@trops/dash-core 0.1.526 → 0.1.528

package/dist/electron/index.js

@@ -3549,17 +3549,42 @@ function parseManifestPermissions(packageJson) {
   return { servers };
 }
 
+/**
+ * Translate a dotted component widget id into the npm package id whose
+ * package.json holds the manifest. Mirrors the construction logic in
+ * `src/Components/Dashboard/WidgetsTab.js` (`<scope>.<pkg>.<comp>`):
+ *
+ *   "@trops/gmail"                       → "@trops/gmail"
+ *   "trops.gmail.GmailCompose"           → "@trops/gmail"
+ *   "ai-built.pipeline.ProspectWorkspace" → "@ai-built/pipeline"
+ *   "pipeline.AutomationHub"             → "pipeline"   (bare, no scope)
+ *   "legacy-bare-package"                → "legacy-bare-package"
+ *
+ * The grant store keys grants by the dotted form; the on-disk widget
+ * folder is keyed by the npm form. This bridges the two.
+ */
+function dottedComponentIdToPackageId(widgetId) {
+  if (typeof widgetId !== "string" || !widgetId) return null;
+  if (widgetId.startsWith("@")) return widgetId;
+  const parts = widgetId.split(".");
+  if (parts.length >= 3) return `@${parts[0]}/${parts[1]}`;
+  if (parts.length === 2) return parts[0];
+  return widgetId;
+}
+
 /**
  * Find a widget's installed package.json on disk. Widgets live under
  * userData/widgets/<scope>/<name>/ for scoped packages or
- * userData/widgets/<name>/ for unscoped. The widgetId is the npm
- * package name (e.g. "@trops/notes-summarizer" or "notes-summarizer").
+ * userData/widgets/<name>/ for unscoped. Accepts either npm package
+ * ids ("@trops/gmail") or dotted component ids
+ * ("trops.gmail.GmailCompose") — the latter is translated first.
  */
 function resolveWidgetPackagePath(widgetId) {
-  if (typeof widgetId !== "string" || !widgetId) return null;
+  const packageId = dottedComponentIdToPackageId(widgetId);
+  if (typeof packageId !== "string" || !packageId) return null;
   const widgetsRoot = path$f.join(app$a.getPath("userData"), "widgets");
   // Split scope from name for "@scope/name" form.
-  const parts = widgetId.startsWith("@") ? widgetId.split("/") : [widgetId];
+  const parts = packageId.startsWith("@") ? packageId.split("/") : [packageId];
   return path$f.join(widgetsRoot, ...parts, "package.json");
 }
 
@@ -3603,6 +3628,7 @@ function clearCache() {
 var widgetPermissions = {
   getWidgetMcpPermissions: getWidgetMcpPermissions$1,
   parseManifestPermissions,
+  dottedComponentIdToPackageId,
   expandHome,
   clearCache,
 };
@@ -62273,7 +62299,11 @@ function buildGrantsListing$1(
     });
   }
 
-  // Orphan grants: granted but not in the installed list.
+  // Orphan grants: granted but not in the installed list. Honor any
+  // declared block the controller resolved for this dotted-form grant
+  // key — see widgetPermissions.dottedComponentIdToPackageId, which
+  // bridges grant keys (`trops.gmail.GmailCompose`) to on-disk package
+  // paths (`@trops/gmail`).
   for (const [widgetId, grant] of grants) {
     if (seen.has(widgetId)) continue;
     const grantOrigin =
@@ -62282,11 +62312,12 @@ function buildGrantsListing$1(
       typeof grant.grantOrigin === "string"
         ? grant.grantOrigin
         : null;
+    const decl = declared.get(widgetId) || null;
     rows.push({
       widgetId,
-      declared: null,
+      declared: decl,
       granted: grant,
-      hasManifest: false,
+      hasManifest: decl !== null,
       grantOrigin,
     });
   }
@@ -62542,6 +62573,17 @@ function setupWidgetMcpGrantsHandlers() {
       const declared = getWidgetMcpPermissions(widgetId);
       if (declared) declaredByWidget.set(widgetId, declared);
     }
+    // Also resolve declared blocks for every dotted-form grant key.
+    // getWidgetMcpPermissions translates dotted ids to npm package
+    // paths internally, so the same package's manifest is shared
+    // across all of its components. Without this, orphan-grant rows
+    // ship to the renderer with declared:null and every granted tool
+    // looks "stale" in Settings → Privacy.
+    for (const widgetId of grantsByWidget.keys()) {
+      if (declaredByWidget.has(widgetId)) continue;
+      const declared = getWidgetMcpPermissions(widgetId);
+      if (declared) declaredByWidget.set(widgetId, declared);
+    }
 
     return buildGrantsListing(
       installedWidgets,