nutria-plugin 0.2.3__tar.gz → 0.3.0__tar.gz

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.3.0
+
+- Replace adapter-specific prepared actions with one portable exact-preview protocol.
+- Require typed value/resource inputs with explicit origin and sensitivity.
+- Require JSON result paths for model-visible read outputs and reject schema 2.2.
+
 ## 0.2.3
 
 - Make manifest schema 2.2 the only accepted plugin contract.

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: nutria-plugin
-Version: 0.2.3
+Version: 0.3.0
 Summary: SDK for building, validating, signing, and packaging Nutria plugins
 Project-URL: Homepage, https://github.com/AlRos14/nutria-plugin-sdk
 Project-URL: Repository, https://github.com/AlRos14/nutria-plugin-sdk
@@ -21,8 +21,8 @@ Description-Content-Type: text/markdown
 
 SDK for building, validating, signing, and packaging Nutria plugins.
 
-Release `0.2.3` is intentionally breaking. It accepts only manifest schema
-`2.2`, requires typed capabilities and world providers, and makes authority,
+Release `0.3.0` is intentionally breaking. It accepts only manifest schema
+`3.0`, requires typed capabilities and world providers, and makes authority,
 audience, task-context requirements, and exposure explicit. There is no runtime
 migration for schema 2.0/2.1 manifests and no compatibility/model-callability
 field.
@@ -34,7 +34,7 @@ and exact delivery of an approved snapshot.
 ## Install
 
 ```bash
-uv add nutria-plugin==0.2.3
+uv add nutria-plugin==0.3.0
 ```
 
 ## Scaffold and validate
@@ -49,11 +49,11 @@ The generated directory contains `plugin.json`, component directories for
 connections, skills, context documents, specs and hooks, plus an optional
 settings schema and assets.
 
-## Minimal schema 2.2 manifest
+## Minimal schema 3.0 manifest
 
 ```json
 {
-  "schema_version": "2.2",
+  "schema_version": "3.0",
   "id": "my-workspace-plugin",
   "name": "My Workspace Plugin",
   "version": "0.1.0",
@@ -74,7 +74,13 @@ settings schema and assets.
       "audience": ["team_internal"],
       "task_context": "optional"
     },
-    "exposure": "model"
+    "exposure": "model",
+    "produces": [{
+      "result_path": ".items",
+      "resource_type": "workspace.item",
+      "output_name": "items",
+      "many": true
+    }]
   }],
   "world_providers": [{
     "id": "workspace",

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/README.md

@@ -2,8 +2,8 @@
 
 SDK for building, validating, signing, and packaging Nutria plugins.
 
-Release `0.2.3` is intentionally breaking. It accepts only manifest schema
-`2.2`, requires typed capabilities and world providers, and makes authority,
+Release `0.3.0` is intentionally breaking. It accepts only manifest schema
+`3.0`, requires typed capabilities and world providers, and makes authority,
 audience, task-context requirements, and exposure explicit. There is no runtime
 migration for schema 2.0/2.1 manifests and no compatibility/model-callability
 field.
@@ -15,7 +15,7 @@ and exact delivery of an approved snapshot.
 ## Install
 
 ```bash
-uv add nutria-plugin==0.2.3
+uv add nutria-plugin==0.3.0
 ```
 
 ## Scaffold and validate
@@ -30,11 +30,11 @@ The generated directory contains `plugin.json`, component directories for
 connections, skills, context documents, specs and hooks, plus an optional
 settings schema and assets.
 
-## Minimal schema 2.2 manifest
+## Minimal schema 3.0 manifest
 
 ```json
 {
-  "schema_version": "2.2",
+  "schema_version": "3.0",
   "id": "my-workspace-plugin",
   "name": "My Workspace Plugin",
   "version": "0.1.0",
@@ -55,7 +55,13 @@ settings schema and assets.
       "audience": ["team_internal"],
       "task_context": "optional"
     },
-    "exposure": "model"
+    "exposure": "model",
+    "produces": [{
+      "result_path": ".items",
+      "resource_type": "workspace.item",
+      "output_name": "items",
+      "many": true
+    }]
   }],
   "world_providers": [{
     "id": "workspace",

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/docs/index.md

@@ -1,10 +1,10 @@
 # nutria-plugin SDK documentation
 
-Developer reference for SDK `0.2.3` and manifest schema `2.2`.
+Developer reference for SDK `0.3.0` and manifest schema `3.0`.
 
 | Document | Purpose |
 |---|---|
-| [quickstart.md](quickstart.md) | Build a strict schema 2.2 plugin |
+| [quickstart.md](quickstart.md) | Build a strict schema 3.0 plugin |
 | [manifest.md](manifest.md) | Manifest, capability, and provider contracts |
 | [reviewable-actions.md](reviewable-actions.md) | Host-owned drafts and external delivery |
 | [python-api.md](python-api.md) | Public Python API |
@@ -16,6 +16,6 @@ Developer reference for SDK `0.2.3` and manifest schema `2.2`.
 | [cli.md](cli.md) | CLI commands |
 
 A plugin bundle can contain connections, skills, context documents, hooks,
-settings, specs, and declarative admin assets. Its schema 2.2 manifest must also
+settings, specs, and declarative admin assets. Its schema 3.0 manifest must also
 declare at least one typed capability and world provider. Older schemas are not
 loaded or migrated.

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/docs/manifest.md

@@ -1,14 +1,14 @@
 # plugin.json manifest reference
 
 `plugin.json` is the single source of truth for plugin identity, runtime,
-capability authority, and provider topology. SDK 0.2.3 accepts exactly schema
-`2.2`; older schemas and unknown fields fail validation.
+capability authority, and provider topology. SDK 0.3.0 accepts exactly schema
+`3.0`; older schemas and unknown fields fail validation.
 
 ## Required top-level fields
 
 | Field | Contract |
 |---|---|
-| `schema_version` | Literal `"2.2"` |
+| `schema_version` | Literal `"3.0"` |
 | `id` | Lowercase plugin slug |
 | `name`, `description`, `author` | Non-empty display metadata |
 | `version` | Semantic version |
@@ -19,7 +19,7 @@ capability authority, and provider topology. SDK 0.2.3 accepts exactly schema
 Optional fields include `default_scope`, `paths`, `required_secrets`,
 `optional_secrets`, `remote_endpoints`, `tags`, `reviewable_actions`,
 `admin_extensions`, `admin_flows`, `mcp_server_entry`, `homepage`, `license`,
-and `signature`. A `compatibility` field is not part of schema 2.2.
+and `signature`. A `compatibility` field is not part of schema 3.0.
 
 ## Capability descriptor
 

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/docs/python-api.md

@@ -1,6 +1,6 @@
 # Python API reference
 
-SDK 0.2.3 exposes the strict schema 2.2 API.
+SDK 0.3.0 exposes the strict schema 3.0 API.
 
 ```python
 from nutria_plugin import (
@@ -39,7 +39,7 @@ manifest.to_file(Path("plugin.json"))
 payload = manifest.model_dump(mode="json", exclude_none=True)
 ```
 
-Validation is strict: schema version must be `2.2`, top-level extras are
+Validation is strict: schema version must be `3.0`, top-level extras are
 rejected, and capability/provider/action references are checked together.
 
 ## Bundles and packaging

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/docs/quickstart.md

@@ -1,9 +1,9 @@
-# Quickstart: a schema 2.2 plugin
+# Quickstart: a schema 3.0 plugin
 
 ## Install and scaffold
 
 ```bash
-uv add nutria-plugin==0.2.3
+uv add nutria-plugin==0.3.0
 nutria-plugin new inventory-lookup --name "Inventory Lookup"
 ```
 
@@ -11,7 +11,7 @@ nutria-plugin new inventory-lookup --name "Inventory Lookup"
 
 ```json
 {
-  "schema_version": "2.2",
+  "schema_version": "3.0",
   "id": "inventory-lookup",
   "name": "Inventory Lookup",
   "version": "0.1.0",
@@ -32,7 +32,12 @@ nutria-plugin new inventory-lookup --name "Inventory Lookup"
       "audience": ["team_internal", "public_customer"],
       "task_context": "optional"
     },
-    "exposure": "model"
+    "exposure": "model",
+    "produces": [{
+      "result_path": ".stock",
+      "resource_type": "warehouse.stock",
+      "output_name": "stock"
+    }]
   }],
   "world_providers": [{
     "id": "warehouse",

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/docs/reviewable-actions.md

@@ -1,6 +1,6 @@
 # Reviewable actions and external writes
 
-SDK 0.2.3 schema 2.2 defines one reviewable-action architecture:
+SDK 0.3.0 schema 3.0 defines one reviewable-action architecture:
 
 ```text
 ChatBotNutralia -> task context, encrypted draft, revision, approval, idempotency, receipts
@@ -36,9 +36,9 @@ requirements, input bindings, and `reviewable_action_id`:
   },
   "reviewable_action_id": "whatsapp-text",
   "inputs": [
-    {"semantic_field": "recipient", "argument_name": "recipient"},
-    {"semantic_field": "body", "argument_name": "body"},
-    {"semantic_field": "idempotency_key", "argument_name": "idempotency_key"}
+    {"kind": "value", "semantic_field": "recipient", "argument_name": "recipient", "sensitivity": "personal", "accepted_origins": ["current_user", "world_resource"]},
+    {"kind": "value", "semantic_field": "body", "argument_name": "body", "sensitivity": "personal", "accepted_origins": ["current_user"]},
+    {"kind": "value", "semantic_field": "idempotency_key", "argument_name": "idempotency_key", "sensitivity": "safe", "accepted_origins": ["current_user"]}
   ]
 }
 ```

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nutria-plugin"
-version = "0.2.3"
+version = "0.3.0"
 description = "SDK for building, validating, signing, and packaging Nutria plugins"
 readme = "README.md"
 license = {text = "MIT"}
@@ -48,4 +48,5 @@ target-version = "py311"
 dev = [
     "pytest>=9.0.2",
     "pytest-asyncio>=1.3.0",
+    "ruff>=0.8",
 ]

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/src/nutria_plugin/__init__.py

@@ -15,7 +15,7 @@ Signing:
     generate_keypair, sign_manifest, verify_manifest, SignatureStatus
 """
 
-__version__ = "0.2.3"
+__version__ = "0.3.0"
 
 from .capabilities import (
     CapabilityDescriptor,

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/src/nutria_plugin/capabilities.py

@@ -36,16 +36,12 @@ class NonCallableReason(BaseModel):
 
 
 class PreparedActionDescriptor(BaseModel):
-    """Exact-preview contract used by the host prepared-action boundary."""
+    """Portable exact-preview contract used by every Nutria host."""
 
     preview_argument: str = Field(..., pattern=r"^[a-zA-Z][a-zA-Z0-9_-]{0,127}$")
     preview_value: Any
     execute_value: Any
-    adapter: str = Field(..., pattern=r"^[a-z][a-z0-9_.-]{0,127}$")
     ttl_seconds: int = Field(..., ge=60, le=86_400)
-    merge_previews: bool
-    guard_mode: str = Field(..., pattern=r"^(always|pending_only)$")
-    argument_default: Any
 
     model_config = {"extra": "forbid"}
 
@@ -152,12 +148,15 @@ class ResourceBinding(BaseModel):
 
 
 class CapabilityInputBinding(BaseModel):
-    """Maps a semantic input to one plugin tool argument."""
+    """Maps a typed value or world resource to one plugin argument."""
 
+    kind: Literal["value", "resource"]
     semantic_field: str = Field(..., pattern=r"^[a-z][a-z0-9_.-]{0,127}$")
     argument_name: str = Field(..., pattern=r"^[a-zA-Z][a-zA-Z0-9_-]{0,127}$")
     resource_type: ResourceType | str | None = None
     required: bool = True
+    sensitivity: Literal["safe", "personal"] = "safe"
+    accepted_origins: list[Literal["current_user", "world_resource"]] = Field(min_length=1)
 
     model_config = {"extra": "forbid"}
 
@@ -168,11 +167,21 @@ class CapabilityInputBinding(BaseModel):
             _validate_resource_type_id(value)
         return value
 
+    @model_validator(mode="after")
+    def _validate_kind(self) -> "CapabilityInputBinding":
+        if self.kind == "resource" and self.resource_type is None:
+            raise ValueError("resource inputs require resource_type")
+        if self.kind == "value" and self.resource_type is not None:
+            raise ValueError("value inputs must not declare resource_type")
+        if self.sensitivity == "personal" and "current_user" not in self.accepted_origins:
+            raise ValueError("personal inputs must accept current_user evidence")
+        return self
+
 
 class CapabilityOutputBinding(BaseModel):
     """Maps one plugin result field to a typed resource output."""
 
-    field_name: str = Field(..., pattern=r"^[a-zA-Z][a-zA-Z0-9_.-]{0,127}$")
+    result_path: str = Field(..., pattern=r"^\$?(?:\.[a-zA-Z][a-zA-Z0-9_-]*)+$")
     resource_type: ResourceType | str
     output_name: str = Field(..., pattern=r"^[a-z][a-z0-9_.-]{0,127}$")
     many: bool = False
@@ -335,6 +344,15 @@ class CapabilityDescriptor(BaseModel):
                 raise ValueError(
                     "model-selectable external writes require execution idempotency"
                 )
+        if self.exposure == CapabilityExposure.MODEL and self.effect == CapabilityEffect.READ:
+            if not self.produces:
+                raise ValueError("model-selectable reads require declared outputs")
+        if self.exposure == CapabilityExposure.MODEL and self.effect in {
+            CapabilityEffect.WRITE,
+            CapabilityEffect.EXTERNAL_WRITE,
+        }:
+            if not self.inputs:
+                raise ValueError("model-selectable writes require declared inputs")
         return self
 
 

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/src/nutria_plugin/manifest.py

@@ -315,7 +315,7 @@ class PluginAdminFlow(BaseModel):
 class PluginManifest(BaseModel):
     """Manifest stored in plugin.json — the single source of truth for plugin metadata."""
 
-    schema_version: Literal["2.2"]
+    schema_version: Literal["3.0"]
     id: str = Field(..., pattern=r"^[a-z][a-z0-9\-]*$", max_length=64)
     name: str = Field(..., min_length=1, max_length=128)
     version: str = Field(..., min_length=5, max_length=64)
@@ -383,6 +383,30 @@ class PluginManifest(BaseModel):
                 "capability connections require a matching world provider: "
                 + ", ".join(sorted(missing_provider_connections))
             )
+        provider_resource_types = {
+            provider.connection_id: {
+                resource.id.value if isinstance(resource.id, ResourceType) else str(resource.id)
+                for resource in provider.resource_types
+            }
+            for provider in self.world_providers
+            if provider.connection_id
+        }
+        for capability in self.capabilities:
+            if not capability.connection_id:
+                continue
+            available_types = provider_resource_types.get(capability.connection_id, set())
+            undeclared = {
+                output.resource_type.value
+                if isinstance(output.resource_type, ResourceType)
+                else str(output.resource_type)
+                for output in capability.produces
+            } - available_types
+            if undeclared:
+                raise ValueError(
+                    f"capability {capability.id!r} produces resource types not declared by "
+                    f"provider {capability.connection_id!r}: "
+                    + ", ".join(sorted(undeclared))
+                )
         for provider in self.world_providers:
             for resource in provider.resource_types:
                 resource_id = resource.id.value if isinstance(resource.id, ResourceType) else str(resource.id)

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/src/nutria_plugin/packaging.py

@@ -25,7 +25,7 @@ class PackagingError(Exception):
 SCAFFOLD_TEMPLATE = {
     "plugin.json": lambda plugin_id, name: json.dumps(
         {
-            "schema_version": "2.2",
+            "schema_version": "3.0",
             "id": plugin_id,
             "name": name,
             "version": "0.1.0",
@@ -49,6 +49,13 @@ SCAFFOLD_TEMPLATE = {
                         "task_context": "optional",
                     },
                     "exposure": "model",
+                    "produces": [
+                        {
+                            "result_path": ".health",
+                            "resource_type": f"{plugin_id}.resource",
+                            "output_name": "health",
+                        }
+                    ],
                 }
             ],
             "world_providers": [

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/tests/test_bundle.py

@@ -28,7 +28,7 @@ def _make_zip(files: dict[str, str]) -> bytes:
 
 VALID_MANIFEST = json.dumps(
     {
-        "schema_version": "2.2",
+        "schema_version": "3.0",
         "id": "test-plugin",
         "name": "Test",
         "version": "1.0.0",
@@ -48,7 +48,14 @@ VALID_MANIFEST = json.dumps(
                     "audience": ["private_internal"],
                     "task_context": "optional"
                 },
-                "exposure": "model"
+                "exposure": "model",
+                "produces": [
+                    {
+                        "result_path": ".health",
+                        "resource_type": "test.resource",
+                        "output_name": "health"
+                    }
+                ]
             }
         ],
         "world_providers": [

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/tests/test_capability_contracts.py

@@ -1,4 +1,4 @@
-"""Strict world-graph capability contracts introduced in SDK 0.2.3."""
+"""Strict world-graph capability contracts introduced in SDK 0.3.0."""
 
 from __future__ import annotations
 
@@ -21,6 +21,15 @@ def _capability(**overrides):
             "task_context": "optional",
         },
         "exposure": "model",
+        "inputs": [
+            {
+                "kind": "value",
+                "semantic_field": "recipient",
+                "argument_name": "recipient",
+                "sensitivity": "personal",
+                "accepted_origins": ["current_user"],
+            }
+        ],
     }
     payload.update(overrides)
     return payload
@@ -32,11 +41,7 @@ def _safety_contracts():
             "preview_argument": "preview_only",
             "preview_value": True,
             "execute_value": False,
-            "adapter": "exact_preview",
             "ttl_seconds": 3600,
-            "merge_previews": True,
-            "guard_mode": "pending_only",
-            "argument_default": True,
         },
         "idempotency": {
             "argument_name": "idempotency_key",
@@ -47,13 +52,33 @@ def _safety_contracts():
 
 
 def test_model_capability_requires_explicit_model_exposure():
-    descriptor = CapabilityDescriptor.model_validate(_capability(effect="read"))
+    descriptor = CapabilityDescriptor.model_validate(
+        _capability(
+            effect="read",
+            produces=[
+                {
+                    "result_path": ".shipment",
+                    "resource_type": "mrw.shipment",
+                    "output_name": "shipment",
+                }
+            ],
+        )
+    )
     assert descriptor.exposure == CapabilityExposure.MODEL
     assert descriptor.non_callable_reason is None
 
 
 def test_missing_exposure_is_rejected():
-    payload = _capability(effect="read")
+    payload = _capability(
+        effect="read",
+        produces=[
+            {
+                "result_path": ".shipment",
+                "resource_type": "mrw.shipment",
+                "output_name": "shipment",
+            }
+        ],
+    )
     payload.pop("exposure")
     with pytest.raises(ValidationError, match="exposure"):
         CapabilityDescriptor.model_validate(payload)
@@ -82,7 +107,7 @@ def test_model_selectable_external_write_requires_all_safety_contracts():
     descriptor = CapabilityDescriptor.model_validate(
         _capability(**_safety_contracts())
     )
-    assert descriptor.prepared_action.adapter == "exact_preview"
+    assert descriptor.prepared_action.preview_argument == "preview_only"
     assert descriptor.idempotency.required_for_execution is True
     assert descriptor.completion.receipts == ["shipping.shipment.created"]
 
@@ -111,5 +136,42 @@ def test_task_owned_resources_require_task_context():
             _capability(
                 effect="read",
                 consumes=[{"name": "action", "resource_type": "prepared_action"}],
+                produces=[
+                    {
+                        "result_path": ".shipment",
+                        "resource_type": "mrw.shipment",
+                        "output_name": "shipment",
+                    }
+                ],
+            )
+        )
+
+
+def test_model_read_requires_typed_output():
+    with pytest.raises(ValidationError, match="declared outputs"):
+        CapabilityDescriptor.model_validate(_capability(effect="read", inputs=[]))
+
+
+def test_unknown_prepared_action_adapter_is_rejected():
+    contracts = _safety_contracts()
+    contracts["prepared_action"]["adapter"] = "plugin.argument_toggle"
+    with pytest.raises(ValidationError, match="adapter"):
+        CapabilityDescriptor.model_validate(_capability(**contracts))
+
+
+def test_personal_input_requires_current_user_origin():
+    with pytest.raises(ValidationError, match="current_user"):
+        CapabilityDescriptor.model_validate(
+            _capability(
+                inputs=[
+                    {
+                        "kind": "value",
+                        "semantic_field": "recipient",
+                        "argument_name": "recipient",
+                        "sensitivity": "personal",
+                        "accepted_origins": ["world_resource"],
+                    }
+                ],
+                **_safety_contracts(),
             )
         )

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/tests/test_manifest.py

@@ -18,7 +18,7 @@ from nutria_plugin.manifest import (
 
 def _minimal_manifest(**overrides) -> dict:
     base = {
-        "schema_version": "2.2",
+        "schema_version": "3.0",
         "id": "test-plugin",
         "name": "Test Plugin",
         "version": "1.0.0",
@@ -39,6 +39,13 @@ def _minimal_manifest(**overrides) -> dict:
                     "task_context": "optional",
                 },
                 "exposure": "model",
+                "produces": [
+                    {
+                        "result_path": ".health",
+                        "resource_type": "test.resource",
+                        "output_name": "health",
+                    }
+                ],
             }
         ],
         "world_providers": [
@@ -97,21 +104,21 @@ def test_version_must_be_semver():
         PluginManifest.model_validate(_minimal_manifest(version="1.0"))
 
 
-def test_schema_version_must_be_2_2():
+def test_schema_version_must_be_3_0():
     with pytest.raises(ValidationError):
         PluginManifest.model_validate(_minimal_manifest(schema_version="1.1"))
 
 
-@pytest.mark.parametrize("version", ["1.0", "2.0", "2.1", "2.3"])
+@pytest.mark.parametrize("version", ["1.0", "2.0", "2.1", "2.2", "2.3"])
 def test_other_schema_versions_are_rejected(version):
     with pytest.raises(ValidationError):
         PluginManifest.model_validate(_minimal_manifest(schema_version=version))
 
 
-def test_schema_2_2_world_provider_accepts_custom_resource_type():
+def test_schema_3_0_world_provider_accepts_custom_resource_type():
     manifest = PluginManifest.model_validate(
         _minimal_manifest(
-            schema_version="2.2",
+            schema_version="3.0",
             capabilities=[
                 {
                     "id": "workspace.search",
@@ -128,7 +135,7 @@ def test_schema_2_2_world_provider_accepts_custom_resource_type():
                     "exposure": "model",
                     "produces": [
                         {
-                            "field_name": "items",
+                            "result_path": ".items",
                             "resource_type": "workspace.item",
                             "output_name": "items",
                             "many": True,
@@ -159,7 +166,7 @@ def test_schema_2_2_world_provider_accepts_custom_resource_type():
         )
     )
 
-    assert manifest.schema_version == "2.2"
+    assert manifest.schema_version == "3.0"
     assert manifest.world_providers[0].resource_types[0].id == "workspace.item"
 
 
@@ -167,7 +174,7 @@ def test_world_provider_rejects_unknown_capability_reference():
     with pytest.raises(ValidationError, match="unknown capability"):
         PluginManifest.model_validate(
             _minimal_manifest(
-                schema_version="2.2",
+                schema_version="3.0",
                 world_providers=[
                     {
                         "id": "workspace",
@@ -175,6 +182,12 @@ def test_world_provider_rejects_unknown_capability_reference():
                         "description": "Authoritative workspace provider.",
                         "connection_id": "test",
                         "resource_types": [
+                            {
+                                "id": "test.resource",
+                                "title": "Test resource",
+                                "description": "One stable test resource.",
+                                "identity_fields": ["id"],
+                            },
                             {
                                 "id": "workspace.item",
                                 "title": "Workspace item",
@@ -189,6 +202,13 @@ def test_world_provider_rejects_unknown_capability_reference():
         )
 
 
+def test_capability_output_requires_provider_resource_declaration():
+    payload = _minimal_manifest()
+    payload["capabilities"][0]["produces"][0]["resource_type"] = "missing.resource"
+    with pytest.raises(ValidationError, match="not declared by provider"):
+        PluginManifest.model_validate(payload)
+
+
 def test_empty_runtime_types_rejected():
     with pytest.raises(ValidationError):
         PluginManifest.model_validate(_minimal_manifest(runtime_types=[]))

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/tests/test_reviewable_actions.py

@@ -60,31 +60,52 @@ def _capabilities():
                 {"name": "action", "resource_type": "prepared_action"}
             ],
             "inputs": [
-                {"semantic_field": "recipient", "argument_name": "recipient"},
-                {"semantic_field": "body", "argument_name": "body"},
                 {
+                    "kind": "value",
+                    "semantic_field": "recipient",
+                    "argument_name": "recipient",
+                    "sensitivity": "personal",
+                    "accepted_origins": ["current_user", "world_resource"],
+                },
+                {
+                    "kind": "value",
+                    "semantic_field": "body",
+                    "argument_name": "body",
+                    "accepted_origins": ["current_user"],
+                },
+                {
+                    "kind": "value",
                     "semantic_field": "subject",
                     "argument_name": "subject",
                     "required": False,
+                    "accepted_origins": ["current_user", "world_resource"],
                 },
                 {
+                    "kind": "value",
                     "semantic_field": "reply_target",
                     "argument_name": "reply_to_message_id",
                     "required": False,
+                    "accepted_origins": ["world_resource"],
                 },
                 {
+                    "kind": "value",
                     "semantic_field": "source_ref",
                     "argument_name": "source_email_id",
                     "required": False,
+                    "accepted_origins": ["world_resource"],
                 },
                 {
+                    "kind": "value",
                     "semantic_field": "source_fingerprint",
                     "argument_name": "source_fingerprint",
                     "required": False,
+                    "accepted_origins": ["world_resource"],
                 },
                 {
+                    "kind": "value",
                     "semantic_field": "idempotency_key",
                     "argument_name": "idempotency_key",
+                    "accepted_origins": ["current_user"],
                 },
             ],
             "requirements": {
@@ -104,7 +125,7 @@ def _capabilities():
 
 def _manifest(**overrides):
     data = {
-        "schema_version": "2.2",
+        "schema_version": "3.0",
         "id": "email-plugin",
         "name": "Email",
         "version": "1.0.0",

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/tests/test_signing.py

@@ -17,7 +17,7 @@ from nutria_plugin.signing import (
 
 def _minimal_dict(**overrides) -> dict:
     base = {
-        "schema_version": "2.2",
+        "schema_version": "3.0",
         "id": "test-plugin",
         "name": "Test",
         "version": "1.0.0",

{nutria_plugin-0.2.3 → nutria_plugin-0.3.0}/uv.lock

@@ -262,7 +262,7 @@ wheels = [
 
 [[package]]
 name = "nutria-plugin"
-version = "0.2.2"
+version = "0.3.0"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },
@@ -281,6 +281,7 @@ dev = [
 dev = [
     { name = "pytest" },
     { name = "pytest-asyncio" },
+    { name = "ruff" },
 ]
 
 [package.metadata]
@@ -298,6 +299,7 @@ provides-extras = ["dev"]
 dev = [
     { name = "pytest", specifier = ">=9.0.2" },
     { name = "pytest-asyncio", specifier = ">=1.3.0" },
+    { name = "ruff", specifier = ">=0.8" },
 ]
 
 [[package]]