Capability browser
Search the complete public catalog before designing a plugin. Every capability is independently versioned; every dependency belongs in the requires section of the manifest.
29 capabilities
Capability
libraryDomains · v 1.0.0- Plugin can
- Read books, files, metadata, TOCs, collections, and import or remove library items.
- Authority
library:read / library:write- Host keeps
- Library invariants, event-sourced writes, files, and projections.
readingDomains · v 1.0.0- Plugin can
- Inspect the active session and navigate, update location, progress, and reading time.
- Authority
reading:read / reading:write- Host keeps
- Reader lifecycle, progress semantics, and committed events.
annotationsDomains · v 1.0.0- Plugin can
- Read or change highlights and notes through canonical commands.
- Authority
annotations:read / annotations:write- Host keeps
- Validation, attribution, persistence, and event ordering.
conversationsDomains · v 1.0.0- Plugin can
- Read book and global thread summaries.
- Authority
conversations:read- Host keeps
- Conversation writes, prompt assembly, and memory.
settingsDomains · v 1.0.0- Plugin can
- Discover, read, update, and subscribe to explicitly granted setting paths.
- Authority
settingsAccess- Host keeps
- Catalog, targets, validation, persistence, and change effects.
selectionActionsContributions · v 1.0.0- Plugin can
- Add a command to selection and annotation menus.
- Authority
none- Host keeps
- Menu placement, invocation UI, loading, and accessibility.
headerActionsContributions · v 1.0.0- Plugin can
- Add a reader or library toolbar action with a host-rendered view.
- Authority
none- Host keeps
- Placement, navigation, popovers, pages, and focus.
commandsContributions · v 1.0.0- Plugin can
- Add an explicit command-palette command.
- Authority
none- Host keeps
- Registry, palette, shortcuts, and result presentation.
settingsOptionsContributions · v 1.0.0- Plugin can
- Resolve dynamic options for one declared plugin setting.
- Authority
none- Host keeps
- Form rendering, fallback input, and value validation.
voiceProvidersContributions · v 1.0.0- Plugin can
- List voices and synthesize encoded audio for read-aloud.
- Authority
none- Host keeps
- Playback, pacing, prefetch, highlighting, and fallback.
contentProvidersContributions · v 1.0.0- Plugin can
- Load sections for virtual books such as RSS feeds.
- Authority
none- Host keeps
- Library binding, reading model, navigation, and presentation.
readerModesContributions · v 1.0.0- Plugin can
- Supply bounded sentence or paragraph segmentation. Currently bundled-only.
- Authority
reader:modes- Host keeps
- Reader controls, lifecycle, rendering, and navigation.
agentToolsContributions · v 1.0.0- Plugin can
- Register a namespaced tool the reading assistant may call.
- Authority
agent:tools- Host keeps
- Orchestration, tool visibility, approvals, and transcript UI.
agentContextProvidersContributions · v 1.0.0- Plugin can
- Return bounded reference blocks for the current user turn.
- Authority
agent:context- Host keeps
- Provenance, clipping, prompt placement, and lifetime.
agentRetrievalProvidersContributions · v 1.0.0- Plugin can
- Expose a searchable plugin-owned source as a namespaced agent tool.
- Authority
agent:retrieval- Host keeps
- Query schema, limits, result clipping, and tool description.
memoryCandidateProvidersContributions · v 1.0.0- Plugin can
- Propose facts, preferences, insights, or summaries after a turn.
- Authority
agent:memory- Host keeps
- Scope checks, deduplication, acceptance, and durable memory writes.
themesContributions · v 1.0.0- Plugin can
- Supply semantic app and reader theme data.
- Authority
ui:themes- Host keeps
- Validation, CSS generation, selection, and application.
fontsContributions · v 1.0.0- Plugin can
- Supply approved font metadata and bundled font assets.
- Authority
ui:themes- Host keeps
- File validation, loading, picker entries, and active selection.
storageServices · v 1.0.0- Plugin can
- Use plugin-scoped KV and document collections.
- Authority
none- Host keeps
- Namespace isolation, persistence, snapshots, and change events.
secretsServices · v 1.0.0- Plugin can
- Store and retrieve credentials from plugin-scoped secret slots.
- Authority
none- Host keeps
- Encryption, non-disclosure, and namespace isolation.
uiServices · v 1.0.0- Plugin can
- Show a host toast or open the host save/export flow.
- Authority
none- Host keeps
- Presentation, path choice, and platform integration.
schedulesServices · v 1.0.0- Plugin can
- Bind work to a recurring task declared in the manifest.
- Authority
none- Host keeps
- Cadence, launch catch-up, overlap prevention, and disposal.
sessionServices · v 1.0.0- Plugin can
- Subscribe to bounded facts about the current reading session.
- Authority
none- Host keeps
- Event source, payload bounds, and subscription lifecycle.
networkServices · v 1.0.0- Plugin can
- Make HTTP requests through the native host client.
- Authority
service:network- Host keeps
- Permission enforcement, transport, and response bridge.
llmServices · v 1.0.0- Plugin can
- Make bounded one-shot text or structured model calls.
- Authority
service:llm- Host keeps
- Provider configuration, credentials, schema handling, and limits.
clipboardServices · v 1.0.0- Plugin can
- Write text to the system clipboard.
- Authority
service:clipboard- Host keeps
- Platform call and permission enforcement.
viewsSchemas · v 1.0.0- Plugin can
- Return markdown, lists, forms, details, and bounded block trees.
- Authority
none- Host keeps
- Components, HTML safety, layout, accessibility, and navigation.
settingsSchemas · v 1.0.0- Plugin can
- Declare host-rendered plugin setting fields.
- Authority
none- Host keeps
- Form behavior, validation, storage routing, and secret handling.
themesSchemas · v 1.0.0- Plugin can
- Declare semantic theme tokens and bundled font metadata.
- Authority
none- Host keeps
- Grammar validation, generated CSS, loading, and selection.
How to read the catalog
- Authority names the permission or exact Settings grant needed at invocation time.
- None means no extra installation permission, not an undocumented ambient power.
- Host keeps marks the boundary the plugin cannot replace or bypass.
- The version beside each entry comes directly from the host's canonical capability catalog.
readerModes remains restricted to bundled plugins while its privileged reader contract settles. A manifest may name only cataloged capabilities; the host still filters the visible runtime view by actor, permission, version, and lifecycle phase.
Permission preview
Paste a manifest to separate user authority from compatibility and operational declarations. This mirrors the meaning of installation consent; it does not replace the repository validator or prove that a plugin can activate.
Review preview
User authority · semantic permissions
annotations:read— Read highlights and notes.agent:retrieval— Expose a searchable plugin source to the assistant.service:network— Make host-mediated network requests.
User authority · exact Settings grants
- Discover
appearance.theme - Read
appearance.theme
Compatibility · not permissions
- Domain
annotations^1.0.0 - Domain
settings^1.0.0 - Contribution
commands^1.0.0 - Contribution
agentRetrievalProviders^1.0.0 - Service
storage^1.0.0 - Service
schedules^1.0.0 - Service
network^1.0.0 - Schema
settings^1.0.0
Operational declarations · not permissions
- Private data schema:
1 - 1 recurring task
What the install dialog actually grants
Semantic permissions and exact settingsAccess entries grant authority. The shipping consent dialog shows both in plain language. Capability requirements, schedules, schema version, themes, and fonts are useful review context, but they are not silently relabeled as permissions.
This preview is intentionally local and stateless. The next developer tooling step is an in-app actor-view and lifecycle inspector backed by the same runtime catalogs, with update-time permission diffs and exact reasons for unavailable capabilities.