feat: add plugin system (Skills + Tools) by tempurai · Pull Request #1503 · MoonshotAI/kimi-cli

tempurai · 2026-03-19T06:28:57Z

Summary

Add plugin system to kimi-cli: plugins are special Skills that need host config injection and can provide tools
kimi plugin install/list/remove/info CLI commands
Support installing from local directory, .zip file, or git URL
Plugin tools run as isolated subprocesses (stdin JSON params, stdout result), language-agnostic (Python/TypeScript/etc.)
Plugins auto-discovered as Skills + Tools at agent startup

Key Files

File	Purpose
`src/kimi_cli/plugin/__init__.py`	PluginSpec model, plugin.json parsing, config injection
`src/kimi_cli/plugin/manager.py`	Install/remove/list operations
`src/kimi_cli/plugin/tool.py`	PluginTool wrapper (subprocess execution)
`src/kimi_cli/cli/plugin.py`	CLI commands
`src/kimi_cli/skill/__init__.py`	Plugins dir added to skill discovery
`src/kimi_cli/soul/agent.py`	Plugin tools loaded into toolset at startup
`docs/plugin-spec.md`	Plugin specification document
`examples/sample-plugin/`	Sample plugin with Python + TypeScript tools

Test plan

27 unit tests passing (model, injection, manager, tool execution, skill discovery)
Lint (ruff) and type check (pyright) clean
Manual test: install from directory, zip, git URL
Manual test: plugin tools execute correctly (Python + TypeScript)
Manual test: plugin discovered as Skill by agent
Manual test: interactive uv run kimi with /skill:sample-plugin

- Update spec doc paths from ~/.config/agents/plugins/ to ~/.kimi/plugins/ - Defer get_plugins_dir import in skill/__init__.py to avoid coupling - Always discover plugins even when --skills-dir is set - Warn when no LLM provider configured during install - Add ConfigDict(extra="ignore") to PluginSpec for forward compat - Wrap write_runtime filesystem errors in PluginError

Plugins can declare tools in plugin.json. Each tool runs as a subprocess with parameters via stdin JSON and stdout as result. Tools are loaded into the agent's toolset at startup, alongside built-in and MCP tools.

kimi plugin install now accepts: - Local directory path (existing) - .zip file (extracts, finds plugin.json) - Git URL (clones --depth 1) Also adds examples/sample-plugin/ with Python + TypeScript tools.

…raversal guard

… tests; fix existing test

…atomic reinstall, validation error wrapping)

…tall time

…ame conflict, is_dir) - Kill subprocess on timeout instead of leaking it - Add approval flow to plugin tools (matching MCP tool pattern) - Detect and skip plugin tools that conflict with existing tool names - Use is_dir() instead of exists() for plugins path check

…chemas - Kill subprocess on asyncio.CancelledError to prevent orphaned processes - Use get_clean_env() instead of os.environ for PyInstaller compatibility - Catch exceptions during PluginTool construction to skip bad plugins instead of crashing agent startup

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 40221533bb

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-03-19T09:29:43Z

src/kimi_cli/plugin/tool.py

+                stdin=asyncio.subprocess.PIPE,
+                stdout=asyncio.subprocess.PIPE,
+                stderr=asyncio.subprocess.PIPE,
+                cwd=str(self._plugin_dir),


Run plugin subprocesses from the session worktree

create_subprocess_exec(..., cwd=str(self._plugin_dir)) makes every plugin tool run inside ~/.kimi/plugins/<name> instead of the active repo. Any plugin that shells out to git, opens relative paths, or otherwise expects . to be the user's workspace will inspect or modify the installation directory and commonly fail with "not a git repository". The built-in command tools use runtime.session.work_dir, so plugin tools need the same worktree context while resolving their script path from the plugin directory.

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-03-19T09:29:43Z

src/kimi_cli/skill/__init__.py

+    # Plugins are always discoverable, even when --skills-dir is set
+    plugins_path = get_plugins_dir()
+    if plugins_path.is_dir():
+        roots.append(KaosPath.unsafe_from_local_path(plugins_path))


Keep installed plugin skills below repo-local skills

discover_skills_from_roots() overwrites earlier roots with later ones, so appending ~/.kimi/plugins here gives globally installed plugin skills higher priority than .agents/skills in the current repository. When a project defines a skill with the same name as an installed plugin, the plugin silently wins and the checked-in project instructions disappear, making runs depend on host state instead of repo state. Plugin roots should not shadow repo-local skills.

Useful? React with 👍 / 👎.

Add comprehensive documentation for the plugin system: - Add changelog entries for plugin system, multi-plugin repos, and credential injection with OAuth/env var support - Create new plugins.md page (zh/en) covering installation, creation, credential injection, and tool script specifications - Update skills.md to add comparison between Skills and Plugins - Update vitepress config to include Plugins in navigation

Copilot AI review requested due to automatic review settings March 19, 2026 06:28

This comment was marked as resolved.

Sign in to view

tempurai added 3 commits March 19, 2026 14:32

feat(plugin): add plugin.json model and parsing

f6059c9

test(plugin): add config injection and runtime tests

64fe1c1

feat(plugin): add plugin manager (install/remove/list)

145ed61

This comment was marked as resolved.

Sign in to view

tempurai added 7 commits March 19, 2026 14:35

feat(plugin): add kimi plugin CLI commands

a21088c

feat(plugin): integrate plugins dir into skill discovery

f488503

fix(plugin): address pyright type errors in _set_nested

064b039

fix(plugin): use ~/.kimi/plugins/ as plugin install directory

a59d10d

feat(plugin): add plugin tools support (Skills + Tools model)

9ffae48

Plugins can declare tools in plugin.json. Each tool runs as a subprocess with parameters via stdin JSON and stdout as result. Tools are loaded into the agent's toolset at startup, alongside built-in and MCP tools.

feat(plugin): support zip and git URL install sources

8c0b447

kimi plugin install now accepts: - Local directory path (existing) - .zip file (extracts, finds plugin.json) - Git URL (clones --depth 1) Also adds examples/sample-plugin/ with Python + TypeScript tools.

This comment was marked as resolved.

Sign in to view

tempurai force-pushed the feat/plugin-system branch from 3b8463c to 8c0b447 Compare March 19, 2026 06:40

This comment was marked as resolved.

Sign in to view

tempurai added 3 commits March 19, 2026 14:49

fix(plugin): restore LazySubcommandGroup CLI registration, add path t…

27b2bbb

…raversal guard

fix(plugin): add path traversal guard for config_file

54626dc

fix: lint issues (line length, import sorting, unused import)

31430e9

This comment was marked as resolved.

Sign in to view

test: add path traversal, tools parsing, forward compat, no-op inject…

b2af68d

… tests; fix existing test

This comment was marked as resolved.

Sign in to view

test: replace monkeypatch with KIMI_SHARE_DIR env var for plugin tests

45821b4

This comment was marked as resolved.

Sign in to view

tempurai added 2 commits March 19, 2026 15:51

fix: address review issues (temp cleanup, zip/remove path traversal, …

a227740

…atomic reinstall, validation error wrapping)

style: format test files

cc15884

This comment was marked as resolved.

Sign in to view

tempurai added 2 commits March 19, 2026 16:05

fix: isolate test_resolve_skills_roots_uses_layers from KIMI_SHARE_DIR

56f4f37

fix: inject host credentials as env vars at runtime, not baked at ins…

3dbee24

…tall time

This comment was marked as resolved.

Sign in to view

chatgpt-codex-connector bot reviewed Mar 19, 2026

View reviewed changes

tempurai merged commit 8fba9e2 into main Mar 19, 2026
15 checks passed

tempurai deleted the feat/plugin-system branch March 19, 2026 09:41

github-actions bot mentioned this pull request Mar 20, 2026

📊 AI CLI 工具社区动态日报 2026-03-20 gsscsd/big_model_radar#65

Open

tempurai mentioned this pull request Mar 23, 2026

docs: add plugin system documentation (#1503, #1529, #1530) #1554

Merged

tempurai added a commit that referenced this pull request Mar 23, 2026

docs: add plugin system documentation (#1503, #1529, #1530) (#1554)

65e104f

github-actions bot mentioned this pull request Mar 24, 2026

📊 AI CLI 工具社区动态日报 2026-03-24 gsscsd/big_model_radar#86

Open

Conversation

tempurai commented Mar 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Key Files

Test plan

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

This comment was marked as resolved.

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Mar 19, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot Mar 19, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

tempurai commented Mar 19, 2026 •

edited

Loading