@trops/dash-core 0.1.489 → 0.1.490

package/dist/index.js

@@ -48570,6 +48570,243 @@ var AiAssistantSection = function AiAssistantSection() {
   });
 };
 
+var PrivacySecuritySection = function PrivacySecuritySection() {
+  var _useState = React.useState([]),
+    _useState2 = _slicedToArray(_useState, 2),
+    rows = _useState2[0],
+    setRows = _useState2[1];
+  var _useState3 = React.useState(true),
+    _useState4 = _slicedToArray(_useState3, 2),
+    loading = _useState4[0],
+    setLoading = _useState4[1];
+  var _useState5 = React.useState(null),
+    _useState6 = _slicedToArray(_useState5, 2),
+    error = _useState6[0],
+    setError = _useState6[1];
+  var reload = React.useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
+    var _api$widgetMcp, api, result, _t;
+    return _regeneratorRuntime.wrap(function (_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          setError(null);
+          _context.prev = 1;
+          api = typeof window !== "undefined" ? window.mainApi : null;
+          if (api !== null && api !== void 0 && (_api$widgetMcp = api.widgetMcp) !== null && _api$widgetMcp !== void 0 && _api$widgetMcp.listAll) {
+            _context.next = 2;
+            break;
+          }
+          setRows([]);
+          setLoading(false);
+          return _context.abrupt("return");
+        case 2:
+          _context.next = 3;
+          return api.widgetMcp.listAll();
+        case 3:
+          result = _context.sent;
+          setRows(Array.isArray(result) ? result : []);
+          _context.next = 5;
+          break;
+        case 4:
+          _context.prev = 4;
+          _t = _context["catch"](1);
+          setError((_t === null || _t === void 0 ? void 0 : _t.message) || String(_t));
+        case 5:
+          _context.prev = 5;
+          setLoading(false);
+          return _context.finish(5);
+        case 6:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee, null, [[1, 4, 5, 6]]);
+  })), []);
+  React.useEffect(function () {
+    reload();
+  }, [reload]);
+  var revokeWidget = /*#__PURE__*/function () {
+    var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2(widgetId) {
+      var _window$mainApi, _window$mainApi$revok, _t2;
+      return _regeneratorRuntime.wrap(function (_context2) {
+        while (1) switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.prev = 0;
+            _context2.next = 1;
+            return (_window$mainApi = window.mainApi) === null || _window$mainApi === void 0 || (_window$mainApi = _window$mainApi.widgetMcp) === null || _window$mainApi === void 0 || (_window$mainApi$revok = _window$mainApi.revoke) === null || _window$mainApi$revok === void 0 ? void 0 : _window$mainApi$revok.call(_window$mainApi, widgetId);
+          case 1:
+            reload();
+            _context2.next = 3;
+            break;
+          case 2:
+            _context2.prev = 2;
+            _t2 = _context2["catch"](0);
+            setError((_t2 === null || _t2 === void 0 ? void 0 : _t2.message) || String(_t2));
+          case 3:
+          case "end":
+            return _context2.stop();
+        }
+      }, _callee2, null, [[0, 2]]);
+    }));
+    return function revokeWidget(_x) {
+      return _ref2.apply(this, arguments);
+    };
+  }();
+  var revokeServer = /*#__PURE__*/function () {
+    var _ref3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3(widgetId, serverName) {
+      var _window$mainApi2, _window$mainApi2$revo, _t3;
+      return _regeneratorRuntime.wrap(function (_context3) {
+        while (1) switch (_context3.prev = _context3.next) {
+          case 0:
+            _context3.prev = 0;
+            _context3.next = 1;
+            return (_window$mainApi2 = window.mainApi) === null || _window$mainApi2 === void 0 || (_window$mainApi2 = _window$mainApi2.widgetMcp) === null || _window$mainApi2 === void 0 || (_window$mainApi2$revo = _window$mainApi2.revokeServer) === null || _window$mainApi2$revo === void 0 ? void 0 : _window$mainApi2$revo.call(_window$mainApi2, widgetId, serverName);
+          case 1:
+            reload();
+            _context3.next = 3;
+            break;
+          case 2:
+            _context3.prev = 2;
+            _t3 = _context3["catch"](0);
+            setError((_t3 === null || _t3 === void 0 ? void 0 : _t3.message) || String(_t3));
+          case 3:
+          case "end":
+            return _context3.stop();
+        }
+      }, _callee3, null, [[0, 2]]);
+    }));
+    return function revokeServer(_x2, _x3) {
+      return _ref3.apply(this, arguments);
+    };
+  }();
+  if (loading) {
+    return /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "flex flex-col p-6",
+      children: /*#__PURE__*/jsxRuntime.jsx("span", {
+        className: "text-sm opacity-60",
+        children: "Loading\u2026"
+      })
+    });
+  }
+  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+    className: "flex flex-col space-y-6 p-6",
+    children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+      className: "flex flex-col space-y-2",
+      children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.SubHeading3, {
+        title: "Widget MCP permissions",
+        padding: false
+      }), /*#__PURE__*/jsxRuntime.jsx("span", {
+        className: "text-xs opacity-60",
+        children: "Tools and paths each widget is allowed to call via MCP. Granted paths are visible to other widgets in the same dashboard that use the same MCP server. Revoke any time."
+      })]
+    }), error && /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "text-xs text-red-400 bg-red-900 bg-opacity-20 border border-red-700 rounded p-3",
+      children: error
+    }), rows.length === 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "text-sm opacity-60",
+      children: "No widgets have requested MCP permissions yet."
+    }), rows.map(function (_ref4) {
+      var widgetId = _ref4.widgetId,
+        declared = _ref4.declared,
+        granted = _ref4.granted;
+      return /*#__PURE__*/jsxRuntime.jsx(WidgetGrantRow, {
+        widgetId: widgetId,
+        declared: declared,
+        granted: granted,
+        onRevokeWidget: function onRevokeWidget() {
+          return revokeWidget(widgetId);
+        },
+        onRevokeServer: function onRevokeServer(serverName) {
+          return revokeServer(widgetId, serverName);
+        }
+      }, widgetId);
+    })]
+  });
+};
+var WidgetGrantRow = function WidgetGrantRow(_ref5) {
+  var widgetId = _ref5.widgetId,
+    declared = _ref5.declared,
+    granted = _ref5.granted,
+    onRevokeWidget = _ref5.onRevokeWidget,
+    onRevokeServer = _ref5.onRevokeServer;
+  var declaredServers = declared && declared.servers || {};
+  var grantedServers = granted && granted.servers || {};
+  var allServerNames = Array.from(new Set([].concat(_toConsumableArray(Object.keys(declaredServers)), _toConsumableArray(Object.keys(grantedServers)))));
+  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+    className: "flex flex-col space-y-3 border border-gray-700 rounded p-3",
+    children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+      className: "flex flex-row items-center justify-between",
+      children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+        className: "text-sm font-mono break-all",
+        children: widgetId
+      }), Object.keys(grantedServers).length > 0 && /*#__PURE__*/jsxRuntime.jsx(DashReact.Button, {
+        title: "Revoke all",
+        onClick: onRevokeWidget
+      })]
+    }), !declared && !granted && /*#__PURE__*/jsxRuntime.jsx("span", {
+      className: "text-xs opacity-50",
+      children: "(no manifest, no grant \u2014 should not happen)"
+    }), allServerNames.map(function (serverName) {
+      var decl = declaredServers[serverName] || {};
+      var grant = grantedServers[serverName];
+      return /*#__PURE__*/jsxRuntime.jsxs("div", {
+        className: "flex flex-col space-y-2 border-t border-gray-800 pt-2",
+        children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+          className: "flex flex-row items-center justify-between",
+          children: [/*#__PURE__*/jsxRuntime.jsxs("span", {
+            className: "text-xs uppercase tracking-wider opacity-70",
+            children: [serverName, !grant && /*#__PURE__*/jsxRuntime.jsx("span", {
+              className: "ml-2 text-amber-400 normal-case tracking-normal",
+              children: "(declared, not granted)"
+            })]
+          }), grant && /*#__PURE__*/jsxRuntime.jsx(DashReact.Button, {
+            title: "Revoke server",
+            onClick: function onClick() {
+              return onRevokeServer(serverName);
+            }
+          })]
+        }), /*#__PURE__*/jsxRuntime.jsx(PermsList, {
+          label: "Tools",
+          declaredItems: decl.tools || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.tools) || []
+        }), /*#__PURE__*/jsxRuntime.jsx(PermsList, {
+          label: "Read paths",
+          declaredItems: decl.readPaths || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.readPaths) || []
+        }), /*#__PURE__*/jsxRuntime.jsx(PermsList, {
+          label: "Write paths",
+          declaredItems: decl.writePaths || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.writePaths) || []
+        })]
+      }, serverName);
+    })]
+  });
+};
+var PermsList = function PermsList(_ref6) {
+  var label = _ref6.label,
+    declaredItems = _ref6.declaredItems,
+    grantedItems = _ref6.grantedItems;
+  if (declaredItems.length === 0 && grantedItems.length === 0) return null;
+  var grantedSet = new Set(grantedItems);
+  var declaredSet = new Set(declaredItems);
+  var all = Array.from(new Set([].concat(_toConsumableArray(declaredItems), _toConsumableArray(grantedItems))));
+  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+    className: "flex flex-col space-y-1",
+    children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+      className: "text-xs opacity-50",
+      children: label
+    }), all.map(function (item) {
+      var isGranted = grantedSet.has(item);
+      var isDeclared = declaredSet.has(item);
+      return /*#__PURE__*/jsxRuntime.jsxs("span", {
+        className: "text-xs font-mono break-all ".concat(isGranted ? "opacity-100" : isDeclared ? "opacity-50 line-through" : "opacity-100 text-amber-400"),
+        children: [item, !isDeclared && isGranted && /*#__PURE__*/jsxRuntime.jsx("span", {
+          className: "ml-2 opacity-60",
+          children: "(no longer declared)"
+        })]
+      }, item);
+    })]
+  });
+};
+
 var SECTIONS = [{
   key: "general",
   label: "General",
@@ -48610,6 +48847,10 @@ var SECTIONS = [{
   key: "ai-assistant",
   label: "AI Assistant",
   icon: "wand-magic-sparkles"
+}, {
+  key: "privacy-security",
+  label: "Privacy & Security",
+  icon: "shield-halved"
 }];
 var AppSettingsModal = function AppSettingsModal(_ref) {
   var isOpen = _ref.isOpen,
@@ -48797,6 +49038,9 @@ var AppSettingsModal = function AppSettingsModal(_ref) {
       }), activeSection === "ai-assistant" && /*#__PURE__*/jsxRuntime.jsx("div", {
         className: "flex-1 overflow-y-auto p-6 ".concat(panelStyles.textColor || "text-gray-200"),
         children: /*#__PURE__*/jsxRuntime.jsx(AiAssistantSection, {})
+      }), activeSection === "privacy-security" && /*#__PURE__*/jsxRuntime.jsx("div", {
+        className: "flex-1 overflow-y-auto ".concat(panelStyles.textColor || "text-gray-200"),
+        children: /*#__PURE__*/jsxRuntime.jsx(PrivacySecuritySection, {})
       })]
     }), /*#__PURE__*/jsxRuntime.jsx(DashReact.SettingsModal.Footer, {
       children: /*#__PURE__*/jsxRuntime.jsx("div", {