Commit Graph
3 Commits
Author SHA1 Message Date
KRATOSandClaude Opus 4.8 4bc58e143e audit: document plugin/skills extension wiring as discovery-only (deferred lows)
The two remaining low findings (plugin manifest tools/hooks/prompts/skills parsed but unwired; plugin skill dirs not merged into the skill tool) are intentionally discovery-only for now — documented in code so the parsed-but-unconsumed fields aren't mistaken for dead code. Runtime wiring is tracked as a separate feature.

Refs #102

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-06-07 02:42:52 +05:30
KRATOSandClaude Opus 4.8 29fe8e0c32 Batch 4: plugin manifest enrichment + skills system (PRD F9/F15)
Plugins: LoadedPlugin gains optional Author/License/Keywords/Homepage/Interface metadata (omitempty, non-breaking, best-effort parse) surfaced in 'zero plugins'. Skills: new internal/skills package loads */SKILL.md (hand-parsed frontmatter, no YAML dep) from ZERO_SKILLS_DIR or the XDG data dir; a read-only 'skill' tool lets the agent load a named skill's content on demand (registered in CoreReadOnlyTools); 'zero skills' lists them (+--json). Build/vet/-race/full-suite green.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-06-07 00:58:28 +05:30
KRATOSandKRATOS f43db6f600 [codex] add Go extension backend commands (#61)
* feat(go): add plugin manifest backend

* feat(go): add extension policy stores

* feat(go): expose extension backend commands

* fix(go): reject rooted plugin paths cross-platform

* fix(go): address extension backend review

* fix(go): harden extension backend persistence

* fix(go): preserve extension usage and hook enabled semantics

* fix(go): use process-released MCP permission locks

* fix(plugins): close symlink missing-leaf escapes

* fix(plugins): fail closed on manifest realpath errors

* fix(tests): keep plugin realpath regression portable

* fix: enable CodeRabbit verdict workflow

---------

Co-authored-by: KRATOS <[email protected]>
2026-06-05 12:11:36 +05:30