@yaklabs-ai/plugin-sdk 0.13.8 → 0.13.10

package/README.md

@@ -13,7 +13,7 @@ it under the name your plugin code actually imports:
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.13.8"
+    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.13.10"
   }
 }
 ```
@@ -62,7 +62,7 @@ Every tool the entrypoint registers is declared in the manifest too:
   "description": "Greets people by name.",
   "version": "0.1.0",
   "namespace": "widgets",
-  "compatibility": { "sdk": "^0.13.8" },
+  "compatibility": { "sdk": "^0.13.10" },
   "targets": {
     "kay": {
       "agent": {
@@ -129,12 +129,23 @@ naming both versions, instead of loading it and finding no `activate`.
 | `@bonsai/plugin-sdk/app-data`           | The app-data size caps, on an entry with no other import, from 0.13.7           |
 | `@bonsai/plugin-sdk/vendored-mcp`       | The kit for a plugin built on a vendor's hosted MCP server, from 0.13.7         |
 | `@bonsai/plugin-sdk/system-one`         | The types and error class for `api.systemOne` / `app.systemOne`, from 0.13.8    |
+| `@bonsai/plugin-sdk/zod`                | `z` (the host's in the daemon), on an entry with no other import, from 0.13.9   |
 
 A plugin that imports a subpath declares at least the version its row names (`^0.13.7` for the
-four from 0.13.7, `^0.13.8` for `system-one`). `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
+four from 0.13.7, `^0.13.8` for `system-one`, `^0.13.9` for `zod`). `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
 vendor's MCP server itself is a separate host decision: Bonsai hosts it once a person approves
 the plugin's `mcp.host-server` grant for that server's name and URL. A server that needs an OAuth
-sign-in is, for now, supported only for Bonsai's own plugins.
+sign-in names one of the plugin's auth services in `authService`; that service must declare exactly
+one `delegated` scheme, which Bonsai uses to sign the person in to the server. Bonsai declares that
+scheme at runtime; the plugin's code must not declare it again.
+
+From 0.13.10 the manifest schema carries two facts Bonsai reads for its own plugins only; another
+plugin's are ignored, with a load diagnostic. An `external-cli` auth scheme's `cli` says how Bonsai
+connects a local CLI: the `binary`, the `probe` argv (a zero exit is the connection) with the CLI's
+signed-out marker (required with `login`), an optional `login` argv the CLI runs itself, the `hints` a person reads, and the
+`install` argv, which Bonsai only shows or hands to an agent session and never runs. A `kay.agent`
+auth grant on another plugin's sign-in (`google.account`) can carry a `frontDoor`: the door `id` and
+label a product is offered under, and an optional file picker.
 
 `kay-agent/host` is intentionally not published; it is Bonsai's own loading
 machinery, not an authoring API.

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-sdk",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/disclosure.d.ts

@@ -610,7 +610,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -628,10 +628,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -656,7 +659,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -3915,18 +3918,10 @@ declare function ReturnType_2<Type extends TSchema>(type: Type, options?: TSchem
 /** Creates a deferred ReturnType action. */
 declare function ReturnTypeDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TReturnTypeDeferred<Type>;
 
-/**
- * ---
- * responsibility: The closed vocabulary of why a model run failed, as plain data.
- * owns:
- *   - {@link RunFailureReason}.
- * does_not_own:
- *   - Classifying a failure into a reason (`./run-failure-classifier.ts`), or the engine's
- *     run-error mapping and recovery policy (`@herd/herd-agent`).
- * ---
- */
-/** Provider-neutral factual category for a failed model run. */
-declare type RunFailureReason = "auth" | "content_blocked" | "context_overflow" | "invalid_request" | "model_disabled" | "model_unavailable" | "network" | "overloaded" | "quota_exhausted" | "rate_limit" | "safeguard_block" | "seat_unpaid" | "server_error" | "stream_interrupted" | "timeout" | "unknown";
+/** Observed cause of a failed request or interrupted run. */
+declare const RUN_FAILURE_REASONS: readonly ["auth", "cancelled", "content_blocked", "context_overflow", "invalid_request", "model_disabled", "model_unavailable", "network", "organization_unavailable", "overloaded", "quota_exhausted", "rate_limit", "runtime_interrupted", "safeguard_block", "seat_unpaid", "server_error", "sign_in_required", "stream_interrupted", "timeout", "unknown"];
+
+declare type RunFailureReason = (typeof RUN_FAILURE_REASONS)[number];
 
 declare namespace S {
     export {
@@ -4604,6 +4599,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/disclosure.js

@@ -768,7 +768,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/kay-agent-testing.d.ts

@@ -521,7 +521,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -539,10 +539,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -567,7 +570,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -3826,18 +3829,10 @@ declare function ReturnType_2<Type extends TSchema>(type: Type, options?: TSchem
 /** Creates a deferred ReturnType action. */
 declare function ReturnTypeDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TReturnTypeDeferred<Type>;
 
-/**
- * ---
- * responsibility: The closed vocabulary of why a model run failed, as plain data.
- * owns:
- *   - {@link RunFailureReason}.
- * does_not_own:
- *   - Classifying a failure into a reason (`./run-failure-classifier.ts`), or the engine's
- *     run-error mapping and recovery policy (`@herd/herd-agent`).
- * ---
- */
-/** Provider-neutral factual category for a failed model run. */
-declare type RunFailureReason = "auth" | "content_blocked" | "context_overflow" | "invalid_request" | "model_disabled" | "model_unavailable" | "network" | "overloaded" | "quota_exhausted" | "rate_limit" | "safeguard_block" | "seat_unpaid" | "server_error" | "stream_interrupted" | "timeout" | "unknown";
+/** Observed cause of a failed request or interrupted run. */
+declare const RUN_FAILURE_REASONS: readonly ["auth", "cancelled", "content_blocked", "context_overflow", "invalid_request", "model_disabled", "model_unavailable", "network", "organization_unavailable", "overloaded", "quota_exhausted", "rate_limit", "runtime_interrupted", "safeguard_block", "seat_unpaid", "server_error", "sign_in_required", "stream_interrupted", "timeout", "unknown"];
+
+declare type RunFailureReason = (typeof RUN_FAILURE_REASONS)[number];
 
 declare namespace S {
     export {
@@ -4515,6 +4510,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/kay-agent-testing.js

@@ -61,7 +61,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/kay-agent.d.ts

@@ -754,7 +754,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -772,10 +772,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -800,7 +803,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -3018,9 +3021,9 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         responseSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>>;
                     }, z.core.$strict>>>;
                     uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        displayName: z.ZodOptional<z.ZodString>;
                         schemes: z.ZodArray<z.ZodString>;
                         localId: z.ZodString;
-                        displayName: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>>;
                     dataSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
@@ -3361,6 +3364,26 @@ declare const KayPluginManifestV1: z.ZodObject<{
                 localId: z.ZodString;
                 kind: z.ZodLiteral<"external-cli">;
                 scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                cli: z.ZodOptional<z.ZodObject<{
+                    binary: z.ZodString;
+                    probe: z.ZodObject<{
+                        args: z.ZodArray<z.ZodString>;
+                        timeoutMs: z.ZodOptional<z.ZodNumber>;
+                        signedOutMarker: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>;
+                    login: z.ZodOptional<z.ZodObject<{
+                        args: z.ZodArray<z.ZodString>;
+                        timeoutMs: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>;
+                    install: z.ZodOptional<z.ZodObject<{
+                        command: z.ZodString;
+                        args: z.ZodArray<z.ZodString>;
+                    }, z.core.$strict>>;
+                    hints: z.ZodObject<{
+                        install: z.ZodString;
+                        login: z.ZodString;
+                    }, z.core.$strict>;
+                }, z.core.$strict>>;
                 displayName: z.ZodOptional<z.ZodString>;
                 agentHint: z.ZodOptional<z.ZodString>;
                 summary: z.ZodOptional<z.ZodString>;
@@ -3428,6 +3451,18 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         kind: z.ZodLiteral<"record-id">;
                         recordId: z.ZodString;
                     }, z.core.$strict>], "kind">>>;
+                    frontDoor: z.ZodOptional<z.ZodObject<{
+                        id: z.ZodString;
+                        displayName: z.ZodString;
+                        resourcePicker: z.ZodOptional<z.ZodObject<{
+                            effect: z.ZodEnum<{
+                                selection: "selection";
+                                "resource-grant": "resource-grant";
+                            }>;
+                            mimeTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            successNote: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
                 }, z.core.$strict>>>;
                 storage: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     kind: z.ZodEnum<{
@@ -3510,6 +3545,18 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         kind: z.ZodLiteral<"record-id">;
                         recordId: z.ZodString;
                     }, z.core.$strict>], "kind">>>;
+                    frontDoor: z.ZodOptional<z.ZodObject<{
+                        id: z.ZodString;
+                        displayName: z.ZodString;
+                        resourcePicker: z.ZodOptional<z.ZodObject<{
+                            effect: z.ZodEnum<{
+                                selection: "selection";
+                                "resource-grant": "resource-grant";
+                            }>;
+                            mimeTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            successNote: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
                 }, z.core.$strict>>>;
                 storage: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     kind: z.ZodEnum<{
@@ -3592,6 +3639,18 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         kind: z.ZodLiteral<"record-id">;
                         recordId: z.ZodString;
                     }, z.core.$strict>], "kind">>>;
+                    frontDoor: z.ZodOptional<z.ZodObject<{
+                        id: z.ZodString;
+                        displayName: z.ZodString;
+                        resourcePicker: z.ZodOptional<z.ZodObject<{
+                            effect: z.ZodEnum<{
+                                selection: "selection";
+                                "resource-grant": "resource-grant";
+                            }>;
+                            mimeTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                            successNote: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
                 }, z.core.$strict>>>;
                 storage: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     kind: z.ZodEnum<{
@@ -5763,18 +5822,10 @@ declare function ReturnType_2<Type extends TSchema>(type: Type, options?: TSchem
 /** Creates a deferred ReturnType action. */
 declare function ReturnTypeDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TReturnTypeDeferred<Type>;
 
-/**
- * ---
- * responsibility: The closed vocabulary of why a model run failed, as plain data.
- * owns:
- *   - {@link RunFailureReason}.
- * does_not_own:
- *   - Classifying a failure into a reason (`./run-failure-classifier.ts`), or the engine's
- *     run-error mapping and recovery policy (`@herd/herd-agent`).
- * ---
- */
-/** Provider-neutral factual category for a failed model run. */
-declare type RunFailureReason = "auth" | "content_blocked" | "context_overflow" | "invalid_request" | "model_disabled" | "model_unavailable" | "network" | "overloaded" | "quota_exhausted" | "rate_limit" | "safeguard_block" | "seat_unpaid" | "server_error" | "stream_interrupted" | "timeout" | "unknown";
+/** Observed cause of a failed request or interrupted run. */
+declare const RUN_FAILURE_REASONS: readonly ["auth", "cancelled", "content_blocked", "context_overflow", "invalid_request", "model_disabled", "model_unavailable", "network", "organization_unavailable", "overloaded", "quota_exhausted", "rate_limit", "runtime_interrupted", "safeguard_block", "seat_unpaid", "server_error", "sign_in_required", "stream_interrupted", "timeout", "unknown"];
+
+declare type RunFailureReason = (typeof RUN_FAILURE_REASONS)[number];
 
 declare namespace S {
     export {
@@ -6478,6 +6529,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/kay-app.d.ts

@@ -827,7 +827,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -845,10 +845,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -873,7 +876,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -7638,18 +7641,10 @@ declare function ReturnType_2<Type extends TSchema>(type: Type, options?: TSchem
 /** Creates a deferred ReturnType action. */
 declare function ReturnTypeDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TReturnTypeDeferred<Type>;
 
-/**
- * ---
- * responsibility: The closed vocabulary of why a model run failed, as plain data.
- * owns:
- *   - {@link RunFailureReason}.
- * does_not_own:
- *   - Classifying a failure into a reason (`./run-failure-classifier.ts`), or the engine's
- *     run-error mapping and recovery policy (`@herd/herd-agent`).
- * ---
- */
-/** Provider-neutral factual category for a failed model run. */
-declare type RunFailureReason = "auth" | "content_blocked" | "context_overflow" | "invalid_request" | "model_disabled" | "model_unavailable" | "network" | "overloaded" | "quota_exhausted" | "rate_limit" | "safeguard_block" | "seat_unpaid" | "server_error" | "stream_interrupted" | "timeout" | "unknown";
+/** Observed cause of a failed request or interrupted run. */
+declare const RUN_FAILURE_REASONS: readonly ["auth", "cancelled", "content_blocked", "context_overflow", "invalid_request", "model_disabled", "model_unavailable", "network", "organization_unavailable", "overloaded", "quota_exhausted", "rate_limit", "runtime_interrupted", "safeguard_block", "seat_unpaid", "server_error", "sign_in_required", "stream_interrupted", "timeout", "unknown"];
+
+declare type RunFailureReason = (typeof RUN_FAILURE_REASONS)[number];
 
 /**
  * A durable runtime notice: the daemon telling the HUMAN, in the transcript,
@@ -8612,6 +8607,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/system-one.d.ts

@@ -17,7 +17,7 @@ export declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 export declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -35,10 +35,13 @@ export declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 export declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+export declare type DecideInstructions = string | object;
+
 export declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 export declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -63,7 +66,7 @@ export declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 export declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -232,6 +235,8 @@ export declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 export declare interface SystemOneClient {

package/dist/system-one.js

@@ -28,7 +28,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/zod.d.ts

@@ -0,0 +1,5 @@
+import { z } from 'zod';
+
+export { z }
+
+export { }

package/dist/zod.js

@@ -0,0 +1,5 @@
+// packages/plugin-sdk/dist/zod.js
+import { z } from "zod";
+export {
+  z
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-sdk",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "The Kay plugin SDK — types and helpers for authoring a Kay directory plugin.",
   "author": "YakLabs",
   "type": "module",
@@ -68,6 +68,10 @@
     "./system-one": {
       "types": "./dist/system-one.d.ts",
       "default": "./dist/system-one.js"
+    },
+    "./zod": {
+      "types": "./dist/zod.d.ts",
+      "default": "./dist/zod.js"
     }
   },
   "files": [

package/skills/directory-plugin-authoring/SKILL.md

@@ -92,12 +92,19 @@ It never reads the declared files or applies the roster's rules: a missing entry
 file, an `activate()` that throws, the disclosure audit, and an id another installed plugin already
 claims all show only after enabling, in `read plugin://<id>`.
 
+Two manifest fields parse for any plugin but work for Bonsai's own plugins only (SDK 0.13.10): an
+`external-cli` scheme's `cli` (how a local CLI is probed, signed in to and installed) and an auth
+grant's `frontDoor` (a product door onto a shared sign-in). Bonsai drops either from any other
+plugin at load, with a `release-only-connect-facts-ignored` diagnostic, so do not reach for them in
+a plugin you install yourself.
+
 ## The SDK resolution contract
 
 - Plugin source imports `@bonsai/plugin-sdk/<subpath>` as a **bare specifier**
   (`@bonsai/plugin-sdk/kay-agent`, `/kay-agent/testing`, `/kay-app`, `/disclosure`, `/fs`, `/jev`,
   `/signals`, `/phase-shift`, `/time`, `/transcript`, `/transcript-review`, `/agent-conversation`,
-  `/app-data`, `/vendored-mcp` — only declared exports exist).
+  `/app-data`, `/vendored-mcp`, `/system-one`, `/zod` — only declared exports exist). Take `z`
+  from the SDK (`/kay-agent`, or `/zod` in code a page also loads), never from `zod` itself.
 - The daemon's plugin loader bundles each declared TypeScript entrypoint and its relative imports.
   It keeps `@bonsai/plugin-sdk` imports external and resolves them to the running app's own built SDK.
   Multi-file plugins are supported, and no plugin-local build is needed for Bonsai to load them.