diff --git a/frontend.go b/frontend.go
index 2ec71ae..f87d7e5 100644
--- a/frontend.go
+++ b/frontend.go
@@ -47,6 +47,14 @@ var allowedFrontendFiles = map[string]bool{
 	// with `for await` — generated Connect Query hooks are unary-only and
 	// cannot express a streaming turn (same reason as use-restart-operation).
 	"components/site-agent/use-site-agent-stream.ts": true,
+
+	// Registry browse/detail call the ORCHESTRATOR's public Connect endpoints
+	// (PluginRegistryService/PluginReviewService) on a different origin. The
+	// CMS transport and generated hooks only cover the CMS's own proto surface,
+	// so these are plain JSON POSTs to the registry URL from GetAuthConfig
+	// (same reason routes/admin/plugins.tsx carried before the extraction).
+	"components/plugins/browse-registry-tab.tsx": true,
+	"components/plugins/registry-detail.tsx":     true,
 }
 
 // Plugin web files that are allowed to call plugin-owned REST handlers because