traseai plugins

Manage Gateway plugins/extensions (loaded in-process). Related:

Commands

traseai plugins list
traseai plugins info <id>
traseai plugins enable <id>
traseai plugins disable <id>
traseai plugins uninstall <id>
traseai plugins doctor
traseai plugins update <id>
traseai plugins update --all
Bundled plugins ship with TraseAI but start disabled. Use plugins enable to activate them. All plugins must ship a traseai.plugin.json file with an inline JSON Schema (configSchema, even if empty). Missing/invalid manifests or schemas prevent the plugin from loading and fail config validation.

Install

traseai plugins install <path-or-spec>
traseai plugins install <npm-spec> --pin
Security note: treat plugin installs like running code. Prefer pinned versions. Npm specs are registry-only (package name + optional version/tag). Git/URL/file specs are rejected. Dependency installs run with --ignore-scripts for safety. Supported archives: .zip, .tgz, .tar.gz, .tar. Use --link to avoid copying a local directory (adds to plugins.load.paths):
traseai plugins install -l ./my-plugin
Use --pin on npm installs to save the resolved exact spec (name@version) in plugins.installs while keeping the default behavior unpinned.

Uninstall

traseai plugins uninstall <id>
traseai plugins uninstall <id> --dry-run
traseai plugins uninstall <id> --keep-files
uninstall removes plugin records from plugins.entries, plugins.installs, the plugin allowlist, and linked plugins.load.paths entries when applicable. For active memory plugins, the memory slot resets to memory-core. By default, uninstall also removes the plugin install directory under the active state dir extensions root ($TRASEAI_STATE_DIR/extensions/<id>). Use --keep-files to keep files on disk. --keep-config is supported as a deprecated alias for --keep-files.

Update

traseai plugins update <id>
traseai plugins update --all
traseai plugins update <id> --dry-run
Updates only apply to plugins installed from npm (tracked in plugins.installs). When a stored integrity hash exists and the fetched artifact hash changes, TraseAI prints a warning and asks for confirmation before proceeding. Use global --yes to bypass prompts in CI/non-interactive runs.