Variable: CAPABILITIES

const CAPABILITIES: readonly ["chat:read-active", "chat:read-unread-summary", "composer:insert-draft", "composer:read-draft", "notifications:show", "storage:local", "secrets:own", "local-network", "assistant:bar", "calls:record"]

What an extension can ask for (ADR 0004). Network access is declared host by host in network.hosts instead, and each host becomes its own grant.