@conduction/nextcloud-vue 2.90.0 → 2.91.0

package/dist/esm/nextcloud-vue.css

@@ -25077,7 +25077,7 @@ button.cn-stepper__step[data-v-776581d4] {
 }
 
 
-.cn-detail-page__catalog-action[data-v-e7ff148e] {
+.cn-detail-page__catalog-action[data-v-47b3ec9e] {
 	align-items: center;
 	background: var(--color-primary-element-light);
 	border: 0;
@@ -25093,19 +25093,19 @@ button.cn-stepper__step[data-v-776581d4] {
 	padding: 0 14px;
 	white-space: nowrap;
 }
-.cn-detail-page__catalog-note[data-v-e7ff148e] {
+.cn-detail-page__catalog-note[data-v-47b3ec9e] {
 	color: var(--color-text-maxcontrast);
 	font-size: 14px;
 	white-space: nowrap;
 }
-.cn-detail-widget-host[data-v-e7ff148e],
-.cn-detail-widget-host[data-v-e7ff148e] > * {
+.cn-detail-widget-host[data-v-47b3ec9e],
+.cn-detail-widget-host[data-v-47b3ec9e] > * {
 	height: 100%;
 }
 
 /* A bare host is a tab panel's body: it fills the panel and lets the panel
    scroll, rather than growing a second scroll region of its own. */
-.cn-detail-widget-host--bare[data-v-e7ff148e] {
+.cn-detail-widget-host--bare[data-v-47b3ec9e] {
 	min-height: 0;
 }
 
@@ -36057,14 +36057,14 @@ button.cn-object-calendar__overflow[data-v-e1c69ee2] {
 }
 
 
-.cn-index-page-widgets--stat-row[data-v-5e716bba] {
+.cn-index-page-widgets--stat-row[data-v-319129cb] {
 	margin-bottom: var(--cn-board-section-gap, 20px);
 }
-.cn-index-page-widgets__cell[data-v-5e716bba] {
+.cn-index-page-widgets__cell[data-v-319129cb] {
 	display: flex;
 	min-width: 0;
 }
-.cn-index-page-widgets__cell[data-v-5e716bba] > * {
+.cn-index-page-widgets__cell[data-v-319129cb] > * {
 	flex: 1 1 auto;
 	min-width: 0;
 }
@@ -36072,7 +36072,7 @@ button.cn-object-calendar__overflow[data-v-e1c69ee2] {
 /* The side panel column (DqTeamwachtrij: 300px, 16px between cards). Its
    place beside the toolbar and the list is set by CnIndexPage
    (`cn-index-page--with-side-panel`, index-page.css). */
-.cn-index-page-widgets--side-panel[data-v-5e716bba] {
+.cn-index-page-widgets--side-panel[data-v-319129cb] {
 	display: flex;
 	flex-direction: column;
 	gap: 16px;
@@ -40772,10 +40772,10 @@ a.cn-integration-card__title[data-v-093a874d]:hover {
  * let the strip scroll horizontally once they no longer fit. `flex-basis: 0`
  * + equal grow keeps every tab the same width whether the row fits or scrolls.
  * Apps with longer labels can widen the floor via --cn-sidebar-tab-min-width. */
-[data-v-8b218df0] .app-sidebar-tabs__nav {
+[data-v-09402703] .app-sidebar-tabs__nav {
 	overflow-x: auto;
 }
-[data-v-8b218df0] .app-sidebar-tabs__nav .app-sidebar-tabs__tab {
+[data-v-09402703] .app-sidebar-tabs__nav .app-sidebar-tabs__tab {
 	flex-grow: 1;
 	flex-shrink: 0;
 	flex-basis: 0;

package/dist/nextcloud-vue.cjs.js

@@ -26166,7 +26166,7 @@ script$6Y.__scopeId = "data-v-52ba5fea";
 const __sfc_main$6S = script$6Y;
 
 /**
- * CnDialogHeader (internal) - the board dialog header: eyebrow, 20px title,
+ * CnDialogHeader - the board dialog header: eyebrow, 20px title,
  * subtitle and a round 36px close button.
  *
  * The close button emits `close` and is disabled while `noClose` is set, so a
@@ -26293,7 +26293,7 @@ function resolveDialogWidth(width, defaultWidth) {
 }
 
 /**
- * CnDialog (internal) - the one place where a `Cn*` dialog turns into the
+ * CnDialog - the one place where a `Cn*` dialog turns into the
  * board dialog (screens-dialog-parity).
  *
  * In the Nextcloud look it is `NcDialog` with the caller's `size`, unchanged.
@@ -152257,6 +152257,108 @@ script$4K.render = render$4K;
 script$4K.__scopeId = "data-v-f0af265a";
 const __sfc_main$4E = script$4K;
 
+/**
+ * SPDX-FileCopyrightText: 2026 Conduction B.V.
+ * SPDX-License-Identifier: EUPL-1.2
+ */
+
+
+const warned$2 = new Set();
+
+/**
+ * Add the prop names one component options object declares, following its
+ * `extends` and `mixins`.
+ *
+ * @param {object} options A component options object.
+ * @param {Set<string>} names The set to add camelCase prop names to.
+ * @param {number} depth Recursion guard.
+ */
+function collect(options, names, depth) {
+	if (!options || typeof options !== 'object' || depth > 8) {
+		return
+	}
+	const props = options.props;
+	if (Array.isArray(props)) {
+		props.forEach((name) => names.add(vue$1.camelize(String(name))));
+	} else if (props && typeof props === 'object') {
+		Object.keys(props).forEach((name) => names.add(vue$1.camelize(name)));
+	}
+	collect(options.extends, names, depth + 1);
+	if (Array.isArray(options.mixins)) {
+		options.mixins.forEach((mixin) => collect(mixin, names, depth + 1));
+	}
+}
+
+/**
+ * The prop names a component declares, or `null` when it takes every
+ * attribute itself and so must keep receiving all of them:
+ *  - `inheritAttrs: false`: the component forwards `$attrs` on purpose;
+ *  - a functional component without `props`: its attrs are its props;
+ *  - an async component that has not resolved yet.
+ *
+ * @spec openspec/changes/dashboard-declared-widget-props/specs/dashboard-page/spec.md#requirement-a-dashboard-widget-receives-only-the-content-keys-it-declares
+ * @param {object|((...args: unknown[]) => unknown)|null} component A component definition.
+ * @return {Set<string>|null} camelCase prop names, or null for "all".
+ */
+function declaredPropNames(component) {
+	if (!component) {
+		return null
+	}
+	if (typeof component === 'function') {
+		if (!component.props) {
+			return null
+		}
+		const names = new Set();
+		collect({ props: component.props }, names, 0);
+		return names
+	}
+	if (typeof component !== 'object') {
+		return null
+	}
+	if (component.__asyncLoader) {
+		return component.__asyncResolved ? declaredPropNames(component.__asyncResolved) : null
+	}
+	const chain = [component, component.extends, ...(component.mixins || [])];
+	if (chain.some((options) => options && options.inheritAttrs === false)) {
+		return null
+	}
+	const names = new Set();
+	collect(component, names, 0);
+	return names
+}
+
+/**
+ * Keep the entries of `bindings` whose key `component` declares as a prop.
+ * A component for which {@link declaredPropNames} returns null gets every
+ * entry. A dropped key is warned about once outside production when the
+ * component has no `content` prop either, so the key reaches nothing.
+ *
+ * @spec openspec/changes/dashboard-declared-widget-props/specs/dashboard-page/spec.md#requirement-a-dashboard-widget-receives-only-the-content-keys-it-declares
+ * @param {object|((...args: unknown[]) => unknown)|null} component The component that will receive the bindings.
+ * @param {object} bindings The candidate bindings.
+ * @param {string} label Names the component in the warning (for example the widget type).
+ * @return {object} The bindings the component declares.
+ */
+function pickDeclaredProps(component, bindings, label) {
+	const declared = declaredPropNames(component);
+	if (!declared || !bindings || typeof bindings !== 'object') {
+		return bindings
+	}
+	const out = {};
+	for (const [key, value] of Object.entries(bindings)) {
+		if (declared.has(vue$1.camelize(key))) {
+			out[key] = value;
+			continue
+		}
+		if (process.env.NODE_ENV !== 'production' && !declared.has('content') && !warned$2.has(`${label}\u0000${key}`)) {
+			warned$2.add(`${label}\u0000${key}`);
+			// eslint-disable-next-line no-console
+			console.warn(`[nextcloud-vue] content key "${key}" is not passed to widget "${label}": it declares neither that prop nor \`content\`.`);
+		}
+	}
+	return out
+}
+
 // SPDX-FileCopyrightText: 2026 Conduction B.V.
 // SPDX-License-Identifier: EUPL-1.2
 
@@ -158624,7 +158726,7 @@ const DEFAULT_COMPONENT_MAP = Object.freeze({
 
 const KNOWN_TYPES = ['boolean', 'number', 'password', 'string', 'enum', 'json', 'file'];
 
-const warned$2 = new Set();
+const warned$1 = new Set();
 
 /**
  * Coerce an enum field's options into the `{ label, value }` shape
@@ -158783,8 +158885,8 @@ function cnRenderFormField({ field, value, onInput, t, error, componentMap } = {
 			// per process. It used to be taken unconditionally and silently,
 			// because the CommonJS lookup that fed `NcTextArea` could never
 			// resolve from an ESM build.
-			if (!map['string-textarea'] && !warned$2.has('__no-nc-textarea')) {
-				warned$2.add('__no-nc-textarea');
+			if (!map['string-textarea'] && !warned$1.has('__no-nc-textarea')) {
+				warned$1.add('__no-nc-textarea');
 				// eslint-disable-next-line no-console
 				console.warn('[cnRenderFormField] NcTextArea is unavailable from @nextcloud/vue; '
 					+ 'falling back to a bare <textarea> for `widget: "textarea"` fields. '
@@ -158824,8 +158926,8 @@ function cnRenderFormField({ field, value, onInput, t, error, componentMap } = {
 		}
 	} else if (!KNOWN_TYPES.includes(field.type)) {
 		// Unknown type — warn ONCE per type and fall back to NcTextField.
-		if (!warned$2.has(field.type)) {
-			warned$2.add(field.type);
+		if (!warned$1.has(field.type)) {
+			warned$1.add(field.type);
 			// eslint-disable-next-line no-console
 			console.warn(`[cnRenderFormField] Unknown field.type "${field.type}" for field "${field.key}". Falling back to NcTextField. Known types: ${KNOWN_TYPES.join(', ')}.`);
 		}
@@ -163778,7 +163880,20 @@ var script$4p = {
 			if (title) {
 				base.title = title;
 			}
-			return { ...base, ...this.content }
+			return { ...base, ...this.declaredContent }
+		},
+
+		/**
+		 * The content keys the renderer declares as props. An undeclared key
+		 * would fall through as an attribute onto the renderer's root and could
+		 * override a value the widget computes there; the whole content still
+		 * arrives as `content`.
+		 *
+		 * @return {object} The declared content keys.
+		 * @spec openspec/changes/declared-props-detail-index-sidebar/specs/widget-hosts/spec.md#requirement-a-widget-host-passes-only-the-keys-a-widget-declares
+		 */
+		declaredContent() {
+			return pickDeclaredProps(this.renderer, this.content, this.widget?.type || '')
 		},
 
 		/**
@@ -164268,7 +164383,7 @@ function render$4p(_ctx, _cache, $props, $setup, $data, $options) {
                           class: "cn-detail-page__card-fit"
                         }, vue$1.createSlots({
                           default: vue$1.withCtx(() => [
-                            (vue$1.openBlock(), vue$1.createBlock(vue$1.resolveDynamicComponent($options.renderer), vue$1.mergeProps({ content: $options.content }, $options.content), null, 16 /* FULL_PROPS */, ["content"]))
+                            (vue$1.openBlock(), vue$1.createBlock(vue$1.resolveDynamicComponent($options.renderer), vue$1.mergeProps({ content: $options.content }, $options.declaredContent), null, 16 /* FULL_PROPS */, ["content"]))
                           ]),
                           _: 2 /* DYNAMIC */
                         }, [
@@ -164295,7 +164410,7 @@ function render$4p(_ctx, _cache, $props, $setup, $data, $options) {
 }
 
 script$4p.render = render$4p;
-script$4p.__scopeId = "data-v-e7ff148e";
+script$4p.__scopeId = "data-v-47b3ec9e";
 const __sfc_main$4j = script$4p;
 
 /**
@@ -257068,7 +257183,7 @@ const __sfc_main$2l = script$2l;
  * @spec openspec/changes/environment-banner/tasks.md#task-2
  */
 
-let warned$1 = false;
+let warned = false;
 
 /**
  * @param {object} options Options.
@@ -257094,8 +257209,8 @@ function useEnvironment({ environment, tenant, apiBase = '/apps/openregister/api
 				const value = response && response.data && (response.data.environment ?? (response.data.results && response.data.results.environment));
 				fetched.value = { ...fetched.value, [uuid]: typeof value === 'string' ? value : '' };
 			} catch (error) {
-				if (!warned$1) {
-					warned$1 = true;
+				if (!warned) {
+					warned = true;
 					// eslint-disable-next-line no-console
 					console.warn('[useEnvironment] The organisation could not be read, so no environment is shown.', error);
 				}
@@ -265292,7 +265407,7 @@ var script$25 = {
 		 * The renderable entries, in the listed order.
 		 *
 		 * @spec openspec/changes/screens-index-stat-row/specs/index-page/spec.md#requirement-an-index-page-can-draw-a-stat-row-above-the-list
-		 * @return {Array<{id: string, title: string, content: object, headerLink: (object|null), renderer: object}>}
+		 * @return {Array<{id: string, type: string, title: string, content: object, headerLink: (object|null), renderer: object}>}
 		 */
 		entries() {
 			const list = Array.isArray(this.widgets) ? this.widgets : [];
@@ -265312,6 +265427,7 @@ var script$25 = {
 				const translate = typeof this.cnTranslate === 'function' ? this.cnTranslate : (key) => key;
 				out.push({
 					id: def.id,
+					type: def.type,
 					title: typeof def.title === 'string' && def.title !== '' ? translate(def.title) : '',
 					content: (def.content && typeof def.content === 'object') ? def.content : {},
 					headerLink: (def.headerLink && typeof def.headerLink === 'object') ? def.headerLink : null,
@@ -265323,6 +265439,19 @@ var script$25 = {
 	},
 
 	methods: {
+		/**
+		 * The content keys an entry's renderer declares as props. An undeclared
+		 * key would fall through onto the renderer's root; the whole content
+		 * still arrives as `content`.
+		 *
+		 * @param {{ renderer: object, content: object, type?: string, id: string }} entry A resolved entry.
+		 * @return {object} The declared content keys.
+		 * @spec openspec/changes/declared-props-detail-index-sidebar/specs/widget-hosts/spec.md#requirement-a-widget-host-passes-only-the-keys-a-widget-declares
+		 */
+		declaredContent(entry) {
+			return pickDeclaredProps(entry.renderer, entry.content, entry.type || entry.id)
+		},
+
 		/**
 		 * Resolve a widget type: the consumer registry, then the dashboard
 		 * catalog (the type as written, then its alias), then the built-ins.
@@ -265376,7 +265505,7 @@ function render$25(_ctx, _cache, $props, $setup, $data, $options) {
                   (vue$1.openBlock(), vue$1.createBlock(vue$1.resolveDynamicComponent(entry.renderer), vue$1.mergeProps({
                     widgetId: entry.id,
                     content: entry.content
-                  }, { ref_for: true }, entry.content), null, 16 /* FULL_PROPS */, ["widgetId", "content"]))
+                  }, { ref_for: true }, $options.declaredContent(entry)), null, 16 /* FULL_PROPS */, ["widgetId", "content"]))
                 ]),
                 _: 2 /* DYNAMIC */
               }, 1032 /* PROPS, DYNAMIC_SLOTS */, ["widgetId", "title", "showTitle", "headerLink", "flush"])
@@ -265389,7 +265518,7 @@ function render$25(_ctx, _cache, $props, $setup, $data, $options) {
 }
 
 script$25.render = render$25;
-script$25.__scopeId = "data-v-5e716bba";
+script$25.__scopeId = "data-v-319129cb";
 const __sfc_main$25 = script$25;
 
 /**
@@ -318411,108 +318540,6 @@ script$1j.render = render$1j;
 script$1j.__scopeId = "data-v-a78d1ec4";
 const __sfc_main$1j = script$1j;
 
-/**
- * SPDX-FileCopyrightText: 2026 Conduction B.V.
- * SPDX-License-Identifier: EUPL-1.2
- */
-
-
-const warned = new Set();
-
-/**
- * Add the prop names one component options object declares, following its
- * `extends` and `mixins`.
- *
- * @param {object} options A component options object.
- * @param {Set<string>} names The set to add camelCase prop names to.
- * @param {number} depth Recursion guard.
- */
-function collect(options, names, depth) {
-	if (!options || typeof options !== 'object' || depth > 8) {
-		return
-	}
-	const props = options.props;
-	if (Array.isArray(props)) {
-		props.forEach((name) => names.add(vue$1.camelize(String(name))));
-	} else if (props && typeof props === 'object') {
-		Object.keys(props).forEach((name) => names.add(vue$1.camelize(name)));
-	}
-	collect(options.extends, names, depth + 1);
-	if (Array.isArray(options.mixins)) {
-		options.mixins.forEach((mixin) => collect(mixin, names, depth + 1));
-	}
-}
-
-/**
- * The prop names a component declares, or `null` when it takes every
- * attribute itself and so must keep receiving all of them:
- *  - `inheritAttrs: false`: the component forwards `$attrs` on purpose;
- *  - a functional component without `props`: its attrs are its props;
- *  - an async component that has not resolved yet.
- *
- * @spec openspec/changes/dashboard-declared-widget-props/specs/dashboard-page/spec.md#requirement-a-dashboard-widget-receives-only-the-content-keys-it-declares
- * @param {object|((...args: unknown[]) => unknown)|null} component A component definition.
- * @return {Set<string>|null} camelCase prop names, or null for "all".
- */
-function declaredPropNames(component) {
-	if (!component) {
-		return null
-	}
-	if (typeof component === 'function') {
-		if (!component.props) {
-			return null
-		}
-		const names = new Set();
-		collect({ props: component.props }, names, 0);
-		return names
-	}
-	if (typeof component !== 'object') {
-		return null
-	}
-	if (component.__asyncLoader) {
-		return component.__asyncResolved ? declaredPropNames(component.__asyncResolved) : null
-	}
-	const chain = [component, component.extends, ...(component.mixins || [])];
-	if (chain.some((options) => options && options.inheritAttrs === false)) {
-		return null
-	}
-	const names = new Set();
-	collect(component, names, 0);
-	return names
-}
-
-/**
- * Keep the entries of `bindings` whose key `component` declares as a prop.
- * A component for which {@link declaredPropNames} returns null gets every
- * entry. A dropped key is warned about once outside production when the
- * component has no `content` prop either, so the key reaches nothing.
- *
- * @spec openspec/changes/dashboard-declared-widget-props/specs/dashboard-page/spec.md#requirement-a-dashboard-widget-receives-only-the-content-keys-it-declares
- * @param {object|((...args: unknown[]) => unknown)|null} component The component that will receive the bindings.
- * @param {object} bindings The candidate bindings.
- * @param {string} label Names the component in the warning (for example the widget type).
- * @return {object} The bindings the component declares.
- */
-function pickDeclaredProps(component, bindings, label) {
-	const declared = declaredPropNames(component);
-	if (!declared || !bindings || typeof bindings !== 'object') {
-		return bindings
-	}
-	const out = {};
-	for (const [key, value] of Object.entries(bindings)) {
-		if (declared.has(vue$1.camelize(key))) {
-			out[key] = value;
-			continue
-		}
-		if (process.env.NODE_ENV !== 'production' && !declared.has('content') && !warned.has(`${label}\u0000${key}`)) {
-			warned.add(`${label}\u0000${key}`);
-			// eslint-disable-next-line no-console
-			console.warn(`[nextcloud-vue] content key "${key}" is not passed to widget "${label}": it declares neither that prop nor \`content\`.`);
-		}
-	}
-	return out
-}
-
 /** Surfaces understood by the pluggable integration registry (AD-19). */
 const INTEGRATION_SURFACES = ['user-dashboard', 'app-dashboard', 'detail-page', 'single-entity'];
 
@@ -335035,9 +335062,11 @@ var script$N = {
 		 * widgets get the shared coordinate context plus the loaded object
 		 * (`objectData`); the prop-driven `data` built-in also gets the schema
 		 * OBJECT bound to its `schema` prop (the other tabs use the `schema`
-		 * slug string, so the override is scoped to `type: 'data'`). A widget's
-		 * own `props` win on overlap.
+		 * slug string, so the override is scoped to `type: 'data'`). Of a
+		 * widget's own `props`, the ones its component declares win on overlap;
+		 * an undeclared one would only fall through onto the component's root.
 		 *
+		 * @spec openspec/changes/declared-props-detail-index-sidebar/specs/widget-hosts/spec.md#requirement-a-widget-host-passes-only-the-keys-a-widget-declares
 		 * @param {{ type: string, props?: object }} w Widget spec
 		 * @return {object} Props to v-bind onto the resolved widget component
 		 */
@@ -335050,7 +335079,7 @@ var script$N = {
 				// a String `schema`.
 				bindings.schema = this.objectSchema;
 			}
-			return { ...bindings, ...(w.props || {}) }
+			return { ...bindings, ...pickDeclaredProps(this.resolveWidgetComponent(w.type), w.props || {}, w.type || '') }
 		},
 
 		/**
@@ -335372,7 +335401,7 @@ function render$N(_ctx, _cache, $props, $setup, $data, $options) {
 }
 
 script$N.render = render$N;
-script$N.__scopeId = "data-v-8b218df0";
+script$N.__scopeId = "data-v-09402703";
 const __sfc_main$N = script$N;
 
 /**
@@ -397557,6 +397586,8 @@ exports.CnDetailCard = __sfc_main$6E;
 exports.CnDetailGrid = __sfc_main$4J;
 exports.CnDetailPage = __sfc_main$1m;
 exports.CnDetailWidgetHost = __sfc_main$4j;
+exports.CnDialog = __sfc_main$6Q;
+exports.CnDialogHeader = __sfc_main$6R;
 exports.CnDividerWidget = __sfc_main$4B;
 exports.CnDividerWidgetForm = __sfc_main$42;
 exports.CnDocumentReviewList = __sfc_main$76;

package/dist/nextcloud-vue.cjs.js.map

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/nextcloud-vue.cjs.js.map
-size: 40779638 bytes
-sha256: b171c6d90fa9da1ac7b3e057618c0102feb5c4a930845adf71bda7617ccd3073
+size: 40783800 bytes
+sha256: 38ecb05b1a9c62bd250ca390394a3597748055d8c7dc1363ad11aa8069730ec1

package/dist/nextcloud-vue.css

@@ -25077,7 +25077,7 @@ button.cn-stepper__step[data-v-776581d4] {
 }
 
 
-.cn-detail-page__catalog-action[data-v-e7ff148e] {
+.cn-detail-page__catalog-action[data-v-47b3ec9e] {
 	align-items: center;
 	background: var(--color-primary-element-light);
 	border: 0;
@@ -25093,19 +25093,19 @@ button.cn-stepper__step[data-v-776581d4] {
 	padding: 0 14px;
 	white-space: nowrap;
 }
-.cn-detail-page__catalog-note[data-v-e7ff148e] {
+.cn-detail-page__catalog-note[data-v-47b3ec9e] {
 	color: var(--color-text-maxcontrast);
 	font-size: 14px;
 	white-space: nowrap;
 }
-.cn-detail-widget-host[data-v-e7ff148e],
-.cn-detail-widget-host[data-v-e7ff148e] > * {
+.cn-detail-widget-host[data-v-47b3ec9e],
+.cn-detail-widget-host[data-v-47b3ec9e] > * {
 	height: 100%;
 }
 
 /* A bare host is a tab panel's body: it fills the panel and lets the panel
    scroll, rather than growing a second scroll region of its own. */
-.cn-detail-widget-host--bare[data-v-e7ff148e] {
+.cn-detail-widget-host--bare[data-v-47b3ec9e] {
 	min-height: 0;
 }
 
@@ -36057,14 +36057,14 @@ button.cn-object-calendar__overflow[data-v-e1c69ee2] {
 }
 
 
-.cn-index-page-widgets--stat-row[data-v-5e716bba] {
+.cn-index-page-widgets--stat-row[data-v-319129cb] {
 	margin-bottom: var(--cn-board-section-gap, 20px);
 }
-.cn-index-page-widgets__cell[data-v-5e716bba] {
+.cn-index-page-widgets__cell[data-v-319129cb] {
 	display: flex;
 	min-width: 0;
 }
-.cn-index-page-widgets__cell[data-v-5e716bba] > * {
+.cn-index-page-widgets__cell[data-v-319129cb] > * {
 	flex: 1 1 auto;
 	min-width: 0;
 }
@@ -36072,7 +36072,7 @@ button.cn-object-calendar__overflow[data-v-e1c69ee2] {
 /* The side panel column (DqTeamwachtrij: 300px, 16px between cards). Its
    place beside the toolbar and the list is set by CnIndexPage
    (`cn-index-page--with-side-panel`, index-page.css). */
-.cn-index-page-widgets--side-panel[data-v-5e716bba] {
+.cn-index-page-widgets--side-panel[data-v-319129cb] {
 	display: flex;
 	flex-direction: column;
 	gap: 16px;
@@ -40772,10 +40772,10 @@ a.cn-integration-card__title[data-v-093a874d]:hover {
  * let the strip scroll horizontally once they no longer fit. `flex-basis: 0`
  * + equal grow keeps every tab the same width whether the row fits or scrolls.
  * Apps with longer labels can widen the floor via --cn-sidebar-tab-min-width. */
-[data-v-8b218df0] .app-sidebar-tabs__nav {
+[data-v-09402703] .app-sidebar-tabs__nav {
 	overflow-x: auto;
 }
-[data-v-8b218df0] .app-sidebar-tabs__nav .app-sidebar-tabs__tab {
+[data-v-09402703] .app-sidebar-tabs__nav .app-sidebar-tabs__tab {
 	flex-grow: 1;
 	flex-shrink: 0;
 	flex-basis: 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@conduction/nextcloud-vue",
-  "version": "2.90.0",
+  "version": "2.91.0",
   "description": "Shared Vue component library for Conduction Nextcloud apps — complements @nextcloud/vue with higher-level components, OpenRegister integration, and NL Design System support",
   "homepage": "https://github.com/ConductionNL/nextcloud-vue#readme",
   "bugs": {

package/src/components/CnDetailWidgetHost/CnDetailWidgetHost.vue

@@ -236,7 +236,7 @@
 			<template v-if="widget.icon" #title-icon>
 				<CnIcon :name="widget.icon" :size="20" />
 			</template>
-			<component :is="renderer" :content="content" v-bind="content" />
+			<component :is="renderer" :content="content" v-bind="declaredContent" />
 		</CnWidgetWrapper>
 
 		<!-- Every other content-driven catalog widget, and every bare-mode
@@ -276,6 +276,7 @@ import { useIntegrationRegistry } from '../../composables/useIntegrationRegistry
 import { normalizeLook } from '../../composables/useLook.js'
 import { isAppInstalled } from '../../utils/appInstalled.js'
 import { widgetHeaderLink } from '../../utils/contentHeaderLink.js'
+import { pickDeclaredProps } from '../../utils/declaredProps.js'
 import { unwrapAppConfig } from '../../utils/formatMetric.js'
 import { isActivityWidget } from '../../utils/headerMeta.js'
 import { PANEL_ACTION_SINK } from '../../utils/panelActions.js'
@@ -997,7 +998,20 @@ export default {
 			if (title) {
 				base.title = title
 			}
-			return { ...base, ...this.content }
+			return { ...base, ...this.declaredContent }
+		},
+
+		/**
+		 * The content keys the renderer declares as props. An undeclared key
+		 * would fall through as an attribute onto the renderer's root and could
+		 * override a value the widget computes there; the whole content still
+		 * arrives as `content`.
+		 *
+		 * @return {object} The declared content keys.
+		 * @spec openspec/changes/declared-props-detail-index-sidebar/specs/widget-hosts/spec.md#requirement-a-widget-host-passes-only-the-keys-a-widget-declares
+		 */
+		declaredContent() {
+			return pickDeclaredProps(this.renderer, this.content, this.widget?.type || '')
 		},
 
 		/**

package/src/components/CnDialog/CnDialog.vue

@@ -32,7 +32,7 @@ import { useLook } from '../../composables/useLook.js'
 import { resolveDialogWidth } from '../../utils/dialogWidths.js'
 
 /**
- * CnDialog (internal) - the one place where a `Cn*` dialog turns into the
+ * CnDialog - the one place where a `Cn*` dialog turns into the
  * board dialog (screens-dialog-parity).
  *
  * In the Nextcloud look it is `NcDialog` with the caller's `size`, unchanged.

package/src/components/CnDialog/index.js

@@ -0,0 +1,7 @@
+// SPDX-FileCopyrightText: 2026 Conduction B.V.
+// SPDX-License-Identifier: EUPL-1.2
+
+import CnDialog from './CnDialog.vue'
+
+export default CnDialog
+export { CnDialog }

package/src/components/CnDialogHeader/CnDialogHeader.vue

@@ -45,7 +45,7 @@ import { NcButton } from '@nextcloud/vue'
 import Close from 'vue-material-design-icons/Close.vue'
 
 /**
- * CnDialogHeader (internal) - the board dialog header: eyebrow, 20px title,
+ * CnDialogHeader - the board dialog header: eyebrow, 20px title,
  * subtitle and a round 36px close button.
  *
  * The close button emits `close` and is disabled while `noClose` is set, so a

package/src/components/CnDialogHeader/index.js

@@ -0,0 +1,7 @@
+// SPDX-FileCopyrightText: 2026 Conduction B.V.
+// SPDX-License-Identifier: EUPL-1.2
+
+import CnDialogHeader from './CnDialogHeader.vue'
+
+export default CnDialogHeader
+export { CnDialogHeader }