@trops/dash-core 0.1.502 → 0.1.503

package/dist/electron/index.js

@@ -1,11 +1,10 @@
 'use strict';
 
 var require$$0$1 = require('electron');
-var require$$1$1 = require('electron-store');
-var require$$1$2 = require('path');
+var require$$1$1 = require('path');
 var require$$0$2 = require('fs');
 var require$$8$1 = require('objects-to-csv');
-var require$$1$3 = require('readline');
+var require$$1$2 = require('readline');
 var require$$2 = require('xtreamer');
 var require$$3$1 = require('xml2js');
 var require$$4 = require('JSONStream');
@@ -14,27 +13,28 @@ var require$$6 = require('csv-parser');
 var require$$0$3 = require('quickjs-emscripten');
 var require$$10 = require('https');
 var require$$0$5 = require('@modelcontextprotocol/sdk/client/index.js');
-var require$$1$4 = require('@modelcontextprotocol/sdk/client/stdio.js');
+var require$$1$3 = require('@modelcontextprotocol/sdk/client/stdio.js');
 var require$$0$4 = require('pkce-challenge');
 var require$$2$1 = require('os');
 var require$$12 = require('child_process');
+var require$$0$6 = require('electron-store');
 var require$$3$2 = require('adm-zip');
 var require$$4$1 = require('url');
 var require$$2$2 = require('vm');
-var require$$1$5 = require('croner');
+var require$$1$4 = require('croner');
 var require$$2$3 = require('algoliasearch');
 var require$$3$3 = require('node:path');
-var require$$0$6 = require('openai');
+var require$$0$7 = require('openai');
 require('live-plugin-manager');
-var require$$0$9 = require('@anthropic-ai/sdk');
+var require$$0$a = require('@anthropic-ai/sdk');
 var require$$3$4 = require('crypto');
 var require$$8$2 = require('zod');
-var require$$0$7 = require('http');
-var require$$1$6 = require('http2');
+var require$$0$8 = require('http');
+var require$$1$5 = require('http2');
 var require$$2$4 = require('node-forge');
-var require$$0$8 = require('css');
-var require$$1$7 = require('node-vibrant/node');
-var require$$0$a = require('ws');
+var require$$0$9 = require('css');
+var require$$1$6 = require('node-vibrant/node');
+var require$$0$b = require('ws');
 
 var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
 
@@ -79,11 +79,11 @@ const SECURE_STORAGE_ENCRYPT_STRING_COMPLETE =
 const SECURE_STORAGE_ENCRYPT_STRING_ERROR =
   "secure-storage-encrypt-string-error";
 
-const SECURE_STORE_GET_DATA$1 = "secure-storage-get-data";
+const SECURE_STORE_GET_DATA = "secure-storage-get-data";
 const SECURE_STORE_GET_DATA_COMPLETE = "secure-storage-get-data-complete";
 const SECURE_STORE_GET_DATA_ERROR = "secure-storage-get-data-error";
 
-const SECURE_STORE_SET_DATA$1 = "secure-storage-set-data";
+const SECURE_STORE_SET_DATA = "secure-storage-set-data";
 const SECURE_STORE_SET_DATA_COMPLETE = "secure-storage-set-data-complete";
 const SECURE_STORE_SET_DATA_ERROR = "secure-storage-set-data-error";
 
@@ -91,10 +91,10 @@ var secureStorageEvents$1 = {
   SECURE_STORE_ENCRYPTION_CHECK: SECURE_STORE_ENCRYPTION_CHECK$1,
   SECURE_STORE_ENCRYPTION_CHECK_COMPLETE,
   SECURE_STORE_ENCRYPTION_CHECK_ERROR,
-  SECURE_STORE_SET_DATA: SECURE_STORE_SET_DATA$1,
+  SECURE_STORE_SET_DATA,
   SECURE_STORE_SET_DATA_COMPLETE,
   SECURE_STORE_SET_DATA_ERROR,
-  SECURE_STORE_GET_DATA: SECURE_STORE_GET_DATA$1,
+  SECURE_STORE_GET_DATA,
   SECURE_STORE_GET_DATA_COMPLETE,
   SECURE_STORE_GET_DATA_ERROR,
   SECURE_STORAGE_ENCRYPT_STRING,
@@ -1044,22 +1044,23 @@ var dialogController$1 = {
 };
 
 /**
- * secureStore
+ * secureStoreController
+ *
+ * Thin wrapper around Electron's `safeStorage` for renderer-side
+ * encryption checks. The `saveData` / `getData` helpers that previously
+ * lived here were unwired (no IPC handler in dash-electron) and
+ * lacked per-widget scoping; they were removed alongside their
+ * widget-facing API entries. See `electron/api/secureStoreApi.js`
+ * and the regression-pin in `secureStoreApi.test.js`.
+ *
+ * Provider credential encryption uses `safeStorage.encryptString` /
+ * `decryptString` directly inside `providerController` — that's the
+ * only internal caller and stays unchanged.
  */
 
 const { safeStorage } = require$$0$1;
-const Store$2 = require$$1$1;
 const events$6 = events$8;
 
-const schema$1 = {
-  appId: {
-    type: "string",
-  },
-  apiKey: {
-    type: "string",
-  },
-};
-
 const isEncryptionAvailable$1 = (win) => {
   const result = safeStorage.isEncryptionAvailable();
   win.webContents.send(events$6.SECURE_STORE_ENCRYPTION_CHECK_COMPLETE, result);
@@ -1075,39 +1076,13 @@ const decryptString = (win, str) => {
   win.webContents.send("secure-storage-decrypt-string-complete", result);
 };
 
-const saveData$1 = (key, value) => {
-  try {
-    const store = new Store$2({ schema: schema$1 });
-    store.set(key, value);
-    return getData$1(key);
-  } catch (e) {
-    return { data: null };
-  }
-};
-
-const getData$1 = (key) => {
-  try {
-    const store = new Store$2({ schema: schema$1 });
-    const value = store.get(key);
-    if (value) {
-      return { [key]: value };
-    } else {
-      return null;
-    }
-  } catch (e) {
-    return null;
-  }
-};
-
 var secureStoreController$1 = {
   isEncryptionAvailable: isEncryptionAvailable$1,
   encryptString,
   decryptString,
-  saveData: saveData$1,
-  getData: getData$1,
 };
 
-const path$m = require$$1$2;
+const path$m = require$$1$1;
 const {
   readFileSync,
   writeFileSync: writeFileSync$4,
@@ -1258,7 +1233,7 @@ var file = {
 };
 
 const { app: app$e } = require$$0$1;
-const path$l = require$$1$2;
+const path$l = require$$1$1;
 const { writeFileSync: writeFileSync$3 } = require$$0$2;
 const { getFileContents: getFileContents$7 } = file;
 
@@ -1510,7 +1485,7 @@ const workspaceController$3 = {
 var workspaceController_1 = workspaceController$3;
 
 const { app: app$d } = require$$0$1;
-const path$k = require$$1$2;
+const path$k = require$$1$1;
 const { writeFileSync: writeFileSync$2 } = require$$0$2;
 const { getFileContents: getFileContents$6 } = file;
 
@@ -1695,7 +1670,7 @@ var themeController_1 = themeController$5;
  *      `/data/`.
  */
 
-const path$j = require$$1$2;
+const path$j = require$$1$1;
 const fs$e = require$$0$2;
 const { app: app$c } = require$$0$1;
 
@@ -1864,7 +1839,7 @@ var safePath_1 = {
  */
 
 const fs$d = require$$0$2;
-const path$i = require$$1$2;
+const path$i = require$$1$1;
 const { app: app$b } = require$$0$1;
 
 const FILE_NAME = "widgetMcpGrants.json";
@@ -2865,13 +2840,13 @@ function requireTransform () {
 	if (hasRequiredTransform) return transform;
 	hasRequiredTransform = 1;
 	var fs = require$$0$2;
-	var readline = require$$1$3;
+	var readline = require$$1$2;
 	const xtreamer = require$$2;
 	var xmlParser = require$$3$1;
 	var JSONStream = require$$4;
 	const stream = require$$5;
 	var csv = require$$6;
-	const path = require$$1$2;
+	const path = require$$1$1;
 	const { app } = require$$0$1;
 	const { ensureDirectoryExistence } = file;
 	const safeJsExecutor = requireSafeJsExecutor();
@@ -3313,7 +3288,7 @@ function requireTransform () {
 
 const { app: app$a } = require$$0$1;
 var fs$c = require$$0$2;
-const path$h = require$$1$2;
+const path$h = require$$1$1;
 const events$5 = events$8;
 const { getFileContents: getFileContents$5, writeToFile: writeToFile$2 } = file;
 const { safePath: safePath$2, getAllowedRoots: getAllowedRoots$1 } = safePath_1;
@@ -3907,7 +3882,7 @@ var dataController_1 = dataController$1;
  */
 
 const { app: app$9 } = require$$0$1;
-const path$g = require$$1$2;
+const path$g = require$$1$1;
 const fs$b = require$$0$2;
 const { getFileContents: getFileContents$4, writeToFile: writeToFile$1 } = file;
 
@@ -4430,7 +4405,7 @@ function requireProviderController () {
 	if (hasRequiredProviderController) return providerController_1;
 	hasRequiredProviderController = 1;
 	const { app, safeStorage } = require$$0$1;
-	const path = require$$1$2;
+	const path = require$$1$1;
 	const { writeFileSync, readFileSync, existsSync } = require$$0$2;
 	const {
 	  ensureDirectoryExistence,
@@ -4812,7 +4787,7 @@ function requireProviderController () {
 }
 
 const { app: app$8 } = require$$0$1;
-const path$f = require$$1$2;
+const path$f = require$$1$1;
 const { writeFileSync: writeFileSync$1 } = require$$0$2;
 const events$4 = events$8;
 const { getFileContents: getFileContents$3 } = file;
@@ -22525,11 +22500,11 @@ var mcpScopeResolver = {
 const { Client } = require$$0$5;
 const {
   StdioClientTransport,
-} = require$$1$4;
+} = require$$1$3;
 const {
   StreamableHTTPClientTransport,
 } = streamableHttp$1;
-const path$e = require$$1$2;
+const path$e = require$$1$1;
 const fs$a = require$$0$2;
 const os$2 = require$$2$1;
 const responseCache$2 = responseCache_1;
@@ -23685,7 +23660,7 @@ const mcpController$3 = {
       const sourcePath = credentials?.[from];
       if (sourcePath) {
         const destPath = to.replace(/^~/, os$2.homedir());
-        const destDir = require$$1$2.dirname(destPath);
+        const destDir = require$$1$1.dirname(destPath);
         try {
           fs$a.mkdirSync(destDir, { recursive: true });
           fs$a.copyFileSync(sourcePath, destPath);
@@ -23905,7 +23880,7 @@ const REGISTRY_BASE_URL$1 =
 let store$3 = null;
 function getStore$1() {
   if (!store$3) {
-    const Store = require$$1$1;
+    const Store = require$$0$6;
     store$3 = new Store({
       name: "dash-registry-auth",
       encryptionKey: "dash-registry-v1",
@@ -24273,7 +24248,7 @@ function commonjsRequire(path) {
  */
 
 const fs$9 = require$$0$2;
-const path$d = require$$1$2;
+const path$d = require$$1$1;
 
 /**
  * Structured error thrown by compileWidget() when the underlying
@@ -24590,7 +24565,7 @@ var widgetCompiler$1 = {
  */
 
 const fs$8 = require$$0$2;
-const path$c = require$$1$2;
+const path$c = require$$1$1;
 const vm = require$$2$2;
 const { findWidgetsDir: findWidgetsDir$1 } = widgetCompiler$1;
 
@@ -24881,7 +24856,7 @@ var dynamicWidgetLoaderExports = dynamicWidgetLoader$3.exports;
  */
 
 const fs$7 = require$$0$2;
-const path$b = require$$1$2;
+const path$b = require$$1$1;
 const os$1 = require$$2$1;
 const { app: app$6 } = require$$0$1;
 
@@ -25010,7 +24985,7 @@ var widgetPermissions = {
  */
 
 const fs$6 = require$$0$2;
-const path$a = require$$1$2;
+const path$a = require$$1$1;
 
 const SOURCE_EXTENSIONS = new Set([
   ".js",
@@ -25190,8 +25165,8 @@ var manifestScanner = {
  * and dispatching task-fired events to renderer windows.
  */
 
-const Store$1 = require$$1$1;
-const { Cron } = require$$1$5;
+const Store$1 = require$$0$6;
+const { Cron } = require$$1$4;
 
 const store$2 = new Store$1({ name: "dash-scheduler" });
 
@@ -25713,7 +25688,7 @@ var schedulerController_1 = schedulerController$2;
 
 (function (module) {
 	const fs = require$$0$2;
-	const path = require$$1$2;
+	const path = require$$1$1;
 	const os = require$$2$1;
 	const AdmZip = require$$3$2;
 	const { fileURLToPath } = require$$4$1;
@@ -27236,7 +27211,7 @@ var widgetRegistryExports = widgetRegistry$1.exports;
  * - Support two-level browsing: packages (bundles) and widgets within packages
  */
 
-const path$9 = require$$1$2;
+const path$9 = require$$1$1;
 const fs$5 = require$$0$2;
 const os = require$$2$1;
 const { toPackageId } = packageId;
@@ -28406,7 +28381,7 @@ const algoliaController$1 = {
 
 var algoliaController_1 = algoliaController$1;
 
-const OpenAI = require$$0$6;
+const OpenAI = require$$0$7;
 const events$2 = events$8;
 
 const openaiController$1 = {
@@ -28510,7 +28485,7 @@ function upsertMenuItem$1(items, menuItem) {
 var upsertMenuItem_1 = { upsertMenuItem: upsertMenuItem$1 };
 
 const { app: app$5 } = require$$0$1;
-const path$7 = require$$1$2;
+const path$7 = require$$1$1;
 const { writeFileSync } = require$$0$2;
 const { getFileContents: getFileContents$2 } = file;
 const { upsertMenuItem } = upsertMenuItem_1;
@@ -28566,7 +28541,7 @@ const menuItemsController$1 = {
 
 var menuItemsController_1 = menuItemsController$1;
 
-const path$6 = require$$1$2;
+const path$6 = require$$1$1;
 const { app: app$4 } = require$$0$1;
 
 const pluginController$1 = {
@@ -46785,13 +46760,13 @@ __export(src_exports, {
 var dist = __toCommonJS(src_exports);
 
 // src/server.ts
-var import_node_http = require$$0$7;
+var import_node_http = require$$0$8;
 
 // src/listener.ts
-var import_node_http22 = require$$1$6;
+var import_node_http22 = require$$1$5;
 
 // src/request.ts
-var import_node_http2 = require$$1$6;
+var import_node_http2 = require$$1$5;
 var import_node_stream = require$$5;
 var RequestError = class extends Error {
   constructor(message, options) {
@@ -48369,7 +48344,7 @@ streamableHttp.StreamableHTTPServerTransport = StreamableHTTPServerTransport$1;
  */
 
 const fs$2 = require$$0$2;
-const path$5 = require$$1$2;
+const path$5 = require$$1$1;
 const forge = require$$2$4;
 
 /**
@@ -48768,7 +48743,7 @@ function saveMcpServerSettings(win, mcpSettings) {
 function resolveAppId() {
   const { app } = require$$0$1;
   const fs = require$$0$2;
-  const path = require$$1$2;
+  const path = require$$1$1;
   const dashboardDir = path.join(app.getPath("userData"), "Dashboard");
   try {
     const entries = fs.readdirSync(dashboardDir, { withFileTypes: true });
@@ -50370,10 +50345,10 @@ var themeFromUrlErrors$1 = {
  * computed styles, and favicon/logo images (via node-vibrant).
  */
 
-const css = require$$0$8;
-const { Vibrant } = require$$1$7;
+const css = require$$0$9;
+const { Vibrant } = require$$1$6;
 const https = require$$10;
-const http = require$$0$7;
+const http = require$$0$8;
 const { URL: URL$1 } = require$$4$1;
 const {
   UrlUnreachableError,
@@ -54933,7 +54908,7 @@ var toolHandlers$1 = {
  * per-request, receiving the full messages array each time.
  */
 
-const Anthropic = require$$0$9;
+const Anthropic = require$$0$a;
 const mcpController$2 = mcpControllerExports;
 const cliController$1 = cliController_1;
 const toolDefinitions = toolDefinitions$1;
@@ -57114,7 +57089,7 @@ var dashboardConfigUtils$1 = {
  */
 
 const fs$1 = require$$0$2;
-const path$4 = require$$1$2;
+const path$4 = require$$1$1;
 const { getStoredToken: getStoredToken$2 } = registryAuthController$2;
 
 const REGISTRY_BASE_URL =
@@ -57389,7 +57364,7 @@ function requireWidgetPublishManifest () {
  * Mirrors dashboardConfigController patterns for ZIP creation, manifest generation,
  * and registry interaction.
  */
-const path$3 = require$$1$2;
+const path$3 = require$$1$1;
 const { app: app$3, dialog: dialog$1 } = require$$0$1;
 const AdmZip$2 = require$$3$2;
 
@@ -58129,7 +58104,7 @@ var themeRegistryController$1 = {
  */
 
 const { app: app$2, dialog } = require$$0$1;
-const path$2 = require$$1$2;
+const path$2 = require$$1$1;
 const AdmZip$1 = require$$3$2;
 const { getFileContents: getFileContents$1 } = file;
 const {
@@ -60098,7 +60073,7 @@ var dashboardConfigController$1 = {
  */
 
 const { Notification } = require$$0$1;
-const Store = require$$1$1;
+const Store = require$$0$6;
 
 const store$1 = new Store({ name: "dash-notifications" });
 
@@ -60351,7 +60326,7 @@ var notificationController_1 = notificationController$2;
  * Multiple widgets referencing the same provider share a single socket.
  */
 
-const WebSocket = require$$0$a;
+const WebSocket = require$$0$b;
 
 /**
  * Active WebSocket connections
@@ -61341,7 +61316,7 @@ clientCache$1.registerFactory("algolia", (credentials) => {
 
 // --- OpenAI ---
 clientCache$1.registerFactory("openai", (credentials) => {
-  const OpenAI = require$$0$6;
+  const OpenAI = require$$0$7;
   return new OpenAI({ apiKey: credentials.apiKey });
 });
 
@@ -61360,7 +61335,7 @@ const MAX_RECENTS = 20;
 let store = null;
 function getStore() {
   if (!store) {
-    const Store = require$$1$1;
+    const Store = require$$0$6;
     store = new Store({ name: "dash-session" });
   }
   return store;
@@ -61545,7 +61520,7 @@ var dashboardRatingsUtils = {
  */
 
 const { app: app$1 } = require$$0$1;
-const path$1 = require$$1$2;
+const path$1 = require$$1$1;
 const { getFileContents, writeToFile } = file;
 const {
   validateAndBuildRating,
@@ -61649,7 +61624,7 @@ var dashboardRatingsController = {
  */
 
 const fs = require$$0$2;
-const path = require$$1$2;
+const path = require$$1$1;
 const AdmZip = require$$3$2;
 const { app } = require$$0$1;
 
@@ -62454,11 +62429,7 @@ var widgetRegistryController = {
  */
 
 const { showDialog, fileChosenError } = dialogController$1;
-const {
-  isEncryptionAvailable,
-  saveData,
-  getData,
-} = secureStoreController$1;
+const { isEncryptionAvailable } = secureStoreController$1;
 const {
   listWorkspacesForApplication,
   saveWorkspaceForApplication,
@@ -62576,8 +62547,6 @@ var controller = {
   showDialog,
   fileChosenError,
   isEncryptionAvailable,
-  saveData,
-  getData,
   listWorkspacesForApplication,
   saveWorkspaceForApplication,
   deleteWorkspaceForApplication,
@@ -62663,21 +62632,28 @@ var controller = {
 };
 
 const { ipcRenderer: ipcRenderer$q } = require$$0$1;
-const {
-  SECURE_STORE_ENCRYPTION_CHECK,
-  SECURE_STORE_SET_DATA,
-  SECURE_STORE_GET_DATA,
-} = events$8;
+const { SECURE_STORE_ENCRYPTION_CHECK } = events$8;
 /**
  * secureStoreApi
- * - for Apple, keychain methods
+ *
+ * Renderer-facing wrapper for the secure-store IPC channels. Currently
+ * exposes only `isEncryptionAvailable` because that's the only channel
+ * with a wired handler in dash-electron's main process.
+ *
+ * `saveData` / `getData` were removed in this slice — the IPC handlers
+ * for `SECURE_STORE_SET_DATA` / `SECURE_STORE_GET_DATA` were never
+ * registered, so the methods silently no-op'd. Worse, they appeared
+ * usable on `mainApi.secureStore` but had no widgetId scoping, so
+ * adding handlers later would have given every widget unscoped access
+ * to every other widget's keys. If you need a widget-facing storage
+ * API in the future, add a `widgetId` parameter and plumb it through a
+ * per-widget gate (see `electron/security/fsGate.js` for the pattern).
+ * The pin in `secureStoreApi.test.js` will fail loudly if the
+ * unscoped methods reappear without a gate.
  */
 const secureStoreApi$2 = {
   isEncryptionAvailable: () =>
     ipcRenderer$q.invoke(SECURE_STORE_ENCRYPTION_CHECK, {}),
-  saveData: (key, value) =>
-    ipcRenderer$q.invoke(SECURE_STORE_SET_DATA, { key, value }),
-  getData: (key) => ipcRenderer$q.invoke(SECURE_STORE_GET_DATA, { key }),
 };
 
 var secureStoreApi_1 = secureStoreApi$2;