@yaklabs-ai/plugin-sdk 0.14.1 → 0.15.0

package/dist/system-one.d.ts

@@ -42,7 +42,7 @@ export declare interface DecideChoiceQuestion<L extends string = string> {
 /** What a question asks: text, or a JSON object the client sends as its JSON text. */
 export declare type DecideInstructions = string | object;
 
-export declare type DecideModelId = "jev" | "clef" | "clef-flash";
+export declare type DecideModelId = "jev" | "clef" | "clef-flash" | "gpt-6-luna";
 
 export declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion | DecideScoreQuestion;
 
@@ -50,10 +50,10 @@ export declare type DecideQuestion = DecideBoolQuestion | DecideChoiceQuestion |
 export declare type DecideQuestions = Readonly<Record<string, DecideQuestion>>;
 
 export declare interface DecideRequest<Q extends DecideQuestions = DecideQuestions> {
-    /** Defaults to `jev`. */
-    readonly model?: DecideModelId;
+    readonly model: DecideModelId;
     readonly state: DecideState;
     readonly questions: Q;
+    readonly image?: SystemOneImage;
 }
 
 export declare interface DecideScoreAnswer {
@@ -243,7 +243,7 @@ export declare interface SystemOneClient {
     decide<const Q extends DecideQuestions>(request: DecideRequest<Q>, options?: SystemOneCallOptions): Promise<Decision<Q>>;
     extract<const F extends ExtractFields>(request: ExtractRequest<F>, options?: SystemOneCallOptions): Promise<Extraction<F>>;
     /** Whether some provider in the current order can serve `(kind, model)`. Never rejects. */
-    availability(kind: SystemOneKind, model?: SystemOneModelId): Promise<SystemOneAvailability>;
+    availability(kind: SystemOneKind, model: SystemOneModelId): Promise<SystemOneAvailability>;
 }
 
 /**
@@ -297,6 +297,12 @@ export declare type SystemOneFailureCause = {
     readonly kind: "invalid-answer";
 };
 
+/** One PNG attachment. `data` is padded base64, without a data-URL prefix. */
+export declare interface SystemOneImage {
+    readonly mimeType: "image/png";
+    readonly data: string;
+}
+
 /**
  * ---
  * responsibility: The data shapes of the System One surface: models, the decide and extract

package/dist/system-one.js

@@ -23,20 +23,6 @@ function isSystemOneError(error) {
   return error instanceof SystemOneError;
 }
 
-// packages/system-one/dist/models.js
-var DEFAULT_DECIDE_MODEL = "jev";
-var SYSTEM_ONE_LIMITS = {
-  /** The serialized request body, in bytes. */
-  maxBodyBytes: 64 * 1024,
-  maxQuestions: 64,
-  maxFields: 32,
-  minChoiceOptions: 2,
-  maxChoiceOptions: 255,
-  minScoreLevels: 2,
-  maxScoreLevels: 10,
-  maxForecastHorizon: 64
-};
-
 // packages/system-one/dist/unavailable.js
 var NOT_SERVED = {
   available: false,
@@ -48,7 +34,7 @@ function createUnavailableSystemOneClient() {
     decide(request) {
       return Promise.reject(new SystemOneError({
         kind: "decide",
-        model: request.model ?? DEFAULT_DECIDE_MODEL,
+        model: request.model,
         cause: { kind: "not-served" }
       }));
     },
@@ -62,6 +48,22 @@ function createUnavailableSystemOneClient() {
     availability: () => Promise.resolve(NOT_SERVED)
   };
 }
+
+// packages/system-one/dist/models.js
+var SYSTEM_ONE_LIMITS = {
+  /** The serialized state and questions, in bytes; images have a separate budget. */
+  maxBodyBytes: 64 * 1024,
+  maxImageBytes: 4 * 1024 * 1024,
+  maxImagePixels: 16e6,
+  maxImageBodyBytes: 6 * 1024 * 1024,
+  maxQuestions: 64,
+  maxFields: 32,
+  minChoiceOptions: 2,
+  maxChoiceOptions: 255,
+  minScoreLevels: 2,
+  maxScoreLevels: 10,
+  maxForecastHorizon: 64
+};
 export {
   SystemOneError,
   createUnavailableSystemOneClient,

package/dist/transcript.d.ts

@@ -1,5 +1,7 @@
 import { z } from 'zod';
 
+export declare const ATTACHMENTS_CUSTOM_TYPE = "attachments";
+
 /**
  * The ids on a session's active branch: the leaf chain walked parent-ward from
  * the tip, which a trailing `leaf` marker moves. Empty for an empty log.
@@ -43,6 +45,36 @@ export declare function matchesWorkBlock(coverage: WorkBlockCoverage, toolResult
  */
 export declare const NON_ACTIVITY_TOOL_NAMES: readonly string[];
 
+/**
+ * What a run did to a URI. The words match the automation run wire's artifact actions. When one
+ * run both creates and updates a URI, the reader reports `created`.
+ */
+declare type ProducedResourceAction = "created" | "updated";
+
+/** One URI a tool call created or updated as a side effect. */
+declare interface ProducedResourceDeclaration {
+    /** A `scheme://…` URI or an absolute local file path, compared as an exact string. */
+    readonly uri: string;
+    readonly action: ProducedResourceAction;
+}
+
+/**
+ * One tool result's declarations. `absent` covers every result that makes no claim, including a
+ * non-object `details` and an empty list. `malformed` means a claim was made that cannot be
+ * trusted; the reader reports a gap for it instead of keeping the parts that look valid.
+ */
+declare type ProducedResourceDeclarationsRead = {
+    readonly kind: "absent";
+} | {
+    readonly kind: "malformed";
+} | {
+    readonly kind: "declared";
+    readonly resources: readonly ProducedResourceDeclaration[];
+};
+
+/** Read the declarations that one persisted tool result's `details` carries. */
+export declare function readProducedResourceDeclarations(details: unknown): ProducedResourceDeclarationsRead;
+
 /**
  * The daemon's own run-start record. A run's entries begin here, before the
  * user message that opened it.

package/dist/transcript.js

@@ -94,7 +94,47 @@ var NON_ACTIVITY_TOOL_NAMES = [
 ];
 var WORK_HEADLINE_MIN_CHARS = 12;
 var WORK_HEADLINE_MAX_CHARS = 90;
+
+// packages/herd-transcript/dist/context-messages.js
+var ATTACHMENTS_CUSTOM_TYPE = "attachments";
+
+// packages/herd-uri/dist/produced-resources.js
+var PRODUCED_RESOURCES_DETAILS_KEY = "producedResources";
+var ABSENT = { kind: "absent" };
+var MALFORMED = { kind: "malformed" };
+var SCHEME_URI = /^[a-z][a-z0-9+.-]*:\/\/./;
+var WINDOWS_ABSOLUTE_PATH = /^[A-Za-z]:[\\/]./;
+function isProducedResourceUri(value) {
+  if (typeof value !== "string" || value.trim() !== value)
+    return false;
+  return SCHEME_URI.test(value) || value.startsWith("/") && value.length > 1 || WINDOWS_ABSOLUTE_PATH.test(value);
+}
+function isProducedResourceDeclaration(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return false;
+  }
+  const keys = Object.keys(value);
+  if (keys.length !== 2 || !keys.includes("uri") || !keys.includes("action")) {
+    return false;
+  }
+  const record = value;
+  return isProducedResourceUri(record.uri) && (record.action === "created" || record.action === "updated");
+}
+function readProducedResourceDeclarations(details) {
+  if (typeof details !== "object" || details === null || Array.isArray(details) || !Object.hasOwn(details, PRODUCED_RESOURCES_DETAILS_KEY)) {
+    return ABSENT;
+  }
+  const claimed = details[PRODUCED_RESOURCES_DETAILS_KEY];
+  if (!Array.isArray(claimed))
+    return MALFORMED;
+  if (claimed.length === 0)
+    return ABSENT;
+  if (!claimed.every(isProducedResourceDeclaration))
+    return MALFORMED;
+  return { kind: "declared", resources: claimed };
+}
 export {
+  ATTACHMENTS_CUSTOM_TYPE,
   NON_ACTIVITY_TOOL_NAMES,
   RUN_STARTED_CUSTOM_TYPE,
   RUN_TERMINAL_CUSTOM_TYPE,
@@ -105,6 +145,7 @@ export {
   branchEntryIds,
   customEntriesFromEntries,
   matchesWorkBlock,
+  readProducedResourceDeclarations,
   turnSegments,
   workBlockCoverage,
   workBlockKey

package/dist/vendored-mcp.d.ts

@@ -22,8 +22,8 @@
  * This module's `read` is a pure projection of the URI it was handed — no network, no credential.
  * Declaring `requiresAuth` anyway would not be a harmless formality: an auth-gated module whose
  * binding is unsatisfied has its public-web `urlPattern` claims suppressed and its `matches()`
- * wrapped to decline `http(s)` (`agent-session.ts` `_suppressPublicUrlClaims`, and
- * `authSuppressedCatalogModule` for discovery). A pasted Supabase link would therefore stay
+ * wrapped to decline `http(s)` (herd-agent's `uri-catalog-projection.ts`: `suppressPublicUrlClaims`,
+ * and `authSuppressedCatalogModule` for discovery). A pasted Supabase link would therefore stay
  * unbranded for every user who has not yet connected Supabase — which is exactly the user the
  * branded pill is for. The vendor's MCP tools remain gated on their own, by the MCP host.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yaklabs-ai/plugin-sdk",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "description": "The Kay plugin SDK — types and helpers for authoring a Kay directory plugin.",
   "author": "YakLabs",
   "type": "module",

package/skills/directory-plugin-authoring/SKILL.md

@@ -289,10 +289,10 @@ on the plugin's row (or on the plugin source's row, when the whole source found
 
 A directory plugin does not request workflows in its manifest. During `kay.app` activation, call
 `app.workflows.define(localId, { name, trigger, run })` to put a durable, daemon-scheduled row on
-the Automations page. The host raises the `workflows.define` claim for every `kay.app` plugin; a
-bundled install holds every grant, while a directory plugin needs the user to add that grant to its
-`installs` row. Source class no longer decides workflow authority, and the capability is ABSENT
-rather than refused when ungranted, so guard on `app.workflows === undefined`.
+the Automations page. The first `define` raises the `workflows.define` claim, decided once
+`activate()` resolves; a bundled install holds every grant, while a directory plugin needs the user
+to add that grant to its `installs` row, and until then it does not start. Source class no longer
+decides workflow authority. `app.workflows` is absent only for a plugin with no workflow namespace.
 
 The product-agent procedure is the builtin skill `create-workflow`
 (`packages/agent-runtime/src/kay/builtin-skills/`), and the API reference is the "Durable Workflows