{"id":"paseo-cafe","repo":"paseo-cafe/paseo-cafe","url":"https://github.com/paseo-cafe/paseo-cafe/tree/main/plugin","package":"paseo-cafe","npm":{"package":"paseo-cafe","version":"1.0.1","integrity":"sha512-MYjPZ8KtUXnEQt/xoClRMRwsc9bv3qQpk+n06WXYHV7dwsbrvlO65Q+J8i7yNAobrFUur9OTq7lZLLLRDpagcg==","publishedAt":"2026-10-13T13:59:58.388Z","downloadsLast30Days":4912},"name":"paseo-cafe","description":"Browse the official Paseo plugin directory inside Paseo and install plugins without leaving the app.","categories":["productivity"],"platforms":[],"caveats":["Installs plugins by running the paseo CLI on the daemon host","Browsing the catalog requires the daemon to reach the configured catalog URL"],"images":["https://raw.githubusercontent.com/paseo-cafe/paseo-cafe/28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c/plugin/images/catalog-browse.webp","https://raw.githubusercontent.com/paseo-cafe/paseo-cafe/28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c/plugin/images/install-review.webp","https://raw.githubusercontent.com/paseo-cafe/paseo-cafe/28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c/plugin/images/plugin-detail.webp","https://raw.githubusercontent.com/paseo-cafe/paseo-cafe/28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c/plugin/images/screenshot-gallery.webp","https://raw.githubusercontent.com/paseo-cafe/paseo-cafe/28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c/plugin/images/themes-browse.webp"],"themes":[],"health":{"manifestValid":true,"hasReadme":true,"hasLicense":true,"hasTests":true,"hasTypecheckScript":true,"updatedRecently":true},"scannedAt":"2026-10-23T13:11:50.147Z","addedAt":"2026-09-09T20:55:26+03:00","npmSecurity":{"status":"passed","blockingFindings":0,"advisoryFindings":0,"scannedAt":"2026-10-15T12:14:24.405Z","version":"1.0.1","integrity":"sha512-MYjPZ8KtUXnEQt/xoClRMRwsc9bv3qQpk+n06WXYHV7dwsbrvlO65Q+J8i7yNAobrFUur9OTq7lZLLLRDpagcg=="},"path":"plugin","version":"1.0.1","security":{"status":"passed","blockingFindings":0,"advisoryFindings":0,"scannedAt":"2026-10-15T12:14:24.405Z","commit":"28e01f97dfe82c6fbe5b607e1c727d117c8a3d3c"},"npmPreview":{"package":"paseo-cafe","version":"1.0.2-next.38557396455.1.0","integrity":"sha512-47/LaHhgbW2AHvJp/zKI652GNVYmsY/43aQc//rCDhWM8ZTeyAGH3F70NIc3AFAXy39ZM+tuK69BSwGXQ8mKmQ==","publishedAt":"2026-10-14T11:41:05.605Z","distTag":"next"},"npmPreviewSecurity":{"status":"passed","blockingFindings":0,"advisoryFindings":0,"scannedAt":"2026-10-15T12:14:24.405Z","version":"1.0.2-next.38557396455.1.0","integrity":"sha512-47/LaHhgbW2AHvJp/zKI652GNVYmsY/43aQc//rCDhWM8ZTeyAGH3F70NIc3AFAXy39ZM+tuK69BSwGXQ8mKmQ=="},"license":"Apache-2.0","paseoVersionRequirement":">=0.11.0-beta.4","descriptionNodes":[{"type":"text","text":"Browse the official Paseo plugin directory inside Paseo and install plugins without leaving the app."}],"caveatNodes":[[{"type":"text","text":"Installs plugins by running the paseo CLI on the daemon host"}],[{"type":"text","text":"Browsing the catalog requires the daemon to reach the configured catalog URL"}]],"manifest":{"id":"paseo-cafe","requirements":{"paseo":">=0.11.0-beta.4"}},"repoMeta":{"stars":50,"defaultBranch":"main","pushedAt":"2026-10-23T13:05:28Z"},"owner":{"login":"paseo-cafe","avatarUrl":"https://avatars.githubusercontent.com/u/326468978?v=4"},"installNotesHtml":"<pre><code class=\"language-bash\">paseo plugin add paseo-cafe/cafe\n</code></pre>\n<p>Requires Paseo 0.11.0-beta.4 or later: the daemon needs to resolve <code>owner/slug</code> directory ids. The\nmanifest declares <code>requirements.paseo</code> as <code>>=0.11.0-beta.4</code>. The prerelease comparator is required\nbecause npm semver rules do not match <code>0.11.0-beta.4</code> with a plain <code>>=0.11.0</code> range.</p>\n<p>By default the directory is read from <code>https://plugins.paseo.sh/index.json</code>. <strong>Settings → Plugins →\nPaseo Cafe</strong> can point at another registry that serves the\n<a href=\"https://github.com/getpaseo/plugins/blob/main/PROTOCOL.md\">Paseo registry protocol v1</a> documents.\nA custom registry must use HTTPS, or HTTP on loopback (<code>localhost</code>, <code>*.localhost</code>, <code>127.0.0.0/8</code>,\n<code>[::1]</code>). The registry picks which package or Git commit the install button hands to the <code>paseo</code>\nCLI, so anyone able to rewrite a plaintext response chooses what gets installed on the daemon host.</p>\n<p>The daemon resolves <code>owner/slug</code> only against its own default registry, or <code>host/owner/slug</code>\nagainst a registry at a host root over HTTPS. For a registry served under a path prefix, or over\nloopback HTTP, set <code>PASEO_PLUGIN_REGISTRY</code> in the daemon's environment and install from the CLI;\nCafe shows that instead of an install button.</p>","limitationsNotesHtml":"<ul>\n<li>Listed plugins are community-submitted and reviewed by the directory maintainers. They are still\ntrusted, unsandboxed code on your daemon host: read the source before installing.</li>\n<li>Installing shells out to the <code>paseo</code> CLI, so that binary must be on the daemon's <code>PATH</code>.</li>\n<li>Directory responses are cached on the daemon for five minutes. <strong>Refresh</strong> bypasses that cache.</li>\n<li>Plugins installed from npm or Git before the directory existed have no directory identity. Cafe\nrecognizes them by package name, or by Git remote and plugin path, and shows them as installed.</li>\n</ul>","readmeText":"# Paseo Cafe\n\nBrowse the official [Paseo plugin directory](https://paseo.sh/plugins) from inside Paseo, and\ninstall plugins without leaving the app.\n\nThe plugin adds a **Paseo Cafe** sidebar surface that lists every plugin in the directory with its\ndescription, author, categories, install count, screenshots, and README. Featured plugins and the\nmost recently updated ones lead the default view; search, category, installation-state, and sort\ncontrols narrow it down. Installs run `paseo plugin add owner/slug` on the daemon host behind a\nconfirmation step that shows the exact reviewed package or Git commit, so Paseo installs the\nartifact the directory approved and nothing else. A **Paseo plugin** composer attachment source can\nattach a plugin's listing to a prompt for agent review before you trust it.\n\nUpdate availability comes from `paseo plugin update --all --check`, so it follows the same rules as\nthe CLI: a plugin installed from the directory moves to the directory's current pin, and one\ninstalled from npm or Git moves to its source's latest release. The sidebar shows a badge when\nupdates are available.\n\nAutomatic updates are on by default for every plugin. Turn them off per installation from the\nplugin detail page when a plugin should stay put; Cafe checks shortly after startup and every six\nhours, isolates failures between plugins, and rechecks your choice before each update.\nCafe updates itself through a restart-safe detached handoff. **Settings → Plugins → Paseo Cafe →\nRun now** runs the policy immediately.\n\n## Screenshots\n\n### Browse the plugin directory\n\n![Paseo Cafe directory on the Plugins tab, with search, category chips, featured plugins and the full plugin list](images/catalog-browse.webp)\n\n### Browse themes\n\n![Paseo Cafe directory on the Themes tab, showing each theme as a card with its first screenshot, author and install count](images/themes-browse.webp)\n\n### Inspect a listing\n\n![Paseo Cafe detail page for the Catppuccin theme, with its hero screenshot, description, gallery and Review & install button](images/plugin-detail.webp)\n\n### Review the exact artifact before installing\n\n![Paseo Cafe install review dialog showing the source repository, Git commit, plugin path and install command, with the trusted-code warning](images/install-review.webp)\n\n### Browse a listing's screenshot gallery\n\n![Paseo Cafe gallery page showing a theme's screenshots at full width](images/screenshot-gallery.webp)\n\n## Install\n\n```bash\npaseo plugin add paseo-cafe/cafe\n```\n\nRequires Paseo 0.11.0-beta.4 or later: the daemon needs to resolve `owner/slug` directory ids. The\nmanifest declares `requirements.paseo` as `>=0.11.0-beta.4`. The prerelease comparator is required\nbecause npm semver rules do not match `0.11.0-beta.4` with a plain `>=0.11.0` range.\n\nBy default the directory is read from `https://plugins.paseo.sh/index.json`. **Settings → Plugins →\nPaseo Cafe** can point at another registry that serves the\n[Paseo registry protocol v1](https://github.com/getpaseo/plugins/blob/main/PROTOCOL.md) documents.\nA custom registry must use HTTPS, or HTTP on loopback (`localhost`, `*.localhost`, `127.0.0.0/8`,\n`[::1]`). The registry picks which package or Git commit the install button hands to the `paseo`\nCLI, so anyone able to rewrite a plaintext response chooses what gets installed on the daemon host.\n\nThe daemon resolves `owner/slug` only against its own default registry, or `host/owner/slug`\nagainst a registry at a host root over HTTPS. For a registry served under a path prefix, or over\nloopback HTTP, set `PASEO_PLUGIN_REGISTRY` in the daemon's environment and install from the CLI;\nCafe shows that instead of an install button.\n\n## Limitations\n\n- Listed plugins are community-submitted and reviewed by the directory maintainers. They are still\n  trusted, unsandboxed code on your daemon host: read the source before installing.\n- Installing shells out to the `paseo` CLI, so that binary must be on the daemon's `PATH`.\n- Directory responses are cached on the daemon for five minutes. **Refresh** bypasses that cache.\n- Plugins installed from npm or Git before the directory existed have no directory identity. Cafe\n  recognizes them by package name, or by Git remote and plugin path, and shows them as installed.\n"}