@trops/dash-core 0.1.527 → 0.1.528

package/dist/electron/index.js

@@ -62299,7 +62299,11 @@ function buildGrantsListing$1(
     });
   }
 
-  // Orphan grants: granted but not in the installed list.
+  // Orphan grants: granted but not in the installed list. Honor any
+  // declared block the controller resolved for this dotted-form grant
+  // key — see widgetPermissions.dottedComponentIdToPackageId, which
+  // bridges grant keys (`trops.gmail.GmailCompose`) to on-disk package
+  // paths (`@trops/gmail`).
   for (const [widgetId, grant] of grants) {
     if (seen.has(widgetId)) continue;
     const grantOrigin =
@@ -62308,11 +62312,12 @@ function buildGrantsListing$1(
       typeof grant.grantOrigin === "string"
         ? grant.grantOrigin
         : null;
+    const decl = declared.get(widgetId) || null;
     rows.push({
       widgetId,
-      declared: null,
+      declared: decl,
       granted: grant,
-      hasManifest: false,
+      hasManifest: decl !== null,
       grantOrigin,
     });
   }
@@ -62568,6 +62573,17 @@ function setupWidgetMcpGrantsHandlers() {
       const declared = getWidgetMcpPermissions(widgetId);
       if (declared) declaredByWidget.set(widgetId, declared);
     }
+    // Also resolve declared blocks for every dotted-form grant key.
+    // getWidgetMcpPermissions translates dotted ids to npm package
+    // paths internally, so the same package's manifest is shared
+    // across all of its components. Without this, orphan-grant rows
+    // ship to the renderer with declared:null and every granted tool
+    // looks "stale" in Settings → Privacy.
+    for (const widgetId of grantsByWidget.keys()) {
+      if (declaredByWidget.has(widgetId)) continue;
+      const declared = getWidgetMcpPermissions(widgetId);
+      if (declared) declaredByWidget.set(widgetId, declared);
+    }
 
     return buildGrantsListing(
       installedWidgets,