Marketplace Overview — Marketplace Overview

Phase 3 — PENDING The marketplace is in design phase. No implementation has started. This guide describes the planned design. All features described are subject to change.

What PublicHub Provides

PublicHub is BizFirstGO's answer to npm, NuGet, or Docker Hub — but for automation artifacts. It gives the BizFirstGO community a central place to:

Discover

Search by name, category, or tag. Browse featured and trending packages. Find the best workflow for your use case.

Evaluate

Read descriptions, see what artifacts will be installed, read community reviews, and check security scan results before committing.

Install

One-click install triggers the Phase 2 import pipeline in your tenant. No manual ZIP downloads required.

Publish

Submit your own packages for community use. Build a publisher reputation and work toward Certified status.

Trust Levels

Official BizFirstGO

Published by the BizFirstGO team or Anthropic. These packages are the platform's first-party automation templates — reviewed by the core team, security scanned, and guaranteed to work with the current platform version. Examples: Onboarding Suite, Employee Management, Standard Approval Workflows.

Certified Verified

Published by a verified publisher who has passed identity verification, human review of the package, test coverage requirements, and documentation requirements. Certified packages are safe to install in production environments.

Community Use with caution

Published by any registered user. Community packages have passed automated security scanning but have NOT been human-reviewed. Install only from publishers you trust, or inspect the contents using dry-run import first.

One-Click Install Flow

Click Install

The administrator clicks "Install" on a marketplace listing. They are prompted to choose a target tenant and conflict strategy.

Package Downloaded

The marketplace downloads the package ZIP from the PublicHub CDN to the BizFirstGO platform.

Import Pipeline

The Phase 2 import pipeline runs: validation, security scan, ID remapping, conflict resolution, install, verify.

Notification

The administrator receives a notification when the install completes or fails, with the full import result.

Marketplace API

// Search marketplace
GET /api/marketplace/packages?q=onboarding&category=hr&trustLevel=Certified&pageSize=20

// Get package details
GET /api/marketplace/packages/{packageId}

// Install from marketplace
POST /api/marketplace/packages/{packageId}/install
{
  "version":      "2.1.0",
  "targetTenantId": "tenant-abc123",
  "conflictStrategy": "Skip"
}

// Check install status
GET /api/marketplace/installs/{installId}/status

Next: Discovering Packages →