Command-installed plugins can be symlinked instead of copied, and consent errors say what changed.
What's wrong with this entry?
A marketplace entry that installs a plugin by running a command on your machine can now use mode: "link", where the directory the command produces is symlinked in place instead of copied. Link mode is refused on Windows. If the marketplace's command changed since you accepted it, the refusal now says specifically what changed, and the /plugin details pane shows the command and its mode.
- the install record keeps the path the command produced and the paths previous runs produced, so a changed producer path is detectable
- consent is tied to the exact command text you approved
Installed by running a command on this machine:
Strings lifted out of the shipped bundle, so the claim above can be checked against them.