@glasshome/widget-sdk 1.23.0 → 1.23.1

package/dist/index.js

@@ -3136,7 +3136,7 @@ function Co() {
 //#region src/version.ts
 var wo = {
 	name: "@glasshome/widget-sdk",
-	version: "1.23.0",
+	version: "1.23.1",
 	description: "SDK for building GlassHome dashboard widgets with SolidJS",
 	keywords: [
 		"dashboard",
@@ -3197,17 +3197,17 @@ var wo = {
 	},
 	publishConfig: { access: "public" },
 	scripts: {
-		build: "vite build && tsc && bun scripts/check-host-singleton.ts",
+		build: "vite build && tsc -p tsconfig.build.json && bun scripts/check-host-singleton.ts",
 		dev: "vite build --watch",
 		test: "bun test src && vitest run",
 		"test:dom": "vitest run",
 		"test:dom:watch": "vitest",
-		"typecheck:test": "tsc --noEmit -p tsconfig.test.json",
+		"typecheck:test": "tsc --noEmit",
 		"check:dead": "fallow dead-code --fail-on-issues",
 		lint: "oxlint --type-aware . && oxfmt --check ."
 	},
 	dependencies: {
-		"@glasshome/widget-contract": "0.4.0",
+		"@glasshome/widget-contract": "0.4.1",
 		"@tailwindcss/vite": "^4.1.13",
 		clsx: "^2.1.1",
 		"happy-dom": "^20.0.0",

package/guide/widgets.md

@@ -70,6 +70,18 @@ Render `<WidgetDialog>` next to `<Widget>`, spreading the dialog parts (`Respons
 - Everything sits on an edge; text left, values/actions right. One accent per view; defaults quiet. No card in a card.
 - Motion: colours morph, never snap; time transitions with `--duration-state` / `--ease-morph` (zeroed under reduced motion). Decorative loops scale by `var(--motion-ambient, 0)`. Gate on `useReducedMotion()`; pause offscreen with `useIntersectionPause()`.
 
+## Sealed engine
+
+Dash 1.5 previews the engine every widget will run in: QuickJS, no page access. Test there before publishing: Settings, Developer Mode, Sealed widgets (preview), reload, then `bun widget connect`. `bun widget preview` still renders in the page, so it does not prove a widget runs sealed.
+
+- Import only `@glasshome/widget-sdk` and `solid-js` (`/store`, `/web`).
+- No `fetch`, `XMLHttpRequest`, WebSocket, cookies, Capacitor. `localStorage` is in-memory and empties on reload. Built-ins are frozen: no `z.config`, no global patches.
+- DOM is mirrored through an allowlist: no `<style>`, `<link>`, `<script>`, no `el.click()`; images only `data:image/…`, same-origin `blob:` or `/ha-proxy/media`.
+- Limits: CPU 250 ms per second, setup 1.5 s per 10 s (both stop the widget until the homeowner turns it back on), 500 ms per run and 256 MB (both crash it), 20,000 elements, 512 timers, 128 observers.
+- Refusals and CPU use: Settings > Sealed widgets (Developer Mode). Each refusal has a sentence and a code; fix every one.
+
+Full page: https://glasshome.app/md/widgets/widget-sealed-engine.
+
 ## More
 
 Docs as markdown: https://glasshome.app/llms.txt, `https://glasshome.app/md/widgets/<page>` (`widget-sheets`, `widget-styling`, `widget-sdk`, `widget-sdk/materials`, `widget-api-reference`, `widget-capabilities`, `widget-previews`). Official widgets as worked examples: https://github.com/glasshome/widgets (`src/button`, `src/sensor`); where they differ from this guide, the guide wins.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@glasshome/widget-sdk",
-  "version": "1.23.0",
+  "version": "1.23.1",
   "description": "SDK for building GlassHome dashboard widgets with SolidJS",
   "keywords": [
     "dashboard",
@@ -65,17 +65,17 @@
     "access": "public"
   },
   "scripts": {
-    "build": "vite build && tsc && bun scripts/check-host-singleton.ts",
+    "build": "vite build && tsc -p tsconfig.build.json && bun scripts/check-host-singleton.ts",
     "dev": "vite build --watch",
     "test": "bun test src && vitest run",
     "test:dom": "vitest run",
     "test:dom:watch": "vitest",
-    "typecheck:test": "tsc --noEmit -p tsconfig.test.json",
+    "typecheck:test": "tsc --noEmit",
     "check:dead": "fallow dead-code --fail-on-issues",
     "lint": "oxlint --type-aware . && oxfmt --check ."
   },
   "dependencies": {
-    "@glasshome/widget-contract": "0.4.0",
+    "@glasshome/widget-contract": "0.4.1",
     "@tailwindcss/vite": "^4.1.13",
     "clsx": "^2.1.1",
     "happy-dom": "^20.0.0",

package/preview/host.tsx

@@ -41,7 +41,7 @@ function PreviewHost() {
               "margin-top": "4px",
             }}
           >
-            <{widget.manifest.name}> | {widget.manifest.type} | {widget.manifest.size}
+            <{widget.manifest.name}>
           </p>
         </div>
         <button

package/preview/virtual-widget.d.ts

@@ -0,0 +1,4 @@
+declare module "virtual:glasshome-widget" {
+  const widget: import("../src/types").WidgetDefinition;
+  export default widget;
+}