wizards 0.2.26 → 0.2.27

package/apps/runtime/dist/db/migrations/tenant/meta/_journal.json

@@ -71,6 +71,13 @@
       "when": 1791311715390,
       "tag": "0009_knowledge",
       "breakpoints": true
+    },
+    {
+      "idx": 10,
+      "version": "6",
+      "when": 1791469862548,
+      "tag": "0010_plugin_connection",
+      "breakpoints": true
     }
   ]
 }

package/apps/runtime/dist/db/schema.js

@@ -497,3 +497,24 @@ export const marketplaceStar = sqliteTable("marketplace_star", {
     entryId: text("entry_id").notNull(),
     createdAt: createdAt(),
 }, (t) => [primaryKey({ columns: [t.tenantId, t.entryId] })]);
+/**
+ * An account a plugin connected for a space (`server.connections`): a calendar, a mailbox. Not
+ * a wizard's: it outlives runs and people. `data` is encrypted.
+ */
+export const pluginConnection = sqliteTable("plugin_connection", {
+    id: text("id").primaryKey(),
+    plugin: text("plugin").notNull(),
+    projectId: text("project_id")
+        .notNull()
+        .references(() => project.id, { onDelete: "cascade" }),
+    /** The built-in connector: `google-calendar`, `microsoft-outlook`. */
+    connector: text("connector").notNull(),
+    /** Shown to the person: the account's address. */
+    label: text("label").notNull(),
+    /** The connector's actions it was connected for. */
+    actions: text("actions", { mode: "json" }).$type().notNull(),
+    data: text("data").notNull(),
+    createdBy: text("created_by"),
+    createdAt: createdAt(),
+    updatedAt: updatedAt(),
+}, (t) => [index("plugin_connection_space").on(t.plugin, t.projectId)]);

package/apps/runtime/dist/engenty/connections-google/connectors/calendar.js

@@ -59,6 +59,12 @@ const attendeesField = z
     .array(z.string().describe("Attendee email address."))
     .optional()
     .describe("Optional list of attendee email addresses.");
+const sendUpdatesField = z
+    .enum(["all", "externalOnly", "none"])
+    .optional()
+    .describe('Whom Google e-mails about the change: "all" attendees, "externalOnly" (outside the organisation) or "none" (default).');
+/** `?sendUpdates=` for a write, when the caller asked Google to tell the attendees. */
+const updatesQuery = (value) => value ? `?sendUpdates=${encodeURIComponent(value)}` : "";
 export const calendarConnector = defineConnector({
     actions: [
         connectorAction({
@@ -237,12 +243,13 @@ export const calendarConnector = defineConnector({
             group: "write",
             handler: async (input, ctx) => {
                 const calendarId = input.calendar_id ?? "primary";
-                const created = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events`, {
+                const created = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events${updatesQuery(input.send_updates)}`, {
                     body: JSON.stringify({
                         end: toEventDateTime(input.end, input.time_zone),
                         start: toEventDateTime(input.start, input.time_zone),
                         summary: input.summary,
                         ...(input.description ? { description: input.description } : {}),
+                        ...(input.location ? { location: input.location } : {}),
                         ...(input.attendees?.length
                             ? { attendees: input.attendees.map((email) => ({ email })) }
                             : {}),
@@ -264,7 +271,12 @@ export const calendarConnector = defineConnector({
                     .optional()
                     .describe("Optional event description/notes."),
                 end: endField,
+                location: z
+                    .string()
+                    .optional()
+                    .describe("Where the event takes place: an address, a phone number or a meeting link."),
                 private_properties: privatePropertiesField,
+                send_updates: sendUpdatesField,
                 start: startField,
                 summary: z.string().describe("Event title."),
                 time_zone: timeZoneField,
@@ -284,6 +296,9 @@ export const calendarConnector = defineConnector({
                 if (input.description !== undefined) {
                     patch.description = input.description;
                 }
+                if (input.location !== undefined) {
+                    patch.location = input.location;
+                }
                 if (input.start !== undefined) {
                     patch.start = toEventDateTime(input.start, input.time_zone);
                 }
@@ -296,7 +311,7 @@ export const calendarConnector = defineConnector({
                 if (input.private_properties !== undefined) {
                     patch.extendedProperties = { private: input.private_properties };
                 }
-                const updated = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}`, {
+                const updated = await googleJson(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}${updatesQuery(input.send_updates)}`, {
                     body: JSON.stringify(patch),
                     headers: { "Content-Type": "application/json" },
                     method: "PATCH",
@@ -314,7 +329,12 @@ export const calendarConnector = defineConnector({
                     .describe("New event description (replaces the existing one)."),
                 end: endField.optional(),
                 event_id: z.string().describe("Calendar event id to update."),
+                location: z
+                    .string()
+                    .optional()
+                    .describe("New location (replaces the existing one)."),
                 private_properties: privatePropertiesField,
+                send_updates: sendUpdatesField,
                 start: startField.optional(),
                 summary: z.string().optional().describe("New event title."),
                 time_zone: timeZoneField,
@@ -322,6 +342,7 @@ export const calendarConnector = defineConnector({
                 .refine((v) => v.attendees !== undefined ||
                 v.description !== undefined ||
                 v.end !== undefined ||
+                v.location !== undefined ||
                 v.private_properties !== undefined ||
                 v.start !== undefined ||
                 v.summary !== undefined, { message: "Provide at least one field to update." }),
@@ -333,7 +354,7 @@ export const calendarConnector = defineConnector({
             group: "destructive",
             handler: async (input, ctx) => {
                 const calendarId = input.calendar_id ?? "primary";
-                await googleFetch(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}`, { method: "DELETE" });
+                await googleFetch(ctx, `${CALENDAR_API}/calendars/${encodeURIComponent(calendarId)}/events/${encodeURIComponent(input.event_id)}${updatesQuery(input.send_updates)}`, { method: "DELETE" });
                 return {
                     calendar_id: calendarId,
                     deleted: true,
@@ -344,6 +365,7 @@ export const calendarConnector = defineConnector({
             inputSchema: z.object({
                 calendar_id: calendarIdField,
                 event_id: z.string().describe("Calendar event id to delete."),
+                send_updates: sendUpdatesField,
             }),
             providerScopes: [SCOPE_EVENTS],
             summary: "Delete a calendar event",

package/apps/runtime/dist/engenty/connections-microsoft/outlook.js

@@ -25,6 +25,7 @@ function mapEventSummary(e) {
         isAllDay: e.isAllDay ?? false,
         location: e.location?.displayName ?? null,
         organizer: mapRecipient(e.organizer),
+        show_as: e.showAs ?? null,
         start: e.start ?? null,
         subject: e.subject ?? null,
     };
@@ -93,7 +94,7 @@ function draftMessagePayload(input) {
         toRecipients: toRecipients(input.to),
     };
 }
-const EVENT_SELECT = "id,subject,start,end,location,organizer,isAllDay";
+const EVENT_SELECT = "id,subject,start,end,location,organizer,isAllDay,showAs";
 async function fetchEventDetail(ctx, eventId) {
     const e = await graphJson(ctx, `/me/events/${encodeURIComponent(eventId)}?$select=${EVENT_SELECT},attendees,body,webLink`);
     return mapEventDetail(e);
@@ -232,6 +233,10 @@ export const microsoftOutlookConnector = defineConnector({
                     .optional()
                     .describe("Window start (ISO 8601). Provide both start and end to query a window."),
                 top: topField,
+                all: z
+                    .boolean()
+                    .optional()
+                    .describe("With start and end: every event of the window (up to 1000), not only the first `top`. For free/busy."),
             }),
             providerScopes: ["Calendars.Read"],
             run: async (input, ctx) => {
@@ -244,6 +249,20 @@ export const microsoftOutlookConnector = defineConnector({
                 if (input.start && input.end) {
                     params.set("startDateTime", input.start);
                     params.set("endDateTime", input.end);
+                    if (input.all) {
+                        // Page through the window, 100 at a time.
+                        const events = [];
+                        params.set("$top", "100");
+                        for (let skip = 0; skip < 1000; skip += 100) {
+                            params.set("$skip", String(skip));
+                            const page = await graphJson(ctx, `${calendarViewPath(input.calendar_id)}?${params.toString()}`);
+                            events.push(...(page.value ?? []));
+                            if ((page.value ?? []).length < 100) {
+                                break;
+                            }
+                        }
+                        return { events: events.map(mapEventSummary) };
+                    }
                     path = `${calendarViewPath(input.calendar_id)}?${params.toString()}`;
                 }
                 const data = await graphJson(ctx, path);
@@ -320,6 +339,10 @@ export const microsoftOutlookConnector = defineConnector({
                     .optional()
                     .describe("Plain-text event description."),
                 calendar_id: calendarIdField,
+                location: z
+                    .string()
+                    .optional()
+                    .describe("Where the event takes place: an address, a phone number or a meeting link."),
                 end: z
                     .string()
                     .describe("Event end, ISO 8601 date-time (e.g. 2026-07-04T15:00:00)."),
@@ -343,6 +366,7 @@ export const microsoftOutlookConnector = defineConnector({
                             ? { body: { content: input.body_text, contentType: "Text" } }
                             : {}),
                         end: { dateTime: input.end, timeZone: input.time_zone },
+                        ...(input.location ? { location: { displayName: input.location } } : {}),
                         start: { dateTime: input.start, timeZone: input.time_zone },
                         subject: input.subject,
                     },
@@ -367,6 +391,7 @@ export const microsoftOutlookConnector = defineConnector({
                     .describe("New plain-text event description."),
                 end: z.string().optional().describe("New end, ISO 8601 date-time."),
                 event_id: z.string().describe("Graph event id to update."),
+                location: z.string().optional().describe("New location (replaces the existing one)."),
                 start: z.string().optional().describe("New start, ISO 8601 date-time."),
                 subject: z.string().optional().describe("New event subject/title."),
                 time_zone: z
@@ -392,6 +417,9 @@ export const microsoftOutlookConnector = defineConnector({
                 if (input.attendees !== undefined) {
                     patch.attendees = toAttendees(input.attendees);
                 }
+                if (input.location !== undefined) {
+                    patch.location = { displayName: input.location };
+                }
                 if (Object.keys(patch).length === 0) {
                     throw new Error("update_event: no fields to update");
                 }

package/apps/runtime/dist/engine/input.js

@@ -1,4 +1,4 @@
-import { isDecidedField, isLocationValue, MAX_FILES, shownFields, } from "@engenty-wizards/shared/definition";
+import { isDecidedField, isLocationValue, MAX_FILES, offeredSlot, shownFields, } from "@engenty-wizards/shared/definition";
 function empty(v) {
     return v === undefined || v === null || v === "" || (Array.isArray(v) && v.length === 0);
 }
@@ -20,6 +20,11 @@ function coerce(field, raw) {
             return (Array.isArray(raw) ? raw : [raw])
                 .map(String)
                 .filter((v) => field.options?.includes(v));
+        // The offered time as written, also when the answer names the same moment in another offset.
+        case "slot": {
+            const v = String(raw).trim();
+            return v ? (offeredSlot(v, field.options ?? []) ?? v) : undefined;
+        }
         case "image":
         case "file": {
             const ids = (Array.isArray(raw) ? raw : [raw])
@@ -153,6 +158,10 @@ export function readPageInput(step, input, context = {}) {
             errors.push({ field: field.id, message: "Ungültige Auswahl" });
             continue;
         }
+        if (field.kind === "slot" && !empty(v) && !field.options?.includes(String(v))) {
+            errors.push({ field: field.id, message: "Dieser Termin wird nicht angeboten" });
+            continue;
+        }
         if (field.kind === "email" && !empty(v) && !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(v))) {
             errors.push({ field: field.id, message: "Keine gültige E-Mail-Adresse" });
             continue;

package/apps/runtime/dist/mcp/tools.js

@@ -143,7 +143,7 @@ export function registerTools(server, who) {
     });
     tool("list_starters", "wizards:read", {
         title: "List starters",
-        description: "The marketplace's ready-made wizards (tweet with image, video ad, research briefing, dashboard, invoice, offer …), with what each makes and needs. Give a query to search them; without one you get the starters.",
+        description: "Ready-made wizards to start from: first those the space's plugins bring (marked with the plugin), then the marketplace's (tweet with image, video ad, research briefing, dashboard, invoice, offer …), with what each makes and needs. Give a query to search them; without one you get the starters.",
         input: z.object({ query: z.string().max(200).optional() }),
         readOnly: true,
     }, async ({ query }) => (await searchMarketplace({ q: query ?? "", lang: "de", limit: 30 })).entries
@@ -155,6 +155,7 @@ export function registerTools(server, who) {
         formats: s.formats,
         useCases: s.useCases,
         capabilities: s.capabilities,
+        ...(s.plugin ? { plugin: s.plugin.name } : {}),
     })));
     tool("get_starter", "wizards:read", {
         title: "Get starter",
@@ -401,7 +402,7 @@ While status is running, get_run with waitSeconds. Hosts with MCP Apps also show
     }, async ({ runId, waitSeconds }) => runReport(who.userId, runId, waitSeconds));
     tool("answer_page", "runs:test", {
         title: "Answer page",
-        description: "Fill the page a run waits for: field id → value (items: an array of row objects; toggle: true/false; multiselect: an array). Returns the run, after waitSeconds.",
+        description: "Fill the page a run waits for: field id → value (items: an array of row objects; toggle: true/false; multiselect: an array; slot: one of the offered times, as given). Returns the run, after waitSeconds.",
         input: z.object({
             runId: z.string(),
             stepId: z.string().describe("waitingFor.page"),

package/apps/runtime/dist/plugins/loader.js

@@ -1,11 +1,12 @@
 import { existsSync, mkdirSync, watch } from "node:fs";
 import { join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { PLUGIN_TOOL_NAME } from "@engenty-wizards/shared/definition";
+import { PLUGIN_ID, PLUGIN_TOOL_NAME, wizardSchema } from "@engenty-wizards/shared/definition";
 import { generateText, Output } from "ai";
 import { createJiti } from "jiti";
 import { readPage } from "../agents/website.js";
 import { packageRoot } from "../cli/home.js";
+import { pluginConnections } from "../connectors/plugin-connections.js";
 import { db, onTenantOpen } from "../db/client.js";
 import { parseDocument } from "../documents/parse.js";
 import { env } from "../env.js";
@@ -98,6 +99,9 @@ function apiFor(record) {
                 }
                 record.assistantTools.set(tool.name, tool);
             },
+            registerAssistantContext(context) {
+                record.assistantPages.push(context);
+            },
             registerPublicRoute(route) {
                 record.publicRoutes.push(compileRoute(route));
             },
@@ -153,6 +157,21 @@ function apiFor(record) {
                     object: (request.schema ? result.output : undefined),
                 };
             },
+            connections: pluginConnections(source.id),
+            registerStarter(starter) {
+                if (!PLUGIN_ID.test(starter.id)) {
+                    throw new Error(`Starter "${starter.id}": an id is lower case, digits and "-".`);
+                }
+                if (record.starters.has(starter.id)) {
+                    throw new Error(`Starter "${starter.id}" is registered twice.`);
+                }
+                const parsed = wizardSchema.safeParse(starter.definition);
+                if (!parsed.success) {
+                    const issue = parsed.error.issues[0];
+                    throw new Error(`Starter "${starter.id}": ${issue?.path.join(".") || "definition"}: ${issue?.message}`);
+                }
+                record.starters.set(starter.id, { ...starter, definition: parsed.data });
+            },
             onUnload(dispose) {
                 record.disposers.push(dispose);
             },
@@ -186,8 +205,10 @@ async function load(source) {
             record.tools.clear();
             record.contexts = [];
             record.assistantTools.clear();
+            record.assistantPages = [];
             record.publicRoutes = [];
             record.jobs.clear();
+            record.starters.clear();
             record.listeners = {};
             record.migrations = [];
             record.error = err?.message || String(err);

package/apps/runtime/dist/plugins/registry.js

@@ -17,8 +17,10 @@ export function emptyRecord(source) {
         tools: new Map(),
         contexts: [],
         assistantTools: new Map(),
+        assistantPages: [],
         publicRoutes: [],
         jobs: new Map(),
+        starters: new Map(),
         listeners: {},
         migrations: [],
         disposers: [],
@@ -83,6 +85,14 @@ export async function pluginToolsOf(tenantId) {
         description: tool.description,
     })));
 }
+/** The starters the tenant's plugins bring, in the order the plugins registered them. */
+export async function pluginStartersOf(tenantId) {
+    return (await pluginsOf(tenantId)).flatMap((plugin) => [...plugin.starters.values()].map((starter) => ({
+        id: `${plugin.source.id}.${starter.id}`,
+        plugin,
+        starter,
+    })));
+}
 /** The built studio half as it is on disk now; null when the plugin has none. */
 export function pluginAsset(record, kind) {
     const file = record.source[kind];

package/apps/runtime/dist/routes/runs.js

@@ -9,6 +9,7 @@ import { nanoid } from "nanoid";
 import { z } from "zod";
 import { principalOf } from "../auth/index.js";
 import { ConnectError, connectionViews, connectWithCredentials, disconnect, finishOAuth, oauthStateRun, startOAuth, } from "../connectors/index.js";
+import { finishPluginOAuth, pluginStateTenant } from "../connectors/plugin-connections.js";
 import { db, schema, withTenant } from "../db/client.js";
 import { answerAsk, pendingAsk } from "../engine/asks.js";
 import { signalChanged, subscribe } from "../engine/events.js";
@@ -795,12 +796,19 @@ export const connectCallback = new Hono().get("/callback", async (c) => {
     let message = c.req.query("error") === "exchange_failed"
         ? "Verbinden hat nicht geklappt. Bitte noch einmal versuchen."
         : "Verbinden wurde abgebrochen.";
-    const tenant = state ? await tenantOfRun(oauthStateRun(state) ?? "") : null;
+    // A plugin's sign-in (server.connections) names its tenant; a wizard's names its run.
+    const pluginTenant = state ? pluginStateTenant(state) : null;
+    const tenant = state ? (pluginTenant ?? (await tenantOfRun(oauthStateRun(state) ?? ""))) : null;
     const answer = ticket ? { ticket } : code ? { code } : null;
     if (answer && state && tenant) {
         try {
-            const done = await withTenant(tenant, () => finishOAuth(answer, state));
-            signalChanged(done.runId);
+            if (pluginTenant) {
+                await withTenant(tenant, () => finishPluginOAuth(answer, state));
+            }
+            else {
+                const done = await withTenant(tenant, () => finishOAuth(answer, state));
+                signalChanged(done.runId);
+            }
             ok = true;
             message = "Verbunden. Du kannst dieses Fenster schließen.";
         }

package/apps/runtime/dist/routes/studio.js

@@ -1,6 +1,6 @@
 import { mkdirSync } from "node:fs";
 import { join } from "node:path";
-import { MODEL_CLASSES, TEXT_CLASSES } from "@engenty-wizards/shared/definition";
+import { MODEL_CLASSES, PLUGIN_ID, TEXT_CLASSES } from "@engenty-wizards/shared/definition";
 import { CATEGORY_TYPES, whereSchema } from "@engenty-wizards/shared/knowledge";
 import { PROJECT_FILE_KINDS } from "@engenty-wizards/shared/projects";
 import { isCreditsRef } from "@engenty-wizards/shared/providers";
@@ -405,6 +405,7 @@ export const studio = new Hono()
             .max(24)
             .default([]),
         part: z.enum(["info", "knowledge"]).default("info"),
+        plugin: z.string().regex(PLUGIN_ID).optional(),
     })
         .parse(await c.req.json());
     if (!(await canSpend())) {
@@ -420,6 +421,7 @@ export const studio = new Hono()
                 message: body.message,
                 history: body.history,
                 part: body.part,
+                plugin: body.plugin,
                 signal: abort.signal,
                 onText: (delta) => {
                     void stream.writeSSE({ event: "text", data: JSON.stringify(delta) });

package/apps/runtime/dist/services/marketplace.js

@@ -1,5 +1,7 @@
+import { createHash } from "node:crypto";
+import { statSync } from "node:fs";
 import { DEFINITION_VERSION, readable, wizardSchema, } from "@engenty-wizards/shared/definition";
-import { MARKETPLACE_LANGS, } from "@engenty-wizards/shared/marketplace";
+import { capabilitiesOf, costTierOf, effortOf, formatsOf, MARKETPLACE_LANGS, } from "@engenty-wizards/shared/marketplace";
 import { wizardOutline } from "@engenty-wizards/shared/marketplace-entry";
 import { searchEntries } from "@engenty-wizards/shared/marketplace-search";
 import { and, eq, inArray, notInArray } from "drizzle-orm";
@@ -9,14 +11,19 @@ import { missingCapabilities, optionalCapabilities, stepsWithoutModel, } from ".
 import { env } from "../env.js";
 import { managed } from "../manage.js";
 import { classCatalog, imageCostUsd, tokenCostUsd, videoCostUsd, WEB_SEARCH_COST_USD, } from "../models.js";
+import { pluginStartersOf } from "../plugins/registry.js";
 import { readSetting, writeSetting } from "../settings.js";
-import { LOCAL_TENANT } from "../tenants/tenant.js";
+import { currentTenant, LOCAL_TENANT } from "../tenants/tenant.js";
 import { ServiceError } from "./errors.js";
 /**
  * The marketplace is an app of its own; this runtime is one of its clients
  * (docs/marketplace-contract.md). It searches the marketplace live and starts wizards from its
  * entries. Its starters and what people starred are kept in the control database, so the list
  * and starting a wizard work without a connection too.
+ *
+ * Beside them stand the starters the tenant's plugins bring (docs/content/dev/plugins/starters.md),
+ * listed first and never fetched. They are known as `<plugin id>.<starter id>`; a marketplace
+ * entry's id has no dot, so the two never meet.
  */
 export const asLang = (raw) => MARKETPLACE_LANGS.includes(raw ?? "") ? raw : "de";
 /** A search waits this long for the marketplace; then it searches what is kept here. */
@@ -84,6 +91,69 @@ function keptItem(e, lang) {
     const text = textIn(e, lang);
     return text ? { ...keptSummary(e, lang), definition: text.definition, files: e.files } : null;
 }
+// --- the plugins' starters ------------------------------------------------------------------
+/** One of the starters the tenant's plugins bring, by its id; undefined for any other id. */
+async function pluginStarter(id) {
+    if (!id.includes(".")) {
+        return undefined;
+    }
+    return (await pluginStartersOf(currentTenant())).find((s) => s.id === id);
+}
+/** A plugin's starter as the marketplace lists an entry, read from its definition. */
+function pluginSummary({ id, plugin, starter }) {
+    const definition = starter.definition;
+    const { name, version } = plugin.source.manifest;
+    const capabilities = capabilitiesOf(definition);
+    const changed = statSync(plugin.source.entry ?? plugin.source.root, { throwIfNoEntry: false });
+    return {
+        id,
+        revision: 0,
+        hash: createHash("sha256")
+            .update(`${version}\n${JSON.stringify(definition)}`)
+            .digest("hex")
+            .slice(0, 16),
+        updatedAt: (changed?.mtime ?? new Date()).toISOString(),
+        starter: true,
+        language: starter.language ?? "de",
+        title: starter.title,
+        pitch: starter.description,
+        // Found by the plugin's name as well: "Termine" finds the appointment plugin's starters.
+        terms: [name],
+        avatar: definition.avatar,
+        formats: formatsOf(definition),
+        industries: ["any"],
+        useCases: [],
+        capabilities,
+        effort: effortOf(definition),
+        costTier: costTierOf(capabilities),
+        steps: definition.steps.length,
+        version: definition.version,
+    };
+}
+/** A plugin's starter as this app shows it: never starred, and marked with its plugin. */
+function pluginEntry(found, unavailable) {
+    const { id, name } = found.plugin.source.manifest;
+    return {
+        ...asEntry(pluginSummary(found), new Set(), unavailable, optionalOf(found.starter.definition)),
+        plugin: { id, name },
+    };
+}
+/** Two searches' counts per option, added up. */
+function addFacets(a, b) {
+    const add = (x = {}, y = {}) => {
+        const out = { ...x };
+        for (const [key, n] of Object.entries(y)) {
+            out[key] = (out[key] ?? 0) + n;
+        }
+        return out;
+    };
+    return {
+        useCase: add(a.useCase, b.useCase),
+        industry: add(a.industry, b.industry),
+        format: add(a.format, b.format),
+        capability: add(a.capability, b.capability),
+    };
+}
 // --- searching -----------------------------------------------------------------------------
 /** A summary as this app shows it: whether it can read and run it, and whether it is starred. */
 function asEntry(summary, starred, unavailable, optional = new Set()) {
@@ -120,8 +190,43 @@ async function keptOptional(ids, lang, unavailable) {
     }
     return out;
 }
-/** Searches the marketplace; without an answer, what is kept here, scored the same way. */
+/**
+ * Searches the tenant's plugins' starters and the marketplace, in that order: a page holds the
+ * plugins' starters the words and filters find, then the marketplace's entries.
+ */
 export async function searchMarketplace(search) {
+    const { q = "", starred, limit = 60, offset = 0, lang: _lang, ...filters } = search;
+    const own = starred ? [] : await pluginStartersOf(currentTenant());
+    if (!own.length) {
+        return searchListed(search);
+    }
+    const byId = new Map(own.map((s) => [s.id, s]));
+    const found = searchEntries(own.map(pluginSummary), q, filters, { limit: own.length });
+    const shown = found.entries.slice(offset, offset + limit);
+    // The marketplace fills what is left of the page, and counts from where its entries begin.
+    const room = limit - shown.length;
+    const listed = await searchListed({
+        ...search,
+        limit: Math.max(1, room),
+        offset: Math.max(0, offset - found.total),
+    });
+    const unavailable = new Set(listed.unavailable);
+    return {
+        ...listed,
+        entries: [
+            ...shown.flatMap((e) => {
+                const entry = byId.get(e.id);
+                return entry ? [pluginEntry(entry, unavailable)] : [];
+            }),
+            ...listed.entries.slice(0, room),
+        ],
+        total: found.total + listed.total,
+        all: own.length + listed.all,
+        facets: addFacets(listed.facets, found.facets),
+    };
+}
+/** Searches the marketplace; without an answer, what is kept here, scored the same way. */
+async function searchListed(search) {
     const { q = "", lang, starred: onlyStarred, limit = 60, offset = 0, ...filters } = search;
     const stars = await starredIds();
     const starred = new Set(stars);
@@ -217,6 +322,15 @@ async function priced(definition) {
 }
 /** An entry in a language with its wizard read against this app; null where there is none. */
 export async function marketplaceDetail(id, lang) {
+    const own = await pluginStarter(id);
+    if (own) {
+        const definition = own.starter.definition;
+        return {
+            ...pluginEntry(own, await missingCapabilities()),
+            credits: await priced(definition),
+            ...wizardOutline(definition, Object.keys(own.starter.files ?? {}), lang),
+        };
+    }
     const found = await fetchItem(id, lang);
     if (!found) {
         return null;
@@ -242,6 +356,23 @@ export async function marketplaceDetail(id, lang) {
 }
 /** An entry's wizard and workspace in a language: what a wizard is made from. */
 export async function marketplaceWizard(id, lang) {
+    const own = await pluginStarter(id);
+    if (own) {
+        // A plugin's starter is in its one language, whatever is asked for.
+        const { starter, plugin } = own;
+        return {
+            id,
+            revision: null,
+            plugin: plugin.source.id,
+            title: starter.title,
+            language: starter.language ?? "de",
+            definition: structuredClone(starter.definition),
+            files: Object.fromEntries(Object.entries(starter.files ?? {}).map(([path, data]) => [
+                path,
+                typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data),
+            ])),
+        };
+    }
     const found = await fetchItem(id, lang);
     if (!found) {
         return null;