插件与技能事实边界
插件文档改为对齐真实代码:Plugin 管提供方和市场状态,Skill 管可调用工具定义、包分发和认证。
真实模型
当前代码把扩展体系拆成两层:
| 层 | 事实来源 | 作用 |
|---|---|---|
| Plugin | backend/internal/model/plugin.go | 提供方、职责、MCP/HTTP/Workflow/Native 来源、启用状态、市场审核和执行入口 |
| Skill | backend/internal/model/skill.go | 具体可调用工具定义、输入输出 schema、ZIP 包、公共商店、认证和安全评分 |
这意味着文档不能再把一个泛化的 package manifest 写成唯一入口。创建私有工具走 POST /api/v4/plugins;分发技能走 /api/v4/skill-store;MCP 工具导入走 /api/v4/plugins/mcp/*。
可证明入口
GET /api/v4/pluginsGET /api/v4/plugins/marketGET /api/v4/plugins/:idPOST /api/v4/pluginsPUT /api/v4/plugins/:idPUT /api/v4/plugins/:id/toggleDELETE /api/v4/plugins/:idPOST /api/v4/plugins/syncPOST /api/v4/plugins/:id/executePOST /api/v4/plugins/pre-checkPOST /api/v4/plugins/:id/health-checkPUT /api/v4/plugins/:id/toggle-enabledPUT /api/v4/plugins/:id/unpublishDELETE /api/v4/plugins/presetsPOST /api/v4/plugins/:id/publish-to-marketPUT /api/v4/plugins/:id/withdraw-marketPOST /api/v4/plugins/:id/resubmit-marketGET /api/v4/plugins/:id/usage-statsPOST /api/v4/plugins/mcp/testPOST /api/v4/plugins/mcp/importGET /api/v4/plugins/mcp/resourcesPOST /api/v4/plugins/mcp/resources/readGET /api/v4/plugins/mcp/promptsPOST /api/v4/plugins/mcp/oauth/authorizeGET /api/v4/plugins/mcp/oauth/callbackPOST /api/v4/plugins/bocha/testPOST /api/v4/plugins/bocha/createPOST /api/v4/plugins/zhipu/testPOST /api/v4/plugins/zhipu/createPOST /api/v4/plugins/dashscope-search/testPOST /api/v4/plugins/dashscope-search/createPOST /api/v4/plugins/skill-generator/testPOST /api/v4/plugins/skill-generator/create- public
GET /api/v4/public/plugins - public
GET /api/v4/public/plugins/:id - skill-store
GET /api/v4/skill-store - skill-store
GET /api/v4/skill-store/:id - skill-store
GET /api/v4/skill-store/:id/certification - skill-store
GET /api/v4/skill-store/:id/download - skill-store
GET /api/v4/skill-store/admin/detail/:id - skill-store
GET /api/v4/skill-store/admin/dump - skill-store
GET /api/v4/skill-store/admin/list - skill-store
GET /api/v4/skill-store/admin/subcategory-stats - skill-store
GET /api/v4/skill-store/admin/unprocessed - skill-store
GET /api/v4/skill-store/pending - skill-store
GET /api/v4/skill-store/resolve/:key - skill-store
POST /api/v4/skill-generator/generate - skill-store
POST /api/v4/skill-generator/optimize - skill-store
POST /api/v4/skill-generator/validate - skill-store
POST /api/v4/skill-store/:id/certify - skill-store
POST /api/v4/skill-store/:id/install - skill-store
POST /api/v4/skill-store/admin/archive - skill-store
POST /api/v4/skill-store/admin/batch-delete - skill-store
POST /api/v4/skill-store/admin/batch-update - skill-store
POST /api/v4/skill-store/admin/restore - skill-store
POST /api/v4/skill-store/audit - skill-store
POST /api/v4/skill-store/publish - skill-store
POST /api/v4/skill-store/upload
SDK surface
- Skill store:
browseSkillStore,browseSkills,browseSkillsList,certifySkill,downloadSkill,generateSkill,getCertificationStatus,getSkillDetail,getSkillSummary,installSkill,optimizeSkill,resolveSkill,uploadSkill,validateSkill - Tools:
getTool,listTools
当前边界
- 私有插件创建后是
status=APPROVED、marketStatus=NONE,不会自动上公共市场。 - 公共插件浏览要求
status=APPROVED、market_status=APPROVED、is_enabled=true。 - Skill ZIP 包必须通过 ZIP 安全检查,最多 50 个文件、解压上限 50 MB。