Architecture
HostApi — the single channel plugins use to talk to the host
Every LVIS plugin operates only through a one-line channel the host provides (HostApi), never touching the host's internals directly. This channel is what keeps the host and plugins cleanly isolated, so plugins can be swapped, stopped, or verified at any time.
single channel
static-manifest based
The tone of this page
This document is a general user guide. It introduces callable capabilities only at a broad category level, and does not cover actual signatures, parameters, or code locations.
Capabilities the host provides to plugins
Secure storage
A plugin can only read and write files within its own area. It cannot access another plugin's area.
Read / write user settings
Each plugin can have its own settings keys, and the user can change those values directly from the host settings screen.
Register Skill keywords
Registering natural-language phrases like "sort out meeting minutes" or "request parking" as keywords means the matching plugin is automatically suggested when the user says something similar.
Send and receive events
Plugins can send and receive signals like "meeting ended" or "new mail arrived" to and from each other, relayed by the host.
Call another plugin's tools
One plugin can borrow another plugin's capability — for example, Work Assistant calling a tool on the calendar plugin.
Call the host LLM
A plugin can use the host's LLM without holding its own LLM key. Cost and model selection are managed centrally by the host.
Open an external auth window
A plugin that needs login/OAuth opens the host's separate auth window to receive a token securely.
User confirmation dialogs
Before performing a risky action, the host shows a standard-format confirmation dialog to get user consent.
Show overlays and cards
Work progress can be shown as a card or small overlay over the chat, so it doesn't block the user from doing other things.
Look up secrets
Secrets such as API keys are retrieved securely from the OS's secure storage. They are never stored in plaintext on disk.
Effects of a single channel
- Plugins have no knowledge of the host's internal implementation. Plugins are unaffected even if the host changes its internals.
- Risky actions (sending mail, external calls, deleting files) all go through the same permission flow, giving users a consistent experience.
- Adding a new plugin never requires touching host code. The plugin just needs to declare its own capabilities.
- Every action a plugin produces is recorded in the host's audit log.
Direct access to host internals is forbidden
Plugin code directly importing the host's internal modules is blocked at LVIS's build stage. All integration is possible only through the single channel (HostApi) calls plus the plugin manifest declaration.