@trops/dash-core 0.1.489 → 0.1.491

package/dist/index.esm.js

@@ -1626,9 +1626,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpStartServer",
     value: function mcpStartServer(serverName, mcpConfig, credentials, onSuccess, onError) {
       var _this20 = this;
+      var workspaceId = arguments.length > 5 && arguments[5] !== undefined ? arguments[5] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.startServer(serverName, mcpConfig, credentials).then(function (result) {
+          this.api.mcp.startServer(serverName, mcpConfig, credentials, workspaceId).then(function (result) {
             onSuccess(_this20.events.MCP_START_SERVER_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this20.events.MCP_START_SERVER_ERROR, error);
@@ -1647,9 +1648,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpStopServer",
     value: function mcpStopServer(serverName, onSuccess, onError) {
       var _this21 = this;
+      var workspaceId = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.stopServer(serverName).then(function (result) {
+          this.api.mcp.stopServer(serverName, workspaceId).then(function (result) {
             onSuccess(_this21.events.MCP_STOP_SERVER_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this21.events.MCP_STOP_SERVER_ERROR, error);
@@ -1668,9 +1670,13 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpCallTool",
     value: function mcpCallTool(serverName, toolName, args, allowedTools, onSuccess, onError) {
       var _this22 = this;
+      var workspaceId = arguments.length > 6 && arguments[6] !== undefined ? arguments[6] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.callTool(serverName, toolName, args, allowedTools).then(function (result) {
+          // widgetId is not threaded here; mcpApi.callTool defaults it to
+          // null. Slice 3a: workspaceId scopes the MCP server process per
+          // workspace.
+          this.api.mcp.callTool(serverName, toolName, args, allowedTools, null, workspaceId).then(function (result) {
             onSuccess(_this22.events.MCP_CALL_TOOL_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this22.events.MCP_CALL_TOOL_ERROR, error);
@@ -1689,9 +1695,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpListTools",
     value: function mcpListTools(serverName, onSuccess, onError) {
       var _this23 = this;
+      var workspaceId = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.listTools(serverName).then(function (result) {
+          this.api.mcp.listTools(serverName, workspaceId).then(function (result) {
             onSuccess(_this23.events.MCP_LIST_TOOLS_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this23.events.MCP_LIST_TOOLS_ERROR, error);
@@ -1710,9 +1717,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpListResources",
     value: function mcpListResources(serverName, onSuccess, onError) {
       var _this24 = this;
+      var workspaceId = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.listResources(serverName).then(function (result) {
+          this.api.mcp.listResources(serverName, workspaceId).then(function (result) {
             onSuccess(_this24.events.MCP_LIST_RESOURCES_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this24.events.MCP_LIST_RESOURCES_ERROR, error);
@@ -1731,9 +1739,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpReadResource",
     value: function mcpReadResource(serverName, uri, onSuccess, onError) {
       var _this25 = this;
+      var workspaceId = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.readResource(serverName, uri).then(function (result) {
+          this.api.mcp.readResource(serverName, uri, workspaceId).then(function (result) {
             onSuccess(_this25.events.MCP_READ_RESOURCE_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this25.events.MCP_READ_RESOURCE_ERROR, error);
@@ -1752,9 +1761,10 @@ var ElectronDashboardApi = /*#__PURE__*/function () {
     key: "mcpGetServerStatus",
     value: function mcpGetServerStatus(serverName, onSuccess, onError) {
       var _this26 = this;
+      var workspaceId = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : null;
       if (this.api !== null) {
         try {
-          this.api.mcp.getServerStatus(serverName).then(function (result) {
+          this.api.mcp.getServerStatus(serverName, workspaceId).then(function (result) {
             onSuccess(_this26.events.MCP_SERVER_STATUS_COMPLETE, result);
           })["catch"](function (error) {
             onError(_this26.events.MCP_SERVER_STATUS_ERROR, error);
@@ -29102,17 +29112,27 @@ var useWidgetProviders = function useWidgetProviders() {
 
 /**
  * Module-level shared state for MCP server connections.
- * Prevents multiple hook instances (e.g., 4 widgets using "slack") from
- * each firing their own IPC startServer call.
+ * Prevents multiple hook instances (e.g., 4 widgets on the same dashboard
+ * using "slack") from each firing their own IPC startServer call.
  *
- * serverStates: tracks connection result + consumer reference count per server
- * pendingConnects: deduplicates in-flight IPC calls so only 1 fires per server
+ * Slice 3a: keys are scoped per `(workspaceId, serverName)` so two
+ * dashboards using the same provider name don't share renderer state
+ * (the main process spawns separate server instances for each).
+ *
+ * serverStates: tracks connection result + consumer reference count
+ * pendingConnects: deduplicates in-flight IPC calls
  */
 var serverStates = new Map();
-// Map<serverName, { status, tools, resources, consumerCount }>
+// Map<`${workspaceId}::${serverName}`, { status, tools, resources, consumerCount }>
 
 var pendingConnects$1 = new Map();
-// Map<serverName, Promise<result>>
+// Map<`${workspaceId}::${serverName}`, Promise<result>>
+
+var NO_WORKSPACE = "__no_workspace__";
+function rendererStateKey(workspaceId, serverName) {
+  var wid = workspaceId && typeof workspaceId === "string" ? workspaceId : NO_WORKSPACE;
+  return wid + "::" + serverName;
+}
 
 /**
  * useMcpProvider Hook
@@ -29281,7 +29301,8 @@ var useMcpProvider = function useMcpProvider(providerType) {
    * even when multiple hook instances call connect() simultaneously.
    */
   var connect = useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
-    var cached, statusResult, result, state, connectPromise, _result, _t2, _t3;
+    var _workspace$workspaceD2;
+    var workspaceId, stateKey, cached, statusResult, result, state, connectPromise, _result, _t2, _t3;
     return _regeneratorRuntime.wrap(function (_context) {
       while (1) switch (_context.prev = _context.next) {
         case 0:
@@ -29312,9 +29333,15 @@ var useMcpProvider = function useMcpProvider(providerType) {
           setError("Provider \"".concat(selectedProviderName, "\" has no MCP configuration"));
           return _context.abrupt("return");
         case 4:
-          // 1. Already connected at module level? Verify with main process before trusting cache.
+          // Slice 3a: scope state per (workspace, provider). Two dashboards
+          // using the same provider name get separate server instances in the
+          // main process, so the renderer state must mirror that or one
+          // dashboard's "connected" cache will short-circuit a second
+          // dashboard's connect that needs its own backing process.
+          workspaceId = (workspace === null || workspace === void 0 || (_workspace$workspaceD2 = workspace.workspaceData) === null || _workspace$workspaceD2 === void 0 ? void 0 : _workspace$workspaceD2.id) || null;
+          stateKey = rendererStateKey(workspaceId, selectedProviderName); // 1. Already connected at module level? Verify with main process before trusting cache.
           //    The server may have been stopped externally (e.g., Test Connection in settings).
-          cached = serverStates.get(selectedProviderName);
+          cached = serverStates.get(stateKey);
           if (!(cached && cached.status === "connected")) {
             _context.next = 9;
             break;
@@ -29326,7 +29353,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
               return resolve(result);
             }, function (event, err) {
               return reject(err);
-            });
+            }, workspaceId);
           });
         case 6:
           statusResult = _context.sent;
@@ -29339,25 +29366,25 @@ var useMcpProvider = function useMcpProvider(providerType) {
           return _context.abrupt("return");
         case 7:
           // Server was stopped externally — clear stale cache and reconnect
-          serverStates["delete"](selectedProviderName);
+          serverStates["delete"](stateKey);
           _context.next = 9;
           break;
         case 8:
           _context.prev = 8;
           _context["catch"](5);
-          serverStates["delete"](selectedProviderName);
+          serverStates["delete"](stateKey);
         case 9:
           setIsConnecting(true);
           setError(null);
 
           // 2. Another hook instance already connecting? Piggyback on its promise
-          if (!pendingConnects$1.has(selectedProviderName)) {
+          if (!pendingConnects$1.has(stateKey)) {
             _context.next = 17;
             break;
           }
           _context.prev = 10;
           _context.next = 11;
-          return pendingConnects$1.get(selectedProviderName);
+          return pendingConnects$1.get(stateKey);
         case 11:
           result = _context.sent;
           if (mountedRef.current) {
@@ -29376,7 +29403,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
           return _context.abrupt("return");
         case 13:
           // Increment consumer count and apply
-          state = serverStates.get(selectedProviderName);
+          state = serverStates.get(stateKey);
           if (state) state.consumerCount++;
           applyResult(result);
           _context.next = 16;
@@ -29399,9 +29426,9 @@ var useMcpProvider = function useMcpProvider(providerType) {
           // 3. First caller — fire the IPC call and share the promise
           connectPromise = new Promise(function (resolve, reject) {
             dashApi.mcpStartServer(selectedProviderName, provider.mcpConfig, provider.credentials, function (event, result) {
-              pendingConnects$1["delete"](selectedProviderName);
+              pendingConnects$1["delete"](stateKey);
               if (result.error) {
-                serverStates.set(selectedProviderName, {
+                serverStates.set(stateKey, {
                   status: "error",
                   tools: [],
                   resources: [],
@@ -29412,7 +29439,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
               }
 
               // Store in module-level shared state
-              serverStates.set(selectedProviderName, {
+              serverStates.set(stateKey, {
                 status: "connected",
                 tools: result.tools || [],
                 resources: result.resources || [],
@@ -29420,17 +29447,17 @@ var useMcpProvider = function useMcpProvider(providerType) {
               });
               resolve(result);
             }, function (event, err) {
-              pendingConnects$1["delete"](selectedProviderName);
-              serverStates.set(selectedProviderName, {
+              pendingConnects$1["delete"](stateKey);
+              serverStates.set(stateKey, {
                 status: "error",
                 tools: [],
                 resources: [],
                 consumerCount: 0
               });
               reject(err);
-            });
+            }, workspaceId);
           });
-          pendingConnects$1.set(selectedProviderName, connectPromise);
+          pendingConnects$1.set(stateKey, connectPromise);
           _context.prev = 18;
           _context.next = 19;
           return connectPromise;
@@ -29471,14 +29498,15 @@ var useMcpProvider = function useMcpProvider(providerType) {
           return _context.stop();
       }
     }, _callee, null, [[5, 8], [10, 14], [18, 22]]);
-  })), [dashApi, provider, providerType, selectedProviderName, applyResult]);
+  })), [dashApi, provider, providerType, selectedProviderName, applyResult, workspace]);
 
   /**
    * Disconnect from the MCP server.
    * Only sends the IPC stop call when this is the last consumer.
    */
   var disconnect = useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2() {
-    var state;
+    var _workspace$workspaceD3;
+    var workspaceId, stateKey, state;
     return _regeneratorRuntime.wrap(function (_context2) {
       while (1) switch (_context2.prev = _context2.next) {
         case 0:
@@ -29488,7 +29516,9 @@ var useMcpProvider = function useMcpProvider(providerType) {
           }
           return _context2.abrupt("return");
         case 1:
-          state = serverStates.get(selectedProviderName);
+          workspaceId = (workspace === null || workspace === void 0 || (_workspace$workspaceD3 = workspace.workspaceData) === null || _workspace$workspaceD3 === void 0 ? void 0 : _workspace$workspaceD3.id) || null;
+          stateKey = rendererStateKey(workspaceId, selectedProviderName);
+          state = serverStates.get(stateKey);
           if (!state) {
             _context2.next = 3;
             break;
@@ -29507,7 +29537,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
           return _context2.abrupt("return");
         case 2:
           // Last consumer — actually stop the server
-          serverStates["delete"](selectedProviderName);
+          serverStates["delete"](stateKey);
         case 3:
           // Clear state synchronously BEFORE the IPC call so that
           // a subsequent connect() won't short-circuit on stale connectedRef
@@ -29516,29 +29546,31 @@ var useMcpProvider = function useMcpProvider(providerType) {
           setResources([]);
           setStatus("disconnected");
           connectedRef.current = false;
-          pendingConnects$1["delete"](selectedProviderName);
+          pendingConnects$1["delete"](stateKey);
           return _context2.abrupt("return", new Promise(function (resolve) {
             dashApi.mcpStopServer(selectedProviderName, function () {
               return resolve();
             }, function (event, err) {
               resolve();
-            });
+            }, workspaceId);
           }));
         case 4:
         case "end":
           return _context2.stop();
       }
     }, _callee2);
-  })), [dashApi, selectedProviderName]);
+  })), [dashApi, selectedProviderName, workspace]);
 
   /**
    * Call a tool on the MCP server
    */
   var callTool = useCallback(/*#__PURE__*/function () {
     var _ref3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3(toolName) {
+      var _workspace$workspaceD4;
       var args,
         widgetRequiredTools,
         isRequired,
+        workspaceId,
         _args3 = arguments;
       return _regeneratorRuntime.wrap(function (_context3) {
         while (1) switch (_context3.prev = _context3.next) {
@@ -29565,6 +29597,10 @@ var useMcpProvider = function useMcpProvider(providerType) {
             isRequired = widgetRequiredTools === null || widgetRequiredTools === void 0 ? void 0 : widgetRequiredTools.includes(toolName);
             throw new Error("Tool \"".concat(toolName, "\" is not allowed for this widget. Allowed tools: ").concat(effectiveAllowedTools.join(", ")).concat(isRequired ? ". Note: \"".concat(toolName, "\" is declared as a required tool by this widget \u2014 update the provider's allowed tools in Settings \u2192 Providers.") : ""));
           case 2:
+            // Slice 3a: scope the MCP server process per workspace. The
+            // workspace UUID is the canonical "current dashboard" identity
+            // (see useNotifications, useScheduler for the same pattern).
+            workspaceId = (workspace === null || workspace === void 0 || (_workspace$workspaceD4 = workspace.workspaceData) === null || _workspace$workspaceD4 === void 0 ? void 0 : _workspace$workspaceD4.id) || null;
             return _context3.abrupt("return", new Promise(function (resolve, reject) {
               var timeout = setTimeout(function () {
                 reject(new Error("Tool call \"".concat(toolName, "\" timed out after 30s")));
@@ -29579,7 +29615,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
               }, function (event, err) {
                 clearTimeout(timeout);
                 reject(new Error((err === null || err === void 0 ? void 0 : err.message) || "Failed to call MCP tool"));
-              });
+              }, workspaceId);
             }));
           case 3:
           case "end":
@@ -29590,7 +29626,7 @@ var useMcpProvider = function useMcpProvider(providerType) {
     return function (_x) {
       return _ref3.apply(this, arguments);
     };
-  }(), [dashApi, selectedProviderName, effectiveAllowedTools, widgetData, providerType]);
+  }(), [dashApi, selectedProviderName, effectiveAllowedTools, widgetData, providerType, workspace]);
 
   /**
    * Read a resource from the MCP server
@@ -29648,7 +29684,10 @@ var useMcpProvider = function useMcpProvider(providerType) {
 
       // Decrement consumer count; only stop server if last consumer
       if (connectedRef.current && dashApi && selectedProviderName) {
-        var state = serverStates.get(selectedProviderName);
+        var _workspace$workspaceD5;
+        var workspaceId = (workspace === null || workspace === void 0 || (_workspace$workspaceD5 = workspace.workspaceData) === null || _workspace$workspaceD5 === void 0 ? void 0 : _workspace$workspaceD5.id) || null;
+        var stateKey = rendererStateKey(workspaceId, selectedProviderName);
+        var state = serverStates.get(stateKey);
         if (state) {
           state.consumerCount = Math.max(0, state.consumerCount - 1);
           if (state.consumerCount > 0) {
@@ -29657,12 +29696,12 @@ var useMcpProvider = function useMcpProvider(providerType) {
           }
 
           // Last consumer — stop the server
-          serverStates["delete"](selectedProviderName);
+          serverStates["delete"](stateKey);
         }
-        dashApi.mcpStopServer(selectedProviderName, function () {}, function () {});
+        dashApi.mcpStopServer(selectedProviderName, function () {}, function () {}, workspaceId);
       }
     };
-  }, [dashApi, selectedProviderName]);
+  }, [dashApi, selectedProviderName, workspace]);
   return {
     isConnected: isConnected,
     isConnecting: isConnecting,
@@ -48552,6 +48591,243 @@ var AiAssistantSection = function AiAssistantSection() {
   });
 };
 
+var PrivacySecuritySection = function PrivacySecuritySection() {
+  var _useState = useState([]),
+    _useState2 = _slicedToArray(_useState, 2),
+    rows = _useState2[0],
+    setRows = _useState2[1];
+  var _useState3 = useState(true),
+    _useState4 = _slicedToArray(_useState3, 2),
+    loading = _useState4[0],
+    setLoading = _useState4[1];
+  var _useState5 = useState(null),
+    _useState6 = _slicedToArray(_useState5, 2),
+    error = _useState6[0],
+    setError = _useState6[1];
+  var reload = useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
+    var _api$widgetMcp, api, result, _t;
+    return _regeneratorRuntime.wrap(function (_context) {
+      while (1) switch (_context.prev = _context.next) {
+        case 0:
+          setError(null);
+          _context.prev = 1;
+          api = typeof window !== "undefined" ? window.mainApi : null;
+          if (api !== null && api !== void 0 && (_api$widgetMcp = api.widgetMcp) !== null && _api$widgetMcp !== void 0 && _api$widgetMcp.listAll) {
+            _context.next = 2;
+            break;
+          }
+          setRows([]);
+          setLoading(false);
+          return _context.abrupt("return");
+        case 2:
+          _context.next = 3;
+          return api.widgetMcp.listAll();
+        case 3:
+          result = _context.sent;
+          setRows(Array.isArray(result) ? result : []);
+          _context.next = 5;
+          break;
+        case 4:
+          _context.prev = 4;
+          _t = _context["catch"](1);
+          setError((_t === null || _t === void 0 ? void 0 : _t.message) || String(_t));
+        case 5:
+          _context.prev = 5;
+          setLoading(false);
+          return _context.finish(5);
+        case 6:
+        case "end":
+          return _context.stop();
+      }
+    }, _callee, null, [[1, 4, 5, 6]]);
+  })), []);
+  useEffect(function () {
+    reload();
+  }, [reload]);
+  var revokeWidget = /*#__PURE__*/function () {
+    var _ref2 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee2(widgetId) {
+      var _window$mainApi, _window$mainApi$revok, _t2;
+      return _regeneratorRuntime.wrap(function (_context2) {
+        while (1) switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.prev = 0;
+            _context2.next = 1;
+            return (_window$mainApi = window.mainApi) === null || _window$mainApi === void 0 || (_window$mainApi = _window$mainApi.widgetMcp) === null || _window$mainApi === void 0 || (_window$mainApi$revok = _window$mainApi.revoke) === null || _window$mainApi$revok === void 0 ? void 0 : _window$mainApi$revok.call(_window$mainApi, widgetId);
+          case 1:
+            reload();
+            _context2.next = 3;
+            break;
+          case 2:
+            _context2.prev = 2;
+            _t2 = _context2["catch"](0);
+            setError((_t2 === null || _t2 === void 0 ? void 0 : _t2.message) || String(_t2));
+          case 3:
+          case "end":
+            return _context2.stop();
+        }
+      }, _callee2, null, [[0, 2]]);
+    }));
+    return function revokeWidget(_x) {
+      return _ref2.apply(this, arguments);
+    };
+  }();
+  var revokeServer = /*#__PURE__*/function () {
+    var _ref3 = _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3(widgetId, serverName) {
+      var _window$mainApi2, _window$mainApi2$revo, _t3;
+      return _regeneratorRuntime.wrap(function (_context3) {
+        while (1) switch (_context3.prev = _context3.next) {
+          case 0:
+            _context3.prev = 0;
+            _context3.next = 1;
+            return (_window$mainApi2 = window.mainApi) === null || _window$mainApi2 === void 0 || (_window$mainApi2 = _window$mainApi2.widgetMcp) === null || _window$mainApi2 === void 0 || (_window$mainApi2$revo = _window$mainApi2.revokeServer) === null || _window$mainApi2$revo === void 0 ? void 0 : _window$mainApi2$revo.call(_window$mainApi2, widgetId, serverName);
+          case 1:
+            reload();
+            _context3.next = 3;
+            break;
+          case 2:
+            _context3.prev = 2;
+            _t3 = _context3["catch"](0);
+            setError((_t3 === null || _t3 === void 0 ? void 0 : _t3.message) || String(_t3));
+          case 3:
+          case "end":
+            return _context3.stop();
+        }
+      }, _callee3, null, [[0, 2]]);
+    }));
+    return function revokeServer(_x2, _x3) {
+      return _ref3.apply(this, arguments);
+    };
+  }();
+  if (loading) {
+    return /*#__PURE__*/jsx("div", {
+      className: "flex flex-col p-6",
+      children: /*#__PURE__*/jsx("span", {
+        className: "text-sm opacity-60",
+        children: "Loading\u2026"
+      })
+    });
+  }
+  return /*#__PURE__*/jsxs("div", {
+    className: "flex flex-col space-y-6 p-6",
+    children: [/*#__PURE__*/jsxs("div", {
+      className: "flex flex-col space-y-2",
+      children: [/*#__PURE__*/jsx(SubHeading3, {
+        title: "Widget MCP permissions",
+        padding: false
+      }), /*#__PURE__*/jsx("span", {
+        className: "text-xs opacity-60",
+        children: "Tools and paths each widget is allowed to call via MCP. Granted paths are visible to other widgets in the same dashboard that use the same MCP server. Revoke any time."
+      })]
+    }), error && /*#__PURE__*/jsx("div", {
+      className: "text-xs text-red-400 bg-red-900 bg-opacity-20 border border-red-700 rounded p-3",
+      children: error
+    }), rows.length === 0 && /*#__PURE__*/jsx("div", {
+      className: "text-sm opacity-60",
+      children: "No widgets have requested MCP permissions yet."
+    }), rows.map(function (_ref4) {
+      var widgetId = _ref4.widgetId,
+        declared = _ref4.declared,
+        granted = _ref4.granted;
+      return /*#__PURE__*/jsx(WidgetGrantRow, {
+        widgetId: widgetId,
+        declared: declared,
+        granted: granted,
+        onRevokeWidget: function onRevokeWidget() {
+          return revokeWidget(widgetId);
+        },
+        onRevokeServer: function onRevokeServer(serverName) {
+          return revokeServer(widgetId, serverName);
+        }
+      }, widgetId);
+    })]
+  });
+};
+var WidgetGrantRow = function WidgetGrantRow(_ref5) {
+  var widgetId = _ref5.widgetId,
+    declared = _ref5.declared,
+    granted = _ref5.granted,
+    onRevokeWidget = _ref5.onRevokeWidget,
+    onRevokeServer = _ref5.onRevokeServer;
+  var declaredServers = declared && declared.servers || {};
+  var grantedServers = granted && granted.servers || {};
+  var allServerNames = Array.from(new Set([].concat(_toConsumableArray(Object.keys(declaredServers)), _toConsumableArray(Object.keys(grantedServers)))));
+  return /*#__PURE__*/jsxs("div", {
+    className: "flex flex-col space-y-3 border border-gray-700 rounded p-3",
+    children: [/*#__PURE__*/jsxs("div", {
+      className: "flex flex-row items-center justify-between",
+      children: [/*#__PURE__*/jsx("span", {
+        className: "text-sm font-mono break-all",
+        children: widgetId
+      }), Object.keys(grantedServers).length > 0 && /*#__PURE__*/jsx(Button, {
+        title: "Revoke all",
+        onClick: onRevokeWidget
+      })]
+    }), !declared && !granted && /*#__PURE__*/jsx("span", {
+      className: "text-xs opacity-50",
+      children: "(no manifest, no grant \u2014 should not happen)"
+    }), allServerNames.map(function (serverName) {
+      var decl = declaredServers[serverName] || {};
+      var grant = grantedServers[serverName];
+      return /*#__PURE__*/jsxs("div", {
+        className: "flex flex-col space-y-2 border-t border-gray-800 pt-2",
+        children: [/*#__PURE__*/jsxs("div", {
+          className: "flex flex-row items-center justify-between",
+          children: [/*#__PURE__*/jsxs("span", {
+            className: "text-xs uppercase tracking-wider opacity-70",
+            children: [serverName, !grant && /*#__PURE__*/jsx("span", {
+              className: "ml-2 text-amber-400 normal-case tracking-normal",
+              children: "(declared, not granted)"
+            })]
+          }), grant && /*#__PURE__*/jsx(Button, {
+            title: "Revoke server",
+            onClick: function onClick() {
+              return onRevokeServer(serverName);
+            }
+          })]
+        }), /*#__PURE__*/jsx(PermsList, {
+          label: "Tools",
+          declaredItems: decl.tools || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.tools) || []
+        }), /*#__PURE__*/jsx(PermsList, {
+          label: "Read paths",
+          declaredItems: decl.readPaths || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.readPaths) || []
+        }), /*#__PURE__*/jsx(PermsList, {
+          label: "Write paths",
+          declaredItems: decl.writePaths || [],
+          grantedItems: (grant === null || grant === void 0 ? void 0 : grant.writePaths) || []
+        })]
+      }, serverName);
+    })]
+  });
+};
+var PermsList = function PermsList(_ref6) {
+  var label = _ref6.label,
+    declaredItems = _ref6.declaredItems,
+    grantedItems = _ref6.grantedItems;
+  if (declaredItems.length === 0 && grantedItems.length === 0) return null;
+  var grantedSet = new Set(grantedItems);
+  var declaredSet = new Set(declaredItems);
+  var all = Array.from(new Set([].concat(_toConsumableArray(declaredItems), _toConsumableArray(grantedItems))));
+  return /*#__PURE__*/jsxs("div", {
+    className: "flex flex-col space-y-1",
+    children: [/*#__PURE__*/jsx("span", {
+      className: "text-xs opacity-50",
+      children: label
+    }), all.map(function (item) {
+      var isGranted = grantedSet.has(item);
+      var isDeclared = declaredSet.has(item);
+      return /*#__PURE__*/jsxs("span", {
+        className: "text-xs font-mono break-all ".concat(isGranted ? "opacity-100" : isDeclared ? "opacity-50 line-through" : "opacity-100 text-amber-400"),
+        children: [item, !isDeclared && isGranted && /*#__PURE__*/jsx("span", {
+          className: "ml-2 opacity-60",
+          children: "(no longer declared)"
+        })]
+      }, item);
+    })]
+  });
+};
+
 var SECTIONS = [{
   key: "general",
   label: "General",
@@ -48592,6 +48868,10 @@ var SECTIONS = [{
   key: "ai-assistant",
   label: "AI Assistant",
   icon: "wand-magic-sparkles"
+}, {
+  key: "privacy-security",
+  label: "Privacy & Security",
+  icon: "shield-halved"
 }];
 var AppSettingsModal = function AppSettingsModal(_ref) {
   var isOpen = _ref.isOpen,
@@ -48779,6 +49059,9 @@ var AppSettingsModal = function AppSettingsModal(_ref) {
       }), activeSection === "ai-assistant" && /*#__PURE__*/jsx("div", {
         className: "flex-1 overflow-y-auto p-6 ".concat(panelStyles.textColor || "text-gray-200"),
         children: /*#__PURE__*/jsx(AiAssistantSection, {})
+      }), activeSection === "privacy-security" && /*#__PURE__*/jsx("div", {
+        className: "flex-1 overflow-y-auto ".concat(panelStyles.textColor || "text-gray-200"),
+        children: /*#__PURE__*/jsx(PrivacySecuritySection, {})
       })]
     }), /*#__PURE__*/jsx(SettingsModal.Footer, {
       children: /*#__PURE__*/jsx("div", {