Apps that live inside the editor.

Decision-tree entry point — Content SDK head app, Marketplace Client-Side, Marketplace Client-Side + OAuth proxy, or Marketplace Full-Stack. Picked first, picks the rest.

Scaffolds the canonical client-side iframe Marketplace app (Mode A). shadcn-quickstart command, next-app flatten, Vitest stack, useSyncExternalStore template, Chrome Local Network Access headers.

Scaffolds the Mode A + Mode B Auth0-PKCE full-stack variant with experimental_createXMCClient — for apps that need SSR-side authenticated calls on behalf of a logged-in Cloud Portal user.

Entry-point reference for the postMessage bridge to the portal. ClientSDK.init, Provider + singleton, query/mutate/subscribe verbs, extension-point types, response unwrapping, error codes.

XM Cloud endpoint reference — sites, pages, agent, authoring, preview, live, content-transfer, search. sitecoreContextId rules, GraphQL endpoints, Mode A vs B response unwrap.

The AI Skills package — generateBrandReview, the params-wrapper trap, ExtractableFile input types, oversized-payload SyntaxError, both module + experimental_createAIClient modes.

Post-scaffold interactive — pick extension points, name routes, generate App Router files, produce the exact values to paste into Cloud Portal → App Studio.

End-to-end lifecycle — custom vs public apps, Cloud Portal registration, the three architectures (client-side iframe / full-stack / experimental server-to-server), Auth0 model, Blok compliance, submission.

Local dev loop — HTTPS + mkcert, test-app registration, Chrome LNA traps, extracting orgId/tenantId/contextId, iframe sandbox constraints, iframe-handshake + cookie debug checklist.

Visual smoke recipe — load the app via the host URL, locate the iframe by origin, clip the surrounding chrome, compare against the approved POC clickdummy as the visual ground truth.

Shared OAuth 2.0 client-credentials auth for all four SitecoreAI APIs (Agent, Pages, Publishing, Sites). Automation-client creation, token caching, 401 handling, the three-segment env-var naming.

The Blok design system — shadcn init flow, eight theming token categories (colors, typography, spacing, radius, shadows, sizes, breakpoints, semantic), iframe viewport constraints, public-app submission checklist.

Dogfood Loop

Every skill file is rehearsed against a real app build BEFORE being committed as agent knowledge. If the skill cannot drive a clean build on the first try, it gets revised. The four latest Marketplace apps (PageShot, QuickCopy, Component Atlas, Last-Edit Trail) were the dogfood targets that validated the current skill stack.

Pipeline Is a Partnership

The agents do not work in a vacuum. Each command surfaces operator checkpoints, escalations, and assumptions explicitly — never "completed silently." The pipeline succeeds when the operator can audit any decision the agents made, at any stage, without rerunning the work.

Real-Tenant Probe

Hard-gate every planning stage against a live Sitecore tenant capture before commit. Probes catch the "Sitecore returns a shape no doc page mentions" case at Tranche 1 instead of Tranche 6. Redirect Manager PRD-001 was cancelled at T001 after a probe found a fundamental assumption was wrong — saving weeks of wasted build.

Skills, For Real

Skills are not prose-to-fill-a-folder. Each one is operational knowledge with hard rules, stop conditions, verification steps, and references. They auto-surface by description match — agents do not have to be told which to load. Twelve marketplace-track skills + eleven content-track skills, all dogfood-validated.

AI Chat in Page Builder

An AI chat assistant inside Page Builder that understands your Sitecore setup — pages, components, data sources, and structure — helps editors stay focused instead of switching tools. This PoC uses the Sitecore Marketplace SDK and Vercel AI SDK so editors can retrieve context, check publishing and translation status, run brand reviews, update content, create and translate news pages, and manage campaigns, all via natural language inside the editor.

Image Hotspot Manager

A Sitecore Marketplace app that improves how editors place and manage hotspots on images in Page Builder. Instead of manually entering X/Y coordinates, editors click on the image to add hotspots, drag to reposition, and add tooltip text and colors.

Workflow Manager

A Sitecore Marketplace app for managing content workflows in SitecoreAI. Editors can work in two modes: Full Page with list and Kanban views across sites and languages, or Page Builder with page-level workflow and datasource usage.

PageShot

A Sitecore Marketplace custom app that adds a one-button screenshot control inside the SitecoreAI Pages editor. Editors click Capture in a Page Builder Context Panel and get a chrome-free PNG rendered by the SitecoreAI Agent API — then Copy to clipboard, Download as PNG, or Open in a new tab. No OS screenshot tool, no editor chrome, no manual cropping.

QuickCopy

A Sitecore Marketplace Page Context Panel app with five one-click copy buttons for the SitecoreAI Pages editor: Live URL, Preview URL, Item ID, Page Title, and a Share Link (Markdown or plain text). Values are pre-fetched the moment the editor opens a page, so clicks are instant — no URL hunting, no digging for Item IDs. Keyboard-shortcut accessible, dark-mode default, with in-place button morphing feedback and honest disabled/error states.

Component Atlas

A Sitecore Marketplace app that ships two surfaces from one app registration: a Dashboard Widget for component-centric search and a Page Context Panel for page-centric impact. Type a rendering name to see every page that uses it, or open a page to see its renderings and datasources with +N other pages impact counters. The atlas is built on demand from the Sitecore Agent API, scans pages in parallel for throughput, and caches results for the tab's lifetime — no backend, no persisted index.

Last-Edit Trail

A Sitecore Marketplace Page Builder Context Panel app that surfaced the last 5 versions of the active page in the current language — newest-first, with age and (when surfaced) author — directly inside the editor. PRD-000 shipped clean; PRD-001 (Compare view) became a lessons-learned partial failure when first real-tenant smoke revealed nine integration issues despite green tests and build. The product was ultimately retired — but the idea and the methodology lessons it produced are kept. The full breakdown lives in the case study and in "The Pipeline Is a Partnership."

Redirect Manager

A Sitecore Marketplace app that puts Redirect Maps where editors actually work — across three surfaces from one install. A full-page workbench with regex authoring and a built-in Test tab that simulates how the Content SDK RedirectsProxy would evaluate a URL step-by-step against the loaded redirect inventory, a context panel that adds a redirect for the page you're editing in one click, and a dashboard tile that surfaces recent activity at a glance. Publishes to the live site in one click. Tells you when the local simulator has drifted from upstream Sitecore/content-sdk — with a Claude Code slash command that re-ports the changes for the engineer. The build itself produced a methodology lesson worth keeping — captured in the case study.

Paywall Blueprint

The first publicly available worked example of charging for a Sitecore Marketplace app. A public open-source reference that demonstrates a complete paywall flow — freemium layout, the full denial-state UX library, and real Stripe Checkout end-to-end — wrapped around two clean swap-in seams so adopters can fork the repo, replace the payment provider or the entitlement store with a single file, and ship a paid Marketplace app without reinventing the gating pattern.