@yaklabs-ai/plugin-sdk 0.13.8 → 0.13.9

package/README.md

@@ -13,7 +13,7 @@ it under the name your plugin code actually imports:
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.13.8"
+    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.13.9"
   }
 }
 ```
@@ -62,7 +62,7 @@ Every tool the entrypoint registers is declared in the manifest too:
   "description": "Greets people by name.",
   "version": "0.1.0",
   "namespace": "widgets",
-  "compatibility": { "sdk": "^0.13.8" },
+  "compatibility": { "sdk": "^0.13.9" },
   "targets": {
     "kay": {
       "agent": {
@@ -129,12 +129,15 @@ naming both versions, instead of loading it and finding no `activate`.
 | `@bonsai/plugin-sdk/app-data`           | The app-data size caps, on an entry with no other import, from 0.13.7           |
 | `@bonsai/plugin-sdk/vendored-mcp`       | The kit for a plugin built on a vendor's hosted MCP server, from 0.13.7         |
 | `@bonsai/plugin-sdk/system-one`         | The types and error class for `api.systemOne` / `app.systemOne`, from 0.13.8    |
+| `@bonsai/plugin-sdk/zod`                | `z` (the host's in the daemon), on an entry with no other import, from 0.13.9   |
 
 A plugin that imports a subpath declares at least the version its row names (`^0.13.7` for the
-four from 0.13.7, `^0.13.8` for `system-one`). `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
+four from 0.13.7, `^0.13.8` for `system-one`, `^0.13.9` for `zod`). `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
 vendor's MCP server itself is a separate host decision: Bonsai hosts it once a person approves
 the plugin's `mcp.host-server` grant for that server's name and URL. A server that needs an OAuth
-sign-in is, for now, supported only for Bonsai's own plugins.
+sign-in names one of the plugin's auth services in `authService`; that service must declare exactly
+one `delegated` scheme, which Bonsai uses to sign the person in to the server. Bonsai declares that
+scheme at runtime; the plugin's code must not declare it again.
 
 `kay-agent/host` is intentionally not published; it is Bonsai's own loading
 machinery, not an authoring API.

package/THIRD-PARTY-INVENTORY.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-sdk",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [

package/dist/disclosure.d.ts

@@ -610,7 +610,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -628,10 +628,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -656,7 +659,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -4604,6 +4607,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/disclosure.js

@@ -768,7 +768,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/kay-agent-testing.d.ts

@@ -521,7 +521,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -539,10 +539,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -567,7 +570,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -4515,6 +4518,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/kay-agent-testing.js

@@ -61,7 +61,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/kay-agent.d.ts

@@ -754,7 +754,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -772,10 +772,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -800,7 +803,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -6478,6 +6481,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/kay-app.d.ts

@@ -827,7 +827,7 @@ declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -845,10 +845,13 @@ declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+declare type DecideInstructions = string | object;
+
 declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -873,7 +876,7 @@ declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -8612,6 +8615,8 @@ declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 declare interface SystemOneClient {

package/dist/system-one.d.ts

@@ -17,7 +17,7 @@ export declare interface DecideBoolAnswer {
 /** A yes/no question. `criteria` says what yes and what no mean; omit it to leave both open. */
 export declare interface DecideBoolQuestion {
     readonly type: "bool";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria?: {
         readonly true: string;
         readonly false: string;
@@ -35,10 +35,13 @@ export declare interface DecideChoiceAnswer<L extends string = string> {
 /** A choice among labels. Each label maps to what it means; an empty string leaves it open. */
 export declare interface DecideChoiceQuestion<L extends string = string> {
     readonly type: "choice";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: Readonly<Record<L, string>>;
 }
 
+/** What a question asks: text, or a JSON object the client sends as its JSON text. */
+export declare type DecideInstructions = string | object;
+
 export declare type DecideModelId = "jev" | "clef" | "clef-flash";
 
 export declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
@@ -63,7 +66,7 @@ export declare interface DecideScoreAnswer {
 /** A score over ordered levels: the first criterion scores 0, the next 1, and so on. */
 export declare interface DecideScoreQuestion {
     readonly type: "score";
-    readonly instructions: string;
+    readonly instructions: DecideInstructions;
     readonly criteria: readonly string[];
 }
 
@@ -232,6 +235,8 @@ export declare interface SystemOneCallOptions {
     readonly signal?: AbortSignal;
     /** Bounds the whole call, retries included. */
     readonly timeoutMs?: number;
+    /** What the call is for, carried to the host's usage accounting. Never sent to a provider. */
+    readonly purpose?: string;
 }
 
 export declare interface SystemOneClient {

package/dist/system-one.js

@@ -28,7 +28,7 @@ var DEFAULT_DECIDE_MODEL = "jev";
 var SYSTEM_ONE_LIMITS = {
   /** The serialized request body, in bytes. */
   maxBodyBytes: 64 * 1024,
-  maxQuestions: 8,
+  maxQuestions: 64,
   maxFields: 32,
   minChoiceOptions: 2,
   maxChoiceOptions: 255,

package/dist/zod.d.ts

@@ -0,0 +1,5 @@
+import { z } from 'zod';
+
+export { z }
+
+export { }

package/dist/zod.js

@@ -0,0 +1,5 @@
+// packages/plugin-sdk/dist/zod.js
+import { z } from "zod";
+export {
+  z
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-sdk",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "description": "The Kay plugin SDK — types and helpers for authoring a Kay directory plugin.",
   "author": "YakLabs",
   "type": "module",
@@ -68,6 +68,10 @@
     "./system-one": {
       "types": "./dist/system-one.d.ts",
       "default": "./dist/system-one.js"
+    },
+    "./zod": {
+      "types": "./dist/zod.d.ts",
+      "default": "./dist/zod.js"
     }
   },
   "files": [

package/skills/directory-plugin-authoring/SKILL.md

@@ -97,7 +97,8 @@ claims all show only after enabling, in `read plugin://<id>`.
 - Plugin source imports `@bonsai/plugin-sdk/<subpath>` as a **bare specifier**
   (`@bonsai/plugin-sdk/kay-agent`, `/kay-agent/testing`, `/kay-app`, `/disclosure`, `/fs`, `/jev`,
   `/signals`, `/phase-shift`, `/time`, `/transcript`, `/transcript-review`, `/agent-conversation`,
-  `/app-data`, `/vendored-mcp` — only declared exports exist).
+  `/app-data`, `/vendored-mcp`, `/system-one`, `/zod` — only declared exports exist). Take `z`
+  from the SDK (`/kay-agent`, or `/zod` in code a page also loads), never from `zod` itself.
 - The daemon's plugin loader bundles each declared TypeScript entrypoint and its relative imports.
   It keeps `@bonsai/plugin-sdk` imports external and resolves them to the running app's own built SDK.
   Multi-file plugins are supported, and no plugin-local build is needed for Bonsai to load them.