Skip to content

Plugin SDK Index

Document ID: PLG-INDEX-001
File Path: docs/08-plugin-sdk/index.md
Version: 1.0.0
Status: Active
Owner: AI Platform Team
Last Updated: 2026-06-27


This document is the central navigation and architecture index for the Plugin SDK in the Wovyr AI Platform.

Wovyr is Plugin First: every capability that can be a plugin should be one (see Vision §Plugin First). The Plugin SDK is how developers build those capabilities, and the Plugin Engine is the service that installs, versions, governs, and loads them at runtime.


A plugin is a versioned, signed, deployable package that contributes one or more capabilities to the platform without recompiling it.

PluginDistributable package (manifest + artifacts + capabilities)
CapabilityA single extension a plugin provides (a tool, a provider, …)
Plugin SDKAuthoring library + manifest format for building plugins
Plugin EngineDeployable service managing plugin lifecycle (c4-container §4.7)
MarketplaceDistribution + discovery surface for plugins

A plugin packaging tools reuses the Tool Framework package format; the Plugin SDK generalizes that to all capability kinds.


Plugins can extend the platform at every documented extension point (Agent Framework §12):

Capability kindExtendsRuns in
toolTool catalogTool Runtime (sandboxed)
providerLLM providersLLM Gateway
memory_backendStorage/retrievalMemory Engine
planner_strategyPlanningPlanning Engine
policyGovernance rulesPolicy Engine
workflow_activityDSL activitiesWorkflow Engine
agent_type / coordinationAgent behaviorsAgent Runtime

One plugin may bundle several capabilities (e.g. a “GitHub” plugin shipping tools

  • a workflow activity).

As with the platform’s other service/abstraction splits, authoring is separated from operation.

ConcernPlugin SDKPlugin Engine
FormLibrary + manifest + CLIDeployable service / container
AudiencePlugin developersOperators + the platform runtime
ResponsibilityDefine capabilities, manifest, build/packageInstall, verify, version, load, govern
OutputA signed plugin packageA live, registered capability

Author (SDK) ─► Build & sign ─► Publish (Marketplace/registry)
Install (Plugin Engine)
verify signature ─► resolve dependencies ─► check compatibility
Register capabilities ─► Enable
Load on demand ─► route to host (Tool Runtime / Gateway / …)
Upgrade / Disable / Rollback / Uninstall

Detailed in Versioning & Lifecycle.


DocumentResponsibility
overview.mdPlugin system + Plugin Engine architecture, NFRs
plugin-api.mdSDK: traits, manifest, capability registration
permissions.mdPlugin permission model, capability grants, consent
sandbox.mdPlugin isolation and execution surfaces
versioning.mdSemver, compatibility, dependency resolution, lifecycle
distribution.mdPackaging, signing, registry, provenance
marketplace.mdDiscovery, publishing, ratings, governance, monetization

  1. Plugin First — capabilities are plugins unless they must be core.
  2. Declared, least-privilege permissions — a plugin gets only what it requests and is granted.
  3. Isolated by default — untrusted plugin code runs sandboxed.
  4. Versioned & compatible — semver with explicit platform API ranges.
  5. Signed & provenant — every package is verifiable end to end.
  6. Hot lifecycle — install/enable/disable/upgrade without platform restart.
  7. Observable — install and load emit plugin.* events and audit.



VersionDateDescription
1.0.02026-06-27Initial Plugin SDK Index