Getting Started
Marketplace Login & First Screen
The host app itself is local-first, but a Marketplace account plus Agent Hub server authentication is required for the plugin catalog, downloads, and signature verification. Auth is handled on the plugin side via hostApi.openAuthWindow / hostApi.openAuthPartitionViewer.
Why do I need to log in?
- Marketplace — plugin catalog reads + package downloads (the
lvis://install/<slug>deeplink routes to the host). - Agent Hub — Work Board / Inbox sync (HTTPBearer token,
agent-hub.lvisai.xyz). - ms-graph, lge-api — each plugin's own OAuth (MSAL · EP SSO). Tokens are isolated to the plugin namespace.
Login flow
- 01
Main host → Marketplace SSO
Enter the Marketplace LoginPage in a web browser. The Marketplace server (
marketplace.lvisai.xyz) responds via/api/v1/auth/*. - 02
API key issuance
one-timeOn successful login an ApiKey (publisher/admin role) is issued, and the client verifies that the key's sha256 hash matches
api_keys.key_hashin the server DB. - 03
Agent Hub token
Using the Work Board requires a separate Agent Hub
/auth/exchange/issue+/auth/exchange/redeemflow (lvis-agent-hub/src/.../api/auth_exchange.py). PKCE-like. - 04
Plugin OAuth — when needed
ms-graph (MSAL) / lge-api (EP SSO) are handled separately via
hostApi.openAuthWindowon first use after plugin install.