From b0591e2caa0dc5c62927f7b85dbf826a50618a03 Mon Sep 17 00:00:00 2001
From: ymote <151983+ymote@users.noreply.github.com>
Date: Sat, 26 Sep 2026 10:03:00 -0700
Subject: [PATCH] Admit scoped Matrix and Octos mini-app service capabilities

---
 crates/app-policy/src/manifest.rs | 50 +++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)

diff --git a/crates/app-policy/src/manifest.rs b/crates/app-policy/src/manifest.rs
index bc2dd90..aa50d08 100644
--- a/crates/app-policy/src/manifest.rs
+++ b/crates/app-policy/src/manifest.rs
@@ -28,6 +28,56 @@ pub const KNOWN_CAPABILITIES: &[&str] = &[
     "location",
     "camera",
     "clipboard",
+    // Host adapters enforce these exact service names after per-instance consent.
+    "matrix.account_info",
+    "matrix.device",
+    "matrix.dm_find",
+    "matrix.dm_open",
+    "matrix.event",
+    "matrix.favorite",
+    "matrix.ignored_users",
+    "matrix.invite",
+    "matrix.invite_respond",
+    "matrix.invites",
+    "matrix.join",
+    "matrix.low_priority",
+    "matrix.mark_unread",
+    "matrix.older_messages",
+    "matrix.permalink",
+    "matrix.pin",
+    "matrix.pinned_events",
+    "matrix.power_levels",
+    "matrix.profile",
+    "matrix.react",
+    "matrix.read_messages",
+    "matrix.read_receipt",
+    "matrix.read_receipts",
+    "matrix.reply",
+    "matrix.room_info",
+    "matrix.room_members",
+    "matrix.room_preview",
+    "matrix.room_threads",
+    "matrix.rooms_info",
+    "matrix.rooms_list",
+    "matrix.rooms_messages",
+    "matrix.rooms_search",
+    "matrix.rooms_send",
+    "matrix.search_room",
+    "matrix.search_rooms",
+    "matrix.send_message",
+    "matrix.space_info",
+    "matrix.space_rooms",
+    "matrix.spaces",
+    "matrix.successor",
+    "matrix.thread_replies",
+    "matrix.thread_reply",
+    "matrix.typing",
+    "matrix.unread",
+    "matrix.user_profile",
+    "octos.session.open",
+    "octos.session.history",
+    "octos.turn.start",
+    "octos.turn.interrupt",
     // Show pictures from any public https host, not just `network.hosts`:
     // a feed reader's thumbnails come from wherever its stories link.
     "images",