dsh-zen-remote 2.0.3 → 2.2.1

package/lib/config.js

@@ -54,6 +54,7 @@ export const DEFAULTS = {
     serverName: defaultServerName(),
     idleHours: 48,
     autoShareNewSessions: false,
+    pluginBridgeConsent: {},
 };
 // --- per-field validators -------------------------------------------------
 // Each takes an unknown layer value and returns the normalized legal value,
@@ -120,6 +121,23 @@ function serverNameOf(value) {
     const name = nonEmptyString(value);
     return name === undefined ? undefined : name.slice(0, SERVER_NAME_MAX);
 }
+/** `pluginBridgeConsent`: a plain object mapping plugin names to STRICT
+ * booleans. Anything else — null, an array, a non-boolean value (`"yes"`,
+ * `1`; unlike the scalar booleans there is no historic `1`/`"1"` convention
+ * to honor, this map only ever came from the settings surface or a
+ * hand-edited row/file) — makes the layer transparent, because a half-valid
+ * consent map must never read as "consented". Object keys are strings by
+ * construction in both JSON and YAML; the per-key string check stays as the
+ * cheap belt over the iteration. */
+function consentMap(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof key !== 'string' || typeof entry !== 'boolean')
+            return undefined;
+    }
+    return value;
+}
 /** Env validator applied to `Number(env[name])`, so `LAN_GATE_PORT='abc'`
  * lands in the same "unset" bucket as a bad row value. */
 function envNumber(name, validate) {
@@ -179,6 +197,10 @@ const FIELDS = {
     serverName: { row: serverNameOf, file: serverNameOf },
     idleHours: { row: inRange(0, 8760), file: inRange(0, 8760) },
     autoShareNewSessions: { row: boolLike, file: boolLike },
+    // No env layer on purpose (PB-1): a per-plugin consent map has no historic
+    // flat variable to stay compatible with, and a consent decision is a
+    // settings-page action, not something set through the environment.
+    pluginBridgeConsent: { row: consentMap, file: consentMap },
 };
 /**
  * Resolve one field through env → row → file → default, recording which layer
@@ -246,6 +268,7 @@ export function resolveConfig(row, file, env) {
         serverName: resolveField('serverName', safeRow, safeFile, env, sources),
         idleHours: resolveField('idleHours', safeRow, safeFile, env, sources),
         autoShareNewSessions: resolveField('autoShareNewSessions', safeRow, safeFile, env, sources),
+        pluginBridgeConsent: resolveField('pluginBridgeConsent', safeRow, safeFile, env, sources),
     };
     return { values, sources };
 }
@@ -330,6 +353,10 @@ export const Config = z.object({
     serverName: z.any().volatile(),
     idleHours: z.any().volatile(),
     autoShareNewSessions: z.any().volatile(),
+    // Plugin-bridge consent (PB-1): a name → boolean map, live-read at compare
+    // time — a consent flip must apply without a row restart, so it is
+    // deliberately NOT in RESTART_FIELDS.
+    pluginBridgeConsent: z.any().volatile(),
     // Client-half knobs (T16): where the phone finds the gateway, and the
     // pairing token it presents. `role('secret')` keeps the token out of every
     // settings wire surface, like the verifier plugin's API key.

package/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAKxC,iDAAiD;AACjD,MAAM,eAAe,GAAG,EAAE,CAAA;AA0C1B,SAAS,iBAAiB;IACxB,OAAO,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACtE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAoB;IACvC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,wBAAwB;IACtC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,qBAAqB;IACjC,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,iBAAiB,EAAE;IAC/B,SAAS,EAAE,EAAE;IACb,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA2B,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC1G,OAAQ,KAAgC,CAAC,GAAG,EAAE,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,4DAA4D;AAC5D,SAAS,KAAK,CAAC,GAAW,EAAE,GAAW;IACrC,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5G,CAAC;AAED,+CAA+C;AAC/C,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/F,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1G,CAAC;AAED,2CAA2C;AAC3C,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7E,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAmB,GAAG,OAAqB;IACvD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAC5H,CAAC;AAED;yEACyE;AACzE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/D,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;iEACiE;AACjE,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;qCAEqC;AACrC,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACxE,CAAC;AAED;0DAC0D;AAC1D,SAAS,SAAS,CAChB,IAAY,EACZ,QAAgD;IAEhD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5C,CAAC,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,GAAG,OAAqB;IAExB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;IAClC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACrC,CAAC;AAED;2EAC2E;AAC3E,SAAS,OAAO,CAAC,IAAY,EAAE,MAAgC;IAC7D,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,CAAC,CAAA;AACH,CAAC;AAED;;;;;4BAK4B;AAC5B,SAAS,iBAAiB,CAAC,QAAgD;IACzE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AAClH,CAAC;AAED;8CAC8C;AAC9C,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnG,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAmBD,MAAM,MAAM,GAAwE;IAClF,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;IACrE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE;IAC1H,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IACpF,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;IAC7F,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE;IAC3L,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IACrG,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC7H,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IAC5F,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,CAAC,cAAc,CAAC,EAAE;IACxI,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtG,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvG,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChG,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE;IACrD,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;IAC5D,oBAAoB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;CACxD,CAAA;AAED;;;;GAIG;AACH,SAAS,YAAY,CACnB,GAAM,EACN,GAA4B,EAC5B,IAA6B,EAC7B,GAAsB,EACtB,OAAoD;IAEpD,MAAM,KAAK,GAAsC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,wEAAwE;IACxE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;YACrB,OAAO,QAAQ,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAA;IACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,mEAAmE;AACnE,SAAS,OAAO,CAAC,MAAe;IAC9B,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5E,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,IAA6B,EAC7B,GAAsB;IAKtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAiD,CAAA;IACjE,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACrE,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC/E,YAAY,EAAE,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3E,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC/E,WAAW,EAAE,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzE,WAAW,EAAE,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzE,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACnE,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACrE,oBAAoB,EAAE,YAAY,CAAC,sBAAsB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;KAC5F,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;QACpD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,cAAc,CAAE,GAA6C,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AAC9G,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,sEAAsE;IACtE,2EAA2E;IAC3E,6DAA6D;IAC7D,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IACjD,yEAAyE;IACzE,2CAA2C;IAC3C,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAKxC,iDAAiD;AACjD,MAAM,eAAe,GAAG,EAAE,CAAA;AAgD1B,SAAS,iBAAiB;IACxB,OAAO,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACtE,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAoB;IACvC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,SAAS;IACrB,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,wBAAwB;IACtC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,qBAAqB;IACjC,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,KAAK;IAClB,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,iBAAiB,EAAE;IAC/B,SAAS,EAAE,EAAE;IACb,oBAAoB,EAAE,KAAK;IAC3B,mBAAmB,EAAE,EAAE;CACxB,CAAA;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA2B,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC1G,OAAQ,KAAgC,CAAC,GAAG,EAAE,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,4DAA4D;AAC5D,SAAS,KAAK,CAAC,GAAW,EAAE,GAAW;IACrC,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5G,CAAC;AAED,+CAA+C;AAC/C,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/F,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1G,CAAC;AAED,2CAA2C;AAC3C,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7E,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAmB,GAAG,OAAqB;IACvD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAC5H,CAAC;AAED;yEACyE;AACzE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/D,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IACjE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;iEACiE;AACjE,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;qCAEqC;AACrC,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;AACxE,CAAC;AAED;;;;;;;oCAOoC;AACpC,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;IAC7E,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED;0DAC0D;AAC1D,SAAS,SAAS,CAChB,IAAY,EACZ,QAAgD;IAEhD,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA;IAC5C,CAAC,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAY,EACZ,GAAG,OAAqB;IAExB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAA;IAClC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;AACrC,CAAC;AAED;2EAC2E;AAC3E,SAAS,OAAO,CAAC,IAAY,EAAE,MAAgC;IAC7D,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACpD,CAAC,CAAA;AACH,CAAC;AAED;;;;;4BAK4B;AAC5B,SAAS,iBAAiB,CAAC,QAAgD;IACzE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AAClH,CAAC;AAED;8CAC8C;AAC9C,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnG,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC;AAmBD,MAAM,MAAM,GAAwE;IAClF,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;IACrE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE;IAC1H,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IACpF,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;IAC7F,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE;IAC3L,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE;IAC/F,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IACrG,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;IAC7H,UAAU,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;IAC5F,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,sBAAsB,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,CAAC,cAAc,CAAC,EAAE;IACxI,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACtG,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvG,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IAChG,UAAU,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE;IACrD,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;IAC5D,oBAAoB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvD,2EAA2E;IAC3E,qEAAqE;IACrE,mEAAmE;IACnE,mBAAmB,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;CAC3D,CAAA;AAED;;;;GAIG;AACH,SAAS,YAAY,CACnB,GAAM,EACN,GAA4B,EAC5B,IAA6B,EAC7B,GAAsB,EACtB,OAAoD;IAEpD,MAAM,KAAK,GAAsC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,wEAAwE;IACxE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAA;YACrB,OAAO,QAAQ,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAA;IACxB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,mEAAmE;AACnE,SAAS,OAAO,CAAC,MAAe;IAC9B,OAAO,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC5E,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAY,EACZ,IAA6B,EAC7B,GAAsB;IAKtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAiD,CAAA;IACjE,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACrE,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC/E,YAAY,EAAE,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3E,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3D,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,cAAc,EAAE,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC/E,WAAW,EAAE,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzE,WAAW,EAAE,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACzE,QAAQ,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACnE,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACvE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QACrE,oBAAoB,EAAE,YAAY,CAAC,sBAAsB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;QAC3F,mBAAmB,EAAE,YAAY,CAAC,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;KAC1F,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;QACpD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,cAAc,CAAE,GAA6C,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;AAC9G,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,oBAAoB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACxC,2EAA2E;IAC3E,mEAAmE;IACnE,sCAAsC;IACtC,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,sEAAsE;IACtE,2EAA2E;IAC3E,6DAA6D;IAC7D,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IACjD,yEAAyE;IACzE,2CAA2C;IAC3C,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,iBAAiB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA"}

package/lib/http.js

@@ -66,4 +66,14 @@ export function sameOriginPost(req) {
         return false;
     }
 }
+/**
+ * One plugin-bridge refusal (PB-3): the standard JSON envelope plus the
+ * `x-zen-remote-error` marker header — the sub-client's passthrough layer
+ * classifies a refusal off the header alone, because the success path
+ * streams opaque plugin bytes and must never have to parse a body.
+ */
+export function pluginBridgeError(res, status, code) {
+    res.setHeader('x-zen-remote-error', code);
+    responseJson(res, status, { ok: false, error: { code } });
+}
 //# sourceMappingURL=http.js.map

package/lib/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;wEAEwE;AACxE,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAA;IAChE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IACrD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;IAClD,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,4CAA4C,CAAC,CAAA;IACtF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAoB;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/C,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,KAAK,CAAA;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACxC,OAAO,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,MAAM,CAAA;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA;IAC7B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAA;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;wEAEwE;AACxE,MAAM,UAAU,YAAY,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/C,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAA;IAChE,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IACrD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAA;IAC1C,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAA;IAClD,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,4CAA4C,CAAC,CAAA;IACtF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,cAAc,CAAC,GAAoB;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC/C,IAAI,SAAS,KAAK,YAAY;QAAE,OAAO,KAAK,CAAA;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACxC,OAAO,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,MAAM,CAAA;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAA;IAC7B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAA;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAGD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAY;IACjF,GAAG,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;IACzC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/lib/index.js

@@ -19,7 +19,7 @@ import { randomBytes } from 'node:crypto';
 import { homedir } from 'node:os';
 import { basename, extname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { readFileConfig, resolveConfig, unwrapVolatile } from './config.js';
-import { createActivityTracker, createParentIndex, startSweeper } from './activity.js';
+import { createActivityTracker, createParentIndex, seedParentIndexFromSnapshots, startSweeper } from './activity.js';
 import { ADMIN_ROUTE_PREFIX, createAdminHandler } from './admin-routes.js';
 import { normalizedRowServerUrl } from './client-pairing.js';
 import { CLIENT_ROUTE_PREFIX, createClientHandler } from './client-routes.js';
@@ -33,7 +33,13 @@ import { computeFingerprints } from './fingerprint.js';
 import { runSelfCheck, installIntercept } from './intercept.js';
 import { checkGatewayShape } from './intercept-shape.js';
 import { checkFetchRouteShape, installFetchRouteIntercept } from './fetch-route-intercept.js';
+import { checkWebServerShape, installPluginRouteIntercept } from './plugin-route-intercept.js';
+import { normalizeAdapter, adapterOwnsRegistryEntry } from './plugin-adapter-core.js';
+import { ADAPTERS } from './adapters/index.js';
 import { createRelayHandler, loadServerId, RELAY_PREFIX, resolveDshVersion } from './relay-server.js';
+import { createBridgeRegistry, compareBridges } from './plugin-bridge.js';
+import { createPluginLoopback } from './plugin-loopback.js';
+import { createPluginTunnel } from './plugin-tunnel.js';
 // The loader's config schema (settings form) and the role normalizer live in
 // src/config.ts next to the resolution they describe; re-exported so the
 // plugin row's public surface stays on the main entry. The same-origin gate
@@ -87,6 +93,20 @@ let clientRelayClient;
 export function getRelayClient() {
     return clientRelayClient;
 }
+/**
+ * The plugin bridge's declaration registry (PB-1), created inside apply() on
+ * BOTH roles and kept on the module so later tasks (the handshake's plugins
+ * table, the client-side rewrite) can reach it without reaching into a
+ * context. Undefined in compositions that never ran this module's apply, and
+ * — identity-guarded below — after the row that owned a registry was
+ * unloaded or reloaded, so a reloaded row never leaves a stale table where
+ * the getter can hand it out (the T23a-fix discipline).
+ */
+let bridgeRegistry;
+/** The live bridge registry, if a plugin row is currently applied. */
+export function getBridgeRegistry() {
+    return bridgeRegistry;
+}
 /**
  * One configured number on its way to the browser, clamped into a band that
  * cannot break the composer — a ratio of 5 or a 9000px lift would push the
@@ -365,6 +385,79 @@ export async function handleUpload(ctx, maxBytes, req, res, admit) {
  */
 export function apply(ctx, config = {}) {
     const effective = resolveConfig(config, readFileConfig(), process.env);
+    // The plugin bridge's zenRemote service (PB-1), provided on BOTH roles
+    // before any role branch: a plugin that wants its panel data forwarded in
+    // remote sessions declares that against THIS process whichever role it
+    // runs as, and the declaration registry is the one piece of PB-1 both the
+    // server half (handshake plugins table) and the client half (route
+    // rewrite) will read. ctx.provide (cordis 4) registers the service owned
+    // by THIS row's fiber: visible to `inject(['zenRemote'])` dependents once
+    // the row is active, withdrawn when the row unloads — so a composition
+    // without zen-remote never fires those injects and a row reload swaps the
+    // service wholesale. The registry goes into the module slot BEFORE the
+    // provide so this apply's consumers never see a window without it; the
+    // effect's identity guard then clears the slot exactly when THIS row
+    // unloads (a reload installs the new registry before the old disposer
+    // runs, same shape as clientRelayClient). provide() throwing is not worth
+    // failing the row over — the bridge stays off, everything else keeps
+    // working — so it degrades to a warning like the session feeds do.
+    const registry = createBridgeRegistry({
+        warn: (text) => { ctx.logger?.warn('dsh-zen-remote plugin bridge: %s', text); },
+    });
+    bridgeRegistry = registry;
+    try {
+        const service = {
+            bridge: (declaration) => registry.register(declaration),
+        };
+        ctx.provide('zenRemote', service);
+    }
+    catch (error) {
+        ctx.logger?.warn('dsh-zen-remote: cannot provide the "zenRemote" service: %s', message(error));
+    }
+    ctx.effect(() => () => {
+        if (bridgeRegistry === registry)
+            bridgeRegistry = undefined;
+    }, 'dsh-zen-remote: plugin bridge registry disposal');
+    // The adapters (PB-11): each one registers ONLY against its target's
+    // EXACT installed version, probed off the host's `pluginPackages` service
+    // (`packageOf(name, ctx.baseUrl)` — verified on 0.2.0-rc.2 to answer
+    // `{name, version, dir, …}` or undefined; any other shape, a missing
+    // service or a probe failure reads as "not installed" and the adapter
+    // stays out). A plugin that registers its OWN cooperative declaration
+    // always wins: the adapter yields at registration time (logged), and the
+    // runtime re-checks the registry digest on every request. Both roles run
+    // this loop — the registry entries drive the handshake table, the bridge
+    // verdicts and the settings listing on either side, while the returned
+    // array feeds the two request halves.
+    const adapters = [];
+    {
+        const adapterWarn = (text) => { ctx.logger?.warn('dsh-zen-remote adapter: %s', text); };
+        for (const adapter of ADAPTERS) {
+            try {
+                const holder = ctx;
+                const packages = holder.get?.('pluginPackages');
+                const found = packages?.packageOf?.(adapter.plugin, holder.baseUrl ?? '');
+                const installedVersion = found !== null && typeof found === 'object' && typeof found.version === 'string'
+                    ? found.version
+                    : undefined;
+                if (installedVersion === undefined || installedVersion === '') {
+                    adapterWarn(`${adapter.plugin}: target package (or its version) not found; not registered`);
+                    continue;
+                }
+                const normalized = normalizeAdapter(adapter, installedVersion);
+                if (registry.get(normalized.plugin) !== undefined) {
+                    adapterWarn(`${normalized.plugin}: the plugin registers its own bridge declaration; the adapter yields`);
+                    continue;
+                }
+                registry.registerNormalized(normalized.declaration);
+                adapters.push(normalized);
+                ctx.logger?.info('dsh-zen-remote adapter: %s adapted at version %s', normalized.plugin, installedVersion);
+            }
+            catch (error) {
+                adapterWarn(`${adapter.plugin} refused: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
     if (effective.values.role === 'host') {
         // A row that switched from client to host must not leave a stale relay
         // client where getRelayClient() can find it (T23a-fix).
@@ -466,6 +559,32 @@ export function apply(ctx, config = {}) {
             const agents = agentsCtx.agents;
             restoreBusy(store, () => agents.list());
         });
+        // Restart repair (2026-10-13): the parent index rebuilds only from LIVE
+        // session/event traffic, so after a host restart every already-stored
+        // sidechat / subagent child lost its parent link and the relay answered
+        // `not-shared` for a session whose share it used to inherit through the
+        // ancestor chain. Seed the index once from the persistence service's
+        // snapshot list — headers only, event logs are never read.
+        try {
+            ctx.inject(['sessionPersistence'], (persistenceCtx) => {
+                const persistence = persistenceCtx.sessionPersistence;
+                if (persistence === undefined) {
+                    ctx.logger.warn('dsh-zen-remote: no sessionPersistence service — pre-restart subagent sessions stay not-shared until they emit an event');
+                    return;
+                }
+                void persistence
+                    .list()
+                    .then((snapshots) => {
+                    const recorded = seedParentIndexFromSnapshots(parentIndex, snapshots);
+                    if (recorded > 0)
+                        ctx.logger.info?.('dsh-zen-remote: restored %d persisted parent links', recorded);
+                })
+                    .catch((error) => ctx.logger.warn('dsh-zen-remote cannot seed parent links from persisted sessions: %s', message(error)));
+            });
+        }
+        catch (error) {
+            ctx.logger.warn('dsh-zen-remote cannot listen on "sessionPersistence": %s', message(error));
+        }
         // Settings-surface admin routes (T14). The browser cannot call the
         // gateway's loopback-only admin API from DSH's origin, so the host
         // process re-exposes it same-origin and the handler calls the gateway AS
@@ -506,6 +625,16 @@ export function apply(ctx, config = {}) {
                     // composition lacks the service.
                     viewerCount: (id) => relayHandler?.viewerCount(id) ?? 0,
                     sessionQuery: () => webCtx.reflect.get('sessionQuery'),
+                    // The plugin bridge listing (PB-5): the SAME registry this apply
+                    // built and the SAME live consent reader the relay's plugins table
+                    // uses — one source of truth per question. PB-11: the listing
+                    // marks the plugins an adapter stands in for (live — a plugin
+                    // that registered its own declaration stops being marked).
+                    pluginBridge: {
+                        registry,
+                        getConsent: () => resolveConfig(config, readFileConfig(), process.env).values.pluginBridgeConsent,
+                        adaptedPlugins: () => new Set(adapters.filter((adapter) => adapterOwnsRegistryEntry(adapter, registry.get(adapter.plugin))).map((adapter) => adapter.plugin)),
+                    },
                 }),
             }), 'dsh-zen-remote: admin routes');
         });
@@ -549,6 +678,32 @@ export function apply(ctx, config = {}) {
             // ~7 ms per computation against a full registry; a failed compute
             // lands as the empty map inside the relay handler's own guard.
             relayCtx.effect(() => {
+                // The plugin bridge's loopback facts (PB-3), both read PER REQUEST
+                // through the reflection layer: the web server may have restarted on
+                // another port or protocol, and the connection service's
+                // authenticatedUrl — the token-exchange entry the lan-gate wiring
+                // also reads (0.1.1 hosts lack the method entirely) — lives on a
+                // service deliberately NOT in this inject's declaration list (same
+                // reason as getApiFetch above: adding it would keep the whole relay
+                // prefix off compositions that lack it).
+                const getLoopbackTarget = () => {
+                    const webServer = relayCtx.reflect.get('webServer');
+                    const port = typeof webServer?.port === 'number' && webServer.port > 0 ? webServer.port : undefined;
+                    if (port === undefined)
+                        throw new Error('the web server exposes no loopback port');
+                    return { protocol: webServer?.protocol === 'https:' ? 'https:' : 'http:', port };
+                };
+                const getTokenUrl = () => {
+                    const connection = relayCtx.reflect.get('connection');
+                    if (typeof connection?.authenticatedUrl !== 'function')
+                        return undefined;
+                    const { protocol, port } = getLoopbackTarget();
+                    return connection.authenticatedUrl(`${protocol}//127.0.0.1:${port}`);
+                };
+                // One loopback executor for BOTH plugin halves (the HTTP forward and
+                // the PB-10 tunnel): a single cookie cache behind two consumers.
+                const pluginLoopback = createPluginLoopback({ getTarget: getLoopbackTarget, getTokenUrl });
+                const pluginConsent = () => resolveConfig(config, readFileConfig(), process.env).values.pluginBridgeConsent;
                 const handler = createRelayHandler({
                     secret: relaySecret,
                     store,
@@ -566,6 +721,43 @@ export function apply(ctx, config = {}) {
                         serverName: () => resolveConfig(config, readFileConfig(), process.env).values.serverName,
                         dshVersion: resolveDshVersion(),
                         fingerprints: () => computeFingerprints(relayCtx),
+                        // PB-2: the plugin bridge table, rebuilt FRESH at every handshake
+                        // from the PB-1 registry and the row's consent map — both live:
+                        // the registry through this apply's own closure, the consent
+                        // through resolveConfig on the SAME row object (a volatile field,
+                        // read at use time per the hard constraint, never snapshotted).
+                        plugins: () => {
+                            const consent = resolveConfig(config, readFileConfig(), process.env).values.pluginBridgeConsent;
+                            const table = {};
+                            for (const declaration of registry.list()) {
+                                table[declaration.plugin] = {
+                                    version: declaration.version,
+                                    digest: declaration.digest,
+                                    serverScopeConsent: consent[declaration.plugin] === true,
+                                };
+                            }
+                            return table;
+                        },
+                    },
+                    // PB-3: the forwarding half of the plugin bridge — the registry
+                    // this apply built (the zenRemote service's table), the consent
+                    // map read LIVE per request (a volatile row field), and the
+                    // loopback executor over the wiring's two reflection getters.
+                    // PB-10: the WebSocket byte tunnel's server half shares the SAME
+                    // loopback (one cookie cache) and the same live consent; its
+                    // reachability judgment rides the store directly (the handler's
+                    // own isAccessible closure is not visible out here).
+                    pluginBridge: {
+                        registry,
+                        getConsent: pluginConsent,
+                        loopback: pluginLoopback,
+                        adapters,
+                        tunnel: createPluginTunnel({
+                            bridge: { registry, getConsent: pluginConsent, loopback: pluginLoopback },
+                            getTarget: getLoopbackTarget,
+                            isAccessible: (sessionId) => store.isAccessible(sessionId, parentIndex.parentOf),
+                            heartbeatMs: 15_000,
+                        }),
                     },
                 });
                 const unregister = relayCtx.webServer.register({
@@ -641,6 +833,14 @@ export function apply(ctx, config = {}) {
             computeOwnFingerprints: () => computeFingerprints(ctx),
         });
         clientRelayClient = relayClient;
+        // The plugin bridge's live verdict (PB-2), the CLIENT role's job — a host
+        // has no remote sessions of its own to bridge anything into. Computed PER
+        // CALL (never a stored conclusion): the local registry is this apply's
+        // own closure, the server's table is the LAST handshake's `plugins`
+        // (undefined until one succeeded — an old server reads server-too-old),
+        // and `online` is the client's CURRENT state — so a registry change, a
+        // fresh handshake or a link flip shows up at the very next read.
+        const pluginBridgeStatus = () => compareBridges(registry.list(), relayClient.handshakeInfo?.plugins, relayClient.state === 'online');
         // A stopped or reloaded row must not leave a stale instance where the
         // module getter can hand it out (T23a-fix), and its reconnect machinery
         // (T43) must not outlive the row either: stop() cancels the armed retry
@@ -846,6 +1046,76 @@ export function apply(ctx, config = {}) {
                     fetchRouteHandle = undefined;
             }, 'dsh-zen-remote: fetch-route intercept');
         });
+        // The plugin bridge's route interception (PB-4): the local webServer's
+        // `match` wrap forwarding bridged-plugin requests for REMOTE sessions
+        // through the relay. Injected on `webServer` alone — the only service
+        // it reads — and the raw instance comes off the reflection layer's
+        // symbols lookup, the same face the typert and fetch-route wraps use.
+        // The diagnostics flow to the client status route like theirs, refused
+        // installs included.
+        let pluginRouteHandle;
+        let pluginRouteRefused;
+        const pluginRouteDiagnostics = () => {
+            if (pluginRouteHandle !== undefined)
+                return pluginRouteHandle.diagnostics();
+            if (pluginRouteRefused !== undefined) {
+                return {
+                    installed: false,
+                    shape: pluginRouteRefused,
+                    forwarded: 0,
+                    refused: 0,
+                    refusalsByReason: {},
+                    recentFailures: [],
+                    adapterForwarded: 0,
+                    adapterResponseRewrites: 0,
+                    adapterResponsePassthroughs: 0,
+                    tunnelsCurrent: 0,
+                    tunnelsOpened: 0,
+                    tunnelsClosed: 0,
+                };
+            }
+            return undefined;
+        };
+        ctx.inject(['webServer'], (wsCtx) => {
+            const logWarn = (...args) => { ctx.logger?.warn(...args); };
+            const proxy = wsCtx.webServer;
+            const raw = proxy !== null && typeof proxy === 'object'
+                ? proxy[symbols.original]
+                : undefined;
+            if (raw === null || typeof raw !== 'object') {
+                pluginRouteRefused = { ok: false, reasons: ['original: webServer[symbols.original] is not an object'] };
+                logWarn('dsh-zen-remote plugin-route intercept not installed: %s', pluginRouteRefused.reasons[0]);
+                return;
+            }
+            // Shape first, like every wrap: a failed check leaves the webServer
+            // exactly as it was — local routing untouched, remote bridging off.
+            const shape = checkWebServerShape(raw);
+            if (!shape.ok) {
+                pluginRouteRefused = shape;
+                logWarn('dsh-zen-remote plugin-route intercept not installed: %s', shape.reasons.join('; '));
+                return;
+            }
+            const handle = installPluginRouteIntercept({
+                webServer: raw,
+                registry,
+                relay: relayClient,
+                getServerId: () => relayClient.handshakeInfo?.serverId,
+                getStatus: pluginBridgeStatus,
+                adapters,
+                // PB-12: the browser's currently open session — a VIRTUAL id means
+                // a remote panel is the request's origin, the signal the adapter
+                // routes' deny hooks read (better-sidebar's open.external carries
+                // no session field of its own).
+                getCurrentSession: () => (reportedCurrentSession.kind === 'open' ? reportedCurrentSession.sessionId : undefined),
+                log: (format, ...args) => { ctx.logger?.info(`dsh-zen-remote ${format}`, ...args); },
+            });
+            pluginRouteHandle = handle;
+            wsCtx.effect(() => () => {
+                handle.uninstall();
+                if (pluginRouteHandle === handle)
+                    pluginRouteHandle = undefined;
+            }, 'dsh-zen-remote: plugin route intercept');
+        });
         ctx.inject(['webServer', 'connection'], (clientCtx) => {
             clientCtx.effect(() => clientCtx.webServer.register({
                 kind: 'prefix',
@@ -856,6 +1126,8 @@ export function apply(ctx, config = {}) {
                     getRelayClient: () => relayClient,
                     getIntercept: interceptDiagnostics,
                     getFetchRouteIntercept: fetchRouteDiagnostics,
+                    getPluginRouteIntercept: pluginRouteDiagnostics,
+                    getPluginBridgeStatus: pluginBridgeStatus,
                     onCurrentSession,
                 }),
             }), 'dsh-zen-remote: client routes');