Skip to content

Phase 1: Remote plugin marketplace distribution for declarative plugins #1103

Closed as not planned

Description

@tamirdresher

Goal

Enable teams to discover and install declarative Squad plugins from remote sources without manual cloning, while preserving the no-execution MVP boundary from #1092.

Scope

  • squad plugin install <github-url> downloads a manifest and declared static files.
  • Lock file records remote source, version, and SHA-256 hashes.
  • Marketplace search/index supports plugin metadata discovery.
  • Plugin updates show lock-file diffs before applying.

Acceptance criteria

  • Remote install works for a public GitHub plugin repo.
  • Downloaded content is validated by the existing manifest validator before writes.
  • Lock file records source and content hashes.
  • Search returns plugin id, description, roles, authors, source, and trust metadata.
  • No downloaded plugin can execute code or start MCP/package installation.

Security gate

This phase must remain declarative-only. Trust metadata is informational, not execution permission.

Depends on #1092.

Parent epic: https://github.com/bradygaster/squad/issues/1102

Activity

  1. github-actions commented on Sep 10, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  2. github-actions commented on Sep 10, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  3. github-actions commented on Sep 11, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  4. github-actions commented on Sep 11, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  5. github-actions commented on Sep 11, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  6. github-actions commented on Sep 11, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: Flight
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  7. github-actions commented on Sep 13, 2026

    @github-actions
    Contributor

    🔄 Ralph — Auto-Triage

    Assigned to: architect
    Reason: No module, routing, or role keyword match — routed to Lead/Architect
    Source: lead-fallback

    Ralph auto-triaged this issue using routing rules.
    To reassign, swap the squad:* label.

  8. added
    squad:plugin-platform-devAssigned to plugin-platform-dev (Plugin Platform Engineer)
    and removed
    squad:architectAssigned to architect (Lead Architect)
    on Sep 24, 2026
  9. github-actions commented on Sep 24, 2026

    @github-actions
    Contributor

    📋 Assigned to plugin-platform-dev (Plugin Platform Engineer)

    Issue: #1103 — Phase 1: Remote plugin marketplace distribution for declarative plugins

    plugin-platform-dev will pick this up in the next Copilot session.

    For Copilot coding agent: If enabled, this issue will be worked automatically.
    Otherwise, start a Copilot session and say:
    plugin-platform-dev, work on issue #1103

  10. bradygaster commented on Nov 5, 2026

    @bradygaster
    Collaborator

    Closing as not planned for the 2.0 line during board triage (owner decision). Plugin extensibility phase 2 is out of scope for 2.0; reopen if it returns to the roadmap.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    priority:p2Next sprintsquadSquad triage inbox — Lead will assign to a membersquad:plugin-platform-devAssigned to plugin-platform-dev (Plugin Platform Engineer)status:backlogBacklog itemtriagedIssue has been triagedtype:featureNew capabilitywave:3-laterWave 3 — backlog, future

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions