Capability API’leri

Permission	Host yöntemleri	Not
`key.display`	title, image, state, success/error	Active binding context gerekir
`storage.private`	`storage.get/set/delete`	Plugin-scoped bounded kota
`network.fetch`	`network.fetch`	Declared HTTPS host/method/byte scope
`secret.manage`	`secret.has/delete`	Raw getter yoktur
`oauth`	`oauth.begin/status`	Token byte plugin mesajına girmez
`action.invoke`	`action.invoke`	İzinli provider hedefleriyle sınırlı

Key display

await client.setTitle(context.bindingInstanceId, 'Hazır');
await client.showSuccess(context.bindingInstanceId);

Static image manifest-hash doğrulamalı assetId; dynamic image bounded PNG/JPEG/WebP raster descriptorı kullanır. Raw path veya external URL kabul edilmez.

Credential lifecycle ve authenticated fetch

await client.hasSecret('serviceToken');
await client.beginOAuth('providerName');
await client.networkFetchWithCredential({
  url: 'https://api.example.com/status',
  method: 'GET',
  credential: { kind: 'secret', name: 'serviceToken' }
});

Credential reference yalnız {kind:'secret',name} veya {kind:'oauth',provider} biçimindedir. Host şifreyi kendi encrypted vaultundan çözer ve izinli HTTPS isteğine enjekte eder; raw credential plugin request/response’una girmez. Host, permission host/method/header/request/response limitlerini yine uygular.

Raw tokenı normal settings, manifest defaultu, log veya network.fetch headerına yerleştirmeyin.

Başlangıç

Temel kavramlar

Örnekler ve dağıtım

Key display

Credential lifecycle ve authenticated fetch

​Key display

​Credential lifecycle ve authenticated fetch

Key display

Credential lifecycle ve authenticated fetch