v0.1.5

Plugin manager

• Unifies installed and available plugins on one Plugins surface.
• Adds Left/Right lenses and direct A, U, Ctrl+U, and M shortcuts.
• Keeps trusted install review inline and caches exact details until authority changes.
• Fixes first-click Add, installed status, Marketplaces naming, and exact-detail errors.

v0.1.4

Features

• Open /plugin immediately and refresh state in the background.
• Replace the section/action ladder with a two-layer combined plugin catalog.
• Add All, Installed, and Updates filters with inline actions and progress.

Fixes

• Deduplicate equivalent Claude/Codex and user/project candidates while preserving install scopes.
• Keep the manager mounted during actions and return cleanly from finished operations.
• Remove redundant confirmation prompts for routine reversible actions.

v0.1.3

Fixes

• Replaces the pane-heavy /plugin marketplace UI with a stable settings-style flow: sections, items, details, then actions.
• Makes Escape return exactly one level and ties PageUp/PageDown to visible selection.
• Keeps one single-column interaction model at every terminal size while retaining dedicated exact trust and confirmation surfaces.

Install with pi install npm:@nklisch/pi-plugins@0.1.3.

v0.1.2

Improvements

• Redesign /plugin around My Plugins, Discover, Sources, Updates, and Health.
• Add first-run source onboarding, state-sensitive actions, and concise add, remove, and doctor commands.
• Replace garbled confirmation overlays with stable framed confirmation and secret-entry surfaces.
• Render useful bounded command output and concise help.
• Fix bundled subagent activation so one top-level Pi installation supplies and qualifies its transitive runtime extensions.

Published to npm as @nklisch/pi-plugins@0.1.2 with OIDC provenance.

v0.1.1

Fixes

• Make marketplace registration host-global while keeping plugin installs independently scoped to user or project.
• Default GitHub shorthand so /plugin marketplace add nklisch/skills works without extra flags.
• Remove marketplace scope flags from add, remove, list, refresh, and adoption commands.
• Harden concurrent SQLite startup and revision-lease cleanup exposed by CI release verification.

Published to npm as @nklisch/pi-plugins@0.1.1 with OIDC provenance.

v0.1.0

Pi Plugins v0.1.0

Initial public release of @nklisch/pi-plugins.

Features

• Install and manage compatible Claude Code and Codex marketplaces without either foreign host, with read-only adoption of foreign marketplace declarations.
• Activate Agent Skills, command hooks, and MCP servers as one revision-bound plugin across install, enable, disable, update, and uninstall.
• Manage plugins through the Pi-native interface or deterministic plugin-control/v1 commands, including inspection, diagnosis, update policy, notices, and operation control.
• Ship receipt-qualified maintained MCP and subagent integrations with plugin-scoped lifecycle and faithful subagent hook interception.

Reliability and security

• Transactional lifecycle mutations across processes with exact conflict handling, crash recovery, rollback, offline restart, and persistent-data retention choices.
• Origin-authorized, DNS-pinned marketplace egress; credentialed MCP transport requires HTTPS; hardened YAML parsing.
• Exact package SRI, installed-tree, manifest, API, license, and runtime-range verification before maintained adapter code executes.
• Callback-scoped MCP launch values and no sensitive plaintext in durable state, projections, diagnostics, logs, or control output.

Verification

• 333 unit/integration files, 1,651 tests.
• 17 E2E files, 57 tests using real Pi 0.80.8 RPC, JSON, PTY, Git, SQLite, MCP, subagent, recovery, and multiprocess paths.
• From-empty offline npm lock/SRI replay passed.
• npm audit: zero vulnerabilities.
• All five release gates completed: security, tests, cruft, documentation, and patterns.

Provenance

• Git commit: 8db10578ce6d2d283b23d1270f7ccaddc2c81173
• Annotated tag object: 17760f8453b31ff94b467046a1c0df00bfce106b
• Candidate npm SHA-1: 0b9ef185f34ab19b1d052c0a5d743044656a1f89
• Candidate npm integrity: sha512-dbnL6bP0Vsy6TYoIqF96YVFTPBOHsnszUoOgdt0IkN1KjOwrUE9OLqi6yxlLH9cgZe02Ff9me/As6IHsr7Es4Q==