Optional logic and AI tools

UI-only tools need no logic runtime. Optional packaged logic exports a synchronous global run(input); declare its entry and commands in the manifest. window.tabsExtension.logic.invoke invokes the extension's own command.

Each invocation uses a disposable QuickJS worker, bounded JSON, an 8 MiB heap, 512 KiB stack, inner interrupt, and outer watchdog. Logic cannot access Node, network, workspace, credentials, or the UI bridge. Cancellation and runtime failures reject the operation.

Marking a command aiCallable also requires the ai-tools capability and a separate project grant. Tabs exposes the pure command through its project-scoped MCP integration. Start a fresh provider session after changing tool grants. Do not claim universal provider compatibility: mock wiring tests do not replace live provider verification.

Persistent background services, privileged AI operations, native binaries, and workspace mutation brokers are unsupported. External native ACP agents use a separate trust/install flow.