Function handle_widget_file 

pub(crate) async fn handle_widget_file(
    __arg0: Path<(String, String, String, String)>,
) -> Response

GET /agentmux/widget-files/<id>/<hash>/<key>/<path>: an approved, enabled package’s file, as approved (spec §5.2). No auth key: an iframe loads these, and the key segment is what keeps other web pages out.