JWeBot/docs/capability-catalog.md

Capability Catalog

Status: API version 1.

Capabilities are denied by default and declared in plugin.toml.

Commands

Manifest field:

commands = ["/hello"]

Rules:

• command names begin with one /;
• one extension owns a reviewed namespace;
• duplicates and undeclared registrations are rejected;
• command extensions declare at least one command;
• enrichment and scheduled extensions cannot declare commands.

Command plugins also carry non-capability display metadata:

description = "Return a local greeting"
help = ["/hello [name]"]

The Kernel uses signed description/help metadata for automatic help and Host health validation. Display metadata never grants storage, network, or service access.

Storage

Manifest field:

storage = true

The host exposes only a private key/value namespace for that extension.

It does not expose:

• filesystem paths;
• another extension's state;
• the edge ledger;
• OCR history;
• environment variables.

Storage quotas and persistence format remain kernel-owned.

Approved Network Profiles

Manifest field:

network_profiles = ["steam-api"]

An approved profile owns:

• allowed hosts and paths;
• credentials;
• proxy policy;
• timeout;
• cache;
• response-size limit;
• error mapping.

Extensions receive profile names, not secrets. The current Steam behavior is the reference: Mihomo is mandatory and proxy failure never falls back to direct network access.

No network profile is currently part of the public example extension.

Approved Service Profiles

Manifest field:

service_profiles = ["coin"]

Service profiles are narrow Kernel-owned operations used by reviewed local adapters. They do not expose raw Ledger or provider objects.

Current profiles:

• person-memory
• dice
• coin
• random-number
• draw-lot
• daily-fortune
• guess-number
• rock-paper-scissors
• scan-ranking
• repeat-ranking
• history-search
• server-status
• jwebot-version
• debug-telemetry
• steam-presence

person-memory, server-status, jwebot-version, and debug-telemetry are official-authored. The others are authored by JWeBot. Kernel direct commands (/功能列表, /帮助, /help, /余额) have no service profile. Other extensions do not receive these profiles by default. Every profile request requires capability review, and an unavailable broker fails closed.

Facts

FactWriter and ExtensionResult.facts accept bounded fact candidates.

The kernel still controls:

• sensitive-content filtering;
• group and person scope;
• evidence requirements;
• expiry;
• deduplication;
• cloud projection.

An extension cannot directly edit profile memory.

Scheduling

The scheduler accepts a named future intent. The kernel owns the clock, durable queue, idempotency key, target group binding, and eventual delivery checks.

API version 1 does not permit arbitrary cron expressions or direct timers owned by extension code.

Logging

The extension logger accepts short messages and structured fields.

Logs must not contain:

• message bodies;
• group names;
• reply text;
• credentials;
• environment values;
• raw HTTP payloads.

Explicitly Unavailable

The SDK intentionally has no capability for:

• GUI or VNC;
• group selection;
• raw OCR;
• SQLite;
• filesystem;
• environment;
• subprocess;
• SSH or Docker;
• unrestricted sockets or HTTP;
• direct model credentials.