@burdenoff/microfe-bigconsole 2026.1011.10 → 2026.1012.1

package/README.md

@@ -31,6 +31,25 @@ import { WorkflowsRoot } from '@burdenoff/micro-fe/workflows';
 />
 ```
 
+## Widget content
+
+Widget configuration and parser output are rendered as data:
+
+- **Text widgets** render markdown through the shared fe-libs `Markdown`
+  component (raw HTML inside markdown is not rendered, images show their alt
+  text). The `html` format is available only when the widget is configured for
+  it, and the markup is sanitised with DOMPurify before it is rendered.
+- **Links** in text, custom, Adaptive Card and Block Kit content are limited to
+  `https:`, `http:` and `mailto:` URLs; text and custom-widget content may also
+  link to in-app paths and fragments.
+- **Iframe and custom-widget embeds** accept absolute `https:` URLs on another
+  origin only, and always use the same sandbox
+  (`allow-scripts allow-popups allow-forms`) with
+  `referrerpolicy="no-referrer"`. Hosts can restrict the embeddable sites with
+  the `iframeAllowedOrigins` root prop, a list of exact https origins such as
+  `['https://reports.example.com']`. An empty or missing list allows any https
+  origin.
+
 ## Development
 
 ```bash

package/dist/bigconsole/BigConsoleRoot.js

@@ -16,67 +16,71 @@ import { useSearchParams as v } from "react-router";
 import { ErrorBoundary as y } from "@burdenoff/fe-libs/shared/components";
 import { FeatureFlagProvider as b } from "@burdenoff/fe-libs/shared/feature-flags";
 import { PermissionProvider as x } from "@burdenoff/fe-libs/shared/providers/shell";
-import { BarChart3 as S, Boxes as C, Database as w, LayoutDashboard as T, Lightbulb as E, Settings as ee } from "lucide-react";
-import { jsx as D, jsxs as O } from "react/jsx-runtime";
-import { resetFluidGridsClient as k, resetFluidGridsConfig as A, resetGlobalStoreClient as j, setFluidGridsClient as M, setFluidGridsConfig as N, setGlobalStoreClient as P } from "@burdenoff/fluidgrids-fe-sdk";
-import { useGatewayClient as F } from "@burdenoff/fe-libs/shared/graphql";
+import { BarChart3 as S, Boxes as C, Database as w, LayoutDashboard as T, Lightbulb as E, Settings as D } from "lucide-react";
+import { jsx as O, jsxs as k } from "react/jsx-runtime";
+import { setFluidGridsClient as A, setFluidGridsConfig as j, setGlobalStoreClient as M } from "@burdenoff/fluidgrids-fe-sdk";
+import { useGatewayClient as N } from "@burdenoff/fe-libs/shared/graphql";
 //#region src/bigconsole/BigConsoleRoot.tsx
-var I = i, L = r, R = a, z = /* @__PURE__ */ new Set(), B = (r) => {
-	let { registerNavItems: i, registerFooterItems: a, basePath: B = "/bigconsole", navigate: V } = r, H = F("workspace"), U = F("global"), [W, G] = _(!1), [K, q] = _(null), J = (e, t) => (e.endsWith("/") ? e.slice(0, -1) : e) + (t.startsWith("/") ? t : `/${t}`);
+var P = i, F = r, I = a, L = /* @__PURE__ */ new Set(), R = (r) => {
+	let { registerNavItems: i, registerFooterItems: a, basePath: R = "/bigconsole", navigate: z } = r, B = r.dashboardOnly ?? !1, V = N("workspace"), H = N("global"), [U, W] = _(B), [G, K] = _(null), q = (e, t) => (e.endsWith("/") ? e.slice(0, -1) : e) + (t.startsWith("/") ? t : `/${t}`);
 	m(() => {
 		if (i) return i({
 			id: "bigconsole",
 			label: "Analytics",
-			path: B,
-			icon: /* @__PURE__ */ D(S, { size: 20 }),
+			path: R,
+			icon: /* @__PURE__ */ O(S, { size: 20 }),
 			order: 15,
 			group: "bigconsole",
 			children: [
 				{
 					id: "bigconsole-home",
 					label: "Overview",
-					path: B,
-					icon: /* @__PURE__ */ D(S, { size: 16 }),
+					path: R,
+					icon: /* @__PURE__ */ O(S, { size: 16 }),
 					order: 10
 				},
 				{
 					id: "bigconsole-dashboards",
 					label: "Dashboards",
-					path: J(B, "dashboards"),
-					icon: /* @__PURE__ */ D(T, { size: 16 }),
+					path: q(R, "dashboards"),
+					icon: /* @__PURE__ */ O(T, { size: 16 }),
 					order: 20
 				},
 				{
 					id: "bigconsole-datasources",
 					label: "Data Sources",
-					path: J(B, "datasources"),
-					icon: /* @__PURE__ */ D(w, { size: 16 }),
+					path: q(R, "datasources"),
+					icon: /* @__PURE__ */ O(w, { size: 16 }),
 					order: 30
 				},
 				{
 					id: "bigconsole-insights",
 					label: "AI Insights",
-					path: J(B, "insights"),
-					icon: /* @__PURE__ */ D(E, { size: 16 }),
+					path: q(R, "insights"),
+					icon: /* @__PURE__ */ O(E, { size: 16 }),
 					order: 40
 				},
 				{
 					id: "bigconsole-widgets",
 					label: "Widget Demo",
-					path: J(B, "widgets/demo"),
-					icon: /* @__PURE__ */ D(C, { size: 16 }),
+					path: q(R, "widgets/demo"),
+					icon: /* @__PURE__ */ O(C, { size: 16 }),
 					order: 50
 				},
 				{
 					id: "bigconsole-settings",
 					label: "Settings",
-					path: J(B, "settings"),
-					icon: /* @__PURE__ */ D(ee, { size: 16 }),
+					path: q(R, "settings"),
+					icon: /* @__PURE__ */ O(D, { size: 16 }),
 					order: 60
 				}
-			]
+			].filter((e) => !B || e.id === "bigconsole-dashboards")
 		});
-	}, [i, B]), m(() => {
+	}, [
+		i,
+		R,
+		B
+	]), m(() => {
 		if (a) return a([{
 			id: "bigconsole-status",
 			label: "Analytics Ready",
@@ -84,51 +88,55 @@ var I = i, L = r, R = a, z = /* @__PURE__ */ new Set(), B = (r) => {
 			order: 15,
 			section: "left"
 		}]);
-	}, [a]), m(() => (H && U && (M(H), P(U), G(!0)), () => {
-		k(), j();
-	}), [H, U]), m(() => {
-		if (W) return;
+	}, [a]), m(() => {
+		B || V && H && (A(V), M(H), W(!0));
+	}, [
+		V,
+		H,
+		B
+	]), m(() => {
+		if (U) return;
 		let e = setTimeout(() => {
-			W || q("BigConsole could not connect to the gateway. Please refresh the page or check your configuration.");
+			U || K("BigConsole could not connect to the gateway. Please refresh the page or check your configuration.");
 		}, 1e4);
 		return () => clearTimeout(e);
-	}, [W]);
-	let Y = p(async (e) => {
+	}, [U]);
+	let J = p(async (e) => {
 		if (e.operation === "created") {
-			if (!H) {
+			if (!V) {
 				console.warn("[BigConsole] onWorkflowSaved: workspace client not ready");
 				return;
 			}
-			if (!z.has(e.workflowKey)) {
-				z.add(e.workflowKey);
+			if (!L.has(e.workflowKey)) {
+				L.add(e.workflowKey);
 				try {
-					if ((await H.query({
-						query: I,
+					if ((await V.query({
+						query: P,
 						variables: { key: e.workflowKey },
 						fetchPolicy: "network-only"
 					})).data?.workflowByKey) return;
-					await H.mutate({
-						mutation: L,
+					await V.mutate({
+						mutation: F,
 						variables: { input: {
 							name: e.name,
 							key: e.workflowKey,
 							description: e.description,
 							externalWorkflowId: e.dbId
 						} },
-						refetchQueries: [{ query: R }]
+						refetchQueries: [{ query: I }]
 					});
 				} catch (e) {
 					console.warn("[BigConsole] onWorkflowSaved: failed to create record:", e);
 				} finally {
-					z.delete(e.workflowKey);
+					L.delete(e.workflowKey);
 				}
 			}
 		}
-	}, [H]), X = g(Y);
+	}, [V]), Y = g(J);
 	h(() => {
-		X.current = Y;
-	}, [Y]), m(() => {
-		if (r.apiGatewayUrl) {
+		Y.current = J;
+	}, [J]), m(() => {
+		if (!B && r.apiGatewayUrl) {
 			let e = r.apiGatewayUrl.endsWith("/") ? r.apiGatewayUrl.slice(0, -1) : r.apiGatewayUrl;
 			console.log("[BigConsole] Setting FluidGrids config", {
 				apiGatewayUrl: e,
@@ -136,83 +144,81 @@ var I = i, L = r, R = a, z = /* @__PURE__ */ new Set(), B = (r) => {
 				tenantId: r.tenantId,
 				productId: r.productId,
 				productName: r.productName
-			}), N({
+			}), j({
 				apiGatewayUrl: e,
 				authToken: r.authToken,
 				workspaceId: r.workspaceId ?? "",
 				tenantId: r.tenantId,
 				productId: r.productId ?? "bigconsole",
 				productName: r.productName ?? "BigConsole",
-				onWorkflowSaved: (e) => X.current(e)
+				onWorkflowSaved: (e) => Y.current(e)
 			});
 		}
-		return () => {
-			A();
-		};
 	}, [
 		r.apiGatewayUrl,
 		r.authToken,
 		r.workspaceId,
 		r.tenantId,
 		r.productId,
-		r.productName
+		r.productName,
+		B
 	]);
-	let [Z, Q] = v(), te = e((e) => e.isOpen), $ = e((e) => e.closeModal);
+	let [X, Z] = v(), Q = e((e) => e.isOpen), $ = e((e) => e.closeModal);
 	l();
-	let ne = p(() => {
+	let ee = p(() => {
 		$();
-		let e = new URLSearchParams(Z);
+		let e = new URLSearchParams(X);
 		Array.from(e.keys()).forEach((t) => {
 			(t.startsWith("filter_") || t.startsWith("ctx_")) && e.delete(t);
-		}), Q(e, { replace: !0 }), document.activeElement instanceof HTMLElement && document.activeElement.blur();
+		}), Z(e, { replace: !0 }), document.activeElement instanceof HTMLElement && document.activeElement.blur();
 	}, [
 		$,
-		Z,
-		Q
-	]), re = p((e) => {
+		X,
+		Z
+	]), te = p((e) => {
 		let t = new URLSearchParams();
 		for (let e of [
 			"org",
 			"workspace",
 			"project"
 		]) {
-			let n = Z.get(e);
+			let n = X.get(e);
 			n && t.set(e, n);
 		}
 		let n = t.toString(), r = n ? `${e}?${n}` : e;
-		if (V) {
-			V(r);
+		if (z) {
+			z(r);
 			return;
 		}
 		window.location.assign(r);
-	}, [V, Z]), ie = p((e, t) => /* @__PURE__ */ D(u, {
+	}, [z, X]), ne = p((e, t) => /* @__PURE__ */ O(u, {
 		dashboardId: e,
 		params: t
 	}), []);
-	return W ? /* @__PURE__ */ D(y, {
-		fallback: /* @__PURE__ */ D("div", {
+	return U ? /* @__PURE__ */ O(y, {
+		fallback: /* @__PURE__ */ O("div", {
 			className: "p-6 text-center text-text-secondary",
 			children: "Something went wrong loading BigConsole. Please refresh the page."
 		}),
-		children: /* @__PURE__ */ D(b, {
+		children: /* @__PURE__ */ O(b, {
 			workspaceId: null,
 			gateway: "global",
 			defaultEnabled: !0,
-			children: /* @__PURE__ */ D(x, {
+			children: /* @__PURE__ */ O(x, {
 				scopeId: r.workspaceId ?? null,
 				gateway: "workspace",
-				children: /* @__PURE__ */ D(s, {
+				children: /* @__PURE__ */ O(s, {
 					props: r,
-					children: /* @__PURE__ */ D(c, {
-						onViewBilling: re,
-						children: /* @__PURE__ */ D(n, {
-							basePath: B,
-							children: /* @__PURE__ */ O(t, { children: [
-								/* @__PURE__ */ D(d, {}),
-								/* @__PURE__ */ D(o, { ...r }),
-								te && /* @__PURE__ */ D(f, {
-									onClose: ne,
-									renderDashboard: ie
+					children: /* @__PURE__ */ O(c, {
+						onViewBilling: te,
+						children: /* @__PURE__ */ O(n, {
+							basePath: R,
+							children: /* @__PURE__ */ k(t, { children: [
+								!B && /* @__PURE__ */ O(d, {}),
+								/* @__PURE__ */ O(o, { ...r }),
+								Q && /* @__PURE__ */ O(f, {
+									onClose: ee,
+									renderDashboard: ne
 								})
 							] })
 						})
@@ -220,24 +226,24 @@ var I = i, L = r, R = a, z = /* @__PURE__ */ new Set(), B = (r) => {
 				})
 			})
 		})
-	}) : K ? /* @__PURE__ */ D("div", {
+	}) : G ? /* @__PURE__ */ O("div", {
 		className: "flex h-full min-h-[200px] w-full items-center justify-center p-6",
-		children: /* @__PURE__ */ O("div", {
+		children: /* @__PURE__ */ k("div", {
 			className: "text-center",
-			children: [/* @__PURE__ */ D("p", {
+			children: [/* @__PURE__ */ O("p", {
 				className: "text-sm text-text-secondary mb-4",
-				children: K
-			}), /* @__PURE__ */ D("button", {
+				children: G
+			}), /* @__PURE__ */ O("button", {
 				type: "button",
 				onClick: () => window.location.reload(),
 				className: "px-4 py-2 text-sm font-medium text-white bg-action-primary-bg hover:bg-action-primary-bg/90 rounded-md transition-colors",
 				children: "Reload Page"
 			})]
 		})
-	}) : /* @__PURE__ */ D("div", {
+	}) : /* @__PURE__ */ O("div", {
 		className: "flex h-full min-h-[200px] w-full items-center justify-center",
-		children: /* @__PURE__ */ D("div", { className: "h-8 w-8 animate-spin rounded-full border-4 border-gray-300 border-t-blue-600" })
+		children: /* @__PURE__ */ O("div", { className: "h-8 w-8 animate-spin rounded-full border-4 border-gray-300 border-t-blue-600" })
 	});
 };
 //#endregion
-export { B as BigConsoleRoot };
+export { R as BigConsoleRoot };