Plugins

Plugins are planned as server-defined allowlisted capabilities, not arbitrary user code.

Planned rules

• plugin IDs are server-defined
• plugin configs are schema-validated
• permissions, timeouts, concurrency, and egress are controlled by SHINE SHOP DEV
• plugin behavior is audited
• server secrets are never exposed to prompts or model outputs

RTK Token Saver

RTK Token Saver is a placeholder capability pending product safety review and naming confirmation.