@trops/dash-core 0.1.441 → 0.1.442

package/dist/index.js

@@ -14534,6 +14534,30 @@ function eventHandlersOf(item, getWidgetConfig) {
   return _toConsumableArray(new Set([].concat(_toConsumableArray(inline), _toConsumableArray(fromCfg))));
 }
 
+/**
+ * Cross-dashboard isolation gate. Every layout item carries a
+ * `dashboardId` stamp from `LayoutModel`; this helper drops items
+ * whose stamp doesn't match the surrounding workspace's id. Closes
+ * the loophole where a workspace tree somehow ends up holding refs
+ * to items from another dashboard (shared array reference, stale
+ * cache, etc.) — without this, the dashboard config modal's
+ * Listeners / Providers / Widgets tabs surface widgets the user
+ * isn't editing and can't actually wire to.
+ *
+ * Intentionally permissive: when the workspace has no id (synthetic
+ * test workspace, in-memory sandbox) OR an item has no dashboardId
+ * stamp (legacy pre-LayoutModel data), the item passes through.
+ * Strict matching only applies when BOTH have ids — which is the
+ * case in production after a full LayoutModel pass.
+ */
+function belongsToWorkspace(item, workspace) {
+  var wsId = workspace === null || workspace === void 0 ? void 0 : workspace.id;
+  if (wsId === undefined || wsId === null) return true;
+  var itemDashId = item === null || item === void 0 ? void 0 : item.dashboardId;
+  if (itemDashId === undefined || itemDashId === null) return true;
+  return String(itemDashId) === String(wsId);
+}
+
 /**
  * Every widget instance in the workspace that emits at least one event.
  * Deduplicated by `${component}|${itemId}` — the same compound key that
@@ -14544,6 +14568,7 @@ function eventHandlersOf(item, getWidgetConfig) {
 function getEmitters(workspace, getWidgetConfig) {
   var byKey = new Map();
   forEachWidget(workspace, function (item) {
+    if (!belongsToWorkspace(item, workspace)) return;
     var events = eventsOf(item, getWidgetConfig);
     if (events.length === 0) return;
     var key = canonicalItemKey(item);
@@ -14570,6 +14595,7 @@ function getEmitters(workspace, getWidgetConfig) {
 function getReceivers(workspace, getWidgetConfig) {
   var byKey = new Map();
   forEachWidget(workspace, function (item) {
+    if (!belongsToWorkspace(item, workspace)) return;
     var handlers = eventHandlersOf(item, getWidgetConfig);
     if (handlers.length === 0) return;
     var key = canonicalItemKey(item);
@@ -14597,6 +14623,7 @@ function getReceivers(workspace, getWidgetConfig) {
 function getCurrentWiring(workspace) {
   var wiring = [];
   forEachWidget(workspace, function (item) {
+    if (!belongsToWorkspace(item, workspace)) return;
     var receiverItemId = itemIdOf(item);
     if (receiverItemId == null) return;
     var listeners = item.listeners;
@@ -14657,6 +14684,7 @@ function getOrphanedListeners(workspace, getWidgetConfig) {
   var byCompositeKey = new Map();
   var byItemId = new Map();
   forEachWidget(workspace, function (item) {
+    if (!belongsToWorkspace(item, workspace)) return;
     var id = itemIdOf(item);
     if (id == null) return;
     var meta = {