Files
zero/internal/plugins
KRATOS 5e68c78824 wedge stage 10: distribution (skill/plugin install, tools make) (#184)
* stage 10: distribution (skill/plugin install, tools make)

Add a file-backed distribution surface so skills and plugins can be
installed from a git URL or local path, and new plugin-tools can be
scaffolded. No central registry: a source is just a git URL or path.

- internal/skills/install.go: Install/Remove/Info + skills.lock. Validates
  SKILL.md frontmatter via the existing parser, copies it into the skills
  dir, and records a sha256 content hash. Reinstall surfaces the hash
  change; a clash with a different source is refused without --force.
- internal/plugins/install.go: same flow validated against the plugin
  manifest schema, copying the whole plugin tree (minus .git) so the
  plugin is activatable. plugins.lock records source + hash.
- internal/tools/scaffold.go: generate a prompt-gated plugin-tool skeleton
  (manifest + runnable shell/node/python entry stub) in the toolbox dir.
- CLI: zero skill {add,info,remove}, zero plugin {add,remove}, and a new
  zero tools {make,list}; wired in app.go/extensions.go/skills.go.

Safety: fetch honors the process environment (proxy/egress) and disables
git credential prompts; install never executes fetched content (skills are
markdown; plugin install scripts are never run) and installed plugins still
go through normal activation with permission gating.

* stage 10: make no-usable-name install test cross-platform

The test used a whitespace-only source dir name to force the no-usable-name rejection, which is not creatable on Windows (Smoke failure). Switched to a dir base that validSkillName rejects on every platform (contains "..") while staying creatable on Windows; the blank frontmatter still falls back to the unusable dir base, exercising the same rejection.

* stage 10: address review (tree hash, tools-list diagnostics, --json guards)

* stage 10: make canonical-source tests cross-platform (Windows)

Two Windows Smoke failures from the canonical-source review fix:
- TestInstallSameLocalSourceDifferentSpellingIsNotAClash (skills + plugins) used filepath.Rel(cwd, tempdir), which errors on Windows when the temp dir (C:) and repo (D:) are on different drives. Switched to a same-directory alternate spelling (redundant /./), which still exercises canonicalSource without a cross-drive relative path.
- TestRunSkillAddInfoRemove asserted the raw source path, but canonicalSource resolves symlinks/8.3-short-paths, so the stored+displayed source differs on Windows. Normalize the source via EvalSymlinks up front so the assertion matches on every platform.

* stage 10: address CodeRabbit nitpicks (variadic append, header comment)
2026-06-13 10:43:31 +05:30
..