@trops/dash-core 0.1.525 → 0.1.526

package/dist/electron/index.js

@@ -4000,11 +4000,39 @@ function requireScanWidgetPackagePermissions () {
 	  return merged;
 	}
 
+	/**
+	 * Run `applyScanToPackageJson` over a list of widget package paths.
+	 * Used at registry boot to backfill `dash.permissions.mcp` for widgets
+	 * installed before the publish/install scanner hooks existed (or that
+	 * have since updated their tool set without re-publishing). Idempotent
+	 * — additive merge means repeated boots produce no further writes.
+	 *
+	 * @param {string[]} packagePaths
+	 * @returns {{scanned: number, modified: number, errors: Array<{path: string, error: string}>}}
+	 */
+	function backfillPackagePermissions(packagePaths) {
+	  const summary = { scanned: 0, modified: 0, errors: [] };
+	  if (!Array.isArray(packagePaths)) return summary;
+	  for (const pkgPath of packagePaths) {
+	    if (typeof pkgPath !== "string" || !pkgPath) continue;
+	    if (!fs.existsSync(pkgPath)) continue;
+	    summary.scanned += 1;
+	    try {
+	      const merged = applyScanToPackageJson(pkgPath);
+	      if (merged) summary.modified += 1;
+	    } catch (e) {
+	      summary.errors.push({ path: pkgPath, error: e.message });
+	    }
+	  }
+	  return summary;
+	}
+
 	scanWidgetPackagePermissions_1 = {
 	  scanFileForMcpUsage,
 	  scanWidgetPackagePermissions,
 	  mergePermissions,
 	  applyScanToPackageJson,
+	  backfillPackagePermissions,
 	};
 	return scanWidgetPackagePermissions_1;
 }
@@ -4795,6 +4823,33 @@ var schedulerController_1 = schedulerController$2;
 
 	    // Reconcile: re-register orphaned widget packages found on disk
 	    this.reconcileWithDisk();
+
+	    // Slice 13b: backfill `dash.permissions.mcp` for any registered
+	    // widget that was installed before the publish/install scanner
+	    // hooks existed (or that has since updated tools without
+	    // re-publishing). Additive merge — idempotent across boots.
+	    try {
+	      const {
+	        backfillPackagePermissions,
+	      } = requireScanWidgetPackagePermissions();
+	      const paths = Array.from(this.widgets.values())
+	        .map((w) => w.path)
+	        .filter(Boolean);
+	      const summary = backfillPackagePermissions(paths);
+	      if (summary.modified > 0) {
+	        console.log(
+	          `[WidgetRegistry] Backfilled MCP permissions for ${summary.modified}/${summary.scanned} widget(s)`,
+	        );
+	      }
+	      if (summary.errors.length) {
+	        console.warn(`[WidgetRegistry] MCP backfill errors:`, summary.errors);
+	      }
+	    } catch (e) {
+	      console.warn(
+	        "[WidgetRegistry] MCP permissions backfill failed:",
+	        e.message,
+	      );
+	    }
 	  }
 
 	  /**