@chainingintention/pi-web-cn 2.0.0 → 2.202610.1

package/dist/server/machines/machinePluginProxyRoutes.js

@@ -1,5 +1,9 @@
-import { machineScopedPluginId, parseMachineScopedPluginId } from "../../shared/machinePluginIds.js";
-import { isPiWebPluginId } from "../../shared/pluginIds.js";
+import { createTranslator, UserFacingError, userFacingErrorMessage } from "../../shared/i18n.js";
+import { machineScopedManifestPluginId, parseMachineScopedPluginId } from "../../shared/machinePluginIds.js";
+import { PI_WEB_PLUGIN_LIFECYCLE_VERSION } from "../../shared/apiTypes.js";
+import { isPiWebBundledPluginId, isPiWebPluginId, isReservedPiWebPluginId } from "../../shared/pluginIds.js";
+import { requirePluginBackendRevision } from "../../shared/pluginBackendProtocol.js";
+import { REQUIRED_TERMINAL_PLUGIN_ID } from "../../shared/requiredTerminalPlugin.js";
 import { RemoteMachineRequestError } from "./machineClient.js";
 import { MachineService } from "./machineService.js";
 const MACHINE_PLUGIN_MANIFEST_TIMEOUT_MS = 10_000;
@@ -12,38 +16,43 @@ const SAFE_RESPONSE_HEADERS = new Set([
     "content-security-policy",
     "x-content-type-options",
 ]);
-export function registerMachinePluginProxyRoutes(app, machines = new MachineService()) {
+export function registerMachinePluginProxyRoutes(app, machines = new MachineService(), t = createTranslator("en", {})) {
     app.get("/api/machines/:machineId/pi-web-plugins/manifest.json", async (request, reply) => {
-        if (request.params.machineId === "local")
-            return { plugins: [] };
+        if (request.params.machineId === "local") {
+            return reply.code(400).send({ error: "Local plugin manifests must use the local manifest endpoint" });
+        }
         const client = await machines.remoteClient(request.params.machineId);
         if (client === undefined)
-            return reply.code(404).send({ error: "Machine not found" });
+            return reply.code(404).send({ error: t("machineError.notFound", "Machine not found") });
         try {
             const response = await client.requestJson("GET", "/pi-web-plugins/manifest.json", undefined, { timeoutMs: MACHINE_PLUGIN_MANIFEST_TIMEOUT_MS });
-            if (response.statusCode === 404)
-                return { plugins: [] };
+            if (response.statusCode === 404) {
+                return await sendLifecycleCompatibilityError(reply, request.params.machineId, "The remote machine does not expose a versioned plugin manifest. Update and restart PI WEB on the remote machine.");
+            }
             if (response.statusCode < 200 || response.statusCode >= 300)
                 return await reply.code(response.statusCode).send(response.body);
             return rewriteRemotePluginManifest(request.params.machineId, parseRemoteManifest(response.body));
         }
         catch (error) {
+            if (error instanceof RemotePluginLifecycleCompatibilityError) {
+                return sendLifecycleCompatibilityError(reply, request.params.machineId, error.message);
+            }
             return sendGatewayError(reply, request.params.machineId, error);
         }
     });
 }
-export async function proxyMachinePluginAsset(machines, scopedPluginId, assetPath, requestUrl, reply) {
+export async function proxyMachinePluginAsset(machines, scopedPluginId, assetPath, requestUrl, reply, t = createTranslator("en", {})) {
     const remotePlugin = parseMachineScopedPluginId(scopedPluginId);
     if (remotePlugin === undefined)
         return false;
     const client = await machines.remoteClient(remotePlugin.machineId);
     if (client === undefined) {
-        await reply.code(404).send({ error: "Machine not found" });
+        await reply.code(404).send({ error: t("machineError.notFound", "Machine not found") });
         return true;
     }
     const requestPath = remotePluginAssetRequestPath(remotePlugin, assetPath, requestUrl);
     if (requestPath === undefined) {
-        await reply.code(400).send({ error: "Invalid remote PI WEB plugin asset path" });
+        await reply.code(400).send({ error: t("machineError.pluginAssetPathInvalid", "Invalid remote PI WEB plugin asset path") });
         return true;
     }
     try {
@@ -57,19 +66,21 @@ export async function proxyMachinePluginAsset(machines, scopedPluginId, assetPat
         return true;
     }
     catch (error) {
-        sendGatewayError(reply, remotePlugin.machineId, error);
+        sendGatewayError(reply, remotePlugin.machineId, error, t);
         return true;
     }
 }
 function rewriteRemotePluginManifest(machineId, manifest) {
     return {
+        lifecycleVersion: manifest.lifecycleVersion,
+        terminalMode: manifest.terminalMode,
         plugins: manifest.plugins.flatMap((plugin) => {
             const modulePath = remotePluginModulePath(plugin.id, plugin.module);
             if (modulePath === undefined)
                 return [];
             return [{
                     ...plugin,
-                    module: `../../../../pi-web-plugins/${encodeURIComponent(machineScopedPluginId(machineId, plugin.id))}/${modulePath.path}${modulePath.query}`,
+                    module: `../../../../pi-web-plugins/${encodeURIComponent(machineScopedManifestPluginId(machineId, plugin.id))}/${modulePath.path}${modulePath.query}`,
                 }];
         }),
     };
@@ -143,26 +154,97 @@ function hasControlCharacter(value) {
 function parseRemoteManifest(value) {
     if (!isRecord(value) || !Array.isArray(value["plugins"]))
         throw new Error("Invalid remote PI WEB plugin manifest");
-    return {
-        plugins: value["plugins"].map((entry) => {
-            if (!isRecord(entry) || typeof entry["id"] !== "string" || !isPiWebPluginId(entry["id"]) || typeof entry["module"] !== "string" || entry["module"] === "") {
-                throw new Error("Invalid remote PI WEB plugin manifest entry");
-            }
-            return {
-                id: entry["id"],
-                module: entry["module"],
-                ...(typeof entry["source"] === "string" ? { source: entry["source"] } : {}),
-                ...(typeof entry["scope"] === "string" ? { scope: entry["scope"] } : {}),
-                ...(parseRemoteMachineSpecific(entry["machineSpecific"])),
-            };
-        }),
-    };
+    const lifecycleVersion = parseRemoteLifecycleVersion(value["lifecycleVersion"]);
+    const terminalMode = parseRemoteTerminalMode(value["terminalMode"]);
+    const plugins = value["plugins"].map((entry) => {
+        if (!isRecord(entry) || typeof entry["id"] !== "string" || !isPiWebPluginId(entry["id"]) || typeof entry["module"] !== "string" || entry["module"] === "") {
+            throw new Error("Invalid remote PI WEB plugin manifest entry");
+        }
+        const source = typeof entry["source"] === "string" ? entry["source"] : undefined;
+        const scope = typeof entry["scope"] === "string" ? entry["scope"] : undefined;
+        if (isReservedPiWebPluginId(entry["id"])
+            && !(isPiWebBundledPluginId(entry["id"]) && source === "bundled" && scope === "bundled")) {
+            throw new Error(`Reserved remote PI WEB plugin id: ${entry["id"]}`);
+        }
+        const backendRevision = parseRemoteBackendRevision(entry["backendRevision"]);
+        const pairedRequestVersion = parseRemotePairedCapabilityVersion(entry["pairedRequestVersion"]);
+        const pairedChannelVersion = parseRemotePairedCapabilityVersion(entry["pairedChannelVersion"]);
+        if ((pairedRequestVersion !== undefined || pairedChannelVersion !== undefined) && backendRevision === undefined) {
+            throw new Error("Invalid remote PI WEB plugin manifest entry");
+        }
+        return {
+            id: entry["id"],
+            module: entry["module"],
+            ...(backendRevision === undefined ? {} : { backendRevision }),
+            ...(pairedRequestVersion === undefined ? {} : { pairedRequestVersion }),
+            ...(pairedChannelVersion === undefined ? {} : { pairedChannelVersion }),
+            ...(source === undefined ? {} : { source }),
+            ...(scope === undefined ? {} : { scope }),
+            ...(parseRemoteMachineSpecific(entry["machineSpecific"])),
+        };
+    });
+    const ids = new Set();
+    for (const plugin of plugins) {
+        if (ids.has(plugin.id))
+            throw new Error(`Duplicate remote PI WEB plugin id: ${plugin.id}`);
+        ids.add(plugin.id);
+    }
+    const terminal = plugins.find(({ id }) => id === REQUIRED_TERMINAL_PLUGIN_ID);
+    if (terminalMode === "required") {
+        if (terminal === undefined || plugins[0] !== terminal || terminal.machineSpecific !== true) {
+            throw new RemotePluginLifecycleCompatibilityError("The remote required Terminal plugin is missing or out of order. Update and restart PI WEB on the remote machine.");
+        }
+        if (terminal.backendRevision === undefined || terminal.pairedRequestVersion !== 1 || terminal.pairedChannelVersion !== 1) {
+            throw new RemotePluginLifecycleCompatibilityError("The remote required Terminal plugin is incompatible. Update and restart PI WEB on the remote machine.");
+        }
+    }
+    else if (terminal !== undefined) {
+        throw new RemotePluginLifecycleCompatibilityError("The remote recovery manifest must not publish Terminal. Update and restart PI WEB on the remote machine.");
+    }
+    return { lifecycleVersion, terminalMode, plugins };
+}
+function parseRemoteTerminalMode(value) {
+    if (value === "required" || value === "recovery-disabled")
+        return value;
+    throw new RemotePluginLifecycleCompatibilityError("The remote plugin manifest has no compatible Terminal mode. Update and restart PI WEB on the remote machine.");
+}
+function parseRemoteLifecycleVersion(value) {
+    if (value === undefined) {
+        throw new RemotePluginLifecycleCompatibilityError("The remote plugin manifest has no lifecycle version. Update and restart PI WEB on the remote machine.");
+    }
+    if (value !== PI_WEB_PLUGIN_LIFECYCLE_VERSION) {
+        throw new RemotePluginLifecycleCompatibilityError(`Unsupported remote plugin lifecycle version: ${formatUnknownValue(value)}`);
+    }
+    return value;
+}
+class RemotePluginLifecycleCompatibilityError extends Error {
+    constructor() {
+        super(...arguments);
+        this.name = "RemotePluginLifecycleCompatibilityError";
+    }
+}
+function parseRemoteBackendRevision(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        return requirePluginBackendRevision(value);
+    }
+    catch {
+        throw new Error("Invalid remote PI WEB plugin manifest entry");
+    }
+}
+function parseRemotePairedCapabilityVersion(value) {
+    if (value === undefined)
+        return undefined;
+    if (value !== 1)
+        throw new Error("Invalid remote PI WEB plugin manifest entry");
+    return value;
 }
 function parseRemoteMachineSpecific(value) {
     if (value === undefined)
         return {};
     if (typeof value !== "boolean")
-        throw new Error("Invalid remote PI WEB plugin manifest entry");
+        throw new UserFacingError("machineError.pluginManifestEntryInvalid", "Invalid remote PI WEB plugin manifest entry");
     return { machineSpecific: value };
 }
 function applySafeHeaders(reply, headers) {
@@ -174,16 +256,34 @@ function applySafeHeaders(reply, headers) {
         reply.header(name, value);
     }
 }
-function sendGatewayError(reply, machineId, error) {
+function sendLifecycleCompatibilityError(reply, machineId, detail) {
+    return reply.code(409).send({
+        error: "Remote machine plugin lifecycle is incompatible",
+        code: "plugin-lifecycle-incompatible",
+        machineId,
+        detail,
+    });
+}
+function sendGatewayError(reply, machineId, error, t = createTranslator("en", {})) {
     const statusCode = error instanceof RemoteMachineRequestError ? error.statusCode : 502;
-    const label = statusCode === 504 ? "Remote machine timeout" : "Remote machine unavailable";
+    const label = statusCode === 504 ? t("machineError.timeout", "Remote machine timeout") : t("machineError.unavailable", "Remote machine unavailable");
     return reply.code(statusCode).send({
         error: label,
         machineId,
         statusCode,
-        detail: error instanceof Error ? error.message : String(error),
+        detail: userFacingErrorMessage(error, t),
     });
 }
+function formatUnknownValue(value) {
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean" || typeof value === "bigint" || typeof value === "symbol" || typeof value === "function" || value === null || value === undefined)
+        return String(value);
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return Object.prototype.toString.call(value);
+    }
+}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }

package/dist/server/machines/machinePluginProxyRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"machinePluginProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/machines/machinePluginProxyRoutes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAmC,MAAM,kCAAkC,CAAC;AACtI,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAsB,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAkBrD,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAElD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,MAAM;IACN,yBAAyB;IACzB,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC,CAAC,GAAoB,EAAE,WAAuC,IAAI,cAAc,EAAE;IAChI,GAAG,CAAC,GAAG,CAAoC,uDAAuD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3H,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAEjE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEtF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChJ,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG;gBAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YACxD,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG;gBAAE,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9H,OAAO,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAoC,EAAE,cAAsB,EAAE,SAAiB,EAAE,UAAkB,EAAE,KAAmB;IACpK,MAAM,YAAY,GAAG,0BAA0B,CAAC,cAAc,CAAC,CAAC;IAChE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;;YAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,SAAiB,EAAE,QAA8B;IACpF,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACxC,OAAO,CAAC;oBACN,GAAG,MAAM;oBACT,MAAM,EAAE,8BAA8B,kBAAkB,CAAC,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE;iBAC9I,CAAC,CAAC;QACL,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,MAAc;IAC9D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,MAAM,GAAG,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,sHAAsH;QACtH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9F,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,YAAwC,EAAE,SAAiB,EAAE,UAAkB;IACnH,MAAM,IAAI,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,OAAO,mBAAmB,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,gCAAgC,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gCAAgC,CAAC,UAAkB;IAC1D,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnH,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1J,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;gBACvB,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;aAC1D,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC/F,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,OAAsD;IACnG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC7D,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,SAAiB,EAAE,KAAc;IAC9E,MAAM,UAAU,GAAG,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IACvF,MAAM,KAAK,GAAG,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,4BAA4B,CAAC;IAC3F,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACjC,KAAK,EAAE,KAAK;QACZ,SAAS;QACT,UAAU;QACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"machinePluginProxyRoutes.js","sourceRoot":"","sources":["../../../src/server/machines/machinePluginProxyRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,EAAmB,MAAM,sBAAsB,CAAC;AAElH,OAAO,EAAE,6BAA6B,EAAE,0BAA0B,EAAmC,MAAM,kCAAkC,CAAC;AAC9I,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7G,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,2BAA2B,EAA2B,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,yBAAyB,EAAsB,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAuBrD,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAElD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,MAAM;IACN,yBAAyB;IACzB,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,gCAAgC,CAAC,GAAoB,EAAE,WAAuC,IAAI,cAAc,EAAE,EAAE,IAAgB,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5K,GAAG,CAAC,GAAG,CAAoC,uDAAuD,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC3H,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAElH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,kCAAkC,EAAE,CAAC,CAAC;YAChJ,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAChC,OAAO,MAAM,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,kHAAkH,CAAC,CAAC;YACpM,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG;gBAAE,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9H,OAAO,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uCAAuC,EAAE,CAAC;gBAC7D,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAoC,EAAE,cAAsB,EAAE,SAAiB,EAAE,UAAkB,EAAE,KAAmB,EAAE,IAAgB,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;IAChN,MAAM,YAAY,GAAG,0BAA0B,CAAC,cAAc,CAAC,CAAC;IAChE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAE7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,4BAA4B,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,qCAAqC,EAAE,yCAAyC,CAAC,EAAE,CAAC,CAAC;QAC3H,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;;YAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAgB,CAAC,KAAK,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,SAAiB,EAAE,QAA8B;IACpF,OAAO;QACL,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACxC,OAAO,CAAC;oBACN,GAAG,MAAM;oBACT,MAAM,EAAE,8BAA8B,kBAAkB,CAAC,6BAA6B,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE;iBACtJ,CAAC,CAAC;QACL,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,MAAc;IAC9D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,MAAM,GAAG,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC;IAClE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,aAAa,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,sHAAsH;QACtH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9F,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,YAAwC,EAAE,SAAiB,EAAE,UAAkB;IACnH,MAAM,IAAI,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,OAAO,mBAAmB,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,gCAAgC,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,OAAO,KAAK,EAAE;YAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gCAAgC,CAAC,UAAkB;IAC1D,IAAI,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACjD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1H,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACnH,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1J,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;eACnC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC7E,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC/F,MAAM,oBAAoB,GAAG,kCAAkC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS,CAAC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAChH,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;YACvB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;YAC7D,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC;YACvE,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;SAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3F,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,2BAA2B,CAAC,CAAC;IAC9E,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YAC3F,MAAM,IAAI,uCAAuC,CAAC,kHAAkH,CAAC,CAAC;QACxK,CAAC;QACD,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,oBAAoB,KAAK,CAAC,IAAI,QAAQ,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;YACzH,MAAM,IAAI,uCAAuC,CAAC,uGAAuG,CAAC,CAAC;QAC7J,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,uCAAuC,CAAC,0GAA0G,CAAC,CAAC;IAChK,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,IAAI,uCAAuC,CAAC,8GAA8G,CAAC,CAAC;AACpK,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,uCAAuC,CAAC,uGAAuG,CAAC,CAAC;IAC7J,CAAC;IACD,IAAI,KAAK,KAAK,+BAA+B,EAAE,CAAC;QAC9C,MAAM,IAAI,uCAAuC,CAAC,gDAAgD,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,uCAAwC,SAAQ,KAAK;IAA3D;;QACW,SAAI,GAAG,yCAAyC,CAAC;IAC5D,CAAC;CAAA;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC,CAAC,KAAc;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,6CAA6C,CAAC,CAAC;IACpJ,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,OAAsD;IACnG,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC7D,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAmB,EAAE,SAAiB,EAAE,MAAc;IAC7F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,KAAK,EAAE,iDAAiD;QACxD,IAAI,EAAE,+BAA+B;QACrC,SAAS;QACT,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAmB,EAAE,SAAiB,EAAE,KAAc,EAAE,IAAgB,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;IAC1H,MAAM,UAAU,GAAG,KAAK,YAAY,yBAAyB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IACvF,MAAM,KAAK,GAAG,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,EAAE,4BAA4B,CAAC,CAAC;IACrJ,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;QACjC,KAAK,EAAE,KAAK;QACZ,SAAS;QACT,UAAU;QACV,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACjP,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/machines/machineProxyRoutes.js

@@ -1,7 +1,12 @@
+import { createTranslator, userFacingErrorMessage } from "../../shared/i18n.js";
 import { FEDERATED_HTTP_ROUTES, FEDERATED_WEBSOCKET_ROUTES, WORKSPACE_FILE_PREVIEW_ROUTE_PATH } from "../../shared/federatedRoutes.js";
+import { PAIRED_PLUGIN_BACKEND_CHANNEL_ROUTE_PATHS, pluginBackendScopeFromRoute, PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES, } from "../../shared/pluginBackendProtocol.js";
 import { mergeSelectedMachineConfig, parsePiWebConfigResponseBody, parseSelectedMachineConfigRequest, selectedMachineConfigResponse } from "../configRoutes.js";
+import { pluginBackendChannelProxyAdmissionPool, } from "../plugins/pluginBackendChannelProxyAdmission.js";
+import { coordinatePluginBackendChannelProxy, PluginBackendChannelProxyConnectionError, } from "../plugins/pluginBackendChannelProxyCoordinator.js";
 import { requestCancellation } from "../requestCancellation.js";
-import { bridgeSockets } from "../webSocketBridge.js";
+import { isSessionImageMimeType } from "../sessions/sessionMediaIndex.js";
+import { bridgeSockets, markPluginBackendChannelUpgradeRequest } from "../webSocketBridge.js";
 import { applyWorkspaceFilePreviewErrorResponsePolicy, applyWorkspaceFilePreviewResponsePolicy } from "../workspaces/filePreviewResponseHeaders.js";
 import { workspaceFilePreviewErrorResponsePolicy, workspaceFilePreviewResponsePolicy } from "../workspaces/filePreviewResponsePolicy.js";
 import { DEFAULT_REMOTE_REQUEST_TIMEOUT_MS, RemoteMachineRequestError } from "./machineClient.js";
@@ -18,18 +23,18 @@ const SAFE_RESPONSE_HEADERS = new Set([
     "content-security-policy",
     "x-content-type-options",
 ]);
-export function registerMachineProxyRoutes(app, machines = new MachineService()) {
+export function registerMachineProxyRoutes(app, machines = new MachineService(), pluginChannelAdmissions = pluginBackendChannelProxyAdmissionPool(app), t = createTranslator("en", {})) {
     for (const spec of REMOTE_HTTP_ROUTES) {
         app.route({
             method: spec.method,
             url: `/api/machines/:machineId${spec.path}`,
-            ...(("bodyLimit" in spec) ? { bodyLimit: spec.bodyLimit } : {}),
+            ...("bodyLimit" in spec ? { bodyLimit: spec.bodyLimit } : {}),
             handler: async (request, reply) => {
                 const cancellation = "propagateCancellation" in spec
                     ? requestCancellation(request, reply)
                     : undefined;
                 try {
-                    return await proxyHttpRequest(machines, spec, request.params.machineId, request.method, request.url, request.body, request.headers["content-type"], reply, cancellation?.signal);
+                    return await proxyHttpRequest(machines, spec, request.params.machineId, request.method, request.url, request.body, request.headers["content-type"], reply, cancellation?.signal, t);
                 }
                 finally {
                     cancellation?.dispose();
@@ -38,30 +43,58 @@ export function registerMachineProxyRoutes(app, machines = new MachineService())
         });
     }
     for (const path of REMOTE_WEBSOCKET_ROUTES) {
-        app.get(`/api/machines/:machineId${path}`, { websocket: true }, async (socket, request) => {
-            await proxyWebSocket(machines, request.params.machineId, request.url, socket);
+        const isPluginBackendChannel = PAIRED_PLUGIN_BACKEND_CHANNEL_ROUTE_PATHS.includes(path);
+        app.get(`/api/machines/:machineId${path}`, {
+            websocket: true,
+            ...(isPluginBackendChannel
+                ? {
+                    onRequest(request, _reply, done) {
+                        markPluginBackendChannelUpgradeRequest(request.raw);
+                        done();
+                    },
+                }
+                : {}),
+        }, async (socket, request) => {
+            await proxyWebSocket(machines, request.params.machineId, request.url, socket, isPluginBackendChannel
+                ? {
+                    admissions: pluginChannelAdmissions,
+                    scope: {
+                        authorityId: request.params.machineId,
+                        pluginId: request.params.pluginId,
+                        scope: pluginBackendScopeFromRoute(request.params),
+                        projectId: request.params.projectId,
+                        workspaceId: request.params.workspaceId,
+                    },
+                }
+                : undefined);
         });
     }
 }
-async function proxyHttpRequest(machines, spec, machineId, method, requestUrl, body, contentType, reply, signal) {
+async function proxyHttpRequest(machines, spec, machineId, method, requestUrl, body, contentType, reply, signal, t = createTranslator("en", {})) {
+    const sessionMedia = spec.path === "/sessions/:sessionId/media/:mediaId";
+    const mcpAuth = spec.path.startsWith("/auth/mcp/") || spec.path.startsWith("/sessions/:sessionId/mcp/auth");
+    if (mcpAuth)
+        reply.header("cache-control", "no-store");
+    if (sessionMedia)
+        applySessionMediaResponsePolicy(reply);
     if (machineId === "local") {
-        return reply.code(501).send({ error: "Local machine route is not registered for this endpoint" });
+        return reply.code(501).send({ error: t("machineError.localRouteMissing", "Local machine route is not registered for this endpoint") });
     }
     const client = await machines.remoteClient(machineId);
     if (client === undefined) {
-        return reply.code(404).send({ error: "Machine not found" });
+        return reply.code(404).send({ error: t("machineError.notFound", "Machine not found") });
     }
     try {
         const remotePath = remoteApiPath(machineId, requestUrl);
         if (spec.path === "/config")
-            return await proxySelectedMachineConfigRequest(client, machineId, method, remotePath, body, reply);
+            return await proxySelectedMachineConfigRequest(client, machineId, method, remotePath, body, reply, t);
         let preview;
         try {
             preview = remoteFilePreviewRequest(spec, remotePath);
         }
         catch (error) {
             applyWorkspaceFilePreviewErrorResponsePolicy(reply);
-            return await reply.code(400).send({ error: errorMessage(error) });
+            return await reply.code(400).send({ error: userFacingErrorMessage(error, t) });
         }
         const previewPolicy = preview?.policy;
         const responseBodyLimit = preview === undefined ? spec.responseBodyLimit : preview.responseBodyLimit;
@@ -70,6 +103,8 @@ async function proxyHttpRequest(machines, spec, machineId, method, requestUrl, b
         const upstream = requestOptions === undefined
             ? await client.request(method, remotePath, body)
             : await client.request(method, remotePath, body, requestOptions);
+        if (sessionMedia)
+            return await proxySessionMediaResponse(reply, upstream);
         const responseBody = upstream.body === undefined || responseBodyLimit === undefined
             ? upstream.body
             : await readBoundedRemoteBody(upstream.body, responseBodyLimit, remainingResponseTimeout(startedAt, spec.timeoutMs), signal);
@@ -78,16 +113,20 @@ async function proxyHttpRequest(machines, spec, machineId, method, requestUrl, b
                 error: "Remote machine plugin lifecycle is incompatible",
                 code: "plugin-lifecycle-incompatible",
                 machineId,
-                detail: "The remote machine does not support workspace provider backend requests. Update and restart PI WEB on the remote machine.",
+                detail: "The remote machine does not support this plugin backend route. Update and restart PI WEB on the remote machine.",
             });
         }
         reply.code(upstream.statusCode);
         applySafeHeaders(reply, upstream.headers);
+        if (mcpAuth)
+            reply.header("cache-control", "no-store");
         if (previewPolicy !== undefined) {
-            applyWorkspaceFilePreviewResponsePolicy(reply, isSuccessfulStatus(upstream.statusCode) ? previewPolicy : workspaceFilePreviewErrorResponsePolicy());
+            const enforcedPolicy = isSuccessfulStatus(upstream.statusCode) ? previewPolicy : workspaceFilePreviewErrorResponsePolicy();
+            applyWorkspaceFilePreviewResponsePolicy(reply, enforcedPolicy);
         }
         if (responseBody === undefined)
             return await reply.send();
+        // A bounded body is authoritative over whatever length the remote claimed.
         if (Buffer.isBuffer(responseBody))
             reply.header("Content-Length", String(responseBody.byteLength));
         else if (preview !== undefined)
@@ -96,74 +135,123 @@ async function proxyHttpRequest(machines, spec, machineId, method, requestUrl, b
     }
     catch (error) {
         if (isSelectedMachineConfigRequestError(error))
-            return reply.code(400).send({ error: errorMessage(error) });
+            return reply.code(400).send({ error: userFacingErrorMessage(error, t) });
         if (spec.path === WORKSPACE_FILE_PREVIEW_ROUTE_PATH)
             applyWorkspaceFilePreviewErrorResponsePolicy(reply);
-        return sendGatewayError(reply, machineId, error);
+        return sendGatewayError(reply, machineId, error, t);
+    }
+}
+function applySessionMediaResponsePolicy(reply) {
+    reply
+        .header("Content-Security-Policy", "sandbox; default-src 'none'; img-src 'self'; base-uri 'none'; form-action 'none'; frame-ancestors 'self'")
+        .header("X-Content-Type-Options", "nosniff")
+        .header("Content-Disposition", "inline");
+}
+function proxySessionMediaResponse(reply, upstream) {
+    const successful = isSuccessfulStatus(upstream.statusCode);
+    const contentType = firstHeaderValue(upstream.headers["content-type"])?.split(";", 1)[0]?.trim().toLowerCase();
+    if ((successful && isSessionImageMimeType(contentType))
+        || (!successful && contentType === "application/json" && upstream.body !== undefined)) {
+        applySafeHeaders(reply, upstream.headers);
+        // Remote headers cannot weaken the gateway's media response policy.
+        applySessionMediaResponsePolicy(reply);
+        reply.type(successful ? contentType : "application/json; charset=utf-8");
+        return reply.code(upstream.statusCode).send(upstream.body);
     }
+    if (upstream.body !== undefined)
+        destroyReadable(upstream.body);
+    if (successful)
+        throw new RemoteMachineRequestError("Remote machine returned an unsupported session image MIME type", 502);
+    return reply.code(upstream.statusCode).send({ error: "Remote session media request failed", statusCode: upstream.statusCode });
 }
-async function proxySelectedMachineConfigRequest(client, machineId, method, remotePath, body, reply) {
+async function proxySelectedMachineConfigRequest(client, machineId, method, remotePath, body, reply, t) {
     if (method === "GET") {
-        return sendSelectedMachineConfigResponse(reply, await client.requestJson("GET", remotePath), machineId);
+        return sendSelectedMachineConfigResponse(reply, await client.requestJson("GET", remotePath), machineId, t);
     }
     if (method === "PUT") {
         const patch = parseSelectedMachineConfigRequest(configPayload(body), "portable");
         const currentResponse = await client.requestJson("GET", remotePath);
         if (!isSuccessfulStatus(currentResponse.statusCode))
-            return sendUpstreamJsonResponse(reply, currentResponse, machineId);
+            return sendUpstreamJsonResponse(reply, currentResponse, machineId, t);
         const current = parsePiWebConfigResponseBody(currentResponse.body, "Remote machine config response");
         const merged = mergeSelectedMachineConfig(current.config, patch);
-        const updateResponse = await client.requestJson("PUT", remotePath, { config: merged });
-        return sendSelectedMachineConfigResponse(reply, updateResponse, machineId, patch.agent);
+        return sendSelectedMachineConfigResponse(reply, await client.requestJson("PUT", remotePath, { config: merged }), machineId, t);
     }
-    return reply.code(405).send({ error: "Method not allowed" });
+    return reply.code(405).send({ error: t("machineError.methodNotAllowed", "Method not allowed") });
 }
 function configPayload(body) {
     return isRecord(body) ? body["config"] : undefined;
 }
-function sendSelectedMachineConfigResponse(reply, upstream, machineId, expectedAgentProfile) {
+function sendSelectedMachineConfigResponse(reply, upstream, machineId, t) {
     if (!isSuccessfulStatus(upstream.statusCode))
-        return sendUpstreamJsonResponse(reply, upstream, machineId);
+        return sendUpstreamJsonResponse(reply, upstream, machineId, t);
     const response = parsePiWebConfigResponseBody(upstream.body, "Remote machine config response");
-    if (expectedAgentProfile !== undefined && !sameAgentProfile(response.config.agent, expectedAgentProfile)) {
-        return reply.code(409).send({
-            error: "Remote machine did not persist the requested agent profile",
-            machineId,
-            detail: "Update and restart PI WEB on the remote machine before changing its agent profile.",
-        });
-    }
     reply.code(upstream.statusCode);
     applySafeHeaders(reply, upstream.headers);
     return reply.send(selectedMachineConfigResponse(response));
 }
-function sameAgentProfile(actual, expected) {
-    return actual !== undefined && actual.command === expected.command && actual.dir === expected.dir;
-}
-function sendUpstreamJsonResponse(reply, upstream, machineId) {
+function sendUpstreamJsonResponse(reply, upstream, machineId, t) {
     reply.code(upstream.statusCode);
     applySafeHeaders(reply, upstream.headers);
-    return reply.send(upstream.body ?? { error: "Remote machine config request failed", machineId, statusCode: upstream.statusCode });
+    return reply.send(upstream.body ?? { error: t("machineError.configRequestFailed", "Remote machine config request failed"), machineId, statusCode: upstream.statusCode });
 }
 function isSuccessfulStatus(statusCode) {
     return statusCode >= 200 && statusCode < 300;
 }
-async function proxyWebSocket(machines, machineId, requestUrl, socket) {
+async function proxyWebSocket(machines, machineId, requestUrl, socket, boundedPluginChannel, t = createTranslator("en", {})) {
+    if (boundedPluginChannel !== undefined) {
+        proxyBoundedPluginChannel(machines, machineId, requestUrl, socket, boundedPluginChannel);
+        return;
+    }
     if (machineId === "local") {
-        socket.close(1011, "Local machine route is not registered for this endpoint");
+        socket.close(1011, t("machineError.localRouteMissing", "Local machine route is not registered for this endpoint"));
         return;
     }
     const client = await machines.remoteClient(machineId);
     if (client === undefined) {
-        socket.close(1008, "Machine not found");
+        socket.close(1008, t("machineError.notFound", "Machine not found"));
         return;
     }
     try {
         bridgeSockets(socket, client.connectWebSocket(remoteApiPath(machineId, requestUrl)));
     }
     catch {
-        socket.close(1011, "Remote machine unavailable");
+        socket.close(1011, t("machineError.unavailable", "Remote machine unavailable"));
     }
 }
+function proxyBoundedPluginChannel(machines, machineId, requestUrl, socket, context) {
+    void coordinatePluginBackendChannelProxy({
+        downstream: socket,
+        admissions: context.admissions,
+        scope: context.scope,
+        async connectUpstream(signal) {
+            if (machineId === "local") {
+                throw new PluginBackendChannelProxyConnectionError(1011, "Local machine route is not registered for this endpoint");
+            }
+            let client;
+            try {
+                client = await machines.remoteClient(machineId);
+            }
+            catch (error) {
+                if (signal.aborted)
+                    throw error;
+                throw new PluginBackendChannelProxyConnectionError(1011, "Remote machine unavailable", { cause: error });
+            }
+            signal.throwIfAborted();
+            if (client === undefined) {
+                throw new PluginBackendChannelProxyConnectionError(1008, "Machine not found");
+            }
+            try {
+                return client.connectWebSocket(remoteApiPath(machineId, requestUrl), {
+                    maxPayload: PLUGIN_BACKEND_CHANNEL_DATA_FRAME_MAX_BYTES,
+                });
+            }
+            catch (error) {
+                throw new PluginBackendChannelProxyConnectionError(1011, "Remote machine unavailable", { cause: error });
+            }
+        },
+    });
+}
 function remoteApiPath(machineId, requestUrl) {
     const machinePrefix = `/api/machines/${encodeURIComponent(machineId)}`;
     const stripped = requestUrl.startsWith(machinePrefix) ? requestUrl.slice(machinePrefix.length) : requestUrl;
@@ -181,6 +269,8 @@ function remoteFilePreviewRequest(spec, remotePath) {
     const download = downloadValue === "1" || downloadValue === "true";
     return {
         policy: workspaceFilePreviewResponsePolicy(path, { download }),
+        // Inline previews keep the local inline contract even when the remote is
+        // hostile or racy; attachment downloads stay deliberately uncapped.
         responseBodyLimit: download ? undefined : spec.responseBodyLimit,
     };
 }
@@ -198,7 +288,9 @@ function proxyRequestOptions(spec, body, contentType, signal) {
     return Object.keys(options).length === 0 ? undefined : options;
 }
 function isUnknownRemotePluginBackendRoute(spec, method, remotePath, statusCode, body) {
-    if (!spec.path.startsWith("/plugin-backends/") || statusCode !== 404 || !(body instanceof Buffer))
+    if (!spec.path.startsWith("/paired-plugin-backends/")
+        || statusCode !== 404
+        || !(body instanceof Buffer))
         return false;
     try {
         const value = JSON.parse(body.toString("utf8"));
@@ -243,6 +335,8 @@ function readBoundedRemoteBody(body, maxBytes, timeoutMs, signal) {
             fail(new RemoteMachineRequestError("Remote machine response body timed out", 504));
         }, timeoutMs);
         timeout.unref();
+        // An inbound disconnect must release the upstream connection instead of
+        // draining a remote body nobody is waiting for any more.
         const onAbort = () => {
             fail(new RemoteMachineRequestError("Remote machine request cancelled", 502));
         };
@@ -289,7 +383,7 @@ function readBoundedRemoteBody(body, maxBytes, timeoutMs, signal) {
             resolve(Buffer.concat(chunks));
         };
         const onError = (error) => {
-            fail(new RemoteMachineRequestError(errorMessage(error), 502));
+            fail(new RemoteMachineRequestError(userFacingErrorMessage(error, createTranslator("en", {})), 502));
         };
         body.on("data", onData);
         body.once("end", onEnd);
@@ -308,20 +402,17 @@ function destroyReadable(body) {
 function isSelectedMachineConfigRequestError(error) {
     return error instanceof Error && error.message.startsWith("PI WEB selected-machine config");
 }
-function errorMessage(error) {
-    return error instanceof Error ? error.message : String(error);
-}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function sendGatewayError(reply, machineId, error) {
+function sendGatewayError(reply, machineId, error, t) {
     const statusCode = error instanceof RemoteMachineRequestError ? error.statusCode : 502;
-    const label = statusCode === 504 ? "Remote machine timeout" : "Remote machine unavailable";
+    const label = statusCode === 504 ? t("machineError.timeout", "Remote machine timeout") : t("machineError.unavailable", "Remote machine unavailable");
     return reply.code(statusCode).send({
         error: label,
         machineId,
         statusCode,
-        detail: errorMessage(error),
+        detail: userFacingErrorMessage(error, t),
     });
 }
 //# sourceMappingURL=machineProxyRoutes.js.map