@yaklabs-ai/plugin-protocol 0.55.2 → 0.55.4

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.55.2"
+    "@bonsai/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.55.4"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.55.2",
+  "version": "0.55.4",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/index.d.ts

@@ -4958,8 +4958,18 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * artifact usage declarations. A plugin using these declares ^0.55.1.
  *
  * 0.55.2 adds opt-in query and connection-selector preservation during URI claim normalization.
+ *
+ * 0.55.3 lets a signal carry the item's own text. `PluginSignal` gains an optional `body`: plain
+ * text, at most `PLUGIN_SIGNAL_BODY_MAX` (20,000) characters. Gmail puts a mail's text there, so
+ * Flows can keep the messages a task came from. Additive: a plugin that publishes a body declares
+ * ^0.55.3.
+ *
+ * 0.55.4 adds `app.plugins.listServices()` under the new `plugins.read` claim: every auth service
+ * of the installed, enabled plugins, with the plugin's id and display name and whether the person
+ * has connected it. No account, identity or scope. Built-ins hold the claim; any other plugin needs
+ * a grant. Additive; plugins calling it declare ^0.55.4.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.55.2";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.55.4";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -8781,7 +8791,7 @@ export declare function parseSemver(value: string): ParsedSemver | undefined;
 export declare function parseWhere(source: string, keyTypes?: WhereKeyTypes): WhereParseResult;
 
 /** Every capability slug {@link PluginCapabilityClaimV1} can express, for exhaustive table checks. */
-export declare const PLUGIN_CAPABILITY_SLUGS: readonly ["sessions.run", "network.connect", "web-session.request", "web-session.download", "process.spawn", "sessions.read", "signals.read", "uri.call", "endpoints.invoke", "skills.read", "skills.write", "skills.share", "plugins.set-enabled", "sessions.assign-project", "artifacts.resolve-file", "process.run", "sessions.annotate", "sessions.compact", "soul.write", "tools.describe", "workspace.command", "sessions.create", "sessions.update", "models.complete", "systemOne.use", "automations.write", "automations.run", "workflows.define", "workflows.signals", "session-events.subscribe", "agents.run", "dynamic-context.register", "app-data.register", "app-data.read", "knowledge-source.register", "artifacts.read", "session-artifacts.read", "session-artifacts.create", "account.assert", "account.update", "agents.permissions", "tool-interception.register", "interaction.surface", "config.declare-section", "auth.own-service", "auth.shared-identity", "cli.bind", "mcp.host-server", "prompt.resident", "skills.declared-source", "family-folder.root", "whiteboard.discover", "whiteboard.read", "whiteboard.create", "whiteboard.update", "whiteboard.remove", "model-selection.register", "system-prompt.register"];
+export declare const PLUGIN_CAPABILITY_SLUGS: readonly ["sessions.run", "network.connect", "web-session.request", "web-session.download", "process.spawn", "sessions.read", "signals.read", "uri.call", "endpoints.invoke", "skills.read", "skills.write", "skills.share", "plugins.set-enabled", "plugins.read", "sessions.assign-project", "artifacts.resolve-file", "process.run", "sessions.annotate", "sessions.compact", "soul.write", "tools.describe", "workspace.command", "sessions.create", "sessions.update", "models.complete", "systemOne.use", "automations.write", "automations.run", "workflows.define", "workflows.signals", "session-events.subscribe", "agents.run", "dynamic-context.register", "app-data.register", "app-data.read", "knowledge-source.register", "artifacts.read", "session-artifacts.read", "session-artifacts.create", "account.assert", "account.update", "agents.permissions", "tool-interception.register", "interaction.surface", "config.declare-section", "auth.own-service", "auth.shared-identity", "cli.bind", "mcp.host-server", "prompt.resident", "skills.declared-source", "family-folder.root", "whiteboard.discover", "whiteboard.read", "whiteboard.create", "whiteboard.update", "whiteboard.remove", "model-selection.register", "system-prompt.register"];
 
 /** Diagnostic messages carry plugin-controlled text (parse errors, module errors); bound it so a
  *  hostile or accidental multi-megabyte error can never blow up a log line or a render surface. */
@@ -8816,6 +8826,12 @@ export declare const PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX = 127;
 /** At most this many entries in a signal's `attachments`; a source lists the first ones. */
 export declare const PLUGIN_SIGNAL_ATTACHMENTS_MAX = 10;
 
+/**
+ * A signal's `body`, the item's own text, at most this many characters: a source cuts longer text
+ * and marks the cut. Enough for a long email with its quoted history.
+ */
+export declare const PLUGIN_SIGNAL_BODY_MAX = 20000;
+
 /** The `kind` values of `PluginSignal` v1. `status` is system state that clears itself. */
 export declare const PLUGIN_SIGNAL_KINDS: readonly ["message", "request", "mention", "invite", "status"];
 
@@ -9489,6 +9505,10 @@ export declare const PluginCapabilityClaimInputV1: z.ZodCustom<{
     target: "kay.app";
     slug: "plugins.set-enabled";
     envelope: Record<string, never>;
+} | {
+    target: "kay.app";
+    slug: "plugins.read";
+    envelope: Record<string, never>;
 } | {
     target: "kay.app";
     slug: "sessions.assign-project";
@@ -9779,6 +9799,10 @@ export declare const PluginCapabilityClaimInputV1: z.ZodCustom<{
     target: "kay.app";
     slug: "plugins.set-enabled";
     envelope: Record<string, never>;
+} | {
+    target: "kay.app";
+    slug: "plugins.read";
+    envelope: Record<string, never>;
 } | {
     target: "kay.app";
     slug: "sessions.assign-project";
@@ -10079,6 +10103,10 @@ export declare const PluginCapabilityClaimV1: z.ZodDiscriminatedUnion<[z.ZodObje
     target: z.ZodLiteral<"kay.app">;
     slug: z.ZodLiteral<"plugins.set-enabled">;
     envelope: z.ZodObject<{}, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    target: z.ZodLiteral<"kay.app">;
+    slug: z.ZodLiteral<"plugins.read">;
+    envelope: z.ZodObject<{}, z.core.$strict>;
 }, z.core.$strict>, z.ZodObject<{
     target: z.ZodLiteral<"kay.app">;
     slug: z.ZodLiteral<"sessions.assign-project">;
@@ -10425,6 +10453,10 @@ export declare const PluginCapabilityDecisionV1: z.ZodDiscriminatedUnion<[z.ZodO
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"plugins.set-enabled">;
         envelope: z.ZodObject<{}, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        target: z.ZodLiteral<"kay.app">;
+        slug: z.ZodLiteral<"plugins.read">;
+        envelope: z.ZodObject<{}, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"sessions.assign-project">;
@@ -10770,6 +10802,10 @@ export declare const PluginCapabilityDecisionV1: z.ZodDiscriminatedUnion<[z.ZodO
             target: z.ZodLiteral<"kay.app">;
             slug: z.ZodLiteral<"plugins.set-enabled">;
             envelope: z.ZodObject<{}, z.core.$strict>;
+        }, z.core.$strict>, z.ZodObject<{
+            target: z.ZodLiteral<"kay.app">;
+            slug: z.ZodLiteral<"plugins.read">;
+            envelope: z.ZodObject<{}, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
             target: z.ZodLiteral<"kay.app">;
             slug: z.ZodLiteral<"sessions.assign-project">;
@@ -11149,6 +11185,10 @@ export declare const PluginCapabilityRefusalV1: z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"plugins.set-enabled">;
         envelope: z.ZodObject<{}, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        target: z.ZodLiteral<"kay.app">;
+        slug: z.ZodLiteral<"plugins.read">;
+        envelope: z.ZodObject<{}, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"sessions.assign-project">;
@@ -12542,6 +12582,7 @@ export declare const PluginSignal: z.ZodObject<{
     }>>;
     title: z.ZodOptional<z.ZodString>;
     snippet: z.ZodOptional<z.ZodString>;
+    body: z.ZodOptional<z.ZodString>;
     actor: z.ZodOptional<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         uri: z.ZodString;
@@ -12592,6 +12633,7 @@ export declare const PluginSignalPublish: z.ZodObject<{
         }>>;
         title: z.ZodOptional<z.ZodString>;
         snippet: z.ZodOptional<z.ZodString>;
+        body: z.ZodOptional<z.ZodString>;
         actor: z.ZodOptional<z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
             uri: z.ZodString;
@@ -12743,7 +12785,7 @@ declare type PrereleaseIdentifier = string | number;
  * plugin is refused one with layer `release`, nothing offers a grant for it, and a stored grant
  * naming one confers nothing. Each entry backs one SDK method a built-in calls in place of a daemon
  * object it used to take at creation; making it public later means adding consent copy and moving
- * it out of this list (`docs/plugin-host/private-api.md`).
+ * it out of this list (`docs/plans/plugin-host/private-api.md`).
  */
 export declare const PRIVATE_PLUGIN_CAPABILITY_SLUGS: readonly PluginCapabilitySlug[];
 

package/dist/index.js

@@ -260,8 +260,10 @@ var JsonSchema = z4.record(z4.string(), JsonValue);
 var KAY_PLUGIN_MANIFEST_SIZE_CAP_BYTES = 1024 * 1024;
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@bonsai/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.55.2";
+var KAY_PLUGIN_SDK_VERSION = "0.55.4";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
+  "0.55.3",
+  "0.55.2",
   "0.55.1",
   "0.55.0",
   "0.54.2",
@@ -1807,6 +1809,7 @@ var PLUGIN_CAPABILITY_SLUGS = [
   "skills.write",
   "skills.share",
   "plugins.set-enabled",
+  "plugins.read",
   "sessions.assign-project",
   "artifacts.resolve-file",
   "process.run",
@@ -2014,6 +2017,13 @@ function createAuthoritySchemas(canonical) {
       slug: z11.literal("plugins.set-enabled"),
       envelope: z11.strictObject({})
     }),
+    z11.strictObject({
+      // See which installed, enabled plugins declare which auth services and whether each is
+      // connected: ids, display names and a boolean, never an account, identity or scope.
+      target: z11.literal("kay.app"),
+      slug: z11.literal("plugins.read"),
+      envelope: z11.strictObject({})
+    }),
     z11.strictObject({
       // Set the project of sessions no current call or event is about (accepting a project
       // suggestion, undoing an automatic filing). Private (PRIVATE_PLUGIN_CAPABILITY_SLUGS): whether
@@ -2366,6 +2376,7 @@ function sameClaim(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "plugins.read":
     case "sessions.assign-project":
     case "artifacts.resolve-file":
     case "process.run":
@@ -2461,6 +2472,7 @@ function envelopePairs(a, b) {
     case "skills.write":
     case "skills.share":
     case "plugins.set-enabled":
+    case "plugins.read":
     case "sessions.assign-project":
     case "artifacts.resolve-file":
     case "process.run":
@@ -2953,6 +2965,7 @@ __export(plugin_events_exports, {
   PLUGIN_SIGNAL_ATTACHMENTS_MAX: () => PLUGIN_SIGNAL_ATTACHMENTS_MAX,
   PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX: () => PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX,
   PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX: () => PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX,
+  PLUGIN_SIGNAL_BODY_MAX: () => PLUGIN_SIGNAL_BODY_MAX,
   PLUGIN_SIGNAL_KINDS: () => PLUGIN_SIGNAL_KINDS,
   PLUGIN_SIGNAL_LABELS_MAX: () => PLUGIN_SIGNAL_LABELS_MAX,
   PLUGIN_SIGNAL_LABEL_MAX: () => PLUGIN_SIGNAL_LABEL_MAX,
@@ -2986,6 +2999,7 @@ var PLUGIN_SIGNAL_KINDS = [
 ];
 var PLUGIN_SIGNAL_TITLE_MAX = 300;
 var PLUGIN_SIGNAL_SNIPPET_MAX = 500;
+var PLUGIN_SIGNAL_BODY_MAX = 2e4;
 var PLUGIN_SIGNAL_LABELS_MAX = 20;
 var PLUGIN_SIGNAL_LABEL_MAX = 64;
 var PLUGIN_SIGNAL_ATTACHMENTS_MAX = 10;
@@ -3055,6 +3069,13 @@ function createPluginEventsSchemas(canonical) {
     direction: z12.enum(["in", "out"]).optional(),
     title: z12.string().max(PLUGIN_SIGNAL_TITLE_MAX).optional(),
     snippet: z12.string().max(PLUGIN_SIGNAL_SNIPPET_MAX).optional(),
+    /**
+     * The item's own text as plain text (a mail's body with its quoted history, a chat
+     * message, an invite's description), at most `PLUGIN_SIGNAL_BODY_MAX` characters. A
+     * consumer may keep it as the record of what was said; a source that cannot read it leaves
+     * it out.
+     */
+    body: z12.string().max(PLUGIN_SIGNAL_BODY_MAX).optional(),
     actor: z12.strictObject({
       name: z12.string().max(PLUGIN_SIGNAL_TITLE_MAX).optional(),
       uri: PluginEventUri2
@@ -5053,7 +5074,7 @@ function createManifestSchemas(canonical) {
       contextContributors: z18.array(ContextContributorContribution2).optional(),
       // Vendored MCP servers this plugin ships (see `McpServerContributions`). Each is hosted only
       // for a plugin holding `mcp.host-server` for its name and URL; that is decided at
-      // composition, not here (see ARCHITECTURE.md "Validation Law").
+      // composition, not here (see AGENTS.md).
       mcpServers: McpServerContributions2.optional(),
       // Handler restricted to endpoint-only by the manifest-level refinement below.
       commands: z18.array(CommandContribution2).optional()
@@ -8610,6 +8631,7 @@ export {
   PLUGIN_SIGNAL_ATTACHMENTS_MAX,
   PLUGIN_SIGNAL_ATTACHMENT_NAME_MAX,
   PLUGIN_SIGNAL_ATTACHMENT_TYPE_MAX,
+  PLUGIN_SIGNAL_BODY_MAX,
   PLUGIN_SIGNAL_KINDS,
   PLUGIN_SIGNAL_LABELS_MAX,
   PLUGIN_SIGNAL_LABEL_MAX,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.55.2",
+  "version": "0.55.4",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",