capability; the handler intersects the static catalog with the caller’s
capability set and returns only the entries the caller is allowed to invoke —
entries the caller can’t use never reach the wire.
The endpoint requires authentication and workspace context (the slash palette
is workspace-scoped). A caller with no relevant grants gets an empty array,
not a 403 — the palette still opens, just with no actions in it.
i18n
Entries carry bothlabel (English) and label_cs (Czech) so the dashboard
can pick by locale without a translation step. The shape is open — additional
label_* fields may be added without breaking clients.
List Slash Commands
200 OK