Add optional locked plugin download URLs

2026-07-10 09:17:02 -07:00
parent 26def9609d
commit 538feae811
7 changed files with 121 additions and 10 deletions
@@ -152,6 +152,11 @@ Install assets are currently expected to already exist locally, usually under:
 <state-dir>/cache/downloads/<instance>/<plugin-id>/
 ```

+Lock entries may include `download_url`, the exact public zip or DLL URL for the
+locked artifact. The URL is currently audit/recovery metadata; `plan`, `check`,
+and `apply` still use local assets and do not fetch missing downloads
+automatically.
+
 Composite local assets should have an explicit reconstruction recipe checked in
 with the helper. For example, Cinema's external Windows downloader tools are a
 small deterministic bundle rebuilt from upstream executables with: