32 lines
1.4 KiB
Markdown
32 lines
1.4 KiB
Markdown
# Plugin Page Bridge Contract
|
|
|
|
Plugin page runs with safe platform context.
|
|
|
|
## Host Context
|
|
|
|
- `pluginId`: installed plugin ID.
|
|
- `routeKey`: current plugin route.
|
|
- `serverInstanceId`: optional selected server instance.
|
|
- `themeTokens`: safe theme tokens.
|
|
- `permissions`: effective plugin permissions.
|
|
|
|
## Host APIs
|
|
|
|
- `api.request`: platform-scoped request only.
|
|
- `jobs.dispatch`: authorized job dispatch.
|
|
- `logs.query`: historical log query and analysis windows.
|
|
- `artifacts.open`: artifact upload/download references.
|
|
- `files.request`: scoped file operation requests.
|
|
- `remote.access.request`: declared logical remote-access or read-only query-template request.
|
|
- `run.distribution.request`: platform-mediated Run distribution request.
|
|
- `dependencies.request`: declared dependency check or install request.
|
|
- `logs.backfill.request`: bounded historical log backfill request.
|
|
- `plugin-lifecycle.request`: declared plugin lifecycle request through Platform.
|
|
- `ai.invoke`: platform-mediated AI invocation.
|
|
|
|
The host intersects manifest-level and page-level permissions/actions before exposing context. A plugin page additionally intersects its command, snapshot, and query-template keys with the matching `gameClientBridge.pages.*` declaration; it does not synthesize undeclared game semantics.
|
|
|
|
## Forbidden
|
|
|
|
The host must not expose raw auth storage, AI keys, run credentials, host paths, or storage backend credentials.
|