Settings-driven environment variables and plugin paths are now handled by one resettable object.
What's wrong with this entry?
Applying environment variables from settings layers, the rules that let managed telemetry settings win, the snapshot of the environment taken before settings load, and the set of keys passed to spawned hosts are now fields on a single object, so resetting them is one call. Plugin cache and marketplace paths can now be turned into storage keys, and plugin MCP server files read through the backend.
so lower-trust scopes cannot redirect
Strings lifted out of the shipped bundle, so the claim above can be checked against them.