Skip to content

Community plugins: catalog, install, review and portal #3

Closed
3 of 3 issues completed
Closed

Description

@nyxene

How community plugins are published, found, installed, updated, trusted and managed.

Decisions:

  • nerd fetches plugins and the catalog with the system git from the client (the server stays offline), and the README says plainly what goes over the network.
  • Install from the catalog or from any git URL; off-catalog plugins are marked.
  • Review is automated, with risk tiers derived from the manifest: tier 0 is auto-approved, higher tiers and any tier increase go to the maintainer, and AI analysis only adds findings.
  • Open source only in the catalog.
  • Updates only on an explicit button press; a permission increase asks again.
  • A web portal for the catalog.

Research: editors' and terminals' plugin ecosystems, Obsidian, Raycast, MELPA, Homebrew, Yazi, Chrome Web Store, Firefox AMO.

Activity

  1. added this to the Public launch milestone on Oct 17, 2026
  2. added
    enhancementNew feature or request
    scope:agentsAgent detection, hook, notifications, session resume
    on Oct 17, 2026
  3. nyxene commented on Oct 21, 2026

    @nyxene
    ContributorAuthor

    Retrospective — #3 Community plugins

    Spend (cumulative agent compute, summed from the children's headers)

    Child Output tok Input tok Cache read Tool calls
    #26 The plugin catalog repository and its automated review not captured not captured not captured not captured
    #27 The plugin catalog web portal not captured not captured not captured not captured
    #29 The catalog end to end: publish, review, install, stars, portal 586,104 9,204 329,210,604 1,190
    Phase (captured part only) 586,104 9,204 329,210,604 1,190

    The #29 figure is one session's transcripts (the main session and 15 agents) and also covers other issues worked in that session; it is an upper bound for #29, not a measure of it.

    Wall-clock (from gh, includes idle time)

    Item Opened Closed or merged
    #26 2026-10-17 07:25 UTC 2026-10-21 16:18 UTC
    #27 2026-10-17 07:25 UTC 2026-10-21 16:26 UTC
    #29 2026-10-17 07:25 UTC 2026-10-21 16:18 UTC
    nerdterm/nerd-plugins#16 (stars count through a pull request) 2026-10-21 16:16 UTC 2026-10-21 16:17 UTC

    The children were opened on 2026-10-17 when the repositories moved to the nerdterm organisation; the work before that, and the pull requests that carried it, are not linked to these issues, so the phase's earlier pull requests are not in this table.

    What happened

    1. The catalog repository (nerdterm/nerd-plugins) was set up with an automated review that derives risk tiers from each plugin's manifest (The plugin catalog repository and its automated review #26).
    2. The catalog's web portal became part of nerdterm.dev, later rebuilt as plain static pages (The plugin catalog web portal #27, nerdterm.dev is plain static HTML: one file per page, indexable #75).
    3. Publishing, review, install from nerd, the stars count and the portal were checked end to end; the stars count now reaches main through a pull request it merges itself (The catalog end to end: publish, review, install, stars, portal #29, fix: the stars count reaches main through a pull request it merges itself nerd-plugins#16).
    4. Two official plugins are in the catalog, peek and sessions.
    5. Spend for The plugin catalog repository and its automated review #26 and The plugin catalog web portal #27 was not recorded at the time, so the phase total above is partial.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestpriority:p2Hurts daily usescope:agentsAgent detection, hook, notifications, session resume

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions