Add antianqi/tool-map v0.2.0: persistent cross-platform tool inventory

[antianqi]

Summary

Adds plugins/antianqi/tool-map v0.2.0: a Skill-only Plugin that generates and refreshes a persistent, cross-platform inventory of the CLI tools, scripts, and MCP servers installed on the user's machine, so the agent can answer "do I have X?", "where is Y?", "how do I run Z?" without re-scanning the filesystem every session.

The catalog is written as three files (lightweight summary, full markdown, machine JSON) into the Plugin data directory, exposed to the agent as ${PLUGIN_DATA}. Subsequent turns read the cached summary; refresh only on user demand, when a tool the user mentions is missing, or when a command not found is reported in the same session.

What's inside

• plugin.json -- $schema=agent-plugins.org/schemas/1.0.0/plugin.schema.json, name=tool-map, version=0.2.0, license=Apache-2.0
• README.md -- overview, Supported platforms table, four independent "no credentials / no network / no telemetry / no third-party services" disclosures, limitations, test evidence
• LICENSE -- Apache-2.0 (full text, LF only, no BOM)
• skills/tool-map/SKILL.md -- agent-facing workflow: read cached summary, refresh rules, failure modes, cross-platform roots (frontmatter present, LF only)
• scripts/scan.mjs -- cross-platform Node scanner, zero external deps, atomic staging-then-rename writes; all well-known roots derived from $HOME, $ProgramFiles, $APPDATA, $LOCALAPPDATA, $PATH, $TOOL_MAP_ROOTS, or fixed POSIX conventions (no per-user absolute paths in source); 15 well-known CLI version probes with 5 s timeouts
• scripts/smoke.mjs -- self-check that statically scans the Plugin's own source tree for hardcoded absolute paths, literal credential tokens, and leftover scaffold markers; exits 0 (clean) / 2 (violation) / 1 (internal)
• test/tool-map.test.mjs -- 6 node --test cases covering atomic write, output schema, no-leakage outside the output dir, no staging residue, empty-PATH robustness, and smoke green (auto-discovered by the repo's npm test)

Validation

$ npm run check
> minimax-code-plugins@0.1.0 check
> npm run validate && npm test

> minimax-code-plugins@0.1.0 validate
> node scripts/validate.mjs
OK   example hello-mcode
OK   example hello-mcode-mcp
OK   plugin Fectivnfy112357/github-explore
OK   plugin hetaoBackend/minimax-code-trajectory
OK   plugin HopeYin/dida365
OK   plugin HopeYin/ticktick
OK   plugin Hylouis233/mcp-server-patterns
OK   plugin Hylouis233/search-first
OK   plugin Hylouis233/verification-loop
OK   plugin antianqi/tool-map

$ node --test test/tool-map.test.mjs
> scan.mjs writes the three catalog files atomically (705ms)
> scan.mjs JSON has the expected schema (729ms)
> scan.mjs writes nothing outside the output directory (726ms)
> scan.mjs leaves no staging files on success (742ms)
> scan.mjs completes with an empty PATH and still produces a valid catalog (111ms)
> smoke.mjs exits 0 against the plugin source tree (34ms)
tests 6
pass 6
fail 0

$ node scripts/smoke.mjs
OK scanned 2 files, 0 violations.

(One pre-existing test failure on Windows is unrelated to this Plugin: test/hosted-plugins.test.mjs:15 hard-codes the regex /plugins\/alice\/hello-world/u against stdout from create-plugin.mjs, which produces backslash-separated paths on Windows. The repo's CI runs on Linux and the test passes there.)

Design compliance (per hetaoBackend review rubric on PRs #2/#3)

#	Lesson	Compliance in this PR
1	In-scope discipline: do not touch files outside plugins/<owner>/<name>/	Only plugins/antianqi/tool-map/* and test/tool-map.test.mjs are added; no edits to repo-root files, no writes to ~/.minimax/, no ~/.openclaw*/ side effects.
2	Portability: no hardcoded per-user absolute paths	scan.mjs uses $HOME, $ProgramFiles, $APPDATA, $LOCALAPPDATA, $PATH, $TOOL_MAP_ROOTS, and fixed POSIX paths. smoke.mjs statically verifies no D:\ / C:\ / E:\ / /Users/ / /home/ literal in any .md/.mjs file.
3	Credential disclosure consistency	README and SKILL.md each carry an independent "no credentials / no network / no telemetry / no third-party services" disclosure. The Plugin embeds no tokens, no OAuth clients, and reads only filenames under ~/.ssh/.
4	Network destination boundary	Scanner makes zero network calls and ships zero credentials. The Skill instructs the agent to call the scanner as a local node process only.
5	Delivery model portability	Zero npm install / npm link is required. The scanner runs as a plain node ./scripts/scan.mjs with only Node built-ins.
6	Atomic / safe file operations	Every output file is written via <out>.staging-<pid>-<rand> then rename. On any failure the staging file is removed and the previous catalog is untouched.
7	Lint / failure semantics	smoke.mjs exits 0 (clean) / 2 (violation) / 1 (internal); never swallows FAIL.
8	Test coverage for converters	6 node --test cases plus a behavioural smoke check; the scan + summary + JSON workflow is exercised end-to-end against a temp directory.
9	External SDK contract	None required (no MCP, no remote server, no third-party SDK).
10	Self-check coverage	smoke.mjs walks skills/ and scripts/ recursively and flags any hardcoded path / literal token / scaffold marker.
11	PR scope	One Plugin only, one commit, one branch.

Forward compatibility with PR #4 (validator hardening, not yet merged)

• No mcp.json is shipped, so the proposed cwd / env / headers hardening does not apply. The ${PLUGIN_DATA} and ${PLUGIN_ROOT} placeholders appear in narrative text only, never in executable cwd values.
• SKILL.md is LF-only with no UTF-8 BOM, satisfying the proposed validateSkillText normalization rule.

Compatibility

Platform	Status	Notes
Windows 10 / 11 (PowerShell 5.1+ or pwsh 7)	Supported (primary)	Drives, %ProgramFiles%, %APPDATA%, %LOCALAPPDATA% resolved from environment.
macOS 12+ (bash / zsh)	Supported	~/.local/bin, /usr/local/bin, /opt/homebrew/bin walked.
Linux x86_64 / arm64	Supported	~/.local/bin, ~/.local/share/npm/bin, /usr/local/bin walked.

Links

• Source branch: add-tool-map on antianqi/MiniMax-Code-Plugins-1
• This PR: antianqi:add-tool-map -> MiniMax-AI:main

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[hetaoBackend]

Review result: do not approve / do not merge yet.

The repository check passes (33 tests), but two security/contract issues are blocking:

• scripts/scan.mjs:374-376 writes tools.md, tools.json, and tools.summary.md via three independent atomic renames. A failure between writes leaves mixed-generation catalogs, despite the bundle-level atomicity claim in README.md:21,68 and skills/tool-map/SKILL.md:28,61. Please add a rollback/bundle strategy and a failure-path test.
• scripts/scan.mjs:115-143 executes 15 PATH-resolved programs with --version. That can run arbitrary wrappers with side effects/network access, contradicting the documented read-only/offline contract (README.md:49-57, skills/tool-map/SKILL.md:60-64). Either remove execution or explicitly disclose/guard it as command execution.

Additional correctness issues found: XDG_DATA_HOME is ignored (scan.mjs:34 despite the XDG claim), unconditional realpath.toLowerCase() drops distinct tools on case-sensitive filesystems (scan.mjs:330-336), and non-executable .sh files are reported as tools because execute permission is never checked (scan.mjs:148-199).

Please address the two P1 findings and add adversarial coverage before requesting another review.