Host API

Preview: Host API v1 is a capability boundary, not a direct import of Desktop services. Build against a released SDK version only when the package is published; do not treat this page as permission to import application code.

The host exposes typed domain operations only after an active permission grant. The current contract includes safe track summaries, field-level metadata proposals, private namespaced state, and bounded diagnostics. The broader manifest permission families describe the intended API surface; some operations remain future until their host implementation is explicitly released.

Ownership rules

• The host, never a plugin, writes the library and applies metadata.
• A proposal identifies fields, source and evidence. The user selects fields; the host records provenance and can undo an applied change.
• Host storage is namespaced by plugin ID and quota limited. Plugins cannot enumerate another plugin's state.
• The host owns cancellation, timeouts, rate limits, logging, crash handling, job scheduling and UI routing.

The bridge deliberately does not expose a database connection, local file path, filesystem, process, Electron globals, raw HTTP server, application config, pairing state or mobile credentials. Treat a denied or unavailable capability as a normal result and return structured, bounded data.