Rename the toolbox plugin to core-tools

.agents/plugins/marketplace.json

@@ -17,10 +17,10 @@
       "category": "Productivity"
     },
     {
-      "name": "bmad-toolbox",
+      "name": "bmad-core-tools",
       "source": {
         "source": "local",
-        "path": "./plugins/toolbox"
+        "path": "./plugins/core-tools"
       },
       "policy": {
         "installation": "AVAILABLE",

.claude-plugin/marketplace.json

@@ -31,11 +31,11 @@
       }
     },
     {
-      "name": "bmad-toolbox",
-      "displayName": "BMAD Toolbox",
-      "source": "./plugins/toolbox",
+      "name": "bmad-core-tools",
+      "displayName": "BMAD Core Tools",
+      "source": "./plugins/core-tools",
       "strict": false,
-      "description": "BMAD Toolbox — generally useful standalone skills from the BMAD Method.",
+      "description": "BMAD Core Tools — generally useful standalone skills from the BMAD Method.",
       "version": "6.13.0-next",
       "author": {
         "name": "Brian (BMad) Madison"

README.md

@@ -11,10 +11,10 @@ requests happen in
 ## The plugins
 
 - **bmad-method** — the BMAD Method core: agents and workflows for product analysis, planning, architecture, and implementation.
-- **bmad-toolbox** — generally useful standalone skills.
+- **bmad-core-tools** — generally useful standalone skills.
 
 Both ecosystems below serve the same two skills trees
-(`plugins/method/skills/`, `plugins/toolbox/skills/`) with their own metadata.
+(`plugins/method/skills/`, `plugins/core-tools/skills/`) with their own metadata.
 
 ## Claude Code
 
@@ -24,7 +24,7 @@ This repository is a Claude Code plugin marketplace:
 /plugin marketplace add bmad-code-org/bmad-plugins
 ```
 
-Then install `bmad-method` and/or `bmad-toolbox` from it.
+Then install `bmad-method` and/or `bmad-core-tools` from it.
 
 ## OpenAI Codex
 

plugins/toolbox/.codex-plugin/plugin.json → plugins/core-tools/.codex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
-  "name": "bmad-toolbox",
+  "name": "bmad-core-tools",
   "version": "6.13.0-next",
-  "description": "BMAD Toolbox — generally useful standalone skills from the BMAD Method.",
+  "description": "BMAD Core Tools — generally useful standalone skills from the BMAD Method.",
   "author": {
     "name": "Brian (BMad) Madison"
   },
@@ -17,8 +17,8 @@
     "skills"
   ],
   "interface": {
-    "displayName": "BMAD Toolbox",
-    "shortDescription": "BMAD Toolbox — generally useful standalone skills from the BMAD Method.",
+    "displayName": "BMAD Core Tools",
+    "shortDescription": "BMAD Core Tools — generally useful standalone skills from the BMAD Method.",
     "longDescription": "Standalone skills extracted from the BMAD Method that are useful on their own, outside the full planning-to-implementation workflow. From the team behind BMAD-METHOD.",
     "developerName": "BMad Code Open Source Team",
     "category": "Productivity",

plugins/toolbox/skills/bmad-deep-recon/module-manifest.toml → plugins/core-tools/skills/bmad-advanced-elicitation/module-manifest.toml

@@ -1,4 +1,4 @@
-module = "toolbox"
+module = "core-tools"
 version = "6.13.0-next"
-update_source = "plugin:bmad-toolbox"
+update_source = "plugin:bmad-core-tools"
 knowledge = "`references/help.md` in the `bmad` skill"

plugins/toolbox/skills/bmad-advanced-elicitation/module-manifest.toml → plugins/core-tools/skills/bmad-brainstorming/module-manifest.toml

@@ -1,4 +1,4 @@
-module = "toolbox"
+module = "core-tools"
 version = "6.13.0-next"
-update_source = "plugin:bmad-toolbox"
+update_source = "plugin:bmad-core-tools"
 knowledge = "`references/help.md` in the `bmad` skill"

plugins/toolbox/skills/bmad-brainstorming/module-manifest.toml → plugins/core-tools/skills/bmad-customize/module-manifest.toml

@@ -1,4 +1,4 @@
-module = "toolbox"
+module = "core-tools"
 version = "6.13.0-next"
-update_source = "plugin:bmad-toolbox"
+update_source = "plugin:bmad-core-tools"
 knowledge = "`references/help.md` in the `bmad` skill"

plugins/toolbox/skills/bmad-customize/module-manifest.toml → plugins/core-tools/skills/bmad-deep-recon/module-manifest.toml

@@ -1,4 +1,4 @@
-module = "toolbox"
+module = "core-tools"
 version = "6.13.0-next"
-update_source = "plugin:bmad-toolbox"
+update_source = "plugin:bmad-core-tools"
 knowledge = "`references/help.md` in the `bmad` skill"

plugins/core-tools/skills/bmad-forge-idea/module-manifest.toml

@@ -0,0 +1,4 @@
+module = "core-tools"
+version = "6.13.0-next"
+update_source = "plugin:bmad-core-tools"
+knowledge = "`references/help.md` in the `bmad` skill"

plugins/core-tools/skills/bmad-party-mode/module-manifest.toml

@@ -0,0 +1,4 @@
+module = "core-tools"
+version = "6.13.0-next"
+update_source = "plugin:bmad-core-tools"
+knowledge = "`references/help.md` in the `bmad` skill"

plugins/core-tools/skills/bmad-review/module-manifest.toml

@@ -0,0 +1,4 @@
+module = "core-tools"
+version = "6.13.0-next"
+update_source = "plugin:bmad-core-tools"
+knowledge = "`references/help.md` in the `bmad` skill"

plugins/core-tools/skills/bmad/module-manifest.toml

@@ -0,0 +1,4 @@
+module = "core-tools"
+version = "6.13.0-next"
+update_source = "plugin:bmad-core-tools"
+knowledge = "`references/help.md` in the `bmad` skill"

release.py

@@ -10,10 +10,16 @@
 
 Routing: SOURCES maps each source repo to the modules it ships, and a skill's
 `module` key names the plugin directory it ships in, so a module comes
-entirely from the one source that declares it. Each manifest must carry
-exactly the keys module, version, update_source, and knowledge --
-update_source naming its own source repo, and version and knowledge each
-identical across every skill in its module, whatever they say.
+entirely from the one source that declares it. Each manifest must carry the
+keys module, version, update_source and knowledge -- update_source naming its
+own source repo, and version identical across every skill in its module,
+whatever it says. Any other key is the skill's own business: the runtime
+ignores keys it does not know, so this script does too.
+
+knowledge lists documents inside the skill that names them, requires is what
+that skill cannot work without, and recommends is what it works better with.
+All three belong to the skill rather than the module, so skills of one module
+may differ on any of them. All three are copied through untouched.
 
 A version belongs to a module, not to a release of this repo: what a plugin
 ships as is its own module's version, and two modules need not agree, whether
@@ -39,7 +45,7 @@
 # Source repo -> the modules it ships. A module name is both the plugin
 # directory (plugins/<module>) and the plugin itself (bmad-<module>).
 SOURCES = {
-    "bmad-code-org/BMAD-METHOD": ("method", "toolbox"),
+    "bmad-code-org/BMAD-METHOD": ("method", "core-tools"),
 }
 PLUGINS = tuple(module for modules in SOURCES.values() for module in modules)
 MANIFEST_KEYS = frozenset({"module", "version", "update_source", "knowledge"})
@@ -69,15 +75,24 @@ def read_manifest(skill_dir, slug):
             manifest = tomllib.load(f)
         except tomllib.TOMLDecodeError as e:
             fail(f"{slug}/{skill_dir.name}: {e}")
-    if set(manifest) != MANIFEST_KEYS:
-        fail(
-            f"{slug}/{skill_dir.name}: keys must be exactly {', '.join(sorted(MANIFEST_KEYS))}; "
-            f"found {', '.join(sorted(manifest)) or 'none'}"
-        )
+    # The runtime ignores keys it does not know, so a build must not refuse them.
+    missing = MANIFEST_KEYS - set(manifest)
+    if missing:
+        fail(f"{slug}/{skill_dir.name}: manifest is missing {', '.join(sorted(missing))}")
     if manifest["update_source"] != update_source(slug):
         fail(f"{slug}/{skill_dir.name}: update_source must be exactly {update_source(slug)!r}")
-    if not isinstance(manifest["knowledge"], str) or not manifest["knowledge"].strip():
-        fail(f"{slug}/{skill_dir.name}: knowledge must be a non-empty string")
+    knowledge = manifest["knowledge"]
+    if not isinstance(knowledge, list) or not knowledge:
+        fail(f"{slug}/{skill_dir.name}: knowledge must be a non-empty list of paths inside the skill")
+    for entry in knowledge:
+        if not isinstance(entry, str) or not entry:
+            fail(f"{slug}/{skill_dir.name}: knowledge has invalid value {entry!r}")
+        # The plugin ships a copy of the skill, so a document must live inside it.
+        parts = entry.split("/")
+        if entry.startswith("/") or "://" in entry or "\\" in entry or ":" in entry or ".." in parts:
+            fail(f"{slug}/{skill_dir.name}: knowledge has unsafe value {entry!r}")
+        if not (skill_dir / entry).is_file():
+            fail(f"{slug}/{skill_dir.name}: knowledge names {entry!r}, which the skill does not ship")
     return manifest
 
 
@@ -100,14 +115,14 @@ def collect_skills(skills_root, slug, modules):
     for module, entries in found.items():
         if not entries:
             fail(f"{slug} ships no skills for module `{module}`")
-        # A module speaks for itself, so these values are whatever it says --
-        # but every skill in one module must say the same thing. Modules need
-        # not agree with each other, even within one source repo.
-        for key in ("version", "knowledge"):
-            values = {skill_dir.name: manifest[key] for skill_dir, manifest in entries}
-            if len(set(values.values())) > 1:
-                detail = ", ".join(f"{name}={value!r}" for name, value in sorted(values.items()))
-                fail(f"module `{module}` skills disagree on {key}: {detail}")
+        # A module speaks for itself, so its version is whatever it says -- but
+        # every skill in one module must agree, because the plugin ships as one
+        # version. Modules need not agree with each other, even within one
+        # source repo. knowledge, requires and recommends are per-skill.
+        versions = {skill_dir.name: manifest["version"] for skill_dir, manifest in entries}
+        if len(set(versions.values())) > 1:
+            detail = ", ".join(f"{name}={value!r}" for name, value in sorted(versions.items()))
+            fail(f"module `{module}` skills disagree on version: {detail}")
         collected[module] = ([skill_dir for skill_dir, _ in entries], entries[0][1]["version"])
     return collected