todo: the marketplace's deferred work, ranked

Split out of docs/marketplace.md so the design document stays about how it works. Ranked by what blocks something rather than by size: submissions first (until a stranger's manifest can be read without executing it, the catalogue is ours only and everything below is cosmetic), then plugin upgrades not migrating, then staleness, then scale. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-16 11:13:00 +00:00
parent dc420ba5a2
commit 23f2ecb950
2 changed files with 72 additions and 0 deletions
@@ -106,6 +106,8 @@ refused outright, because that string reaches `git clone`.

 ## Open items

+The full list, ranked, is `docs/marketplace-todo.md`. The ones that shape the design:
+
 - **`[blocker]` Third-party submissions cannot use this sync.** It reads a manifest by importing it, which
  is code execution. Fine for our own repositories; not a mechanism a stranger's plugin can go through.
  Submissions need either a sandbox or a published `manifest.json` alongside the TypeScript one.