Marketplace UI

Document ID: DASH-005
File Path: docs/10-dashboard/marketplace.md
Version: 1.0.0
Status: Draft
Owner: AI Platform Team
Last Updated: 2026-06-27

1. Purpose

This document specifies the Marketplace UI — where users discover, evaluate, install, and manage plugins. It is the visual front end over the Plugins API and the Plugin Marketplace.

2. Surfaces

View	Purpose
Browse	Search/filter listings
Listing detail	Capabilities, permissions, versions, ratings, provenance
Install	Install + grant flow
Installed	Manage installed plugins (enable/disable/upgrade/rollback)
Grants	Review and modify permission grants

3. Discovery

The browse view queries /marketplace/listings with search, category, and capability filters. Results respect the deployment’s marketplace policy — users only see plugins they are permitted to install.

Trust signals (verified badges, ratings, install counts, declared permissions) are shown prominently.

4. Listing Detail

For a plugin, the detail page shows:

Capabilities by kind (tools, providers, …)
Requested permissions, grouped by risk, before install
Version history and channels (stable/beta/edge)
Provenance/SBOM availability
Ratings, reviews, publisher info

Choose version/channel
   │
   ▼
Review requested permissions (risk-highlighted)
   │
   ▼
Confirm install → operation progress (verify → resolve → register)
   │
   ▼
Grant permissions (per project) → enable capabilities

This UI realizes the permission consent UX: broad/wildcard permissions are flagged, and a subset can be granted. Install runs as an operation with live status.

6. Managing Installed Plugins

Action	API
Enable / Disable	`:enable` / `:disable`
Upgrade / Rollback	`:upgrade` / `:rollback`
Edit grants	grants endpoints
Uninstall	`DELETE`

An upgrade requesting new permissions shows a permission diff and requires a fresh grant before the new capabilities go live (versioning).

7. Governance Views (Operators)

Operators can:

Configure the marketplace policy (allowed publishers, require-verified, permission-risk ceiling, blocklist).
See which projects have which plugins/grants.
Respond to revocations (force-disabled versions are flagged).

8. Publishing (Publishers)

Verified publishers can manage their listings, channels, and respond to reviews from within the dashboard, backed by the publish flow.

9. Governance

Install/upgrade/grant require plugins:admin; browsing requires plugins:read.
All actions are audited; permission grants are explicit and revocable.

10. Dependencies

12. Revision History

Version	Date	Description
1.0.0	2026-06-27	Initial Marketplace UI specification