feat(installer): auto-install kubectl as required dependency

Author: zjy365

install.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-VERSION="1.1.1"
+VERSION="1.1.2"
 REPO="zjy365/seakills"
 SITE_URL="https://seakills.gzg.sealos.run"
 
@@ -75,6 +75,61 @@ else
 fi
 echo ""
 
+# --- Install kubectl if missing ---
+AGENTS_BIN="$HOME/.agents/bin"
+
+install_kubectl() {
+  if command -v kubectl &>/dev/null; then
+    echo "kubectl: $(kubectl version --client --short 2>/dev/null || kubectl version --client 2>/dev/null | head -1) (already installed)"
+    return 0
+  fi
+
+  echo "Installing kubectl..."
+
+  local os arch
+  os="$(uname -s | tr '[:upper:]' '[:lower:]')"
+  arch="$(uname -m)"
+  case "$arch" in
+    x86_64|amd64) arch="amd64" ;;
+    aarch64|arm64) arch="arm64" ;;
+    *) echo "  ✗ Unsupported architecture: $arch"; return 1 ;;
+  esac
+
+  # Get latest stable version
+  local kube_version
+  kube_version="$(curl -fsSL --connect-timeout 10 https://dl.k8s.io/release/stable.txt 2>/dev/null)" || kube_version="v1.32.0"
+
+  mkdir -p "$AGENTS_BIN"
+  local url="https://dl.k8s.io/release/${kube_version}/bin/${os}/${arch}/kubectl"
+
+  if curl -fsSL --connect-timeout 15 "$url" -o "$AGENTS_BIN/kubectl" 2>/dev/null; then
+    chmod +x "$AGENTS_BIN/kubectl"
+    echo "  ✓ kubectl ${kube_version} → $AGENTS_BIN/kubectl"
+  else
+    echo "  ✗ kubectl download failed (deploy will still work, but updates require full re-deploy)"
+    return 1
+  fi
+
+  # Silently add ~/.agents/bin to PATH in shell profiles (idempotent)
+  local path_line="export PATH=\"\$HOME/.agents/bin:\$PATH\""
+  local fish_line="fish_add_path -g \$HOME/.agents/bin"
+
+  for rc in "$HOME/.bashrc" "$HOME/.zshrc" "$HOME/.profile"; do
+    if [ -f "$rc" ]; then
+      grep -qF '.agents/bin' "$rc" 2>/dev/null || echo "$path_line" >> "$rc"
+    fi
+  done
+
+  # Fish config
+  local fish_conf="$HOME/.config/fish/config.fish"
+  if [ -f "$fish_conf" ]; then
+    grep -qF '.agents/bin' "$fish_conf" 2>/dev/null || echo "$fish_line" >> "$fish_conf"
+  fi
+}
+
+install_kubectl || true
+echo ""
+
 # --- Download skills ---
 tmp="$(mktemp -d)"
 trap 'rm -rf "$tmp"' EXIT

skills/sealos-deploy/modules/preflight.md

@@ -27,8 +27,9 @@ git --version 2>/dev/null
 node --version 2>/dev/null
 python3 --version 2>/dev/null
 
-# Optional (enables in-place updates of deployed apps)
-kubectl version --client 2>/dev/null
+# Required (enables in-place updates of deployed apps)
+# Check PATH first, then fallback to ~/.agents/bin/
+kubectl version --client 2>/dev/null || ~/.agents/bin/kubectl version --client 2>/dev/null
 
 # Always available (system built-in)
 curl --version 2>/dev/null | head -1
@@ -57,7 +58,7 @@ ENV.docker    = true/false
 ENV.git       = true/false
 ENV.node      = true/false   (18+ required)
 ENV.python    = true/false
-ENV.kubectl   = true/false
+ENV.kubectl   = true/false   (if false, check ~/.agents/bin/kubectl)
 ENV.curl      = true/false
 ENV.jq        = true/false
 ```
@@ -90,9 +91,11 @@ docker info 2>/dev/null
 **Python:**
 - If missing, Sealos template validation (Phase 5) uses AI self-check instead of `quality_gate.py`
 
-**kubectl:**
-- If available, enables in-place update of already-deployed apps (`kubectl set image`, `kubectl rollout`)
-- If missing, updates require a full re-deploy through the Template API
+**kubectl (required):**
+- Installed automatically by `install.sh` to `~/.agents/bin/kubectl`
+- If `kubectl` is not in PATH, use `~/.agents/bin/kubectl` as the absolute path for all kubectl commands
+- Enables in-place update of already-deployed apps (`kubectl set image`, `kubectl rollout`)
+- If somehow missing, guide user to re-run the installer: `curl -fsSL https://seakills.gzg.sealos.run/install.sh | bash`
 
 ## Step 2: Project Context
 
@@ -420,7 +423,7 @@ Environment:                      (cached / refreshed)
   ✓ git <version>
   ○ Node.js <version>        (or: ✗ Node.js — using AI fallback mode)
   ○ Python <version>          (or: ✗ Python — template validation via AI)
-  ○ kubectl <version>         (or: ✗ kubectl — update via re-deploy only)
+  ✓ kubectl <version>
 
 Auth:
   ✓ Sealos Cloud (<region>)