@yaklabs-ai/plugin-protocol 0.9.0 → 0.10.0

package/README.md

@@ -11,7 +11,7 @@ flow.
 ```json
 {
   "dependencies": {
-    "@kay/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.9.0"
+    "@kay/plugin-protocol": "npm:@yaklabs-ai/plugin-protocol@^0.10.0"
   }
 }
 ```

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-protocol",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [],

package/dist/index.d.ts

@@ -262,9 +262,11 @@ export declare const ArtifactProvenanceCaptureContextSchema: z.ZodObject<{
                     type: z.ZodEnum<{
                         "turn-settled": "turn-settled";
                         "phase-shift": "phase-shift";
+                        "human-message": "human-message";
                     }>;
                     entryId: z.ZodString;
                     runId: z.ZodOptional<z.ZodString>;
+                    throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 }, z.core.$strict>>;
                 dedupeKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -352,9 +354,11 @@ export declare const ArtifactProvenanceCaptureContextSchema: z.ZodObject<{
                     type: z.ZodEnum<{
                         "turn-settled": "turn-settled";
                         "phase-shift": "phase-shift";
+                        "human-message": "human-message";
                     }>;
                     entryId: z.ZodString;
                     runId: z.ZodOptional<z.ZodString>;
+                    throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 }, z.core.$strict>>;
                 dedupeKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -446,9 +450,11 @@ export declare const ArtifactProvenanceCause: z.ZodDiscriminatedUnion<[z.ZodObje
             type: z.ZodEnum<{
                 "turn-settled": "turn-settled";
                 "phase-shift": "phase-shift";
+                "human-message": "human-message";
             }>;
             entryId: z.ZodString;
             runId: z.ZodOptional<z.ZodString>;
+            throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strict>>;
         dedupeKey: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
@@ -521,9 +527,11 @@ export declare const ArtifactProvenanceEnvelopeV1: z.ZodPipe<z.ZodUnknown, z.Zod
                     type: z.ZodEnum<{
                         "turn-settled": "turn-settled";
                         "phase-shift": "phase-shift";
+                        "human-message": "human-message";
                     }>;
                     entryId: z.ZodString;
                     runId: z.ZodOptional<z.ZodString>;
+                    throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 }, z.core.$strict>>;
                 dedupeKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -610,9 +618,11 @@ export declare const ArtifactProvenanceEnvelopeV1: z.ZodPipe<z.ZodUnknown, z.Zod
                         type: z.ZodEnum<{
                             "turn-settled": "turn-settled";
                             "phase-shift": "phase-shift";
+                            "human-message": "human-message";
                         }>;
                         entryId: z.ZodString;
                         runId: z.ZodOptional<z.ZodString>;
+                        throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                     }, z.core.$strict>>;
                     dedupeKey: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>;
@@ -724,9 +734,11 @@ export declare const ArtifactProvenanceEnvelopeV1: z.ZodPipe<z.ZodUnknown, z.Zod
                     type: z.ZodEnum<{
                         "turn-settled": "turn-settled";
                         "phase-shift": "phase-shift";
+                        "human-message": "human-message";
                     }>;
                     entryId: z.ZodString;
                     runId: z.ZodOptional<z.ZodString>;
+                    throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 }, z.core.$strict>>;
                 dedupeKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -893,9 +905,11 @@ export declare const ArtifactProvenanceMutation: z.ZodObject<{
                     type: z.ZodEnum<{
                         "turn-settled": "turn-settled";
                         "phase-shift": "phase-shift";
+                        "human-message": "human-message";
                     }>;
                     entryId: z.ZodString;
                     runId: z.ZodOptional<z.ZodString>;
+                    throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 }, z.core.$strict>>;
                 dedupeKey: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
@@ -986,9 +1000,11 @@ export declare const ArtifactProvenanceOperation: z.ZodObject<{
                 type: z.ZodEnum<{
                     "turn-settled": "turn-settled";
                     "phase-shift": "phase-shift";
+                    "human-message": "human-message";
                 }>;
                 entryId: z.ZodString;
                 runId: z.ZodOptional<z.ZodString>;
+                throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             }, z.core.$strict>>;
             dedupeKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>;
@@ -1124,9 +1140,11 @@ export declare const ArtifactProvenanceSession: z.ZodObject<{
                 type: z.ZodEnum<{
                     "turn-settled": "turn-settled";
                     "phase-shift": "phase-shift";
+                    "human-message": "human-message";
                 }>;
                 entryId: z.ZodString;
                 runId: z.ZodOptional<z.ZodString>;
+                throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             }, z.core.$strict>>;
             dedupeKey: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
@@ -1556,6 +1574,93 @@ export declare const CorpusContribution: z.ZodObject<{
 
 export declare type CorpusContribution = z.infer<typeof CorpusContribution>;
 
+export declare interface CorpusResourceInvocation {
+    readonly eventId: string;
+    /** Envelope recording time, never a run/message/incident identifier. */
+    readonly at: string;
+    readonly kind: CorpusResourceKind;
+    readonly sessionId: string;
+    /** Falls back to sessionId for legacy events without a recorded root. */
+    readonly rootSessionId: string;
+    readonly name: string;
+    readonly sourceId?: string;
+    /** Absent on unresolved legacy rows; names/aliases are not a substitute. */
+    readonly resourceId?: string;
+    readonly version?: string;
+    readonly variantId?: string;
+    readonly rootProvenance: SessionProvenanceRecord;
+    /** Current index hints, not the session's historical context at invocation. */
+    readonly currentContext: {
+        readonly cwd: string;
+        readonly projectId?: string;
+    };
+}
+
+/** Exclusive keyset position; preserve timestamp precision when returning it. */
+export declare const CorpusResourceInvocationCursor: z.ZodObject<{
+    at: z.ZodISODateTime;
+    eventId: z.ZodString;
+}, z.core.$strict>;
+
+export declare type CorpusResourceInvocationCursor = z.infer<typeof CorpusResourceInvocationCursor>;
+
+export declare interface CorpusResourceInvocationExclusion {
+    readonly eventId: string;
+    readonly sessionId: string;
+    readonly rootSessionId: string;
+    readonly reason: "session-missing" | "root-missing" | "root-provenance-unverified" | "root-creator-filtered";
+}
+
+export declare type CorpusResourceInvocationPage = {
+    readonly state: "available";
+    readonly items: readonly CorpusResourceInvocation[];
+    /** Absent only when this recording-time window is exhausted. */
+    readonly next?: CorpusResourceInvocationCursor;
+    /** Telemetry import succeeded; exclusions still describe missing or filtered index facts. */
+    readonly coverage: {
+        readonly scanned: number;
+        readonly exclusions: readonly CorpusResourceInvocationExclusion[];
+    };
+} | {
+    readonly state: "unavailable";
+    readonly reason: "not-wired" | "telemetry-unavailable" | "telemetry-incomplete" | "index-unavailable" | "invalid-record";
+    readonly message: string;
+};
+
+/** Half-open recording-time window. Limits bound scanned rows, including exclusions. */
+export declare const CorpusResourceInvocationQuery: z.ZodObject<{
+    kind: z.ZodEnum<{
+        skill: "skill";
+        "context-file": "context-file";
+        "prompt-command": "prompt-command";
+    }>;
+    since: z.ZodISODateTime;
+    until: z.ZodISODateTime;
+    after: z.ZodOptional<z.ZodObject<{
+        at: z.ZodISODateTime;
+        eventId: z.ZodString;
+    }, z.core.$strict>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    rootCreatedByKind: z.ZodOptional<z.ZodEnum<{
+        human: "human";
+        agent: "agent";
+        plugin: "plugin";
+        trigger: "trigger";
+        daemon: "daemon";
+    }>>;
+}, z.core.$strict>;
+
+export declare type CorpusResourceInvocationQuery = z.infer<typeof CorpusResourceInvocationQuery>;
+
+/** Roster invocation facts, not evidence that a read completed successfully. */
+export declare const CorpusResourceKind: z.ZodEnum<{
+    skill: "skill";
+    "context-file": "context-file";
+    "prompt-command": "prompt-command";
+}>;
+
+export declare type CorpusResourceKind = z.infer<typeof CorpusResourceKind>;
+
 /** Drop repeats under {@link sameClaim}, preserving first-seen order (a sort settles the rest). */
 export declare function dedupeClaims(claims: readonly PluginCapabilityClaimV1[]): PluginCapabilityClaimV1[];
 
@@ -1830,7 +1935,7 @@ export declare const KAY_APP_DATA_SNAPSHOT_MAX_BYTES: number;
 export declare const KAY_EVENT_PUBLISHER_ID: "kay";
 
 /** Released SDK contracts still implemented by the host, alongside its current SDK. */
-export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5"];
+export declare const KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS: readonly ["0.8.0", "0.8.1", "0.8.2", "0.8.3", "0.8.4", "0.8.5", "0.9.0", "0.9.1"];
 
 export declare const KAY_PLUGIN_PROTOCOL_PACKAGE_NAME: "@kay/plugin-protocol";
 
@@ -1934,8 +2039,30 @@ export declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * EXISTING apis; the type contract does not change. It still takes the patch
  * slot: nothing a `^0.8.1`/`^0.8.3` plugin already compiles against changes
  * shape, and the fix is which bytes reach npm, not what the contract promises.
+ *
+ * 0.9.0 adds timer_cancelled and requires workflow descriptions and summary
+ * returns. This is an authoring-type break only: the host retains the 0.8
+ * runtime contracts.
+ *
+ * 0.9.1 adds bounded corpus invocation reads (`app.corpus.listResourceInvocations`).
+ * Existing received APIs are unchanged, so this is additive only.
+ *
+ * 0.10.0 removes the `spawn-session` variant from `KayAppAutomationEffectInput`
+ * (and its daemon-facing mirror, `KayAutomationEffectInput`): an agent or
+ * plugin can no longer create a spawn-session automation binding (owner
+ * ruling, 2026-09-28) — durable recurring agent work is a plugin workflow
+ * (`app.workflows.define` + `ctx.runAgent`) or a direct `session/run`. A
+ * binding created before this version, or by daemon-internal code, still
+ * stores and reads the effect fine (`KayAppAutomationEffect` keeps it); only
+ * the create-time input type is narrower. Mostly an authoring-type break —
+ * 0.9.0 and 0.9.1 stay in the runtime-contract retention list below, so a
+ * plugin still running bytecode compiled against either keeps loading and
+ * working — except for the one call this ruling actually closes:
+ * `app.automations.create` with a `spawn-session` effect now throws
+ * explicitly at the call site instead of being accepted, for any plugin
+ * regardless of its declared SDK range.
  */
-export declare const KAY_PLUGIN_SDK_VERSION: "0.9.0";
+export declare const KAY_PLUGIN_SDK_VERSION: "0.10.0";
 
 export declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -3457,6 +3584,9 @@ export declare function parseSemver(value: string): ParsedSemver | undefined;
 /** Every capability slug {@link PluginCapabilityClaimV1} can express, for exhaustive table checks. */
 export declare const PLUGIN_CAPABILITY_SLUGS: readonly ["sessions.run", "network.connect", "web-session.request", "web-session.download", "filesystem.read", "filesystem.write", "process.spawn", "corpus.read", "signals.read", "workspace.command", "sessions.create", "sessions.update", "models.complete", "jev.use", "automations.write", "automations.run", "workflows.define", "session-events.subscribe", "agents.run", "dynamic-context.register", "app-data.register", "account.assert", "account.update", "agents.permissions", "tool-interception.register", "config.declare-section", "auth.own-service", "auth.shared-identity", "cli.bind", "whiteboard.discover", "whiteboard.read", "whiteboard.create", "whiteboard.update", "whiteboard.remove"];
 
+/** The root `<svg>` attribute a tile icon declares itself with. */
+export declare const PLUGIN_ICON_SHAPE_ATTRIBUTE = "data-icon-shape";
+
 /** Rule-body keys the host stamps, so a manifest's `rule` may not carry them. */
 export declare const PLUGIN_NOTIFICATION_RULE_HOST_KEYS: readonly ["id", "match", "sender"];
 
@@ -4807,6 +4937,29 @@ export declare const PluginEventDefinitionContribution: z.ZodObject<{
 
 export declare type PluginEventDefinitionContribution = z.infer<typeof PluginEventDefinitionContribution>;
 
+/**
+ * How a plugin icon asks to be drawn.
+ *
+ * - `"mark"` (the default): a logo or glyph on a transparent field. The host frames it, inset
+ *   on a white tile, so marks of every shape and color read at one size.
+ * - `"tile"`: a tile icon, artwork that is already a complete tile (its own background, edge to
+ *   edge). The host draws it full-bleed in its tile's shape, with no white field, border, or
+ *   inset.
+ *
+ * The icon declares this itself with `data-icon-shape="tile"` on its root `<svg>` element, so
+ * any plugin (first- or third-party) opts in the same way and a host keeps no list of which
+ * plugins do. It lives in the markup, not the manifest: the manifest is a strict schema, and a
+ * new field there would make every older host reject the plugin.
+ */
+export declare type PluginIconShape = "mark" | "tile";
+
+/**
+ * Read a plugin icon's declared {@link PluginIconShape}. Only the ROOT element's attribute
+ * counts (a nested `<svg>`, a comment, or text never turns a mark into a tile); anything
+ * undeclared or unparseable is a `"mark"`.
+ */
+export declare function pluginIconShape(svg: string): PluginIconShape;
+
 export declare const PluginId: z.ZodString;
 
 export declare type PluginId = z.infer<typeof PluginId>;
@@ -7353,9 +7506,11 @@ export declare const SessionCausedByEvent: z.ZodObject<{
         type: z.ZodEnum<{
             "turn-settled": "turn-settled";
             "phase-shift": "phase-shift";
+            "human-message": "human-message";
         }>;
         entryId: z.ZodString;
         runId: z.ZodOptional<z.ZodString>;
+        throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strict>>;
     dedupeKey: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
@@ -7574,9 +7729,11 @@ export declare const SessionProvenanceRecord: z.ZodObject<{
             type: z.ZodEnum<{
                 "turn-settled": "turn-settled";
                 "phase-shift": "phase-shift";
+                "human-message": "human-message";
             }>;
             entryId: z.ZodString;
             runId: z.ZodOptional<z.ZodString>;
+            throughEntryId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strict>>;
         dedupeKey: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
@@ -7668,6 +7825,9 @@ export declare const StorageGrantRequest: z.ZodObject<{
 
 export declare type StorageGrantRequest = z.infer<typeof StorageGrantRequest>;
 
+/** Markup that opens an SVG document: the prolog, then the root `<svg` start tag. */
+export declare const SVG_DOCUMENT_START: RegExp;
+
 export declare const TargetEntrypoint: z.ZodObject<{
     module: z.ZodString;
     export: z.ZodOptional<z.ZodString>;

package/dist/index.js

@@ -115,14 +115,16 @@ import { z as z2 } from "zod";
 import { z } from "zod";
 var KAY_PLUGIN_PROTOCOL_VERSION = "kay.plugin.v1";
 var KAY_PLUGIN_PROTOCOL_PACKAGE_NAME = "@kay/plugin-protocol";
-var KAY_PLUGIN_SDK_VERSION = "0.9.0";
+var KAY_PLUGIN_SDK_VERSION = "0.10.0";
 var KAY_PLUGIN_COMPATIBLE_SDK_VERSIONS = [
   "0.8.0",
   "0.8.1",
   "0.8.2",
   "0.8.3",
   "0.8.4",
-  "0.8.5"
+  "0.8.5",
+  "0.9.0",
+  "0.9.1"
 ];
 var KAY_PLUGIN_TARGET_NAMES = [
   "kay.agent",
@@ -341,10 +343,12 @@ var SessionCausedByEventShape = z3.strictObject({
   /** Required when `kind` is `"session-event"` or absent; must be omitted when `kind` is `"backfill"`. */
   event: z3.strictObject({
     /** {@link KayAppSessionEventType} in `@kay/plugin-sdk`, mirrored: a closed, extensible union. */
-    type: z3.enum(["turn-settled", "phase-shift"]),
+    type: z3.enum(["turn-settled", "phase-shift", "human-message"]),
     entryId: NonEmptyString2,
     /** The source run captured at the event boundary; absence remains unresolved. */
-    runId: NonEmptyString2.optional()
+    runId: NonEmptyString2.optional(),
+    /** Exact prior persisted boundary for a projected human-message event; null means empty history. */
+    throughEntryId: NonEmptyString2.nullable().optional()
   }).optional(),
   /**
    * The plugin-supplied exact-match dedupe key, when it gave one. Absent when the handler chose
@@ -2664,6 +2668,24 @@ var PluginContributionKind = z7.enum([
   "configSection"
 ]);
 
+// packages/plugin-protocol/dist/icon-shape.js
+var SVG_PROLOG = String.raw`^\s*(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*(?:<!DOCTYPE[^>]*>\s*)?`;
+var SVG_DOCUMENT_START = new RegExp(`${SVG_PROLOG}<svg[\\s>]`, "iu");
+var SVG_ROOT_START_TAG = new RegExp(`${SVG_PROLOG}<svg((?:\\s+[^\\s=>/]+(?:\\s*=\\s*(?:"[^"]*"|'[^']*'|[^\\s"'>]+))?)*)\\s*/?>`, "iu");
+var ATTRIBUTE = /([^\s=>/]+)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+)))?/gu;
+var PLUGIN_ICON_SHAPE_ATTRIBUTE = "data-icon-shape";
+function pluginIconShape(svg) {
+  const attributes = SVG_ROOT_START_TAG.exec(svg)?.[1];
+  if (attributes === void 0)
+    return "mark";
+  for (const [, name, double, single, bare] of attributes.matchAll(ATTRIBUTE)) {
+    if (name === PLUGIN_ICON_SHAPE_ATTRIBUTE) {
+      return (double ?? single ?? bare) === "tile" ? "tile" : "mark";
+    }
+  }
+  return "mark";
+}
+
 // packages/plugin-protocol/dist/ids.js
 function resolvePluginNamespace(pluginId, namespace) {
   return namespace ?? pluginId;
@@ -3030,10 +3052,20 @@ var KayPluginManifestV1 = z8.strictObject({
    */
   description: NonEmptyString,
   // Display icons resolved relative to the package root and traversal-guarded
-  // by `PackageAssetPath`. `iconDark` is an optional dark-appearance variant;
-  // when absent the host falls back to `icon`. This is a *raster/asset* icon —
-  // distinct from the *symbolic* `UiCommandContribution.icon` (an icon-set
-  // name), see LEXICON `icon`.
+  // by `PackageAssetPath`. This is a *raster/asset* icon — distinct from the
+  // *symbolic* `UiCommandContribution.icon` (an icon-set name), see LEXICON
+  // `icon`. By default the host treats the SVG as a mark and frames it, inset
+  // on a white tile. An SVG whose artwork is already a complete tile (its own
+  // background, edge to edge) says so with `data-icon-shape="tile"` on its
+  // root `<svg>` element, and the host then draws it full-bleed in its tile
+  // shape (LEXICON `tile icon`; `pluginIconShape` in `./icon-shape.ts`). The
+  // signal lives in the asset, not here, so older hosts keep parsing the
+  // manifest.
+  //
+  // `iconDark` is accepted and containment-checked, but no host reads or
+  // renders it today. The supported dark variant lives inside `icon` itself:
+  // an internal `@media (prefers-color-scheme: dark)` rule, which follows the
+  // app theme (docs/directory-plugins.md).
   icon: PackageAssetPath.optional(),
   iconDark: PackageAssetPath.optional(),
   namespace: PluginNamespace.optional(),
@@ -4440,15 +4472,37 @@ function sessionHealthPWellDecile(pWell) {
   return Math.min(9, Math.floor(pWell * 10));
 }
 
-// packages/plugin-protocol/dist/ui-app-package.js
+// packages/plugin-protocol/dist/resource-invocations.js
 import { z as z11 } from "zod";
+var CorpusResourceKind = z11.enum([
+  "skill",
+  "context-file",
+  "prompt-command"
+]);
+var CorpusResourceInvocationCursor = z11.strictObject({
+  at: z11.iso.datetime({ offset: true }),
+  eventId: z11.string().min(1)
+});
+var CorpusResourceInvocationQuery = z11.strictObject({
+  kind: CorpusResourceKind,
+  since: z11.iso.datetime({ offset: true }),
+  until: z11.iso.datetime({ offset: true }),
+  after: CorpusResourceInvocationCursor.optional(),
+  limit: z11.number().int().min(1).max(1e3).optional(),
+  rootCreatedByKind: z11.enum(AGENT_RUNTIME_SESSION_CREATOR_KINDS).optional()
+}).refine((value) => Date.parse(value.since) < Date.parse(value.until), {
+  message: "since must precede until"
+});
+
+// packages/plugin-protocol/dist/ui-app-package.js
+import { z as z12 } from "zod";
 var KAY_UI_APP_PACKAGE_PROTOCOL = "kay.ui.app-package.v1";
 var KAY_UI_BUNDLE_INDEX_PROTOCOL = "kay.ui.bundle-index.v1";
-var KayUiBundleOutputPath = z11.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
-var KayUiBundleIndexV1 = z11.strictObject({
-  protocol: z11.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
+var KayUiBundleOutputPath = z12.string().trim().min(1).refine((value) => !value.startsWith("/") && !value.startsWith("./") && !value.includes("\\") && !value.split("/").includes(".."), { message: "bundle output path must stay relative to the bundle root" });
+var KayUiBundleIndexV1 = z12.strictObject({
+  protocol: z12.literal(KAY_UI_BUNDLE_INDEX_PROTOCOL),
   entryPath: KayUiBundleOutputPath,
-  files: z11.array(z11.strictObject({
+  files: z12.array(z12.strictObject({
     path: KayUiBundleOutputPath,
     mediaType: NonEmptyString
   })).min(1)
@@ -4475,19 +4529,19 @@ var KayUiBundleIndexV1 = z11.strictObject({
 function parseKayUiBundleIndexV1(input) {
   return KayUiBundleIndexV1.parse(input);
 }
-var KayUiAppPackageFile = z11.strictObject({
+var KayUiAppPackageFile = z12.strictObject({
   path: PackageAssetPath,
   mediaType: NonEmptyString,
-  bytes: z11.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
+  bytes: z12.instanceof(Uint8Array).refine((bytes) => bytes.byteLength > 0, {
     message: "app package file bytes must not be empty"
   })
 });
-var KayUiAppPackageV1 = z11.strictObject({
-  protocol: z11.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
+var KayUiAppPackageV1 = z12.strictObject({
+  protocol: z12.literal(KAY_UI_APP_PACKAGE_PROTOCOL),
   appLocalId: LocalContributionId,
   entry: KayUiAppPackageFile,
-  styles: z11.array(KayUiAppPackageFile).optional(),
-  assets: z11.array(KayUiAppPackageFile).optional()
+  styles: z12.array(KayUiAppPackageFile).optional(),
+  assets: z12.array(KayUiAppPackageFile).optional()
 }).superRefine((appPackage, ctx) => {
   if (appPackage.entry.mediaType !== "application/javascript") {
     ctx.addIssue({
@@ -4524,16 +4578,16 @@ function parseKayUiAppPackageV1(input) {
 }
 
 // packages/plugin-protocol/dist/whiteboard.js
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var WhiteboardValue = JsonValue;
-var WhiteboardEntryEnvelope = z12.strictObject({
+var WhiteboardEntryEnvelope = z13.strictObject({
   id: NonEmptyString,
   typeId: GlobalContributionId,
-  schemaVersion: z12.number().int().positive(),
-  title: z12.string(),
+  schemaVersion: z13.number().int().positive(),
+  title: z13.string(),
   authorSessionId: NonEmptyString.nullable()
 });
-var WhiteboardEntrySummary = z12.strictObject({
+var WhiteboardEntrySummary = z13.strictObject({
   name: NonEmptyString,
   entry: WhiteboardEntryEnvelope,
   revision: NonEmptyString
@@ -4541,31 +4595,31 @@ var WhiteboardEntrySummary = z12.strictObject({
 var WhiteboardEntrySnapshot = WhiteboardEntrySummary.extend({
   value: WhiteboardValue
 });
-var WhiteboardDiagnostic = z12.strictObject({
+var WhiteboardDiagnostic = z13.strictObject({
   ruleId: NonEmptyString,
-  severity: z12.enum(["error", "warning"]),
+  severity: z13.enum(["error", "warning"]),
   message: NonEmptyString
 });
-var WhiteboardEntryInfo = z12.strictObject({
+var WhiteboardEntryInfo = z13.strictObject({
   name: NonEmptyString,
   revision: NonEmptyString,
   entry: WhiteboardEntryEnvelope.optional(),
-  state: z12.enum(["available", "unavailable", "unsupported-version", "invalid"]),
-  mutable: z12.boolean(),
-  diagnostics: z12.array(z12.string())
+  state: z13.enum(["available", "unavailable", "unsupported-version", "invalid"]),
+  mutable: z13.boolean(),
+  diagnostics: z13.array(z13.string())
 });
 var WhiteboardEntryInspection = WhiteboardEntryInfo.extend({
   value: WhiteboardValue.optional(),
-  text: z12.string(),
-  truncated: z12.boolean()
+  text: z13.string(),
+  truncated: z13.boolean()
 });
-var WhiteboardTypeInfo = z12.strictObject({
+var WhiteboardTypeInfo = z13.strictObject({
   typeId: GlobalContributionId,
   displayName: NonEmptyString,
-  schemaVersion: z12.number().int().positive(),
-  available: z12.boolean(),
+  schemaVersion: z13.number().int().positive(),
+  available: z13.boolean(),
   /** A plugin-owned readonly presentation; absent types use the host fallback. */
-  presentation: z12.strictObject({
+  presentation: z13.strictObject({
     app: GlobalContributionId
   }).optional()
 });
@@ -4607,6 +4661,9 @@ export {
   ContextContributorContribution,
   ConverterContribution,
   CorpusContribution,
+  CorpusResourceInvocationCursor,
+  CorpusResourceInvocationQuery,
+  CorpusResourceKind,
   DeviceDelegationContribution,
   EndpointContribution,
   EndpointGrantRequest,
@@ -4657,6 +4714,7 @@ export {
   MimeTypeString,
   NonEmptyString,
   PLUGIN_CAPABILITY_SLUGS,
+  PLUGIN_ICON_SHAPE_ATTRIBUTE,
   PLUGIN_NOTIFICATION_RULE_HOST_KEYS,
   PackageAssetPath,
   PluginAgentDefinitionPermissionRule,
@@ -4728,6 +4786,7 @@ export {
   SESSION_HEALTH_CUSTOM_TYPE,
   SESSION_HEALTH_ENTRY_NAME,
   SESSION_HEALTH_EXTENSION_ID,
+  SVG_DOCUMENT_START,
   ScopeAlternative,
   ScopeNeed,
   ScopeRequirement,
@@ -4796,6 +4855,7 @@ export {
   parseKayUiBundleIndexV1,
   parseResolvedPluginContractV1,
   parseSemver,
+  pluginIconShape,
   precedingPersonMessages,
   refineWebSessionScopeConfined,
   resolveAdapterId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-protocol",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "The Kay plugin manifest schema (`kay.plugin.v1`) — parse and validate a kay-plugin.json.",
   "author": "YakLabs",
   "type": "module",