v3.44.0

What's changed

• Plugin folders. A plugin can now be a folder in the open Agent Plugins 1.0 format (plugin.json, skills/, mcp.json), so plugins written for other clients that read it work here, and the standard parts of yours work there. Its skills are named <plugin>/<skill> and its MCP servers <plugin>/<server>. Adding, editing or removing a plugin needs no restart, and a broken plugin is marked failed without affecting the others. Single-file plugins keep working as before.
• Plugin tools without a longer tool list. A folder's dev.openagentd/plugin.ts can define tools, tool hooks and a model provider. Agents reach its tools through the mcp tool, with the plugin's name as the server, so installing or editing a plugin does not change the requests of sessions already running. In Plan mode only tools marked read-only run.
• Plugin permissions. A folder's code can read its own folder and read and write its data folder. Anything more (net hosts, listen, fs folders, subprocess programs, env variables) must be declared in plugin.json, and a call outside them fails with an error that names the permission to add. A plugin's provider reads only its own credentials. MCP servers from a plugin run as ordinary processes and are not sandboxed.
• Manage plugins. Settings → Plugins lists plugin folders with an on/off switch, Reload, and each plugin's skills, MCP server commands or URLs, tools, permissions, errors and warnings. Plugin MCP servers appear in Settings → MCP marked "from ". On the command line, agentd plugin add installs from a folder or a git URL after showing what the plugin adds, check validates a folder without installing it, and list and remove do the rest. The agent can write plugins, and in the desktop app it can run these commands for you; it shows what a plugin adds before installing it.
• Checked MCP calls. The mcp tool checks call arguments against the tool's input schema and returns every problem, with the schema, before the server or plugin sees the call.
• Modules in agentd doctor. The server now starts and stops as a set of modules, and agentd doctor lists each one with its state.
• The desktop header title is read-only again. Rename sessions from the sidebar. In the desktop app, the title area now drags the window and a double-click maximizes it, like the rest of the header.
• Fixes
  • A helper that asked its lead with ask_lead now resumes with the lead's answer, instead of failing on models that do not accept prefill or losing the answer.
  • When agentd plugin add, remove or list cannot reach a server, they say no server answered, instead of claiming none is running.
  • On Windows, agentd plugin add and check show command paths as they are, without quotes.
  • The phone install guides and other docs use the app's current names: Settings → Server, Settings → Desktop, Save and use.

Full changelog: v3.43.0...v3.44.0