npm - @velora-cms/server - Versions diffs - 0.11.0 - Mend

@velora-cms/server 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (367) hide show

package/dist/docs-bundle/v1/using-velora/installing-plugins/index.html ADDED Viewed

@@ -0,0 +1,836 @@
+<!DOCTYPE html><html lang="en" dir="ltr" data-theme="dark" data-has-toc data-has-sidebar class="astro-ewhz5xxr"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>Installing plugins | Velora</title><link rel="shortcut icon" href="/docs/favicon.svg" type="image/svg+xml"/><meta name="generator" content="Astro v7.2.10"/><meta name="generator" content="Starlight v0.41.5"/><meta property="og:title" content="Installing plugins"/><meta property="og:type" content="article"/><meta property="og:locale" content="en"/><meta property="og:description" content="Connecting to the marketplace, what the signature gate actually blocks, sideloading a built package, and managing installed plugins."/><meta property="og:site_name" content="Velora"/><meta name="twitter:card" content="summary_large_image"/><meta name="description" content="Connecting to the marketplace, what the signature gate actually blocks, sideloading a built package, and managing installed plugins."/><script>
+	window.StarlightThemeProvider = (() => {
+		const storedTheme =
+			typeof localStorage !== 'undefined' && localStorage.getItem('starlight-theme');
+		const theme =
+			storedTheme ||
+			(window.matchMedia('(prefers-color-scheme: light)').matches ? 'light' : 'dark');
+		document.documentElement.dataset.theme = theme === 'light' ? 'light' : 'dark';
+		return {
+			updatePickers(theme = storedTheme || 'auto') {
+				document.querySelectorAll('starlight-theme-select').forEach((picker) => {
+					const select = picker.querySelector('select');
+					if (select) select.value = theme;
+					/** @type {HTMLTemplateElement | null} */
+					const tmpl = document.querySelector(`#theme-icons`);
+					const newIcon = tmpl && tmpl.content.querySelector('.' + theme);
+					if (newIcon) {
+						const oldIcon = picker.querySelector('svg.label-icon');
+						if (oldIcon) {
+							oldIcon.replaceChildren(...newIcon.cloneNode(true).childNodes);
+						}
+					}
+				});
+			},
+		};
+	})();
+</script><template id="theme-icons"><svg aria-hidden="true" class="light astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M5 12a1 1 0 0 0-1-1H3a1 1 0 0 0 0 2h1a1 1 0 0 0 1-1Zm.64 5-.71.71a1 1 0 0 0 0 1.41 1 1 0 0 0 1.41 0l.71-.71A1 1 0 0 0 5.64 17ZM12 5a1 1 0 0 0 1-1V3a1 1 0 0 0-2 0v1a1 1 0 0 0 1 1Zm5.66 2.34a1 1 0 0 0 .7-.29l.71-.71a1 1 0 1 0-1.41-1.41l-.66.71a1 1 0 0 0 0 1.41 1 1 0 0 0 .66.29Zm-12-.29a1 1 0 0 0 1.41 0 1 1 0 0 0 0-1.41l-.71-.71a1.004 1.004 0 1 0-1.43 1.41l.73.71ZM21 11h-1a1 1 0 0 0 0 2h1a1 1 0 0 0 0-2Zm-2.64 6A1 1 0 0 0 17 18.36l.71.71a1 1 0 0 0 1.41 0 1 1 0 0 0 0-1.41l-.76-.66ZM12 6.5a5.5 5.5 0 1 0 5.5 5.5A5.51 5.51 0 0 0 12 6.5Zm0 9a3.5 3.5 0 1 1 0-7 3.5 3.5 0 0 1 0 7Zm0 3.5a1 1 0 0 0-1 1v1a1 1 0 0 0 2 0v-1a1 1 0 0 0-1-1Z"/></svg><svg aria-hidden="true" class="dark astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M21.64 13a1 1 0 0 0-1.05-.14 8.049 8.049 0 0 1-3.37.73 8.15 8.15 0 0 1-8.14-8.1 8.59 8.59 0 0 1 .25-2A1 1 0 0 0 8 2.36a10.14 10.14 0 1 0 14 11.69 1 1 0 0 0-.36-1.05Zm-9.5 6.69A8.14 8.14 0 0 1 7.08 5.22v.27a10.15 10.15 0 0 0 10.14 10.14 9.784 9.784 0 0 0 2.1-.22 8.11 8.11 0 0 1-7.18 4.32v-.04Z"/></svg><svg aria-hidden="true" class="auto astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M21 14h-1V7a3 3 0 0 0-3-3H7a3 3 0 0 0-3 3v7H3a1 1 0 0 0-1 1v2a3 3 0 0 0 3 3h14a3 3 0 0 0 3-3v-2a1 1 0 0 0-1-1ZM6 7a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v7H6V7Zm14 10a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1v-1h16v1Z"/></svg></template><link rel="stylesheet" href="/docs/_astro/print.ehPL0gv-.css" media="print"><link rel="stylesheet" href="/docs/_astro/common.DTXA7sXM.css"><script type="module" src="/docs/_astro/page.Dwipeu-R.js"></script></head><body class="astro-ewhz5xxr"><a class="sl-skip-link astro-zufphfvp" href="#_top">Skip to content</a><div class="page sl-flex astro-5auw3bkx"><header class="header astro-5auw3bkx"><div class="header astro-6ytusalw"><div class="title-wrapper sl-flex astro-6ytusalw"><a href="/docs/" class="site-title sl-flex astro-nu4hftpf"><span class="astro-nu4hftpf" translate="no">Velora</span></a></div><div class="sl-flex print:hidden astro-6ytusalw"><site-search class="astro-6ytusalw astro-zwj6qr56" data-translations="{&quot;placeholder&quot;:&quot;Search&quot;}"><button data-open-modal disabled aria-label="Search" aria-keyshortcuts="Control+K" class="astro-zwj6qr56"><svg aria-hidden="true" class="astro-zwj6qr56 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M21.71 20.29 18 16.61A9 9 0 1 0 16.61 18l3.68 3.68a.999.999 0 0 0 1.42 0 1 1 0 0 0 0-1.39ZM11 18a7 7 0 1 1 0-14 7 7 0 0 1 0 14Z"/></svg><span class="sl-hidden md:sl-block astro-zwj6qr56" aria-hidden="true">Search</span><kbd class="sl-hidden md:sl-flex astro-zwj6qr56" style="display: none;"><kbd class="astro-zwj6qr56">Ctrl</kbd><kbd class="astro-zwj6qr56">K</kbd></kbd></button><dialog style="padding:0" aria-label="Search" class="astro-zwj6qr56"><div class="dialog-frame sl-flex astro-zwj6qr56"><button data-close-modal class="sl-flex md:sl-hidden astro-zwj6qr56">Cancel</button><div class="search-container astro-zwj6qr56"><div id="starlight__search" class="astro-zwj6qr56"></div></div></div></dialog></site-search><script>
+	(() => {
+		const openBtn = document.querySelector('button[data-open-modal]');
+		const shortcut = openBtn?.querySelector('kbd');
+		if (!openBtn || !(shortcut instanceof HTMLElement)) return;
+		const platformKey = shortcut.querySelector('kbd');
+		if (platformKey && /(Mac|iPhone|iPod|iPad)/i.test(navigator.platform)) {
+			platformKey.textContent = '⌘';
+			openBtn.setAttribute('aria-keyshortcuts', 'Meta+K');
+		}
+		shortcut.style.display = '';
+	})();
+</script><script type="module" src="/docs/_astro/Search.astro_astro_type_script_index_0_lang.CavldbAs.js"></script></div><div class="sl-hidden md:sl-flex print:hidden right-group astro-6ytusalw"><div class="sl-flex social-icons astro-6ytusalw"></div><starlight-theme-select><label style="--sl-select-width: 6.25em" class="astro-7uz3f5wr"><span class="sr-only astro-7uz3f5wr">Select theme</span><svg aria-hidden="true" class="icon label-icon astro-7uz3f5wr astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M21 14h-1V7a3 3 0 0 0-3-3H7a3 3 0 0 0-3 3v7H3a1 1 0 0 0-1 1v2a3 3 0 0 0 3 3h14a3 3 0 0 0 3-3v-2a1 1 0 0 0-1-1ZM6 7a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v7H6V7Zm14 10a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1v-1h16v1Z"/></svg><select autocomplete="off" class="astro-7uz3f5wr"><option value="dark" class="astro-7uz3f5wr">Dark</option><option value="light" class="astro-7uz3f5wr">Light</option><option value="auto" selected class="astro-7uz3f5wr">Auto</option></select><svg aria-hidden="true" class="icon caret astro-7uz3f5wr astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M17 9.17a1 1 0 0 0-1.41 0L12 12.71 8.46 9.17a1 1 0 1 0-1.41 1.42l4.24 4.24a1.002 1.002 0 0 0 1.42 0L17 10.59a1.002 1.002 0 0 0 0-1.42Z"/></svg></label></starlight-theme-select><script>
+	StarlightThemeProvider.updatePickers();
+</script><script type="module">var e=`starlight-theme`,t=e=>e===`auto`||e===`dark`||e===`light`?e:`auto`,n=()=>t(typeof localStorage<`u`&&localStorage.getItem(e));function r(t){typeof localStorage<`u`&&localStorage.setItem(e,t===`light`||t===`dark`?t:``)}var i=()=>matchMedia(`(prefers-color-scheme: light)`).matches?`light`:`dark`;function a(e){StarlightThemeProvider.updatePickers(e),document.documentElement.dataset.theme=e===`auto`?i():e,r(e)}matchMedia(`(prefers-color-scheme: light)`).addEventListener(`change`,()=>{n()===`auto`&&a(`auto`)});var o=class extends HTMLElement{constructor(){super(),a(n()),this.querySelector(`select`)?.addEventListener(`change`,e=>{e.currentTarget instanceof HTMLSelectElement&&a(t(e.currentTarget.value))})}};customElements.define(`starlight-theme-select`,o);</script><script type="module">var e=class extends HTMLElement{constructor(){super();let e=this.querySelector(`select`);e&&(e.addEventListener(`change`,e=>{e.currentTarget instanceof HTMLSelectElement&&(window.location.pathname=e.currentTarget.value)}),window.addEventListener(`pageshow`,t=>{if(!t.persisted)return;let n=e.querySelector(`option[selected]`)?.index;n!==e.selectedIndex&&(e.selectedIndex=n??0)}))}};customElements.define(`starlight-lang-select`,e);</script></div></div></header><nav class="sidebar print:hidden astro-5auw3bkx" aria-label="Main"><starlight-menu-button class="print:hidden astro-gnkm6dw5"><button aria-expanded="false" aria-label="Menu" aria-controls="starlight__sidebar" class="sl-flex md:sl-hidden astro-gnkm6dw5"><svg aria-hidden="true" class="open-menu astro-gnkm6dw5 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M3 8h18a1 1 0 1 0 0-2H3a1 1 0 0 0 0 2Zm18 8H3a1 1 0 0 0 0 2h18a1 1 0 0 0 0-2Zm0-5H3a1 1 0 0 0 0 2h18a1 1 0 0 0 0-2Z"/></svg><svg aria-hidden="true" class="close-menu astro-gnkm6dw5 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="m13.41 12 6.3-6.29a1.004 1.004 0 1 0-1.42-1.42L12 10.59l-6.29-6.3a1.004 1.004 0 0 0-1.42 1.42l6.3 6.29-6.3 6.29a1 1 0 0 0 0 1.42.998.998 0 0 0 1.42 0l6.29-6.3 6.29 6.3a.999.999 0 0 0 1.42 0 1 1 0 0 0 0-1.42L13.41 12Z"/></svg></button></starlight-menu-button><script type="module">var e=class extends HTMLElement{btn=this.querySelector(`button`);constructor(){super(),this.btn.addEventListener(`click`,()=>this.toggleExpanded());let e=this.closest(`nav`);e&&e.addEventListener(`keyup`,e=>this.closeOnEscape(e)),matchMedia(`(min-width: 50em)`).addEventListener(`change`,()=>this.setExpanded(!1))}setExpanded(e){this.setAttribute(`aria-expanded`,String(e)),document.body.toggleAttribute(`data-mobile-menu-expanded`,e),document.querySelectorAll(`.main-frame, .sl-skip-link`).forEach(t=>{t.toggleAttribute(`inert`,e)})}toggleExpanded(){this.setExpanded(this.getAttribute(`aria-expanded`)!==`true`)}closeOnEscape(e){e.code===`Escape`&&(this.setExpanded(!1),this.btn.focus())}};customElements.define(`starlight-menu-button`,e);</script><div id="starlight__sidebar" class="sidebar-pane astro-5auw3bkx"><div class="sidebar-content sl-flex astro-5auw3bkx"><sl-sidebar-state-persist data-hash="03jp7ll" class="astro-pcs3l5kp"><script aria-hidden="true">
+		(() => {
+			try {
+				if (!matchMedia('(min-width: 50em)').matches) return;
+				/** @type {HTMLElement | null} */
+				const target = document.querySelector('sl-sidebar-state-persist');
+				const state = JSON.parse(sessionStorage.getItem('sl-sidebar-state') || '0');
+				if (!target || !state || target.dataset.hash !== state.hash) return;
+				window._starlightScrollRestore = state.scroll;
+				customElements.define(
+					'sl-sidebar-restore',
+					class SidebarRestore extends HTMLElement {
+						connectedCallback() {
+							try {
+								const idx = parseInt(this.dataset.index || '');
+								const details = this.closest('details');
+								if (details && typeof state.open[idx] === 'boolean') details.open = state.open[idx];
+							} catch {}
+						}
+					}
+				);
+			} catch {}
+		})();
+	</script><ul class="top-level astro-ck7l566j"><li class="astro-ck7l566j"><details open class="astro-ck7l566j"><summary class="astro-ck7l566j"><span class="group-label astro-ck7l566j"><span class="large astro-ck7l566j">Using Velora</span></span><svg aria-hidden="true" class="caret astro-ck7l566j astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.25rem;"><path d="m14.83 11.29-4.24-4.24a1 1 0 1 0-1.42 1.41L12.71 12l-3.54 3.54a1 1 0 0 0 0 1.41 1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.24-4.24a1.002 1.002 0 0 0 0-1.42Z"/></svg></summary><sl-sidebar-restore data-index="0"></sl-sidebar-restore><ul class="astro-ck7l566j"><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/" class="astro-ck7l566j"><span class="astro-ck7l566j">Using Velora</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/getting-started/" class="astro-ck7l566j"><span class="astro-ck7l566j">Getting started</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/installation/" class="astro-ck7l566j"><span class="astro-ck7l566j">Installation</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/content-model/" class="astro-ck7l566j"><span class="astro-ck7l566j">Document types</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/editing/" class="astro-ck7l566j"><span class="astro-ck7l566j">Content editing</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/media/" class="astro-ck7l566j"><span class="astro-ck7l566j">Media</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/users-and-roles/" class="astro-ck7l566j"><span class="astro-ck7l566j">Users and roles</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/installing-plugins/" aria-current="page" class="astro-ck7l566j"><span class="astro-ck7l566j">Installing plugins</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/headless-api/" class="astro-ck7l566j"><span class="astro-ck7l566j">Headless API</span></a></li><li class="astro-ck7l566j"><a href="/docs/v1/using-velora/build-a-headless-frontend/" class="astro-ck7l566j"><span class="astro-ck7l566j">Build a headless frontend</span></a></li></ul></details></li></ul><script aria-hidden="true">
+		(() => {
+			const scroller = document.getElementById('starlight__sidebar');
+			if (!window._starlightScrollRestore || !scroller) return;
+			scroller.scrollTop = window._starlightScrollRestore;
+			delete window._starlightScrollRestore;
+		})();
+	</script></sl-sidebar-state-persist><div class="md:sl-hidden"><div class="mobile-preferences sl-flex astro-yfet6llj"><div class="social-icons astro-yfet6llj"></div><starlight-theme-select><label style="--sl-select-width: 6.25em" class="astro-7uz3f5wr"><span class="sr-only astro-7uz3f5wr">Select theme</span><svg aria-hidden="true" class="icon label-icon astro-7uz3f5wr astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M21 14h-1V7a3 3 0 0 0-3-3H7a3 3 0 0 0-3 3v7H3a1 1 0 0 0-1 1v2a3 3 0 0 0 3 3h14a3 3 0 0 0 3-3v-2a1 1 0 0 0-1-1ZM6 7a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v7H6V7Zm14 10a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1v-1h16v1Z"/></svg><select autocomplete="off" class="astro-7uz3f5wr"><option value="dark" class="astro-7uz3f5wr">Dark</option><option value="light" class="astro-7uz3f5wr">Light</option><option value="auto" selected class="astro-7uz3f5wr">Auto</option></select><svg aria-hidden="true" class="icon caret astro-7uz3f5wr astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1em;"><path d="M17 9.17a1 1 0 0 0-1.41 0L12 12.71 8.46 9.17a1 1 0 1 0-1.41 1.42l4.24 4.24a1.002 1.002 0 0 0 1.42 0L17 10.59a1.002 1.002 0 0 0 0-1.42Z"/></svg></label></starlight-theme-select><script>
+	StarlightThemeProvider.updatePickers();
+</script></div></div></div></div></nav><div class="main-frame astro-5auw3bkx"><script type="module">var e=document.getElementById(`starlight__sidebar`),t=e?.querySelector(`sl-sidebar-state-persist`),n=`sl-sidebar-state`,r=()=>{let r=[],i=t?.dataset.hash||``;try{let e=sessionStorage.getItem(n),t=JSON.parse(e||`{}`);Array.isArray(t.open)&&t.hash===i&&(r=t.open)}catch{}return{hash:i,open:r,scroll:e?.scrollTop||0}},i=e=>{try{sessionStorage.setItem(n,JSON.stringify(e))}catch{}},a=()=>i(r()),o=(e,t)=>{let n=r();n.open[t]=e,i(n)};t?.addEventListener(`click`,e=>{if(!(e.target instanceof Element))return;let t=e.target.closest(`summary`)?.closest(`details`);if(!t)return;let n=t.querySelector(`sl-sidebar-restore`),r=parseInt(n?.dataset.index||``);isNaN(r)||o(!t.open,r)}),addEventListener(`visibilitychange`,()=>{document.visibilityState===`hidden`&&a()});</script><div class="lg:sl-flex astro-perbdhd2"><aside class="right-sidebar-container print:hidden astro-perbdhd2"><div class="right-sidebar astro-perbdhd2"><div class="lg:sl-hidden astro-epm5tkrc"><mobile-starlight-toc data-min-h="2" data-max-h="3" class="astro-bnvebtr4"><nav aria-labelledby="starlight__on-this-page--mobile" class="astro-bnvebtr4"><details id="starlight__mobile-toc" class="astro-bnvebtr4"><summary id="starlight__on-this-page--mobile" class="sl-flex astro-bnvebtr4"><span class="toggle sl-flex astro-bnvebtr4">On this page<svg aria-hidden="true" class="caret astro-bnvebtr4 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1rem;"><path d="m14.83 11.29-4.24-4.24a1 1 0 1 0-1.42 1.41L12.71 12l-3.54 3.54a1 1 0 0 0 0 1.41 1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.24-4.24a1.002 1.002 0 0 0 0-1.42Z"/></svg></span><span class="display-current astro-bnvebtr4"></span></summary><div class="dropdown astro-bnvebtr4"><ul class="isMobile astro-lptfoybu" style="--depth: 0;"><li style="--depth: 0;" class="astro-lptfoybu"><a href="#_top" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Overview</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#the-marketplace-connection" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">The marketplace connection</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#browsing" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Browsing</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#installing" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Installing</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#the-trust-gate-exactly" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">The trust gate, exactly</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#sideloading-a-built-package" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Sideloading a built package</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#managing-what-is-installed" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Managing what is installed</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#marketplace-terms-briefly" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Marketplace terms, briefly</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#writing-your-own" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Writing your own</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#next" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Next</span></a></li></ul></div></details></nav></mobile-starlight-toc><script type="module" src="/docs/_astro/MobileTableOfContents.astro_astro_type_script_index_0_lang.BcSo_yiZ.js"></script></div><div class="right-sidebar-panel sl-hidden lg:sl-block astro-epm5tkrc"><div class="sl-container astro-epm5tkrc"><starlight-toc data-min-h="2" data-max-h="3"><nav aria-labelledby="starlight__on-this-page"><h2 id="starlight__on-this-page">On this page</h2><ul class="astro-lptfoybu" style="--depth: 0;"><li style="--depth: 0;" class="astro-lptfoybu"><a href="#_top" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Overview</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#the-marketplace-connection" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">The marketplace connection</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#browsing" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Browsing</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#installing" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Installing</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#the-trust-gate-exactly" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">The trust gate, exactly</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#sideloading-a-built-package" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Sideloading a built package</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#managing-what-is-installed" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Managing what is installed</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#marketplace-terms-briefly" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Marketplace terms, briefly</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#writing-your-own" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Writing your own</span></a></li><li style="--depth: 0;" class="astro-lptfoybu"><a href="#next" style="--depth: 0;" class="astro-lptfoybu"><span style="--depth: 0;" class="astro-lptfoybu">Next</span></a></li></ul></nav></starlight-toc><script type="module" src="/docs/_astro/TableOfContents.astro_astro_type_script_index_0_lang.Csloo1VZ.js"></script></div></div></div></aside><div class="main-pane astro-perbdhd2"><main data-pagefind-body class="astro-ewhz5xxr" lang="en" dir="ltr"><div class="content-panel astro-ahkzlqop"><div class="sl-container astro-ahkzlqop"><h1 id="_top" class="astro-oef2efwn">Installing plugins</h1></div></div><div class="content-panel astro-ahkzlqop"><div class="sl-container astro-ahkzlqop"><div class="sl-markdown-content"><p>A Velora instance browses and installs plugins from a marketplace, and a
+fresh install already points at the hosted one. Two rules shape everything
+below, and they are not the same rule:</p>
+<ul>
+<li><strong>A marketplace install must verify.</strong> If the downloaded package does not
+carry a signature from a key this instance trusts, the install is refused
+before any of the package’s code runs.</li>
+<li><strong>A sideload never blocks on signatures.</strong> A package you install by hand
+installs as <code dir="auto">unverified</code> — silently if it is unsigned, loudly if it
+claims a signature that fails.</li>
+</ul>
+<p>Everything in the <strong>Plugins</strong> section is admin-only: every
+<code dir="auto">/api/plugin-management/*</code> route is behind <code dir="auto">requireAdmin</code>, so an editor gets
+a <code dir="auto">403</code> regardless of what the app bar shows.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="the-marketplace-connection">The marketplace connection</h2><a class="sl-anchor-link" href="#the-marketplace-connection"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “The marketplace connection”</span></a></div>
+<p>The marketplace an instance talks to is a deploy-time setting, resolved
+once from the environment:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">VELORA_MARKETPLACE_URL</code></td><td>string (origin) or <code dir="auto">off</code></td><td>The marketplace origin. <strong>Unset uses the hosted default</strong>, <code dir="auto">https://marketplace.velora-cms.com</code>. <code dir="auto">off</code> (case-insensitive) or a blank value opts out entirely — the browse, detail and install proxy routes are then structurally absent, not merely denied. Any other value is treated as a custom origin, for a private or self-hosted marketplace. Trailing slashes are trimmed.</td><td><code dir="auto">https://marketplace.velora-cms.com</code></td></tr></tbody></table>
+<p>Because “no marketplace” and “marketplace down” are different problems, the
+admin asks the server which one it is, once, at the section level:</p>
+<div class="expressive-code"><link rel="stylesheet" href="/docs/_astro/ec.w36nc.css"><script type="module" src="/docs/_astro/ec.0vx5m.js"></script><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">curl</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-s</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">http://localhost:3000/api/plugin-management/marketplace-status</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-H</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">Authorization: Bearer </span><span style="--0:#C5E478;--1:#3B61B0">$TOKEN</span><span style="--0:#D9F5DD;--1:#111111">"</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="curl -s http://localhost:3000/api/plugin-management/marketplace-status \  -H &#x22;Authorization: Bearer $TOKEN&#x22;"><div></div></button></div></figure></div>
+<p>The answer is a single boolean — <code dir="auto">true</code> on a stock install, <code dir="auto">false</code> only
+when an operator opted out:</p>
+<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="json"><code><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">{ </span><span style="--0:#7FDBCA;--1:#096E72">"configured"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span><span style="--0:#D6DEEB;--1:#403F53"> }</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="{ &#x22;configured&#x22;: true }"><div></div></button></div></figure></div>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">configured</code></td><td>boolean</td><td><code dir="auto">false</code> means <code dir="auto">VELORA_MARKETPLACE_URL</code> is <code dir="auto">off</code> or blank, so there is nothing to browse. It never means the marketplace is unreachable — a configured-but-down marketplace still reports <code dir="auto">true</code> and surfaces a load error instead.</td><td><code dir="auto">true</code></td></tr></tbody></table>
+<p>With <code dir="auto">configured: false</code> the Marketplace screens render one honest empty
+state: “No plugins found.” is <em>not</em> what you see — you get “No marketplace
+connected”, with the instruction to set <code dir="auto">VELORA_MARKETPLACE_URL</code> in the
+server’s environment and restart. The <strong>Installed</strong> view keeps working
+either way; so does sideloading.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="browsing">Browsing</h2><a class="sl-anchor-link" href="#browsing"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Browsing”</span></a></div>
+<p>The <strong>Plugins</strong> section has two views, <strong>Installed</strong> and <strong>Marketplace</strong>.
+Browsing proxies the upstream catalogue through your own server — your
+browser never talks to the marketplace directly — and the server annotates
+every listing with one thing the marketplace cannot know: whether it runs on
+<em>your</em> database.</p>
+<div class="expressive-code"><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">curl</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-s</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">http://localhost:3000/api/plugin-management/marketplace/listings?q=forms&#x26;limit=2</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-H</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">Authorization: Bearer </span><span style="--0:#C5E478;--1:#3B61B0">$TOKEN</span><span style="--0:#D9F5DD;--1:#111111">"</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="curl -s &#x22;http://localhost:3000/api/plugin-management/marketplace/listings?q=forms&#x26;limit=2&#x22; \  -H &#x22;Authorization: Bearer $TOKEN&#x22;"><div></div></button></div></figure></div>
+<p>The response wraps the upstream page with the active dialect and the
+compatibility verdict per listing (the listing values below are real ones
+from the hosted marketplace; the envelope around them is derived from
+<code dir="auto">MarketplaceListResponseSchema</code>):</p>
+<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="json"><code><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">{</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"items"</span><span style="--0:#D6DEEB;--1:#403F53">: [</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">    </span></span><span style="--0:#D6DEEB;--1:#403F53">{</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"pluginId"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">com.velora.forms</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"name"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">Forms</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"type"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">section</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"description"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">Form builder with a public submission endpoint and a submissions inbox</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"author"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">Velora</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"priceCents"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#F78C6C;--1:#AA0982">0</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"coverImagePath"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"latestVersion"</span><span style="--0:#D6DEEB;--1:#403F53">: {</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"version"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">0.1.0</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"supportedDialects"</span><span style="--0:#D6DEEB;--1:#403F53">: [</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">postgresql</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">, </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">mysql</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">, </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">sqlite</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">],</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"permissions"</span><span style="--0:#D6DEEB;--1:#403F53">: { </span><span style="--0:#7FDBCA;--1:#096E72">"needsStructuredData"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span><span style="--0:#D6DEEB;--1:#403F53">, </span><span style="--0:#7FDBCA;--1:#096E72">"needsExternalNetwork"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">false</span><span style="--0:#D6DEEB;--1:#403F53">, </span><span style="--0:#7FDBCA;--1:#096E72">"needsFileSystemAccess"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">false</span><span style="--0:#D6DEEB;--1:#403F53"> },</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"license"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">MIT</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"cmsVersion"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">^0.1.0</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"verified"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"createdAt"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">2026-08-25T14:24:31.900Z</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">        </span><span style="--0:#7FDBCA;--1:#096E72">"hasArtifact"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">      </span></span><span style="--0:#D6DEEB;--1:#403F53">},</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"compatible"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">    </span></span><span style="--0:#D6DEEB;--1:#403F53">}</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">  </span></span><span style="--0:#D6DEEB;--1:#403F53">],</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"nextCursor"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">b1d001bc-653c-4d46-84a5-10ba6939010d</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"activeDialect"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">postgresql</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"marketplaceBaseUrl"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">https://marketplace.velora-cms.com</span><span style="--0:#D9F5DD;--1:#111111">"</span></div></div><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">}</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="{  &#x22;items&#x22;: [    {      &#x22;pluginId&#x22;: &#x22;com.velora.forms&#x22;,      &#x22;name&#x22;: &#x22;Forms&#x22;,      &#x22;type&#x22;: &#x22;section&#x22;,      &#x22;description&#x22;: &#x22;Form builder with a public submission endpoint and a submissions inbox&#x22;,      &#x22;author&#x22;: &#x22;Velora&#x22;,      &#x22;priceCents&#x22;: 0,      &#x22;coverImagePath&#x22;: null,      &#x22;latestVersion&#x22;: {        &#x22;version&#x22;: &#x22;0.1.0&#x22;,        &#x22;supportedDialects&#x22;: [&#x22;postgresql&#x22;, &#x22;mysql&#x22;, &#x22;sqlite&#x22;],        &#x22;permissions&#x22;: { &#x22;needsStructuredData&#x22;: true, &#x22;needsExternalNetwork&#x22;: false, &#x22;needsFileSystemAccess&#x22;: false },        &#x22;license&#x22;: &#x22;MIT&#x22;,        &#x22;cmsVersion&#x22;: &#x22;^0.1.0&#x22;,        &#x22;verified&#x22;: true,        &#x22;createdAt&#x22;: &#x22;2026-08-25T14:24:31.900Z&#x22;,        &#x22;hasArtifact&#x22;: true      },      &#x22;compatible&#x22;: true    }  ],  &#x22;nextCursor&#x22;: &#x22;b1d001bc-653c-4d46-84a5-10ba6939010d&#x22;,  &#x22;activeDialect&#x22;: &#x22;postgresql&#x22;,  &#x22;marketplaceBaseUrl&#x22;: &#x22;https://marketplace.velora-cms.com&#x22;}"><div></div></button></div></figure></div>
+<p>The query parameters:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">q</code></td><td>string, optional</td><td>Free-text search, passed upstream. The admin’s search box.</td><td><code dir="auto">forms</code></td></tr><tr><td><code dir="auto">type</code></td><td>string, optional</td><td>Filter by plugin type.</td><td><code dir="auto">section</code></td></tr><tr><td><code dir="auto">db</code></td><td>string, optional</td><td>Filter by supported dialect.</td><td><code dir="auto">sqlite</code></td></tr><tr><td><code dir="auto">limit</code></td><td>integer 1–50, default <code dir="auto">24</code></td><td>Page size.</td><td><code dir="auto">2</code></td></tr><tr><td><code dir="auto">cursor</code></td><td>string (uuid), optional</td><td>The previous page’s cursor.</td><td><code dir="auto">b1d001bc-653c-4d46-84a5-10ba6939010d</code></td></tr></tbody></table>
+<p>And each listing:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">pluginId</code></td><td>string</td><td>Reverse-domain id. Unique per marketplace, and the id the registry stores.</td><td><code dir="auto">com.velora.forms</code></td></tr><tr><td><code dir="auto">name</code></td><td>string</td><td>Display name.</td><td><code dir="auto">Forms</code></td></tr><tr><td><code dir="auto">type</code></td><td>string</td><td>One of <code dir="auto">datatype</code>, <code dir="auto">section</code>, <code dir="auto">template</code>, <code dir="auto">theme</code>, <code dir="auto">integration</code>, <code dir="auto">utility</code>, <code dir="auto">bundle</code>. The type decides what the plugin may contribute.</td><td><code dir="auto">section</code></td></tr><tr><td><code dir="auto">description</code></td><td>string</td><td>One-line summary shown on the card.</td><td><code dir="auto">Form builder with a public submission endpoint…</code></td></tr><tr><td><code dir="auto">author</code></td><td>string</td><td>Publisher name.</td><td><code dir="auto">Velora</code></td></tr><tr><td><code dir="auto">priceCents</code></td><td>integer</td><td><code dir="auto">0</code> for a free plugin. Anything above zero requires a license key at install.</td><td><code dir="auto">0</code></td></tr><tr><td><code dir="auto">coverImagePath</code></td><td>string or <code dir="auto">null</code></td><td>Cover art path on the marketplace, <code dir="auto">null</code> when the listing has none.</td><td><code dir="auto">null</code></td></tr><tr><td><code dir="auto">latestVersion</code></td><td>object or <code dir="auto">null</code></td><td>The newest published version, or <code dir="auto">null</code> for a listing with no published version at all.</td><td>—</td></tr><tr><td><code dir="auto">latestVersion.version</code></td><td>string</td><td>Version string to install.</td><td><code dir="auto">0.1.0</code></td></tr><tr><td><code dir="auto">latestVersion.supportedDialects</code></td><td>array of strings</td><td>Databases the version supports. Compared against your <code dir="auto">activeDialect</code>.</td><td><code dir="auto">["postgresql","mysql","sqlite"]</code></td></tr><tr><td><code dir="auto">latestVersion.permissions</code></td><td>object of booleans</td><td>What the plugin declared it needs — shown in the detail view’s Permissions tab.</td><td><code dir="auto">{ "needsStructuredData": true, … }</code></td></tr><tr><td><code dir="auto">latestVersion.license</code></td><td>string</td><td>The plugin’s own software license.</td><td><code dir="auto">MIT</code></td></tr><tr><td><code dir="auto">latestVersion.cmsVersion</code></td><td>string (semver range)</td><td>The Velora range the version targets.</td><td><code dir="auto">^0.1.0</code></td></tr><tr><td><code dir="auto">latestVersion.verified</code></td><td>boolean</td><td>The marketplace’s own review/signing state for that version.</td><td><code dir="auto">true</code></td></tr><tr><td><code dir="auto">latestVersion.createdAt</code></td><td>ISO datetime string</td><td>When the version was published.</td><td><code dir="auto">2026-08-25T14:24:31.900Z</code></td></tr><tr><td><code dir="auto">latestVersion.hasArtifact</code></td><td>boolean</td><td>Whether a downloadable package exists. <code dir="auto">false</code> disables the Install button with “Not yet available for download” rather than letting the install fail on a 404.</td><td><code dir="auto">true</code></td></tr><tr><td><code dir="auto">compatible</code></td><td>boolean</td><td><strong>Computed by your server</strong>, not the marketplace: whether <code dir="auto">supportedDialects</code> contains your active dialect. <code dir="auto">false</code> renders “Not compatible with this site’s database (…)”.</td><td><code dir="auto">true</code></td></tr><tr><td><code dir="auto">activeDialect</code></td><td>string</td><td>The dialect this instance actually runs.</td><td><code dir="auto">postgresql</code></td></tr><tr><td><code dir="auto">marketplaceBaseUrl</code></td><td>string</td><td>Which marketplace answered. Useful when an instance points at a private one.</td><td><code dir="auto">https://marketplace.velora-cms.com</code></td></tr></tbody></table>
+<p>The same catalogue is public, so you can look at it without a Velora
+instance at all:</p>
+<div class="expressive-code"><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">curl</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-s</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">https://marketplace.velora-cms.com/api/v1/listings?limit=2</span><span style="--0:#D9F5DD;--1:#111111">"</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="curl -s &#x22;https://marketplace.velora-cms.com/api/v1/listings?limit=2&#x22;"><div></div></button></div></figure></div>
+<p>That returns the raw upstream page — the same <code dir="auto">items</code> and <code dir="auto">nextCursor</code>, but
+without <code dir="auto">compatible</code>, <code dir="auto">activeDialect</code> or <code dir="auto">marketplaceBaseUrl</code>, which only
+your own server can add.</p>
+<p>Opening a listing loads the detail view (<code dir="auto">GET /api/plugin-management/marketplace/listings/:pluginId</code>), which adds the full
+<code dir="auto">versions</code> array and three detail-only extras. Those three are typed on
+every version object the detail view returns — <code dir="auto">latestVersion</code> and each
+entry of <code dir="auto">versions</code> alike — not only on the newest one:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">versions</code></td><td>array of version objects</td><td>Every published version of the listing, each shaped like <code dir="auto">latestVersion</code> (browse fields plus the three extras below).</td><td><code dir="auto">[{ "version": "0.1.0", … }]</code></td></tr><tr><td><code dir="auto">starter</code></td><td>object or <code dir="auto">null</code>, optional</td><td>A starter frontend for that version. <code dir="auto">name</code> (string), <code dir="auto">description</code> (string or <code dir="auto">null</code>), <code dir="auto">repository</code> (string or <code dir="auto">null</code>), <code dir="auto">hasArchive</code> (boolean — whether a downloadable archive exists).</td><td><code dir="auto">{ "name": "Blog starter", "description": null, "repository": null, "hasArchive": true }</code></td></tr><tr><td><code dir="auto">documentTypesSummary</code></td><td>array or <code dir="auto">null</code>, optional</td><td>Document types installing that version will provision, each with <code dir="auto">name</code> (string) and <code dir="auto">fields</code> (array of strings).</td><td><code dir="auto">[{ "name": "Article", "fields": ["title", "body"] }]</code></td></tr><tr><td><code dir="auto">bundledMembers</code></td><td>array or <code dir="auto">null</code>, optional</td><td>For a bundle version only: one entry per member, with <code dir="auto">pluginId</code>, <code dir="auto">name</code>, <code dir="auto">description</code> (string or <code dir="auto">null</code>), <code dir="auto">type</code>, and <code dir="auto">priceCents</code> (integer).</td><td><code dir="auto">[{ "pluginId": "com.velora.forms", "name": "Forms", "description": null, "type": "section", "priceCents": 0 }]</code></td></tr></tbody></table>
+<div class="sl-heading-wrapper level-h2"><h2 id="installing">Installing</h2><a class="sl-anchor-link" href="#installing"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Installing”</span></a></div>
+<p>Install is one request. The route runs a fixed order — already installed →
+listing and version exist → paid plugins validate a license → download →
+identity check → <strong>signature verification</strong> → register — and every step
+returns before the next one has a side effect:</p>
+<div class="expressive-code"><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">curl</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-s</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-X</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">POST</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">http://localhost:3000/api/plugin-management/marketplace/install</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-H</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">Content-Type: application/json</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-H</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">Authorization: Bearer </span><span style="--0:#C5E478;--1:#3B61B0">$TOKEN</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-d</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">'</span><span style="--0:#ECC48D;--1:#984E4D">{"pluginId": "com.velora.forms", "version": "0.1.0"}</span><span style="--0:#D9F5DD;--1:#111111">'</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="curl -s -X POST http://localhost:3000/api/plugin-management/marketplace/install \  -H &#x22;Content-Type: application/json&#x22; \  -H &#x22;Authorization: Bearer $TOKEN&#x22; \  -d &#x27;{&#x22;pluginId&#x22;: &#x22;com.velora.forms&#x22;, &#x22;version&#x22;: &#x22;0.1.0&#x22;}&#x27;"><div></div></button></div></figure></div>
+<p>A success is <code dir="auto">201</code>. <code dir="auto">trustTier</code> is a literal here, not a variable: this door
+only ever answers <code dir="auto">201</code> for a verified package:</p>
+<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="json"><code><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">{</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"pluginId"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">com.velora.forms</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"version"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">0.1.0</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"trustTier"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">verified</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"licensed"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">false</span></div></div><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">}</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="{  &#x22;pluginId&#x22;: &#x22;com.velora.forms&#x22;,  &#x22;version&#x22;: &#x22;0.1.0&#x22;,  &#x22;trustTier&#x22;: &#x22;verified&#x22;,  &#x22;licensed&#x22;: false}"><div></div></button></div></figure></div>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">pluginId</code></td><td>string, required</td><td>Request body. Must be a reverse-domain id — the pattern is enforced because this value becomes a directory name in the managed package store.</td><td><code dir="auto">com.velora.forms</code></td></tr><tr><td><code dir="auto">version</code></td><td>string, required</td><td>Request body. Must match a published version of that listing, or <code dir="auto">404</code>.</td><td><code dir="auto">0.1.0</code></td></tr><tr><td><code dir="auto">licenseKey</code></td><td>string, optional</td><td>Request body. Required when <code dir="auto">priceCents > 0</code>; validated upstream against the key, the plugin and this site’s domain <strong>before</strong> anything is downloaded.</td><td><code dir="auto">vlic_…</code></td></tr><tr><td><code dir="auto">trustTier</code></td><td>literal <code dir="auto">"verified"</code></td><td>Response. The only tier this route can return.</td><td><code dir="auto">verified</code></td></tr><tr><td><code dir="auto">licensed</code></td><td>boolean</td><td>Response. Whether a license row was persisted — <code dir="auto">true</code> only for a paid plugin.</td><td><code dir="auto">false</code></td></tr><tr><td><code dir="auto">members</code></td><td>array, optional</td><td>Response, bundles only. One entry per declared member: <code dir="auto">pluginId</code>, <code dir="auto">version</code>, and <code dir="auto">outcome</code> (<code dir="auto">installed</code> or <code dir="auto">already-installed</code>).</td><td><code dir="auto">[{"pluginId":"com.velora.forms","version":"0.1.0","outcome":"installed"}]</code></td></tr></tbody></table>
+<p>Every refusal is a status code with a plain message, and nothing is left
+half-installed behind any of them:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">already-installed</code></td><td>409</td><td>This <code dir="auto">pluginId</code> already has a registry row. There is no in-place upgrade route — uninstall first.</td><td><code dir="auto">Plugin "…" is already installed</code></td></tr><tr><td><code dir="auto">not-found</code></td><td>404</td><td>No such listing, no such published version, or the artifact route is missing upstream.</td><td><code dir="auto">No published version "0.2.0" for plugin "…"</code></td></tr><tr><td><code dir="auto">license-required</code></td><td>400</td><td>A paid plugin was requested with no <code dir="auto">licenseKey</code>.</td><td>—</td></tr><tr><td><code dir="auto">site-domain-missing</code></td><td>409</td><td>A paid install with no <code dir="auto">VELORA_SITE_DOMAIN</code> set. The license binds to that domain once, so installing without it would burn the binding.</td><td>—</td></tr><tr><td><code dir="auto">license-rejected</code></td><td>403</td><td>The marketplace rejected the key for this plugin and domain.</td><td>—</td></tr><tr><td><code dir="auto">verification-failed</code></td><td>422</td><td>The package is not signed by a trusted key, the signature does not check out, or the downloaded package identifies itself as a different plugin or version than the one requested. Nothing was installed.</td><td><code dir="auto">Signature verification failed for "…"@0.1.0 (untrusted-key) — nothing was installed</code></td></tr><tr><td><code dir="auto">incompatible</code></td><td>422</td><td>The version does not support this instance’s dialect.</td><td>—</td></tr><tr><td><code dir="auto">dependency-missing</code></td><td>409</td><td>The manifest requires another plugin that is not installed and active.</td><td>—</td></tr><tr><td><code dir="auto">install-refused</code></td><td>422</td><td>Manifest validation, a migration, or another install-time refusal.</td><td>—</td></tr><tr><td><code dir="auto">bundle-member-failed</code></td><td>422</td><td>A declared member failed; every member this operation had already installed was rolled back.</td><td>—</td></tr></tbody></table>
+<p>A paid install also stores a license row, which is re-checked in the
+background and on demand:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">VELORA_SITE_DOMAIN</code></td><td>string (host)</td><td>The domain this instance declares as its own — never the request’s <code dir="auto">Host</code> header. A license binds to it on first validation. Scheme and trailing slash are trimmed.</td><td><code dir="auto">www.example.com</code></td></tr><tr><td><code dir="auto">VELORA_LICENSE_CHECK_INTERVAL_HOURS</code></td><td>integer > 0</td><td>How often licenses are re-validated in the background. Default <code dir="auto">24</code>.</td><td><code dir="auto">24</code></td></tr><tr><td><code dir="auto">VELORA_LICENSE_STALE_WARN_DAYS</code></td><td>integer > 0</td><td>After how many days without a successful check the admin shows a staleness warning. Default <code dir="auto">7</code>.</td><td><code dir="auto">7</code></td></tr></tbody></table>
+<p>License checks fail <strong>open</strong>: an unreachable license server or a domain
+mismatch warns but never disables a plugin. Only an upstream <code dir="auto">revoked</code>
+verdict blocks — including when you try to re-enable a revoked plugin,
+which answers <code dir="auto">403</code>.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="the-trust-gate-exactly">The trust gate, exactly</h2><a class="sl-anchor-link" href="#the-trust-gate-exactly"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “The trust gate, exactly”</span></a></div>
+<p>Verification produces one of three verdicts, and only the first earns the
+<code dir="auto">verified</code> tier:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">verified</code></td><td>verdict</td><td>A detached <code dir="auto">&#x3C;artifact>.tar.gz.sig</code> signature over the package’s hash, made by a key in the trusted set, whose envelope names the same plugin id and version as the package’s own <code dir="auto">manifest.json</code>.</td><td>Any package from the hosted marketplace</td></tr><tr><td><code dir="auto">unsigned</code></td><td>verdict</td><td>No sidecar at all. Deliberately silent — locally built and private agency plugins are unsigned by design and must not nag.</td><td>A package you just built yourself</td></tr><tr><td><code dir="auto">failed</code></td><td>verdict</td><td>A sidecar exists but does not check out: unreadable or oversized (the ceiling is 8192 bytes), an untrusted key, a bad signature, or an identity mismatch. Logged loudly, with the reason.</td><td>A tampered or mis-signed artifact</td></tr></tbody></table>
+<p>Where those verdicts land differs by install path, and this is the part
+worth internalising:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td>Marketplace install</td><td>path</td><td><strong>Blocks</strong> on anything but <code dir="auto">verified</code>, before the package’s code is imported. <code dir="auto">unsigned</code> is refused here too — a marketplace artifact is expected to be signed.</td><td><code dir="auto">POST /api/plugin-management/marketplace/install</code></td></tr><tr><td>Sideload</td><td>path</td><td><strong>Never blocks</strong> on a verdict. <code dir="auto">unsigned</code> installs quietly as <code dir="auto">unverified</code>; <code dir="auto">failed</code> installs as <code dir="auto">unverified</code> with a loud log naming the reason. The only thing that fails a sideload outright is a package that cannot be extracted or has no <code dir="auto">manifest.json</code> — at that point it is not a plugin package at all.</td><td><code dir="auto">install-built-package</code></td></tr></tbody></table>
+<p>A stock instance ships trusting the production marketplace’s signing key
+and nothing else — the set holds exactly one entry, <code dir="auto">73e409f633dbbea3</code>. The
+pre-rotation key it used to sit beside was retired once every listed
+marketplace version had been re-signed with the active one, so nothing that
+the marketplace lists needs it any more. That means a real marketplace
+plugin verifies with zero configuration, and everything else installs, if at
+all, as <code dir="auto">unverified</code>.</p>
+<p>Operators can extend or override that set:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">VELORA_TRUSTED_SIGNING_KEYS</code></td><td>JSON string</td><td><code dir="auto">{"keys":[{"keyId":"…","publicKey":"…"}]}</code> — merged over the shipped set, later entries winning on a <code dir="auto">keyId</code> collision, so a shipped key can be overridden. Every entry’s <code dir="auto">keyId</code> is re-derived from its <code dir="auto">publicKey</code> and dropped with a warning if they disagree; invalid JSON is warned about and ignored rather than stopping the server.</td><td><code dir="auto">{"keys":[{"keyId":"a1b2…","publicKey":"MCowBQ…"}]}</code></td></tr></tbody></table>
+<p>One thing signing does <em>not</em> mean: it is not a sandbox. A signature attests
+to <strong>who built the package</strong>, not to what its code does once installed. The
+permission model, the no-raw-SQL rule, the storage APIs and the error
+boundary every plugin view renders inside are identical for verified and
+unverified plugins. Read the badge as provenance.</p>
+<p>One honest limit while you weigh that: a plugin may declare API routes that
+opt into API-key authentication, and in this release such a route accepts
+any valid, unrevoked key regardless of its scope — the <code dir="auto">read</code>/<code dir="auto">write</code> scope
+described in <a href="/docs/v1/using-velora/users-and-roles/#create-a-key">Users and
+roles</a> governs Velora’s own
+content writes, not a plugin’s routes. Judge a plugin that declares
+key-authenticated routes on what those routes do, not on the scope of the
+key you hand out.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="sideloading-a-built-package">Sideloading a built package</h2><a class="sl-anchor-link" href="#sideloading-a-built-package"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Sideloading a built package”</span></a></div>
+<p>Sideloading is a supported path, not a loophole — it is how local
+development, private client work, and any plugin you never intend to list
+get installed. From a source checkout, the server exposes it as a script
+that takes a package directory or a built <code dir="auto">.tar.gz</code>:</p>
+<div class="expressive-code"><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">pnpm</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">--filter</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">@velora-cms/server</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">exec</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">tsx</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#ECC48D;--1:#3B61B0">src/plugins/install-built-package.ts</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#ECC48D;--1:#3B61B0">./my-plugin/velora-package</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#ECC48D;--1:#3B61B0">http://localhost:5173/my-plugin/remoteEntry.js</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="pnpm --filter @velora-cms/server exec tsx src/plugins/install-built-package.ts \  ./my-plugin/velora-package \  http://localhost:5173/my-plugin/remoteEntry.js"><div></div></button></div></figure></div>
+<p>It prints the outcome — <code dir="auto">installed</code> for a new plugin, <code dir="auto">activated</code> or
+<code dir="auto">already-active</code> when a registry row already existed:</p>
+<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="plaintext"><code><div class="ec-line"><div class="code"><span style="--0:#d6deeb;--1:#403f53">[install-built-package] installed</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="[install-built-package] installed"><div></div></button></div></figure></div>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">packageDir | package.tar.gz</code></td><td>path, required</td><td>First argument. A <code dir="auto">velora-plugin build</code> output directory, or a packed archive. A <code dir="auto">.tar.gz</code> takes the verifying path and reports its verdict; a directory does not.</td><td><code dir="auto">./my-plugin/velora-package</code></td></tr><tr><td><code dir="auto">remoteUrl</code></td><td>string (URL), required</td><td>Second argument. Where the admin loads the plugin’s <code dir="auto">remoteEntry.js</code> from. Pass <code dir="auto">""</code> <strong>only</strong> for a view-less type (<code dir="auto">theme</code>, <code dir="auto">template</code>, <code dir="auto">bundle</code>); a view-bearing plugin installed with an empty value would register but silently never load its views, so the install refuses it.</td><td><code dir="auto">http://localhost:5173/my-plugin/remoteEntry.js</code></td></tr><tr><td><code dir="auto">sidecarPath</code></td><td>path, optional</td><td>Third argument. An explicit signature file. Omitted, a <code dir="auto">.tar.gz</code> install looks for <code dir="auto">&#x3C;artifact>.tar.gz.sig</code> beside the archive.</td><td><code dir="auto">./my-plugin.tar.gz.sig</code></td></tr></tbody></table>
+<p>Installing a <code dir="auto">.tar.gz</code> prints the verification verdict alongside the
+outcome — <code dir="auto">installed (unsigned)</code> for an unsigned archive, <code dir="auto">installed (verified)</code> when a trusted signature checks out. Either way it installs;
+the tier is what changes.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="managing-what-is-installed">Managing what is installed</h2><a class="sl-anchor-link" href="#managing-what-is-installed"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Managing what is installed”</span></a></div>
+<p>The <strong>Installed</strong> view lists every plugin, disabled ones included, with
+columns for name, version, trust, storage, license and actions:</p>
+<div class="expressive-code"><figure class="frame is-terminal not-content"><figcaption class="header"><span class="title"></span><span class="sr-only">Terminal window</span></figcaption><pre data-language="sh"><code><div class="ec-line"><div class="code"><span style="--0:#82AAFF;--1:#3B61B0">curl</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#82AAFF;--1:#3B61B0">-s</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">http://localhost:3000/api/plugin-management/plugins?limit=2</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#F78C6C;--1:#AA0982">\</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#82AAFF;--1:#3B61B0">-H</span><span style="--0:#D6DEEB;--1:#403F53"> </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#ECC48D;--1:#984E4D">Authorization: Bearer </span><span style="--0:#C5E478;--1:#3B61B0">$TOKEN</span><span style="--0:#D9F5DD;--1:#111111">"</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="curl -s &#x22;http://localhost:3000/api/plugin-management/plugins?limit=2&#x22; \  -H &#x22;Authorization: Bearer $TOKEN&#x22;"><div></div></button></div></figure></div>
+<p>Each row carries everything the list renders, so no cell needs a second
+request:</p>
+<div class="expressive-code"><figure class="frame not-content"><figcaption class="header"></figcaption><pre data-language="json"><code><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">{</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"items"</span><span style="--0:#D6DEEB;--1:#403F53">: [</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">    </span></span><span style="--0:#D6DEEB;--1:#403F53">{</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"pluginId"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">com.velora.forms</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"name"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">Forms</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"type"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">section</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"version"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">0.1.0</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"trustTier"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">verified</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"storageType"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#C789D6;--1:#7C5686">structured</span><span style="--0:#D9F5DD;--1:#111111">"</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"enabled"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">true</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"licenseStatus"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"licenseReason"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"licenseLastValidatedAt"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"licenseLastAttemptError"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span><span style="--0:#D6DEEB;--1:#403F53">,</span></div></div><div class="ec-line"><div class="code"><span class="indent">      </span><span style="--0:#7FDBCA;--1:#096E72">"boundDomain"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">    </span></span><span style="--0:#D6DEEB;--1:#403F53">}</span></div></div><div class="ec-line"><div class="code"><span class="indent"><span style="--0:#D6DEEB;--1:#403F53">  </span></span><span style="--0:#D6DEEB;--1:#403F53">],</span></div></div><div class="ec-line"><div class="code"><span class="indent">  </span><span style="--0:#7FDBCA;--1:#096E72">"nextCursor"</span><span style="--0:#D6DEEB;--1:#403F53">: </span><span style="--0:#FF6A83;--1:#A24848">null</span></div></div><div class="ec-line"><div class="code"><span style="--0:#D6DEEB;--1:#403F53">}</span></div></div></code></pre><div class="copy"><div aria-live="polite"></div><button title="Copy to clipboard" data-copied="Copied!" data-code="{  &#x22;items&#x22;: [    {      &#x22;pluginId&#x22;: &#x22;com.velora.forms&#x22;,      &#x22;name&#x22;: &#x22;Forms&#x22;,      &#x22;type&#x22;: &#x22;section&#x22;,      &#x22;version&#x22;: &#x22;0.1.0&#x22;,      &#x22;trustTier&#x22;: &#x22;verified&#x22;,      &#x22;storageType&#x22;: &#x22;structured&#x22;,      &#x22;enabled&#x22;: true,      &#x22;licenseStatus&#x22;: null,      &#x22;licenseReason&#x22;: null,      &#x22;licenseLastValidatedAt&#x22;: null,      &#x22;licenseLastAttemptError&#x22;: null,      &#x22;boundDomain&#x22;: null    }  ],  &#x22;nextCursor&#x22;: null}"><div></div></button></div></figure></div>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">pluginId</code></td><td>string</td><td>Reverse-domain id, as installed.</td><td><code dir="auto">com.velora.forms</code></td></tr><tr><td><code dir="auto">name</code></td><td>string</td><td>Display name from the manifest.</td><td><code dir="auto">Forms</code></td></tr><tr><td><code dir="auto">type</code></td><td>string</td><td>The plugin type, which decides what it may contribute.</td><td><code dir="auto">section</code></td></tr><tr><td><code dir="auto">version</code></td><td>string</td><td>The installed version.</td><td><code dir="auto">0.1.0</code></td></tr><tr><td><code dir="auto">trustTier</code></td><td><code dir="auto">"verified"</code> or <code dir="auto">"unverified"</code></td><td>Rendered as the <strong>Verified</strong> / <strong>Unverified</strong> badge. Fixed at install time.</td><td><code dir="auto">verified</code></td></tr><tr><td><code dir="auto">storageType</code></td><td><code dir="auto">"simple"</code> or <code dir="auto">"structured"</code></td><td>Whether the plugin stores JSON through the simple API or owns real tables. Structured plugins get data snapshots.</td><td><code dir="auto">structured</code></td></tr><tr><td><code dir="auto">enabled</code></td><td>boolean</td><td>The row’s toggle. A disabled plugin stays installed and keeps its data.</td><td><code dir="auto">true</code></td></tr><tr><td><code dir="auto">licenseStatus</code></td><td>string or <code dir="auto">null</code></td><td><code dir="auto">valid</code>, <code dir="auto">revoked</code>, <code dir="auto">domain_mismatch</code>, <code dir="auto">unknown</code> — or <code dir="auto">null</code> for a free plugin with no license row at all.</td><td><code dir="auto">null</code></td></tr><tr><td><code dir="auto">licenseReason</code></td><td>string or <code dir="auto">null</code></td><td>The server’s explanation for a non-valid verdict.</td><td><code dir="auto">null</code></td></tr><tr><td><code dir="auto">licenseLastValidatedAt</code></td><td>ISO datetime string or <code dir="auto">null</code></td><td>The last <strong>successful</strong> check, used to compute staleness.</td><td><code dir="auto">null</code></td></tr><tr><td><code dir="auto">licenseLastAttemptError</code></td><td>string or <code dir="auto">null</code></td><td>Why the most recent attempt failed to reach a verdict; <code dir="auto">null</code> when it did not.</td><td><code dir="auto">null</code></td></tr><tr><td><code dir="auto">boundDomain</code></td><td>string or <code dir="auto">null</code></td><td>The domain the license bound to at install, so a mismatch warning can name it.</td><td><code dir="auto">null</code></td></tr></tbody></table>
+<p>The license key itself is never in this response, or in any other.</p>
+<p><strong>Turning a plugin off</strong> is <code dir="auto">POST /api/plugin-management/plugins/:pluginId/deactivate</code>,
+and on again is <code dir="auto">.../activate</code>; a normal toggle answers <code dir="auto">204</code> either way.
+Activation re-checks a license first and refuses with <code dir="auto">403</code> only on a
+<code dir="auto">revoked</code> verdict, and — separately — answers <code dir="auto">409</code> if the plugin’s code
+was never loaded (installed but not attached to a running server, so there
+is nothing to activate). Deactivating a bundle cascades to its members in
+reverse install order.</p>
+<p><strong>Uninstalling</strong> is <code dir="auto">DELETE /api/plugin-management/plugins/:pluginId</code>, and it
+is deliberately obstructive:</p>
+<table><thead><tr><th>Name</th><th>Type</th><th>Meaning</th><th>Example</th></tr></thead><tbody><tr><td><code dir="auto">confirmStructuredDataCleanup</code></td><td>boolean, optional</td><td>Request body. A structured-storage plugin’s first <code dir="auto">DELETE</code> answers <code dir="auto">409</code> with <code dir="auto">requiresConfirmation: true</code> and a <code dir="auto">snapshotGroupId</code> — the snapshot has <strong>already been taken</strong>, so retrying with this flag is always safe.</td><td><code dir="auto">true</code></td></tr><tr><td><code dir="auto">snapshotGroupId</code></td><td>string or <code dir="auto">null</code></td><td>Response. The snapshot group created by the confirmed pass, or <code dir="auto">null</code> for a simple-storage plugin that never needed one.</td><td><code dir="auto">4f81b6c2-…</code></td></tr><tr><td><code dir="auto">blockedBy</code></td><td>array</td><td>Response, <code dir="auto">409</code>. Document types the plugin provisioned that still hold content or are referenced by templates, each with a <code dir="auto">contentCount</code> where one is known. This is a terminal refusal, not a confirmation — delete the content first.</td><td><code dir="auto">[{"documentType":"Form","contentCount":3}]</code></td></tr></tbody></table>
+<p>A structured plugin’s snapshots outlive it: uninstalling deletes the
+registry row but never the snapshot rows, so <strong>Data snapshots</strong> can still
+restore the plugin’s tables after a reinstall.</p>
+<p><strong>Updating</strong> a plugin today means uninstalling the old version and
+installing the new one — install refuses a <code dir="auto">pluginId</code> that already has a
+registry row, and there is no in-place upgrade route. For a structured
+plugin, take the snapshot path seriously: the uninstall snapshot is what
+you restore from afterwards.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="marketplace-terms-briefly">Marketplace terms, briefly</h2><a class="sl-anchor-link" href="#marketplace-terms-briefly"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Marketplace terms, briefly”</span></a></div>
+<p>For the person choosing a plugin: <strong>free listings cost nothing, forever</strong>,
+and paid plugins are sold as a <strong>one-time, per-site license</strong> — a key that
+binds to your site’s domain, which is why <code dir="auto">VELORA_SITE_DOMAIN</code> has to be set
+before a paid install. Marketplace distribution requires submission review
+and signing, which is what the <strong>Verified</strong> tier means; review is measured in
+days, not weeks. Publishers keep 75% of a paid sale. Malicious or broken
+listings are delisted and their keys revoked, and a refund revokes the
+license. Sideloading stays allowed and free — your instance, your risk.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="writing-your-own">Writing your own</h2><a class="sl-anchor-link" href="#writing-your-own"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Writing your own”</span></a></div>
+<p>Building a plugin is a different job from installing one, with its own
+toolchain (<code dir="auto">create-velora-plugin</code>, <code dir="auto">velora-plugin</code>, <code dir="auto">velora-dev</code>), the SDK’s
+manifest and storage contracts, and the publish-and-review flow that ends in
+a signed, verified listing. All of it lives in the plugin author
+documentation at
+<a href="https://docs.velora-cms.com/v1/building-plugins/">docs.velora-cms.com/v1/building-plugins</a>,
+which is hosted rather than bundled with your site.</p>
+<div class="sl-heading-wrapper level-h2"><h2 id="next">Next</h2><a class="sl-anchor-link" href="#next"><span aria-hidden="true" class="sl-anchor-icon"><svg width="16" height="16" viewBox="0 0 24 24" fill="currentColor"><path d="m12.11 15.39-3.88 3.88a2.52 2.52 0 0 1-3.5 0 2.47 2.47 0 0 1 0-3.5l3.88-3.88a1 1 0 1 0-1.42-1.42l-3.88 3.89a4.48 4.48 0 0 0 6.33 6.33l3.89-3.88a1 1 0 0 0-1.42-1.42m8.58-12.08a4.49 4.49 0 0 0-6.33 0l-3.89 3.88a1 1 0 1 0 1.42 1.42l3.88-3.88a2.52 2.52 0 0 1 3.5 0 2.47 2.47 0 0 1 0 3.5l-3.88 3.88a1 1 0 0 0 0 1.42 1 1 0 0 0 1.42 0l3.88-3.89a4.49 4.49 0 0 0 0-6.33M8.83 15.17a1 1 0 0 0 .71.29 1 1 0 0 0 .71-.29l4.92-4.92a1 1 0 1 0-1.42-1.42l-4.92 4.92a1 1 0 0 0 0 1.42"></path></svg></span><span class="sr-only" data-pagefind-ignore="">Section titled “Next”</span></a></div>
+<ul>
+<li><a href="/docs/v1/using-velora/users-and-roles/">Users and roles</a> — why every route on
+this page needs the admin role.</li>
+<li><a href="/docs/v1/using-velora/content-model/">Document types</a> — the document types a
+template or section plugin provisions when it installs.</li>
+<li><a href="/docs/v1/using-velora/headless-api/">Headless API</a> — reading content a plugin
+contributed to, from your own frontend.</li>
+</ul></div><footer class="sl-flex astro-gjkl2a5w"><div class="meta sl-flex astro-gjkl2a5w"></div><div class="pagination-links print:hidden astro-3tj6ibx2" dir="ltr"><a href="/docs/v1/using-velora/users-and-roles/" rel="prev" class="astro-3tj6ibx2"><svg aria-hidden="true" class="astro-3tj6ibx2 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17 11H9.41l3.3-3.29a1.004 1.004 0 1 0-1.42-1.42l-5 5a1 1 0 0 0-.21.33 1 1 0 0 0 0 .76 1 1 0 0 0 .21.33l5 5a1.002 1.002 0 0 0 1.639-.325 1 1 0 0 0-.219-1.095L9.41 13H17a1 1 0 0 0 0-2Z"/></svg><span class="astro-3tj6ibx2">Previous<br class="astro-3tj6ibx2"><span class="link-title astro-3tj6ibx2">Users and roles</span></span></a><a href="/docs/v1/using-velora/headless-api/" rel="next" class="astro-3tj6ibx2"><svg aria-hidden="true" class="astro-3tj6ibx2 astro-24n5ceuf" width="16" height="16" viewBox="0 0 24 24" fill="currentColor" style="--sl-icon-size: 1.5rem;"><path d="M17.92 11.62a1.001 1.001 0 0 0-.21-.33l-5-5a1.003 1.003 0 1 0-1.42 1.42l3.3 3.29H7a1 1 0 0 0 0 2h7.59l-3.3 3.29a1.002 1.002 0 0 0 .325 1.639 1 1 0 0 0 1.095-.219l5-5a1 1 0 0 0 .21-.33 1 1 0 0 0 0-.76Z"/></svg><span class="astro-3tj6ibx2">Next<br class="astro-3tj6ibx2"><span class="link-title astro-3tj6ibx2">Headless API</span></span></a></div></footer><div class="velora-bundle-stamp astro-llmj63sw">Velora 0.9.0 &middot; bundled documentation</div></div></div></main></div></div></div></div></body></html>