2).optional()
+    }).optional(),
     defaultPermission: z14.enum(["allow", "ask", "never"]).optional(),
     /** First matching rule wins; every condition in its when list must hold. */
     classificationRules: z14.array(z14.strictObject({
@@ -3617,10 +3621,11 @@ function createContributionsSchemas(canonical) {
     executionMode: z14.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
     promptGuidelines: z14.array(NonEmptyString3).optional(),
-    permission: ToolPermission2.optional()
+    permission: ToolPermission2.optional(),
+    availability: z14.strictObject({ scope: z14.literal("app") }).optional()
   });
   const AgentToolContribution2 = z14.strictObject({
-    ...ToolContribution2.shape,
+    ...ToolContribution2.omit({ availability: true }).shape,
     parameters: JsonSchema.optional(),
     executionMode: z14.enum(["sequential", "parallel"]).optional(),
     promptSnippet: NonEmptyString3.optional(),
@@ -3822,6 +3827,8 @@ function createContributionsSchemas(canonical) {
     // only the manifest (a plugin that runs in the plugin host), and the host refuses a module
     // whose code names a different one.
     authScheme: AuthSchemeReference2.optional(),
+    // A module's minimum scopes, independent of the plugin's credential ceiling.
+    requiredScopes: z14.array(NonEmptyString3).optional(),
     // Opt this module's traffic into the daemon's known-resources ledger: the
     // HOST records the canonical URIs (plus title/summary/mime facts) that flow
     // through the module's successful read/list/search resolutions (a read only
@@ -3846,6 +3853,7 @@ function createContributionsSchemas(canonical) {
     authActions: true,
     authService: true,
     authScheme: true,
+    requiredScopes: true,
     knownResources: true,
     describesOperations: true,
     looksUpWebLinks: true
@@ -4496,6 +4504,10 @@ function createContributionsSchemas(canonical) {
     "connect-flows.read",
     "connect-flows.dismiss",
     "support.report",
+    // Reads what a problem report attaches beyond its words: the app's version and
+    // channel, the recent warning and error tail, the running plugin ids, and a
+    // capture of the window. The host gathers each; the page only reads the result.
+    "report-evidence.read",
     "navigation.open-page",
     // Lets `navigation.openChat` create a blank chat (no message, no model
     // turn) when no session id is given. It never sends anything.
@@ -5011,6 +5023,7 @@ function createManifestSchemas(canonical) {
     // Optional, like `kay.ui`'s: a target may carry only declarative `contributes` (e.g. a plugin
     // that ships nothing but `mcpServers`) with no app-lifetime module for the host to load.
     entrypoint: TargetEntrypoint2.optional(),
+    artifacts: z18.strictObject({ outputs: z18.literal(true) }).optional(),
     contributes: z18.strictObject({
       // Session tools implemented by the app-lifetime activation (registered once, injected into
       // every session with a host-stamped session context) - the tool counterpart of `uriModules`
@@ -6132,6 +6145,13 @@ function createManifestSchemas(canonical) {
       }
     }
     for (const module of manifest.targets?.kay?.agent?.contributes?.uriModules ?? []) {
+      if (module.requiredScopes !== void 0 && (module.authService === void 0 || module.authActions !== void 0)) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["targets", "kay", "agent", "contributes", "uriModules"],
+          message: `uri module ${module.localId} declares requiredScopes without an authService or alongside authActions`
+        });
+      }
       if (module.authService && !isQualifiedAuthServiceRef(module.authService) && !authServices.has(module.authService)) {
         ctx.addIssue({
           code: "custom",
@@ -6734,7 +6754,11 @@ function createResolvedContractSchemas(canonical) {
     }).optional(),
     permission: canonical ? canonicalContributionSchemas.ToolPermission.optional() : ToolPermission.optional()
   });
-  const ResolvedKayAppTool2 = ResolvedKayAgentTool2.omit({ requiresAuth: true });
+  const ResolvedKayAppTool2 = ResolvedKayAgentTool2.omit({
+    requiresAuth: true
+  }).extend({
+    availability: z19.strictObject({ scope: z19.literal("app") }).optional()
+  });
   const ResolvedKayAppDataSource2 = z19.strictObject({
     localId: LocalContributionId2,
     globalId: GlobalContributionId2,
@@ -6840,6 +6864,7 @@ function createResolvedContractSchemas(canonical) {
     authServiceId: GlobalContributionId2.optional(),
     /** Mirrors `UriModuleContribution.authScheme`; a local ref takes the plugin's namespace. */
     authSchemeId: GlobalContributionId2.optional(),
+    requiredScopes: z19.array(NonEmptyString3).optional(),
     /** Mirrors `UriModuleContribution.knownResources` (host-side recording opt-in). */
     knownResources: z19.literal(true).optional(),
     /** Mirrors `UriModuleContribution.describesOperations`. */
@@ -7088,6 +7113,8 @@ function createResolvedContractSchemas(canonical) {
     kayAgentEntityResolvers: z19.array(ResolvedKayAgentEntityResolver2).optional(),
     kayAgentGitHostClaims: z19.array(ResolvedKayAgentGitHostClaim2).optional(),
     kayAgentTools: z19.array(ResolvedKayAgentTool2).optional(),
+    kayAppArtifacts: z19.strictObject({ outputs: z19.literal(true) }).optional(),
+    kayAppUriModules: z19.array(ResolvedKayAgentUriModule2).optional(),
     kayAppTools: z19.array(ResolvedKayAppTool2).optional(),
     kayAppApprovalTypes: z19.array(ResolvedKayAppApprovalType2).optional(),
     kayAppWorkflows: z19.array(ResolvedKayAppWorkflow2).optional(),
@@ -7558,11 +7585,19 @@ function resolveKayPluginContractV1(manifest) {
     ...module.authScheme === void 0 ? {} : {
       authSchemeId: isQualifiedAuthSchemeRef(module.authScheme) ? module.authScheme : resolveGlobalContributionId(namespace, module.authScheme)
     },
+    ...module.requiredScopes === void 0 ? {} : { requiredScopes: [...module.requiredScopes] },
     ...module.knownResources === void 0 ? {} : { knownResources: module.knownResources },
     ...module.describesOperations === void 0 ? {} : { describesOperations: module.describesOperations },
     ...module.looksUpWebLinks === void 0 ? {} : { looksUpWebLinks: module.looksUpWebLinks },
     ...uriModuleFacts(module)
   }));
+  const kayAppUriModules = manifest.targets?.kay?.app?.contributes?.uriModules?.map((module) => ({
+    localId: module.localId,
+    globalId: resolveGlobalContributionId(namespace, module.localId),
+    schemes: [...module.schemes],
+    ...module.displayName === void 0 ? {} : { displayName: module.displayName },
+    ...uriModuleFacts(module)
+  }));
   const kayAgentArtifactUriModules = manifest.targets?.kay?.agent?.contributes?.artifactUriModules?.map((module) => ({
     localId: module.localId,
     globalId: resolveGlobalContributionId(namespace, module.localId),
@@ -7679,6 +7714,8 @@ function resolveKayPluginContractV1(manifest) {
     ...kayAgentEntityResolvers && kayAgentEntityResolvers.length > 0 ? { kayAgentEntityResolvers } : {},
     ...kayAgentGitHostClaims.length > 0 ? { kayAgentGitHostClaims } : {},
     ...kayAgentTools && kayAgentTools.length > 0 ? { kayAgentTools } : {},
+    ...manifest.targets?.kay?.app?.artifacts === void 0 ? {} : { kayAppArtifacts: manifest.targets.kay.app.artifacts },
+    ...kayAppUriModules && kayAppUriModules.length > 0 ? { kayAppUriModules } : {},
     ...kayAppTools && kayAppTools.length > 0 ? { kayAppTools } : {},
     ...kayAppCards && kayAppCards.length > 0 ? { kayAppCards } : {},
     ...kayAppApprovalTypes && kayAppApprovalTypes.length > 0 ? { kayAppApprovalTypes } : {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.55.0",
+  "version": "0.55.1",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",