@trops/dash-core 0.1.383 → 0.1.384

package/dist/electron/index.js

@@ -28330,11 +28330,21 @@ const cliController$2 = {
     // to — causing long reasoning loops or silent hangs. We pass only the
     // caller's `systemPrompt` as context.
     //
+    // --permission-mode bypassPermissions: in an embedded in-app assistant,
+    // the user has already opted into the configured MCP servers (they
+    // ran `claude mcp add` themselves). Prompting for tool-use approval
+    // on every call produces "I need permission to..." replies instead of
+    // actual actions. Bypassing matches the user's intent — if they
+    // didn't want the assistant to use a tool, they wouldn't have
+    // configured it.
+    //
     // (We intentionally avoid `--bare` — it also disables keychain reads,
     // which breaks OAuth login for users authenticated via `claude login`.)
     const args = [
       "-p",
       "--disable-slash-commands",
+      "--permission-mode",
+      "bypassPermissions",
       "--output-format",
       "stream-json",
       "--verbose",
@@ -28696,7 +28706,7 @@ const dashboardTools$1 = [
   {
     name: "create_dashboard",
     description:
-      "Create a new dashboard with the given name. Optionally provide a layout to create a grid dashboard. Returns the dashboard ID. After creating, use search_widgets or list_widgets to find widgets, then add_widget to populate the dashboard.",
+      "Create a new dashboard with the given name. Defaults to a 1×1 grid layout if `layout` is omitted — the resulting dashboard has a single cell ready for a widget. Pass an explicit `layout` object to use different dimensions. Pass `layout: null` only if the caller specifically wants a layout-less container dashboard (rare — widgets cannot be added without further editing). Returns the dashboard ID.",
     inputSchema: {
       type: "object",
       properties: {
@@ -49317,6 +49327,7 @@ var jsonSchemaToZod_1 = { jsonSchemaToZod: jsonSchemaToZod$1, jsonSchemaProperty
 
 const https$2 = require$$8$1;
 const { randomUUID } = require$$1$5;
+const { BrowserWindow } = require$$0$1;
 const { McpServer } = mcp;
 const {
   StreamableHTTPServerTransport,
@@ -49325,6 +49336,52 @@ const {
 const settingsController$3 = settingsController_1;
 const { getOrCreateCert } = tlsCert;
 
+// Tool-name prefixes that indicate a mutation. After a successful call
+// to any of these, the renderer is notified via "dash-mcp:state-changed"
+// so it can refresh the relevant UI slice (themes, dashboards, widgets,
+// providers, etc.) without requiring a manual reload.
+const MUTATING_PREFIXES = [
+  "create_",
+  "add_",
+  "remove_",
+  "delete_",
+  "update_",
+  "apply_",
+  "install_",
+  "move_",
+  "set_",
+  "configure_",
+];
+
+function isMutatingTool(name) {
+  return MUTATING_PREFIXES.some((p) => name.startsWith(p));
+}
+
+function broadcastStateChanged(toolName, result) {
+  // Best-effort parse of the tool's first text content block. MCP tool
+  // results are of shape { content: [{ type: "text", text: "<json>" }] }.
+  // Expose the parsed JSON as `result` so renderers can act on specifics
+  // (e.g. the new dashboard ID from create_dashboard) without a round
+  // trip back to fetch state.
+  let parsed = null;
+  try {
+    const firstText = result?.content?.find?.((c) => c.type === "text")?.text;
+    if (firstText) parsed = JSON.parse(firstText);
+  } catch {
+    /* leave null */
+  }
+  const payload = { toolName, result: parsed };
+  for (const win of BrowserWindow.getAllWindows()) {
+    if (!win.isDestroyed()) {
+      try {
+        win.webContents.send("dash-mcp:state-changed", payload);
+      } catch {
+        /* ignore */
+      }
+    }
+  }
+}
+
 // --- State ---
 let mcpServer = null;
 let httpsServer = null;
@@ -49408,14 +49465,22 @@ const { jsonSchemaToZod } = jsonSchemaToZod_1;
 function applyRegistrations(server) {
   for (const tool of registeredTools) {
     const zodSchema = jsonSchemaToZod(tool.inputSchema);
+    // Wrap mutating tool handlers so a successful invocation broadcasts
+    // "dash-mcp:state-changed" to all renderer windows. Read-only tools
+    // (list_, get_, search_) are passed through unwrapped.
+    const mutating = isMutatingTool(tool.name);
+    const handler = mutating
+      ? async (...args) => {
+          const result = await tool.handler(...args);
+          if (result && !result.isError) {
+            broadcastStateChanged(tool.name, result);
+          }
+          return result;
+        }
+      : tool.handler;
     // server.tool() expects a raw Zod shape (e.g. { name: z.string() }),
     // NOT a z.object() wrapper. Extract .shape from the Zod object.
-    server.tool(
-      tool.name,
-      tool.description,
-      zodSchema.shape || {},
-      tool.handler,
-    );
+    server.tool(tool.name, tool.description, zodSchema.shape || {}, handler);
   }
   for (const resource of registeredResources) {
     server.resource(
@@ -58936,6 +59001,17 @@ async function handleCreateDashboard$1({ name, layout }) {
     };
   }
 
+  // Default to a 1×1 grid when the caller omits `layout`. A bare
+  // container dashboard has no grid cells, so widgets can't be added
+  // without further editing — even a single-cell grid avoids that
+  // dead-end while staying unopinionated about layout. Callers that
+  // want a specific size pass an explicit `layout` object. Callers
+  // that genuinely want a layout-less container must pass
+  // `layout: null` explicitly.
+  if (layout === undefined) {
+    layout = { rows: 1, cols: 1 };
+  }
+
   // Validate optional layout parameter
   if (layout !== undefined && layout !== null) {
     if (typeof layout !== "object" || Array.isArray(layout)) {
@@ -74824,6 +74900,23 @@ const mcpDashServerApi$2 = {
    * @returns {Promise<string>}
    */
   getToken: () => ipcRenderer$3.invoke(MCP_DASH_SERVER_GET_TOKEN, {}),
+
+  /**
+   * Subscribe to state-change notifications fired after any mutating
+   * MCP tool call (create_*, add_*, apply_*, remove_*, update_*,
+   * move_*, configure_*, set_*, delete_*, install_*). The callback
+   * receives { toolName }. Use this to refresh renderer state (theme,
+   * dashboards, widgets, providers) so MCP-driven changes are
+   * reflected in the UI without requiring a manual reload.
+   *
+   * @param {(payload: { toolName: string }) => void} callback
+   * @returns {() => void} unsubscribe function
+   */
+  onStateChanged: (callback) => {
+    const handler = (_event, payload) => callback(payload);
+    ipcRenderer$3.on("dash-mcp:state-changed", handler);
+    return () => ipcRenderer$3.removeListener("dash-mcp:state-changed", handler);
+  },
 };
 
 var mcpDashServerApi_1 = mcpDashServerApi$2;