PowerUp API

This is the same PUAPI guide that ships in the browser at stealth://powerup-guidelines (Settings → Power Ups → View API Guidelines). One .spu file holds the manifest, scripts, icons, and optional UI. PowerUps are not Chrome extensions.

Outline of that same API, fitted to this docs layout:

Quick start

manifest.json

{
  "id": "com.author.my-powerup",
  "name": "My PowerUp",
  "version": "1.0.0",
  "author": "Your Name",
  "description": "What it does",
  "permissions": ["tabs", "ui.toolbar", "storage"],
  "main": "main.js",
  "icon": "icon.png",
  "toolbar": { "title": "My PowerUp", "icon": "icon.png" },
  "content_scripts": [
    { "matches": ["*://*/*"], "js": ["content.js"], "css": ["content.css"], "run_at": "document_idle" }
  ],
  "settings": {
    "title": "My PowerUp",
    "ownTab": true,
    "schema": [
      { "type": "toggle", "key": "enabledFeature", "label": "Enable feature", "default": true }
    ]
  },
  "min_api": 2
}

id must be 3-64 characters: letters, numbers, ., _, -.

Permissions

Install is rejected if the pack tries to reach license activation, VPN connect/disconnect, AI API keys, password vault export, native shell, or arbitrary filesystem writes. Paid features stay gated by the browser.

PUAPI object

main.js gets a global PUAPI. Calls are Promise-based except PUAPI.log and PUAPI.meta. main.js runs as an async function body (top-level await is allowed). It is not an ES module: do not use import / export.

try {
  await PUAPI.ui.addToolbarButton({ title: 'Hello' });
  PUAPI.events.on('toolbar-click', async () => {
    await PUAPI.ui.showNotification('Hello from a Stealth PowerUp');
  });
} catch (e) {
  PUAPI.log(String(e && e.stack || e));
}

PowerUp Settings tabs

Use a named tab under Power Ups when options should sit next to PowerUp Settings. ownTab: true (default) adds a nav item named title. ownTab: false stacks the section on the shared PowerUp Settings page. Schema values persist in PowerUp storage (__settings). Listen with PUAPI.events.on('settings-changed', ...).

Appearance themes

A PowerUp can ship themes. They appear in Settings → Appearance while the PowerUp is enabled. Declare themes in the manifest (ui.theme) or call PUAPI.ui.registerTheme. Theme CSS should override Stealth CSS variables. base picks the built-in sheet underneath: dark, light, stealth, stealth-glass, stealth-float. Disabling the PowerUp removes its themes.

Cut-corner, purple, panels

.spu packaging

A .spu is either a JSON envelope exported by Stealth:

{
  "format": "stealth-powerup",
  "formatVersion": 1,
  "manifest": { },
  "files": { "main.js": "...", "icon.png": "data:image/png;base64,..." }
}

or a ZIP archive renamed to .spu with manifest.json at the root. Users send one file. No unpacked folders. No Chrome Web Store packaging.

Business via Browse packs

A company .spu can plug into Business via Browse and talk to the HTTP(S) server they host. It can add blocks, report events, and add console UI. It cannot loosen policy, change the PIN, or unenroll a seat. Permission: business.

AI PowerUp Creator

Enable PowerUp Creator in the AI Assistant. Creator/dev PowerUps quarantine after an unexpected exit or repeated runtime errors. Clear quarantine from Settings → Power Ups.

Minimal example

// manifest.json
{
  "id": "com.example.hello",
  "name": "Hello Stealth",
  "version": "1.0.0",
  "permissions": ["ui.toolbar", "ui.notify"],
  "main": "main.js",
  "toolbar": { "title": "Hello" }
}

// main.js
try {
  await PUAPI.ui.addToolbarButton({ title: 'Hello' });
  PUAPI.events.on('toolbar-click', async () => {
    await PUAPI.ui.showNotification('Hello from a Stealth PowerUp');
  });
} catch (e) {
  PUAPI.log(String(e && e.stack || e));
}

Related

PowerUps Catalog · Plugins · StealthAI · Business via Browse