@trops/dash-core 0.1.449 → 0.1.451

package/dist/index.js

@@ -45957,13 +45957,20 @@ var McpCatalogDetail = function McpCatalogDetail(_ref) {
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [dashApi]);
 
-  // Filter catalog by search
+  // Filter catalog by search, then sort alphabetically by display name.
+  // Built-in and known-external entries are interleaved alphabetically —
+  // the per-card "external" badge keeps the source obvious without
+  // needing a separate group header.
   var filteredCatalog = catalog.filter(function (server) {
     if (!searchQuery) return true;
     var q = searchQuery.toLowerCase();
     return server.name.toLowerCase().includes(q) || server.description.toLowerCase().includes(q) || (server.tags || []).some(function (tag) {
       return tag.toLowerCase().includes(q);
     });
+  }).slice().sort(function (a, b) {
+    return String(a.name || "").localeCompare(String(b.name || ""), undefined, {
+      sensitivity: "base"
+    });
   });
 
   // Dynamic wizard steps based on whether auth is needed
@@ -49232,6 +49239,15 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     _useState14 = _slicedToArray(_useState13, 2),
     packageInfo = _useState14[0],
     setPackageInfo = _useState14[1];
+  // When the main-process pre-publish scan finds personal filesystem
+  // paths in the package source, it returns `{ needsConfirmation: true,
+  // personalPathFindings: [...] }` instead of publishing. We stash the
+  // findings and surface a confirm-or-cancel panel; "Publish anyway"
+  // retries with `confirmPersonalPaths: true`.
+  var _useState15 = React.useState(null),
+    _useState16 = _slicedToArray(_useState15, 2),
+    personalPathFindings = _useState16[0],
+    setPersonalPathFindings = _useState16[1];
 
   // Reset modal state on open
   React.useEffect(function () {
@@ -49242,6 +49258,7 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     setIsPublishing(false);
     setResult(null);
     setPackageInfo(null);
+    setPersonalPathFindings(null);
   }, [isOpen]);
 
   // Inspect the package to get its metadata + component list
@@ -49409,10 +49426,18 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
   }
   function _handlePublish() {
     _handlePublish = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee4() {
-      var options, packageId, res, _t3;
+      var _ref4,
+        _ref4$confirmPersonal,
+        confirmPersonalPaths,
+        options,
+        packageId,
+        res,
+        _args4 = arguments,
+        _t3;
       return _regeneratorRuntime.wrap(function (_context4) {
         while (1) switch (_context4.prev = _context4.next) {
           case 0:
+            _ref4 = _args4.length > 0 && _args4[0] !== undefined ? _args4[0] : {}, _ref4$confirmPersonal = _ref4.confirmPersonalPaths, confirmPersonalPaths = _ref4$confirmPersonal === void 0 ? false : _ref4$confirmPersonal;
             if (widget) {
               _context4.next = 1;
               break;
@@ -49421,18 +49446,28 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
           case 1:
             setIsPublishing(true);
             setResult(null);
+            if (!confirmPersonalPaths) setPersonalPathFindings(null);
             _context4.prev = 2;
-            options = _objectSpread$k({
+            options = _objectSpread$k(_objectSpread$k({
               visibility: visibility
             }, bump && bump !== "none" ? {
               bump: bump
+            } : {}), confirmPersonalPaths ? {
+              confirmPersonalPaths: true
             } : {});
             packageId = widget.packageId || widget.name;
             _context4.next = 3;
             return window.mainApi.registry.publishWidget(appId, packageId, options);
           case 3:
             res = _context4.sent;
-            setResult(res);
+            // Main process asked us to confirm a privacy warning before it ships
+            // the package. Stash the findings and render the confirm panel —
+            // don't mark as a completed result.
+            if (res !== null && res !== void 0 && res.needsConfirmation && (res === null || res === void 0 ? void 0 : res.reason) === "personal-paths") {
+              setPersonalPathFindings(res.personalPathFindings || []);
+            } else {
+              setResult(res);
+            }
             _context4.next = 5;
             break;
           case 4:
@@ -49454,6 +49489,14 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     }));
     return _handlePublish.apply(this, arguments);
   }
+  function handleCancelPersonalPathsConfirm() {
+    setPersonalPathFindings(null);
+  }
+  function handleConfirmPersonalPathsAndPublish() {
+    handlePublish({
+      confirmPersonalPaths: true
+    });
+  }
   if (!widget) return null;
   var currentVersion = widget.version || "1.0.0";
   var newVersion = bumpPreview(currentVersion, bump);
@@ -49498,7 +49541,48 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
             className: "text-xs text-red-300",
             children: authError
           })]
-        }), authStatus === "authenticated" && !result && /*#__PURE__*/jsxRuntime.jsxs(jsxRuntime.Fragment, {
+        }), authStatus === "authenticated" && personalPathFindings && !result && /*#__PURE__*/jsxRuntime.jsxs("div", {
+          className: "space-y-3",
+          children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+            className: "p-3 bg-amber-900/20 border border-amber-700/40 rounded text-sm text-amber-200",
+            children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "font-semibold flex items-center gap-2 mb-1",
+              children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
+                icon: "triangle-exclamation",
+                className: "h-4 w-4"
+              }), "Personal paths detected in this package"]
+            }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "text-xs opacity-90",
+              children: ["The following lines look like absolute paths on your machine. Publishing will include them. If any of these are your local filesystem, replace them with a tilde (e.g.", /*#__PURE__*/jsxRuntime.jsx("code", {
+                className: "px-1 opacity-90",
+                children: "~/pipeline"
+              }), ") or a schema ", /*#__PURE__*/jsxRuntime.jsx("code", {
+                className: "px-1 opacity-90",
+                children: "defaultValue"
+              }), " ", "before publishing."]
+            })]
+          }), /*#__PURE__*/jsxRuntime.jsx("div", {
+            className: "bg-white/5 border border-white/10 rounded-lg divide-y divide-white/10 max-h-60 overflow-y-auto",
+            children: personalPathFindings.map(function (f, idx) {
+              return /*#__PURE__*/jsxRuntime.jsxs("div", {
+                className: "px-3 py-2 text-xs",
+                children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+                  className: "font-mono text-amber-200 truncate",
+                  children: [f.file, ":", f.line]
+                }), /*#__PURE__*/jsxRuntime.jsx("div", {
+                  className: "font-mono opacity-80 mt-0.5 break-all",
+                  children: f.match
+                }), f.context && f.context !== f.match && /*#__PURE__*/jsxRuntime.jsx("div", {
+                  className: "font-mono opacity-50 mt-0.5 truncate",
+                  children: f.context
+                })]
+              }, "".concat(f.file, ":").concat(f.line, ":").concat(idx));
+            })
+          }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+            className: "text-xs opacity-60",
+            children: ["Total findings: ", personalPathFindings.length, personalPathFindings.length >= 50 && " (capped)"]
+          })]
+        }), authStatus === "authenticated" && !result && !personalPathFindings && /*#__PURE__*/jsxRuntime.jsxs(jsxRuntime.Fragment, {
           children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
             className: "bg-white/5 border border-white/10 rounded-lg p-3 text-sm",
             children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
@@ -49659,16 +49743,29 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
             })
           })]
         })]
-      }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+      }), /*#__PURE__*/jsxRuntime.jsx("div", {
         className: "flex-shrink-0 flex flex-row justify-end gap-2 p-4 border-t border-white/10",
-        children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.Button3, {
-          title: result !== null && result !== void 0 && result.success ? "Close" : "Cancel",
-          onClick: handleClose
-        }), !(result !== null && result !== void 0 && result.success) && /*#__PURE__*/jsxRuntime.jsx(DashReact.Button2, {
-          title: isPublishing ? "Publishing…" : "Publish",
-          onClick: handlePublish,
-          disabled: !canPublish
-        })]
+        children: personalPathFindings ? /*#__PURE__*/jsxRuntime.jsxs(jsxRuntime.Fragment, {
+          children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.Button3, {
+            title: "Go back",
+            onClick: handleCancelPersonalPathsConfirm
+          }), /*#__PURE__*/jsxRuntime.jsx(DashReact.Button2, {
+            title: isPublishing ? "Publishing…" : "Publish anyway",
+            onClick: handleConfirmPersonalPathsAndPublish,
+            disabled: isPublishing
+          })]
+        }) : /*#__PURE__*/jsxRuntime.jsxs(jsxRuntime.Fragment, {
+          children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.Button3, {
+            title: result !== null && result !== void 0 && result.success ? "Close" : "Cancel",
+            onClick: handleClose
+          }), !(result !== null && result !== void 0 && result.success) && /*#__PURE__*/jsxRuntime.jsx(DashReact.Button2, {
+            title: isPublishing ? "Publishing…" : "Publish",
+            onClick: function onClick() {
+              return handlePublish();
+            },
+            disabled: !canPublish
+          })]
+        })
       })]
     })
   });
@@ -62623,15 +62720,6 @@ function ChatCore(_ref) {
     }
   };
 
-  // End CLI session
-  var handleEndSession = function handleEndSession() {
-    var _mainApi$llm4;
-    if (!isCliBackend || !(mainApi !== null && mainApi !== void 0 && (_mainApi$llm4 = mainApi.llm) !== null && _mainApi$llm4 !== void 0 && _mainApi$llm4.endCliSession)) return;
-    if (isLoading) handleStop();
-    mainApi.llm.endCliSession(uuid || persistKey || sessionKey);
-    setSessionActive(false);
-  };
-
   // Toggle tool
   var handleToggleTool = function handleToggleTool(toolName) {
     setEnabledTools(function (prev) {
@@ -62656,29 +62744,21 @@ function ChatCore(_ref) {
           className: "inline-block w-2 h-2 rounded-full bg-green-400",
           title: "CLI session active"
         })]
-      }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+      }), /*#__PURE__*/jsxRuntime.jsx("div", {
         className: "flex items-center gap-1",
-        children: [isCliBackend && sessionActive && /*#__PURE__*/jsxRuntime.jsx("button", {
-          onClick: handleEndSession,
-          className: "px-2 py-1 text-xs rounded bg-red-900/50 hover:bg-red-800/50 text-red-300 transition-colors",
-          children: "End Session"
-        }), /*#__PURE__*/jsxRuntime.jsx("button", {
+        children: /*#__PURE__*/jsxRuntime.jsx("button", {
           onClick: handleNewChat,
           className: "px-2 py-1 text-xs rounded bg-gray-700 hover:bg-gray-600 text-gray-300 transition-colors",
           children: "New Chat"
-        })]
+        })
       })]
-    }) : /*#__PURE__*/jsxRuntime.jsxs("div", {
+    }) : /*#__PURE__*/jsxRuntime.jsx("div", {
       className: "flex items-center justify-end px-3 py-1 shrink-0",
-      children: [isCliBackend && sessionActive && /*#__PURE__*/jsxRuntime.jsx("button", {
-        onClick: handleEndSession,
-        className: "px-2 py-1 text-xs rounded bg-red-900/50 hover:bg-red-800/50 text-red-300 transition-colors mr-1",
-        children: "End Session"
-      }), /*#__PURE__*/jsxRuntime.jsx("button", {
+      children: /*#__PURE__*/jsxRuntime.jsx("button", {
         onClick: handleNewChat,
         className: "px-2 py-1 text-xs rounded bg-gray-700 hover:bg-gray-600 text-gray-300 transition-colors",
         children: "New Chat"
-      })]
+      })
     }), error && /*#__PURE__*/jsxRuntime.jsxs("div", {
       className: "mx-3 mt-2 p-2 bg-red-900/30 border border-red-700 rounded text-red-300 text-xs",
       children: [error, /*#__PURE__*/jsxRuntime.jsx("button", {