@trops/dash-core 0.1.450 → 0.1.451

package/dist/index.esm.js

@@ -9294,7 +9294,7 @@ hasPropertyDescriptors.hasArrayLengthDefineBug = function hasArrayLengthDefineBu
 var hasPropertyDescriptors_1 = hasPropertyDescriptors;
 
 var keys = objectKeys$2;
-var hasSymbols$5 = typeof Symbol === 'function' && typeof Symbol('foo') === 'symbol';
+var hasSymbols$4 = typeof Symbol === 'function' && typeof Symbol('foo') === 'symbol';
 
 var toStr$4 = Object.prototype.toString;
 var concat = Array.prototype.concat;
@@ -9327,7 +9327,7 @@ var defineProperty$1 = function (object, name, value, predicate) {
 var defineProperties$1 = function (object, map) {
 	var predicates = arguments.length > 2 ? arguments[2] : {};
 	var props = keys(map);
-	if (hasSymbols$5) {
+	if (hasSymbols$4) {
 		props = concat.call(props, Object.getOwnPropertySymbols(map));
 	}
 	for (var i = 0; i < props.length; i += 1) {
@@ -9393,11 +9393,11 @@ var sign$1 = function sign(number) {
 };
 
 var shams$1;
-var hasRequiredShams;
+var hasRequiredShams$1;
 
-function requireShams () {
-	if (hasRequiredShams) return shams$1;
-	hasRequiredShams = 1;
+function requireShams$1 () {
+	if (hasRequiredShams$1) return shams$1;
+	hasRequiredShams$1 = 1;
 
 	/** @type {import('./shams')} */
 	/* eslint complexity: [2, 18], max-statements: [2, 33] */
@@ -9446,10 +9446,10 @@ function requireShams () {
 }
 
 var origSymbol = typeof Symbol !== 'undefined' && Symbol;
-var hasSymbolSham = requireShams();
+var hasSymbolSham = requireShams$1();
 
 /** @type {import('.')} */
-var hasSymbols$4 = function hasNativeSymbols() {
+var hasSymbols$3 = function hasNativeSymbols() {
 	if (typeof origSymbol !== 'function') { return false; }
 	if (typeof Symbol !== 'function') { return false; }
 	if (typeof origSymbol('foo') !== 'symbol') { return false; }
@@ -9753,7 +9753,7 @@ var ThrowTypeError = $gOPD$1
 	}())
 	: throwTypeError;
 
-var hasSymbols$3 = hasSymbols$4();
+var hasSymbols$2 = hasSymbols$3();
 
 var getProto$2 = getProto$3;
 var $ObjectGPO = requireObject_getPrototypeOf();
@@ -9771,7 +9771,7 @@ var INTRINSICS = {
 	'%AggregateError%': typeof AggregateError === 'undefined' ? undefined$1 : AggregateError,
 	'%Array%': Array,
 	'%ArrayBuffer%': typeof ArrayBuffer === 'undefined' ? undefined$1 : ArrayBuffer,
-	'%ArrayIteratorPrototype%': hasSymbols$3 && getProto$2 ? getProto$2([][Symbol.iterator]()) : undefined$1,
+	'%ArrayIteratorPrototype%': hasSymbols$2 && getProto$2 ? getProto$2([][Symbol.iterator]()) : undefined$1,
 	'%AsyncFromSyncIteratorPrototype%': undefined$1,
 	'%AsyncFunction%': needsEval,
 	'%AsyncGenerator%': needsEval,
@@ -9802,10 +9802,10 @@ var INTRINSICS = {
 	'%Int32Array%': typeof Int32Array === 'undefined' ? undefined$1 : Int32Array,
 	'%isFinite%': isFinite,
 	'%isNaN%': isNaN,
-	'%IteratorPrototype%': hasSymbols$3 && getProto$2 ? getProto$2(getProto$2([][Symbol.iterator]())) : undefined$1,
+	'%IteratorPrototype%': hasSymbols$2 && getProto$2 ? getProto$2(getProto$2([][Symbol.iterator]())) : undefined$1,
 	'%JSON%': typeof JSON === 'object' ? JSON : undefined$1,
 	'%Map%': typeof Map === 'undefined' ? undefined$1 : Map,
-	'%MapIteratorPrototype%': typeof Map === 'undefined' || !hasSymbols$3 || !getProto$2 ? undefined$1 : getProto$2(new Map()[Symbol.iterator]()),
+	'%MapIteratorPrototype%': typeof Map === 'undefined' || !hasSymbols$2 || !getProto$2 ? undefined$1 : getProto$2(new Map()[Symbol.iterator]()),
 	'%Math%': Math,
 	'%Number%': Number,
 	'%Object%': $Object$2,
@@ -9819,11 +9819,11 @@ var INTRINSICS = {
 	'%Reflect%': typeof Reflect === 'undefined' ? undefined$1 : Reflect,
 	'%RegExp%': RegExp,
 	'%Set%': typeof Set === 'undefined' ? undefined$1 : Set,
-	'%SetIteratorPrototype%': typeof Set === 'undefined' || !hasSymbols$3 || !getProto$2 ? undefined$1 : getProto$2(new Set()[Symbol.iterator]()),
+	'%SetIteratorPrototype%': typeof Set === 'undefined' || !hasSymbols$2 || !getProto$2 ? undefined$1 : getProto$2(new Set()[Symbol.iterator]()),
 	'%SharedArrayBuffer%': typeof SharedArrayBuffer === 'undefined' ? undefined$1 : SharedArrayBuffer,
 	'%String%': String,
-	'%StringIteratorPrototype%': hasSymbols$3 && getProto$2 ? getProto$2(''[Symbol.iterator]()) : undefined$1,
-	'%Symbol%': hasSymbols$3 ? Symbol : undefined$1,
+	'%StringIteratorPrototype%': hasSymbols$2 && getProto$2 ? getProto$2(''[Symbol.iterator]()) : undefined$1,
+	'%Symbol%': hasSymbols$2 ? Symbol : undefined$1,
 	'%SyntaxError%': $SyntaxError$1,
 	'%ThrowTypeError%': ThrowTypeError,
 	'%TypedArray%': TypedArray,
@@ -10176,12 +10176,12 @@ var callBound$i = function callBoundIntrinsic(name, allowMissing) {
 
 // modified from https://github.com/es-shims/es6-shim
 var objectKeys$1 = objectKeys$2;
-var hasSymbols$2 = requireShams()();
+var hasSymbols$1 = requireShams$1()();
 var callBound$h = callBound$i;
 var $Object$1 = esObjectAtoms;
 var $push = callBound$h('Array.prototype.push');
 var $propIsEnumerable = callBound$h('Object.prototype.propertyIsEnumerable');
-var originalGetSymbols = hasSymbols$2 ? $Object$1.getOwnPropertySymbols : null;
+var originalGetSymbols = hasSymbols$1 ? $Object$1.getOwnPropertySymbols : null;
 
 // eslint-disable-next-line no-unused-vars
 var implementation$8 = function assign(target, source1) {
@@ -10195,7 +10195,7 @@ var implementation$8 = function assign(target, source1) {
 
 		// step 3.a.ii:
 		var keys = objectKeys$1(from);
-		var getSymbols = hasSymbols$2 && ($Object$1.getOwnPropertySymbols || originalGetSymbols);
+		var getSymbols = hasSymbols$1 && ($Object$1.getOwnPropertySymbols || originalGetSymbols);
 		if (getSymbols) {
 			var syms = getSymbols(from);
 			for (var j = 0; j < syms.length; ++j) {
@@ -10492,14 +10492,23 @@ var regexp_prototype_flags = flagsBound;
 
 var esGetIterator = {exports: {}};
 
-var hasSymbols$1 = requireShams();
+var shams;
+var hasRequiredShams;
 
-/** @type {import('.')} */
-var shams = function hasToStringTagShams() {
-	return hasSymbols$1() && !!Symbol.toStringTag;
-};
+function requireShams () {
+	if (hasRequiredShams) return shams;
+	hasRequiredShams = 1;
+
+	var hasSymbols = requireShams$1();
 
-var hasToStringTag$7 = shams();
+	/** @type {import('.')} */
+	shams = function hasToStringTagShams() {
+		return hasSymbols() && !!Symbol.toStringTag;
+	};
+	return shams;
+}
+
+var hasToStringTag$7 = requireShams()();
 var callBound$f = callBound$i;
 
 var $toString$7 = callBound$f('Object.prototype.toString');
@@ -11536,7 +11545,7 @@ var tryStringObject = function tryStringObject(value) {
 /** @type {(receiver: ThisParameterType<typeof Object.prototype.toString>, ...args: Parameters<typeof Object.prototype.toString>) => ReturnType<typeof Object.prototype.toString>} */
 var $toString$6 = callBound$c('Object.prototype.toString');
 var strClass = '[object String]';
-var hasToStringTag$6 = shams();
+var hasToStringTag$6 = requireShams()();
 
 /** @type {import('.')} */
 var isString$2 = function isString(value) {
@@ -11652,7 +11661,7 @@ var isSet$2 = exported$1 || function isSet(x) {
 var isArguments$1 = isArguments$2;
 var getStopIterationIterator = stopIterationIterator;
 
-if (hasSymbols$4() || requireShams()()) {
+if (hasSymbols$3() || requireShams$1()()) {
 	var $iterator = Symbol.iterator;
 	// Symbol is available natively or shammed
 	// natively:
@@ -11941,7 +11950,7 @@ var tryDateObject = function tryDateGetDayCall(value) {
 /** @type {(value: unknown) => string} */
 var toStr$2 = callBound$9('Object.prototype.toString');
 var dateClass = '[object Date]';
-var hasToStringTag$5 = shams();
+var hasToStringTag$5 = requireShams()();
 
 /** @type {import('.')} */
 var isDateObject = function isDateObject(value) {
@@ -11952,7 +11961,7 @@ var isDateObject = function isDateObject(value) {
 };
 
 var callBound$8 = callBound$i;
-var hasToStringTag$4 = shams();
+var hasToStringTag$4 = requireShams()();
 var hasOwn = hasown;
 var gOPD$1 = gopd$1;
 
@@ -12057,7 +12066,7 @@ var tryNumberObject = function tryNumberObject(value) {
 };
 var $toString$3 = callBound$6('Object.prototype.toString');
 var numClass = '[object Number]';
-var hasToStringTag$3 = shams();
+var hasToStringTag$3 = requireShams()();
 
 /** @type {import('.')} */
 var isNumberObject = function isNumberObject(value) {
@@ -12084,7 +12093,7 @@ var tryBooleanObject = function booleanBrandCheck(value) {
 	}
 };
 var boolClass = '[object Boolean]';
-var hasToStringTag$2 = shams();
+var hasToStringTag$2 = requireShams()();
 
 /** @type {import('.')} */
 var isBooleanObject = function isBoolean(value) {
@@ -12126,7 +12135,7 @@ function requireSafeRegexTest () {
 
 var callBound$4 = callBound$i;
 var $toString$1 = callBound$4('Object.prototype.toString');
-var hasSymbols = hasSymbols$4();
+var hasSymbols = hasSymbols$3();
 var safeRegexTest = requireSafeRegexTest();
 
 if (hasSymbols) {
@@ -12572,7 +12581,7 @@ var gOPD = gopd$1;
 var getProto = getProto$3;
 
 var $toString = callBound$2('Object.prototype.toString');
-var hasToStringTag = shams();
+var hasToStringTag = requireShams()();
 
 var g = typeof globalThis === 'undefined' ? commonjsGlobal : globalThis;
 var typedArrays = availableTypedArrays();
@@ -49221,6 +49230,15 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     _useState14 = _slicedToArray(_useState13, 2),
     packageInfo = _useState14[0],
     setPackageInfo = _useState14[1];
+  // When the main-process pre-publish scan finds personal filesystem
+  // paths in the package source, it returns `{ needsConfirmation: true,
+  // personalPathFindings: [...] }` instead of publishing. We stash the
+  // findings and surface a confirm-or-cancel panel; "Publish anyway"
+  // retries with `confirmPersonalPaths: true`.
+  var _useState15 = useState(null),
+    _useState16 = _slicedToArray(_useState15, 2),
+    personalPathFindings = _useState16[0],
+    setPersonalPathFindings = _useState16[1];
 
   // Reset modal state on open
   useEffect(function () {
@@ -49231,6 +49249,7 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     setIsPublishing(false);
     setResult(null);
     setPackageInfo(null);
+    setPersonalPathFindings(null);
   }, [isOpen]);
 
   // Inspect the package to get its metadata + component list
@@ -49398,10 +49417,18 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
   }
   function _handlePublish() {
     _handlePublish = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee4() {
-      var options, packageId, res, _t3;
+      var _ref4,
+        _ref4$confirmPersonal,
+        confirmPersonalPaths,
+        options,
+        packageId,
+        res,
+        _args4 = arguments,
+        _t3;
       return _regeneratorRuntime.wrap(function (_context4) {
         while (1) switch (_context4.prev = _context4.next) {
           case 0:
+            _ref4 = _args4.length > 0 && _args4[0] !== undefined ? _args4[0] : {}, _ref4$confirmPersonal = _ref4.confirmPersonalPaths, confirmPersonalPaths = _ref4$confirmPersonal === void 0 ? false : _ref4$confirmPersonal;
             if (widget) {
               _context4.next = 1;
               break;
@@ -49410,18 +49437,28 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
           case 1:
             setIsPublishing(true);
             setResult(null);
+            if (!confirmPersonalPaths) setPersonalPathFindings(null);
             _context4.prev = 2;
-            options = _objectSpread$k({
+            options = _objectSpread$k(_objectSpread$k({
               visibility: visibility
             }, bump && bump !== "none" ? {
               bump: bump
+            } : {}), confirmPersonalPaths ? {
+              confirmPersonalPaths: true
             } : {});
             packageId = widget.packageId || widget.name;
             _context4.next = 3;
             return window.mainApi.registry.publishWidget(appId, packageId, options);
           case 3:
             res = _context4.sent;
-            setResult(res);
+            // Main process asked us to confirm a privacy warning before it ships
+            // the package. Stash the findings and render the confirm panel —
+            // don't mark as a completed result.
+            if (res !== null && res !== void 0 && res.needsConfirmation && (res === null || res === void 0 ? void 0 : res.reason) === "personal-paths") {
+              setPersonalPathFindings(res.personalPathFindings || []);
+            } else {
+              setResult(res);
+            }
             _context4.next = 5;
             break;
           case 4:
@@ -49443,6 +49480,14 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
     }));
     return _handlePublish.apply(this, arguments);
   }
+  function handleCancelPersonalPathsConfirm() {
+    setPersonalPathFindings(null);
+  }
+  function handleConfirmPersonalPathsAndPublish() {
+    handlePublish({
+      confirmPersonalPaths: true
+    });
+  }
   if (!widget) return null;
   var currentVersion = widget.version || "1.0.0";
   var newVersion = bumpPreview(currentVersion, bump);
@@ -49487,7 +49532,48 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
             className: "text-xs text-red-300",
             children: authError
           })]
-        }), authStatus === "authenticated" && !result && /*#__PURE__*/jsxs(Fragment, {
+        }), authStatus === "authenticated" && personalPathFindings && !result && /*#__PURE__*/jsxs("div", {
+          className: "space-y-3",
+          children: [/*#__PURE__*/jsxs("div", {
+            className: "p-3 bg-amber-900/20 border border-amber-700/40 rounded text-sm text-amber-200",
+            children: [/*#__PURE__*/jsxs("div", {
+              className: "font-semibold flex items-center gap-2 mb-1",
+              children: [/*#__PURE__*/jsx(FontAwesomeIcon, {
+                icon: "triangle-exclamation",
+                className: "h-4 w-4"
+              }), "Personal paths detected in this package"]
+            }), /*#__PURE__*/jsxs("div", {
+              className: "text-xs opacity-90",
+              children: ["The following lines look like absolute paths on your machine. Publishing will include them. If any of these are your local filesystem, replace them with a tilde (e.g.", /*#__PURE__*/jsx("code", {
+                className: "px-1 opacity-90",
+                children: "~/pipeline"
+              }), ") or a schema ", /*#__PURE__*/jsx("code", {
+                className: "px-1 opacity-90",
+                children: "defaultValue"
+              }), " ", "before publishing."]
+            })]
+          }), /*#__PURE__*/jsx("div", {
+            className: "bg-white/5 border border-white/10 rounded-lg divide-y divide-white/10 max-h-60 overflow-y-auto",
+            children: personalPathFindings.map(function (f, idx) {
+              return /*#__PURE__*/jsxs("div", {
+                className: "px-3 py-2 text-xs",
+                children: [/*#__PURE__*/jsxs("div", {
+                  className: "font-mono text-amber-200 truncate",
+                  children: [f.file, ":", f.line]
+                }), /*#__PURE__*/jsx("div", {
+                  className: "font-mono opacity-80 mt-0.5 break-all",
+                  children: f.match
+                }), f.context && f.context !== f.match && /*#__PURE__*/jsx("div", {
+                  className: "font-mono opacity-50 mt-0.5 truncate",
+                  children: f.context
+                })]
+              }, "".concat(f.file, ":").concat(f.line, ":").concat(idx));
+            })
+          }), /*#__PURE__*/jsxs("div", {
+            className: "text-xs opacity-60",
+            children: ["Total findings: ", personalPathFindings.length, personalPathFindings.length >= 50 && " (capped)"]
+          })]
+        }), authStatus === "authenticated" && !result && !personalPathFindings && /*#__PURE__*/jsxs(Fragment, {
           children: [/*#__PURE__*/jsxs("div", {
             className: "bg-white/5 border border-white/10 rounded-lg p-3 text-sm",
             children: [/*#__PURE__*/jsxs("div", {
@@ -49648,16 +49734,29 @@ var PublishWidgetModal = function PublishWidgetModal(_ref) {
             })
           })]
         })]
-      }), /*#__PURE__*/jsxs("div", {
+      }), /*#__PURE__*/jsx("div", {
         className: "flex-shrink-0 flex flex-row justify-end gap-2 p-4 border-t border-white/10",
-        children: [/*#__PURE__*/jsx(Button3, {
-          title: result !== null && result !== void 0 && result.success ? "Close" : "Cancel",
-          onClick: handleClose
-        }), !(result !== null && result !== void 0 && result.success) && /*#__PURE__*/jsx(Button2, {
-          title: isPublishing ? "Publishing…" : "Publish",
-          onClick: handlePublish,
-          disabled: !canPublish
-        })]
+        children: personalPathFindings ? /*#__PURE__*/jsxs(Fragment, {
+          children: [/*#__PURE__*/jsx(Button3, {
+            title: "Go back",
+            onClick: handleCancelPersonalPathsConfirm
+          }), /*#__PURE__*/jsx(Button2, {
+            title: isPublishing ? "Publishing…" : "Publish anyway",
+            onClick: handleConfirmPersonalPathsAndPublish,
+            disabled: isPublishing
+          })]
+        }) : /*#__PURE__*/jsxs(Fragment, {
+          children: [/*#__PURE__*/jsx(Button3, {
+            title: result !== null && result !== void 0 && result.success ? "Close" : "Cancel",
+            onClick: handleClose
+          }), !(result !== null && result !== void 0 && result.success) && /*#__PURE__*/jsx(Button2, {
+            title: isPublishing ? "Publishing…" : "Publish",
+            onClick: function onClick() {
+              return handlePublish();
+            },
+            disabled: !canPublish
+          })]
+        })
       })]
     })
   });
@@ -62612,15 +62711,6 @@ function ChatCore(_ref) {
     }
   };
 
-  // End CLI session
-  var handleEndSession = function handleEndSession() {
-    var _mainApi$llm4;
-    if (!isCliBackend || !(mainApi !== null && mainApi !== void 0 && (_mainApi$llm4 = mainApi.llm) !== null && _mainApi$llm4 !== void 0 && _mainApi$llm4.endCliSession)) return;
-    if (isLoading) handleStop();
-    mainApi.llm.endCliSession(uuid || persistKey || sessionKey);
-    setSessionActive(false);
-  };
-
   // Toggle tool
   var handleToggleTool = function handleToggleTool(toolName) {
     setEnabledTools(function (prev) {
@@ -62645,29 +62735,21 @@ function ChatCore(_ref) {
           className: "inline-block w-2 h-2 rounded-full bg-green-400",
           title: "CLI session active"
         })]
-      }), /*#__PURE__*/jsxs("div", {
+      }), /*#__PURE__*/jsx("div", {
         className: "flex items-center gap-1",
-        children: [isCliBackend && sessionActive && /*#__PURE__*/jsx("button", {
-          onClick: handleEndSession,
-          className: "px-2 py-1 text-xs rounded bg-red-900/50 hover:bg-red-800/50 text-red-300 transition-colors",
-          children: "End Session"
-        }), /*#__PURE__*/jsx("button", {
+        children: /*#__PURE__*/jsx("button", {
           onClick: handleNewChat,
           className: "px-2 py-1 text-xs rounded bg-gray-700 hover:bg-gray-600 text-gray-300 transition-colors",
           children: "New Chat"
-        })]
+        })
       })]
-    }) : /*#__PURE__*/jsxs("div", {
+    }) : /*#__PURE__*/jsx("div", {
       className: "flex items-center justify-end px-3 py-1 shrink-0",
-      children: [isCliBackend && sessionActive && /*#__PURE__*/jsx("button", {
-        onClick: handleEndSession,
-        className: "px-2 py-1 text-xs rounded bg-red-900/50 hover:bg-red-800/50 text-red-300 transition-colors mr-1",
-        children: "End Session"
-      }), /*#__PURE__*/jsx("button", {
+      children: /*#__PURE__*/jsx("button", {
         onClick: handleNewChat,
         className: "px-2 py-1 text-xs rounded bg-gray-700 hover:bg-gray-600 text-gray-300 transition-colors",
         children: "New Chat"
-      })]
+      })
     }), error && /*#__PURE__*/jsxs("div", {
       className: "mx-3 mt-2 p-2 bg-red-900/30 border border-red-700 rounded text-red-300 text-xs",
       children: [error, /*#__PURE__*/jsx("button", {