Changeset 0.28.0.1 (#173)

docs/ICD/extensions.md

@@ -0,0 +1,34 @@
+# Extensions
+
+Plugin system with three tiers: Browser JS (client-side), Starlark
+sandbox (server-side, future), Sidecar containers (server-side, future).
+Currently only Browser tier is implemented.
+
+### User Extensions
+
+```
+GET  /extensions                    → { "extensions": [...] }
+POST /extensions/:id/settings       ← { "enabled": true, "config": {...} }
+GET  /extensions/:id/manifest       → full manifest.json
+GET  /extensions/tools              → { "tools": [tool schema objects] }
+```
+
+### Admin Extension Management
+
+```
+GET    /admin/extensions             → { "extensions": [...] }
+POST   /admin/extensions             ← { manifest + script content }
+PUT    /admin/extensions/:id         ← updated manifest/script
+DELETE /admin/extensions/:id
+```
+
+### Asset Serving
+
+```
+GET /extensions/:id/assets/*path
+```
+
+Public (no auth required). Serves static assets (icons, CSS, JS)
+from extension bundles.
+
+---