dsh-zen-remote 2.0.3 → 2.2.0

package/lib/types/plugin-route-intercept.d.ts

@@ -0,0 +1,114 @@
+/**
+ * The plugin bridge's route interception (PB-4): the sub-client's local
+ * DSH process owns a webServer whose `match(pathname)` every request goes
+ * through (RT dsh-host-webserver lib/index.js:350-364 — `handle` computes
+ * the RAW, undecoded pathname and calls `this.match`). Overriding that one
+ * method intercepts every route lookup — including routes registered AFTER
+ * us, because the host re-reads the instance method per request. A request
+ * aimed at a BRIDGED plugin's declared route, carrying a VIRTUAL session id,
+ * cannot be served locally (the session lives on the server): the surrogate
+ * handler forwards it through `relay.pluginRequest` (PB-3's
+ * `relay/v1/plugin`) with the real id restored, and streams the answer
+ * back. Everything else — undeclared routes, local sessions — flows to the
+ * original route untouched.
+ *
+ * The un-bridged refusals answer a UNIFORM 503 shape (header
+ * `x-zen-remote: unbridged`, JSON body naming the reason) — and, decisive
+ * for the security posture, they answer WITHOUT the local plugin handler
+ * ever running: a remote session must never execute a plugin route against
+ * local state, not even when the bridge is down (docs/adr/0001).
+ *
+ * The wrap is gated on a structural shape check like the typert and
+ * fetch-route ones; uninstall restores `match` only while the instance
+ * still holds OUR wrapper — a later wrapper chained over us keeps working,
+ * and ours goes inert instead (the same posture as intercept.ts and
+ * fetch-route-intercept.ts).
+ */
+import type { BridgeRegistry, BridgeStatus } from './plugin-bridge.js';
+import type { RelayClient } from './relay-client.js';
+import type { NormalizedAdapter } from './plugin-adapter-core.js';
+/** Structural verdict of {@link checkWebServerShape}: the facts the wrap
+ * reads per request — the `match` function the host's handle calls, the two
+ * route tables, and (PB-10) the `upgrades` table the host's upgrade handler
+ * reads `this.upgrades.get(pathname)` from (both Maps, RT
+ * lib/index.js:467-478 and 298-308; the probe verified them on real
+ * 0.2.0-rc.2 / 0.2.1-alpha.2 instances). */
+export type WebServerShapeCheck = {
+    ok: true;
+} | {
+    ok: false;
+    reasons: string[];
+};
+/** Pure inspection of the RAW webServer instance — nothing is mutated, so a
+ * failed check leaves every route exactly as it was. */
+export declare function checkWebServerShape(webServer: unknown): WebServerShapeCheck;
+/** One failure of the bridge answered to a browser, in the diagnostics
+ * ring. The query NEVER travels — only the plugin name and the reason. */
+export interface PluginRouteFailureRecord {
+    time: string;
+    plugin: string;
+    reason: string;
+}
+/** What the client status route surfaces about this interception. */
+export interface PluginRouteInterceptDiagnostics {
+    installed: boolean;
+    shape: WebServerShapeCheck;
+    /** Requests forwarded through the relay (virtual ids on declared routes,
+     * everything green). */
+    forwarded: number;
+    /** Requests answered with the uniform unbridged 503. */
+    refused: number;
+    /** The refusals keyed by reason. */
+    refusalsByReason: Record<string, number>;
+    /** The most recent refusals, oldest first, capped — time, plugin, reason
+     * only, never a query, never a session id. */
+    recentFailures: PluginRouteFailureRecord[];
+    /** PB-10: tunnels live RIGHT NOW. */
+    tunnelsCurrent: number;
+    /** PB-10: tunnels opened / torn down since the install. */
+    tunnelsOpened: number;
+    tunnelsClosed: number;
+    /** PB-11: adapter requests forwarded through the relay. */
+    adapterForwarded: number;
+    /** PB-11: adapter JSON answers rewritten by a `client.response` hook, and
+     * answers that passed through UNTOUCHED because the buffer cap (8 MB) or
+     * a parse failure made a rewrite impossible. */
+    adapterResponseRewrites: number;
+    adapterResponsePassthroughs: number;
+}
+export interface InstallPluginRouteInterceptOptions {
+    /** The RAW webServer instance (`ctx.webServer[symbols.original]`). */
+    webServer: object;
+    /** The local declaration registry (the `zenRemote` service's table). */
+    registry: BridgeRegistry;
+    /** The client relay client; `pluginRequest` is the forwarding door. */
+    relay: RelayClient;
+    /** The CURRENT handshake's server id, read live per call; a virtual id
+     * minted for another server (or before any handshake) refuses
+     * `server-changed`. */
+    getServerId: () => string | undefined;
+    /** The PB-2 bridge verdicts, computed live per call; a plugin that is
+     * not bridged right now refuses with the status's own reason. */
+    getStatus: () => BridgeStatus[];
+    /** The validated adapters (PB-11), as the wiring registered them.
+     * Absent/empty — the pluggable default — means no adapter routes exist
+     * and this interception behaves exactly as before. */
+    adapters?: readonly NormalizedAdapter[];
+    /** The session id the browser is CURRENTLY looking at (T62's report,
+     * read live per call). A VIRTUAL id means a remote session's panel is
+     * the request's origin — the signal an adapter route's `deny` hook uses
+     * to refuse requests (like better-sidebar's `open.external`) that carry
+     * no session field of their own. Absent → deny hooks see `undefined`
+     * and judge conservatively. */
+    getCurrentSession?: () => string | undefined;
+    /** Progress logging, wired to the context logger by index.ts. */
+    log?: (format: string, ...args: unknown[]) => void;
+}
+export interface PluginRouteInterceptHandle {
+    /** Restore `match` — ONLY while the instance still holds our wrapper
+     * (chained-over wraps go inert instead). Idempotent. */
+    uninstall(): void;
+    diagnostics(): PluginRouteInterceptDiagnostics;
+}
+export declare function installPluginRouteIntercept(options: InstallPluginRouteInterceptOptions): PluginRouteInterceptHandle;
+//# sourceMappingURL=plugin-route-intercept.d.ts.map

package/lib/types/plugin-route-intercept.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-route-intercept.d.ts","sourceRoot":"","sources":["../../src/plugin-route-intercept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAItE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAA8E,MAAM,0BAA0B,CAAA;AAG7I;;;;;4CAK4C;AAC5C,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAMjF;wDACwD;AACxD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,OAAO,GAAG,mBAAmB,CAS3E;AAED;0EAC0E;AAC1E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED,qEAAqE;AACrE,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,mBAAmB,CAAA;IAC1B;4BACwB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAA;IACf,oCAAoC;IACpC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACxC;kDAC8C;IAC9C,cAAc,EAAE,wBAAwB,EAAE,CAAA;IAC1C,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAA;IACtB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAA;IACxB;;oDAEgD;IAChD,uBAAuB,EAAE,MAAM,CAAA;IAC/B,2BAA2B,EAAE,MAAM,CAAA;CACpC;AAED,MAAM,WAAW,kCAAkC;IACjD,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,QAAQ,EAAE,cAAc,CAAA;IACxB,uEAAuE;IACvE,KAAK,EAAE,WAAW,CAAA;IAClB;;2BAEuB;IACvB,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACrC;qEACiE;IACjE,SAAS,EAAE,MAAM,YAAY,EAAE,CAAA;IAC/B;;0DAEsD;IACtD,QAAQ,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACvC;;;;;mCAK+B;IAC/B,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IAC5C,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;CACnD;AAED,MAAM,WAAW,0BAA0B;IACzC;4DACwD;IACxD,SAAS,IAAI,IAAI,CAAA;IACjB,WAAW,IAAI,+BAA+B,CAAA;CAC/C;AAqBD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,kCAAkC,GAAG,0BAA0B,CA+gCnH"}

package/lib/types/plugin-tunnel.d.ts

@@ -0,0 +1,96 @@
+/**
+ * The plugin bridge's WebSocket byte tunnel (PB-10), server half. Per
+ * docs/adr/0002 the relay NEVER speaks WebSocket: a bridged upgrade route is
+ * carried as ONE NDJSON streaming response (server → client bytes) plus
+ * ordinary POSTs per chunk (client → server bytes), both ends treating the
+ * payload as OPAQUE BYTES — the WebSocket handshake and every frame are
+ * produced by the real plugin route on the server machine and arrive at the
+ * browser untouched.
+ *
+ * Open: `POST relay/v1/plugin-tunnel/open` — the same coordinate headers and
+ * the SAME validation chain as `v1/plugin` (shared {@link validatePluginCall};
+ * the route must additionally be declared `upgrade: true`), plus a small
+ * JSON body carrying exactly the four `sec-websocket-*` headers and the
+ * optional early head bytes. On success the relay dials the local web server
+ * itself (net/tls, loopback only), writes a hand-built upgrade request with
+ * the operator's cookie, and pumps socket bytes downstream line by line.
+ * Send/close: `POST relay/v1/plugin-tunnel/{send,close}` — ordered chunks
+ * upstream (one in-flight per tunnel, sequence-gated) and idempotent
+ * teardown.
+ *
+ * Every tunnel belongs to the device that opened it; another device's
+ * send/close is 404. Budgets, heartbeats and the slow-reader discipline
+ * mirror the routes this module sits beside.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { BridgeRegistry, NormalizedBridgeRoute, NormalizedDeclaration } from './plugin-bridge.js';
+import type { PluginLoopback } from './plugin-loopback.js';
+/** The shared validation verdict for the two plugin routes (PB-3, reused by
+ * the tunnel open in PB-10): the whole chain from the coordinate headers to
+ * the consent wall, minus each route's own extras (the method check for
+ * `v1/plugin`, the upgrade mark here). First failure wins, in this order. */
+export type PluginCallValidation = {
+    ok: true;
+    declaration: NormalizedDeclaration;
+    route: NormalizedBridgeRoute;
+    params: URLSearchParams;
+    sessionId: string;
+    normalizedQuery: string;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+};
+/** Validate one plugin-bridge call's coordinates — the parse-once query
+ * discipline (the re-serialization of THIS parse is the only string the
+ * tunnel's upgrade request may carry), the share table with its ancestor
+ * walk, and the live consent wall. `bridge.getConsent()` throwing reads as
+ * unknown consent, and unknown consent stays home. */
+export declare function validatePluginCall(bridge: {
+    registry: BridgeRegistry;
+    getConsent: () => Record<string, boolean>;
+}, coords: {
+    pluginName: string;
+    pluginVersion: string;
+    pluginDigest: string;
+    routePath: string;
+    rawQuery: string;
+}, isAccessible: (sessionId: string) => boolean): PluginCallValidation;
+/** Largest single downstream data LINE (base64 will inflate by 4/3 — the cap
+ * is on the RAW bytes carried, and the line stays well under typical proxy
+ * line limits this way). */
+export declare const TUNNEL_DOWN_CHUNK_BYTES: number;
+/** Largest upstream send chunk (the wire body of one `send`). */
+export declare const TUNNEL_UP_CHUNK_BYTES: number;
+/** Concurrent tunnels per device. */
+export declare const MAX_TUNNELS_PER_DEVICE = 8;
+export interface CreatePluginTunnelOptions {
+    bridge: {
+        registry: BridgeRegistry;
+        getConsent: () => Record<string, boolean>;
+        loopback: PluginLoopback;
+    };
+    /** The loopback web server bind, re-read per tunnel (same live discipline
+     * as every target read in this plugin). */
+    getTarget: () => {
+        protocol: 'http:' | 'https:';
+        port: number;
+    };
+    isAccessible: (sessionId: string) => boolean;
+    /** Heartbeat interval for the open stream (the ping lines). */
+    heartbeatMs: number;
+}
+export interface PluginTunnelRoutes {
+    /** `POST relay/v1/plugin-tunnel/open`. */
+    open(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /** `POST relay/v1/plugin-tunnel/send`. */
+    send(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /** `POST relay/v1/plugin-tunnel/close`. */
+    close(req: IncomingMessage, res: ServerResponse): Promise<void>;
+    /** Live tunnel count (the settings diagnostics). */
+    tunnelCount(): number;
+}
+/** The tunnel table: id → the live entry. Every teardown path removes its
+ * own entry exactly once. */
+export declare function createPluginTunnel(options: CreatePluginTunnelOptions): PluginTunnelRoutes;
+//# sourceMappingURL=plugin-tunnel.d.ts.map

package/lib/types/plugin-tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-tunnel.d.ts","sourceRoot":"","sources":["../../src/plugin-tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAIhE,OAAO,KAAK,EAAE,cAAc,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AACtG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D;;;6EAG6E;AAC7E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GACnJ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/C;;;;sDAIsD;AACtD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EAC/E,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAChH,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAC3C,oBAAoB,CA4BtB;AAED;;4BAE4B;AAC5B,eAAO,MAAM,uBAAuB,QAAY,CAAA;AAEhD,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,QAAY,CAAA;AAE9C,qCAAqC;AACrC,eAAO,MAAM,sBAAsB,IAAI,CAAA;AA2BvC,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE;QAAE,QAAQ,EAAE,cAAc,CAAC;QAAC,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAA;KAAE,CAAA;IACzG;+CAC2C;IAC3C,SAAS,EAAE,MAAM;QAAE,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAA;IAC5C,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,0CAA0C;IAC1C,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,2CAA2C;IAC3C,KAAK,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,oDAAoD;IACpD,WAAW,IAAI,MAAM,CAAA;CACtB;AAED;6BAC6B;AAC7B,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAyUzF"}

package/lib/types/relay-client.d.ts

@@ -45,6 +45,7 @@
  * notification channel the state changes use.
  */
 import type { RelayCompatVerdict } from './fingerprint.js';
+import type { ServerPluginEntry } from './plugin-bridge.js';
 /**
  * The clock face the reconnect machinery runs on: wall time, timers and the
  * jitter source. Injectable so tests drive the whole backoff sequence
@@ -82,6 +83,15 @@ export interface RelayHandshake {
      * has and pushes nothing.
      */
     deviceName?: string;
+    /**
+     * The server's per-plugin bridge table (PB-2), verbatim from the
+     * handshake. `undefined` from an OLDER server whose handshake carries no
+     * `plugins` field at all — and that distinction is load-bearing:
+     * {@link compareBridges} reads `undefined` as `server-too-old`, while an
+     * empty table means "this server speaks the field, nothing registered"
+     * (`not-on-server`). Never normalized into `{}` here.
+     */
+    plugins?: Record<string, ServerPluginEntry>;
 }
 /**
  * One relay failure. `code` is the mapped reason (the contract's state
@@ -230,6 +240,72 @@ export interface RelayClient {
      * `Content-Length`, when it had one) and a timeout there never moves the
      * connection state — the invoke route's rules (T31-fix). */
     upload(options: RelayUploadOptions, signal?: AbortSignal): Promise<RelayHttpResult>;
+    /** One bridged-plugin round-trip (PB-4): the coordinates travel in the
+     * x-zr-* headers (PB-3's protocol), no body. Resolves with the UNREAD
+     * fetch Response the moment the headers arrive — the caller streams the
+     * body itself — and EVERY HTTP status is carried verbatim (a refusal's
+     * `x-zen-remote-error` header is the caller's classifier, never an
+     * exception here). The header wait gets the plain request timeout; the
+     * BODY carries no deadline of our own (a stream takes as long as it
+     * takes) — the caller's signal aborts it. Transport deaths judge the
+     * link like every exchange (offline); `requireCredentials` throws the
+     * usual RelayError when nothing is configured. */
+    pluginRequest(request: RelayPluginRequest, signal?: AbortSignal): Promise<Response>;
+    /** Open one WebSocket byte tunnel (PB-10): the coordinates travel like a
+     * pluginRequest's, plus the browser handshake's `sec-websocket-*` headers
+     * and any early head bytes (base64). Resolves once the NDJSON stream's
+     * FIRST line named the tunnel id; `frames` then yields the upstream's
+     * raw bytes (each `data` line decoded) and ENDS when the server writes
+     * the `end` line (upstream closed or errored). A refusal (any non-200 or
+     * a missing open line) throws RelayError with the wire's
+     * `x-zen-remote-error` code. */
+    pluginTunnelOpen(request: RelayPluginRequest & {
+        wsHeaders: {
+            'sec-websocket-key': string;
+            'sec-websocket-version': string;
+            'sec-websocket-protocol'?: string;
+            'sec-websocket-extensions'?: string;
+        };
+        head?: string;
+    }, signal?: AbortSignal): Promise<{
+        tunnel: string;
+        frames: AsyncIterable<Uint8Array>;
+    }>;
+    /** One ordered upstream chunk (PB-10): `seq` must count from 0 without
+     * gaps — the server answers 409 `tunnel-out-of-order` and closes the
+     * tunnel otherwise. Resolves after the server took the bytes (drain
+     * included). */
+    pluginTunnelSend(tunnel: string, seq: number, bytes: Uint8Array, signal?: AbortSignal): Promise<void>;
+    /** Idempotent teardown (PB-10). */
+    pluginTunnelClose(tunnel: string, signal?: AbortSignal): Promise<void>;
+}
+/** The inputs of one {@link RelayClient.pluginRequest} round-trip (PB-4) —
+ * the PB-3 wire protocol's coordinates, already validated and virtual-id-
+ * restored by the caller. */
+export interface RelayPluginRequest {
+    plugin: string;
+    version: string;
+    digest: string;
+    /** The declared route path, verbatim (never decoded). */
+    path: string;
+    /** The re-serialized query string, session id already restored to its
+     * ORIGINAL form. */
+    query: string;
+    /** The request method (PB-9); defaults to GET. Must be one the route
+     * declared — the server answers 405 `method-undeclared` otherwise. */
+    method?: string;
+    /** The request BODY (PB-9), forwarded verbatim as a stream. `null` means
+     * no body. A streaming body rides chunked (undici forbids hand-set length
+     * headers), so the server's streaming byte count is the size gate. */
+    body?: ReadableStream<Uint8Array> | null;
+    /** The body's content type, passed through to the plugin when set. */
+    contentType?: string;
+    /** The declared body size, when the local request carried one — sizes the
+     * header-wait budget and nothing else (a streaming body goes chunked). */
+    contentLength?: number;
+    /** The one request header passed through to the plugin beside `range`. */
+    accept?: string;
+    range?: string;
 }
 /** The inputs of one {@link RelayClient.upload} round-trip. */
 export interface RelayUploadOptions {

package/lib/types/relay-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relay-client.d.ts","sourceRoot":"","sources":["../../src/relay-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAkF1D;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,GAAG,IAAI,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAC/C,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IACnC,uDAAuD;IACvD,MAAM,IAAI,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,UAS1B,CAAA;AAED;0BAC0B;AAC1B,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,CAAA;AAEtG,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;4DAEwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;gBAErB,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQpH;AAcD,MAAM,WAAW,wBAAwB;IACvC;kDAC8C;IAC9C,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACtC;mBACe;IACf,QAAQ,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IAClC,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB;6EACyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;4DACwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;iEAC6D;IAC7D,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;gFAI4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxF;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,cAAc,GAAG,SAAS,CAAA;IAClD;;;;eAIW;IACX,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAA;IAChD;;0DAEsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;qDAEiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC;;;;;8CAK0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC/C;;0EAEsE;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAC5D;;;;;kDAK8C;IAC9C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;wEAGoE;IACpE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;IACnC,uEAAuE;IACvE,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,CAAA;IAClC;;iEAE6D;IAC7D,SAAS,IAAI,OAAO,CAAA;IACpB;;;2DAGuD;IACvD,kBAAkB,IAAI,IAAI,CAAA;IAC1B;kEAC8D;IAC9D,IAAI,IAAI,IAAI,CAAA;IACZ;mFAC+E;IAC/E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChG;;;;;8BAK0B;IAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D;;;;iEAI6D;IAC7D,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF;;;gDAG4C;IAC5C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1G;;;;;0CAKsC;IACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAClF;;;;;;;;gEAQ4D;IAC5D,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACpF;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;iBAEa;IACb,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IACvC;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B;gCAC4B;IAC5B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/E;AAMD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEvE;AAoED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CA+hChF"}
+{"version":3,"file":"relay-client.d.ts","sourceRoot":"","sources":["../../src/relay-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAsF3D;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,GAAG,IAAI,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAC/C,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IACnC,uDAAuD;IACvD,MAAM,IAAI,MAAM,CAAA;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,UAS1B,CAAA;AAED;0BAC0B;AAC1B,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,CAAA;AAEtG,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAC5C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;4DAEwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;gBAErB,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQpH;AAcD,MAAM,WAAW,wBAAwB;IACvC;kDAC8C;IAC9C,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACtC;mBACe;IACf,QAAQ,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IAClC,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB;6EACyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;4DACwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;iEAC6D;IAC7D,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;gFAI4E;IAC5E,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxF;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,cAAc,GAAG,SAAS,CAAA;IAClD;;;;eAIW;IACX,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAA;IAChD;;0DAEsD;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;qDAEiD;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC;;;;;8CAK0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAC/C;;0EAEsE;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IAC5D;;;;;kDAK8C;IAC9C,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;wEAGoE;IACpE,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;IACnC,uEAAuE;IACvE,OAAO,IAAI,OAAO,CAAC,cAAc,CAAC,CAAA;IAClC;;iEAE6D;IAC7D,SAAS,IAAI,OAAO,CAAA;IACpB;;;2DAGuD;IACvD,kBAAkB,IAAI,IAAI,CAAA;IAC1B;kEAC8D;IAC9D,IAAI,IAAI,IAAI,CAAA;IACZ;mFAC+E;IAC/E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChG;;;;;8BAK0B;IAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D;;;;iEAI6D;IAC7D,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF;;;gDAG4C;IAC5C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IAC1G;;;;;0CAKsC;IACtC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAClF;;;;;;;;gEAQ4D;IAC5D,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACnF;;;;;;;;;sDASkD;IAClD,aAAa,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACnF;;;;;;;oCAOgC;IAChC,gBAAgB,CACd,OAAO,EAAE,kBAAkB,GAAG;QAC5B,SAAS,EAAE;YAAE,mBAAmB,EAAE,MAAM,CAAC;YAAC,uBAAuB,EAAE,MAAM,CAAC;YAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;YAAC,0BAA0B,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QACnJ,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,EACD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;KAAE,CAAC,CAAA;IACjE;;;oBAGgB;IAChB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrG,mCAAmC;IACnC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvE;AAED;;6BAE6B;AAC7B,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ;wBACoB;IACpB,KAAK,EAAE,MAAM,CAAA;IACb;0EACsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;0EAEsE;IACtE,IAAI,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IACxC,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;8EAC0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;iBAEa;IACb,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAA;IACvC;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,2EAA2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B;gCAC4B;IAC5B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/E;AAMD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEvE;AAoED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,WAAW,CA21ChF"}

package/lib/types/relay-server.d.ts

@@ -27,6 +27,10 @@
  */
 import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { ShareStore } from './share-store.js';
+import type { ServerPluginEntry, BridgeRegistry } from './plugin-bridge.js';
+import { type PluginTunnelRoutes } from './plugin-tunnel.js';
+import type { PluginLoopback } from './plugin-loopback.js';
+import type { NormalizedAdapter } from './plugin-adapter-core.js';
 /**
  * Registration prefix on the host webServer. Deliberately WITHOUT the
  * trailing slash: the webserver matches a prefix route as `pathname === p ||
@@ -108,12 +112,17 @@ export interface RelayGateway {
  * callback too (T42), awaited per handshake so a just-restarted server never
  * serves a stale map; a THROWN compute degrades to the empty map here so a
  * broken fingerprint source can never fail the handshake itself — the
- * client's comparison judges every group `unavailable`, never `different`. */
+ * client's comparison judges every group `unavailable`, never `different`.
+ * `plugins` is the same discipline for the plugin bridge (PB-2): computed
+ * FRESH per handshake (the local registry and the row's consent map are both
+ * live), a THROWN compute degrades to the empty table — the handshake still
+ * succeeds and the client reads every local plugin `not-on-server`. */
 export interface RelayServerInfo {
     serverId: string;
     serverName: () => string;
     dshVersion: string;
     fingerprints?: () => Record<string, string> | Promise<Record<string, string>>;
+    plugins?: () => Record<string, ServerPluginEntry>;
 }
 export interface RelayHandlerOptions {
     /** The per-apply shared secret; an empty one refuses every request. */
@@ -151,6 +160,28 @@ export interface RelayHandlerOptions {
      * destroyed (the {@link DRAIN_DEADLINE_MS} bound); defaults to 10000.
      * Tests inject a small value so the deadline path stays cheap to drive. */
     drainDeadlineMs?: number;
+    /** The plugin bridge's server half (PB-3). Absent — a wiring that never
+     * mounted it, old tests — and `POST relay/v1/plugin` answers 501
+     * `unsupported`, exactly like the `/api` passthrough without a dispatcher. */
+    pluginBridge?: {
+        /** THIS process's bridge declaration registry (the `zenRemote` service's
+         * backing table) — the source of truth for "which plugin, which version,
+         * which routes". */
+        registry: BridgeRegistry;
+        /** The row's per-plugin whole-machine-data consent, read LIVE per request
+         * (a volatile row field — never snapshotted). */
+        getConsent: () => Record<string, boolean>;
+        /** The loopback executor performing the actual plugin GET. */
+        loopback: PluginLoopback;
+        /** The WebSocket byte tunnel's server half (PB-10). Absent — a wiring
+         * that predates the tunnels — and the three `plugin-tunnel` routes
+         * answer 501 `unsupported` like an unwired bridge. */
+        tunnel?: PluginTunnelRoutes;
+        /** The validated adapters (PB-11), as the wiring registered them.
+         * Absent/empty — the pluggable default — and `v1/plugin` serves
+         * cooperative declarations only, exactly as before. */
+        adapters?: readonly NormalizedAdapter[];
+    };
 }
 /**
  * The relay route handler plus its introspection surface. A function WITH

package/lib/types/relay-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relay-server.d.ts","sourceRoot":"","sources":["../../src/relay-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAYlD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,2BAA2B,CAAA;AAQpD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,QAAoB,CAAA;AAEjD;0EAC0E;AAC1E,eAAO,MAAM,gBAAgB,kCAAkC,CAAA;AA4F/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1G,MAAM,CAAC,IAAI,EAAE;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,OAAO,CAAA;QACb,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IACnC;uDACmD;IACnD,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAAA;KACnH,CAAA;IACD,4EAA4E;IAC5E,WAAW,CAAC,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAAA;CACpB;AAED;;;;;;;8EAO8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,KAAK,EAAE,UAAU,CAAA;IACjB,+DAA+D;IAC/D,OAAO,EAAE,YAAY,CAAA;IACrB,uBAAuB;IACvB,UAAU,EAAE,eAAe,CAAA;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;;;mEAM+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAA;IACzE;;qCAEiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;uDAGmD;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;0EAEsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;+EAE2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;+BAC2B;IAC3B,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC;;;;;;;yEAOqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AASD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoBjD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAW1C;AA0VD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAwxC7E;AAaD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,wBAAwB,CAAA"}
+{"version":3,"file":"relay-server.d.ts","sourceRoot":"","sources":["../../src/relay-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAWlD,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAE3E,OAAO,EAA0C,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,KAAK,EAAE,iBAAiB,EAAkB,MAAM,0BAA0B,CAAA;AAGjF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,2BAA2B,CAAA;AAQpD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,gBAAgB,QAAoB,CAAA;AAEjD;0EAC0E;AAC1E,eAAO,MAAM,gBAAgB,kCAAkC,CAAA;AA+F/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1G,MAAM,CAAC,IAAI,EAAE;QACX,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,OAAO,CAAA;QACb,MAAM,CAAC,EAAE,WAAW,CAAA;KACrB,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IACnC;uDACmD;IACnD,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAAA;KACnH,CAAA;IACD,4EAA4E;IAC5E,WAAW,CAAC,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC,OAAO,CAAC,CAAA;CACpB;AAED;;;;;;;;;;;uEAWuE;AACvE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC7E,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,KAAK,EAAE,UAAU,CAAA;IACjB,+DAA+D;IAC/D,OAAO,EAAE,YAAY,CAAA;IACrB,uBAAuB;IACvB,UAAU,EAAE,eAAe,CAAA;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;;;mEAM+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAA;IACzE;;qCAEiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;uDAGmD;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;0EAEsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;+EAE2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;kFAE8E;IAC9E,YAAY,CAAC,EAAE;QACb;;4BAEoB;QACpB,QAAQ,EAAE,cAAc,CAAA;QACxB;yDACiD;QACjD,UAAU,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACzC,8DAA8D;QAC9D,QAAQ,EAAE,cAAc,CAAA;QACxB;;8DAEsD;QACtD,MAAM,CAAC,EAAE,kBAAkB,CAAA;QAC3B;;+DAEuD;QACvD,QAAQ,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAA;KACxC,CAAA;CACF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D;+BAC2B;IAC3B,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAA;IACtC;;;;;;;yEAOqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AASD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoBjD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAW1C;AAsWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAq3D7E;AAaD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,wBAAwB,CAAA"}

package/llms.txt

@@ -9,6 +9,7 @@
 - Host sharing: per-session remote toggle from four places (sidebar session "…" menu, title-row icon with confirm, settings list, the phone session info card's remote access switch); idle sleep after 48h without session activity (running/waiting sessions exempt, viewers don't count); auto-share new sessions (opt-in; relay-created sessions always auto-share); subagent/fork sessions follow the parent.
 - Pairing codes are role-bound: web app devices (phones/browsers, see all sessions) redeem on the pairing page; desktop app devices pair from the client's settings page via `/lan-gate/pair/claim-desktop` and only ever reach the relay prefix (everything else 403 `relay-only`).
 - Relay protocol (prefix `/_dsh/zen-remote/relay`): `GET ping`, `POST v1/handshake` (relay protocol version + DSH interface fingerprints — version mismatch refuses; fingerprint mismatch annotates and degrades; the answer carries `serverName`/`deviceName`), `POST v1/invoke`, `POST v1/stream` (NDJSON, ping heartbeats that carry the current `serverName`/`deviceName`, `unshared` error line on close), `POST v1/event-result`, `POST v1/http` (the plain-HTTP long tail: only `changes.summary` / `changes.diff`, GET only, query normalized to `sessionId`/`seq`/`index`, dispatched in-process through the host's shared `/api` handler), `POST v1/upload` (a remote session's non-image attachments: raw byte stream, share-checked, query normalized to `sessionId`/`name`, 100 MiB cap answers 413, 8 concurrent per device answers 429, dispatched in-process through the same shared handler), `POST v1/unshare`, `POST v1/device/name` (gateway-handled rename of the CALLING device's own record — paired desktop clients only, never forwarded to DSH; 1–40 chars). Access control is a per-method allowlist (`src/relay-access.ts` RELAY_METHODS, mirrored by intercept.ts CLIENT_METHOD_FIELDS, pinned identical by test); global reads (`session/control`, `session/list`, `workspace/follow`) and the @-mention candidates are output-filtered (candidates list only shared sessions); `session/modelCatalog` is a parameter-less global read whose `failures` array the server empties; `dsh-session:` references are scanned wherever DSH would inject them — prompt content, queue-edit content, every string of a `commands/execute` call — and a reference naming an unshared session refuses the call. Approval/question events forward first come, first served; the relay never answers on the client's behalf (an unshared session's approval waits for the server UI or the next subscription), and unshared sessions' notification-type events are never forwarded.
+- Plugin bridge (2.1): another plugin registers a bridge declaration (`ctx.inject(['zenRemote'], …)`, types from `dsh-zen-remote`); when the plugin name, exact version and declaration digest agree on BOTH ends, the sub-client reroutes the declared GET routes to the server — `POST relay/v1/plugin` (coordinates in x-zr-* headers, no body; validation: registry → version+digest → exact path → parse-once query with the route's sessionParam → share table → per-plugin consent for scope:'server' routes → 8 per device), the server re-issues it over loopback HTTP with the operator's cookie and streams the answer back; unbridged answers are a uniform 503 (`x-zen-remote: unbridged`, reason: not-on-server / version-mismatch / declaration-mismatch / consent-off / offline / server-too-old / server-changed / bad-query / method-not-bridged, or the relay's own codes). 2.1 forwards GET on exact paths only; plugin WebSockets will ride streamed responses in 2.2 (docs/adr/0002). Docs: docs/plugin-bridge.md
 - Remote extras: a remote session can attach non-image files — the sub-client's own backend wraps the host's `fetchRoutes` upload entry and streams the bytes through `v1/upload` (the 100 MiB cap is the relay's own, an over-limit pick is refused locally on the client, slow links are bounded by a 300 s client-side timeout; export is disabled remotely instead — menu item hidden, backend 403 for virtual ids). The model picker in a remote session lists the SERVER's catalog (groups named "server name · group name"); local sessions list only local models, the last server groups survive relay offline, and virtual groups never appear in local settings such as the vision router (boundary: a server-created session that never sent a message shows the local default model).
 - Gateway auth chain: device token (Bearer) → gateway marker headers `x-zen-remote-via/-role/-device` + `x-zen-remote-secret` (per-load shared secret, `LAN_GATE_RELAY_SECRET`, not externally settable, re-verified with timingSafeEqual) → per-method share-table check. Admin API stays loopback-only; forwarded requests may read status but never mutate.
 - Admin surface: the dsh-zen-remote settings block (pairing with role picker, device list with rename/set-role/revoke, push test, shares list). `/lan-gate/admin` is now just a notice pointing there.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-zen-remote",
-  "version": "2.0.3",
+  "version": "2.2.0",
   "description": "一个插件、两种角色：主服务端把 DeepSeek Harness 变成手机能安全访问的 PWA（移动端界面、配对码网关、Web Push），并把选定会话共享给已配对的桌面端；子客户端在另一台 DSH 桌面端的侧边栏里远程使用这些会话。One DSH plugin, two roles: the host turns DeepSeek Harness into a phone-reachable PWA (mobile UI, pairing-code gateway behind your own reverse proxy, Web Push) and shares chosen sessions to paired desktops; the client uses those sessions remotely from another DSH desktop app's sidebar.",
   "license": "MIT",
   "type": "module",
@@ -160,7 +160,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json && tsc -p tsconfig.client.json && node scripts/build-client.mjs",
     "verify": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
-    "test": "node --test \"test/*.test.cjs\" && node scripts/check-sunk-viewport.mjs && node scripts/check-keyboard-avoid.mjs && node scripts/check-attach-upload.mjs && node scripts/check-share-image.mjs && node scripts/check-upload-endpoint.mjs && node scripts/check-host-shadow.mjs && node scripts/check-compat-store.mjs && node scripts/check-settings-form.mjs && node scripts/check-shares.mjs && node scripts/check-client-externals.mjs && node scripts/check-info-sheet-stacking.mjs && node scripts/sync-doc-version.mjs --check",
+    "test": "node --test \"test/*.test.cjs\" && node scripts/check-sunk-viewport.mjs && node scripts/check-keyboard-avoid.mjs && node scripts/check-attach-upload.mjs && node scripts/check-share-image.mjs && node scripts/check-upload-endpoint.mjs && node scripts/check-host-shadow.mjs && node scripts/check-compat-store.mjs && node scripts/check-settings-form.mjs && node scripts/check-shares.mjs && node scripts/check-plugin-bridge-ui.mjs && node scripts/check-client-externals.mjs && node scripts/check-info-sheet-stacking.mjs && node scripts/sync-doc-version.mjs --check",
     "version": "node scripts/sync-doc-version.mjs && git add README.md README.zh-CN.md"
   }
 }

package/scripts/check-plugin-bridge-ui.mjs

@@ -0,0 +1,168 @@
+// Behaviour check for the plugin bridge's settings-page pure pieces
+// (src/client-data/plugin-bridge.ts, PB-5), driven against the REAL
+// settings-form pieces the toggles stage through (Node >= 23.6 type
+// stripping, no build needed):
+//
+// - derivePluginBridgeStatuses: every BridgeReason's copy key, the bridged
+//   case, the unknown-reason fallback, malformed rows skipped, non-arrays
+//   answered with [].
+// - togglePluginConsent: one key per click, every other key carried over
+//   (including entries for plugins no longer registered), an illegal
+//   current map read as empty.
+// - consentField (settings-form.ts): the staged-form spec the toggles ride
+//   — format/parse round-trip, an illegal draft blocks the save, and the
+//   full toggle → parse → plan shape a save would send.
+//
+// Run: node scripts/check-plugin-bridge-ui.mjs
+import assert from 'node:assert/strict'
+import { bridgeSectionState, derivePluginBridgeStatuses, readAdminBridgeRow, togglePluginConsent } from '../src/client-data/plugin-bridge.ts'
+import { consentField, SETTINGS_FIELDS } from '../src/client-data/settings-form.ts'
+
+let testChain = Promise.resolve()
+function test(name, fn) {
+  testChain = testChain
+    .then(fn)
+    .then(() => { console.log(`ok - ${name}`) })
+    .catch((error) => {
+      console.error(`not ok - ${name}`)
+      throw error
+    })
+  return testChain
+}
+
+const STATUS = (over = {}) => ({ plugin: 'test-panel', bridged: false, reason: 'offline', localVersion: '1.0.0', ...over })
+
+// ---- derivePluginBridgeStatuses ---------------------------------------------
+
+await test('every reason maps to its copy key, bridged to 已桥接', () => {
+  const rows = derivePluginBridgeStatuses([
+    STATUS({ bridged: true, reason: undefined }),
+    STATUS({ reason: 'not-on-server' }),
+    STATUS({ reason: 'version-mismatch', serverVersion: '2.0.0' }),
+    STATUS({ reason: 'declaration-mismatch' }),
+    STATUS({ reason: 'consent-off' }),
+    STATUS({ reason: 'offline' }),
+    STATUS({ reason: 'server-too-old' }),
+  ])
+  assert.deepEqual(rows.map((row) => row.stateKey), [
+    'settings.bridge.stateBridged',
+    'settings.bridge.stateNotOnServer',
+    'settings.bridge.stateVersionMismatch',
+    'settings.bridge.stateDeclarationMismatch',
+    'settings.bridge.stateConsentOff',
+    'settings.bridge.stateOffline',
+    'settings.bridge.stateServerTooOld',
+  ])
+  assert.equal(rows[0].plugin, 'test-panel')
+  assert.equal(rows[0].localVersion, '1.0.0')
+  // 版本不同的文案 carries the server version for the {version} interpolation.
+  assert.equal(rows[2].serverVersion, '2.0.0')
+})
+
+await test('an unknown reason falls to the offline copy; malformed rows and shapes never throw', () => {
+  const rows = derivePluginBridgeStatuses([
+    STATUS({ reason: 'some-future-reason' }),
+    STATUS({ bridged: true, reason: 'offline' }), // bridged outranks any reason
+    null,
+    42,
+    { noPlugin: true },
+  ])
+  assert.deepEqual(rows.map((row) => row.stateKey), [
+    'settings.bridge.stateOffline',
+    'settings.bridge.stateBridged',
+  ])
+  assert.deepEqual(derivePluginBridgeStatuses(undefined), [])
+  assert.deepEqual(derivePluginBridgeStatuses('x'), [])
+  assert.deepEqual(derivePluginBridgeStatuses(42), [])
+})
+
+// ---- togglePluginConsent ----------------------------------------------------
+
+await test('a toggle changes exactly ONE key and keeps every other — including unregistered leftovers', () => {
+  const current = { 'old-plugin': true, 'another': false, 'gone-plugin': true }
+  const next = togglePluginConsent(current, 'new-plugin', true)
+  assert.deepEqual(next, { 'old-plugin': true, another: false, 'gone-plugin': true, 'new-plugin': true })
+  // The INPUT is never mutated (staging reads it again for the next toggle).
+  assert.deepEqual(current, { 'old-plugin': true, 'another': false, 'gone-plugin': true })
+
+  const off = togglePluginConsent(next, 'new-plugin', false)
+  assert.deepEqual(off, { 'old-plugin': true, another: false, 'gone-plugin': true, 'new-plugin': false })
+})
+
+await test('an illegal current map reads as empty; the toggle writes from scratch', () => {
+  for (const bad of [undefined, null, 'x', 42, [], { plugin: 'yes' }]) {
+    assert.deepEqual(togglePluginConsent(bad, 'p', true), { p: true }, `current ${JSON.stringify(bad)} must read as empty`)
+  }
+})
+
+// ---- bridgeSectionState: the three-state listing (PB-9-fix) -----------------
+
+await test('the listing distinguishes loading / failed from a confirmed empty registry', () => {
+  assert.equal(bridgeSectionState('loading', []), 'loading', 'no answer yet — never reads as empty')
+  assert.equal(bridgeSectionState('error', []), 'error', 'a failed or refused fetch is an error, not "nothing registered"')
+  assert.equal(bridgeSectionState('ready', []), 'empty', 'an ANSWER with zero rows is the honest empty')
+  assert.equal(bridgeSectionState('ready', [{ plugin: 'p' }]), 'plugins')
+})
+
+// ---- consentField: the staged-form spec the toggles ride ---------------------
+
+await test('consentField round-trips a map through format/parse; an illegal draft blocks the save', () => {
+  const spec = consentField('pluginBridgeConsent')
+  assert.equal(spec.field, 'pluginBridgeConsent')
+  const map = { 'a': true, 'b': false }
+  const draft = spec.format(map)
+  const write = spec.parse(draft)
+  assert.deepEqual(write, { kind: 'set', value: map })
+
+  // format tolerates an illegal stored value (the row validator's job to refuse it).
+  assert.equal(spec.format('junk'), '{}')
+  assert.equal(spec.format(null), '{}')
+  assert.equal(spec.format(['x']), '{}')
+  assert.equal(spec.format({ a: 'yes' }), '{}')
+
+  // Every malformed draft is undefined — the save refuses rather than writing junk.
+  for (const bad of ['', 'not json', '"string"', '42', '[]', 'null', '{"a":"yes"}', '{"a":1}']) {
+    assert.equal(spec.parse(bad), undefined, `draft ${bad} must not parse`)
+  }
+})
+
+await test('the toggle lands on the SHARED field table and a save would send exactly one set op', () => {
+  // The field the toggles stage is on SETTINGS_FIELDS — the same table
+  // autoShareNewSessions rides, hence the same save button and fence.
+  assert.ok(SETTINGS_FIELDS.some((spec) => spec.field === 'pluginBridgeConsent'), 'pluginBridgeConsent is a settings field')
+
+  const spec = SETTINGS_FIELDS.find((entry) => entry.field === 'pluginBridgeConsent')
+  const current = { 'old': true }
+  const next = togglePluginConsent(current, 'new-plugin', true)
+  const write = spec.parse(JSON.stringify(next))
+  assert.deepEqual(write, { kind: 'set', value: { old: true, 'new-plugin': true } })
+
+  // And the no-change detection: a draft equal to the displayed value
+  // produces no write at all (plan() compares against format(displayValue)).
+  const unchanged = spec.parse(spec.format(current))
+  assert.deepEqual(unchanged, { kind: 'set', value: { old: true } })
+  assert.equal(JSON.stringify(next) === spec.format(next), true, 'an unchanged map formats identical to its draft')
+})
+
+// ---- readAdminBridgeRow (PB-11) ----------------------------------------------
+
+await test('the adapter mark rides the admin listing row and reads tolerantly', () => {
+  // A full row: adapted true rides through; the tolerable defaults hold.
+  assert.deepEqual(
+    readAdminBridgeRow({ plugin: 'p', version: '1.0.0', hasServerScope: true, consent: false, adapted: true }),
+    { plugin: 'p', version: '1.0.0', hasServerScope: true, consent: false, adapted: true },
+  )
+  // An older server without the field reads as NOT adapted.
+  assert.equal(readAdminBridgeRow({ plugin: 'p', version: '1', hasServerScope: false, consent: true }).adapted, false)
+  // A junk field value is not "adapted" — only the exact true is.
+  assert.equal(readAdminBridgeRow({ plugin: 'p', version: '1', hasServerScope: false, consent: true, adapted: 'yes' }).adapted, false)
+  // A malformed row is undefined, never a throw.
+  for (const bad of [undefined, null, 42, 'x', [], {}, { version: '1' }]) {
+    assert.equal(readAdminBridgeRow(bad), undefined, `row ${JSON.stringify(bad)} must not parse`)
+  }
+})
+
+let failed = 0
+await testChain.catch(() => { failed = 1 })
+if (failed !== 0) process.exit(1)
+console.log('check-plugin-bridge-ui: ok')

package/scripts/check-settings-form.mjs

@@ -456,7 +456,9 @@ test('the latest-wins gate drops tickets that are no longer newest (T15-fix 4)',
 
 test('deriveClientStatusView maps every probe state and tolerates garbage', () => {
   // T59: the view carries the device's own name ('' when the body had none).
-  const bare = { state: 'unpaired', serverUrl: '', serverName: '', deviceName: '', nextRetryAt: undefined, lastError: '', intercept: undefined, compat: undefined }
+  // PB-5: the bridge rows ([] — the body carried none) and the rerouting
+  // note (undefined) ride the same tolerant derivation.
+  const bare = { state: 'unpaired', serverUrl: '', serverName: '', deviceName: '', nextRetryAt: undefined, lastError: '', intercept: undefined, compat: undefined, pluginBridge: [], pluginRouteIntercept: undefined }
   assert.deepEqual(deriveClientStatusView({ state: 'unpaired' }), bare)
   assert.deepEqual(deriveClientStatusView({ state: 'connected', serverUrl: 'http://192.168.1.10:3088' }), {
     ...bare,