@yaklabs-ai/plugin-sdk 0.48.1 → 0.50.0

package/dist/kay-agent.d.ts

@@ -813,6 +813,10 @@ export declare function createUnavailableCompiler(message: string): KayAgentComp
  */
 export declare function createUnavailableEndpoints(message: string): KayAgentEndpoints;
 
+export declare function createUnavailablePluginEndpointCaller(message: string): PluginEndpointCaller;
+
+export declare function createUnavailableUriCaller(message: string): PluginUriCaller;
+
 /** What the module holds at mutation time: a provider revision, the current content, or both. */
 export declare interface CurrentResourceState {
     readonly revision?: string;
@@ -2777,8 +2781,16 @@ declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * 0.48.0 adds the models.complete UI capability.
  *
  * 0.48.1 adds app-tool metadata, conditional tool permissions and screen-action declarations.
+ *
+ * 0.49.0 adds sessionless URI calls on both backend targets. It removes app.memory and its note
+ * types; callers use the resource surface instead. Previously admitted SDK contracts are no
+ * longer served because they included app.memory on notebook hosts. No compatibility alias
+ * restores it; callers migrate and declare ^0.49.0.
+ *
+ * 0.50.0 adds explicit cross-plugin endpoint calls on both backend targets. The URI-only 0.49.0
+ * contract remains served.
  */
-declare const KAY_PLUGIN_SDK_VERSION: "0.48.1";
+declare const KAY_PLUGIN_SDK_VERSION: "0.50.0";
 
 declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -2812,46 +2824,11 @@ export declare interface KayAgentCompiler {
     bundleBrowser(request: KayBrowserBundleRequest, sources: KayBrowserSources): Promise<KayBrowserBundle>;
 }
 
-/**
- * The plugin-facing `kay.agent` own-endpoint call: a plugin's agent part calls an endpoint its own
- * `kay.app` part registered. SDK 0.17.3; a plugin that calls it declares `compatibility.sdk`
- * `^0.19.0`.
- *
- * A plugin's two parts load as separate modules and share no memory, so this is how agent code
- * reaches state its app part keeps (a worker, a database). The manifest says which endpoints the
- * agent part may call: the `kay.app` target declares the endpoint with a `register` grant, and
- * `permissions.byTarget["kay.agent"].endpoints` lists it with `invoke`. No other plugin's endpoint
- * is nameable.
- *
- * An endpoint whose only `invoke` grant is the plugin's own `kay.agent` target is not reachable
- * from Bonsai's surfaces (its pages and runtime clients), so an action the agent takes after the
- * session's approval card cannot be taken around it.
- */
-/** Why an {@link KayAgentEndpoints.invoke} call produced no value. */
-export declare type KayAgentEndpointFailureReason = 
-/** The manifest grants this plugin's `kay.agent` target no `invoke` on this endpoint. */
-"not-declared"
-/** The plugin's `kay.app` part is not running, or registered no handler for it. */
-| "unavailable"
-/** The handler did not answer within the host's fixed deadline (10 seconds). It may still finish. */
-| "timed-out"
-/** The caller's `signal` aborted. The handler may still finish. */
-| "cancelled"
-/** The handler threw; `message` is its error's message. */
-| "failed"
-/** The request or the handler's response does not match the endpoint's declared schema. */
-| "invalid";
-
-export declare type KayAgentEndpointOutcome = {
-    readonly ok: true;
-    readonly value: unknown;
-} | {
-    readonly ok: false;
-    readonly reason: KayAgentEndpointFailureReason;
-    readonly message: string;
-};
+export declare type KayAgentEndpointFailureReason = PluginEndpointFailureReason;
+
+export declare type KayAgentEndpointOutcome = PluginEndpointOutcome;
 
-export declare interface KayAgentEndpoints {
+export declare interface KayAgentEndpoints extends PluginEndpointCaller {
     /**
      * Call `endpoint`, the local id this plugin's manifest declares on its `kay.app` target. Never
      * rejects: every failure is an outcome. Nothing is queued: when the app part is not running the
@@ -3032,7 +3009,7 @@ export declare interface KayAgentNetwork {
  * here; the plugin never touches an `ExtensionApi`, `child_process`, credentials, or Electron.
  */
 export declare interface KayAgentPluginApi {
-    readonly uri: {
+    readonly uri: PluginUriCaller & {
         /** Register a whole URI module (a scheme handler that owns its address space, e.g. `drive://`). */
         registerModule(module: UriExtensionModule): void;
     };
@@ -3125,10 +3102,9 @@ export declare interface KayAgentPluginApi {
      */
     readonly vendoredMcp: KayAgentVendoredMcp;
     /**
-     * Calls the endpoints this plugin's own `kay.app` part registered and the manifest grants this
-     * target `invoke` on, by local id. Never another plugin's. Every failure is an outcome, never a
-     * rejection; the host fixes a 10-second deadline. Always present; a host with no app part
-     * answers each call `unavailable`. See {@link KayAgentEndpoints} (SDK 0.17.3).
+     * `invoke` calls this plugin's own declared app endpoint by local id. `invokePlugin` names a
+     * provider plugin explicitly and checks this target's exact `endpoints.invoke` claim. Every
+     * failure is an outcome; unavailable providers are never queued.
      */
     readonly endpoints: KayAgentEndpoints;
     /**
@@ -5105,13 +5081,32 @@ declare const PluginCapabilityRefusalV1: z.ZodObject<{
         slug: z.ZodLiteral<"signals.read">;
         envelope: z.ZodObject<{}, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.read">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"uri.call">;
+        envelope: z.ZodObject<{
+            scheme: z.ZodString;
+            verb: z.ZodEnum<{
+                search: "search";
+                list: "list";
+                read: "read";
+                write: "write";
+                edit: "edit";
+                delete: "delete";
+            }>;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
-        target: z.ZodLiteral<"kay.app">;
-        slug: z.ZodLiteral<"memory.write">;
-        envelope: z.ZodObject<{}, z.core.$strict>;
+        target: z.ZodEnum<{
+            "kay.agent": "kay.agent";
+            "kay.app": "kay.app";
+        }>;
+        slug: z.ZodLiteral<"endpoints.invoke">;
+        envelope: z.ZodObject<{
+            pluginId: z.ZodString;
+            endpointId: z.ZodString;
+        }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         target: z.ZodLiteral<"kay.app">;
         slug: z.ZodLiteral<"skills.read">;
@@ -5440,6 +5435,28 @@ export declare interface PluginDelegatedServiceEntry {
     readonly scheme: PluginDelegatedScheme;
 }
 
+/** Sessionless JSON calls to another plugin's declared, publicly reachable endpoint. */
+export declare interface PluginEndpointCaller {
+    /**
+     * Never rejects. Both payload and result are validated against the provider's declared schemas.
+     * Nothing is queued or retried. Cancellation and timeouts leave the operation's effect unknown.
+     */
+    invokePlugin(providerPluginId: string, endpointLocalId: string, payload: unknown, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<PluginEndpointOutcome>;
+}
+
+export declare type PluginEndpointFailureReason = "not-declared" | "unavailable" | "timed-out" | "cancelled" | "failed" | "invalid" | "denied";
+
+export declare type PluginEndpointOutcome = {
+    readonly ok: true;
+    readonly value: unknown;
+} | {
+    readonly ok: false;
+    readonly reason: PluginEndpointFailureReason;
+    readonly message: string;
+};
+
 export declare const PluginEventEnvelope: z.ZodObject<{
     id: z.ZodString;
     localId: z.ZodString;
@@ -5566,6 +5583,38 @@ declare const PluginToolName: z.ZodString;
 
 declare type PluginToolName = z.infer<typeof PluginToolName>;
 
+/**
+ * Sessionless resource calls. Each call checks the calling target's exact scheme and verb grant.
+ * Results retain provider bytes, metadata and revisions; provider failures retain their URI tags.
+ * A cancellation or lost response does not prove a mutation was not applied.
+ */
+export declare interface PluginUriCaller {
+    read(input: string, options?: PluginUriReadOptions): Promise<RawResource>;
+    list(input: string, params?: UriListParams, options?: PluginUriCallOptions): Promise<UriListResult>;
+    search(input: string, params: UriSearchParams, options?: PluginUriCallOptions): Promise<UriSearchResult>;
+    write(input: string, content?: UriPayload | Uint8Array, options?: PluginUriWriteOptions): Promise<UriMutationResult | void>;
+    edit(input: string, payload: UriPayload, options?: PluginUriMutationOptions): Promise<UriMutationResult>;
+    delete(input: string, options?: PluginUriMutationOptions): Promise<UriMutationResult>;
+}
+
+export declare interface PluginUriCallOptions {
+    readonly cwd?: string;
+    readonly signal?: AbortSignal;
+}
+
+export declare interface PluginUriMutationOptions extends PluginUriCallOptions {
+    readonly expectedRevision?: string;
+}
+
+export declare interface PluginUriReadOptions extends PluginUriCallOptions {
+    readonly knownRevision?: string;
+}
+
+export declare interface PluginUriWriteOptions extends PluginUriMutationOptions {
+    readonly sources?: readonly UriWriteSource[];
+    readonly writeSource?: UriSourceDescriptor;
+}
+
 /**
  * What a run did to a URI. The words match the automation run wire's artifact actions. When one
  * run both creates and updates a URI, the reader reports `created`.
@@ -11454,6 +11503,8 @@ export declare interface UriResolveContext {
      * resolve a URI outside any verb call.
      */
     readonly sessionId?: string;
+    /** Host-stamped calling plugin; absent for session dispatch and resolver matching. */
+    readonly callerPluginId?: string;
     /**
      * WHO the dispatching session acts as, stamped by the host at the same dispatch site as
      * {@link UriResolveContext.sessionId} and just as un-influenceable by the caller - so a module

package/dist/kay-agent.js

@@ -982,6 +982,28 @@ function capability(spec) {
   return { ...spec };
 }
 
+// packages/plugin-sdk/dist/uri.js
+function createUnavailableUriCaller(message) {
+  const unavailable = async () => {
+    throw new Error(message);
+  };
+  return {
+    read: unavailable,
+    list: unavailable,
+    search: unavailable,
+    write: unavailable,
+    edit: unavailable,
+    delete: unavailable
+  };
+}
+
+// packages/plugin-sdk/dist/endpoints.js
+function createUnavailablePluginEndpointCaller(message) {
+  return {
+    invokePlugin: async () => ({ ok: false, reason: "unavailable", message })
+  };
+}
+
 // packages/herd-uri-extensions/dist/limits.js
 var MAX_BYTES = 50 * 1024 * 1024;
 var MAX_OUTPUT_CHARS = 5e5;
@@ -1477,7 +1499,8 @@ function createUnavailableCompiler(message) {
 // packages/plugin-sdk/dist/kay-agent/endpoints.js
 function createUnavailableEndpoints(message) {
   return {
-    invoke: async () => ({ ok: false, reason: "unavailable", message })
+    invoke: async () => ({ ok: false, reason: "unavailable", message }),
+    ...createUnavailablePluginEndpointCaller(message)
   };
 }
 
@@ -1716,6 +1739,8 @@ export {
   createOsascriptRunner,
   createUnavailableCompiler,
   createUnavailableEndpoints,
+  createUnavailablePluginEndpointCaller,
+  createUnavailableUriCaller,
   declareProducedResources,
   defineAuthedTool,
   defineTool,

package/dist/kay-app.d.ts

@@ -830,6 +830,12 @@ declare function ConstructorParameters_2<Type extends TSchema>(type: Type, optio
 /** Creates a deferred ConstructorParameters action. */
 declare function ConstructorParametersDeferred<Type extends TSchema>(type: Type, options?: TSchemaOptions): TConstructorParametersDeferred<Type>;
 
+/**
+ * Stable digest of a read's content, the revision a module without one gets.
+ * Prefixed so a provider revision can never collide with it by accident.
+ */
+export declare function contentDigest(content: string | Uint8Array): string;
+
 export declare interface CorpusResourceInvocation {
     readonly eventId: string;
     /** Envelope recording time, never a run/message/incident identifier. */
@@ -946,6 +952,8 @@ export declare function createFallbackOnlySignals(): KayAppSignals;
  */
 export declare function createKayPluginLog(write: (line: KayPluginLogLine) => void, bound?: KayPluginLogAttributes): KayPluginLog;
 
+export declare function createUnavailablePluginEndpointCaller(message: string): PluginEndpointCaller;
+
 /**
  * A `KayAppSealing` that answers `unavailable` to every call: what a host with no vault binds, so
  * `app.sealing` stays present on every host.
@@ -964,6 +972,8 @@ export declare function createUnavailableSkills(message: string): KayAppSkills;
  */
 export declare function createUnavailableTools(): KayAppTools;
 
+export declare function createUnavailableUriCaller(message: string): PluginUriCaller;
+
 /**
  * A `KayAppUsage` that answers `unavailable` to every call: what a host with no telemetry lane
  * binds, so `app.usage` stays present on every host.
@@ -2887,8 +2897,16 @@ declare const KAY_PLUGIN_PROTOCOL_VERSION: "kay.plugin.v1";
  * 0.48.0 adds the models.complete UI capability.
  *
  * 0.48.1 adds app-tool metadata, conditional tool permissions and screen-action declarations.
+ *
+ * 0.49.0 adds sessionless URI calls on both backend targets. It removes app.memory and its note
+ * types; callers use the resource surface instead. Previously admitted SDK contracts are no
+ * longer served because they included app.memory on notebook hosts. No compatibility alias
+ * restores it; callers migrate and declare ^0.49.0.
+ *
+ * 0.50.0 adds explicit cross-plugin endpoint calls on both backend targets. The URI-only 0.49.0
+ * contract remains served.
  */
-declare const KAY_PLUGIN_SDK_VERSION: "0.48.1";
+declare const KAY_PLUGIN_SDK_VERSION: "0.50.0";
 
 declare const KAY_PLUGIN_TARGET_NAMES: readonly ["kay.agent", "kay.app", "kay.ui"];
 
@@ -4559,12 +4577,14 @@ export declare interface KayAppDynamicContextSearchOptions {
 export declare interface KayAppEndpointContext {
     readonly credentials: readonly KayAppResolvedCredential[];
     readonly signal: AbortSignal;
+    /** Host-stamped origin of a sessionless cross-plugin call; absent for other callers. */
+    readonly callerPluginId?: string;
     /** Record only a scheme from this call's credentials after its provider operation succeeds. */
     reportWorked(schemeId: string): void;
 }
 
 /** The app-wide endpoint bus; payloads and returned values must be JSON. */
-export declare interface KayAppEndpoints {
+export declare interface KayAppEndpoints extends PluginEndpointCaller {
     register(name: string, handler: (payload: unknown, context: KayAppEndpointContext) => unknown | Promise<unknown>): void;
 }
 
@@ -4828,60 +4848,6 @@ export declare interface KayAppMcp {
     }): Promise<VendoredMcpOutcome>;
 }
 
-/**
- * Notes through Memory's ordinary notebook operations, without a chat session. Each call checks
- * `memory.read` or `memory.write`; a missing notebook or refused grant rejects. Paths are note
- * addresses such as `facts/this-computer`, without the `memory://` scheme.
- */
-export declare interface KayAppMemory {
-    read(path: string): Promise<KayAppMemoryNote | undefined>;
-    /** Create a note; an existing address is a conflict. */
-    create(path: string, input: KayAppMemoryNoteInput, options?: {
-        readonly signal?: AbortSignal;
-    }): Promise<void>;
-    /** Edit only the revision returned by `read`; concurrent changes reject as a conflict. */
-    edit(path: string, input: KayAppMemoryNoteEdit, options: {
-        readonly expectedRevision: string;
-    }): Promise<void>;
-}
-
-export declare interface KayAppMemoryNote {
-    readonly name: string;
-    readonly description: string;
-    readonly body: string;
-    readonly frontmatter: Readonly<Record<string, unknown>> | undefined;
-    readonly revision: string;
-}
-
-export declare interface KayAppMemoryNoteEdit {
-    readonly frontmatter?: {
-        readonly name?: string;
-        readonly description?: string;
-    };
-    readonly body?: {
-        readonly replace: string;
-    } | {
-        readonly edits: readonly {
-            readonly oldText: string;
-            readonly newText: string;
-        }[];
-    };
-}
-
-export declare interface KayAppMemoryNoteInput {
-    readonly name: string;
-    readonly description: string;
-    readonly body: string;
-    readonly sources?: readonly KayAppMemoryNoteSource[];
-}
-
-export declare interface KayAppMemoryNoteSource {
-    readonly id: string;
-    readonly uri: string;
-    readonly kind?: "user" | "source";
-    readonly at?: string;
-}
-
 /** Input to one bounded direct model completion with no transcript or tools. */
 export declare interface KayAppModelCompleteInput {
     /** Attribution slug (`^[a-z][a-z0-9-]*$`) naming what this call is for. */
@@ -5494,8 +5460,7 @@ export declare interface KayAppPluginApi {
      * present, like {@link signals}.
      */
     readonly skills: KayAppSkills;
-    /** Memory note operations; absent when this host has no notebook composition. */
-    readonly memory?: KayAppMemory;
+    readonly uri: PluginUriCaller;
     /**
      * Private API: only plugins Bonsai ships; refused for any other. The assistant's personality
      * file, each call checked against `soul.write`. Absent when the host composed no soul store.
@@ -5539,9 +5504,9 @@ export declare interface KayAppPluginApi {
      */
     readonly sealing: KayAppSealing;
     /**
-     * The app-wide endpoint bus (register handlers a consuming surface invokes). An endpoint whose
-     * only `invoke` grant is this plugin's own `kay.agent` target is reachable only from that target
-     * (`api.endpoints.invoke`), never from a surface.
+     * Register this plugin's app handlers or call another plugin's declared endpoint with
+     * `invokePlugin`. Foreign calls require this target's exact `endpoints.invoke` claim and
+     * cannot reach an endpoint restricted to its owner's agent target.
      */
     readonly endpoints: KayAppEndpoints;
     /** Publish one event declared by this plugin's `kay.app` manifest target. */
@@ -10016,6 +9981,28 @@ declare type PluginCardSubmitResult<T> = {
     readonly ok: false;
 }>;
 
+/** Sessionless JSON calls to another plugin's declared, publicly reachable endpoint. */
+export declare interface PluginEndpointCaller {
+    /**
+     * Never rejects. Both payload and result are validated against the provider's declared schemas.
+     * Nothing is queued or retried. Cancellation and timeouts leave the operation's effect unknown.
+     */
+    invokePlugin(providerPluginId: string, endpointLocalId: string, payload: unknown, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<PluginEndpointOutcome>;
+}
+
+export declare type PluginEndpointFailureReason = "not-declared" | "unavailable" | "timed-out" | "cancelled" | "failed" | "invalid" | "denied";
+
+export declare type PluginEndpointOutcome = {
+    readonly ok: true;
+    readonly value: unknown;
+} | {
+    readonly ok: false;
+    readonly reason: PluginEndpointFailureReason;
+    readonly message: string;
+};
+
 export declare const PluginEventEnvelope: z.ZodObject<{
     id: z.ZodString;
     localId: z.ZodString;
@@ -10178,6 +10165,38 @@ declare const PluginToolName: z.ZodString;
 
 declare type PluginToolName = z.infer<typeof PluginToolName>;
 
+/**
+ * Sessionless resource calls. Each call checks the calling target's exact scheme and verb grant.
+ * Results retain provider bytes, metadata and revisions; provider failures retain their URI tags.
+ * A cancellation or lost response does not prove a mutation was not applied.
+ */
+export declare interface PluginUriCaller {
+    read(input: string, options?: PluginUriReadOptions): Promise<RawResource>;
+    list(input: string, params?: UriListParams, options?: PluginUriCallOptions): Promise<UriListResult>;
+    search(input: string, params: UriSearchParams, options?: PluginUriCallOptions): Promise<UriSearchResult>;
+    write(input: string, content?: UriPayload | Uint8Array, options?: PluginUriWriteOptions): Promise<UriMutationResult | void>;
+    edit(input: string, payload: UriPayload, options?: PluginUriMutationOptions): Promise<UriMutationResult>;
+    delete(input: string, options?: PluginUriMutationOptions): Promise<UriMutationResult>;
+}
+
+export declare interface PluginUriCallOptions {
+    readonly cwd?: string;
+    readonly signal?: AbortSignal;
+}
+
+export declare interface PluginUriMutationOptions extends PluginUriCallOptions {
+    readonly expectedRevision?: string;
+}
+
+export declare interface PluginUriReadOptions extends PluginUriCallOptions {
+    readonly knownRevision?: string;
+}
+
+export declare interface PluginUriWriteOptions extends PluginUriMutationOptions {
+    readonly sources?: readonly UriWriteSource[];
+    readonly writeSource?: UriSourceDescriptor;
+}
+
 export declare interface PreparedAccessApproval {
     readonly uri: string;
     readonly content: Record<string, unknown>;
@@ -16644,6 +16663,8 @@ declare interface UriResolveContext_2 {
      * resolve a URI outside any verb call.
      */
     readonly sessionId?: string;
+    /** Host-stamped calling plugin; absent for session dispatch and resolver matching. */
+    readonly callerPluginId?: string;
     /**
      * WHO the dispatching session acts as, stamped by the host at the same dispatch site as
      * {@link UriResolveContext.sessionId} and just as un-influenceable by the caller - so a module