Read
Authorize by resource scope instead of using one blanket “allow all” permission.
Discover tools by work type. Before connecting, review transport, capabilities, and permission boundaries.
Third-party packages are validated against the current compatibility manifest before review_pending. Creating an install record does not imply a connection. schemaVersion 3.6 is the manifest compatibility version, not the Penguin AI Center product version.
Sign in through Penguin AI Center first. Only an Owner can submit packages or create install configuration.
Capabilities appear only after an adapter passes a real connection test and the Workspace owner grants access.
Turn interface errors, non-portable rules, interoperability problems, and permission-boundary defects into trackable records.
Use one vocabulary for names, versions, transport, and permissions so different AI systems and software do not redesign the same integration rules. schemaVersion 3.6 in the example is a compatibility field version, not the Penguin AI Center product version.
{
"schemaVersion": "3.6",
"id": "community.timeline-bridge",
"name": "Timeline Bridge",
"version": "1.0.0",
"category": "剪辑",
"transport": "local-bridge",
"capabilities": ["timeline.read", "effect.apply"],
"permissions": {
"read": ["project.timeline"],
"write": ["project.effects"],
"executeLocal": true,
"externalDataTransfer": false,
"requiresConfirmation": ["project.render"]
}
}