App model

Plugins receive an app facade that exposes supported capabilities without exposing the full internal runtime graph.

Common services

• vault: read and write vault-scoped files.
• commands: register commands users can run.
• notices: show user-visible messages.
• settings: persist plugin preferences and expose settings UI.
• events: subscribe to approved app, vault, metadata, and lifecycle events.
• metadata: query indexed note metadata when available.

The app object is a contract. Treat undocumented fields as private even when they are visible in a debugger.