nutria-plugin 0.3.2__tar.gz → 0.4.0__tar.gz

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.4.0
+
+- Replace the `prepare` effect with structural `prepared_action` outputs and the
+  capability's actual `read` or `write` mutation scope.
+- Resolve `requirements.task_context` universally with `optional` as the default
+  and support the `required | optional | forbidden` tri-state.
+- Allow host-owned task resources as capability outputs without requiring an
+  external world provider to claim them.
+- Accept only manifest schema 4.0; no legacy schema behavior is retained.
+
 ## 0.3.2
 
 - Add transport-neutral MCP result normalization for FastMCP scalar JSON envelopes.

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: nutria-plugin
-Version: 0.3.2
+Version: 0.4.0
 Summary: SDK for building, validating, signing, and packaging Nutria plugins
 Project-URL: Homepage, https://github.com/AlRos14/nutria-plugin-sdk
 Project-URL: Repository, https://github.com/AlRos14/nutria-plugin-sdk
@@ -21,11 +21,11 @@ Description-Content-Type: text/markdown
 
 SDK for building, validating, signing, and packaging Nutria plugins.
 
-Release `0.3.2` uses the intentionally breaking schema introduced in 0.3.0. It accepts only manifest schema
-`3.0`, requires typed capabilities and world providers, and makes authority,
-audience, task-context requirements, and exposure explicit. There is no runtime
-migration for schema 2.0/2.1 manifests and no compatibility/model-callability
-field.
+Release `0.4.0` accepts only manifest schema `4.0`. Capabilities use their real
+business effect (`read`, `write`, or `external_write`); preparation is expressed
+by producing `prepared_action`, not by a workflow-phase effect. Every parsed
+requirement resolves `task_context` to `required`, `optional`, or `forbidden`,
+with `optional` as the schema default. There is no legacy manifest compatibility.
 
 ChatBotNutralia owns task context, reviewable drafts, revisions, approval,
 idempotency, and completion receipts. Plugins own authoritative provider reads
@@ -34,7 +34,7 @@ and exact delivery of an approved snapshot.
 ## Install
 
 ```bash
-uv add nutria-plugin==0.3.2
+uv add nutria-plugin==0.4.0
 ```
 
 ## Scaffold and validate
@@ -49,11 +49,11 @@ The generated directory contains `plugin.json`, component directories for
 connections, skills, context documents, specs and hooks, plus an optional
 settings schema and assets.
 
-## Minimal schema 3.0 manifest
+## Minimal schema 4.0 manifest
 
 ```json
 {
-  "schema_version": "3.0",
+  "schema_version": "4.0",
   "id": "my-workspace-plugin",
   "name": "My Workspace Plugin",
   "version": "0.1.0",
@@ -98,11 +98,12 @@ settings schema and assets.
 }
 ```
 
-Every capability must declare `requirements` and `exposure`. Host/admin-only
-capabilities also require a safe `non_callable_reason`. Task-owned resources
-(`task`, `artifact`, `prepared_action`) require `task_context: "required"`.
-Every connection referenced by a capability must be represented by a matching
-world provider.
+Every capability must declare `requirements` and `exposure`. `task_context`
+defaults to `optional`; hosts resolve and may promote it to `required` when the
+capability consumes or produces task-owned resources such as `task`, `artifact`,
+or `prepared_action`. Host/admin-only capabilities also require a safe
+`non_callable_reason`. Every connection referenced by a capability must be
+represented by a matching world provider.
 
 For customer messages, use a host-owned `reviewable_actions` contract. Do not
 create plugin draft tables or native saved-draft tools. See

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/README.md

@@ -2,11 +2,11 @@
 
 SDK for building, validating, signing, and packaging Nutria plugins.
 
-Release `0.3.2` uses the intentionally breaking schema introduced in 0.3.0. It accepts only manifest schema
-`3.0`, requires typed capabilities and world providers, and makes authority,
-audience, task-context requirements, and exposure explicit. There is no runtime
-migration for schema 2.0/2.1 manifests and no compatibility/model-callability
-field.
+Release `0.4.0` accepts only manifest schema `4.0`. Capabilities use their real
+business effect (`read`, `write`, or `external_write`); preparation is expressed
+by producing `prepared_action`, not by a workflow-phase effect. Every parsed
+requirement resolves `task_context` to `required`, `optional`, or `forbidden`,
+with `optional` as the schema default. There is no legacy manifest compatibility.
 
 ChatBotNutralia owns task context, reviewable drafts, revisions, approval,
 idempotency, and completion receipts. Plugins own authoritative provider reads
@@ -15,7 +15,7 @@ and exact delivery of an approved snapshot.
 ## Install
 
 ```bash
-uv add nutria-plugin==0.3.2
+uv add nutria-plugin==0.4.0
 ```
 
 ## Scaffold and validate
@@ -30,11 +30,11 @@ The generated directory contains `plugin.json`, component directories for
 connections, skills, context documents, specs and hooks, plus an optional
 settings schema and assets.
 
-## Minimal schema 3.0 manifest
+## Minimal schema 4.0 manifest
 
 ```json
 {
-  "schema_version": "3.0",
+  "schema_version": "4.0",
   "id": "my-workspace-plugin",
   "name": "My Workspace Plugin",
   "version": "0.1.0",
@@ -79,11 +79,12 @@ settings schema and assets.
 }
 ```
 
-Every capability must declare `requirements` and `exposure`. Host/admin-only
-capabilities also require a safe `non_callable_reason`. Task-owned resources
-(`task`, `artifact`, `prepared_action`) require `task_context: "required"`.
-Every connection referenced by a capability must be represented by a matching
-world provider.
+Every capability must declare `requirements` and `exposure`. `task_context`
+defaults to `optional`; hosts resolve and may promote it to `required` when the
+capability consumes or produces task-owned resources such as `task`, `artifact`,
+or `prepared_action`. Host/admin-only capabilities also require a safe
+`non_callable_reason`. Every connection referenced by a capability must be
+represented by a matching world provider.
 
 For customer messages, use a host-owned `reviewable_actions` contract. Do not
 create plugin draft tables or native saved-draft tools. See

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/docs/index.md

@@ -1,10 +1,10 @@
 # nutria-plugin SDK documentation
 
-Developer reference for SDK `0.3.1` and manifest schema `3.0`.
+Developer reference for SDK `0.4.0` and manifest schema `4.0`.
 
 | Document | Purpose |
 |---|---|
-| [quickstart.md](quickstart.md) | Build a strict schema 3.0 plugin |
+| [quickstart.md](quickstart.md) | Build a strict schema 4.0 plugin |
 | [manifest.md](manifest.md) | Manifest, capability, and provider contracts |
 | [reviewable-actions.md](reviewable-actions.md) | Host-owned drafts and external delivery |
 | [python-api.md](python-api.md) | Public Python API |
@@ -16,6 +16,6 @@ Developer reference for SDK `0.3.1` and manifest schema `3.0`.
 | [cli.md](cli.md) | CLI commands |
 
 A plugin bundle can contain connections, skills, context documents, hooks,
-settings, specs, and declarative admin assets. Its schema 3.0 manifest must also
+settings, specs, and declarative admin assets. Its schema 4.0 manifest must also
 declare at least one typed capability and world provider. Older schemas are not
 loaded or migrated.

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/docs/manifest.md

@@ -1,14 +1,14 @@
 # plugin.json manifest reference
 
 `plugin.json` is the single source of truth for plugin identity, runtime,
-capability authority, and provider topology. SDK 0.3.1 accepts exactly schema
-`3.0`; older schemas and unknown fields fail validation.
+capability authority, and provider topology. SDK 0.4.0 accepts exactly schema
+`4.0`; older schemas and unknown fields fail validation.
 
 ## Required top-level fields
 
 | Field | Contract |
 |---|---|
-| `schema_version` | Literal `"3.0"` |
+| `schema_version` | Literal `"4.0"` |
 | `id` | Lowercase plugin slug |
 | `name`, `description`, `author` | Non-empty display metadata |
 | `version` | Semantic version |
@@ -19,23 +19,24 @@ capability authority, and provider topology. SDK 0.3.1 accepts exactly schema
 Optional fields include `default_scope`, `paths`, `required_secrets`,
 `optional_secrets`, `remote_endpoints`, `tags`, `reviewable_actions`,
 `admin_extensions`, `admin_flows`, `mcp_server_entry`, `homepage`, `license`,
-and `signature`. A `compatibility` field is not part of schema 3.0.
+and `signature`. A `compatibility` field is not part of schema 4.0.
 
 ## Capability descriptor
 
 Each capability declares:
 
 - stable `id`, `title`, and `description`;
-- `effect`: `read`, `prepare`, `write`, or `external_write`;
+- `effect`: `read`, `write`, or `external_write`;
 - concrete `tool` and optional `connection_id`;
 - typed `inputs`, `consumes`, and `produces` bindings;
-- required `requirements.authority`, `requirements.audience`, and
-  `requirements.task_context`;
+- required `requirements.authority` and `requirements.audience`, plus resolved
+  `requirements.task_context` (`required`, `optional`, or `forbidden`, default
+  `optional`);
 - required `exposure`: `model`, `host`, or `admin`.
 
 `host` and `admin` exposure require `non_callable_reason` with a stable code and
-safe summary. `model` exposure must not declare it. Task-owned resource bindings
-require `task_context: "required"`.
+safe summary. `model` exposure must not declare it. Hosts structurally promote
+task-owned resource bindings to effective `task_context: "required"`.
 
 A model-exposed `external_write` must declare `prepared_action`, `idempotency`,
 and `completion`. Reviewable delivery capabilities are instead host-only and
@@ -60,8 +61,9 @@ same manifest.
 The host owns the encrypted draft and approval lifecycle. A reviewable action
 maps stable semantic fields to one host-only external-write capability. Every
 delivery maps `recipient`, `body`, and `idempotency_key`; required capability
-inputs must be mapped. Preparation capabilities use `effect: "prepare"` and
-must be pure/read-only. See [reviewable-actions.md](reviewable-actions.md).
+inputs must be mapped. Preparation capabilities produce `prepared_action` and
+declare their actual `read` or `write` mutation scope. See
+[reviewable-actions.md](reviewable-actions.md).
 
 ## Paths and settings
 

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/docs/python-api.md

@@ -1,6 +1,6 @@
 # Python API reference
 
-SDK 0.3.1 exposes the strict schema 3.0 API.
+SDK 0.4.0 exposes the strict schema 4.0 API.
 
 ```python
 from nutria_plugin import (
@@ -39,7 +39,7 @@ manifest.to_file(Path("plugin.json"))
 payload = manifest.model_dump(mode="json", exclude_none=True)
 ```
 
-Validation is strict: schema version must be `3.0`, top-level extras are
+Validation is strict: schema version must be `4.0`, top-level extras are
 rejected, and capability/provider/action references are checked together.
 
 ## Bundles and packaging

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/docs/quickstart.md

@@ -1,9 +1,9 @@
-# Quickstart: a schema 3.0 plugin
+# Quickstart: a schema 4.0 plugin
 
 ## Install and scaffold
 
 ```bash
-uv add nutria-plugin==0.3.1
+uv add nutria-plugin==0.4.0
 nutria-plugin new inventory-lookup --name "Inventory Lookup"
 ```
 
@@ -11,7 +11,7 @@ nutria-plugin new inventory-lookup --name "Inventory Lookup"
 
 ```json
 {
-  "schema_version": "3.0",
+  "schema_version": "4.0",
   "id": "inventory-lookup",
   "name": "Inventory Lookup",
   "version": "0.1.0",
@@ -67,5 +67,5 @@ uv run nutria-plugin pack inventory-lookup \
   --output inventory-lookup-0.1.0.zip
 ```
 
-Any schema 2.0/2.1 field, unknown property, missing provider, or incomplete
+Any older-schema field, unknown property, missing provider, or incomplete
 authority/exposure contract fails validation and must be corrected explicitly.

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/docs/reviewable-actions.md

@@ -1,10 +1,10 @@
 # Reviewable actions and external writes
 
-SDK 0.3.1 schema 3.0 defines one reviewable-action architecture:
+SDK 0.4.0 schema 4.0 defines one reviewable-action architecture:
 
 ```text
 ChatBotNutralia -> task context, encrypted draft, revision, approval, idempotency, receipts
-Plugin           -> provider reads, pure preparation, exact approved delivery
+Plugin           -> provider reads, preparation capability, exact approved delivery
 SDK              -> strict capability/provider/reviewable-action contracts
 ```
 
@@ -68,12 +68,13 @@ Every delivery maps `idempotency_key`. Required execution inputs must appear in
 the action map. Recipient, source/thread/order identities, channel, and mode are
 immutable; only explicitly editable fields can change.
 
-## Pure preparation
+## Preparation capability
 
-An optional reply-envelope preparation capability uses `effect: "prepare"`.
-It may resolve authoritative recipient/thread/source fingerprints but cannot
-persist a draft or write externally. The action's `prepare_capability` and
-`execute_capability` must be distinct and use the same connection.
+An optional reply-envelope preparation capability is identified structurally by
+producing `prepared_action`. It uses `read` when it only resolves authoritative
+recipient/thread/source fingerprints, or `write` when it mutates local durable
+state. The action's `prepare_capability` and `execute_capability` must be
+distinct and use the same connection.
 
 ## Host lifecycle
 

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "nutria-plugin"
-version = "0.3.2"
+version = "0.4.0"
 description = "SDK for building, validating, signing, and packaging Nutria plugins"
 readme = "README.md"
 license = {text = "MIT"}

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/src/nutria_plugin/__init__.py

@@ -15,7 +15,7 @@ Signing:
     generate_keypair, sign_manifest, verify_manifest, SignatureStatus
 """
 
-__version__ = "0.3.2"
+__version__ = "0.4.0"
 
 from .capabilities import (
     CapabilityDescriptor,

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/src/nutria_plugin/capabilities.py

@@ -13,7 +13,6 @@ _RESOURCE_TYPE_PATTERN = r"^[a-z][a-z0-9_.-]{0,127}$"
 
 class CapabilityEffect(str, Enum):
     READ = "read"
-    PREPARE = "prepare"
     WRITE = "write"
     EXTERNAL_WRITE = "external_write"
 
@@ -120,7 +119,7 @@ class CapabilityRequirement(BaseModel):
 
     authority: Literal["read", "write_internal", "write_external"]
     audience: list[str] = Field(..., min_length=1)
-    task_context: Literal["optional", "required"]
+    task_context: Literal["optional", "required", "forbidden"] = "optional"
 
     model_config = {"extra": "forbid"}
 
@@ -312,19 +311,6 @@ class CapabilityDescriptor(BaseModel):
         output_names = [item.output_name for item in self.produces]
         if len(output_names) != len(set(output_names)):
             raise ValueError("capability outputs must not repeat output names")
-        task_owned_types = {
-            ResourceType.TASK.value,
-            ResourceType.ARTIFACT.value,
-            ResourceType.PREPARED_ACTION.value,
-        }
-        bound_types = {
-            item.resource_type.value
-            if isinstance(item.resource_type, ResourceType)
-            else str(item.resource_type)
-            for item in (*self.consumes, *self.produces)
-        }
-        if bound_types & task_owned_types and self.requirements.task_context != "required":
-            raise ValueError("task-owned resources require task_context=required")
         if self.effect == CapabilityEffect.EXTERNAL_WRITE and self.exposure == CapabilityExposure.MODEL:
             missing = [
                 name

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/src/nutria_plugin/manifest.py

@@ -315,7 +315,7 @@ class PluginAdminFlow(BaseModel):
 class PluginManifest(BaseModel):
     """Manifest stored in plugin.json — the single source of truth for plugin metadata."""
 
-    schema_version: Literal["3.0"]
+    schema_version: Literal["4.0"]
     id: str = Field(..., pattern=r"^[a-z][a-z0-9\-]*$", max_length=64)
     name: str = Field(..., min_length=1, max_length=128)
     version: str = Field(..., min_length=5, max_length=64)
@@ -391,6 +391,11 @@ class PluginManifest(BaseModel):
             for provider in self.world_providers
             if provider.connection_id
         }
+        host_owned_resource_types = {
+            ResourceType.TASK.value,
+            ResourceType.ARTIFACT.value,
+            ResourceType.PREPARED_ACTION.value,
+        }
         for capability in self.capabilities:
             if not capability.connection_id:
                 continue
@@ -400,7 +405,7 @@ class PluginManifest(BaseModel):
                 if isinstance(output.resource_type, ResourceType)
                 else str(output.resource_type)
                 for output in capability.produces
-            } - available_types
+            } - available_types - host_owned_resource_types
             if undeclared:
                 raise ValueError(
                     f"capability {capability.id!r} produces resource types not declared by "
@@ -475,8 +480,16 @@ class PluginManifest(BaseModel):
                         f"reviewable action {action.id!r} references unknown preparation capability "
                         f"{action.prepare_capability!r}"
                     )
-                if prepare.effect != CapabilityEffect.PREPARE:
-                    raise ValueError("reviewable preparation capability must use effect=prepare")
+                prepared_outputs = {
+                    output.resource_type.value
+                    if isinstance(output.resource_type, ResourceType)
+                    else str(output.resource_type)
+                    for output in prepare.produces
+                }
+                if ResourceType.PREPARED_ACTION.value not in prepared_outputs:
+                    raise ValueError(
+                        "reviewable preparation capability must produce prepared_action"
+                    )
                 if prepare.connection_id != action.connection_id:
                     raise ValueError(
                         "reviewable preparation capability connection does not match action"

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/src/nutria_plugin/packaging.py

@@ -25,7 +25,7 @@ class PackagingError(Exception):
 SCAFFOLD_TEMPLATE = {
     "plugin.json": lambda plugin_id, name: json.dumps(
         {
-            "schema_version": "3.0",
+            "schema_version": "4.0",
             "id": plugin_id,
             "name": name,
             "version": "0.1.0",

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/tests/test_bundle.py

@@ -28,7 +28,7 @@ def _make_zip(files: dict[str, str]) -> bytes:
 
 VALID_MANIFEST = json.dumps(
     {
-        "schema_version": "3.0",
+        "schema_version": "4.0",
         "id": "test-plugin",
         "name": "Test",
         "version": "1.0.0",

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/tests/test_capability_contracts.py

@@ -1,4 +1,4 @@
-"""Strict world-graph capability contracts introduced in SDK 0.3.0."""
+"""Strict world-graph capability contracts for SDK schema 4.0."""
 
 from __future__ import annotations
 
@@ -130,21 +130,62 @@ def test_host_external_write_remains_valid_without_prepared_contract():
     assert descriptor.exposure == CapabilityExposure.HOST
 
 
-def test_task_owned_resources_require_task_context():
-    with pytest.raises(ValidationError, match="task_context=required"):
-        CapabilityDescriptor.model_validate(
-            _capability(
-                effect="read",
-                consumes=[{"name": "action", "resource_type": "prepared_action"}],
-                produces=[
-                    {
-                        "result_path": ".shipment",
-                        "resource_type": "mrw.shipment",
-                        "output_name": "shipment",
-                    }
-                ],
-            )
+def test_task_context_defaults_to_optional_for_every_capability():
+    payload = _capability(
+        effect="read",
+        produces=[
+            {
+                "result_path": ".shipment",
+                "resource_type": "mrw.shipment",
+                "output_name": "shipment",
+            }
+        ],
+    )
+    payload["requirements"].pop("task_context")
+
+    descriptor = CapabilityDescriptor.model_validate(payload)
+
+    assert descriptor.requirements.task_context == "optional"
+
+
+def test_task_context_accepts_forbidden():
+    descriptor = CapabilityDescriptor.model_validate(
+        _capability(
+            effect="read",
+            requirements={
+                "authority": "read",
+                "audience": ["private_internal"],
+                "task_context": "forbidden",
+            },
+            produces=[
+                {
+                    "result_path": ".shipment",
+                    "resource_type": "mrw.shipment",
+                    "output_name": "shipment",
+                }
+            ],
+        )
+    )
+
+    assert descriptor.requirements.task_context == "forbidden"
+
+
+def test_sdk_leaves_task_owned_resource_promotion_to_registry():
+    descriptor = CapabilityDescriptor.model_validate(
+        _capability(
+            effect="read",
+            consumes=[{"name": "action", "resource_type": "prepared_action"}],
+            produces=[
+                {
+                    "result_path": ".shipment",
+                    "resource_type": "mrw.shipment",
+                    "output_name": "shipment",
+                }
+            ],
         )
+    )
+
+    assert descriptor.requirements.task_context == "optional"
 
 
 def test_model_read_requires_typed_output():

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/tests/test_manifest.py

@@ -18,7 +18,7 @@ from nutria_plugin.manifest import (
 
 def _minimal_manifest(**overrides) -> dict:
     base = {
-        "schema_version": "3.0",
+        "schema_version": "4.0",
         "id": "test-plugin",
         "name": "Test Plugin",
         "version": "1.0.0",
@@ -118,7 +118,7 @@ def test_other_schema_versions_are_rejected(version):
 def test_schema_3_0_world_provider_accepts_custom_resource_type():
     manifest = PluginManifest.model_validate(
         _minimal_manifest(
-            schema_version="3.0",
+            schema_version="4.0",
             capabilities=[
                 {
                     "id": "workspace.search",
@@ -166,7 +166,7 @@ def test_schema_3_0_world_provider_accepts_custom_resource_type():
         )
     )
 
-    assert manifest.schema_version == "3.0"
+    assert manifest.schema_version == "4.0"
     assert manifest.world_providers[0].resource_types[0].id == "workspace.item"
 
 
@@ -174,7 +174,7 @@ def test_world_provider_rejects_unknown_capability_reference():
     with pytest.raises(ValidationError, match="unknown capability"):
         PluginManifest.model_validate(
             _minimal_manifest(
-                schema_version="3.0",
+                schema_version="4.0",
                 world_providers=[
                     {
                         "id": "workspace",

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/tests/test_reviewable_actions.py

@@ -39,9 +39,16 @@ def _capabilities():
             "id": "email.reply.prepare",
             "title": "Prepare email reply",
             "description": "Resolve the source email envelope without writing.",
-            "effect": "prepare",
+            "effect": "read",
             "tool": "prepare_email_reply",
             "connection_id": "email",
+            "produces": [
+                {
+                    "result_path": ".prepared_action",
+                    "resource_type": "prepared_action",
+                    "output_name": "prepared_action",
+                }
+            ],
             "requirements": {
                 "authority": "read",
                 "audience": ["private_internal", "team_internal"],
@@ -125,7 +132,7 @@ def _capabilities():
 
 def _manifest(**overrides):
     data = {
-        "schema_version": "3.0",
+        "schema_version": "4.0",
         "id": "email-plugin",
         "name": "Email",
         "version": "1.0.0",
@@ -220,8 +227,31 @@ def test_reviewable_external_write_must_be_host_only():
         PluginManifest.model_validate(_manifest(capabilities=capabilities))
 
 
-def test_preparation_capability_must_be_pure_prepare():
+def test_preparation_capability_is_identified_by_prepared_action_output():
     capabilities = _capabilities()
-    capabilities[0]["effect"] = "write"
-    with pytest.raises(ValidationError):
+    capabilities[0]["produces"] = [
+        {
+            "result_path": ".message",
+            "resource_type": "email_message",
+            "output_name": "message",
+        }
+    ]
+    with pytest.raises(ValidationError, match="must produce prepared_action"):
         PluginManifest.model_validate(_manifest(capabilities=capabilities))
+
+
+def test_preparation_capability_may_use_its_actual_write_effect():
+    capabilities = _capabilities()
+    capabilities[0]["effect"] = "write"
+    capabilities[0]["inputs"] = [
+        {
+            "kind": "value",
+            "semantic_field": "body",
+            "argument_name": "body",
+            "accepted_origins": ["current_user"],
+        }
+    ]
+
+    manifest = PluginManifest.model_validate(_manifest(capabilities=capabilities))
+
+    assert manifest.capabilities[0].effect.value == "write"

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/tests/test_signing.py

@@ -17,7 +17,7 @@ from nutria_plugin.signing import (
 
 def _minimal_dict(**overrides) -> dict:
     base = {
-        "schema_version": "3.0",
+        "schema_version": "4.0",
         "id": "test-plugin",
         "name": "Test",
         "version": "1.0.0",

{nutria_plugin-0.3.2 → nutria_plugin-0.4.0}/uv.lock

@@ -262,7 +262,7 @@ wheels = [
 
 [[package]]
 name = "nutria-plugin"
-version = "0.3.2"
+version = "0.4.0"
 source = { editable = "." }
 dependencies = [
     { name = "cryptography" },