Capabilities

luastra.json · schema v2

capabilities[]

Explicit host privileges.

Read this page when you need to apply Capabilities, verify its exact contract, and adapt the example without bypassing validation or host boundaries.

Required array of unique host capability names. ui.render permits rendering; content.pick and content.upload permit the bounded host-owned image workflow; storage.get and storage.set permit storage operations.
Importing luastra/host does not grant privileges; listing a capability does not import a module or guarantee target-host support.
Startup rendering uses a separate restricted ui.render-only profile and does not inherit application capabilities.

"capabilities": [
  "ui.render",
  "content.pick",
  "content.upload"
]