@trops/dash-core 0.1.533 → 0.1.534

package/dist/index.js

@@ -4931,6 +4931,17 @@ var RegistryDashboardDetail = function RegistryDashboardDetail(_ref) {
   }, [pkg.name, onInstallComplete]);
   var widgetDeps = (preview === null || preview === void 0 ? void 0 : preview.widgets) || pkg.widgets || [];
   var providers = (preview === null || preview === void 0 ? void 0 : preview.providers) || [];
+  // Slice 13c: aggregated MCP permissions for the dashboard, computed
+  // by the publisher at publish time across every widget's local
+  // package.json. Empty/missing means the dashboard either ships no
+  // tool-using widgets or pre-dates the aggregation.
+  var aggregatedPermissions = (preview === null || preview === void 0 ? void 0 : preview.permissions) || pkg.permissions || null;
+  // Per-widget permissions live on each widget dep itself —
+  // version-pinned next to the widget so the disclosure can't drift
+  // from the actual installed package.
+  var widgetsWithPermissions = widgetDeps.filter(function (w) {
+    return w.permissions && _typeof(w.permissions) === "object" && Object.keys(w.permissions).length > 0;
+  });
 
   // Augment compatibility: check renderer-side ComponentManager for
   // built-in widgets that the electron-side WidgetRegistry doesn't know about
@@ -5135,6 +5146,62 @@ var RegistryDashboardDetail = function RegistryDashboardDetail(_ref) {
             }, idx);
           })
         })]
+      }), (aggregatedPermissions || widgetsWithPermissions.length > 0) && /*#__PURE__*/jsxRuntime.jsxs("div", {
+        children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+          className: "text-xs font-semibold opacity-50 mb-1 block",
+          children: "REQUIRED TOOLS"
+        }), aggregatedPermissions && Object.entries(aggregatedPermissions).map(function (_ref3) {
+          var _ref4 = _slicedToArray(_ref3, 2),
+            server = _ref4[0],
+            block = _ref4[1];
+          return /*#__PURE__*/jsxRuntime.jsxs("div", {
+            className: "mb-2",
+            children: [/*#__PURE__*/jsxRuntime.jsx("div", {
+              className: "text-xs font-mono uppercase tracking-wider opacity-70",
+              children: server
+            }), Array.isArray(block.tools) && block.tools.length > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+              className: "text-xs opacity-80 ml-2 break-all",
+              children: block.tools.join(", ")
+            }), Array.isArray(block.readPaths) && block.readPaths.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "text-xs opacity-60 ml-2 break-all",
+              children: ["Read paths: ", block.readPaths.join(", ")]
+            }), Array.isArray(block.writePaths) && block.writePaths.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "text-xs opacity-60 ml-2 break-all",
+              children: ["Write paths: ", block.writePaths.join(", ")]
+            })]
+          }, server);
+        }), widgetsWithPermissions.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("details", {
+          className: "mt-1",
+          children: [/*#__PURE__*/jsxRuntime.jsxs("summary", {
+            className: "text-xs opacity-60 cursor-pointer",
+            children: ["Per-widget breakdown (", widgetsWithPermissions.length, " widget", widgetsWithPermissions.length === 1 ? "" : "s", ")"]
+          }), /*#__PURE__*/jsxRuntime.jsx("div", {
+            className: "mt-1 space-y-2 ml-2",
+            children: widgetsWithPermissions.map(function (w, idx) {
+              return /*#__PURE__*/jsxRuntime.jsxs("div", {
+                className: "text-xs opacity-80",
+                children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+                  className: "font-mono break-all",
+                  children: [w["package"] || w.packageName, w.version ? /*#__PURE__*/jsxRuntime.jsxs("span", {
+                    className: "opacity-50",
+                    children: [" v", w.version]
+                  }) : null]
+                }), Object.entries(w.permissions).map(function (_ref5) {
+                  var _ref6 = _slicedToArray(_ref5, 2),
+                    server = _ref6[0],
+                    block = _ref6[1];
+                  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+                    className: "ml-2 break-all",
+                    children: [/*#__PURE__*/jsxRuntime.jsxs("span", {
+                      className: "opacity-60",
+                      children: [server, ":"]
+                    }), " ", (block.tools || []).join(", ")]
+                  }, server);
+                })]
+              }, idx);
+            })
+          })]
+        })]
       }), wiring.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
         children: [/*#__PURE__*/jsxRuntime.jsx("span", {
           className: "text-xs font-semibold opacity-50 mb-1 block",
@@ -21223,6 +21290,33 @@ var RegistryPackageDetail = function RegistryPackageDetail(_ref) {
             }, idx);
           })
         })]
+      }), widget.permissions && _typeof(widget.permissions) === "object" && Object.keys(widget.permissions).length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+        children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+          className: "text-xs font-semibold opacity-50 mb-1 block",
+          children: "REQUIRED TOOLS"
+        }), /*#__PURE__*/jsxRuntime.jsx("div", {
+          className: "space-y-2",
+          children: Object.entries(widget.permissions).map(function (_ref2) {
+            var _ref3 = _slicedToArray(_ref2, 2),
+              server = _ref3[0],
+              block = _ref3[1];
+            return /*#__PURE__*/jsxRuntime.jsxs("div", {
+              children: [/*#__PURE__*/jsxRuntime.jsx("div", {
+                className: "text-xs font-mono uppercase tracking-wider opacity-70",
+                children: server
+              }), Array.isArray(block.tools) && block.tools.length > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+                className: "text-xs opacity-80 ml-2 break-all",
+                children: block.tools.join(", ")
+              }), Array.isArray(block.readPaths) && block.readPaths.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+                className: "text-xs opacity-60 ml-2 break-all",
+                children: ["Read paths: ", block.readPaths.join(", ")]
+              }), Array.isArray(block.writePaths) && block.writePaths.length > 0 && /*#__PURE__*/jsxRuntime.jsxs("div", {
+                className: "text-xs opacity-60 ml-2 break-all",
+                children: ["Write paths: ", block.writePaths.join(", ")]
+              })]
+            }, server);
+          })
+        })]
       }), widget.appOrigin && /*#__PURE__*/jsxRuntime.jsxs("div", {
         className: "flex items-center gap-1.5 text-xs opacity-50",
         children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {