browser/platform_web/contracts/plugin-page-bridge.md

Plugin Page Bridge Contract

Plugin page runs with safe platform context.

Host Context

• pluginId: installed plugin ID.
• routeKey: current plugin route.
• serverInstanceId: optional selected server instance.
• themeTokens: safe theme tokens.
• permissions: effective plugin permissions.

Host APIs

• api.request: platform-scoped request only.
• jobs.dispatch: authorized job dispatch.
• logs.query: historical log query and analysis windows.
• artifacts.open: artifact upload/download references.
• files.request: scoped file operation requests.
• remote.access.request: declared logical remote-access or read-only query-template request.
• run.distribution.request: platform-mediated Run distribution request.
• dependencies.request: declared dependency check or install request.
• logs.backfill.request: bounded historical log backfill request.
• plugin-lifecycle.request: declared plugin lifecycle request through Platform.
• ai.invoke: platform-mediated AI invocation.

The host intersects manifest-level and page-level permissions/actions before exposing context. A plugin page additionally intersects its command, snapshot, and query-template keys with the matching gameClientBridge.pages.* declaration; it does not synthesize undeclared game semantics.

Forbidden

The host must not expose raw auth storage, AI keys, run credentials, host paths, or storage backend credentials.