@yaklabs-ai/plugin-sdk 0.15.3 → 0.27.0

package/dist/kay-agent.js

@@ -18,57 +18,111 @@ function compileUriClaim(claim) {
     };
   }
   const pattern = compileRoutePattern(claim.pattern);
+  const normalizeTo = claim.normalizeTo === void 0 ? void 0 : compileTemplate(claim.normalizeTo);
+  const sourceUrl = claim.kind === "uriPattern" && claim.sourceUrl !== void 0 ? compileTemplate(claim.sourceUrl) : void 0;
+  const matchAt = (target, selector) => {
+    const parsed = parsePatternInput(target);
+    if (parsed === void 0)
+      return void 0;
+    const captures = matchRoute(pattern, parsed);
+    if (captures === void 0)
+      return void 0;
+    const restCaptures = pattern.restCaptures ?? [];
+    const normalized = normalizeTo === void 0 ? void 0 : fillTemplate(normalizeTo, captures, restCaptures);
+    if (normalizeTo !== void 0 && normalized === void 0)
+      return void 0;
+    const filledSourceUrl = sourceUrl === void 0 ? void 0 : fillTemplate(sourceUrl, captures, restCaptures);
+    return {
+      claimKind: claim.kind,
+      ...Object.keys(captures).length > 0 ? { captures } : {},
+      ...normalized !== void 0 ? {
+        normalizedUri: withSelector(withInputSearch(claim, pattern, parsed, normalized), parsed.protocol, selector)
+      } : {},
+      ...claim.route !== void 0 ? { route: claim.route } : {},
+      ...filledSourceUrl !== void 0 ? { sourceUrl: filledSourceUrl } : {},
+      ...claim.kind === "uriPattern" && claim.title !== void 0 ? { title: fillTitle(claim.title, captures) } : {}
+    };
+  };
   return {
     claim,
     match(input) {
-      const parsed = parsePatternInput(input);
-      if (parsed === void 0)
-        return void 0;
-      const captures = matchRoute(pattern, parsed);
-      if (captures === void 0)
-        return void 0;
-      return {
-        claimKind: claim.kind,
-        ...Object.keys(captures).length > 0 ? { captures } : {},
-        ...claim.normalizeTo !== void 0 ? {
-          normalizedUri: withInputSearch(claim, pattern, parsed, interpolateNormalizeTo(claim.normalizeTo, captures, pattern.restCaptures ?? []))
-        } : {}
-      };
+      if (claim.kind === "uriPattern") {
+        const { selector, rest } = parseUriConnectionSelector(input);
+        if (selector !== void 0) {
+          const match = matchAt(rest, selector);
+          if (match !== void 0)
+            return match;
+        }
+      }
+      return matchAt(input, void 0);
     }
   };
 }
+function fillTitle(template, captures) {
+  return template.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (written, name) => captures[name] ?? written);
+}
+var CONNECTION_SELECTOR_RE = /^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)@([^/]+)(?:\/(.*))?$/;
+function parseUriConnectionSelector(input) {
+  const match = CONNECTION_SELECTOR_RE.exec(input.trim());
+  if (match?.[1] === void 0 || match[2] === void 0) {
+    return { rest: input };
+  }
+  return { selector: match[2], rest: `${match[1]}${match[3] ?? ""}` };
+}
+function withSelector(normalized, inputProtocol, selector) {
+  if (selector === void 0)
+    return normalized;
+  if (templateProtocol(normalized) !== inputProtocol)
+    return normalized;
+  const schemeEnd = normalized.indexOf("://") + 3;
+  return `${normalized.slice(0, schemeEnd)}@${selector}/${normalized.slice(schemeEnd)}`;
+}
 function normalizeProtocol(value) {
   return value.replace(/:$/, "").toLowerCase();
 }
 function parsePatternInput(input) {
+  const trimmed = input.trim();
+  let url;
   try {
-    const url = new URL(input.trim());
-    return {
-      protocol: normalizeProtocol(url.protocol),
-      hostname: url.hostname.toLowerCase(),
-      pathname: url.pathname,
-      search: url.search.startsWith("?") ? url.search.slice(1) : url.search
-    };
+    url = new URL(trimmed);
   } catch {
-    return void 0;
+    if (!trimmed.includes(" "))
+      return void 0;
+    try {
+      url = new URL(trimmed.replaceAll(" ", "%20"));
+    } catch {
+      return void 0;
+    }
   }
+  return {
+    protocol: normalizeProtocol(url.protocol),
+    // A web host arrives lowercased; a custom scheme's keeps its case, so a capture of it
+    // (`projects://Acme`) names it as written. Literal host parts match either case.
+    hostname: url.hostname,
+    pathname: url.pathname,
+    search: url.search.startsWith("?") ? url.search.slice(1) : url.search
+  };
 }
 function compileRoutePattern(pattern) {
   const pathname = pattern.pathname !== void 0 ? compileParts(pattern.pathname, "/", { allowRest: true }) : void 0;
   return {
     ...pattern.protocol !== void 0 ? { protocol: normalizeProtocol(pattern.protocol) } : {},
-    ...pattern.hostname !== void 0 ? { hostname: compileParts(pattern.hostname.toLowerCase(), ".") } : {},
+    ...pattern.hostname !== void 0 ? {
+      hostname: compileParts(pattern.hostname.toLowerCase(), LONE_CAPTURE_RE.test(pattern.hostname) ? void 0 : ".")
+    } : {},
     ...pathname !== void 0 ? { pathname } : {},
+    ...pattern.pathname?.endsWith("/") === true ? { pathnameEndsInSlash: true } : {},
     ...pathname !== void 0 ? {
       restCaptures: pathname.filter((part) => part.rest === true).map((part) => part.capture)
     } : {},
     ...pattern.search !== void 0 ? { search: compileParts(pattern.search.replace(/^\?/, ""), "&") } : {}
   };
 }
+var LONE_CAPTURE_RE = /^:[A-Za-z_][A-Za-z0-9_]*(?:\([^()|]*\))?$/;
 function compileParts(value, separator, options = {}) {
   if (value === "")
     return [];
-  const parts = value.split(separator);
+  const parts = separator === void 0 ? [value] : value.split(separator);
   return parts.map((part, index) => {
     const restMatch = REST_CAPTURE_RE.exec(part);
     if (restMatch !== null) {
@@ -108,19 +162,30 @@ function matchRoute(pattern, input) {
     return void 0;
   }
   const captures = {};
-  if (pattern.hostname !== void 0 && !matchParts(pattern.hostname, input.hostname, ".", captures)) {
+  if (pattern.hostname !== void 0 && !matchParts(pattern.hostname, input.hostname, isLoneCapture(pattern.hostname) ? void 0 : ".", captures, true)) {
     return void 0;
   }
-  if (pattern.pathname !== void 0 && !matchParts(pattern.pathname, input.pathname, "/", captures)) {
+  if (pattern.pathname !== void 0 && !matchParts(pattern.pathname, pattern.pathnameEndsInSlash === true ? input.pathname : withoutTrailingSlash(input), "/", captures)) {
     return void 0;
   }
-  if (pattern.search !== void 0 && !matchParts(pattern.search, input.search, "&", captures)) {
+  if (pattern.search !== void 0 && (pattern.search.length === 0 ? input.search !== "" : !matchParts(pattern.search, input.search, "&", captures))) {
     return void 0;
   }
   return captures;
 }
-function matchParts(pattern, value, separator, captures) {
-  const parts = value.split(separator);
+function withoutTrailingSlash(input) {
+  const { hostname, pathname } = input;
+  if (!pathname.endsWith("/") || pathname.endsWith("//"))
+    return pathname;
+  if (pathname === "/" && hostname === "")
+    return pathname;
+  return pathname.slice(0, -1);
+}
+function isLoneCapture(pattern) {
+  return pattern.length === 1 && pattern[0].capture !== void 0 && pattern[0].rest !== true;
+}
+function matchParts(pattern, value, separator, captures, foldLiterals = false) {
+  const parts = separator === void 0 ? [value] : value.split(separator);
   let partIndex = 0;
   for (let i = 0; i < pattern.length; i += 1) {
     const expected = pattern[i];
@@ -128,7 +193,7 @@ function matchParts(pattern, value, separator, captures) {
       const remaining = parts.slice(partIndex);
       if (remaining.every((part) => part === ""))
         return false;
-      captures[expected.capture] = remaining.join(separator);
+      captures[expected.capture] = remaining.join(separator ?? "");
       return true;
     }
     if (partIndex >= parts.length)
@@ -143,8 +208,9 @@ function matchParts(pattern, value, separator, captures) {
       partIndex += 1;
       continue;
     }
-    if (expected.literal !== actual)
+    if (expected.literal !== (foldLiterals ? actual.toLowerCase() : actual)) {
       return false;
+    }
     partIndex += 1;
   }
   return partIndex === parts.length;
@@ -165,31 +231,116 @@ function withInputSearch(claim, pattern, input, normalized) {
 function templateProtocol(template) {
   return SCHEME_RE.exec(template)?.[1]?.toLowerCase();
 }
-function interpolateNormalizeTo(template, captures, restCaptures) {
-  return template.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (full, name, offset) => {
-    const value = captures[name];
-    if (value === void 0)
-      return full;
-    return encodeCaptureValue({
-      template,
-      offset,
-      value,
-      rest: restCaptures.includes(name)
-    });
-  });
-}
-function encodeCaptureValue({ template, offset, value, rest }) {
-  const normalized = isAuthorityCapture(template, offset) ? value.toLowerCase() : value;
-  if (!rest)
-    return encodeURIComponent(normalized);
-  return normalized.split("/").join("/");
+var TEMPLATE_TOKEN_RE = /\{([A-Za-z][A-Za-z0-9]*)\(([^)]*)\)\}|:([A-Za-z_][A-Za-z0-9_]*)/g;
+var TRANSFORMS = {
+  base64: (value) => {
+    const bytes = new TextEncoder().encode(value);
+    let binary = "";
+    for (const byte of bytes)
+      binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/=+$/, "");
+  },
+  slackTimestamp: (value) => {
+    const match = /^p(\d+)(\d{6})$/.exec(value);
+    return match === null ? void 0 : `${match[1]}.${match[2]}`;
+  }
+};
+function isTransform(name) {
+  return Object.prototype.hasOwnProperty.call(TRANSFORMS, name);
+}
+function compileTemplate(template) {
+  const parts = [];
+  let last = 0;
+  for (const token of template.matchAll(TEMPLATE_TOKEN_RE)) {
+    const offset = token.index;
+    if (offset > last)
+      parts.push({ literal: template.slice(last, offset) });
+    const position = templatePosition(template, offset);
+    const [full, transform = "", inner = "", capture] = token;
+    if (capture !== void 0) {
+      parts.push({ capture, position });
+    } else {
+      if (!isTransform(transform)) {
+        throw new Error(`Unknown URI claim template transform '${transform}'.`);
+      }
+      parts.push({
+        transform,
+        inner: compileTransformInput(inner),
+        position
+      });
+    }
+    last = offset + full.length;
+  }
+  if (last < template.length)
+    parts.push({ literal: template.slice(last) });
+  return parts;
+}
+function compileTransformInput(text) {
+  const parts = [];
+  let last = 0;
+  for (const token of text.matchAll(/:([A-Za-z_][A-Za-z0-9_]*)/g)) {
+    if (token.index > last)
+      parts.push({ literal: text.slice(last, token.index) });
+    parts.push({ capture: token[1] });
+    last = token.index + token[0].length;
+  }
+  if (last < text.length)
+    parts.push({ literal: text.slice(last) });
+  return parts;
+}
+function fillTemplate(parts, captures, restCaptures) {
+  let out = "";
+  for (const part of parts) {
+    if ("literal" in part) {
+      out += part.literal;
+      continue;
+    }
+    if ("capture" in part) {
+      const value = captures[part.capture];
+      if (value === void 0) {
+        out += `:${part.capture}`;
+        continue;
+      }
+      const escaped = restCaptures.includes(part.capture) ? escapeRestCapture(value) : escapeForPosition(value, part.position);
+      if (escaped === void 0)
+        return void 0;
+      out += escaped;
+      continue;
+    }
+    let raw = "";
+    for (const inner of part.inner) {
+      raw += "literal" in inner ? inner.literal : captures[inner.capture] ?? `:${inner.capture}`;
+    }
+    const transformed = TRANSFORMS[part.transform](raw);
+    if (transformed === void 0)
+      return void 0;
+    out += escapeForPosition(transformed, part.position);
+  }
+  return out;
 }
-function isAuthorityCapture(template, offset) {
+function templatePosition(template, offset) {
   const prefix = template.slice(0, offset);
+  if (prefix.includes("#"))
+    return "fragment";
+  if (prefix.includes("?"))
+    return "query";
   const schemeIndex = prefix.lastIndexOf("://");
-  if (schemeIndex === -1)
-    return false;
-  return !/[/?#]/.test(prefix.slice(schemeIndex + 3));
+  if (schemeIndex !== -1 && !prefix.slice(schemeIndex + 3).includes("/")) {
+    return "host";
+  }
+  return "path";
+}
+function escapeForPosition(value, position) {
+  if (position === "host")
+    return encodeURIComponent(value.toLowerCase());
+  return encodeURIComponent(value).replace(/%(?:3A|40)/gi, (code) => decodeURIComponent(code));
+}
+function escapeRestCapture(value) {
+  const segments = value.split("/").map(safeDecode);
+  if (segments.some((segment) => segment === "." || segment === "..")) {
+    return void 0;
+  }
+  return segments.map(encodeURIComponent).join("/");
 }
 
 // packages/herd-uri/dist/errors.js
@@ -216,6 +367,15 @@ var UriValidationError = class extends UriError {
     this.name = "UriValidationError";
   }
 };
+function requireWriteContent(payload2, uri) {
+  if (payload2 === void 0) {
+    throw new UriValidationError(`Writing ${uri} needs \`content\` (or a \`source\` to copy from): pass the payload this address takes, which its help names.`);
+  }
+  if (payload2 instanceof Uint8Array) {
+    throw new UriValidationError(`${uri} stores text only, so it cannot take raw bytes. Copy the file to an address that accepts bytes.`);
+  }
+  return payload2;
+}
 var UriProviderError = class extends UriError {
   _tag = "UriProviderError";
   moduleId;
@@ -228,6 +388,8 @@ var UriProviderError = class extends UriError {
   retryAfterMs;
   /** See {@link UriProviderErrorOptions.effect}. */
   effect;
+  /** See {@link UriProviderErrorOptions.refusalMessage}. */
+  refusalMessage;
   constructor(options) {
     super(options.message);
     this.name = "UriProviderError";
@@ -248,6 +410,12 @@ var UriProviderError = class extends UriError {
     }
     if (options.effect !== void 0)
       this.effect = options.effect;
+    if (options.refusalMessage !== void 0) {
+      if (options.effect !== "none") {
+        throw new TypeError('refusalMessage requires effect: "none".');
+      }
+      this.refusalMessage = options.refusalMessage;
+    }
   }
 };
 var UriNotFoundError = class extends UriError {
@@ -275,16 +443,6 @@ var UriUnsupportedOperationError = class extends UriError {
   }
 };
 
-// packages/herd-uri/dist/connection.js
-var CONNECTION_SELECTOR_RE = /^([a-zA-Z][a-zA-Z0-9+.-]*:\/\/)@([^/]+)(?:\/(.*))?$/;
-function parseUriConnectionSelector(input) {
-  const match = CONNECTION_SELECTOR_RE.exec(input.trim());
-  if (match?.[1] === void 0 || match[2] === void 0) {
-    return { rest: input };
-  }
-  return { selector: match[2], rest: `${match[1]}${match[3] ?? ""}` };
-}
-
 // packages/herd-uri/dist/resource-witness.js
 import { createHash } from "node:crypto";
 function contentDigest(content) {
@@ -542,6 +700,13 @@ var UriPayloadContractSchema = z2.strictObject({
 
 // packages/herd-uri/dist/observation.js
 var OBSERVATION_MIME = "application/vnd.kay.observation+json";
+var isOptionalString = (value) => value === void 0 || typeof value === "string";
+function isObservationMaterial(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value))
+    return false;
+  const material = value;
+  return typeof material.uri === "string" && typeof material.kind === "string" && isOptionalString(material.title) && (material.text === void 0 || Array.isArray(material.text) && material.text.every((piece) => typeof piece === "string")) && isOptionalString(material.createdAt) && isOptionalString(material.updatedAt) && isOptionalString(material.version) && (material.retainForMs === void 0 || typeof material.retainForMs === "number" && Number.isFinite(material.retainForMs));
+}
 
 // packages/herd-uri/dist/text-edit.js
 import { z as z3 } from "zod";
@@ -749,7 +914,7 @@ function toJsonSchema(schema) {
       // `io: "input"` describes what a caller may SEND, which is what a parameter and an
       // `accepts` payload advertise: a field with a Zod default is optional on the wire even
       // though the parsed value always carries it. Strictness still survives where the validator
-      // really enforces it — `z.strictObject` emits `additionalProperties: false`, while a plain
+      // really enforces it - `z.strictObject` emits `additionalProperties: false`, while a plain
       // `z.object` correctly does not, because it TOLERATES unknown keys and silently strips
       // them. A `returns` payload derived from a Zod schema is described in the same input terms;
       // no module does that today, and a faithful output projection would need its own seam.
@@ -883,29 +1048,45 @@ function accountQualifiedUri(scheme, accountId, path) {
   }
   return `${scheme}://@${accountId}/${path}`;
 }
-function isOptionalString(value) {
-  return value === void 0 || typeof value === "string";
-}
-function isOptionalStringArray(value) {
-  return value === void 0 || Array.isArray(value) && value.every((item) => typeof item === "string");
-}
 function observationFromResource(resource) {
   if (resource.mimeType !== OBSERVATION_MIME)
     return void 0;
   if (typeof resource.content !== "string")
     return void 0;
   const parsed = tryParseJson(resource.content);
-  if (parsed === void 0 || typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+  return isObservationMaterial(parsed) ? parsed : void 0;
+}
+
+// packages/herd-uri-extensions/dist/secure-transport.js
+var SecureTransportError = class extends Error {
+  name = "SecureTransportError";
+};
+function isLoopbackHostname(hostname) {
+  const host = hostname.toLowerCase();
+  if (host === "localhost" || host === "[::1]")
+    return true;
+  const octets = host.split(".");
+  return octets.length === 4 && octets[0] === "127" && octets.every((octet) => /^\d{1,3}$/.test(octet) && Number(octet) <= 255);
+}
+function secureTransportViolation(url) {
+  let parsed;
+  try {
+    parsed = typeof url === "string" ? new URL(url) : url;
+  } catch {
     return void 0;
   }
-  const value = parsed;
-  if (typeof value.uri !== "string" || typeof value.kind !== "string") {
+  if (parsed.protocol !== "http:" && parsed.protocol !== "ws:")
     return void 0;
-  }
-  if (!isOptionalString(value.title) || !isOptionalStringArray(value.text) || !isOptionalString(value.createdAt) || !isOptionalString(value.updatedAt) || !isOptionalString(value.version)) {
+  if (isLoopbackHostname(parsed.hostname))
     return void 0;
-  }
-  return value;
+  const secure = parsed.protocol === "ws:" ? "wss://" : "https://";
+  return `Plain HTTP is only allowed to this computer (localhost, 127.0.0.1 or ::1); use ${secure} for ${parsed.host}.`;
+}
+function assertSecureTransport(url, label) {
+  const violation = secureTransportViolation(url);
+  if (violation === void 0)
+    return;
+  throw new SecureTransportError(label === void 0 ? violation : `${label}: ${violation}`);
 }
 
 // packages/plugin-primitives/dist/results.js
@@ -982,15 +1163,6 @@ function toToolParameters(schema) {
 
 // packages/plugin-primitives/dist/auth-scheme.js
 var ACCOUNT_ID_PARAM = "accountId";
-function authContextOf(ctx) {
-  return ctx.auth;
-}
-function authFailureResult(failure) {
-  return {
-    content: [{ type: "text", text: failure.message }],
-    details: void 0
-  };
-}
 function withAccountIdParam(parameters) {
   if (parameters === null || typeof parameters !== "object" || parameters.type !== "object") {
     return parameters;
@@ -1016,27 +1188,18 @@ function withResolvedAuth(definition, binding, body) {
     requiresAuth: binding,
     parameters: withAccountIdParam(definition.parameters),
     async execute(toolCallId, params, signal, onUpdate, ctx) {
-      const auth = authContextOf(ctx);
-      if (auth === void 0) {
-        return authFailureResult({
-          ok: false,
-          reason: "no-connection",
-          message: `Auth is not available in this context for ${binding.serviceId}.`
-        });
+      if (ctx.credential === void 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Auth is not available in this context for ${binding.serviceId}.`
+            }
+          ],
+          details: void 0
+        };
       }
-      const override = params?.[ACCOUNT_ID_PARAM];
-      const result = await auth.resolveToken({
-        serviceId: binding.serviceId,
-        ...binding.schemeId === void 0 ? {} : { schemeId: binding.schemeId },
-        ...typeof override === "string" && override.length > 0 ? { accountId: override } : {},
-        ...binding.requiredScopes === void 0 ? {} : { requiredScopes: binding.requiredScopes },
-        ...binding.scopeRequirement === void 0 ? {} : { scopeRequirement: binding.scopeRequirement },
-        ...binding.connectServiceId === void 0 ? {} : { connectServiceId: binding.connectServiceId }
-      });
-      if (!result.ok) {
-        return authFailureResult(result);
-      }
-      return body(toolCallId, params, signal, onUpdate, ctx, result.auth);
+      return body(toolCallId, params, signal, onUpdate, ctx, ctx.credential);
     }
   };
 }
@@ -1058,23 +1221,14 @@ function withResolvedSearchProvider(definition, binding, body) {
     label: definition.label,
     providerId: definition.providerId ?? "",
     requiresAuth: binding,
-    async isAvailable(ctx) {
-      const auth = ctx?.auth;
-      if (auth === void 0)
-        return false;
-      const result = await auth.resolveToken(binding);
-      return result.ok;
+    isAvailable(ctx) {
+      return ctx?.credential !== void 0;
     },
     async search(params, signal, ctx) {
-      const auth = ctx?.auth;
-      if (auth === void 0) {
+      if (ctx?.credential === void 0) {
         throw new SearchProviderError(definition.id, `Auth is not available in this context for ${binding.serviceId}.`);
       }
-      const result = await auth.resolveToken(binding);
-      if (!result.ok) {
-        throw new SearchProviderError(definition.id, result.message);
-      }
-      return body(params, signal, result.auth);
+      return body(params, signal, ctx.credential);
     }
   };
 }
@@ -1286,6 +1440,27 @@ function bytesToBase64(bytes) {
   return output;
 }
 
+// packages/plugin-sdk/dist/kay-agent/known-resources-view.js
+function knownResourcesView(result) {
+  return { ...result, knownResourcesView: true };
+}
+
+// packages/plugin-sdk/dist/kay-agent/compiler.js
+function createUnavailableCompiler(message) {
+  return {
+    bundleBrowser: async () => {
+      throw new Error(message);
+    }
+  };
+}
+
+// packages/plugin-sdk/dist/kay-agent/endpoints.js
+function createUnavailableEndpoints(message) {
+  return {
+    invoke: async () => ({ ok: false, reason: "unavailable", message })
+  };
+}
+
 // packages/plugin-sdk/dist/kay-agent/osascript.js
 import { z as z6 } from "zod";
 var OSASCRIPT_TIMEOUT_MS = 3e4;
@@ -1443,204 +1618,21 @@ function fenced(text) {
   return [`${fence}text`, text, fence];
 }
 
-// packages/plugin-sdk/dist/kay-agent/advertisement.js
-function defineKayAgentAdvertisement(advertisement) {
-  return advertisement;
-}
-function rejectDuplicate(category, id, seen) {
-  if (seen.has(id)) {
-    throw new Error(`Duplicate advertised ${category} '${id}'.`);
-  }
-  seen.add(id);
-}
-function rejectImplementationFields(category, value, fields) {
-  for (const field of fields) {
-    if (field in value) {
-      throw new Error(`Advertised ${category} cannot include implementation field '${field}'.`);
-    }
-  }
-}
-function snapshotAdvertisementValue(value, seen = /* @__PURE__ */ new WeakMap()) {
-  if ((typeof value !== "object" || value === null) && typeof value !== "function") {
-    return value;
-  }
-  if (typeof value === "function") {
-    return value;
-  }
-  const existing = seen.get(value);
-  if (existing !== void 0)
-    return existing;
-  if (Array.isArray(value)) {
-    const copy2 = [];
-    seen.set(value, copy2);
-    for (const entry of value) {
-      copy2.push(snapshotAdvertisementValue(entry, seen));
-    }
-    return Object.freeze(copy2);
-  }
-  const copy = /* @__PURE__ */ Object.create(null);
-  seen.set(value, copy);
-  const copiedKeys = /* @__PURE__ */ new Set();
-  let source = value;
-  while (source !== null && source !== Object.prototype) {
-    for (const key of Reflect.ownKeys(source)) {
-      if (key === "constructor" || copiedKeys.has(key))
-        continue;
-      copiedKeys.add(key);
-      copy[key] = snapshotAdvertisementValue(Reflect.get(value, key), seen);
-    }
-    source = Object.getPrototypeOf(source);
-  }
-  return Object.freeze(copy);
-}
-function snapshotDelegatedServiceSource(source) {
-  return () => {
-    const entries = source();
-    if (!Array.isArray(entries)) {
-      throw new Error("An advertised delegated service source must return an array synchronously.");
-    }
-    return Object.freeze(entries.map((entry) => {
-      rejectImplementationFields("delegated service source scheme", entry.scheme, ["connect", "refresh"]);
-      return snapshotAdvertisementValue(entry);
-    }));
-  };
-}
-function collectKayAgentAdvertisement(advertisement) {
-  const tools = [];
-  const uriModules = [];
-  const searchProviders = [];
-  const converters = [];
-  const services = [];
-  const oauthPkceSchemes = [];
-  const apiKeySchemes = [];
-  const externalCliSchemes = [];
-  const delegatedSchemes = [];
-  const delegatedServiceSources = [];
-  const toolNames = /* @__PURE__ */ new Set();
-  const moduleIds = /* @__PURE__ */ new Set();
-  const providerIds = /* @__PURE__ */ new Set();
-  const converterIds = /* @__PURE__ */ new Set();
-  let collecting = true;
-  const assertCollecting = () => {
-    if (!collecting) {
-      throw new Error("The kay.agent advertisement API cannot be used after advertise() returns.");
-    }
-  };
-  const auth = {
-    advertiseService: (descriptor) => {
-      assertCollecting();
-      services.push(snapshotAdvertisementValue(descriptor));
-    },
-    declareOAuthPkceScheme: (serviceId, scheme) => {
-      assertCollecting();
-      rejectImplementationFields("OAuth PKCE scheme", scheme, [
-        "resolveAccountId",
-        "resolveAccounts"
-      ]);
-      oauthPkceSchemes.push(snapshotAdvertisementValue({ serviceId, scheme }));
-    },
-    declareApiKeyScheme: (serviceId, scheme) => {
-      assertCollecting();
-      rejectImplementationFields("API key scheme", scheme, ["validate"]);
-      apiKeySchemes.push(snapshotAdvertisementValue({ serviceId, scheme }));
-    },
-    declareExternalCliScheme: (serviceId, scheme) => {
-      assertCollecting();
-      externalCliSchemes.push(snapshotAdvertisementValue({ serviceId, scheme }));
-    },
-    declareDelegatedScheme: (serviceId, scheme) => {
-      assertCollecting();
-      rejectImplementationFields("delegated scheme", scheme, [
-        "connect",
-        "refresh"
-      ]);
-      delegatedSchemes.push(snapshotAdvertisementValue({ serviceId, scheme }));
-    },
-    registerDelegatedServiceSource: (source) => {
-      assertCollecting();
-      delegatedServiceSources.push(Object.freeze({ source: snapshotDelegatedServiceSource(source) }));
-    }
-  };
-  const api = {
-    uri: {
-      registerModule: (module) => {
-        assertCollecting();
-        rejectImplementationFields("URI module", module, [
-          "locate",
-          "read",
-          "help",
-          "write",
-          "edit",
-          "list",
-          "search",
-          "delete"
-        ]);
-        const snapshot = snapshotAdvertisementValue(module);
-        rejectDuplicate("URI module id", snapshot.id, moduleIds);
-        uriModules.push(snapshot);
-      }
-    },
-    registerTool: (definition) => {
-      assertCollecting();
-      rejectImplementationFields("tool", definition, ["execute"]);
-      const snapshot = snapshotAdvertisementValue(definition);
-      rejectDuplicate("tool name", snapshot.name, toolNames);
-      tools.push(snapshot);
-    },
-    registerSearchProvider: (provider) => {
-      assertCollecting();
-      rejectImplementationFields("search provider", provider, [
-        "isAvailable",
-        "search"
-      ]);
-      const snapshot = snapshotAdvertisementValue(provider);
-      rejectDuplicate("search provider id", snapshot.id, providerIds);
-      searchProviders.push(snapshot);
-    },
-    registerConverter: (converter) => {
-      assertCollecting();
-      rejectImplementationFields("converter", converter, ["convert"]);
-      const snapshot = snapshotAdvertisementValue(converter);
-      rejectDuplicate("converter id", snapshot.id, converterIds);
-      converters.push(snapshot);
-    },
-    auth
-  };
-  let result;
-  try {
-    result = advertisement.advertise(api);
-  } finally {
-    collecting = false;
-  }
-  if (result !== void 0) {
-    void Promise.resolve(result).catch(() => void 0);
-    throw new Error("A kay.agent advertisement must finish synchronously and return undefined.");
-  }
-  return Object.freeze({
-    tools: Object.freeze([...tools]),
-    uriModules: Object.freeze([...uriModules]),
-    searchProviders: Object.freeze([...searchProviders]),
-    converters: Object.freeze([...converters]),
-    auth: Object.freeze({
-      services: Object.freeze([...services]),
-      oauthPkceSchemes: Object.freeze([...oauthPkceSchemes]),
-      apiKeySchemes: Object.freeze([...apiKeySchemes]),
-      externalCliSchemes: Object.freeze([...externalCliSchemes]),
-      delegatedSchemes: Object.freeze([...delegatedSchemes]),
-      delegatedServiceSources: Object.freeze([...delegatedServiceSources])
-    })
-  });
-}
-
 // packages/plugin-sdk/dist/kay-agent/index.js
 function toolParameters(schema) {
   return toToolParameters(schema);
 }
+function manifestToolParameters(schema) {
+  return toToolParameters(schema);
+}
+function toolExecute(schema, body) {
+  return async (toolCallId, params, signal, onUpdate, ctx) => body(toolCallId, schema.parse(params), signal, onUpdate, ctx);
+}
 function defineTool(definition) {
   return definition;
 }
 function defineAuthedTool(definition, schema, binding, body) {
-  return withResolvedAuth({ ...definition, parameters: toolParameters(schema) }, binding, (toolCallId, rawParams, signal, onUpdate, ctx, resolvedAuth) => body(toolCallId, schema.parse(rawParams), signal, onUpdate, ctx, resolvedAuth));
+  return withResolvedAuth({ ...definition, parameters: toolParameters(schema) }, binding, (toolCallId, rawParams, signal, onUpdate, ctx, credential) => body(toolCallId, schema.parse(rawParams), signal, onUpdate, ctx, credential));
 }
 var DELEGATED_REFRESH_REJECTED = Symbol.for("kay.plugin-sdk.delegated-refresh-rejected");
 var DelegatedRefreshRejectedError = class extends Error {
@@ -1681,6 +1673,7 @@ export {
   OSASCRIPT_TIMEOUT_MS,
   PluginApiError,
   SearchProviderError,
+  SecureTransportError,
   URI_TEXT_EDIT_SHAPE_SUMMARY,
   UriConflictError,
   UriNotFoundError,
@@ -1692,18 +1685,19 @@ export {
   asArray,
   asRecord,
   assertResourceUnchanged,
+  assertSecureTransport,
   basicUriHelp,
   bytesToBase64,
   capability,
-  collectKayAgentAdvertisement,
   compileUriClaim,
   contentDigest,
   contentResult,
   createJsonApiClient,
   createOsascriptRunner,
+  createUnavailableCompiler,
+  createUnavailableEndpoints,
   declareProducedResources,
   defineAuthedTool,
-  defineKayAgentAdvertisement,
   defineTool,
   describeUriTextEditTarget,
   fenced,
@@ -1711,11 +1705,14 @@ export {
   formatNumber,
   getBytes,
   isDelegatedRefreshRejected,
+  isLoopbackHostname,
   jsonResource,
+  knownResourcesView,
   labelOf,
   lineOf,
   lintUriHelpContracts,
   lintUriTemplate,
+  manifestToolParameters,
   markdownResource,
   markdownText,
   num,
@@ -1730,9 +1727,12 @@ export {
   payload,
   readBodyWithByteCap,
   readOsascriptOutput,
+  requireWriteContent,
+  secureTransportViolation,
   str,
   textResult,
   toJsonSchema,
+  toolExecute,
   toolParameters,
   unavailableInteractionSurface,
   unavailableInteractionSurfaces,