@maudecode/talaria-web 1.17.2 → 1.18.0

package/dist/tools/dashboard-plugins.js

@@ -0,0 +1,188 @@
+/**
+ * WebUI dashboard plugins (Python `api/plugins.py`): `<plugins>/<name>/dashboard/manifest.json` discovery, the
+ * Settings enable gate (`dashboard_plugins`, default off), and the bytes behind `/plugins/plugin.css`, the sandboxed
+ * panel document, plugin static assets, and tab pages. A disabled or unknown plugin serves nothing (null → 404).
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { escapeHtml } from '../text/markdown.js';
+import { htmlWithHeadTag } from '../workspace/media.js';
+import { join, resolve } from 'node:path';
+import { isDict } from '../config/agent-config.js';
+import { pyBool } from '../settings.js';
+import { baseHrefFor, isServerOwned, isSpaPath } from '../spa.js';
+import { ExtensionError, readContainedFile, text } from './extensions.js';
+const NAME_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+/** A clean same-origin path: one leading `/` (never `//`), no quotes, whitespace, query, or fragment. */
+const TAB_PATH_RE = /^\/(?!\/)[A-Za-z0-9._~/-]{0,255}$/;
+const PANEL_RE = /^\/dashboard-plugins\/([a-z][a-z0-9_-]{0,63})\/index\.html$/;
+const SHARED_ASSETS = new Set(['plugin.css']);
+const ASSET_MIME = {
+    '.js': 'application/javascript; charset=utf-8', '.css': 'text/css; charset=utf-8', '.html': 'text/html; charset=utf-8',
+    '.png': 'image/png', '.svg': 'image/svg+xml', '.ico': 'image/x-icon', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif', '.webp': 'image/webp', '.woff': 'font/woff', '.woff2': 'font/woff2', '.ttf': 'font/ttf', '.otf': 'font/otf',
+    '.map': 'application/json; charset=utf-8', '.txt': 'text/plain; charset=utf-8',
+};
+/** Add `<base href>` unless the document declares its own. */
+function withBase(body, href) {
+    return /<base\b/i.test(body.toString('utf8')) ? body : htmlWithHeadTag(body, `<base href="${escapeHtml(href)}">`);
+}
+const html = (body) => ({ body: Buffer.isBuffer(body) ? body : Buffer.from(body, 'utf8'), contentType: ASSET_MIME['.html'] ?? '' });
+export class DashboardPlugins {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    base() {
+        const raw = (this.deps.env.HERMES_WEBUI_PLUGINS_DIR ?? '').trim();
+        return resolve(raw || join(this.deps.hermesHome, 'plugins'));
+    }
+    /**
+     * Every valid plugin in name order; the first claimant of a name or tab path wins. A tab path the SPA or a
+     * server-owned prefix answers is refused, so a plugin can never shadow the app or `/api`.
+     * ponytail: rescans per call (a readdir plus small manifest reads); cache by directory mtime if plugin routes get hot.
+     */
+    list() {
+        let entries;
+        try {
+            entries = readdirSync(this.base()).sort();
+        }
+        catch {
+            return [];
+        }
+        const out = [];
+        for (const entry of entries) {
+            const dir = join(this.base(), entry, 'dashboard');
+            let manifest;
+            try {
+                if (!statSync(dir).isDirectory())
+                    continue;
+                manifest = JSON.parse(readFileSync(join(dir, 'manifest.json'), 'utf8'));
+            }
+            catch {
+                continue;
+            }
+            if (!isDict(manifest))
+                continue;
+            // Python `manifest.get("name") or entry.name` and `tab.get("path", f"/{name}")`.
+            const name = manifest.name || entry;
+            if (typeof name !== 'string' || !NAME_RE.test(name))
+                continue;
+            const tab = isDict(manifest.tab) ? manifest.tab : {};
+            const rawTabPath = 'path' in tab ? tab.path : `/${name}`;
+            // Request paths arrive without a trailing slash, so the stored tab path drops it too.
+            const tabPath = typeof rawTabPath === 'string' ? rawTabPath.replace(/(?<=.)\/+$/, '') : rawTabPath;
+            if (typeof tabPath !== 'string' || !TAB_PATH_RE.test(tabPath) || isServerOwned(tabPath) || isSpaPath(tabPath))
+                continue;
+            if (out.some((p) => p.name === name || p.tabPath === tabPath))
+                continue;
+            out.push({ name, manifest, tabPath, root: dir });
+        }
+        return out;
+    }
+    /** Python `_dashboard_plugin_enabled`: opt-in per plugin under `dashboard_plugins` in settings.json. */
+    enabled(name) {
+        try {
+            const prefs = this.deps.settings.load().dashboard_plugins;
+            return isDict(prefs) && pyBool(prefs[name]);
+        }
+        catch {
+            return false;
+        }
+    }
+    /** The Settings > Extensions switch: `SettingsStore.save` merges this one key into `dashboard_plugins`. */
+    async setEnabled(name, enabled) {
+        if (typeof enabled !== 'boolean')
+            throw new ExtensionError('enabled must be a boolean', 400);
+        await this.deps.settings.save({ dashboard_plugins: { [name]: enabled } });
+    }
+    enabledPlugin(name) {
+        if (!this.enabled(name))
+            return null;
+        return this.list().find((p) => p.name === name) ?? null;
+    }
+    /** Python `_from_dashboard_plugin`: one panel entry per plugin for `/api/extensions/manifests`. */
+    manifests() {
+        return this.list().map(({ name, manifest }) => {
+            const tab = isDict(manifest.tab) ? manifest.tab : {};
+            return {
+                id: name, name: text(manifest.label || manifest.name, 80) || name, version: text(manifest.version, 40), description: text(manifest.description, 300),
+                source: 'plugin', enabled: this.enabled(name), can_toggle: true, panel: `dashboard-plugins/${name}/index.html`,
+                nav: { label: text(tab.name || manifest.label || manifest.name, 40) || name },
+                capabilities: ['settings', 'storage', 'toast', 'session'], permissions: {}, settings_schema: [], theme: null, tts: null, sidecar: null, legacy_injection: false, warnings: [],
+            };
+        });
+    }
+    /** `/plugins/<rel>`: only the shared `plugin.css` under the plugin base. */
+    sharedAsset(rel) {
+        if (!SHARED_ASSETS.has(rel))
+            return null;
+        const found = readContainedFile(this.base(), rel);
+        return found ? { body: found.body, contentType: ASSET_MIME['.css'] ?? '' } : null;
+    }
+    /**
+     * Python `serve_plugin_static`: built assets under `dist/` or `static/` with an allowlisted extension, no dotfiles.
+     * Any other path resolves inside `dist/`, so a `dist/index.html` served as the panel can use its own relative URLs.
+     */
+    asset(name, rel) {
+        const plugin = this.enabledPlugin(name);
+        if (!plugin)
+            return null;
+        const top = rel.split('/')[0];
+        return this.builtAsset(plugin, top === 'dist' || top === 'static' ? rel : `dist/${rel}`);
+    }
+    builtAsset(plugin, rel) {
+        const top = rel.split('/')[0];
+        if (top !== 'dist' && top !== 'static')
+            return null;
+        const ext = rel.slice(rel.lastIndexOf('.')).toLowerCase();
+        const contentType = rel.includes('.') ? ASSET_MIME[ext] : undefined;
+        if (!contentType)
+            return null;
+        const found = readContainedFile(plugin.root, rel);
+        return found ? { body: found.body, contentType } : null;
+    }
+    /** `/dashboard-plugins/<name>/index.html` → plugin name, else null. */
+    static panelName(path) {
+        return PANEL_RE.exec(path)?.[1] ?? null;
+    }
+    /**
+     * Python `_serve_dashboard_plugin_panel`: `dist/index.html` as-is, or for a legacy IIFE plugin (`dist/index.js`,
+     * optional `dist/style.css`) a wrapper that mounts it beside the extension SDK.
+     */
+    panel(name) {
+        const plugin = this.enabledPlugin(name);
+        if (!plugin)
+            return null;
+        const own = this.builtAsset(plugin, 'dist/index.html');
+        if (own)
+            return own;
+        if (!this.builtAsset(plugin, 'dist/index.js'))
+            return null;
+        const css = this.builtAsset(plugin, 'dist/style.css') ? '<link rel="stylesheet" href="dist/style.css">' : '';
+        return html('<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">' +
+            `<title>${escapeHtml(text(plugin.manifest.label, 80) || name)}</title>${css}</head><body><div id="root"></div><div id="app"></div>` +
+            '<script src="../../static/dist/extension-sdk.js"></script><script src="dist/index.js"></script></body></html>');
+    }
+    /** The tab page at a plugin's `tab.path`: `dist/index.html`, the plugin's `static/index.html`, or an IIFE shell. */
+    tabPage(path) {
+        const listed = this.list().find((p) => p.tabPath === path);
+        const plugin = listed && this.enabled(listed.name) ? listed : null;
+        if (!plugin)
+            return null;
+        const own = this.builtAsset(plugin, 'dist/index.html');
+        // The tab page resolves relative URLs like the panel document beside it, at any mount depth.
+        if (own)
+            return html(withBase(own.body, `${baseHrefFor(path)}dashboard-plugins/${plugin.name}/`));
+        const page = readContainedFile(join(plugin.root, '..'), 'static/index.html');
+        if (page)
+            return html(page.body);
+        if (!this.builtAsset(plugin, 'dist/index.js'))
+            return null;
+        const base = `/dashboard-plugins/${plugin.name}/`;
+        const css = text(plugin.manifest.css, 300);
+        const cssTag = css ? `<link rel="stylesheet" href="${escapeHtml(base + css)}">` : '';
+        return html(`<!doctype html>\n<html lang="en">\n<head>\n  <meta charset="utf-8">\n  <title>${escapeHtml(text(plugin.manifest.label, 80) || plugin.name)}</title>\n  ${cssTag}\n</head>\n` +
+            `<body>\n  <div id="pluginPageContainer"></div>\n  <script src="${base}dist/index.js"></script>\n</body>\n</html>\n`);
+    }
+}
+//# sourceMappingURL=dashboard-plugins.js.map

package/dist/tools/dashboard-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-plugins.js","sourceRoot":"","sources":["../../src/tools/dashboard-plugins.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,MAAM,EAAa,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACjE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAEzE,MAAM,OAAO,GAAG,yBAAyB,CAAA;AACzC,yGAAyG;AACzG,MAAM,WAAW,GAAG,mCAAmC,CAAA;AACvD,MAAM,QAAQ,GAAG,6DAA6D,CAAA;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAA;AAC7C,MAAM,UAAU,GAA2B;IACzC,KAAK,EAAE,uCAAuC,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,0BAA0B;IACtH,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IACjH,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU;IAChI,MAAM,EAAE,iCAAiC,EAAE,MAAM,EAAE,2BAA2B;CAC/E,CAAA;AAMD,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnH,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAqB,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AAEhK,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;IAAG,CAAC;IAE1D,IAAI;QACF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACjE,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YAAC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAA;QAAC,CAAC;QACrE,MAAM,GAAG,GAAa,EAAE,CAAA;QACxB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;YACjD,IAAI,QAAiB,CAAA;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;oBAAE,SAAQ;gBAC1C,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;YACzE,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,SAAQ;YAC/B,iFAAiF;YACjF,MAAM,IAAI,GAAY,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAA;YAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;YACpD,MAAM,UAAU,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;YACxD,sFAAsF;YACtF,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;YAClG,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACvH,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC;gBAAE,SAAQ;YACvE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,wGAAwG;IACxG,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAA;YACzD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,2GAA2G;IAC3G,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAgB;QAC7C,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAA;QAC5F,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IAEO,aAAa,CAAC,IAAY;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACpC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAA;IACzD,CAAC;IAED,mGAAmG;IACnG,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;YACpD,OAAO;gBACL,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC;gBACpJ,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,IAAI,aAAa;gBAC9G,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;gBAC7E,YAAY,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;aAC9K,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,4EAA4E;IAC5E,WAAW,CAAC,GAAW;QACrB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACnF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAY,EAAE,GAAW;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAA;IAC1F,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,GAAW;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QACnD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACzD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACnE,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;QAC7B,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACjD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,SAAS,CAAC,IAAY;QAC3B,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACtD,IAAI,GAAG;YAAE,OAAO,GAAG,CAAA;QACnB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5G,OAAO,IAAI,CACT,iIAAiI;YACjI,UAAU,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,wDAAwD;YACnI,+GAA+G,CAChH,CAAA;IACH,CAAC;IAED,oHAAoH;IACpH,OAAO,CAAC,IAAY;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QAClE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACtD,6FAA6F;QAC7F,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACjG,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAA;QAC5E,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,IAAI,GAAG,sBAAsB,MAAM,CAAC,IAAI,GAAG,CAAA;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,gCAAgC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QACpF,OAAO,IAAI,CACT,iFAAiF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,aAAa;YAC7K,kEAAkE,IAAI,8CAA8C,CACrH,CAAA;IACH,CAAC;CACF"}

package/dist/tools/extensions.d.ts

@@ -16,12 +16,22 @@ export interface ExtensionDeps {
 export declare const validId: (v: unknown) => v is string;
 export declare function fullyUnquote(path: string): string;
 export declare function isSafeRelativePath(rel: string): boolean;
+/**
+ * Read `<root>/<rel>` for a static route: `rel` must be a clean relative path (no dot segments or dotfiles), and the
+ * read is an anchored, symlink-free open, so a link inside the root cannot expose its target. Python
+ * `(root / rel).resolve()`: a symlinked file is served when its target stays inside the root, never otherwise.
+ */
+export declare function readContainedFile(root: string, rel: string): {
+    body: Buffer;
+    file: string;
+} | null;
 /**
  * Python `_normalize_loopback_sidecar_origin` (`urlsplit`, not WHATWG): scheme + literal loopback host + optional
  * numeric port, nothing else — no path (not even `/`), no query, no fragment, no userinfo, no host aliases.
  */
 export declare function normalizeLoopbackOrigin(value: unknown): string | null;
 export declare function normalizeProxyPath(value: unknown): string | null;
+export declare const text: (v: unknown, max?: number) => string;
 export declare class ExtensionService {
     private readonly deps;
     private registryCache;
@@ -52,6 +62,8 @@ export declare class ExtensionService {
     /** Python `get_extension_config()["enabled"]`: true whenever the extension root directory exists (a manifest is optional). */
     enabledSync(): boolean;
     status(): Promise<Dict>;
+    /** The status payload plus the manifest and sidecar records it was built from, so `manifests()` reads the same load. */
+    private snapshot;
     private loaded;
     private mutateState;
     setEnabled(idRaw: unknown, enabled: unknown): Promise<Dict>;
@@ -84,7 +96,7 @@ export declare class ExtensionService {
         contentType: string;
         html: boolean;
     } | null;
-    /** Python `api/extension_manifests.build_manifests` (extension entries only; dashboard plugins were dropped). */
+    /** Python `api/extension_manifests.build_manifests` extension entries (the manifests route appends dashboard plugins). */
     manifests(): Promise<{
         protocol_version: 1;
         manifests: Dict[];

package/dist/tools/extensions.js

@@ -9,6 +9,7 @@ import { atomicWriteText } from '../fs/atomic.js';
 import { readZip } from '../workspace/unzip.js';
 import { isDict } from '../config/agent-config.js';
 import { str } from '../util.js';
+import { SKIN_TOKEN_NAMES, SKIN_VALUE_RE } from '@maudecode/talaria-web-contracts';
 export class ExtensionError extends Error {
     status;
     constructor(message, status = 400) {
@@ -34,6 +35,9 @@ const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);
 const ALLOWED_ASSET_PREFIXES = ['/extensions/', '/static/'];
 const ALLOWED_DOTFILES = new Set(['.gitkeep', '.gitignore', '.gitattributes', '.env.example']);
 export const EXTENSION_MIME = { css: 'text/css', js: 'application/javascript', html: 'text/html', svg: 'image/svg+xml', png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg', ico: 'image/x-icon', gif: 'image/gif', webp: 'image/webp', woff: 'font/woff', woff2: 'font/woff2', ttf: 'font/ttf', otf: 'font/otf', wasm: 'application/wasm' };
+const SKIN_TOKENS = new Set(SKIN_TOKEN_NAMES);
+/** Skin keys and TTS engine ids share the frontend contract's slug. */
+const DECLARATION_ID_RE = /^[a-z0-9][a-z0-9_-]{0,31}$/;
 const TEXT_MIME = new Set(['text/css', 'application/javascript', 'text/html', 'image/svg+xml', 'text/plain']);
 export const validId = (v) => typeof v === 'string' && ID_RE.test(v.trim());
 const warn = (d, code, source) => { if (d && !d.warnings.some((w) => w.code === code && w.source === source))
@@ -83,6 +87,41 @@ function isSafeAssetUrl(value) {
             return isSafeRelativePath(decoded.slice(prefix.length));
     return false;
 }
+/**
+ * Read `<root>/<rel>` for a static route: `rel` must be a clean relative path (no dot segments or dotfiles), and the
+ * read is an anchored, symlink-free open, so a link inside the root cannot expose its target. Python
+ * `(root / rel).resolve()`: a symlinked file is served when its target stays inside the root, never otherwise.
+ */
+export function readContainedFile(root, rel) {
+    if (!isSafeRelativePath(rel))
+        return null;
+    const anchor = resolvePathLikePython(root);
+    let file = resolve(anchor, rel);
+    if (!file.startsWith(anchor + sep))
+        return null;
+    const real = resolvePathLikePython(file);
+    if (real !== file) {
+        if (!real.startsWith(anchor + sep))
+            return null;
+        file = real;
+    }
+    let fd;
+    try {
+        fd = openAnchoredFd(anchor, file, { wantDir: false });
+    }
+    catch {
+        return null;
+    }
+    try {
+        return fstatSync(fd).isFile() ? { body: readFileSync(fd), file } : null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
 /**
  * Python `_normalize_loopback_sidecar_origin` (`urlsplit`, not WHATWG): scheme + literal loopback host + optional
  * numeric port, nothing else — no path (not even `/`), no query, no fragment, no userinfo, no host aliases.
@@ -144,7 +183,7 @@ export function normalizeProxyPath(value) {
     const segments = decoded.split('/').slice(1);
     return segments.length && segments.every((s) => s && s !== '.' && s !== '..') ? candidate : null;
 }
-const text = (v, max = 160) => (typeof v === 'string' ? v.replaceAll(/[\x00-\x1f\x7f]/g, '').trim().slice(0, max) : '');
+export const text = (v, max = 160) => (typeof v === 'string' ? v.replaceAll(/[\x00-\x1f\x7f]/g, '').trim().slice(0, max) : '');
 const entryText = (e, k) => (typeof e[k] === 'string' ? e[k].trim() : '');
 const storageOwned = (e) => isDict(e.permissions) && isDict(e.permissions.storage) && e.permissions.storage.owned === true;
 function settingsSchema(entry) {
@@ -268,6 +307,28 @@ function sidecarFromEntry(entry, d) {
     }
     return { id: entryText(entry, 'id'), name: entryText(entry, 'name'), type: 'loopback', origin, health_path: healthPath, health_url: `${origin}${healthPath}`, proxy_auth: proxyAuth };
 }
+/**
+ * A manifest `theme` reduced to the frontend skin contract: allowlisted tokens whose values pass the shared value check,
+ * keyed `<extension-id>:<key>` so it never collides with a built-in skin or another extension's skin.
+ */
+function themeFromEntry(raw, id) {
+    if (!isDict(raw) || typeof raw.key !== 'string' || !DECLARATION_ID_RE.test(raw.key))
+        return null;
+    const name = text(raw.name, 40);
+    const tokens = isDict(raw.tokens) ? Object.fromEntries(Object.entries(raw.tokens).filter(([k, v]) => SKIN_TOKENS.has(k) && typeof v === 'string' && SKIN_VALUE_RE.test(v))) : {};
+    if (!name || !Object.keys(tokens).length)
+        return null;
+    const colors = Array.isArray(raw.colors) ? raw.colors.filter((c) => typeof c === 'string' && SKIN_VALUE_RE.test(c)).slice(0, 3) : null;
+    return { key: `${id}:${raw.key}`, name, ...(raw.scheme === 'light' || raw.scheme === 'dark' ? { scheme: raw.scheme } : {}), ...(colors ? { colors } : {}), tokens };
+}
+function ttsFromEntry(raw) {
+    if (!isDict(raw) || typeof raw.id !== 'string' || !DECLARATION_ID_RE.test(raw.id))
+        return null;
+    const label = text(raw.label, 60);
+    return label ? { id: raw.id, label } : null;
+}
+/** Entries the gallery loader read from `<root>/<id>/`, keyed by object so a manifest can never claim gallery provenance. */
+const galleryFolders = new WeakMap();
 export class ExtensionService {
     deps;
     registryCache = null;
@@ -437,10 +498,11 @@ export class ExtensionService {
         for (const id of Object.keys(installed).sort()) {
             if (!validId(id))
                 continue;
-            const file = join(root, id, 'manifest.json');
+            // `manifest.json` wins; a gallery zip may ship only `extension.json` (docs/EXTENSIONS.md).
             let manifest;
             try {
-                if (!existsSync(file) || !statSync(file).isFile()) {
+                const file = ['manifest.json', 'extension.json'].map((name) => join(root, id, name)).find((p) => existsSync(p) && statSync(p).isFile());
+                if (!file) {
                     warn(d, 'gallery_manifest_missing', 'gallery');
                     continue;
                 }
@@ -457,17 +519,26 @@ export class ExtensionService {
             }
             const withBase = (entry) => {
                 const copy = { ...entry };
+                // Paths already rooted at the id (the `extensions.json` shape, as in the shipped example) are not prefixed twice.
+                const rebase = (v) => {
+                    if (typeof v !== 'string' || !v.trim() || /^[a-z]+:|^\/\/|^\//i.test(v.trim()))
+                        return v;
+                    return v.trim().startsWith(`${id}/`) ? v.trim() : `${id}/${v.trim()}`;
+                };
                 for (const key of ['scripts', 'stylesheets'])
                     if (Array.isArray(copy[key]))
-                        copy[key] = copy[key].map((v) => (typeof v === 'string' && v.trim() && !/^[a-z]+:|^\/\/|^\//i.test(v.trim()) ? `${id}/${v.trim()}` : v));
+                        copy[key] = copy[key].map(rebase);
+                if (typeof copy.panel === 'string')
+                    copy.panel = rebase(copy.panel.trim().replace(/^(\.\/)+/, ''));
+                galleryFolders.set(copy, id);
                 return copy;
             };
             if (isDict(manifest)) {
                 const top = { id };
-                for (const key of ['name', 'enabled', 'scripts', 'stylesheets', 'sidecar', 'permissions', 'settings_schema'])
+                for (const key of ['name', 'enabled', 'version', 'description', 'panel', 'nav', 'capabilities', 'scripts', 'stylesheets', 'sidecar', 'theme', 'tts', 'permissions', 'settings_schema'])
                     if (key in manifest)
                         top[key] = manifest[key];
-                if (['scripts', 'stylesheets', 'sidecar', 'permissions', 'settings_schema'].some((k) => k in top))
+                if (['panel', 'scripts', 'stylesheets', 'sidecar', 'theme', 'tts', 'permissions', 'settings_schema'].some((k) => k in top))
                     entries.push(withBase(top));
             }
             for (const entry of manifestEntries(manifest)) {
@@ -650,9 +721,9 @@ export class ExtensionService {
                         break;
                     }
         }
-        const { records } = await this.sidecarRecords(manifest, disabled, state, d);
+        const { records, byId } = await this.sidecarRecords(manifest, disabled, state, d);
         Object.assign(status, { loaded: true, status: str(status.status) || 'loaded', script_count: scripts.length, stylesheet_count: stylesheets.length, sidecar_count: records.length });
-        return { scripts, stylesheets, sidecars: records };
+        return { scripts, stylesheets, sidecars: records, sidecarsById: byId };
     }
     /** Python `get_extension_status`. */
     /** Python `get_extension_config()["enabled"]` for the bootstrap feature flag: a valid root with a loadable manifest. */
@@ -661,6 +732,10 @@ export class ExtensionService {
         return this.root() !== null;
     }
     async status() {
+        return (await this.snapshot()).status;
+    }
+    /** The status payload plus the manifest and sidecar records it was built from, so `manifests()` reads the same load. */
+    async snapshot() {
         const d = { warnings: [] };
         const envDir = (this.deps.env.HERMES_WEBUI_EXTENSION_DIR ?? '').trim();
         const root = this.root();
@@ -670,20 +745,20 @@ export class ExtensionService {
         if (envDir && !root)
             warn(d, 'extension_dir_unavailable', 'extension_dir');
         if (!root) {
-            return { enabled: false, extension_dir_configured: true, extension_dir_valid: false, script_urls: [], stylesheet_urls: [], sidecars: [], counts: { script_urls: 0, stylesheet_urls: 0, sidecars: 0, manifest_extensions: 0, user_disabled: 0 }, manifest: { configured: manifestConfigured, loaded: false, status: manifestConfigured ? 'extension_disabled' : 'not_configured', entry_count: 0, script_count: 0, stylesheet_count: 0, sidecar_count: 0 }, extensions: [], warnings: d.warnings };
+            return { manifest: null, assetBase: '', sidecarsById: new Map(), status: { enabled: false, extension_dir_configured: true, extension_dir_valid: false, script_urls: [], stylesheet_urls: [], sidecars: [], counts: { script_urls: 0, stylesheet_urls: 0, sidecars: 0, manifest_extensions: 0, user_disabled: 0 }, manifest: { configured: manifestConfigured, loaded: false, status: manifestConfigured ? 'extension_disabled' : 'not_configured', entry_count: 0, script_count: 0, stylesheet_count: 0, sidecar_count: 0 }, extensions: [], warnings: d.warnings } };
         }
         const [manifest, status] = this.loadManifest(root, d);
         const consentIds = new Set(Object.keys(state.sidecar_proxy_consents));
         const ext = manifest !== null ? this.extensionState(manifest, disabled, d, consentIds) : { extensions: [], knownIds: new Set(), manifestDisabled: new Set() };
-        const urls = manifest !== null ? await this.manifestUrls(manifest, status, disabled, state, d) : { scripts: [], stylesheets: [], sidecars: [] };
+        const urls = manifest !== null ? await this.manifestUrls(manifest, status, disabled, state, d) : { scripts: [], stylesheets: [], sidecars: [], sidecarsById: new Map() };
         const scriptUrls = this.envUrls('HERMES_WEBUI_EXTENSION_SCRIPT_URLS', urls.scripts.length ? urls.scripts : null, d);
         const stylesheetUrls = this.envUrls('HERMES_WEBUI_EXTENSION_STYLESHEET_URLS', urls.stylesheets.length ? urls.stylesheets : null, d);
         const publicStatus = Object.fromEntries(Object.entries(status).filter(([k]) => !k.startsWith('_')));
-        return {
-            enabled: true, extension_dir_configured: true, extension_dir_valid: true, script_urls: scriptUrls, stylesheet_urls: stylesheetUrls, sidecars: urls.sidecars,
-            counts: { script_urls: scriptUrls.length, stylesheet_urls: stylesheetUrls.length, sidecars: urls.sidecars.length, manifest_extensions: ext.extensions.length, user_disabled: [...disabled].filter((id) => ext.knownIds.has(id)).length },
-            manifest: publicStatus, extensions: ext.extensions, gallery_installed: this.loadInstallManifest().installed, warnings: d.warnings,
-        };
+        return { manifest, assetBase: str(status._asset_base), sidecarsById: urls.sidecarsById, status: {
+                enabled: true, extension_dir_configured: true, extension_dir_valid: true, script_urls: scriptUrls, stylesheet_urls: stylesheetUrls, sidecars: urls.sidecars,
+                counts: { script_urls: scriptUrls.length, stylesheet_urls: stylesheetUrls.length, sidecars: urls.sidecars.length, manifest_extensions: ext.extensions.length, user_disabled: [...disabled].filter((id) => ext.knownIds.has(id)).length },
+                manifest: publicStatus, extensions: ext.extensions, gallery_installed: this.loadInstallManifest().installed, warnings: d.warnings,
+            } };
     }
     loaded(root, d) {
         const state = this.loadState(d);
@@ -1022,44 +1097,26 @@ export class ExtensionService {
     /** Python `serve_extension_static`: bytes, MIME, sandbox CSP for HTML; null means 404. */
     staticFile(rel) {
         const root = this.root();
-        if (!root || !isSafeRelativePath(rel))
-            return null;
-        // Python `serve_extension_static`: an anchored, symlink-free open so a link inside the extension dir cannot expose its target.
-        const anchor = resolvePathLikePython(root);
-        let file = resolve(anchor, rel);
-        if (!file.startsWith(anchor + sep))
-            return null;
-        // Python `(root / rel).resolve()`: a symlinked asset is served when its target stays inside the root, never otherwise.
-        const real = resolvePathLikePython(file);
-        if (real !== file) {
-            if (!real.startsWith(anchor + sep))
-                return null;
-            file = real;
-        }
-        let fd;
-        try {
-            fd = openAnchoredFd(anchor, file, { wantDir: false });
-        }
-        catch {
-            return null;
-        }
-        try {
-            if (!fstatSync(fd).isFile())
-                return null;
-            const ext = file.slice(file.lastIndexOf('.') + 1).toLowerCase();
-            const ct = EXTENSION_MIME[ext] ?? 'text/plain';
-            return { body: readFileSync(fd), contentType: TEXT_MIME.has(ct) ? `${ct}; charset=utf-8` : ct, html: ct === 'text/html' };
-        }
-        catch {
+        const found = root ? readContainedFile(root, rel) : null;
+        if (!found)
             return null;
-        }
-        finally {
-            closeSync(fd);
-        }
+        const ext = found.file.slice(found.file.lastIndexOf('.') + 1).toLowerCase();
+        const ct = EXTENSION_MIME[ext] ?? 'text/plain';
+        return { body: found.body, contentType: TEXT_MIME.has(ct) ? `${ct}; charset=utf-8` : ct, html: ct === 'text/html' };
     }
-    /** Python `api/extension_manifests.build_manifests` (extension entries only; dashboard plugins were dropped). */
+    /** Python `api/extension_manifests.build_manifests` extension entries (the manifests route appends dashboard plugins). */
     async manifests() {
-        const status = await this.status();
+        const { status, manifest, assetBase, sidecarsById } = await this.snapshot();
+        // Status rows carry only enable state; panel, nav, capabilities, assets, and metadata come from the first manifest entry per id.
+        const rawById = new Map();
+        for (const e of manifestEntries(manifest)) {
+            const id = entryText(e, 'id');
+            if (!rawById.has(id))
+                rawById.set(id, e);
+        }
+        // Gallery rows are the entries the gallery loader read from their own install folder; `uninstall` accepts exactly the
+        // ids in the install manifest, so a configured entry that shares an installed id never offers Uninstall.
+        const installed = isDict(status.gallery_installed) ? status.gallery_installed : {};
         const manifests = [];
         const seen = new Set();
         const ID = /^[a-z][a-z0-9_-]{0,63}$/;
@@ -1068,27 +1125,42 @@ export class ExtensionService {
             if (!ID.test(id) || seen.has(id))
                 continue;
             seen.add(id);
-            const rawManifest = isDict(entry.manifest) ? entry.manifest : entry;
+            const rawManifest = rawById.get(str(entry.id)) ?? {};
             const warnings = [];
             let panel = null;
             const rawPanel = rawManifest.panel;
             if (rawPanel !== null && rawPanel !== undefined) {
-                if (typeof rawPanel !== 'string' || !/^[A-Za-z0-9._/-]{1,300}$/.test(rawPanel) || rawPanel.split('/').includes('..') || rawPanel.startsWith('/'))
+                // Like scripts, a panel path is relative to the manifest's folder; gallery entries were rebased onto `<id>/`.
+                const url = typeof rawPanel === 'string' ? `extensions/${assetBase ? `${assetBase}/` : ''}${rawPanel.replace(/^(\.\/)+/, '')}` : '';
+                if (typeof rawPanel !== 'string' || !/^[A-Za-z0-9._/-]{1,300}$/.test(rawPanel) || !isSafeRelativePath(url) || url.length > 400)
                     warnings.push('panel_path_rejected');
                 else if (!rawPanel.toLowerCase().endsWith('.html'))
                     warnings.push('panel_not_html');
                 else
-                    panel = `extensions/${id}/${rawPanel.replace(/^[./]+/, '')}`;
+                    panel = url;
             }
-            const scripts = Array.isArray(entry.scripts) ? entry.scripts : Array.isArray(rawManifest.scripts) ? rawManifest.scripts : [];
-            const stylesheets = Array.isArray(entry.stylesheets) ? entry.stylesheets : Array.isArray(rawManifest.stylesheets) ? rawManifest.stylesheets : [];
-            const legacy = Boolean((scripts.length || stylesheets.length) && !panel);
+            const scripts = Array.isArray(rawManifest.scripts) ? rawManifest.scripts : [];
+            const stylesheets = Array.isArray(rawManifest.stylesheets) ? rawManifest.stylesheets : [];
+            const theme = themeFromEntry(rawManifest.theme, id);
+            if (!theme && rawManifest.theme != null)
+                warnings.push('theme_rejected');
+            // A skin is the one declaration that works without a panel, so it keeps an entry with leftover assets runnable.
+            const legacy = Boolean((scripts.length || stylesheets.length) && !panel && !theme);
             const rawNav = isDict(rawManifest.nav) ? rawManifest.nav : {};
-            const nav = panel ? { label: text(rawNav.label, 40) || text(entry.name ?? rawManifest.name, 40) || id, ...(text(rawNav.icon, 40) ? { icon: text(rawNav.icon, 40) } : {}) } : null;
-            const permissions = isDict(entry.permissions) ? Object.fromEntries(Object.entries(entry.permissions).map(([k, v]) => [k, Boolean(v)])) : {};
-            const enabledFlag = entry.effective_enabled ?? entry.enabled ?? true;
+            const nav = panel ? { label: text(rawNav.label, 40) || text(entry.name, 40) || id, ...(text(rawNav.icon, 40) ? { icon: text(rawNav.icon, 40) } : {}) } : null;
+            const permissions = isDict(rawManifest.permissions) ? Object.fromEntries(Object.entries(rawManifest.permissions).filter(([k]) => k.length <= 64).map(([k, v]) => [k, Boolean(v)])) : {};
+            const tts = ttsFromEntry(rawManifest.tts);
+            if (!tts && rawManifest.tts != null)
+                warnings.push('tts_rejected');
+            // The sidecar the proxy would serve: same record, availability, and saved consent `proxyTarget` enforces
+            // (which refuses token-v1 sidecars in this release).
+            const record = sidecarsById.get(str(entry.id));
+            const declared = isDict(record?.sidecar) && record.sidecar.proxy_auth !== 'token-v1' ? record.sidecar : null;
+            const proxy = isDict(record?.proxy) ? record.proxy : null;
+            const healthPath = declared ? str(declared.health_path) : '';
+            const sidecar = declared && proxy?.available === true ? { origin: str(declared.origin), ...(healthPath.length <= 200 ? { health_path: healthPath } : {}), consented: proxy.consented === true } : null;
             const caps = (Array.isArray(rawManifest.capabilities) ? rawManifest.capabilities : []).filter((c) => typeof c === 'string' && ['settings', 'storage', 'sidecar', 'lifecycle', 'theme', 'tts', 'navigate', 'toast', 'session'].includes(c));
-            manifests.push({ id, name: text(entry.name ?? rawManifest.name, 80) || id, version: text(entry.version ?? rawManifest.version, 40), description: text(entry.description ?? rawManifest.description, 300), source: entry.gallery_installed || entry.source === 'gallery' ? 'gallery' : 'manifest', enabled: Boolean(enabledFlag) && !legacy, panel, nav, capabilities: [...new Set(caps)], permissions, settings_schema: Array.isArray(entry.settings_schema) ? entry.settings_schema : [], theme: null, tts: null, sidecar: null, legacy_injection: legacy, warnings });
+            manifests.push({ id, name: text(entry.name, 80) || id, version: text(rawManifest.version, 40), description: text(rawManifest.description, 300), source: galleryFolders.get(rawManifest) === id && Object.hasOwn(installed, id) ? 'gallery' : 'manifest', enabled: entry.effective_enabled === true && !legacy, can_toggle: entry.can_toggle !== false && !legacy, panel, nav, capabilities: [...new Set(caps)], permissions, settings_schema: Array.isArray(entry.settings_schema) ? entry.settings_schema : [], theme, tts, sidecar, legacy_injection: legacy, warnings });
         }
         return { protocol_version: 1, manifests };
     }