Update marketplace plugins from CLI

Author: SqlRush

cmd/claude/main.go

@@ -337,6 +337,8 @@ func runPluginCLI(ctx context.Context, state *bootstrap.State, args []string, st
 		return runPluginListCLI(state, args[1:], stdout, stderr)
 	case "install", "i":
 		return runPluginInstallCLI(state, args[1:], stdout, stderr)
+	case "update":
+		return runPluginUpdateCLI(state, args[1:], stdout, stderr)
 	case "enable":
 		return runPluginSetEnabledCLI(state, "enable", args[1:], stdout, stderr)
 	case "disable":
@@ -449,6 +451,44 @@ func runPluginInstallCLI(state *bootstrap.State, args []string, stdout io.Writer
 	return 0
 }
 
+func runPluginUpdateCLI(state *bootstrap.State, args []string, stdout io.Writer, stderr io.Writer) int {
+	flags := flag.NewFlagSet("claude plugin update", flag.ContinueOnError)
+	flags.SetOutput(stderr)
+	scope := "project"
+	flags.StringVar(&scope, "scope", scope, "installation scope")
+	flags.StringVar(&scope, "s", scope, "installation scope")
+	if err := flags.Parse(args); err != nil {
+		if err == flag.ErrHelp {
+			return 0
+		}
+		return 2
+	}
+	if flags.NArg() != 1 {
+		fmt.Fprintln(stderr, "ccgo plugin update: usage: claude plugin update [--scope project] <plugin>")
+		return 2
+	}
+	scope = strings.ToLower(strings.TrimSpace(scope))
+	if scope == "" {
+		scope = "project"
+	}
+	if scope != "project" {
+		fmt.Fprintf(stderr, "ccgo plugin update: scope %q is not supported yet; use project\n", scope)
+		return 2
+	}
+	settings, err := pluginCLISettingsFromFiles(state.CWD())
+	if err != nil {
+		fmt.Fprintf(stderr, "ccgo plugin update: %v\n", err)
+		return 1
+	}
+	result, err := pluginpkg.UpdateInstalledMarketplacePlugins(strings.TrimSpace(flags.Arg(0)), state.CWD(), settings)
+	if err != nil {
+		fmt.Fprintf(stderr, "ccgo plugin update: %v\n", err)
+		return 1
+	}
+	writePluginUpdateResult(stdout, result)
+	return 0
+}
+
 func runPluginSetEnabledCLI(state *bootstrap.State, action string, args []string, stdout io.Writer, stderr io.Writer) int {
 	flags := flag.NewFlagSet("claude plugin "+action, flag.ContinueOnError)
 	flags.SetOutput(stderr)
@@ -652,6 +692,21 @@ func writePluginInstallResult(stdout io.Writer, result pluginpkg.PluginInstallRe
 	fmt.Fprintln(stdout, strings.Join(lines, "\n"))
 }
 
+func writePluginUpdateResult(stdout io.Writer, result pluginpkg.PluginUpdateResult) {
+	lines := []string{
+		"Plugin update",
+		fmt.Sprintf("Marketplace plugins: %d", result.MarketplacePluginCount),
+		fmt.Sprintf("Updated plugins: %d", len(result.Updated)),
+	}
+	if len(result.Updated) > 0 {
+		lines = append(lines, "Updated:")
+		for _, item := range result.Updated {
+			lines = append(lines, "- "+item.Plugin.Name+" -> "+item.TargetPath)
+		}
+	}
+	fmt.Fprintln(stdout, strings.Join(lines, "\n"))
+}
+
 func pluginCLISettingsFromFiles(cwd string) (contracts.Settings, error) {
 	userSettings, err := pluginCLILoadOptionalSettings(config.UserSettingsPath())
 	if err != nil {

cmd/claude/main_test.go

@@ -2219,6 +2219,88 @@ func TestRunPluginInstallCLI(t *testing.T) {
 	}
 }
 
+func TestRunPluginUpdateCLI(t *testing.T) {
+	configHome := t.TempDir()
+	t.Setenv("CLAUDE_CONFIG_DIR", configHome)
+	project := t.TempDir()
+	if err := os.MkdirAll(filepath.Join(project, ".git"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	marketDir := filepath.Join(t.TempDir(), "market-demo")
+	if err := os.MkdirAll(filepath.Join(marketDir, "assets"), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(marketDir, "plugin.json"), []byte(`{"name":"market demo","version":"1.0.0","description":"Deploy marketplace plugin"}`), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(marketDir, "assets", "README.md"), []byte("v1"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	settings := fmt.Sprintf(`{
+		"extraKnownMarketplaces": {
+			"team": {"source": {"source": "settings", "name": "team", "plugins": [%q]}}
+		},
+		"strictKnownMarketplaces": ["team"]
+	}`, marketDir)
+	if err := os.WriteFile(filepath.Join(configHome, "settings.json"), []byte(settings), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	var stdout, stderr bytes.Buffer
+	code := run([]string{"--cwd", project, "plugin", "install", "--scope", "project", "market demo"}, strings.NewReader(""), &stdout, &stderr)
+	if code != 0 {
+		t.Fatalf("install exit = %d stderr=%s", code, stderr.String())
+	}
+	if err := os.WriteFile(filepath.Join(marketDir, "plugin.json"), []byte(`{"name":"market demo","version":"2.0.0","description":"Deploy marketplace plugin"}`), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(marketDir, "assets", "README.md"), []byte("v2"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	resolvedProject, err := filepath.EvalSymlinks(project)
+	if err != nil {
+		t.Fatal(err)
+	}
+	installedDir := filepath.Join(resolvedProject, ".claude", "plugins", "market-demo")
+
+	stdout.Reset()
+	stderr.Reset()
+	code = run([]string{"--cwd", project, "plugin", "update", "--scope", "project", "market demo"}, strings.NewReader(""), &stdout, &stderr)
+	if code != 0 {
+		t.Fatalf("update exit = %d stderr=%s", code, stderr.String())
+	}
+	for _, want := range []string{
+		"Plugin update",
+		"Marketplace plugins: 1",
+		"Updated plugins: 1",
+		"- market demo -> " + installedDir,
+	} {
+		if !strings.Contains(stdout.String(), want) {
+			t.Fatalf("stdout missing %q: %q", want, stdout.String())
+		}
+	}
+	if data, err := os.ReadFile(filepath.Join(installedDir, "plugin.json")); err != nil || !strings.Contains(string(data), `"version":"2.0.0"`) {
+		t.Fatalf("updated plugin json=%q err=%v", data, err)
+	}
+	if data, err := os.ReadFile(filepath.Join(installedDir, "assets", "README.md")); err != nil || string(data) != "v2" {
+		t.Fatalf("updated asset data=%q err=%v", data, err)
+	}
+
+	stdout.Reset()
+	stderr.Reset()
+	code = run([]string{"--cwd", project, "plugin", "update", "--scope", "user", "market demo"}, strings.NewReader(""), &stdout, &stderr)
+	if code != 2 || !strings.Contains(stderr.String(), `scope "user" is not supported yet`) {
+		t.Fatalf("user scope exit=%d stdout=%q stderr=%q", code, stdout.String(), stderr.String())
+	}
+
+	stdout.Reset()
+	stderr.Reset()
+	code = run([]string{"--cwd", project, "plugin", "update", "missing"}, strings.NewReader(""), &stdout, &stderr)
+	if code != 1 || !strings.Contains(stderr.String(), "installed plugin missing was not found") {
+		t.Fatalf("missing exit=%d stdout=%q stderr=%q", code, stdout.String(), stderr.String())
+	}
+}
+
 func TestRunPluginEnableDisableCLI(t *testing.T) {
 	configHome := t.TempDir()
 	t.Setenv("CLAUDE_CONFIG_DIR", configHome)

docs/cc-100-roadmap.md

@@ -37,7 +37,7 @@ M4 补充：tool executor 会围绕 `PreToolUse`、`PostToolUse`、`PermissionDe
 
 M10 补充：plugin command/agent 的 allowed tool frontmatter 解析现在只在顶层逗号或空白处分隔，保留括号、方括号和引号内的逗号/空白，避免 `Bash(git commit -m "x,y")` 这类 tool pattern 被误拆。
 
-M8 补充：CLI `plugin marketplace list` 现在可列出 settings 中已配置的 marketplace；`--json` 输出按名称排序的 source/repo/url/path/package/installLocation 结构，普通文本输出与无配置提示也已覆盖。CLI `plugin marketplace update [name]` 现在可按全部或指定 marketplace 触发现有 URL/git/github/npm/settings cache 加载刷新路径，命名 update 会用轻量 settings 读取避免启动时提前刷新全部 marketplace。CLI `plugin install --scope project <plugin>` 现在复用 `internal/plugins` 共享安装 API，把 marketplace 插件复制到项目 `.claude/plugins/<safe-name>`，并保留冲突检测、重复安装识别和 symlink/non-regular file 拒绝。CLI `plugin enable|disable [--scope user] <plugin>` 与 `plugin disable --all` 现在复用 `internal/config` 用户 settings 写入 helper，更新 `enabledPlugins` 并覆盖基本参数冲突。
+M8 补充：CLI `plugin marketplace list` 现在可列出 settings 中已配置的 marketplace；`--json` 输出按名称排序的 source/repo/url/path/package/installLocation 结构，普通文本输出与无配置提示也已覆盖。CLI `plugin marketplace update [name]` 现在可按全部或指定 marketplace 触发现有 URL/git/github/npm/settings cache 加载刷新路径，命名 update 会用轻量 settings 读取避免启动时提前刷新全部 marketplace。CLI `plugin install --scope project <plugin>` 现在复用 `internal/plugins` 共享安装 API，把 marketplace 插件复制到项目 `.claude/plugins/<safe-name>`，并保留冲突检测、重复安装识别和 symlink/non-regular file 拒绝。CLI `plugin update --scope project <plugin>` 现在复用 `internal/plugins` 共享更新 API，把已安装同名项目插件替换为最新 marketplace 副本。CLI `plugin enable|disable [--scope user] <plugin>` 与 `plugin disable --all` 现在复用 `internal/config` 用户 settings 写入 helper，更新 `enabledPlugins` 并覆盖基本参数冲突。
 
 M10 补充：新增 `TaskOutput`/`AgentOutputTool` 和 `KillTask`/`TaskStop` 内置工具；`TaskOutput` 可列出当前 session 的 sidechain task，或按 task/sidechain ID 读取状态、summary、tail 输出和 agent metadata，`KillTask` 会通过 sidechain manager 写入 cancelled lifecycle summary。完整 AgentTool 执行循环、progress event streaming、resume command UI 和 worktree isolation 仍未完成。
 
@@ -1442,7 +1442,7 @@ M7 补充：terminal input parser 和 configurable keybinding name parser 现在
 - plugin manifest、marketplace、local install、URL catalog cache、git/github clone/update cache、npm pack/cache、update UI/background lifecycle。
 - plugin hooks/agents/MCP，其中本地 plugin 同步工具 hook 已接入，剩余完整 plugin agent/MCP 与 hook UI/policy parity。
 
-当前状态：已完成项目 skill discovery、目录式 `SKILL.md` prompt metadata loading、project legacy `.claude/commands` prompt command loading、command registry metadata/lookup/filter、agent-metadata strict plugin-only policy filtering、部分内置 slash command aliases/metadata、prompt expansion、基础 `Skill` tool inline 调用、本地项目 prompt skill 的基础 slash 调用接入、本地 prompt skill 的 command permissions attachment/current-turn 权限继承，本地 plugin command/skill/agent/MCP server/output style/hook 的 manifest discovery，本地 plugin 同步工具 hook 执行，headless `/plugin available [query]` 与 `/plugin marketplace plugins|search|show` 可浏览已配置 marketplace 插件并标注 available/installed/update 状态，CLI `plugin list --json --available` 可输出 installed/available marketplace JSON，headless `/plugin install <name>` 可从 settings/directory/file/URL catalog/git/github/npm cache 配置的 marketplace 来源复制插件到项目 `.claude/plugins` 并刷新 plugin MCP server app-state，headless `/plugin update [name]` 可刷新 marketplace cache 并替换已安装同名插件，headless `/help`/`/skills` 列表与单项详情，output style 系统提示注入，以及 `/clear` 基础 local command no-query 路径；仍缺 bundled/MCP/remote skills、forked skill/agent 执行、完整 local/local-jsx 实际执行、TUI `/help`/`/skills` 面板、权限 UI/SDK 展示、plugin marketplace TUI/background lifecycle、skill prompt shell injection 和完整 agents/MCP/output-style UI 接线。
+当前状态：已完成项目 skill discovery、目录式 `SKILL.md` prompt metadata loading、project legacy `.claude/commands` prompt command loading、command registry metadata/lookup/filter、agent-metadata strict plugin-only policy filtering、部分内置 slash command aliases/metadata、prompt expansion、基础 `Skill` tool inline 调用、本地项目 prompt skill 的基础 slash 调用接入、本地 prompt skill 的 command permissions attachment/current-turn 权限继承，本地 plugin command/skill/agent/MCP server/output style/hook 的 manifest discovery，本地 plugin 同步工具 hook 执行，headless `/plugin available [query]` 与 `/plugin marketplace plugins|search|show` 可浏览已配置 marketplace 插件并标注 available/installed/update 状态，CLI `plugin list --json --available` 可输出 installed/available marketplace JSON，headless `/plugin install <name>` 可从 settings/directory/file/URL catalog/git/github/npm cache 配置的 marketplace 来源复制插件到项目 `.claude/plugins` 并刷新 plugin MCP server app-state，headless `/plugin update [name]` 和 CLI `plugin update --scope project <plugin>` 可复用共享更新 API 并替换已安装同名插件，headless `/help`/`/skills` 列表与单项详情，output style 系统提示注入，以及 `/clear` 基础 local command no-query 路径；仍缺 bundled/MCP/remote skills、forked skill/agent 执行、完整 local/local-jsx 实际执行、TUI `/help`/`/skills` 面板、权限 UI/SDK 展示、plugin marketplace TUI/background lifecycle、skill prompt shell injection 和完整 agents/MCP/output-style UI 接线。
 
 ### M9: MCP Platform