ডকুমেন্টেশন আপাতত শুধুমাত্র ইংরেজি। সাইট বাকি আপনার ভাষা অনুসরণ করে.

Glossary

Plain-English definitions for Justflows terms used across these docs.

4 মিনিট পড়া হয়েছে

Action: A hook that runs after something succeeded. It cannot cancel the operation.
Additional role: A role a user holds on top of their main role. It only adds capabilities; admin-only checks read the main role.
Admin app (plugin): A plugin's self-contained HTML build, declared as adminApp and mounted in a same-origin <iframe> inside the admin shell; it talks to the host only over postMessage via @justflows/admin-bridge.
Asset bundle (plugin): One content-hashed /jf-plugins.<hash>.js / .css file the host builds by concatenating every active plugin's manifest.assets scripts and styles, added to every public page.
Audit log: Persisted record of security-sensitive admin actions (sign-in, 2FA, package installs, updates, …) under Admin → Security → Audit log.
Beta listing: A Marketplace plugin or theme marked registry.beta: true. It installs only after Settings → Marketplace allows beta installs, and with a confirmation.
Block document: JSON { version, blocks } stored on a post or page and edited in the builder.
Block pattern: A reusable, validated block tree in the editor's pattern library — a section starter or a whole-page design. Shipped by a theme, contributed by a plugin with ctx.patterns.register(), or saved locally; non-core blocks it uses are listed in requiresBlockTypes.
Bulk edit: A plugin admin page that changes many selected rows of a content list at once, such as Shop's product bulk edit.
BYOK (bring your own key): Your own Anthropic, OpenAI, or OpenAI-compatible API key, stored encrypted under Settings → AI. It powers the admin assistant; Justflows never sells or hosts AI.
Capability: A named thing a user role may do (content:publish, plugins:install, …). Roles can be built-in or custom, and a grant can be scoped by content type, locale, site, or ownership.
Connected app: An AI app (for example claude.ai or ChatGPT) authorized to your site through the OAuth consent screen. Listed and revocable under Settings → API → Connected apps.
Consent record: A versioned row the Cookie Consent plugin stores for a visitor's choices — policy hash, timestamp, categories, locale, coarse device — exportable as CSV and erasable per record.
Content type: A registered slug (post, page, or a custom type) with optional field definitions, persisted in content_types.
Correlation ID: The X-Request-Id value on every HTTP response. Quote it when reporting a failing request; its trace is in Admin → System → Diagnostics.
CSS provider: A framework CSS package (Bootstrap, Pico, none, …) activated under Design.
Custom role: A site-local role an administrator defines with a capability editor, in addition to the five built-in roles.
Customer role: The customer role the Shop plugin registers while active. It has no administration access.
Envelope sender: The return-path address used for bounce handling on outgoing mail, set under Settings → Outgoing mail, independent of From and Reply-To.
Error page slot: The 403 / 410 / 429 / error template slots in the hierarchy, alongside 404, that an administrator can point at the theme's own template, the built-in page, or a specific published page from Theme customize → Error pages.
Filter: A hook that receives a value and must return the next value.
Force reinstall: Admin → Updates action that re-downloads and reapplies the currently published release even if it matches the installed version, to repair a corrupted core install.
Gate: A hook that runs before commit and may cancel(reason). Fail closed.
jf-cache: Built-in object cache (memory or filesystem) with remember and prefix invalidation. A Redis adapter is reserved but not implemented.
License (core): Community Edition (justflows-ce) is MIT. Preserve the copyright notice when you distribute Core.
License (plugin/theme): Each extension declares its own SPDX license. Installed packages and Marketplace listings must be GPL-compatible (GPL, MIT, BSD, ISC, …).
MCP (Model Context Protocol): The open protocol AI agents use to call tools. Justflows serves an MCP server at /api/mcp whose tools come from the Management API.
Mega menu: A menu layout whose top-level items open a full-width panel of multi-column regions. Region content is authored as blocks and sanitized on write against a fixed safe-block allowlist (no core.html / core.code / core.embed).
Menu designer: The visual Admin → Menus editor: a drag-and-drop item tree, layout and mobile-collapse presets, per-item styling, server-side visibility rules, and a live ?preview=1 iframe. Edits autosave to a draft and are promoted by Publish.
Permalink structure: The configured pattern for public content URLs — a preset such as /%postname%/ or a custom token structure, with per-type and taxonomy bases and a trailing-slash policy. Changing it 301s previously published URLs to the new ones.
Permission (plugin): A named thing a plugin declares in its manifest in order to use sensitive hooks or APIs.
Placeholder image: A neutral image Justflows shows for an empty image slot (generic, featured, thumbnail, avatar, share). Replaceable under Settings → Placeholders.
Public API: /api/v1 (content, content-types, media, menus, openapi.json) and /api/site, anonymous when enabled. Not the session admin API.
Redirect manager: Admin → System → Redirects: exact, prefix, and restricted-regex redirects to internal, content, or external destinations, with CSV import/export, permalink-history suggestions, and aggregate public 404 reporting. A server runtime feature; static exports do not reproduce it.
Release signature: justflows.zip.sig, the Ed25519 signature every core release ships with. Updates and uploads refuse an archive without a valid one.
Responsive image variant: A width-scaled, format-converted copy of an uploaded raster image (for example WebP at 640px) generated alongside the original and served through <picture> / srcset.
Scheduled publishing: A publish or unpublish date set on a content entry from the editor; a database-backed job fires the transition at the right time, even across restarts.
Scope (access): A limit attached to a capability grant — by content type, locale, site, or ownership — so a user can hold a capability for only part of the site.
SDK: @justflows/sdk — the only package plugin authors should import for types and contracts.
SEO: Built-in public-page tags, /sitemap.xml, and /robots.txt. Per-page fields live on the content row; site-wide defaults can be stored by the SEO Toolkit plugin.
Service worker: The generated /sw.js script behind Settings → PWA that caches static assets and serves the offline fallback for an installed Progressive Web App.
Spam score: A 0–100 heuristic score a comment submission receives from local signals (links, keywords, disposable domains, timing, …); configurable thresholds decide whether it's auto-approved, held, or auto-marked spam.
Static export: A generated folder of files — every published page, asset, locale, sitemap, and the built /theme.css, plus a sha256 manifest and _headers — that you serve from object storage or a CDN with no Node origin. An artifact you produce, not a running service. See Static / edge export.
Template part: A shared chrome document (header, footer, …) stored per site in template_parts and pulled into a template with the core.template-part block.
Template slot: A named position in a theme's template hierarchy (index, front-page, single, page, 404, …); the renderer uses the most specific slot file that exists.
TOTP: Time-based one-time password (RFC 6238) used for optional two-factor authentication on admin sign-in.
Trash: A site-scoped recycle bin. Deleted content, media, comments, and menus stay recoverable until restored or purged by the retention job.
Under construction: Anonymous view when site_public is false. Admins and editors still see the real site.
WXR: WordPress eXtended RSS — the XML export Justflows imports under Tools.