@yaklabs-ai/plugin-sdk 0.14.1 → 0.15.0

package/dist/kay-agent.d.ts

@@ -128,6 +128,8 @@ export declare interface AgentToolResult<T = JsonValue_2 | undefined> {
      * error, but `details` and `structuredContent` are kept for the UI and programmatic callers.
      */
     isError?: boolean;
+    /** Classification for an `isError` result; the host validates it and stamps identity and attribution. */
+    failure?: ToolCallFailure;
     /**
      * Hint that the agent should stop after the current tool batch.
      * Early termination only happens when every finalized tool result in the batch sets this to true.
@@ -305,6 +307,12 @@ declare interface BackgroundTaskAdoptOptions {
     readonly ownerId?: string;
     readonly inspect?: BackgroundTaskInspector;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /**
+     * The task's owner waits for its result: the work was meant to finish and report back (a build,
+     * a test run). Absent or false: nothing waits on it (a dev server, a watcher). The kernel only
+     * carries this fact on the task's snapshot; what waiting means is the host's to decide.
+     */
+    readonly awaitsResult?: boolean;
     /** Scoped settlement hook for the task created by this adoption only. */
     readonly onSettled?: (completion: BackgroundTaskCompletion) => void;
 }
@@ -354,6 +362,8 @@ declare interface BackgroundTaskSnapshot {
     readonly startedAtMs: number;
     readonly updatedAtMs: number;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /** The owner waits for this task's result; see `BackgroundTaskAdoptOptions.awaitsResult`. */
+    readonly awaitsResult?: boolean;
 }
 
 declare type BackgroundTaskStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
@@ -768,7 +778,7 @@ declare interface DecideChoiceQuestion<L extends string = string> {
 /** What a question asks: text, or a JSON object the client sends as its JSON text. */
 declare type DecideInstructions = string | object;
 
-declare type DecideModelId = "jev" | "clef" | "clef-flash";
+declare type DecideModelId = "jev" | "clef" | "clef-flash" | "gpt-6-luna";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
 
@@ -776,10 +786,10 @@ declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | Decide
 declare type DecideQuestions = Readonly<Record<string, DecideQuestion>>;
 
 declare interface DecideRequest<Q extends DecideQuestions = DecideQuestions> {
-    /** Defaults to `jev`. */
-    readonly model?: DecideModelId;
+    readonly model: DecideModelId;
     readonly state: DecideState;
     readonly questions: Q;
+    readonly image?: SystemOneImage;
 }
 
 declare interface DecideScoreAnswer {
@@ -1179,7 +1189,10 @@ export declare interface ExtensionAuthContext {
 
 /** Optional extension-facing APIs for background task orchestration. */
 declare interface ExtensionBackgroundTasksApi {
-    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions & {
+        readonly awaitsResult?: false;
+    }): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options: BackgroundTaskAdoptOptions): string | Promise<string>;
     list(): readonly BackgroundTaskSnapshot[];
     get(taskId: string): BackgroundTaskSnapshot | undefined;
 }
@@ -2022,8 +2035,8 @@ export declare class KayAgentCapabilityError extends Error {
  */
 export declare interface KayAgentEvents {
     /**
-     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with a payload that
-     * matches that definition's `payloadSchema`.
+     * Publish one event the plugin declares in its `kay.app` `eventDefinitions`, with its resource URI and optional
+     * payload matching that definition's `payloadSchema` when declared.
      *
      * The host stamps the publisher (this plugin) and the session this activation belongs to; the
      * plugin names neither. Fire-and-forget: it returns nothing and never throws. A publish the host
@@ -2031,7 +2044,7 @@ export declare interface KayAgentEvents {
      * is reported to the host's diagnostics and dropped, so the work that raised the event never
      * fails because the event did not go out.
      */
-    publish(localId: string, payload: unknown): void;
+    publish(localId: string, input: PluginEventPublishInput): void;
 }
 
 /** This plugin's folder in the session family's shared Whiteboard. */
@@ -2856,16 +2869,16 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         responseSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>>;
                     }, z.core.$strict>>>;
                     uriModules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        localId: z.ZodString;
                         displayName: z.ZodOptional<z.ZodString>;
                         schemes: z.ZodArray<z.ZodString>;
-                        localId: z.ZodString;
                     }, z.core.$strict>>>;
                     dataSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
                         scope: z.ZodEnum<{
                             session: "session";
-                            account: "account";
                             runtime: "runtime";
+                            account: "account";
                         }>;
                         snapshot: z.ZodObject<{
                             version: z.ZodNumber;
@@ -2915,7 +2928,9 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         displayName: z.ZodOptional<z.ZodString>;
                         description: z.ZodOptional<z.ZodString>;
                         version: z.ZodDefault<z.ZodNumber>;
-                        payloadSchema: z.ZodRecord<z.ZodString, z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>;
+                        uriScheme: z.ZodString;
+                        relatedKeys: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+                        payloadSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>>;
                     }, z.core.$strict>>>;
                     notificationRules: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
@@ -2954,6 +2969,7 @@ declare const KayPluginManifestV1: z.ZodObject<{
                         url: z.ZodString;
                         auth: z.ZodOptional<z.ZodEnum<{
                             oauth: "oauth";
+                            "api-key": "api-key";
                             none: "none";
                         }>>;
                         authService: z.ZodOptional<z.ZodString>;
@@ -3060,6 +3076,8 @@ declare const KayPluginManifestV1: z.ZodObject<{
                                 "skills.read": "skills.read";
                                 "automations.run": "automations.run";
                                 "navigation.open-session": "navigation.open-session";
+                                "artifacts.read": "artifacts.read";
+                                "artifacts.preview": "artifacts.preview";
                                 "cost.read": "cost.read";
                                 "billing.read": "billing.read";
                                 "context.read": "context.read";
@@ -3072,6 +3090,16 @@ declare const KayPluginManifestV1: z.ZodObject<{
                                 "workspace.arrange": "workspace.arrange";
                             }>>>;
                         }, z.core.$strict>>;
+                        activityRail: z.ZodOptional<z.ZodObject<{
+                            section: z.ZodOptional<z.ZodEnum<{
+                                primary: "primary";
+                                plugins: "plugins";
+                            }>>;
+                            order: z.ZodOptional<z.ZodNumber>;
+                            icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                                svg: z.ZodString;
+                            }, z.core.$strict>]>>;
+                        }, z.core.$strict>>;
                     }, z.core.$strict>>>;
                     themes: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         localId: z.ZodString;
@@ -5174,6 +5202,42 @@ export declare interface PluginDelegatedServiceEntry {
     readonly scheme: PluginDelegatedScheme;
 }
 
+export declare const PluginEventEnvelope: z.ZodObject<{
+    id: z.ZodString;
+    localId: z.ZodString;
+    type: z.ZodString;
+    version: z.ZodNumber;
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodISODateTime;
+    publishedAt: z.ZodISODateTime;
+    source: z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+        layer: z.ZodLiteral<"runtime">;
+        pluginId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    payload: z.ZodOptional<z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>;
+}, z.core.$strict>;
+
+export declare type PluginEventEnvelope = z.infer<typeof PluginEventEnvelope>;
+
+export declare const PluginEventPublishInput: z.ZodObject<{
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodOptional<z.ZodISODateTime>;
+    source: z.ZodOptional<z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    payload: z.ZodOptional<z.ZodType<JsonValue_3, unknown, z.core.$ZodTypeInternals<JsonValue_3, unknown>>>;
+}, z.core.$strict>;
+
+export declare type PluginEventPublishInput = z.infer<typeof PluginEventPublishInput>;
+
 /**
  * An external-CLI readiness scheme the plugin declares: a non-injectable marker for a
  * host-probed local binary (e.g. `osascript`, `gh`). Connecting runs `binary probeArgs`
@@ -6388,7 +6452,7 @@ declare interface SystemOneClient {
     decide<const Q extends DecideQuestions>(request: DecideRequest<Q>, options?: SystemOneCallOptions): Promise<Decision<Q>>;
     extract<const F extends ExtractFields>(request: ExtractRequest<F>, options?: SystemOneCallOptions): Promise<Extraction<F>>;
     /** Whether some provider in the current order can serve `(kind, model)`. Never rejects. */
-    availability(kind: SystemOneKind, model?: SystemOneModelId): Promise<Availability>;
+    availability(kind: SystemOneKind, model: SystemOneModelId): Promise<Availability>;
 }
 
 /**
@@ -6423,6 +6487,12 @@ declare type SystemOneFailureCause = {
     readonly kind: "invalid-answer";
 };
 
+/** One PNG attachment. `data` is padded base64, without a data-URL prefix. */
+declare interface SystemOneImage {
+    readonly mimeType: "image/png";
+    readonly data: string;
+}
+
 /**
  * ---
  * responsibility: The data shapes of the System One surface: models, the decide and extract
@@ -8614,6 +8684,14 @@ declare type TOmitDeferred<Type extends TSchema, Indexer extends TSchema> = (TDe
 
 declare type TOmitInstantiate<Context extends TProperties, State extends TState, Type extends TSchema, Indexer extends TSchema, InstantiatedType extends TSchema = TInstantiateType<Context, State, Type>, InstantiatedIndexer extends TSchema = TInstantiateType<Context, State, Indexer>> = TOmitAction<InstantiatedType, InstantiatedIndexer>;
 
+/**
+ * The closed vocabulary of tool call failure codes. The engine and the tools
+ * mint only these; a returned failure with a code outside it is not a
+ * classification (the engine records the rejection on an unexplained failure),
+ * and a stored record with one reads as none.
+ */
+declare const TOOL_CALL_FAILURE_CODES: readonly ["tool.invalid_input", "tool.blocked", "tool.cancelled", "tool.timeout", "tool.not_found", "tool.unavailable", "tool.execution_failed", "provider.http", "provider.api", "provider.transport", "uri.not_found", "uri.unsupported_operation", "uri.not_connected", "uri.auth_unavailable", "permission.denied", "edit.empty_edits", "edit.text_not_found", "edit.text_not_unique", "edit.empty_old_text", "edit.overlapping_edits", "edit.no_change"];
+
 /**
  * ---
  * responsibility: The declarative permission classification a tool carries on its definition
@@ -8643,6 +8721,56 @@ export declare interface ToolAvailability {
     description: string;
 }
 
+/**
+ * The lane's classification of why one tool invocation failed: a searchable
+ * machine code and the cause the tool or engine classified at execution.
+ */
+export declare interface ToolCallFailure extends ToolCallFailureCause {
+    readonly code: ToolCallFailureCode;
+}
+
+declare type ToolCallFailureCause = z.infer<typeof toolCallFailureCauseSchema>;
+
+declare const toolCallFailureCauseSchema: z.ZodObject<{
+    category: z.ZodEnum<{
+        cancelled: "cancelled";
+        timeout: "timeout";
+        unknown: "unknown";
+        provider: "provider";
+        "invalid-input": "invalid-input";
+        "not-connected": "not-connected";
+        "unsupported-operation": "unsupported-operation";
+        "not-found": "not-found";
+        permission: "permission";
+        unavailable: "unavailable";
+    }>;
+    retryable: z.ZodBoolean;
+    action: z.ZodEnum<{
+        unknown: "unknown";
+        none: "none";
+        retry: "retry";
+        "correct-input": "correct-input";
+        connect: "connect";
+    }>;
+    details: z.ZodOptional<z.ZodObject<{
+        moduleId: z.ZodOptional<z.ZodString>;
+        toolOwnerId: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodString>;
+        uri: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        validationField: z.ZodOptional<z.ZodString>;
+        errorName: z.ZodOptional<z.ZodString>;
+        errorCode: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodNumber>;
+        editIndex: z.ZodOptional<z.ZodNumber>;
+        occurrences: z.ZodOptional<z.ZodNumber>;
+        retryAfterMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+declare type ToolCallFailureCode = (typeof TOOL_CALL_FAILURE_CODES)[number];
+
 /**
  * The neutral around-execution hook: return `next()`'s result (possibly transformed) to run the
  * real tool, or return a result without calling `next()` to substitute one — the tool then never

package/dist/kay-app.d.ts

@@ -1,3 +1,4 @@
+import { pathToFileURL } from 'node:url';
 import type { StatementSync } from 'node:sqlite';
 import { z } from 'zod';
 
@@ -78,6 +79,8 @@ export declare interface AgentToolResult<T = JsonValue_2 | undefined> {
      * error, but `details` and `structuredContent` are kept for the UI and programmatic callers.
      */
     isError?: boolean;
+    /** Classification for an `isError` result; the host validates it and stamps identity and attribution. */
+    failure?: ToolCallFailure;
     /**
      * Hint that the agent should stop after the current tool batch.
      * Early termination only happens when every finalized tool result in the batch sets this to true.
@@ -296,6 +299,12 @@ declare interface BackgroundTaskAdoptOptions {
     readonly ownerId?: string;
     readonly inspect?: BackgroundTaskInspector;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /**
+     * The task's owner waits for its result: the work was meant to finish and report back (a build,
+     * a test run). Absent or false: nothing waits on it (a dev server, a watcher). The kernel only
+     * carries this fact on the task's snapshot; what waiting means is the host's to decide.
+     */
+    readonly awaitsResult?: boolean;
     /** Scoped settlement hook for the task created by this adoption only. */
     readonly onSettled?: (completion: BackgroundTaskCompletion) => void;
 }
@@ -370,6 +379,8 @@ declare interface BackgroundTaskSnapshot {
     readonly startedAtMs: number;
     readonly updatedAtMs: number;
     readonly meta?: Readonly<Record<string, unknown>>;
+    /** The owner waits for this task's result; see `BackgroundTaskAdoptOptions.awaitsResult`. */
+    readonly awaitsResult?: boolean;
 }
 
 declare type BackgroundTaskStatus = "queued" | "running" | "completed" | "failed" | "cancelled";
@@ -843,7 +854,7 @@ declare interface DecideChoiceQuestion<L extends string = string> {
 /** What a question asks: text, or a JSON object the client sends as its JSON text. */
 declare type DecideInstructions = string | object;
 
-declare type DecideModelId = "jev" | "clef" | "clef-flash";
+declare type DecideModelId = "jev" | "clef" | "clef-flash" | "gpt-6-luna";
 
 declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
 
@@ -851,10 +862,10 @@ declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | Decide
 declare type DecideQuestions = Readonly<Record<string, DecideQuestion>>;
 
 declare interface DecideRequest<Q extends DecideQuestions = DecideQuestions> {
-    /** Defaults to `jev`. */
-    readonly model?: DecideModelId;
+    readonly model: DecideModelId;
     readonly state: DecideState;
     readonly questions: Q;
+    readonly image?: SystemOneImage;
 }
 
 declare interface DecideScoreAnswer {
@@ -1235,7 +1246,10 @@ declare interface ExtensionAuthContext {
 
 /** Optional extension-facing APIs for background task orchestration. */
 declare interface ExtensionBackgroundTasksApi {
-    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options?: BackgroundTaskAdoptOptions & {
+        readonly awaitsResult?: false;
+    }): string;
+    adopt(taskKind: BackgroundTaskKind, label: string, run: BackgroundTaskRun, options: BackgroundTaskAdoptOptions): string | Promise<string>;
     list(): readonly BackgroundTaskSnapshot[];
     get(taskId: string): BackgroundTaskSnapshot | undefined;
 }
@@ -2093,7 +2107,10 @@ export declare interface KayAppAccountProfileUpdate {
     readonly displayName: string;
 }
 
-/** Owned services use local IDs; omitted scheme searches all admitted schemes. */
+/**
+ * Service/scheme IDs are local when owned, globally qualified when consumed.
+ * Omitting scheme searches all admitted schemes.
+ */
 export declare interface KayAppAccountRequest {
     readonly serviceId: string;
     readonly schemeId?: string;
@@ -2363,15 +2380,20 @@ export declare interface KayAppAuth {
     /** Resolve a granted credential for a declared purpose. */
     resolve(request: KayAppResolveCredentialRequest): Promise<KayAppResolvedCredential>;
     /**
-     * Enumerate an owned service under an explicit list grant. Includes accounts needing repair.
+     * Enumerate an owned or consumed service under an explicit list grant in
+     * permissions.byTarget["kay.app"].auth. Consumption or resolve alone does not allow listing;
+     * shared-identity services also require auth.shared-identity authorization.
+     * Includes accounts needing repair within admitted schemes, without broadening resolve grants.
      * Never resolves, decrypts secret material, refreshes, or calls a provider. Invalid or
      * unauthorized requests reject; an authorized service with no accounts returns an empty list.
      */
     listAccounts(request: KayAppAccountRequest): Promise<readonly KayAppAccountSummary[]>;
     /**
      * Stored availability, not proof that a provider request will authenticate. False for no
-     * matching account or only revoked/needs-reauth accounts. Accepts list permission or existing
-     * resolve permission within its account bounds. Storage and authorization failures reject.
+     * matching account or only revoked/needs-reauth accounts. Uses explicit list permission for
+     * owned or consumed services when present, otherwise resolve permission within its account
+     * bounds. Never resolves, decrypts secrets, refreshes, or calls a provider.
+     * Storage and authorization failures reject.
      */
     has(request: KayAppAccountRequest): Promise<boolean>;
 }
@@ -3878,11 +3900,11 @@ export declare interface KayAppPluginApi {
      */
     readonly sessionEvents: KayAppSessionEvents;
     /**
-     * Grant-gated time-triggered workflow registration. PRESENT ONLY for a plugin holding the
-     * `workflows.define` claim in the user's grant ledger — no manifest request and no source-class
-     * gate; `undefined` otherwise. Same deny-by-default rule as {@link corpus}: an ungranted plugin
-     * cannot even reference the capability, so guard with `if (app.workflows === undefined) return;`
-     * rather than assuming it is there.
+     * Grant-gated time-triggered workflow registration. Present for a plugin the host has a workflow
+     * namespace for; `undefined` otherwise. The first `define` asks for the `workflows.define` claim
+     * in the user's grant ledger — no manifest request and no source-class gate — and it is decided
+     * once `activate()` resolves: an ungranted plugin does not start until the user allows it. A
+     * plugin that defines no workflow is never asked.
      */
     readonly workflows?: KayAppWorkflows;
     /**
@@ -3988,12 +4010,7 @@ export declare interface KayAppPluginApi {
 }
 
 export declare interface KayAppPluginEvents {
-    publish(localId: string, payload: unknown, options?: {
-        readonly subject?: {
-            readonly kind: string;
-            readonly id?: string;
-        };
-    }): void;
+    publish(localId: string, input: PluginEventPublishInput): void;
 }
 
 export declare type KayAppProcessingSpeed = "standard" | "fast";
@@ -4126,12 +4143,12 @@ export declare interface KayAppRepos {
 
 /** What the plugin is asking for, and what it intends to do with it. */
 export declare interface KayAppResolveCredentialRequest {
-    /** An auth service this plugin's own manifest declares, by its LOCAL id. */
+    /** A granted service: local ID when owned, globally qualified ID when consumed. */
     readonly serviceId: string;
-    /** Exact scheme to require; omit to resolve the service's sole connected scheme. */
+    /** Local scheme ID when owned, globally qualified when consumed; omit for the sole connected scheme. */
     readonly schemeId?: string;
     /**
-     * One of the `purposes` the declared service lists. The host pins the resolved grant to it, so a
+     * One of the service's `purposes` admitted by the manifest grant. The host pins the grant to it, so a
      * credential taken for `"transcription"` cannot be replayed for anything else.
      */
     readonly purpose: string;
@@ -4140,8 +4157,8 @@ export declare interface KayAppResolveCredentialRequest {
 /**
  * ---
  * responsibility: The plugin-facing credential surface of the `kay.app` target SDK. A daemon-hosted
- *   plugin resolves the credential for an auth service **it declared in its own manifest**, so a
- *   cloud adapter's secret is read where the work happens and never crosses a process boundary.
+ *   plugin lists account metadata or resolves credentials for an owned or consumed auth service
+ *   under explicit grants. Credential material is read where the work happens.
  * owns:
  *   - {@link KayAppAuth}, {@link KayAppResolvedCredential}.
  * does_not_own:
@@ -4152,8 +4169,8 @@ export declare interface KayAppResolveCredentialRequest {
  * ## Deny-by-default
  *
  * `KayAppPluginApi.auth` is **present only for plugins the host grants** (`auth.operations`
- * containing `"list"` or `"resolve"` in `permissions.byTarget["kay.app"]`, against a service the manifest
- * declares) and `undefined` otherwise — an ungranted plugin cannot even reference the capability.
+ * containing `"list"` or `"resolve"` in `permissions.byTarget["kay.app"]`, against an owned or consumed
+ * service) and `undefined` otherwise — an ungranted plugin cannot even reference the capability.
  * This mirrors `KayAppPluginApi.corpus`, and it is the rule for every capability behind a grant:
  * never hand a plugin an object whose grant is decorative.
  *
@@ -5967,6 +5984,8 @@ export declare interface KayAppWhiteboardTypes {
  *   different process. Anything you need later belongs in a step's return value.
  */
 export declare interface KayAppWorkflowContext {
+    /** State from the last successful run; undefined until a run saves it. */
+    readonly state: JsonValue | undefined;
     readonly automationId: string;
     readonly runId: string;
     readonly match: Extract<KayAppAutomationMatch, {
@@ -6039,6 +6058,8 @@ export declare interface KayAppWorkflowDefinition {
         readonly kind: "time";
     }>;
     readonly run: (context: KayAppWorkflowContext) => Promise<{
+        /** Replacement JSON state, at most 64 KiB; omission keeps the previous value. */
+        readonly state?: JsonValue | undefined;
         readonly summary: KayAppRunSummary;
         readonly produced?: KayAppRunProduced;
         readonly effect?: KayAppRunEffect;
@@ -7149,6 +7170,8 @@ declare function Partial_2<Type extends TSchema>(type: Type, options?: TSchemaOp
 /** Creates a deferred Partial action. */
 declare function PartialDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TPartialDeferred<Type>;
 
+export { pathToFileURL }
+
 declare const Pattern: (input: string) => [unknown, string] | [];
 
 declare const PatternBase: (input: string) => [unknown, string] | [];
@@ -7309,6 +7332,42 @@ export declare const PluginAgentDefinitionPermissionRule: z.ZodObject<{
 
 export declare type PluginAgentDefinitionPermissionRule = z.infer<typeof PluginAgentDefinitionPermissionRule>;
 
+export declare const PluginEventEnvelope: z.ZodObject<{
+    id: z.ZodString;
+    localId: z.ZodString;
+    type: z.ZodString;
+    version: z.ZodNumber;
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodISODateTime;
+    publishedAt: z.ZodISODateTime;
+    source: z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+        layer: z.ZodLiteral<"runtime">;
+        pluginId: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    payload: z.ZodOptional<z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>;
+}, z.core.$strict>;
+
+export declare type PluginEventEnvelope = z.infer<typeof PluginEventEnvelope>;
+
+export declare const PluginEventPublishInput: z.ZodObject<{
+    uri: z.ZodString;
+    related: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>>;
+    key: z.ZodOptional<z.ZodString>;
+    occurredAt: z.ZodOptional<z.ZodISODateTime>;
+    source: z.ZodOptional<z.ZodObject<{
+        poller: z.ZodOptional<z.ZodString>;
+        runId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    payload: z.ZodOptional<z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>;
+}, z.core.$strict>;
+
+export declare type PluginEventPublishInput = z.infer<typeof PluginEventPublishInput>;
+
 declare const Properties: (input: string) => [unknown, string] | [];
 
 declare function PropertiesMapping(input: [unknown, unknown, unknown]): unknown;
@@ -8605,7 +8664,7 @@ declare interface SystemOneClient {
     decide<const Q extends DecideQuestions>(request: DecideRequest<Q>, options?: SystemOneCallOptions): Promise<Decision<Q>>;
     extract<const F extends ExtractFields>(request: ExtractRequest<F>, options?: SystemOneCallOptions): Promise<Extraction<F>>;
     /** Whether some provider in the current order can serve `(kind, model)`. Never rejects. */
-    availability(kind: SystemOneKind, model?: SystemOneModelId): Promise<Availability>;
+    availability(kind: SystemOneKind, model: SystemOneModelId): Promise<Availability>;
 }
 
 /**
@@ -8640,6 +8699,12 @@ declare type SystemOneFailureCause = {
     readonly kind: "invalid-answer";
 };
 
+/** One PNG attachment. `data` is padded base64, without a data-URL prefix. */
+declare interface SystemOneImage {
+    readonly mimeType: "image/png";
+    readonly data: string;
+}
+
 /**
  * ---
  * responsibility: The data shapes of the System One surface: models, the decide and extract
@@ -10833,6 +10898,14 @@ declare interface Tool<TParameters extends TSchema = TSchema> {
     constrainedSampling?: false | ConstrainedSamplingConfig;
 }
 
+/**
+ * The closed vocabulary of tool call failure codes. The engine and the tools
+ * mint only these; a returned failure with a code outside it is not a
+ * classification (the engine records the rejection on an unexplained failure),
+ * and a stored record with one reads as none.
+ */
+declare const TOOL_CALL_FAILURE_CODES: readonly ["tool.invalid_input", "tool.blocked", "tool.cancelled", "tool.timeout", "tool.not_found", "tool.unavailable", "tool.execution_failed", "provider.http", "provider.api", "provider.transport", "uri.not_found", "uri.unsupported_operation", "uri.not_connected", "uri.auth_unavailable", "permission.denied", "edit.empty_edits", "edit.text_not_found", "edit.text_not_unique", "edit.empty_old_text", "edit.overlapping_edits", "edit.no_change"];
+
 /**
  * ---
  * responsibility: The declarative permission classification a tool carries on its definition
@@ -10877,6 +10950,56 @@ declare interface ToolCall {
     argumentsError?: string;
 }
 
+/**
+ * The lane's classification of why one tool invocation failed: a searchable
+ * machine code and the cause the tool or engine classified at execution.
+ */
+declare interface ToolCallFailure extends ToolCallFailureCause {
+    readonly code: ToolCallFailureCode;
+}
+
+declare type ToolCallFailureCause = z.infer<typeof toolCallFailureCauseSchema>;
+
+declare const toolCallFailureCauseSchema: z.ZodObject<{
+    category: z.ZodEnum<{
+        cancelled: "cancelled";
+        timeout: "timeout";
+        unknown: "unknown";
+        provider: "provider";
+        "invalid-input": "invalid-input";
+        "not-connected": "not-connected";
+        "unsupported-operation": "unsupported-operation";
+        "not-found": "not-found";
+        permission: "permission";
+        unavailable: "unavailable";
+    }>;
+    retryable: z.ZodBoolean;
+    action: z.ZodEnum<{
+        unknown: "unknown";
+        none: "none";
+        retry: "retry";
+        "correct-input": "correct-input";
+        connect: "connect";
+    }>;
+    details: z.ZodOptional<z.ZodObject<{
+        moduleId: z.ZodOptional<z.ZodString>;
+        toolOwnerId: z.ZodOptional<z.ZodString>;
+        operation: z.ZodOptional<z.ZodString>;
+        uri: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+        validationField: z.ZodOptional<z.ZodString>;
+        errorName: z.ZodOptional<z.ZodString>;
+        errorCode: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodNumber>;
+        editIndex: z.ZodOptional<z.ZodNumber>;
+        occurrences: z.ZodOptional<z.ZodNumber>;
+        retryAfterMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+
+declare type ToolCallFailureCode = (typeof TOOL_CALL_FAILURE_CODES)[number];
+
 /** A call to judge with {@link ToolContext.checkToolCallPermission}. */
 declare interface ToolCallPermissionCheck {
     readonly toolName: string;

package/dist/kay-app.js

@@ -163,6 +163,9 @@ function invalidObservation(input) {
   };
 }
 
+// packages/plugin-sdk/dist/kay-app/index.js
+import { pathToFileURL } from "node:url";
+
 // packages/herd-uri/dist/errors.js
 var UriError = class extends Error {
 };
@@ -537,6 +540,7 @@ export {
   invalidObservation,
   isRetryable,
   parseLineSelector,
+  pathToFileURL,
   payload,
   transcriptMessageText,
   transcriptMessageTexts,