@yaklabs-ai/plugin-sdk 0.15.3 → 0.26.3

package/README.md

@@ -13,7 +13,7 @@ it under the name your plugin code actually imports:
 ```json
 {
   "dependencies": {
-    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.15.3"
+    "@bonsai/plugin-sdk": "npm:@yaklabs-ai/plugin-sdk@^0.26.3"
   }
 }
 ```
@@ -62,7 +62,7 @@ Every tool the entrypoint registers is declared in the manifest too:
   "description": "Greets people by name.",
   "version": "0.1.0",
   "namespace": "widgets",
-  "compatibility": { "sdk": "^0.15.3" },
+  "compatibility": { "sdk": "^0.26.3" },
   "targets": {
     "kay": {
       "agent": {
@@ -109,6 +109,24 @@ export default function activate(api: KayAgentPluginApi): void {
 }
 ```
 
+The manifest can instead describe the tool whole. Give the entry `parameters` (a JSON Schema,
+here `{ "type": "object", "properties": { "name": { "type": "string" } }, "required": ["name"] }`),
+and the entrypoint supplies only the call. Bonsai builds the tool from the manifest entry:
+
+```ts
+import { textResult, toolExecute, z } from "@bonsai/plugin-sdk/kay-agent";
+import type { KayAgentPluginApi } from "@bonsai/plugin-sdk/kay-agent";
+
+export default function activate(api: KayAgentPluginApi): void {
+  api.implementTool(
+    "greet",
+    toolExecute(z.object({ name: z.string() }), async (_toolCallId, params) =>
+      textResult(`Hello, ${params.name}!`, undefined),
+    ),
+  );
+}
+```
+
 An entrypoint that exports a named `activate` instead, as older plugins do,
 still loads. Bonsai reads the default export from plugin SDK 0.13.5 on, and the
 `compatibility.sdk` range makes an older Bonsai refuse the plugin with a message
@@ -131,13 +149,15 @@ naming both versions, instead of loading it and finding no `activate`.
 | `@bonsai/plugin-sdk/system-one`         | The types and error class for `api.systemOne` / `app.systemOne`, from 0.13.8    |
 | `@bonsai/plugin-sdk/zod`                | `z` (the host's in the daemon), on an entry with no other import, from 0.13.9   |
 
-A plugin that imports a subpath declares at least the version its row names (`^0.13.7` for the
-four from 0.13.7, `^0.13.8` for `system-one`, `^0.13.9` for `zod`). `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
+A plugin that imports these subpaths declares the current supported SDK range (`^0.19.0`).
+The rows record when each subpath appeared, not retained runtime compatibility. `vendored-mcp` builds the plugin's URI module (its link cards and help); hosting the
 vendor's MCP server itself is a separate host decision: Bonsai hosts it once a person approves
 the plugin's `mcp.host-server` grant for that server's name and URL. A server that needs an OAuth
 sign-in names one of the plugin's auth services in `authService`; that service must declare exactly
 one `delegated` scheme, which Bonsai uses to sign the person in to the server. Bonsai declares that
-scheme at runtime; the plugin's code must not declare it again.
+scheme at runtime; the plugin's code must not declare it again. From 0.16.2 a plugin's code can also
+call the server's tools through `api.vendoredMcp.port(<server>)`, typed by this subpath's
+`VendoredMcpPort` and `VendoredMcpOutcome` (declare `^0.19.0`).
 
 From 0.13.10 the manifest schema carries two facts Bonsai reads for its own plugins only; another
 plugin's are ignored, with a load diagnostic. An `external-cli` auth scheme's `cli` says how Bonsai

package/THIRD-PARTY-INVENTORY.json

@@ -1,28 +1,28 @@
 {
   "schemaVersion": 1,
   "package": "@yaklabs-ai/plugin-sdk",
-  "version": "0.15.3",
+  "version": "0.26.3",
   "target": "npm",
   "firstPartyLicense": "MIT",
   "bundled": [
     {
       "name": "@earendil-works/pi-ai",
-      "version": "1.3.0",
+      "version": "1.4.0",
       "license": "MIT",
       "copyright": "Copyright (c) 2025 Mario Zechner",
-      "source": "https://github.com/earendil-works/pi/tree/v1.3.0/packages/ai",
-      "licenseSource": "https://github.com/earendil-works/pi/blob/v1.3.0/LICENSE",
-      "upstreamCommit": "71023aec1546d6d677a65669c5665c0927ce0dd0",
+      "source": "https://github.com/earendil-works/pi/tree/v1.4.0/packages/ai",
+      "licenseSource": "https://github.com/earendil-works/pi/blob/v1.4.0/LICENSE",
+      "upstreamCommit": "4a080252f06caf63a525d7873c5d94d3c23887e0",
       "noticeFile": "THIRD-PARTY-NOTICES.md"
     },
     {
       "name": "@earendil-works/chord",
-      "version": "1.3.0",
+      "version": "1.4.0",
       "license": "MIT",
       "copyright": "Copyright (c) 2025 Mario Zechner",
-      "source": "https://github.com/earendil-works/pi/tree/v1.3.0/packages/chord",
-      "licenseSource": "https://github.com/earendil-works/pi/blob/v1.3.0/LICENSE",
-      "upstreamCommit": "71023aec1546d6d677a65669c5665c0927ce0dd0",
+      "source": "https://github.com/earendil-works/pi/tree/v1.4.0/packages/chord",
+      "licenseSource": "https://github.com/earendil-works/pi/blob/v1.4.0/LICENSE",
+      "upstreamCommit": "4a080252f06caf63a525d7873c5d94d3c23887e0",
       "noticeFile": "THIRD-PARTY-NOTICES.md"
     },
     {

package/THIRD-PARTY-NOTICES.md

@@ -2,17 +2,17 @@
 
 This package bundles 3 first-party-selected component(s). The notices below are reproduced verbatim from each component's upstream MIT license source.
 
-## @earendil-works/pi-ai@1.3.0
+## @earendil-works/pi-ai@1.4.0
 
-- Source: https://github.com/earendil-works/pi/tree/v1.3.0/packages/ai
-- License source: https://github.com/earendil-works/pi/blob/v1.3.0/LICENSE
-- Upstream commit: 71023aec1546d6d677a65669c5665c0927ce0dd0
+- Source: https://github.com/earendil-works/pi/tree/v1.4.0/packages/ai
+- License source: https://github.com/earendil-works/pi/blob/v1.4.0/LICENSE
+- Upstream commit: 4a080252f06caf63a525d7873c5d94d3c23887e0
 
-## @earendil-works/chord@1.3.0
+## @earendil-works/chord@1.4.0
 
-- Source: https://github.com/earendil-works/pi/tree/v1.3.0/packages/chord
-- License source: https://github.com/earendil-works/pi/blob/v1.3.0/LICENSE
-- Upstream commit: 71023aec1546d6d677a65669c5665c0927ce0dd0
+- Source: https://github.com/earendil-works/pi/tree/v1.4.0/packages/chord
+- License source: https://github.com/earendil-works/pi/blob/v1.4.0/LICENSE
+- Upstream commit: 4a080252f06caf63a525d7873c5d94d3c23887e0
 
 License text for the component(s) above, verbatim from the license source:
 

package/dist/agent-conversation.d.ts

@@ -8,7 +8,7 @@ export declare function admittedSendSessionId(details: unknown): string | undefi
  * forever: version 2 (the messaging contract) writes
  * `{ version: 2, sessionId, displayName, backgroundTaskId }` and exists only
  * for admitted spawns (rejections are tool errors and stamp nothing);
- * version 1 wrote `{ version: 1, accepted, childSessionId, label, … }`, where
+ * version 1 wrote `{ version: 1, accepted, childSessionId, label, ... }`, where
  * `accepted: false` carries no child session.
  */
 export declare function admittedSpawnSessionId(details: unknown): string | undefined;