ziro plugin subcommand: list for installed
plugins; install <git-url|path|market:plugin> [ref] with --scope user|project,
--yes to trust and install without prompting, and --safe to install with the
dangerous parts inert; update <id> to re-fetch at the pinned ref; and
remove, enable, disable, and info for a single plugin id. Consent is
interactive on a TTY and fails closed otherwise, so a non-interactive install
without --yes or --safe will not silently grant shell or subprocess rights.
It also covers the marketplace registry: ziro plugin marketplace add <name> <source> [ref], list, remove <name>, and search <query>. A marketplace
resolves market:plugin shorthand into a concrete source and ref, and
preapproved_marketplaces in an agent’s plugin_config.yaml only auto-registers
fetch origins. It never skips the consent manifest and never grants trust.
This page is in progress. See the plugins guide for the trust
model and thread-scoped activation.
Plugins
Discovery, surfacing, trust, and the policy gate.
Slash commands
The in-chat
/plugins equivalent.