@trops/dash-core 0.1.357 → 0.1.360

package/dist/electron/index.js

@@ -470,6 +470,7 @@ const REGISTRY_GET_PACKAGE = "registry:get-package";
 const REGISTRY_CHECK_UPDATES = "registry:check-updates";
 const REGISTRY_SEARCH_DASHBOARDS = "registry:search-dashboards";
 const REGISTRY_SEARCH_THEMES = "registry:search-themes";
+const REGISTRY_PUBLISH_WIDGET = "registry:publish-widget";
 
 var registryEvents$1 = {
   REGISTRY_FETCH_INDEX,
@@ -478,6 +479,7 @@ var registryEvents$1 = {
   REGISTRY_CHECK_UPDATES,
   REGISTRY_SEARCH_DASHBOARDS,
   REGISTRY_SEARCH_THEMES,
+  REGISTRY_PUBLISH_WIDGET,
 };
 
 /**
@@ -652,6 +654,7 @@ function requireDashboardConfigEvents () {
 	const DASHBOARD_CONFIG_INSTALL_PROGRESS = "dashboard-config-install-progress";
 	const DASHBOARD_CONFIG_COLLECT_DEPENDENCIES =
 	  "dashboard-config-collect-dependencies";
+	const DASHBOARD_CONFIG_PUBLISH_PLAN = "dashboard-config-publish-plan";
 
 	dashboardConfigEvents$1 = {
 	  DASHBOARD_CONFIG_EXPORT,
@@ -666,6 +669,7 @@ function requireDashboardConfigEvents () {
 	  DASHBOARD_CONFIG_SELECT_FILE,
 	  DASHBOARD_CONFIG_INSTALL_PROGRESS,
 	  DASHBOARD_CONFIG_COLLECT_DEPENDENCIES,
+	  DASHBOARD_CONFIG_PUBLISH_PLAN,
 	};
 	return dashboardConfigEvents$1;
 }
@@ -1103,7 +1107,7 @@ var secureStoreController$1 = {
   getData: getData$1,
 };
 
-const path$i = require$$1$2;
+const path$j = require$$1$2;
 const {
   readFileSync,
   writeFileSync: writeFileSync$4,
@@ -1121,7 +1125,7 @@ const {
 function ensureDirectoryExistence$2(filePath) {
   try {
     // isDirectory
-    var dirname = path$i.dirname(filePath);
+    var dirname = path$j.dirname(filePath);
     // check if the directory exists...return true
     // if not, we can pass in the dirname as the filepath
     // and check each directory recursively.
@@ -1236,7 +1240,7 @@ function removeFilesFromDirectory(directory, excludeFiles = []) {
 
       for (const file of files) {
         if (!excludeFiles.includes(file)) {
-          unlinkSync(path$i.join(directory, file), (err) => {
+          unlinkSync(path$j.join(directory, file), (err) => {
             if (err) throw err;
           });
         }
@@ -1253,8 +1257,8 @@ var file = {
   checkDirectory: checkDirectory$1,
 };
 
-const { app: app$a } = require$$0$1;
-const path$h = require$$1$2;
+const { app: app$b } = require$$0$1;
+const path$i = require$$1$2;
 const { writeFileSync: writeFileSync$3 } = require$$0$2;
 const { getFileContents: getFileContents$7 } = file;
 
@@ -1301,8 +1305,8 @@ const workspaceController$3 = {
   saveWorkspaceForApplication: (win, appId, workspaceObject) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$h.join(
-        app$a.getPath("userData"),
+      const filename = path$i.join(
+        app$b.getPath("userData"),
         appName$7,
         appId,
         configFilename$5,
@@ -1350,8 +1354,8 @@ const workspaceController$3 = {
   saveMenuItemsForApplication: (win, appId, menuItems) => {
     try {
       // filename to the workspaces file
-      const filename = path$h.join(
-        app$a.getPath("userData"),
+      const filename = path$i.join(
+        app$b.getPath("userData"),
         appName$7,
         appId,
         configFilename$5,
@@ -1399,8 +1403,8 @@ const workspaceController$3 = {
    */
   deleteWorkspaceForApplication: (win, appId, workspaceId) => {
     try {
-      const filename = path$h.join(
-        app$a.getPath("userData"),
+      const filename = path$i.join(
+        app$b.getPath("userData"),
         appName$7,
         appId,
         configFilename$5,
@@ -1433,8 +1437,8 @@ const workspaceController$3 = {
 
   listWorkspacesForApplication: (win, appId) => {
     try {
-      const filename = path$h.join(
-        app$a.getPath("userData"),
+      const filename = path$i.join(
+        app$b.getPath("userData"),
         appName$7,
         appId,
         configFilename$5,
@@ -1461,8 +1465,8 @@ const workspaceController$3 = {
 
   listMenuItemsForApplication: (win, appId) => {
     try {
-      const filename = path$h.join(
-        app$a.getPath("userData"),
+      const filename = path$i.join(
+        app$b.getPath("userData"),
         appName$7,
         appId,
         configFilename$5,
@@ -1505,8 +1509,8 @@ const workspaceController$3 = {
 
 var workspaceController_1 = workspaceController$3;
 
-const { app: app$9 } = require$$0$1;
-const path$g = require$$1$2;
+const { app: app$a } = require$$0$1;
+const path$h = require$$1$2;
 const { writeFileSync: writeFileSync$2 } = require$$0$2;
 const { getFileContents: getFileContents$6 } = file;
 
@@ -1526,8 +1530,8 @@ const themeController$5 = {
   saveThemeForApplication: (win, appId, name, obj) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$g.join(
-        app$9.getPath("userData"),
+      const filename = path$h.join(
+        app$a.getPath("userData"),
         appName$6,
         appId,
         configFilename$4,
@@ -1572,8 +1576,8 @@ const themeController$5 = {
    */
   listThemesForApplication: (win, appId) => {
     try {
-      const filename = path$g.join(
-        app$9.getPath("userData"),
+      const filename = path$h.join(
+        app$a.getPath("userData"),
         appName$6,
         appId,
         configFilename$4,
@@ -1614,8 +1618,8 @@ const themeController$5 = {
    */
   deleteThemeForApplication: (win, appId, themeKey) => {
     try {
-      const filename = path$g.join(
-        app$9.getPath("userData"),
+      const filename = path$h.join(
+        app$a.getPath("userData"),
         appName$6,
         appId,
         configFilename$4,
@@ -1654,15 +1658,15 @@ var themeController_1 = themeController$5;
  * - CSV -> JSON
  */
 
-var fs$a = require$$0$2;
+var fs$b = require$$0$2;
 var readline = require$$1$3;
 const xtreamer = require$$2;
 var xmlParser = require$$3$1;
 var JSONStream$1 = require$$4;
 const stream$2 = require$$0$3;
 var csv = require$$6;
-const path$f = require$$1$2;
-const { app: app$8 } = require$$0$1;
+const path$g = require$$1$2;
+const { app: app$9 } = require$$0$1;
 const { ensureDirectoryExistence: ensureDirectoryExistence$1 } = file;
 
 const TRANSFORM_APP_NAME = "Dashboard";
@@ -1710,7 +1714,7 @@ let Transform$1 = class Transform {
         let lineObject = [];
 
         const readInterface = readline.createInterface({
-          input: fs$a.createReadStream(filepath),
+          input: fs$b.createReadStream(filepath),
           output: process.stdout,
           console: false,
         });
@@ -1745,7 +1749,7 @@ let Transform$1 = class Transform {
     return new Promise((resolve, reject) => {
       try {
         const parser = JSONStream$1.parse("*");
-        const readStream = fs$a.createReadStream(file).pipe(parser);
+        const readStream = fs$b.createReadStream(file).pipe(parser);
 
         let count = 0;
 
@@ -1798,7 +1802,7 @@ let Transform$1 = class Transform {
   parseXMLStream = (filepath, outpath, start) => {
     return new Promise((resolve, reject) => {
       try {
-        const xmlFileReadStream = fs$a.createReadStream(filepath);
+        const xmlFileReadStream = fs$b.createReadStream(filepath);
 
         xmlFileReadStream.on("end", () => {
           writeStream.write("\n]");
@@ -1809,7 +1813,7 @@ let Transform$1 = class Transform {
           resolve("Read Finish");
         });
 
-        const writeStream = fs$a.createWriteStream(outpath);
+        const writeStream = fs$b.createWriteStream(outpath);
         writeStream.write("[\n");
 
         const options = {
@@ -1861,10 +1865,10 @@ let Transform$1 = class Transform {
   ) => {
     return new Promise((resolve, reject) => {
       try {
-        const readStream = fs$a
+        const readStream = fs$b
           .createReadStream(filepath)
           .pipe(csv({ separator: delimiter }));
-        const writeStream = fs$a.createWriteStream(outpath);
+        const writeStream = fs$b.createWriteStream(outpath);
 
         let canParse = true;
 
@@ -1950,18 +1954,18 @@ let Transform$1 = class Transform {
       }
 
       // Validate file paths are within app data directory
-      const appDataDir = path$f.join(app$8.getPath("userData"), TRANSFORM_APP_NAME);
-      const resolvedFilepath = path$f.resolve(filepath);
-      const resolvedOutFilepath = path$f.resolve(outFilepath);
+      const appDataDir = path$g.join(app$9.getPath("userData"), TRANSFORM_APP_NAME);
+      const resolvedFilepath = path$g.resolve(filepath);
+      const resolvedOutFilepath = path$g.resolve(outFilepath);
 
-      if (!resolvedFilepath.startsWith(appDataDir + path$f.sep)) {
+      if (!resolvedFilepath.startsWith(appDataDir + path$g.sep)) {
         return reject(
           new Error(
             "Input file path must be within the application data directory",
           ),
         );
       }
-      if (!resolvedOutFilepath.startsWith(appDataDir + path$f.sep)) {
+      if (!resolvedOutFilepath.startsWith(appDataDir + path$g.sep)) {
         return reject(
           new Error(
             "Output file path must be within the application data directory",
@@ -1972,14 +1976,14 @@ let Transform$1 = class Transform {
       // JSON parser
       var parser = JSONStream$1.parse("*");
 
-      if (fs$a.existsSync(resolvedFilepath)) {
+      if (fs$b.existsSync(resolvedFilepath)) {
         console.log("file exists ", resolvedFilepath);
         // create the readStream to parse the large file (json)
-        var readStream = fs$a.createReadStream(resolvedFilepath).pipe(parser);
+        var readStream = fs$b.createReadStream(resolvedFilepath).pipe(parser);
 
         ensureDirectoryExistence$1(resolvedOutFilepath);
 
-        var writeStream = fs$a.createWriteStream(resolvedOutFilepath);
+        var writeStream = fs$b.createWriteStream(resolvedOutFilepath);
 
         let sep = "";
         let count = 0;
@@ -3819,9 +3823,9 @@ async function extractColorsFromImageURL$2(url, toDirectory) {
 
 var color = { extractColorsFromImageURL: extractColorsFromImageURL$2 };
 
-const { app: app$7 } = require$$0$1;
-var fs$9 = require$$0$2;
-const path$e = require$$1$2;
+const { app: app$8 } = require$$0$1;
+var fs$a = require$$0$2;
+const path$f = require$$1$2;
 const events$5 = events$8;
 const { getFileContents: getFileContents$5, writeToFile: writeToFile$2 } = file;
 
@@ -3844,8 +3848,8 @@ const dataController$1 = {
   convertJsonToCsvFile: (win, appId, jsonObject, toFilename = "test.csv") => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$e.join(
-        app$7.getPath("userData"),
+      const filename = path$f.join(
+        app$8.getPath("userData"),
         appName$5,
         appId,
         "data",
@@ -3972,15 +3976,15 @@ const dataController$1 = {
       }
 
       // Validate toFilepath is within the app data directory
-      const appDataDir = path$e.join(app$7.getPath("userData"), appName$5);
-      const resolvedFilepath = path$e.resolve(toFilepath);
-      if (!resolvedFilepath.startsWith(appDataDir + path$e.sep)) {
+      const appDataDir = path$f.join(app$8.getPath("userData"), appName$5);
+      const resolvedFilepath = path$f.resolve(toFilepath);
+      if (!resolvedFilepath.startsWith(appDataDir + path$f.sep)) {
         throw new Error(
           "File path must be within the application data directory",
         );
       }
 
-      const writeStream = fs$9.createWriteStream(resolvedFilepath);
+      const writeStream = fs$a.createWriteStream(resolvedFilepath);
 
       https$4
         .get(url, (resp) => {
@@ -4121,8 +4125,8 @@ const dataController$1 = {
     try {
       if (data) {
         // filename to the pages file (live pages)
-        const toFilename = path$e.join(
-          app$7.getPath("userData"),
+        const toFilename = path$f.join(
+          app$8.getPath("userData"),
           appName$5,
           "data",
           filename,
@@ -4203,8 +4207,8 @@ const dataController$1 = {
     try {
       if (filename) {
         // filename to the pages file (live pages)
-        const fromFilename = path$e.join(
-          app$7.getPath("userData"),
+        const fromFilename = path$f.join(
+          app$8.getPath("userData"),
           appName$5,
           "data",
           filename,
@@ -4281,8 +4285,8 @@ const dataController$1 = {
     try {
       console.log(url);
       const fileExtension = ".jpg";
-      const filename = path$e.join(
-        app$7.getPath("userData"),
+      const filename = path$f.join(
+        app$8.getPath("userData"),
         appName$5,
         "@algolia/dash-electron",
         "data",
@@ -4306,9 +4310,9 @@ var dataController_1 = dataController$1;
  * settingsController
  */
 
-const { app: app$6 } = require$$0$1;
-const path$d = require$$1$2;
-const fs$8 = require$$0$2;
+const { app: app$7 } = require$$0$1;
+const path$e = require$$1$2;
+const fs$9 = require$$0$2;
 const { getFileContents: getFileContents$4, writeToFile: writeToFile$1 } = file;
 
 const configFilename$3 = "settings.json";
@@ -4316,15 +4320,15 @@ const appName$4 = "Dashboard";
 
 // Helper function to recursively copy directory
 function copyDirectory(source, destination) {
-  if (!fs$8.existsSync(destination)) {
-    fs$8.mkdirSync(destination, { recursive: true });
+  if (!fs$9.existsSync(destination)) {
+    fs$9.mkdirSync(destination, { recursive: true });
   }
 
-  const files = fs$8.readdirSync(source);
+  const files = fs$9.readdirSync(source);
   for (const file of files) {
-    const srcPath = path$d.join(source, file);
-    const destPath = path$d.join(destination, file);
-    const stat = fs$8.lstatSync(srcPath);
+    const srcPath = path$e.join(source, file);
+    const destPath = path$e.join(destination, file);
+    const stat = fs$9.lstatSync(srcPath);
 
     // Skip symlinks to prevent following links to sensitive files
     if (stat.isSymbolicLink()) {
@@ -4335,7 +4339,7 @@ function copyDirectory(source, destination) {
     if (stat.isDirectory()) {
       copyDirectory(srcPath, destPath);
     } else {
-      fs$8.copyFileSync(srcPath, destPath);
+      fs$9.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -4351,8 +4355,8 @@ const settingsController$4 = {
     try {
       if (data) {
         // <appId>/settings.json
-        const filename = path$d.join(
-          app$6.getPath("userData"),
+        const filename = path$e.join(
+          app$7.getPath("userData"),
           appName$4,
           configFilename$3,
         );
@@ -4387,8 +4391,8 @@ const settingsController$4 = {
   getSettingsForApplication: (win) => {
     try {
       // <appId>/settings.json
-      const filename = path$d.join(
-        app$6.getPath("userData"),
+      const filename = path$e.join(
+        app$7.getPath("userData"),
         appName$4,
         configFilename$3,
       );
@@ -4418,15 +4422,15 @@ const settingsController$4 = {
    */
   getDataDirectory: (win) => {
     try {
-      const settingsPath = path$d.join(
-        app$6.getPath("userData"),
+      const settingsPath = path$e.join(
+        app$7.getPath("userData"),
         appName$4,
         configFilename$3,
       );
       const settings = getFileContents$4(settingsPath, {});
       const userDataDir =
         settings.userDataDirectory ||
-        path$d.join(app$6.getPath("userData"), appName$4);
+        path$e.join(app$7.getPath("userData"), appName$4);
 
       console.log("[settingsController] Data directory retrieved successfully");
       // Return the data for ipcMain.handle() - modern promise-based approach
@@ -4453,18 +4457,18 @@ const settingsController$4 = {
   setDataDirectory: (win, newPath) => {
     try {
       // Validate the path exists and is a directory
-      if (!fs$8.existsSync(newPath)) {
-        fs$8.mkdirSync(newPath, { recursive: true });
+      if (!fs$9.existsSync(newPath)) {
+        fs$9.mkdirSync(newPath, { recursive: true });
       }
 
-      const stats = fs$8.statSync(newPath);
+      const stats = fs$9.statSync(newPath);
       if (!stats.isDirectory()) {
         throw new Error("Path is not a directory");
       }
 
       // Update settings
-      const settingsPath = path$d.join(
-        app$6.getPath("userData"),
+      const settingsPath = path$e.join(
+        app$7.getPath("userData"),
         appName$4,
         configFilename$3,
       );
@@ -4497,20 +4501,20 @@ const settingsController$4 = {
   migrateDataDirectory: (win, oldPath, newPath) => {
     try {
       // Resolve paths to prevent traversal
-      const resolvedOldPath = path$d.resolve(oldPath);
-      const resolvedNewPath = path$d.resolve(newPath);
+      const resolvedOldPath = path$e.resolve(oldPath);
+      const resolvedNewPath = path$e.resolve(newPath);
 
       // Validate oldPath is the current configured data directory
-      const settingsCheckPath = path$d.join(
-        app$6.getPath("userData"),
+      const settingsCheckPath = path$e.join(
+        app$7.getPath("userData"),
         appName$4,
         configFilename$3,
       );
       const currentSettings = getFileContents$4(settingsCheckPath, {});
       const currentDataDir =
         currentSettings.userDataDirectory ||
-        path$d.join(app$6.getPath("userData"), appName$4);
-      if (resolvedOldPath !== path$d.resolve(currentDataDir)) {
+        path$e.join(app$7.getPath("userData"), appName$4);
+      if (resolvedOldPath !== path$e.resolve(currentDataDir)) {
         throw new Error("Source path must be the current data directory");
       }
 
@@ -4534,20 +4538,20 @@ const settingsController$4 = {
       }
 
       // Validate paths
-      if (!fs$8.existsSync(resolvedOldPath)) {
+      if (!fs$9.existsSync(resolvedOldPath)) {
         throw new Error("Source directory does not exist");
       }
 
-      if (!fs$8.existsSync(resolvedNewPath)) {
-        fs$8.mkdirSync(resolvedNewPath, { recursive: true });
+      if (!fs$9.existsSync(resolvedNewPath)) {
+        fs$9.mkdirSync(resolvedNewPath, { recursive: true });
       }
 
       // Copy files
       copyDirectory(resolvedOldPath, resolvedNewPath);
 
       // Update settings to use new path
-      const settingsPath = path$d.join(
-        app$6.getPath("userData"),
+      const settingsPath = path$e.join(
+        app$7.getPath("userData"),
         appName$4,
         configFilename$3,
       );
@@ -5177,8 +5181,8 @@ function requireProviderController () {
 	return providerController_1;
 }
 
-const { app: app$5 } = require$$0$1;
-const path$c = require$$1$2;
+const { app: app$6 } = require$$0$1;
+const path$d = require$$1$2;
 const { writeFileSync: writeFileSync$1 } = require$$0$2;
 const events$4 = events$8;
 const { getFileContents: getFileContents$3 } = file;
@@ -5198,8 +5202,8 @@ const layoutController$1 = {
   saveLayoutForApplication: (win, appId, layoutObject) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$c.join(
-        app$5.getPath("userData"),
+      const filename = path$d.join(
+        app$6.getPath("userData"),
         appName$3,
         appId,
         configFilename$2,
@@ -5231,8 +5235,8 @@ const layoutController$1 = {
    */
   listLayoutsForApplication: (win, appId) => {
     try {
-      const filename = path$c.join(
-        app$5.getPath("userData"),
+      const filename = path$d.join(
+        app$6.getPath("userData"),
         appName$3,
         appId,
         configFilename$2,
@@ -25621,8 +25625,8 @@ const {
 const {
   StreamableHTTPClientTransport,
 } = streamableHttp$1;
-const path$b = require$$1$2;
-const fs$7 = require$$0$2;
+const path$c = require$$1$2;
+const fs$8 = require$$0$2;
 const responseCache$2 = responseCache_1;
 
 /**
@@ -25717,7 +25721,7 @@ function getShellPath$1() {
     fallbackDirs.push(`${home}/.nodenv/shims`);
     try {
       const nvmDir = `${home}/.nvm/versions/node`;
-      const versions = fs$7.readdirSync(nvmDir).sort();
+      const versions = fs$8.readdirSync(nvmDir).sort();
       if (versions.length > 0) {
         // Find the highest compatible version (v18/v20/v22)
         for (let i = versions.length - 1; i >= 0; i--) {
@@ -25853,15 +25857,15 @@ async function refreshGoogleOAuthToken(tokenRefresh) {
   const credPath = tokenRefresh.credentialsPath.replace(/^~/, home);
   const keysPath = tokenRefresh.oauthKeysPath.replace(/^~/, home);
 
-  if (!fs$7.existsSync(credPath) || !fs$7.existsSync(keysPath)) {
+  if (!fs$8.existsSync(credPath) || !fs$8.existsSync(keysPath)) {
     console.log(
       "[mcpController] Token refresh skipped: credential files not found",
     );
     return;
   }
 
-  const credentials = JSON.parse(fs$7.readFileSync(credPath, "utf8"));
-  const keysFile = JSON.parse(fs$7.readFileSync(keysPath, "utf8"));
+  const credentials = JSON.parse(fs$8.readFileSync(credPath, "utf8"));
+  const keysFile = JSON.parse(fs$8.readFileSync(keysPath, "utf8"));
   const keyData = keysFile.installed || keysFile.web;
 
   if (
@@ -25930,7 +25934,7 @@ async function refreshGoogleOAuthToken(tokenRefresh) {
     credentials.refresh_token = body.refresh_token;
   }
 
-  fs$7.writeFileSync(credPath, JSON.stringify(credentials, null, 2));
+  fs$8.writeFileSync(credPath, JSON.stringify(credentials, null, 2));
   console.log("[mcpController] Google OAuth token refreshed successfully");
 }
 
@@ -26084,7 +26088,7 @@ const mcpController$2 = {
           }
 
           // Interpolate {{MCP_DIR}} in args to resolve local MCP server scripts
-          const mcpDir = path$b.join(__dirname, "..", "mcp");
+          const mcpDir = path$c.join(__dirname, "..", "mcp");
           for (let i = 0; i < args.length; i++) {
             if (
               typeof args[i] === "string" &&
@@ -26473,20 +26477,20 @@ const mcpController$2 = {
    */
   getCatalog: (win) => {
     try {
-      const catalogPath = path$b.join(
+      const catalogPath = path$c.join(
         __dirname,
         "..",
         "mcp",
         "mcpServerCatalog.json",
       );
 
-      if (!fs$7.existsSync(catalogPath)) {
+      if (!fs$8.existsSync(catalogPath)) {
         return {
           catalog: [],
         };
       }
 
-      const catalogData = fs$7.readFileSync(catalogPath, "utf8");
+      const catalogData = fs$8.readFileSync(catalogPath, "utf8");
       const catalog = JSON.parse(catalogData);
 
       return {
@@ -26548,8 +26552,8 @@ const mcpController$2 = {
         const destPath = to.replace(/^~/, process.env.HOME || "");
         const destDir = require$$1$2.dirname(destPath);
         try {
-          fs$7.mkdirSync(destDir, { recursive: true });
-          fs$7.copyFileSync(sourcePath, destPath);
+          fs$8.mkdirSync(destDir, { recursive: true });
+          fs$8.copyFileSync(sourcePath, destPath);
         } catch (err) {
           return {
             error: true,
@@ -26585,7 +26589,7 @@ const mcpController$2 = {
     }
 
     // Interpolate {{MCP_DIR}} in authCommand args (same as startServer)
-    const mcpDir = path$b.join(__dirname, "..", "mcp");
+    const mcpDir = path$c.join(__dirname, "..", "mcp");
     const resolvedArgs = (authCommand.args || []).map((arg) =>
       typeof arg === "string" && arg.includes("{{MCP_DIR}}")
         ? arg.replace(/\{\{MCP_DIR\}\}/g, mcpDir)
@@ -26836,7 +26840,7 @@ function getStoredToken$4() {
  *
  * @returns {Object} { authenticated: boolean, userId?: string }
  */
-function getAuthStatus$1() {
+function getAuthStatus$2() {
   const stored = getStoredToken$4();
   if (!stored) {
     return { authenticated: false };
@@ -26854,7 +26858,7 @@ function getAuthStatus$1() {
  *
  * @returns {Promise<Object|null>} User profile or null
  */
-async function getRegistryProfile$2() {
+async function getRegistryProfile$3() {
   const stored = getStoredToken$4();
   if (!stored) return null;
 
@@ -27028,8 +27032,8 @@ var registryAuthController$2 = {
   initiateDeviceFlow: initiateDeviceFlow$1,
   pollForToken: pollForToken$1,
   getStoredToken: getStoredToken$4,
-  getAuthStatus: getAuthStatus$1,
-  getRegistryProfile: getRegistryProfile$2,
+  getAuthStatus: getAuthStatus$2,
+  getRegistryProfile: getRegistryProfile$3,
   updateRegistryProfile: updateRegistryProfile$1,
   getRegistryPackages: getRegistryPackages$1,
   updateRegistryPackage: updateRegistryPackage$1,
@@ -27049,8 +27053,8 @@ var registryAuthController$2 = {
  * - Support two-level browsing: packages (bundles) and widgets within packages
  */
 
-const path$a = require$$1$2;
-const fs$6 = require$$0$2;
+const path$b = require$$1$2;
+const fs$7 = require$$0$2;
 const { toPackageId } = packageId;
 const { getStoredToken: getStoredToken$3 } = registryAuthController$2;
 
@@ -27085,7 +27089,7 @@ function getCacheKey() {
  * Get the local test registry path for dev mode
  */
 function getTestRegistryPath() {
-  return path$a.join(__dirname, "..", "registry", "test-registry-index.json");
+  return path$b.join(__dirname, "..", "registry", "test-registry-index.json");
 }
 
 /**
@@ -27125,12 +27129,12 @@ async function fetchRegistryIndex(forceRefresh = false) {
     if (isDev()) {
       // In dev mode, try local test file first
       const testPath = getTestRegistryPath();
-      if (fs$6.existsSync(testPath)) {
+      if (fs$7.existsSync(testPath)) {
         console.log(
           "[RegistryController] Loading test registry from:",
           testPath,
         );
-        const raw = fs$6.readFileSync(testPath, "utf8");
+        const raw = fs$7.readFileSync(testPath, "utf8");
         indexData = JSON.parse(raw);
       } else {
         // Fall back to API (supports DASH_REGISTRY_URL as full-URL override)
@@ -27452,10 +27456,10 @@ var registryController$3 = {
   checkUpdates,
 };
 
-var fs$5 = require$$0$2;
+var fs$6 = require$$0$2;
 var JSONStream = require$$4;
 const algoliasearch$1 = require$$2$2;
-const path$9 = require$$3$3;
+const path$a = require$$3$3;
 const { ensureDirectoryExistence, checkDirectory } = file;
 
 let AlgoliaIndex$1 = class AlgoliaIndex {
@@ -27493,7 +27497,7 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
       var batchNumber = 1;
 
       // create the readStream to parse the large file (json)
-      var readStream = fs$5.createReadStream(filepath).pipe(parser);
+      var readStream = fs$6.createReadStream(filepath).pipe(parser);
 
       var batch = [];
 
@@ -27507,7 +27511,7 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
               // lets write to the batch file
               if (countForBatch === batchSize) {
                 // write to the batch file
-                var writeStream = fs$5.createWriteStream(
+                var writeStream = fs$6.createWriteStream(
                   batchFilepath + "/batch_" + batchNumber + ".json",
                 );
                 writeStream.write(JSON.stringify(batch));
@@ -27558,11 +27562,11 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
     return new Promise((resolve, reject) => {
       try {
         checkDirectory(directoryPath);
-        fs$5.readdir(directoryPath, (err, files) => {
+        fs$6.readdir(directoryPath, (err, files) => {
           if (err) reject(err);
           if (files) {
             files.forEach((file) => {
-              fs$5.unlinkSync(path$9.join(directoryPath, file));
+              fs$6.unlinkSync(path$a.join(directoryPath, file));
             });
             resolve();
           }
@@ -27581,11 +27585,11 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
   ) {
     try {
       // read the directory...
-      const files = await fs$5.readdirSync(batchFilepath);
+      const files = await fs$6.readdirSync(batchFilepath);
       let results = [];
       for (const fileIndex in files) {
         // for each file lets read the file and then push to algolia
-        const pathToBatch = path$9.join(batchFilepath, files[fileIndex]);
+        const pathToBatch = path$a.join(batchFilepath, files[fileIndex]);
         const fileContents = await this.readFile(pathToBatch);
         if (fileContents) {
           if ("data" in fileContents && "filepath" in fileContents) {
@@ -27610,7 +27614,7 @@ let AlgoliaIndex$1 = class AlgoliaIndex {
 
   async readFile(filepath) {
     return await new Promise((resolve, reject) => {
-      fs$5.readFile(filepath, "utf8", (err, data) => {
+      fs$6.readFile(filepath, "utf8", (err, data) => {
         if (err) {
           reject(err);
         }
@@ -27760,7 +27764,7 @@ var algolia = AlgoliaIndex$1;
 const algoliasearch = require$$2$2;
 const events$3 = events$8;
 const AlgoliaIndex = algolia;
-var fs$4 = require$$0$2;
+var fs$5 = require$$0$2;
 
 const algoliaController$1 = {
   /**
@@ -27868,7 +27872,7 @@ const algoliaController$1 = {
         // init the Algolia Index helper
         const a = new AlgoliaIndex(appId, apiKey, indexName);
         // create the write stream to store the hits
-        const writeStream = fs$4.createWriteStream(toFilename);
+        const writeStream = fs$5.createWriteStream(toFilename);
         writeStream.write("[");
 
         let sep = "";
@@ -28039,8 +28043,8 @@ const openaiController$1 = {
 
 var openaiController_1 = openaiController$1;
 
-const { app: app$4 } = require$$0$1;
-const path$8 = require$$1$2;
+const { app: app$5 } = require$$0$1;
+const path$9 = require$$1$2;
 const { writeFileSync } = require$$0$2;
 const { getFileContents: getFileContents$2 } = file;
 
@@ -28051,8 +28055,8 @@ const menuItemsController$1 = {
   saveMenuItemForApplication: (win, appId, menuItem) => {
     try {
       // filename to the pages file (live pages)
-      const filename = path$8.join(
-        app$4.getPath("userData"),
+      const filename = path$9.join(
+        app$5.getPath("userData"),
         appName$2,
         appId,
         configFilename$1,
@@ -28087,8 +28091,8 @@ const menuItemsController$1 = {
 
   listMenuItemsForApplication: (win, appId) => {
     try {
-      const filename = path$8.join(
-        app$4.getPath("userData"),
+      const filename = path$9.join(
+        app$5.getPath("userData"),
         appName$2,
         appId,
         configFilename$1,
@@ -28113,14 +28117,14 @@ const menuItemsController$1 = {
 
 var menuItemsController_1 = menuItemsController$1;
 
-const path$7 = require$$1$2;
-const { app: app$3 } = require$$0$1;
+const path$8 = require$$1$2;
+const { app: app$4 } = require$$0$1;
 
 const pluginController$1 = {
   install: (win, packageName, filepath) => {
     try {
-      const rootPath = path$7.join(
-        app$3.getPath("userData"),
+      const rootPath = path$8.join(
+        app$4.getPath("userData"),
         "plugins",
         packageName,
       );
@@ -49033,8 +49037,8 @@ streamableHttp.StreamableHTTPServerTransport = StreamableHTTPServerTransport$1;
  *   https.createServer({ key, cert }, handler);
  */
 
-const fs$3 = require$$0$2;
-const path$6 = require$$1$2;
+const fs$4 = require$$0$2;
+const path$7 = require$$1$2;
 const forge = require$$2$3;
 
 /**
@@ -49043,14 +49047,14 @@ const forge = require$$2$3;
  * @returns {{ cert: string, key: string }} PEM-encoded certificate and private key
  */
 function getOrCreateCert$1(certsDir) {
-  const certPath = path$6.join(certsDir, "cert.pem");
-  const keyPath = path$6.join(certsDir, "key.pem");
+  const certPath = path$7.join(certsDir, "cert.pem");
+  const keyPath = path$7.join(certsDir, "key.pem");
 
   // Return existing cert if valid
-  if (fs$3.existsSync(certPath) && fs$3.existsSync(keyPath)) {
+  if (fs$4.existsSync(certPath) && fs$4.existsSync(keyPath)) {
     try {
-      const cert = fs$3.readFileSync(certPath, "utf8");
-      const key = fs$3.readFileSync(keyPath, "utf8");
+      const cert = fs$4.readFileSync(certPath, "utf8");
+      const key = fs$4.readFileSync(keyPath, "utf8");
       // Verify cert is not expired
       const parsed = forge.pki.certificateFromPem(cert);
       if (parsed.validity.notAfter > new Date()) {
@@ -49116,9 +49120,9 @@ function getOrCreateCert$1(certsDir) {
   const keyPem = forge.pki.privateKeyToPem(keys.privateKey);
 
   // Write to disk
-  fs$3.mkdirSync(certsDir, { recursive: true });
-  fs$3.writeFileSync(certPath, certPem, { mode: 0o644 });
-  fs$3.writeFileSync(keyPath, keyPem, { mode: 0o600 });
+  fs$4.mkdirSync(certsDir, { recursive: true });
+  fs$4.writeFileSync(certPath, certPem, { mode: 0o644 });
+  fs$4.writeFileSync(keyPath, keyPem, { mode: 0o600 });
 
   console.log(`[tlsCert] Certificate saved to ${certsDir}`);
 
@@ -49688,8 +49692,8 @@ var dynamicWidgetLoader$2 = {exports: {}};
  * Runs in the Electron main process at widget install time.
  */
 
-const fs$2 = require$$0$2;
-const path$5 = require$$1$2;
+const fs$3 = require$$0$2;
+const path$6 = require$$1$2;
 
 /**
  * Find the widgets/ directory, handling nested ZIP extraction.
@@ -49704,26 +49708,26 @@ const path$5 = require$$1$2;
  * @returns {string|null} Path to the widgets/ directory, or null
  */
 function findWidgetsDir$1(widgetPath) {
-  const direct = path$5.join(widgetPath, "widgets");
-  if (fs$2.existsSync(direct)) {
+  const direct = path$6.join(widgetPath, "widgets");
+  if (fs$3.existsSync(direct)) {
     return direct;
   }
 
   // Check configs/widgets/ (packageZip.js nests .dash.js files here)
-  const configsWidgets = path$5.join(widgetPath, "configs", "widgets");
-  if (fs$2.existsSync(configsWidgets)) {
+  const configsWidgets = path$6.join(widgetPath, "configs", "widgets");
+  if (fs$3.existsSync(configsWidgets)) {
     return configsWidgets;
   }
 
   // Check configs/ directory (used by packageZip.js for distributed widgets)
-  const configs = path$5.join(widgetPath, "configs");
-  if (fs$2.existsSync(configs)) {
+  const configs = path$6.join(widgetPath, "configs");
+  if (fs$3.existsSync(configs)) {
     return configs;
   }
 
   // Check one level deeper for nested ZIP extraction
   try {
-    const entries = fs$2.readdirSync(widgetPath, { withFileTypes: true });
+    const entries = fs$3.readdirSync(widgetPath, { withFileTypes: true });
     const subdirs = entries.filter(
       (e) =>
         e.isDirectory() &&
@@ -49733,8 +49737,8 @@ function findWidgetsDir$1(widgetPath) {
     );
 
     for (const subdir of subdirs) {
-      const nested = path$5.join(widgetPath, subdir.name, "widgets");
-      if (fs$2.existsSync(nested)) {
+      const nested = path$6.join(widgetPath, subdir.name, "widgets");
+      if (fs$3.existsSync(nested)) {
         console.log(`[WidgetCompiler] Found nested widgets/ at ${nested}`);
         return nested;
       }
@@ -49768,7 +49772,7 @@ async function compileWidget(widgetPath) {
   }
 
   // Discover .dash.js config files
-  const files = fs$2.readdirSync(widgetsDir);
+  const files = fs$3.readdirSync(widgetsDir);
   const dashFiles = files.filter((f) => f.endsWith(".dash.js"));
 
   if (dashFiles.length === 0) {
@@ -49782,15 +49786,15 @@ async function compileWidget(widgetPath) {
   // Compute relative path from the entry file (in widgetPath) to widgetsDir,
   // since widgetsDir may be nested (e.g., ./weather-widget/widgets/).
   const relWidgetsDir =
-    "./" + path$5.relative(widgetPath, widgetsDir).split(path$5.sep).join("/");
+    "./" + path$6.relative(widgetPath, widgetsDir).split(path$6.sep).join("/");
   const imports = [];
   const exportParts = [];
 
   for (const dashFile of dashFiles) {
     const componentName = dashFile.replace(".dash.js", "");
     const componentFile = `${componentName}.js`;
-    const componentFilePath = path$5.join(widgetsDir, componentFile);
-    const hasComponent = fs$2.existsSync(componentFilePath);
+    const componentFilePath = path$6.join(widgetsDir, componentFile);
+    const hasComponent = fs$3.existsSync(componentFilePath);
 
     // Import the config (always)
     imports.push(
@@ -49816,17 +49820,17 @@ async function compileWidget(widgetPath) {
   const entryContent = [...imports, "", ...exportParts, ""].join("\n");
 
   // Write temporary entry file in the widget root
-  const entryPath = path$5.join(widgetPath, "__compile_entry.js");
-  const distDir = path$5.join(widgetPath, "dist");
-  const outPath = path$5.join(distDir, "index.cjs.js");
+  const entryPath = path$6.join(widgetPath, "__compile_entry.js");
+  const distDir = path$6.join(widgetPath, "dist");
+  const outPath = path$6.join(distDir, "index.cjs.js");
 
   try {
     // Ensure dist/ directory exists
-    if (!fs$2.existsSync(distDir)) {
-      fs$2.mkdirSync(distDir, { recursive: true });
+    if (!fs$3.existsSync(distDir)) {
+      fs$3.mkdirSync(distDir, { recursive: true });
     }
 
-    fs$2.writeFileSync(entryPath, entryContent, "utf8");
+    fs$3.writeFileSync(entryPath, entryContent, "utf8");
 
     console.log(
       `[WidgetCompiler] Compiling ${dashFiles.length} component(s) from ${widgetPath}`,
@@ -49867,8 +49871,8 @@ async function compileWidget(widgetPath) {
   } finally {
     // Clean up temporary entry file
     try {
-      if (fs$2.existsSync(entryPath)) {
-        fs$2.unlinkSync(entryPath);
+      if (fs$3.existsSync(entryPath)) {
+        fs$3.unlinkSync(entryPath);
       }
     } catch (cleanupError) {
       // Non-fatal
@@ -49894,8 +49898,8 @@ var widgetCompiler$1 = { compileWidget, findWidgetsDir: findWidgetsDir$1 };
  * Integrates with ComponentManager for automatic registration
  */
 
-const fs$1 = require$$0$2;
-const path$4 = require$$1$2;
+const fs$2 = require$$0$2;
+const path$5 = require$$1$2;
 const vm = require$$2$4;
 const { findWidgetsDir } = widgetCompiler$1;
 
@@ -49936,14 +49940,14 @@ class DynamicWidgetLoader {
       );
 
       const widgetsDir =
-        findWidgetsDir(widgetPath) || path$4.join(widgetPath, "widgets");
-      const componentPath = path$4.join(widgetsDir, `${componentName}.js`);
-      const configPath = path$4.join(widgetsDir, `${componentName}.dash.js`);
+        findWidgetsDir(widgetPath) || path$5.join(widgetPath, "widgets");
+      const componentPath = path$5.join(widgetsDir, `${componentName}.js`);
+      const configPath = path$5.join(widgetsDir, `${componentName}.dash.js`);
 
-      if (!fs$1.existsSync(componentPath)) {
+      if (!fs$2.existsSync(componentPath)) {
         throw new Error(`Component file not found: ${componentPath}`);
       }
-      if (!fs$1.existsSync(configPath)) {
+      if (!fs$2.existsSync(configPath)) {
         throw new Error(`Config file not found: ${configPath}`);
       }
 
@@ -49994,7 +49998,7 @@ class DynamicWidgetLoader {
    */
   async loadConfigFile(configPath) {
     try {
-      const source = fs$1.readFileSync(configPath, "utf8");
+      const source = fs$2.readFileSync(configPath, "utf8");
 
       let exportMatch = source.match(/export\s+default\s+({[\s\S]*});?\s*$/);
 
@@ -50049,7 +50053,7 @@ class DynamicWidgetLoader {
         return [];
       }
 
-      const files = fs$1.readdirSync(widgetsDir);
+      const files = fs$2.readdirSync(widgetsDir);
       const widgets = new Set();
 
       files.forEach((file) => {
@@ -63049,8 +63053,8 @@ var dashboardConfigUtils$1 = {
  * Handles publishing packages and generating registry URLs.
  */
 
-const fs = require$$0$2;
-const path$3 = require$$1$2;
+const fs$1 = require$$0$2;
+const path$4 = require$$1$2;
 const { getStoredToken: getStoredToken$2 } = registryAuthController$2;
 
 const REGISTRY_BASE_URL =
@@ -63076,14 +63080,14 @@ async function publishToRegistry$1(zipPath, manifest) {
 
   try {
     // Read the ZIP file
-    const zipBuffer = fs.readFileSync(zipPath);
+    const zipBuffer = fs$1.readFileSync(zipPath);
 
     // Create FormData with the ZIP and manifest
     const formData = new FormData();
     formData.append(
       "file",
       new Blob([zipBuffer], { type: "application/zip" }),
-      path$3.basename(zipPath),
+      path$4.basename(zipPath),
     );
     formData.append("manifest", JSON.stringify(manifest));
 
@@ -63123,6 +63127,55 @@ async function publishToRegistry$1(zipPath, manifest) {
   }
 }
 
+/**
+ * Bulk-resolve package refs to their registry state. Used by the
+ * batch-publish dialog to decorate dependency rows with ownership +
+ * latest version + visibility.
+ *
+ * Sends token if available (authenticated callers see their private
+ * packages too). Anonymous calls still work — only public data is
+ * returned.
+ *
+ * @param {Array<{scope: string, name: string}>} refs
+ * @returns {Promise<Object>} { success, resolved: [...], error? }
+ */
+async function resolvePackages(refs) {
+  if (!Array.isArray(refs) || refs.length === 0) {
+    return { success: true, resolved: [] };
+  }
+
+  try {
+    const headers = { "Content-Type": "application/json" };
+    const auth = getStoredToken$2();
+    if (auth?.token) {
+      headers.Authorization = `Bearer ${auth.token}`;
+    }
+
+    const response = await fetch(`${REGISTRY_BASE_URL}/api/packages/resolve`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ refs }),
+    });
+
+    const data = await response.json().catch(() => null);
+
+    if (!response.ok) {
+      return {
+        success: false,
+        error: data?.error || `Resolve failed: ${response.status}`,
+      };
+    }
+
+    return { success: true, resolved: Array.isArray(data) ? data : [] };
+  } catch (err) {
+    console.error("[RegistryApiController] Resolve error:", err);
+    return {
+      success: false,
+      error: err.message || "Failed to resolve packages",
+    };
+  }
+}
+
 /**
  * Get the registry URL for a published package.
  *
@@ -63134,8 +63187,9 @@ function getRegistryUrl$1(scope, name) {
   return `${REGISTRY_BASE_URL}/package/${scope}/${name}`;
 }
 
-var registryApiController$2 = {
+var registryApiController$3 = {
   publishToRegistry: publishToRegistry$1,
+  resolvePackages,
   getRegistryUrl: getRegistryUrl$1,
   REGISTRY_BASE_URL,
 };
@@ -63147,16 +63201,16 @@ var registryApiController$2 = {
  * Mirrors dashboardConfigController patterns for ZIP creation, manifest generation,
  * and registry interaction.
  */
-const path$2 = require$$1$2;
-const { app: app$2, dialog: dialog$1 } = require$$0$1;
-const AdmZip$1 = require$$3$4;
+const path$3 = require$$1$2;
+const { app: app$3, dialog: dialog$1 } = require$$0$1;
+const AdmZip$2 = require$$3$4;
 
 const themeController$3 = themeController_1;
 const registryController$1 = registryController$3;
-const registryApiController$1 = registryApiController$2;
+const registryApiController$2 = registryApiController$3;
 const {
-  getAuthStatus,
-  getRegistryProfile: getRegistryProfile$1,
+  getAuthStatus: getAuthStatus$1,
+  getRegistryProfile: getRegistryProfile$2,
   getStoredToken: getStoredToken$1,
   clearToken: clearToken$1,
 } = registryAuthController$2;
@@ -63276,7 +63330,7 @@ async function prepareThemeForPublish$1(win, appId, themeKey, options = {}) {
     }
 
     // Get auth status and profile for scope
-    const auth = getAuthStatus();
+    const auth = getAuthStatus$1();
     if (!auth.authenticated) {
       return {
         success: false,
@@ -63284,7 +63338,7 @@ async function prepareThemeForPublish$1(win, appId, themeKey, options = {}) {
         authRequired: true,
       };
     }
-    const profile = await getRegistryProfile$1();
+    const profile = await getRegistryProfile$2();
     const scope = profile?.username || options.scope || "";
     if (!scope) {
       return {
@@ -63331,7 +63385,7 @@ async function prepareThemeForPublish$1(win, appId, themeKey, options = {}) {
     const filePath = saveResult.filePath;
 
     // Create ZIP with manifest.json + {name}.theme.json
-    const zip = new AdmZip$1();
+    const zip = new AdmZip$2();
     zip.addFile(
       "manifest.json",
       Buffer.from(JSON.stringify(manifest, null, 2), "utf-8"),
@@ -63347,7 +63401,7 @@ async function prepareThemeForPublish$1(win, appId, themeKey, options = {}) {
     // Attempt to publish to registry
     let registryResult = null;
     if (auth.authenticated) {
-      registryResult = await registryApiController$1.publishToRegistry(
+      registryResult = await registryApiController$2.publishToRegistry(
         filePath,
         manifest,
       );
@@ -63561,7 +63615,7 @@ async function installThemeFromRegistry$1(win, appId, packageName) {
       // ZIP response — extract .theme.json from archive
       let zip;
       try {
-        zip = new AdmZip$1(zipBuffer);
+        zip = new AdmZip$2(zipBuffer);
       } catch (zipErr) {
         console.log(
           `${TAG} [4/5 ZIP Extraction] FAIL — invalid ZIP: ${zipErr.message}`,
@@ -63593,7 +63647,7 @@ async function installThemeFromRegistry$1(win, appId, packageName) {
       // Validate entry path (security: prevent path traversal)
       if (
         themeEntry.entryName.includes("..") ||
-        path$2.isAbsolute(themeEntry.entryName)
+        path$3.isAbsolute(themeEntry.entryName)
       ) {
         return {
           success: false,
@@ -63718,9 +63772,9 @@ var themeRegistryController$1 = {
  * applies event wiring. (Import is implemented in DASH-13.)
  */
 
-const { app: app$1, dialog } = require$$0$1;
-const path$1 = require$$1$2;
-const AdmZip = require$$3$4;
+const { app: app$2, dialog } = require$$0$1;
+const path$2 = require$$1$2;
+const AdmZip$1 = require$$3$4;
 const { getFileContents: getFileContents$1 } = file;
 const {
   validateDashboardConfig,
@@ -63763,8 +63817,8 @@ async function exportDashboardConfig$1(
 ) {
   try {
     // 1. Read workspace from workspaces.json
-    const filename = path$1.join(
-      app$1.getPath("userData"),
+    const filename = path$2.join(
+      app$2.getPath("userData"),
       appName$1,
       appId,
       configFilename,
@@ -63857,8 +63911,8 @@ async function exportDashboardConfig$1(
 
     const { canceled, filePath } = await dialog.showSaveDialog(win, {
       title: "Export Dashboard as ZIP",
-      defaultPath: path$1.join(
-        app$1.getPath("desktop"),
+      defaultPath: path$2.join(
+        app$2.getPath("desktop"),
         `dashboard-${sanitizedName}.zip`,
       ),
       filters: [{ name: "ZIP Archive", extensions: ["zip"] }],
@@ -63869,7 +63923,7 @@ async function exportDashboardConfig$1(
     }
 
     // 7. Create ZIP with the config
-    const zip = new AdmZip();
+    const zip = new AdmZip$1();
     const configJson = JSON.stringify(dashboardConfig, null, 2);
     zip.addFile(
       `${sanitizedName}.dashboard.json`,
@@ -63922,8 +63976,8 @@ async function selectDashboardFile$1(win) {
     const zipPath = filePaths[0];
 
     // Extract and validate
-    const zip = new AdmZip(zipPath);
-    const tempDir = path$1.join(app$1.getPath("temp"), "dash-import");
+    const zip = new AdmZip$1(zipPath);
+    const tempDir = path$2.join(app$2.getPath("temp"), "dash-import");
     const { validateZipEntries } = widgetRegistryExports;
     validateZipEntries(zip, tempDir);
 
@@ -64030,10 +64084,10 @@ async function importDashboardConfig$1(
     }
 
     // 2. Extract and validate .dashboard.json from ZIP
-    const zip = new AdmZip(zipPath);
+    const zip = new AdmZip$1(zipPath);
 
     // Validate ZIP entries for path traversal
-    const tempDir = path$1.join(app$1.getPath("temp"), "dash-import");
+    const tempDir = path$2.join(app$2.getPath("temp"), "dash-import");
     const { validateZipEntries } = widgetRegistryExports;
     validateZipEntries(zip, tempDir);
 
@@ -64629,10 +64683,10 @@ async function installDashboardFromRegistry$1(
       }
     }
 
-    const zip = new AdmZip(zipBuffer);
+    const zip = new AdmZip$1(zipBuffer);
 
     // 3. Validate ZIP entries
-    const tempDir = path$1.join(app$1.getPath("temp"), "dash-registry-import");
+    const tempDir = path$2.join(app$2.getPath("temp"), "dash-registry-import");
     const { validateZipEntries } = widgetRegistryExports;
     validateZipEntries(zip, tempDir);
 
@@ -64763,8 +64817,8 @@ async function collectDashboardDependencies$1(
 ) {
   try {
     // 1. Read workspace
-    const filename = path$1.join(
-      app$1.getPath("userData"),
+    const filename = path$2.join(
+      app$2.getPath("userData"),
       appName$1,
       appId,
       configFilename,
@@ -64855,6 +64909,100 @@ async function collectDashboardDependencies$1(
   }
 }
 
+/**
+ * Build an enriched dependency plan for batch-publishing a dashboard.
+ *
+ * Combines local dependency info (collectDashboardDependencies) with the
+ * registry's current state (POST /api/packages/resolve) so the batch-
+ * publish UI can decorate each widget + theme row with "already in
+ * registry at vX.Y.Z", "owned by you", "public/private", etc.
+ *
+ * Each returned widget has a `registry` sub-object that is either null
+ * (registry call failed or the package didn't exist) or the resolved
+ * entry from the API. Never throws on registry failures — the UI can
+ * still fall back to local-only info.
+ *
+ * @param {string} appId - Application identifier
+ * @param {number|string} workspaceId - Workspace ID
+ * @param {Object} widgetRegistry - WidgetRegistry instance
+ * @param {Object} options - { componentConfigs?: Object }
+ * @returns {Promise<Object>} { success, widgets, theme, registryError? }
+ */
+async function getDashboardPublishPlan$1(
+  appId,
+  workspaceId,
+  widgetRegistry = null,
+  options = {},
+) {
+  try {
+    const { resolvePackages } = registryApiController$3;
+
+    const deps = await collectDashboardDependencies$1(
+      appId,
+      workspaceId,
+      widgetRegistry,
+      options,
+    );
+    if (!deps.success) {
+      return { success: false, error: deps.error };
+    }
+
+    const refs = [];
+    for (const w of deps.widgets) {
+      if (w.scope && w.packageName) {
+        refs.push({ scope: w.scope, name: w.packageName });
+      }
+    }
+    if (deps.theme && deps.theme.scope && deps.theme.name) {
+      refs.push({ scope: deps.theme.scope, name: deps.theme.name });
+    }
+
+    let registryError = null;
+    const resolvedByKey = new Map();
+    if (refs.length > 0) {
+      const res = await resolvePackages(refs);
+      if (res.success && Array.isArray(res.resolved)) {
+        for (const r of res.resolved) {
+          resolvedByKey.set(`${r.scope}/${r.name}`, r);
+        }
+      } else {
+        registryError = res.error || "Registry lookup failed";
+      }
+    }
+
+    const widgets = deps.widgets.map((w) => {
+      const key =
+        w.scope && w.packageName ? `${w.scope}/${w.packageName}` : null;
+      return {
+        ...w,
+        registry: key ? resolvedByKey.get(key) || null : null,
+      };
+    });
+
+    let theme = null;
+    if (deps.theme) {
+      const key =
+        deps.theme.scope && deps.theme.name
+          ? `${deps.theme.scope}/${deps.theme.name}`
+          : null;
+      theme = {
+        ...deps.theme,
+        registry: key ? resolvedByKey.get(key) || null : null,
+      };
+    }
+
+    return {
+      success: true,
+      widgets,
+      theme,
+      ...(registryError ? { registryError } : {}),
+    };
+  } catch (error) {
+    console.error("[dashboardConfig] getDashboardPublishPlan failed:", error);
+    return { success: false, error: error.message };
+  }
+}
+
 /**
  * Prepare a dashboard for publishing to the registry.
  *
@@ -64890,8 +65038,8 @@ async function prepareDashboardForPublish$1(
     } = dashboardConfigUtils$1;
 
     // 1. Read workspace
-    const filename = path$1.join(
-      app$1.getPath("userData"),
+    const filename = path$2.join(
+      app$2.getPath("userData"),
       appName$1,
       appId,
       configFilename,
@@ -65071,8 +65219,8 @@ async function prepareDashboardForPublish$1(
     const sanitizedName = manifest.name;
     const { canceled, filePath } = await dialog.showSaveDialog(win, {
       title: "Save Dashboard Package for Registry",
-      defaultPath: path$1.join(
-        app$1.getPath("desktop"),
+      defaultPath: path$2.join(
+        app$2.getPath("desktop"),
         `dashboard-${sanitizedName}-v${manifest.version}.zip`,
       ),
       filters: [{ name: "ZIP Archive", extensions: ["zip"] }],
@@ -65083,7 +65231,7 @@ async function prepareDashboardForPublish$1(
     }
 
     // 10. Create ZIP with manifest and dashboard config
-    const zip = new AdmZip();
+    const zip = new AdmZip$1();
     zip.addFile(
       "manifest.json",
       Buffer.from(JSON.stringify(manifest, null, 2), "utf-8"),
@@ -65102,7 +65250,7 @@ async function prepareDashboardForPublish$1(
     let registrySubmission = null;
     try {
       const { getAuthStatus } = registryAuthController$2;
-      const { publishToRegistry } = registryApiController$2;
+      const { publishToRegistry } = registryApiController$3;
       const authStatus = getAuthStatus();
 
       if (authStatus.authenticated) {
@@ -65210,8 +65358,8 @@ async function checkDashboardUpdatesForApp$1(appId) {
   const { fetchRegistryIndex } = registryController$3;
 
   try {
-    const filename = path$1.join(
-      app$1.getPath("userData"),
+    const filename = path$2.join(
+      app$2.getPath("userData"),
       appName$1,
       appId,
       configFilename,
@@ -65281,8 +65429,8 @@ function getProviderSetupManifest$1(appId, requiredProviders = []) {
  */
 function getDashboardPublishPreview$1(appId, workspaceId, widgetRegistry = null) {
   try {
-    const filename = path$1.join(
-      app$1.getPath("userData"),
+    const filename = path$2.join(
+      app$2.getPath("userData"),
       appName$1,
       appId,
       configFilename,
@@ -65324,6 +65472,7 @@ var dashboardConfigController$1 = {
   checkCompatibility: checkCompatibility$1,
   prepareDashboardForPublish: prepareDashboardForPublish$1,
   collectDashboardDependencies: collectDashboardDependencies$1,
+  getDashboardPublishPlan: getDashboardPublishPlan$1,
   getDashboardPreview: getDashboardPreview$1,
   checkDashboardUpdatesForApp: checkDashboardUpdatesForApp$1,
   getProviderSetupManifest: getProviderSetupManifest$1,
@@ -71484,8 +71633,8 @@ var dashboardRatingsUtils = {
  * Runs in the Electron main process.
  */
 
-const { app } = require$$0$1;
-const path = require$$1$2;
+const { app: app$1 } = require$$0$1;
+const path$1 = require$$1$2;
 const { getFileContents, writeToFile } = file;
 const {
   validateAndBuildRating,
@@ -71499,7 +71648,7 @@ const appName = "Dashboard";
  * Get the ratings file path for an app.
  */
 function getRatingsPath(appId) {
-  return path.join(app.getPath("userData"), appName, appId, ratingsFilename);
+  return path$1.join(app$1.getPath("userData"), appName, appId, ratingsFilename);
 }
 
 /**
@@ -71576,6 +71725,323 @@ var dashboardRatingsController = {
   enrichPackagesWithRatings: enrichPackagesWithRatings$1,
 };
 
+/**
+ * widgetPublishManifest.js
+ *
+ * Pure helpers for widget-publish flow — version bumping, package-name
+ * parsing, and manifest generation. No electron / fs / adm-zip deps so
+ * these can be unit-tested directly.
+ */
+
+const SEMVER_RE =
+  /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;
+
+function bumpVersion(current, type) {
+  if (!current || typeof current !== "string") return "1.0.0";
+  const match = current.match(SEMVER_RE);
+  if (!match) return current;
+  let [, major, minor, patch] = match;
+  major = Number(major);
+  minor = Number(minor);
+  patch = Number(patch);
+  switch (type) {
+    case "major":
+      return `${major + 1}.0.0`;
+    case "minor":
+      return `${major}.${minor + 1}.0`;
+    case "patch":
+    default:
+      return `${major}.${minor}.${patch + 1}`;
+  }
+}
+
+function resolveNextVersion$1(currentVersion, options = {}) {
+  if (options.version) return options.version;
+  if (options.bump) return bumpVersion(currentVersion, options.bump);
+  return currentVersion;
+}
+
+function parsePackageName$1(pkgName) {
+  if (!pkgName) return { scope: null, name: "" };
+  const m = pkgName.match(/^@([^/]+)\/(.+)$/);
+  if (m) return { scope: m[1], name: m[2] };
+  return { scope: null, name: pkgName };
+}
+
+function generateWidgetRegistryManifest$1(
+  packageJson,
+  widgetConfigs,
+  options = {},
+) {
+  const parsed = parsePackageName$1(packageJson.name || "");
+  const scope = options.scope || parsed.scope || "";
+  const name = options.name || parsed.name || packageJson.name || "";
+  const version = options.version || packageJson.version || "1.0.0";
+  const visibility = options.visibility === "private" ? "private" : "public";
+
+  const providerKeys = new Set();
+  const providers = [];
+  for (const cfg of widgetConfigs || []) {
+    if (!Array.isArray(cfg.providers)) continue;
+    for (const p of cfg.providers) {
+      const key = `${p.type}:${p.providerClass || "mcp"}`;
+      if (providerKeys.has(key)) continue;
+      providerKeys.add(key);
+      providers.push({
+        type: p.type,
+        required: p.required !== false,
+        providerClass: p.providerClass || "mcp",
+      });
+    }
+  }
+
+  const widgets = (widgetConfigs || []).map((cfg) => ({
+    name: cfg.component || cfg.name,
+    displayName: cfg.name || cfg.component,
+    description: cfg.description || "",
+    icon: cfg.icon || "square",
+    providers: Array.isArray(cfg.providers)
+      ? cfg.providers.map((p) => ({
+          type: p.type,
+          required: p.required !== false,
+          providerClass: p.providerClass || "mcp",
+        }))
+      : [],
+  }));
+
+  return {
+    scope,
+    name,
+    displayName: options.displayName || packageJson.displayName || name,
+    version,
+    type: "widget",
+    visibility,
+    description: options.description || packageJson.description || "",
+    author:
+      options.authorName ||
+      (typeof packageJson.author === "string"
+        ? packageJson.author
+        : packageJson.author?.name || ""),
+    category: options.category || "general",
+    tags: Array.isArray(options.tags) ? options.tags : [],
+    icon: options.icon || "puzzle-piece",
+    providers,
+    widgets,
+    appOrigin: options.appOrigin || "",
+    publishedAt: new Date().toISOString(),
+  };
+}
+
+var widgetPublishManifest = {
+  bumpVersion,
+  resolveNextVersion: resolveNextVersion$1,
+  parsePackageName: parsePackageName$1,
+  generateWidgetRegistryManifest: generateWidgetRegistryManifest$1,
+};
+
+/**
+ * widgetRegistryController.js
+ *
+ * Prepare a widget package for publishing to the dash-registry.
+ * Mirrors themeRegistryController pattern: generate manifest, zip
+ * the widget directory, POST to /api/publish.
+ *
+ * Used by:
+ *   - Single-widget publish from Settings → Widgets (future UI)
+ *   - Batch-publish from the dashboard publish dialog
+ */
+
+const fs = require$$0$2;
+const path = require$$1$2;
+const AdmZip = require$$3$4;
+const { app } = require$$0$1;
+
+const registryApiController$1 = registryApiController$3;
+const {
+  getAuthStatus,
+  getRegistryProfile: getRegistryProfile$1,
+} = registryAuthController$2;
+const widgetRegistryModule = widgetRegistryExports;
+const {
+  resolveNextVersion,
+  parsePackageName,
+  generateWidgetRegistryManifest,
+} = widgetPublishManifest;
+
+// ─── ZIP builder ─────────────────────────────────────────────────────────────
+
+const ZIP_EXCLUDE_DIRS = new Set([
+  "node_modules",
+  "dist",
+  ".git",
+  ".DS_Store",
+  ".next",
+  ".cache",
+  "coverage",
+]);
+
+/**
+ * Recursively add a directory to a ZIP, skipping excluded dirs + dotfiles.
+ */
+function addDirToZip(zip, absDir, relDir = "") {
+  const entries = fs.readdirSync(absDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (ZIP_EXCLUDE_DIRS.has(entry.name)) continue;
+    if (entry.name.startsWith(".")) continue;
+    const abs = path.join(absDir, entry.name);
+    const rel = relDir ? path.join(relDir, entry.name) : entry.name;
+    if (entry.isDirectory()) {
+      addDirToZip(zip, abs, rel);
+    } else if (entry.isFile()) {
+      try {
+        zip.addFile(rel, fs.readFileSync(abs));
+      } catch (err) {
+        console.warn(`[widgetRegistry] skip ${rel}: ${err.message}`);
+      }
+    }
+  }
+}
+
+// ─── Orchestration ───────────────────────────────────────────────────────────
+
+/**
+ * Prepare and publish a widget package to the registry.
+ *
+ * @param {string} appId - Application identifier
+ * @param {string} packageId - Widget packageId (e.g. "@scope/name" or "name")
+ * @param {Object} options
+ * @param {"patch"|"minor"|"major"} [options.bump] - Version bump (ignored if options.version set)
+ * @param {string} [options.version] - Explicit new version
+ * @param {"public"|"private"} [options.visibility="public"]
+ * @param {string} [options.description]
+ * @param {string[]} [options.tags]
+ * @param {string} [options.icon]
+ * @param {string} [options.category]
+ * @param {string} [options.authorName]
+ * @returns {Promise<Object>} { success, manifest, registryResult, error? }
+ */
+async function prepareWidgetForPublish$1(appId, packageId, options = {}) {
+  try {
+    // 1. Auth
+    const auth = getAuthStatus();
+    if (!auth.authenticated) {
+      return {
+        success: false,
+        error: "Not authenticated with registry",
+        authRequired: true,
+      };
+    }
+    const profile = await getRegistryProfile$1();
+    const callerScope = profile?.username || options.scope || "";
+    if (!callerScope) {
+      return {
+        success: false,
+        error: "Could not determine registry username",
+        authRequired: true,
+      };
+    }
+
+    // 2. Look up widget in local registry
+    const registry = widgetRegistryModule.getWidgetRegistry();
+    const widget = registry.getWidget(packageId);
+    if (!widget || !widget.path) {
+      return {
+        success: false,
+        error: `Widget package not found locally: ${packageId}`,
+      };
+    }
+
+    // 3. Read package.json
+    const pkgJsonPath = path.join(widget.path, "package.json");
+    if (!fs.existsSync(pkgJsonPath)) {
+      return {
+        success: false,
+        error: `Widget package is missing package.json: ${widget.path}`,
+      };
+    }
+    const pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf8"));
+    const parsedName = parsePackageName(pkgJson.name || "");
+    const resolvedScope =
+      options.scope || parsedName.scope || widget.scope || callerScope;
+
+    // 4. Compute + persist new version
+    const previousVersion = pkgJson.version || "1.0.0";
+    const newVersion = resolveNextVersion(previousVersion, options);
+    if (newVersion !== previousVersion) {
+      pkgJson.version = newVersion;
+      fs.writeFileSync(pkgJsonPath, JSON.stringify(pkgJson, null, 2) + "\n");
+    }
+
+    // 5. Build manifest using the widget's component configs
+    const manifest = generateWidgetRegistryManifest(
+      pkgJson,
+      widget.widgets || [],
+      {
+        scope: resolvedScope,
+        version: newVersion,
+        visibility: options.visibility,
+        description: options.description,
+        tags: options.tags,
+        icon: options.icon,
+        category: options.category,
+        authorName: options.authorName,
+        appOrigin: appId,
+      },
+    );
+
+    // 6. Zip the widget directory to a temp file
+    const zipName = `widget-${manifest.scope}-${manifest.name}-v${manifest.version}.zip`;
+    const zipPath = path.join(app.getPath("temp"), zipName);
+    const zip = new AdmZip();
+    addDirToZip(zip, widget.path);
+    zip.writeZip(zipPath);
+
+    // 7. Publish to registry
+    const registryResult = await registryApiController$1.publishToRegistry(
+      zipPath,
+      manifest,
+    );
+
+    // 8. On failure: revert package.json
+    if (!registryResult.success && newVersion !== previousVersion) {
+      try {
+        pkgJson.version = previousVersion;
+        fs.writeFileSync(pkgJsonPath, JSON.stringify(pkgJson, null, 2) + "\n");
+      } catch {
+        /* best effort */
+      }
+      return {
+        success: false,
+        error: registryResult.error,
+        details: registryResult.details,
+        manifest,
+      };
+    }
+
+    // Clean up the temp zip
+    try {
+      fs.unlinkSync(zipPath);
+    } catch {
+      /* ignore */
+    }
+
+    return {
+      success: true,
+      manifest,
+      registryResult,
+      previousVersion,
+      newVersion,
+    };
+  } catch (error) {
+    console.error("[widgetRegistry] prepareWidgetForPublish failed:", error);
+    return { success: false, error: error.message };
+  }
+}
+
+var widgetRegistryController = {
+  prepareWidgetForPublish: prepareWidgetForPublish$1,
+};
+
 /**
  * Controller exports.
  */
@@ -71643,6 +72109,7 @@ const {
   checkCompatibility,
   prepareDashboardForPublish,
   collectDashboardDependencies,
+  getDashboardPublishPlan,
   getDashboardPreview,
   checkDashboardUpdatesForApp,
   getProviderSetupManifest,
@@ -71662,7 +72129,7 @@ const {
 const {
   publishToRegistry,
   getRegistryUrl,
-} = registryApiController$2;
+} = registryApiController$3;
 const {
   getRecentDashboards,
   addRecentDashboard,
@@ -71685,6 +72152,7 @@ const {
   installThemeFromRegistry,
   getThemePublishPreview,
 } = themeRegistryController$1;
+const { prepareWidgetForPublish } = widgetRegistryController;
 const {
   assignRoles,
   matchTailwindFamily,
@@ -71740,6 +72208,7 @@ var controller = {
   checkCompatibility,
   prepareDashboardForPublish,
   collectDashboardDependencies,
+  getDashboardPublishPlan,
   getDashboardPreview,
   checkDashboardUpdatesForApp,
   getProviderSetupManifest,
@@ -71771,6 +72240,7 @@ var controller = {
   prepareThemeForPublish,
   installThemeFromRegistry,
   getThemePublishPreview,
+  prepareWidgetForPublish,
   assignRoles,
   matchTailwindFamily,
   generateThemeFromPalette,
@@ -72869,6 +73339,32 @@ const registryApi$2 = {
       throw error;
     }
   },
+
+  /**
+   * Publish a widget package to the registry.
+   *
+   * Zips the widget directory (source files, not dist/), generates a
+   * registry manifest from package.json + .dash.js configs, optionally
+   * bumps the version, and POSTs to /api/publish.
+   *
+   * @param {string} appId - Application identifier
+   * @param {string} packageId - Widget packageId (e.g. "@scope/name")
+   * @param {Object} options - { bump?, version?, visibility?, description?,
+   *                             tags?, icon?, category?, authorName? }
+   * @returns {Promise<Object>} { success, manifest, registryResult, previousVersion, newVersion, error? }
+   */
+  publishWidget: async (appId, packageId, options = {}) => {
+    try {
+      return await ipcRenderer$h.invoke("registry:publish-widget", {
+        appId,
+        packageId,
+        options,
+      });
+    } catch (error) {
+      console.error("[RegistryApi] Error publishing widget:", error);
+      throw error;
+    }
+  },
 };
 
 var registryApi_1 = registryApi$2;
@@ -73276,6 +73772,7 @@ const {
   DASHBOARD_CONFIG_PUBLISH_PREVIEW,
   DASHBOARD_CONFIG_INSTALL_PROGRESS,
   DASHBOARD_CONFIG_COLLECT_DEPENDENCIES,
+  DASHBOARD_CONFIG_PUBLISH_PLAN,
 } = events$8;
 
 const dashboardConfigApi$2 = {
@@ -73379,6 +73876,23 @@ const dashboardConfigApi$2 = {
       options,
     }),
 
+  /**
+   * Build an enriched dependency plan for batch-publishing a dashboard.
+   * Merges local dep info with registry state (existence, version,
+   * visibility, ownership) so the UI can decorate each row.
+   *
+   * @param {string} appId - Application identifier
+   * @param {number|string} workspaceId - Workspace ID
+   * @param {Object} options - { componentConfigs?: Object }
+   * @returns {Promise<Object>} { success, widgets, theme, registryError? }
+   */
+  getDashboardPublishPlan: (appId, workspaceId, options = {}) =>
+    ipcRenderer$9.invoke(DASHBOARD_CONFIG_PUBLISH_PLAN, {
+      appId,
+      workspaceId,
+      options,
+    }),
+
   /**
    * Get a preview of a dashboard package from the registry.
    * Returns structured preview data and compatibility report.
@@ -75086,7 +75600,7 @@ const llmController = llmController_1;
 const cliController = cliController_1;
 const dashboardConfigController = dashboardConfigController$1;
 const registryAuthController = registryAuthController$2;
-const registryApiController = registryApiController$2;
+const registryApiController = registryApiController$3;
 const notificationController = notificationController_1;
 const schedulerController = schedulerController_1;
 const themeRegistryController = themeRegistryController$1;