@yaklabs-ai/plugin-sdk 0.15.3 → 0.27.0

package/dist/disclosure.js

@@ -2,7 +2,7 @@
 import { readFile } from "node:fs/promises";
 import { parse as parseYaml } from "yaml";
 
-// packages/herd-uri/dist/connection.js
+// packages/herd-uri/dist/claims.js
 var CONNECTION_SELECTOR_RE = /^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)@([^/]+)(?:\/(.*))?$/;
 function parseUriConnectionSelector(input) {
   const match = CONNECTION_SELECTOR_RE.exec(input.trim());
@@ -269,7 +269,7 @@ var PLUGIN_DISCLOSURE_RULES = [
   "help-throws",
   "help-uri-malformed",
   "help-uri-throws",
-  // (c) the verb-documentation floor (#2863, #2935) — what a permission surface renders
+  // (c) the verb-documentation floor (#2863, #2935) - what a permission surface renders
   "verb-coverage-missing",
   "template-operation-docs-missing",
   "verb-docs-missing",
@@ -304,7 +304,7 @@ var PLUGIN_DISCLOSURE_RULES = [
   // though the function and its prose were renamed (see PR that renamed `auditSkillCodegenPairs` to
   // free "twin" for the Skills v2 product concept): `test/disclosure/conformance-contract.test.ts`
   // pins CONTRACT_HISTORY's contract-1 entry byte-for-byte as the published SDK 0.3.0 floor, and
-  // changing a rule id string is exactly the kind of edit that test exists to catch — it would
+  // changing a rule id string is exactly the kind of edit that test exists to catch - it would
   // require appending a new CONTRACT_HISTORY entry, bumping `PLUGIN_DISCLOSURE_CONTRACT`, and
   // cutting a new SDK release, none of which this rename earns. A rule id is a wire-visible
   // string a third-party plugin's own suite may already assert on; renaming the function is free,
@@ -722,6 +722,13 @@ async function auditSkillCodegenPairFile(skill, declaration, packageDir) {
   return violations;
 }
 
+// packages/plugin-sdk/dist/kay-agent/endpoints.js
+function createUnavailableEndpoints(message) {
+  return {
+    invoke: async () => ({ ok: false, reason: "unavailable", message })
+  };
+}
+
 // packages/plugin-sdk/dist/kay-agent/interaction.js
 function unavailableInteractionSurface(message) {
   const refused = async () => ({ ok: false, reason: "unavailable", message });
@@ -741,6 +748,30 @@ function unavailableInteractionSurfaces(message) {
   };
 }
 
+// packages/plugin-sdk/dist/log.js
+function createKayPluginLog(write, bound = {}) {
+  const at = (level) => (name, message, details) => {
+    try {
+      write({
+        level,
+        name,
+        message,
+        ...details?.error === void 0 ? {} : { error: details.error },
+        ...details?.sessionId === void 0 ? {} : { sessionId: details.sessionId },
+        attributes: { ...bound, ...details?.attributes }
+      });
+    } catch {
+    }
+  };
+  return {
+    debug: at("debug"),
+    info: at("info"),
+    warn: at("warn"),
+    error: at("error"),
+    child: (attributes) => createKayPluginLog(write, { ...bound, ...attributes })
+  };
+}
+
 // packages/system-one/dist/errors.js
 var SystemOneError = class extends Error {
   cause;
@@ -841,6 +872,7 @@ function createKayAgentProbeCapabilityHandles() {
     network: INERT_NETWORK,
     webSession: INERT_WEB_SESSION,
     process: INERT_PROCESS,
+    compiler: { bundleBrowser: inertResult },
     whiteboard: INERT_WHITEBOARD,
     // Answers `unavailable` at once: a probe must never reach the user's browser or desktop.
     interaction: unavailableInteractionSurfaces("Interaction surfaces are not available while a plugin is being probed."),
@@ -851,7 +883,10 @@ function createKayAgentProbeCapabilityHandles() {
     // Fire-and-forget on the real api too, so dropping is the inert shape: nothing to hang on.
     events: { publish: () => {
     } },
-    // A probe has no user-time port, so it answers the zone as unknown — the same contract the
+    // Dropped: a probe's activation is not the plugin running, so its lines are not the plugin's.
+    log: createKayPluginLog(() => {
+    }),
+    // A probe has no user-time port, so it answers the zone as unknown - the same contract the
     // real capability keeps for a zone the host cannot read.
     time: {
       snapshot: () => ({ nowMs: 0, zone: "UTC", zoneSource: "utc-fallback" })
@@ -868,7 +903,11 @@ function createKayAgentProbeCapabilityHandles() {
       rename: inertResult
     },
     // A probe runs outside any session, and must not create a folder on the user's disk.
-    familyFolder: { path: async () => void 0 }
+    familyFolder: { path: async () => void 0 },
+    // Inert like the network broker: a probe must never reach an MCP server.
+    vendoredMcp: { port: () => ({ invoke: inertResult }) },
+    // Answers `unavailable` at once: a probe runs no app part, so no endpoint exists.
+    endpoints: createUnavailableEndpoints("Endpoints are not available while a plugin is being probed.")
   };
 }
 
@@ -882,6 +921,8 @@ function collectUriModulesFromKayAgentActivate(activate) {
       }
     },
     ...createKayAgentProbeCapabilityHandles(),
+    implementTool: () => {
+    },
     registerTool: () => {
     },
     registerSearchProvider: () => {
@@ -891,13 +932,9 @@ function collectUriModulesFromKayAgentActivate(activate) {
     registerConverter: () => {
     },
     auth: {
-      advertiseService: () => {
-      },
-      declareOAuthPkceScheme: () => {
+      registerValidator: () => {
       },
-      declareApiKeyScheme: () => {
-      },
-      declareExternalCliScheme: () => {
+      registerAccountResolver: () => {
       },
       declareDelegatedScheme: () => {
       },
@@ -908,58 +945,10 @@ function collectUriModulesFromKayAgentActivate(activate) {
   activate(fakeApi);
   return modules;
 }
-
-// packages/plugin-sdk/dist/disclosure/probe-kay-agent-auth.js
-function collectAuthDeclarationsFromKayAgentActivate(activate) {
-  const services = [];
-  const oauthPkceSchemes = [];
-  const apiKeySchemes = [];
-  const delegatedSchemes = [];
-  const fakeApi = {
-    uri: {
-      registerModule: () => {
-      }
-    },
-    ...createKayAgentProbeCapabilityHandles(),
-    registerTool: () => {
-    },
-    registerSearchProvider: () => {
-    },
-    registerInteractionDriver: () => {
-    },
-    registerConverter: () => {
-    },
-    auth: {
-      advertiseService: (descriptor) => {
-        services.push(descriptor);
-      },
-      declareOAuthPkceScheme: (serviceId, scheme) => {
-        oauthPkceSchemes.push({ serviceId, scheme });
-      },
-      declareApiKeyScheme: (serviceId, scheme) => {
-        apiKeySchemes.push({ serviceId, scheme });
-      },
-      declareExternalCliScheme: () => {
-      },
-      declareDelegatedScheme: (serviceId, scheme) => {
-        delegatedSchemes.push({ serviceId, scheme });
-      },
-      registerDelegatedServiceSource: (source) => {
-        for (const { descriptor, scheme } of source()) {
-          services.push(descriptor);
-          delegatedSchemes.push({ serviceId: descriptor.id, scheme });
-        }
-      }
-    }
-  };
-  activate(fakeApi);
-  return { services, oauthPkceSchemes, apiKeySchemes, delegatedSchemes };
-}
 export {
   PLUGIN_DISCLOSURE_CONTRACT,
   PLUGIN_DISCLOSURE_RULES,
   auditPluginDisclosure,
   auditSkillCodegenPairs,
-  collectAuthDeclarationsFromKayAgentActivate,
   collectUriModulesFromKayAgentActivate
 };