@yaklabs-ai/plugin-sdk 0.15.0 → 0.15.2

package/dist/disclosure.d.ts

@@ -7077,6 +7077,14 @@ declare type ToolParametersWire = unknown;
  * declares {@link ToolPermissionHint.quiet} and keeps its honest `kind`.
  */
 declare interface ToolPermissionHint {
+    /**
+     * Names this exact call for the approval card, from its validated input: a title and optional
+     * labelled facts. Render-only: never matched against a rule, never one-tap approval grounds.
+     * The tool says what its input claims, so the gate shows it as the tool's claim, not as the
+     * daemon's attestation. The host admits only display-safe text; a throw, a blank title or an
+     * unsafe string costs the description and the call is asked about as before.
+     */
+    readonly describePreview?: (input: Record<string, unknown>) => ToolPreviewDescription | undefined;
     readonly kind?: ToolActionKind;
     readonly scheme?: string;
     readonly ruleKey?: string;
@@ -7203,6 +7211,16 @@ declare interface ToolPermissionHint {
     readonly defaultPermission?: "allow" | "ask" | "never";
 }
 
+/** What {@link ToolPermissionHint.describePreview} answers. */
+declare interface ToolPreviewDescription {
+    readonly title: string;
+    readonly description?: string;
+    readonly fields?: readonly {
+        readonly label: string;
+        readonly value: string;
+    }[];
+}
+
 /** Controls whether a tool is expected to complete inline or via background adoption. */
 declare type ToolRunPolicy = "inline" | "background";
 

package/dist/kay-agent-testing.d.ts

@@ -7000,6 +7000,14 @@ declare type ToolParametersWire = unknown;
  * declares {@link ToolPermissionHint.quiet} and keeps its honest `kind`.
  */
 declare interface ToolPermissionHint {
+    /**
+     * Names this exact call for the approval card, from its validated input: a title and optional
+     * labelled facts. Render-only: never matched against a rule, never one-tap approval grounds.
+     * The tool says what its input claims, so the gate shows it as the tool's claim, not as the
+     * daemon's attestation. The host admits only display-safe text; a throw, a blank title or an
+     * unsafe string costs the description and the call is asked about as before.
+     */
+    readonly describePreview?: (input: Record<string, unknown>) => ToolPreviewDescription | undefined;
     readonly kind?: ToolActionKind;
     readonly scheme?: string;
     readonly ruleKey?: string;
@@ -7126,6 +7134,16 @@ declare interface ToolPermissionHint {
     readonly defaultPermission?: "allow" | "ask" | "never";
 }
 
+/** What {@link ToolPermissionHint.describePreview} answers. */
+declare interface ToolPreviewDescription {
+    readonly title: string;
+    readonly description?: string;
+    readonly fields?: readonly {
+        readonly label: string;
+        readonly value: string;
+    }[];
+}
+
 /** Controls whether a tool is expected to complete inline or via background adoption. */
 declare type ToolRunPolicy = "inline" | "background";
 

package/dist/kay-agent.d.ts

@@ -9053,6 +9053,14 @@ export declare type ToolParametersWire = unknown;
  * declares {@link ToolPermissionHint.quiet} and keeps its honest `kind`.
  */
 declare interface ToolPermissionHint {
+    /**
+     * Names this exact call for the approval card, from its validated input: a title and optional
+     * labelled facts. Render-only: never matched against a rule, never one-tap approval grounds.
+     * The tool says what its input claims, so the gate shows it as the tool's claim, not as the
+     * daemon's attestation. The host admits only display-safe text; a throw, a blank title or an
+     * unsafe string costs the description and the call is asked about as before.
+     */
+    readonly describePreview?: (input: Record<string, unknown>) => ToolPreviewDescription | undefined;
     readonly kind?: ToolActionKind;
     readonly scheme?: string;
     readonly ruleKey?: string;
@@ -9179,6 +9187,16 @@ declare interface ToolPermissionHint {
     readonly defaultPermission?: "allow" | "ask" | "never";
 }
 
+/** What {@link ToolPermissionHint.describePreview} answers. */
+declare interface ToolPreviewDescription {
+    readonly title: string;
+    readonly description?: string;
+    readonly fields?: readonly {
+        readonly label: string;
+        readonly value: string;
+    }[];
+}
+
 /** Controls whether a tool is expected to complete inline or via background adoption. */
 export declare type ToolRunPolicy = "inline" | "background";
 

package/dist/kay-app-session-summary.d.ts

@@ -505,6 +505,7 @@ declare interface CustomAgentMessages {
     userInvoked: UserInvokedMessage;
     availabilityFacts: AvailabilityFactsMessage;
     midTurnCompactionOutcome: MidTurnCompactionOutcomeMessage;
+    runContinuationCarrier: RunContinuationCarrierMessage;
     subagentResult: SubagentResultMessage;
     backgroundTaskResult: BackgroundTaskResultMessage;
 }
@@ -1235,12 +1236,23 @@ declare interface KayAppCorpus {
      */
     readEntries(sessionId: string): AsyncIterable<TranscriptEntry>;
     /**
-     * Read one bounded physical JSONL page. The host resolves `sessionId` to its authoritative
-     * indexed path and validates the opaque cursor before opening it. When `throughEntryId` is
-     * supplied, the cursor stops at that entry's transaction line; a V4 line may carry later
-     * entries, which are returned for the caller to filter and are replayed on the next page.
-     * A page can hold no entries at all (a run of storage lines) while more follows; a record
-     * longer than the page is stepped over and counted in `oversizedRecords`.
+     * Active-branch entries from the latest canonical human turn opener (send companions included)
+     * through the anchor, oldest first. Mid-turn steers and machine wakes remain inside that window;
+     * attachment-only openers and fresh card answers count. Missing sessions/anchors return [];
+     * unsupported hosts may omit it.
+     * Reads never fall back to materializing the full log.
+     */
+    readLatestHumanWindow?(sessionId: string, options?: {
+        readonly throughEntryId?: string;
+    }): Promise<readonly TranscriptEntry[]>;
+    /**
+     * Read one bounded page of a session's stored transcript. The host resolves `sessionId` to its
+     * authoritative indexed path and validates the opaque cursor before reading. When
+     * `throughEntryId` is supplied, the page ends at that entry and the cursor stays at the start of
+     * the commit holding it: the commit's other entries are returned for the caller to filter, and
+     * the next page replays that commit. A page can hold no entries at all (storage records with no
+     * entry) while more follows; a record longer than the page is stepped over and counted in
+     * `oversizedRecords`.
      */
     readEntryBatch?(sessionId: string, options?: {
         readonly cursor?: JsonValue_3;
@@ -1255,7 +1267,7 @@ declare interface KayAppCorpus {
     readSessionSourceMark(sessionId: string): Promise<KayAppCorpusSourceMark | undefined>;
 }
 
-/** One bounded physical page from the host's incremental JSONL reader. */
+/** One bounded page from the host's stored transcript reader. */
 declare interface KayAppCorpusEntryBatch {
     readonly entries: readonly TranscriptEntry[];
     /** Opaque JSON cursor after the physical page; only the host may interpret it or open its path. */
@@ -1758,13 +1770,7 @@ declare interface MessageEntry extends EntryBase {
 /** TypeBox instantiation metrics */
 declare const Metrics: TMetrics;
 
-/**
- * A hidden kernel statement delivered before resuming a tool-requested compaction stop.
- *
- * Module-local, unlike every sibling above it: this message is never rendered and never matched
- * by name outside this file, so exporting the string would only publish something no surface
- * consumes. It earns an export the day one needs to recognise it.
- */
+/** A hidden kernel statement delivered before resuming a tool-requested compaction stop. */
 declare const MID_TURN_COMPACTION_OUTCOME_CUSTOM_TYPE = "mid_turn_compaction_outcome";
 
 declare interface MidTurnCompactionOutcomeDetails {
@@ -2424,6 +2430,34 @@ declare function ReturnType_2<Type extends TSchema>(type: Type, options?: TSchem
 /** Creates a deferred ReturnType action. */
 declare function ReturnTypeDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TReturnTypeDeferred<Type>;
 
+/**
+ * The hidden message a continued run rides as its admission ticket (a mid-turn compaction
+ * resume, a run-recovery re-drive). The engine writes it; this package's placement rows keep it
+ * out of the canonical transcript.
+ */
+declare const RUN_CONTINUATION_CARRIER_CUSTOM_TYPE = "herd_run_continuation";
+
+/**
+ * What a {@link RUN_CONTINUATION_CARRIER_CUSTOM_TYPE} carrier records about the failed turns it
+ * continues.
+ */
+declare interface RunContinuationCarrierDetails {
+    readonly provenance: {
+        readonly source: "core";
+    };
+    /**
+     * Visible text the failed turns since the previous carrier streamed before they died. Absent
+     * when they showed none (thinking, an unexecuted tool call, or a thrown attempt): such a
+     * carrier is plain.
+     */
+    readonly shownText?: string;
+}
+
+declare type RunContinuationCarrierMessage = CustomMessage<RunContinuationCarrierDetails> & {
+    readonly customType: typeof RUN_CONTINUATION_CARRIER_CUSTOM_TYPE;
+    readonly display: false;
+};
+
 /**
  * A durable runtime notice: the daemon telling the HUMAN, in the transcript,
  * that something it was going to do on their behalf did not happen — and why.
@@ -2884,6 +2918,7 @@ declare const SessionProvenanceRecord: z.ZodObject<{
             cron: "cron";
             occurrence: "occurrence";
             "uri-change": "uri-change";
+            "plugin-event": "plugin-event";
             manual: "manual";
         }>;
     }, z.core.$strict>, z.ZodObject<{