diff --git a/frontend.go b/frontend.go
index 316e4c2..2ec71ae 100644
--- a/frontend.go
+++ b/frontend.go
@@ -52,8 +52,11 @@ var allowedFrontendFiles = map[string]bool{
 // Plugin web files that are allowed to call plugin-owned REST handlers because
 // there is no ConnectRPC surface for them yet. Keep this list narrow.
 var allowedPluginRESTFiles = map[string]bool{
-	"backend/internal/plugins/calcomblock/web/settings.tsx": true, // Plugin settings/test endpoints are mounted via HTTPHandler; no generated hooks exist yet
-	"backend/internal/plugins/calcomblock/web/editor.tsx":   true, // Block editor reads plugin /settings + /event-types via HTTPHandler routes
+	// Suffix-matched (see pluginRESTFileAllowed), so these cover calcomblock both
+	// as the standalone plugin repo (plugins/calcomblock/web/...) and the legacy
+	// bundled path (backend/internal/plugins/calcomblock/web/...).
+	"plugins/calcomblock/web/settings.tsx": true, // Plugin settings/test endpoints are mounted via HTTPHandler; no generated hooks exist yet
+	"plugins/calcomblock/web/editor.tsx":   true, // Block editor reads plugin /settings + /event-types via HTTPHandler routes
 }
 
 // Specific fetch paths that are non-proto REST endpoints (no ConnectRPC equivalent)