@trops/dash-core 0.1.598 → 0.1.600

package/dist/electron/index.js

@@ -934,6 +934,20 @@ var onboardingEvents$1 = {
   ONBOARDING_MARK_COMPLETED: ONBOARDING_MARK_COMPLETED$1,
 };
 
+/**
+ * Event Constants — Export Events
+ *
+ * IPC event constants for the Export Everything bundle (Phase 4A).
+ * The renderer calls these via `window.mainApi.export.*`; the main
+ * process registers a handler against `exportController.exportEverythingForApplication`.
+ */
+
+const EXPORT_EVERYTHING$1 = "export:everything";
+
+var exportEvents$1 = {
+  EXPORT_EVERYTHING: EXPORT_EVERYTHING$1,
+};
+
 /**
  * Events
  *
@@ -965,6 +979,7 @@ const webSocketEvents = requireWebSocketEvents();
 const mcpDashServerEvents = mcpDashServerEvents$1;
 const publisherKeyEvents = publisherKeyEvents$1;
 const onboardingEvents = onboardingEvents$1;
+const exportEvents = exportEvents$1;
 
 const publicEvents = {
   ...dataEvents,
@@ -990,6 +1005,7 @@ const API_GROUPS = {
   providers: Object.values(providerEvents),
   "publisher-key": Object.values(publisherKeyEvents),
   onboarding: Object.values(onboardingEvents),
+  export: Object.values(exportEvents),
   registry: Object.values(registryEvents),
   "registry-auth": Object.values(registryAuthEvents),
   scheduler: Object.values(schedulerEvents),
@@ -1030,6 +1046,7 @@ var events$8 = {
   ...mcpDashServerEvents,
   ...publisherKeyEvents,
   ...onboardingEvents,
+  ...exportEvents,
 };
 
 /**
@@ -64015,6 +64032,220 @@ var onboardingController$1 = {
   _clearRecord: () => getStore$1().delete("onboarding"),
 };
 
+/**
+ * exportController.js
+ *
+ * "Export Everything" bundle (Phase 4A of the MVP launch audit).
+ *
+ * Gathers every piece of user-owned config — workspaces, themes,
+ * menu items / folders, and providers (METADATA ONLY, never the
+ * decrypted credentials) — into a single ZIP that the user can save
+ * as a backup or migration aid.
+ *
+ * Hard safety property: the ZIP MUST NOT contain provider credentials.
+ * `providerController.listProviders` returns `provider.credentials` in
+ * the decrypted plaintext form (see providerController.js:188-204), so
+ * a naive `JSON.stringify(providers)` would leak every saved token in
+ * the user's app to an arbitrary path on disk. This module uses an
+ * EXPLICIT FIELD ALLOWLIST (not a blocklist) — only the fields named
+ * in `SAFE_PROVIDER_FIELDS` ever leave the function. Re-import is out
+ * of scope for MVP; the ZIP is read-only backup.
+ *
+ * The bundle layout (rooted at the user-picked ZIP path):
+ *   /manifest.json     — schemaVersion + exportedAt + counts
+ *   /workspaces.json   — array of workspaces (as stored on disk)
+ *   /themes.json       — themes keyed by themeKey
+ *   /menu-items.json   — folder/menu structure
+ *   /providers.json    — providers with credentials stripped
+ *
+ * Schema versioning: `BUNDLE_SCHEMA_VERSION` stamps the manifest so a
+ * future importer can refuse incompatible bundles loudly rather than
+ * silently corrupting state.
+ */
+
+// `electron`, the four controllers, `path`, and `adm-zip` are
+// lazy-required INSIDE `exportEverythingForApplication` so the pure
+// helpers (`stripProviderCredentials`, `buildBundleFiles`) can be
+// loaded under `node:test` without booting the Electron runtime or
+// the controller chain (which itself requires `electron`).
+
+const BUNDLE_SCHEMA_VERSION = "1.0.0";
+
+// Allowlist of provider fields that are safe to include in the
+// exported bundle. Any field name NOT in this set is dropped — this
+// is the only line of defense against accidental credential leakage,
+// and it's tested explicitly in exportController.test.js. Adding a
+// new field here requires confirming it never carries a secret.
+const SAFE_PROVIDER_FIELDS = [
+  "name",
+  "type",
+  "providerClass",
+  "dateCreated",
+  "dateUpdated",
+  "isDefaultForType",
+  "mcpConfig", // connection metadata (command, args mapping) — no secrets
+  "allowedTools",
+  "wsConfig", // WebSocket URLs — no secrets
+];
+
+/**
+ * Strip every provider down to the allowlisted fields. Anything else
+ * (most importantly `credentials`) is dropped.
+ *
+ * Exported for direct unit testing — the credential-leak regression
+ * pin asserts this function is the only path provider data takes to
+ * the bundle.
+ *
+ * @param {Array<Object>} providers - raw listProviders() output
+ * @returns {Array<Object>} sanitized copies
+ */
+function stripProviderCredentials(providers) {
+  if (!Array.isArray(providers)) return [];
+  return providers.map((p) => {
+    const safe = {};
+    for (const field of SAFE_PROVIDER_FIELDS) {
+      if (field in p) safe[field] = p[field];
+    }
+    return safe;
+  });
+}
+
+/**
+ * Build the bundle contents (4 JSON blobs + manifest) without
+ * touching the disk. Exported separately so tests can assert on the
+ * structure without mocking electron's dialog/fs surfaces.
+ *
+ * @param {Object} sources - results of the four list calls
+ * @param {Array} sources.workspaces
+ * @param {Object} sources.themes
+ * @param {Array} sources.menuItems
+ * @param {Array} sources.providers - raw, MAY contain credentials
+ * @returns {Object} map of file name → Buffer
+ */
+function buildBundleFiles(sources) {
+  const safeProviders = stripProviderCredentials(sources.providers || []);
+  const manifest = {
+    schemaVersion: BUNDLE_SCHEMA_VERSION,
+    exportedAt: new Date().toISOString(),
+    counts: {
+      workspaces: Array.isArray(sources.workspaces)
+        ? sources.workspaces.length
+        : 0,
+      themes:
+        sources.themes && typeof sources.themes === "object"
+          ? Object.keys(sources.themes).length
+          : 0,
+      menuItems: Array.isArray(sources.menuItems)
+        ? sources.menuItems.length
+        : 0,
+      providers: safeProviders.length,
+    },
+  };
+  const stringify = (obj) => Buffer.from(JSON.stringify(obj, null, 2), "utf-8");
+  return {
+    "manifest.json": stringify(manifest),
+    "workspaces.json": stringify(sources.workspaces || []),
+    "themes.json": stringify(sources.themes || {}),
+    "menu-items.json": stringify(sources.menuItems || []),
+    "providers.json": stringify(safeProviders),
+  };
+}
+
+/**
+ * Export every piece of user-owned config to a single ZIP file the
+ * user picks via the save dialog. Returns `{success, filePath}` on
+ * success, `{success: false, error}` on failure, or
+ * `{success: false, canceled: true}` if the user dismissed the
+ * dialog.
+ *
+ * Provider credentials are NEVER included in the bundle.
+ *
+ * @param {BrowserWindow} win - main window (for dialog)
+ * @param {string} appId - application identifier
+ * @param {Object} [options]
+ * @param {string} [options.defaultPath] - override the default save
+ *   path (used by tests to skip the dialog and write directly)
+ * @returns {Promise<Object>}
+ */
+async function exportEverythingForApplication$1(win, appId, options = {}) {
+  try {
+    const { app, dialog } = require("electron");
+    const path = require("path");
+    const AdmZip = require("adm-zip");
+    const workspaceController = workspaceController_1;
+    const themeController = themeController_1;
+    const menuItemsController = menuItemsController_1;
+    const providerController = requireProviderController();
+
+    const wsResult = workspaceController.listWorkspacesForApplication(
+      win,
+      appId,
+    );
+    const themeResult = themeController.listThemesForApplication(win, appId);
+    const menuResult = menuItemsController.listMenuItemsForApplication(
+      win,
+      appId,
+    );
+    const provResult = providerController.listProviders(win, appId);
+
+    const files = buildBundleFiles({
+      workspaces: wsResult?.workspaces || [],
+      themes: themeResult?.themes || {},
+      menuItems: menuResult?.menuItems || [],
+      providers: provResult?.providers || [],
+    });
+
+    // Allow tests to bypass the save dialog by providing a path. In
+    // production, always go through Electron's native save picker so
+    // the user explicitly chooses where the bundle lands.
+    let filePath = options.defaultPath || null;
+    if (!filePath) {
+      const stamp = new Date()
+        .toISOString()
+        .replace(/[:.]/g, "-")
+        .replace(/T/, "_")
+        .slice(0, 19);
+      const suggested = path.join(
+        app.getPath("desktop"),
+        `dash-backup-${stamp}.zip`,
+      );
+      const dlg = await dialog.showSaveDialog(win, {
+        title: "Export Everything",
+        defaultPath: suggested,
+        filters: [{ name: "ZIP Archive", extensions: ["zip"] }],
+      });
+      if (dlg.canceled || !dlg.filePath) {
+        return { success: false, canceled: true };
+      }
+      filePath = dlg.filePath;
+    }
+
+    const zip = new AdmZip();
+    for (const [name, buf] of Object.entries(files)) {
+      zip.addFile(name, buf);
+    }
+    zip.writeZip(filePath);
+
+    return {
+      success: true,
+      filePath,
+      counts: JSON.parse(files["manifest.json"].toString("utf-8")).counts,
+    };
+  } catch (e) {
+    console.error("[exportController] Export failed:", e);
+    return { success: false, error: e?.message || String(e) };
+  }
+}
+
+var exportController$1 = {
+  exportEverythingForApplication: exportEverythingForApplication$1,
+  // exported for tests
+  buildBundleFiles,
+  stripProviderCredentials,
+  SAFE_PROVIDER_FIELDS,
+  BUNDLE_SCHEMA_VERSION,
+};
+
 /**
  * notificationController.js
  *
@@ -66844,6 +67075,7 @@ const {
   getOnboardingStatus,
   markOnboardingCompleted,
 } = onboardingController$1;
+const { exportEverythingForApplication } = exportController$1;
 const {
   getRecentDashboards,
   addRecentDashboard,
@@ -66951,6 +67183,7 @@ var controller = {
   describeLocalKey,
   getOnboardingStatus,
   markOnboardingCompleted,
+  exportEverythingForApplication,
   getRecentDashboards,
   addRecentDashboard,
   clearRecentDashboards,
@@ -66972,7 +67205,7 @@ var controller = {
   mcpDashServerController: mcpDashServerController$2,
 };
 
-const { ipcRenderer: ipcRenderer$q } = require$$0$2;
+const { ipcRenderer: ipcRenderer$r } = require$$0$2;
 const { SECURE_STORE_ENCRYPTION_CHECK } = events$8;
 /**
  * secureStoreApi
@@ -66994,7 +67227,7 @@ const { SECURE_STORE_ENCRYPTION_CHECK } = events$8;
  */
 const secureStoreApi$2 = {
   isEncryptionAvailable: () =>
-    ipcRenderer$q.invoke(SECURE_STORE_ENCRYPTION_CHECK, {}),
+    ipcRenderer$r.invoke(SECURE_STORE_ENCRYPTION_CHECK, {}),
 };
 
 var secureStoreApi_1 = secureStoreApi$2;
@@ -67005,7 +67238,7 @@ var secureStoreApi_1 = secureStoreApi$2;
  * Handle the workspace configuration file
  */
 
-const { ipcRenderer: ipcRenderer$p } = require$$0$2;
+const { ipcRenderer: ipcRenderer$q } = require$$0$2;
 const {
   WORKSPACE_LIST,
   WORKSPACE_SAVE,
@@ -67022,7 +67255,7 @@ const workspaceApi$2 = {
    */
   listWorkspacesForApplication: (appId) => {
     console.log("listWorkspacesForApplication called with appId:", appId);
-    return ipcRenderer$p.invoke(WORKSPACE_LIST, { appId });
+    return ipcRenderer$q.invoke(WORKSPACE_LIST, { appId });
   },
 
   /**
@@ -67033,7 +67266,7 @@ const workspaceApi$2 = {
    * @returns
    */
   saveWorkspaceForApplication: (appId, data) =>
-    ipcRenderer$p.invoke(WORKSPACE_SAVE, { appId, data }),
+    ipcRenderer$q.invoke(WORKSPACE_SAVE, { appId, data }),
 
   /**
    * deleteWorkspaceForApplication
@@ -67043,7 +67276,7 @@ const workspaceApi$2 = {
    * @returns
    */
   deleteWorkspaceForApplication: (appId, workspaceId) =>
-    ipcRenderer$p.invoke(WORKSPACE_DELETE, { appId, workspaceId }),
+    ipcRenderer$q.invoke(WORKSPACE_DELETE, { appId, workspaceId }),
 };
 
 var workspaceApi_1 = workspaceApi$2;
@@ -67055,13 +67288,13 @@ var workspaceApi_1 = workspaceApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$o } = require$$0$2;
+const { ipcRenderer: ipcRenderer$p } = require$$0$2;
 
 const { LAYOUT_LIST } = events$8;
 
 const layoutApi$2 = {
   listLayoutsForApplication: (appId) =>
-    ipcRenderer$o.invoke(LAYOUT_LIST, { appId }),
+    ipcRenderer$p.invoke(LAYOUT_LIST, { appId }),
 };
 
 var layoutApi_1 = layoutApi$2;
@@ -67073,7 +67306,7 @@ var layoutApi_1 = layoutApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$n } = require$$0$2;
+const { ipcRenderer: ipcRenderer$o } = require$$0$2;
 
 const {
   DATA_JSON_TO_CSV_FILE,
@@ -67091,7 +67324,7 @@ const {
 const dataApi$2 = {
   // convert a json array of objects to a csv string and save to file
   convertJsonToCsvFile: (appId, jsonObject, filename) =>
-    ipcRenderer$n.invoke(DATA_JSON_TO_CSV_FILE, {
+    ipcRenderer$o.invoke(DATA_JSON_TO_CSV_FILE, {
       appId,
       jsonObject,
       filename,
@@ -67099,10 +67332,10 @@ const dataApi$2 = {
 
   // convert a json array of objects to a csv string and return a string
   convertJsonToCsvString: (appId, jsonObject) =>
-    ipcRenderer$n.invoke(DATA_JSON_TO_CSV_STRING, { appId, jsonObject }),
+    ipcRenderer$o.invoke(DATA_JSON_TO_CSV_STRING, { appId, jsonObject }),
 
   parseXMLStream: (filepath, outpath, start) =>
-    ipcRenderer$n.invoke(PARSE_XML_STREAM, {
+    ipcRenderer$o.invoke(PARSE_XML_STREAM, {
       filepath,
       outpath,
       start,
@@ -67116,7 +67349,7 @@ const dataApi$2 = {
     headers = null,
     limit = null,
   ) => {
-    ipcRenderer$n.invoke(PARSE_CSV_STREAM, {
+    ipcRenderer$o.invoke(PARSE_CSV_STREAM, {
       filepath,
       outpath,
       delimiter,
@@ -67127,15 +67360,15 @@ const dataApi$2 = {
   },
 
   readLinesFromFile: (filepath, lineCount) => {
-    ipcRenderer$n.invoke(READ_LINES, { filepath, lineCount });
+    ipcRenderer$o.invoke(READ_LINES, { filepath, lineCount });
   },
 
   readJSONFromFile: (filepath, objectCount = null) => {
-    ipcRenderer$n.invoke(READ_JSON, { filepath, objectCount });
+    ipcRenderer$o.invoke(READ_JSON, { filepath, objectCount });
   },
 
   readDataFromURL: (url, toFilepath, widgetId = null, token = null) => {
-    ipcRenderer$n.invoke(READ_DATA_URL, { url, toFilepath, widgetId, token });
+    ipcRenderer$o.invoke(READ_DATA_URL, { url, toFilepath, widgetId, token });
   },
 
   /*
@@ -67151,7 +67384,7 @@ const dataApi$2 = {
     widgetId = null,
     token = null,
   ) =>
-    ipcRenderer$n.invoke(DATA_SAVE_TO_FILE, {
+    ipcRenderer$o.invoke(DATA_SAVE_TO_FILE, {
       data,
       filename,
       append,
@@ -67170,7 +67403,7 @@ const dataApi$2 = {
    *   gates the gate itself).
    */
   readData: (filename, returnEmpty = [], widgetId = null, token = null) =>
-    ipcRenderer$n.invoke(DATA_READ_FROM_FILE, {
+    ipcRenderer$o.invoke(DATA_READ_FROM_FILE, {
       filename,
       returnEmpty,
       widgetId,
@@ -67182,7 +67415,7 @@ const dataApi$2 = {
    * @returns
    */
   transformFile: (filepath, outFilepath, mappingFunctionBody, args) => {
-    ipcRenderer$n.invoke(TRANSFORM_FILE, {
+    ipcRenderer$o.invoke(TRANSFORM_FILE, {
       filepath,
       outFilepath,
       mappingFunctionBody,
@@ -67200,7 +67433,7 @@ var dataApi_1 = dataApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$m } = require$$0$2;
+const { ipcRenderer: ipcRenderer$n } = require$$0$2;
 
 const {
   SETTINGS_GET,
@@ -67211,14 +67444,14 @@ const {
 } = events$8;
 
 const settingsApi$2 = {
-  getSettingsForApplication: () => ipcRenderer$m.invoke(SETTINGS_GET, {}),
+  getSettingsForApplication: () => ipcRenderer$n.invoke(SETTINGS_GET, {}),
   saveSettingsForApplication: (data) =>
-    ipcRenderer$m.invoke(SETTINGS_SAVE, { data }),
-  getDataDirectory: () => ipcRenderer$m.invoke(SETTINGS_GET_DATA_DIR, {}),
+    ipcRenderer$n.invoke(SETTINGS_SAVE, { data }),
+  getDataDirectory: () => ipcRenderer$n.invoke(SETTINGS_GET_DATA_DIR, {}),
   setDataDirectory: (dataDirectory) =>
-    ipcRenderer$m.invoke(SETTINGS_SET_DATA_DIR, { dataDirectory }),
+    ipcRenderer$n.invoke(SETTINGS_SET_DATA_DIR, { dataDirectory }),
   migrateDataDirectory: (oldDirectory, newDirectory) =>
-    ipcRenderer$m.invoke(SETTINGS_MIGRATE_DATA_DIR, {
+    ipcRenderer$n.invoke(SETTINGS_MIGRATE_DATA_DIR, {
       oldDirectory,
       newDirectory,
     }),
@@ -67233,7 +67466,7 @@ var settingsApi_1 = settingsApi$2;
  * Provides file/folder chooser dialogs.
  */
 
-const { ipcRenderer: ipcRenderer$l } = require$$0$2;
+const { ipcRenderer: ipcRenderer$m } = require$$0$2;
 
 const { CHOOSE_FILE } = events$8;
 
@@ -67246,7 +67479,7 @@ const dialogApi$2 = {
    * @returns {Promise<string|null>} selected file/folder path, or null if cancelled
    */
   chooseFile: (allowFile = true, extensions = ["*"]) => {
-    return ipcRenderer$l.invoke(CHOOSE_FILE, { allowFile, extensions });
+    return ipcRenderer$m.invoke(CHOOSE_FILE, { allowFile, extensions });
   },
 
   /**
@@ -67271,7 +67504,7 @@ const dialogApi$2 = {
       typeof options.allowFile === "boolean" ? options.allowFile : allowFile;
     const resolvedExtensions = options.extensions || extensions;
 
-    const filePath = await ipcRenderer$l.invoke(CHOOSE_FILE, {
+    const filePath = await ipcRenderer$m.invoke(CHOOSE_FILE, {
       allowFile: resolvedAllowFile,
       extensions: resolvedExtensions,
     });
@@ -67298,7 +67531,7 @@ var dialogApi_1 = dialogApi$2;
  * mainApi.widgets.uninstall('Weather')
  */
 
-const { ipcRenderer: ipcRenderer$k } = require$$0$2;
+const { ipcRenderer: ipcRenderer$l } = require$$0$2;
 
 const widgetApi$2 = {
   /**
@@ -67307,7 +67540,7 @@ const widgetApi$2 = {
    */
   list: async () => {
     try {
-      return await ipcRenderer$k.invoke("widget:list");
+      return await ipcRenderer$l.invoke("widget:list");
     } catch (error) {
       console.error("[WidgetApi] Error listing widgets:", error);
       throw error;
@@ -67321,7 +67554,7 @@ const widgetApi$2 = {
    */
   get: async (widgetName) => {
     try {
-      return await ipcRenderer$k.invoke("widget:get", widgetName);
+      return await ipcRenderer$l.invoke("widget:get", widgetName);
     } catch (error) {
       console.error(`[WidgetApi] Error getting widget ${widgetName}:`, error);
       throw error;
@@ -67352,7 +67585,7 @@ const widgetApi$2 = {
       console.log(
         `[WidgetApi] Installing widget: ${widgetName} from ${downloadUrl}`,
       );
-      const config = await ipcRenderer$k.invoke(
+      const config = await ipcRenderer$l.invoke(
         "widget:install",
         widgetName,
         downloadUrl,
@@ -67392,7 +67625,7 @@ const widgetApi$2 = {
       console.log(
         `[WidgetApi] Installing local widget: ${widgetName} from ${localPath}`,
       );
-      const config = await ipcRenderer$k.invoke(
+      const config = await ipcRenderer$l.invoke(
         "widget:install-local",
         widgetName,
         localPath,
@@ -67423,7 +67656,7 @@ const widgetApi$2 = {
   loadFolder: async (folderPath) => {
     try {
       console.log(`[WidgetApi] Loading widgets from folder: ${folderPath}`);
-      const results = await ipcRenderer$k.invoke(
+      const results = await ipcRenderer$l.invoke(
         "widget:load-folder",
         folderPath,
       );
@@ -67447,7 +67680,7 @@ const widgetApi$2 = {
   uninstall: async (widgetName) => {
     try {
       console.log(`[WidgetApi] Uninstalling widget: ${widgetName}`);
-      const success = await ipcRenderer$k.invoke("widget:uninstall", widgetName);
+      const success = await ipcRenderer$l.invoke("widget:uninstall", widgetName);
       if (success) {
         console.log(`[WidgetApi] ✓ Widget ${widgetName} uninstalled`);
       } else {
@@ -67470,7 +67703,7 @@ const widgetApi$2 = {
    */
   getCachePath: async () => {
     try {
-      return await ipcRenderer$k.invoke("widget:cache-path");
+      return await ipcRenderer$l.invoke("widget:cache-path");
     } catch (error) {
       console.error("[WidgetApi] Error getting cache path:", error);
       throw error;
@@ -67484,7 +67717,7 @@ const widgetApi$2 = {
    */
   getStoragePath: async () => {
     try {
-      return await ipcRenderer$k.invoke("widget:storage-path");
+      return await ipcRenderer$l.invoke("widget:storage-path");
     } catch (error) {
       console.error("[WidgetApi] Error getting storage path:", error);
       throw error;
@@ -67501,7 +67734,7 @@ const widgetApi$2 = {
   setStoragePath: async (customPath) => {
     try {
       console.log(`[WidgetApi] Setting storage path to: ${customPath}`);
-      const result = await ipcRenderer$k.invoke(
+      const result = await ipcRenderer$l.invoke(
         "widget:set-storage-path",
         customPath,
       );
@@ -67523,7 +67756,7 @@ const widgetApi$2 = {
    */
   getComponentConfigs: async () => {
     try {
-      return await ipcRenderer$k.invoke("widget:get-component-configs");
+      return await ipcRenderer$l.invoke("widget:get-component-configs");
     } catch (error) {
       console.error("[WidgetApi] Error getting component configs:", error);
       return [];
@@ -67538,7 +67771,7 @@ const widgetApi$2 = {
    */
   readBundle: async (widgetName) => {
     try {
-      return await ipcRenderer$k.invoke("widget:read-bundle", widgetName);
+      return await ipcRenderer$l.invoke("widget:read-bundle", widgetName);
     } catch (error) {
       console.error(
         `[WidgetApi] Error reading bundle for ${widgetName}:`,
@@ -67557,7 +67790,7 @@ const widgetApi$2 = {
    */
   readSources: async (widgetName, componentName) => {
     try {
-      return await ipcRenderer$k.invoke("widget:read-sources", {
+      return await ipcRenderer$l.invoke("widget:read-sources", {
         widgetName,
         componentName,
       });
@@ -67577,7 +67810,7 @@ const widgetApi$2 = {
    */
   readAllBundles: async () => {
     try {
-      return await ipcRenderer$k.invoke("widget:read-all-bundles");
+      return await ipcRenderer$l.invoke("widget:read-all-bundles");
     } catch (error) {
       console.error("[WidgetApi] Error reading all bundles:", error);
       return [];
@@ -67597,7 +67830,7 @@ const widgetApi$2 = {
    * });
    */
   onInstalled: (callback) => {
-    ipcRenderer$k.on("widget:installed", (event, data) => {
+    ipcRenderer$l.on("widget:installed", (event, data) => {
       callback(data);
     });
   },
@@ -67614,7 +67847,7 @@ const widgetApi$2 = {
    * });
    */
   onUninstalled: (callback) => {
-    ipcRenderer$k.on("widget:uninstalled", (event, data) => {
+    ipcRenderer$l.on("widget:uninstalled", (event, data) => {
       callback(data);
     });
   },
@@ -67632,7 +67865,7 @@ const widgetApi$2 = {
    * });
    */
   onLoaded: (callback) => {
-    ipcRenderer$k.on("widgets:loaded", (event, data) => {
+    ipcRenderer$l.on("widgets:loaded", (event, data) => {
       callback(data);
     });
   },
@@ -67643,7 +67876,7 @@ const widgetApi$2 = {
    * @param {Function} callback - The callback to remove
    */
   removeInstalledListener: (callback) => {
-    ipcRenderer$k.removeListener("widget:installed", callback);
+    ipcRenderer$l.removeListener("widget:installed", callback);
   },
 
   /**
@@ -67652,7 +67885,7 @@ const widgetApi$2 = {
    * @param {Function} callback - The callback to remove
    */
   removeUninstalledListener: (callback) => {
-    ipcRenderer$k.removeListener("widget:uninstalled", callback);
+    ipcRenderer$l.removeListener("widget:uninstalled", callback);
   },
 
   /**
@@ -67661,7 +67894,7 @@ const widgetApi$2 = {
    * @param {Function} callback - The callback to remove
    */
   removeLoadedListener: (callback) => {
-    ipcRenderer$k.removeListener("widgets:loaded", callback);
+    ipcRenderer$l.removeListener("widgets:loaded", callback);
   },
 };
 
@@ -67674,7 +67907,7 @@ var widgetApi_1 = widgetApi$2;
  * Communicates with main process via IPC to handle encryption and file storage
  */
 
-const { ipcRenderer: ipcRenderer$j } = require$$0$2;
+const { ipcRenderer: ipcRenderer$k } = require$$0$2;
 const {
   PROVIDER_SAVE,
   PROVIDER_LIST,
@@ -67712,7 +67945,7 @@ const providerApi$2 = {
     // value, preserve what's on disk" from "caller explicitly unset it".
     isDefaultForType = undefined,
   ) =>
-    ipcRenderer$j.invoke(PROVIDER_SAVE, {
+    ipcRenderer$k.invoke(PROVIDER_SAVE, {
       appId,
       providerName,
       providerType,
@@ -67732,7 +67965,7 @@ const providerApi$2 = {
    * @param {String} appId - the appId specified in the dash initialization
    * @returns {Promise<Array>} Array of provider objects with name, type, credentials
    */
-  listProviders: (appId) => ipcRenderer$j.invoke(PROVIDER_LIST, { appId }),
+  listProviders: (appId) => ipcRenderer$k.invoke(PROVIDER_LIST, { appId }),
 
   /**
    * getProvider
@@ -67744,7 +67977,7 @@ const providerApi$2 = {
    * @returns {Promise<Object>} Provider object with name, type, credentials
    */
   getProvider: (appId, providerName) =>
-    ipcRenderer$j.invoke(PROVIDER_GET, { appId, providerName }),
+    ipcRenderer$k.invoke(PROVIDER_GET, { appId, providerName }),
 
   /**
    * deleteProvider
@@ -67756,7 +67989,7 @@ const providerApi$2 = {
    * @returns {Promise}
    */
   deleteProvider: (appId, providerName) =>
-    ipcRenderer$j.invoke(PROVIDER_DELETE, { appId, providerName }),
+    ipcRenderer$k.invoke(PROVIDER_DELETE, { appId, providerName }),
 
   /**
    * listProvidersForApplication
@@ -67766,14 +67999,14 @@ const providerApi$2 = {
    * @param {String} appId - the appId specified in the dash initialization
    */
   listProvidersForApplication: (appId) => {
-    ipcRenderer$j
+    ipcRenderer$k
       .invoke(PROVIDER_LIST, { appId })
       .then((result) => {
         // Emit the event for ElectronDashboardApi to listen to
-        ipcRenderer$j.send("PROVIDER_LIST_COMPLETE", result);
+        ipcRenderer$k.send("PROVIDER_LIST_COMPLETE", result);
       })
       .catch((error) => {
-        ipcRenderer$j.send("PROVIDER_LIST_ERROR", {
+        ipcRenderer$k.send("PROVIDER_LIST_ERROR", {
           error: error.message,
         });
       });
@@ -67790,7 +68023,7 @@ const providerApi$2 = {
     providerType,
     credentials,
   ) => {
-    ipcRenderer$j
+    ipcRenderer$k
       .invoke(PROVIDER_SAVE, {
         appId,
         providerName,
@@ -67798,10 +68031,10 @@ const providerApi$2 = {
         credentials,
       })
       .then((result) => {
-        ipcRenderer$j.send("PROVIDER_SAVE_COMPLETE", result);
+        ipcRenderer$k.send("PROVIDER_SAVE_COMPLETE", result);
       })
       .catch((error) => {
-        ipcRenderer$j.send("PROVIDER_SAVE_ERROR", {
+        ipcRenderer$k.send("PROVIDER_SAVE_ERROR", {
           error: error.message,
         });
       });
@@ -67813,13 +68046,13 @@ const providerApi$2 = {
    * Event-listener-based version for use with ElectronDashboardApi
    */
   getProviderForApplication: (appId, providerName) => {
-    ipcRenderer$j
+    ipcRenderer$k
       .invoke(PROVIDER_GET, { appId, providerName })
       .then((result) => {
-        ipcRenderer$j.send("PROVIDER_GET_COMPLETE", result);
+        ipcRenderer$k.send("PROVIDER_GET_COMPLETE", result);
       })
       .catch((error) => {
-        ipcRenderer$j.send("PROVIDER_GET_ERROR", {
+        ipcRenderer$k.send("PROVIDER_GET_ERROR", {
           error: error.message,
         });
       });
@@ -67831,13 +68064,13 @@ const providerApi$2 = {
    * Event-listener-based version for use with ElectronDashboardApi
    */
   deleteProviderForApplication: (appId, providerName) => {
-    ipcRenderer$j
+    ipcRenderer$k
       .invoke(PROVIDER_DELETE, { appId, providerName })
       .then((result) => {
-        ipcRenderer$j.send("PROVIDER_DELETE_COMPLETE", result);
+        ipcRenderer$k.send("PROVIDER_DELETE_COMPLETE", result);
       })
       .catch((error) => {
-        ipcRenderer$j.send("PROVIDER_DELETE_ERROR", {
+        ipcRenderer$k.send("PROVIDER_DELETE_ERROR", {
           error: error.message,
         });
       });
@@ -67853,7 +68086,7 @@ var providerApi_1 = providerApi$2;
  * Communicates with main process via IPC to manage MCP server lifecycle.
  */
 
-const { ipcRenderer: ipcRenderer$i } = require$$0$2;
+const { ipcRenderer: ipcRenderer$j } = require$$0$2;
 const {
   MCP_START_SERVER,
   MCP_STOP_SERVER,
@@ -67892,7 +68125,7 @@ const mcpApi$2 = {
     workspaceId = null,
     pathScope = null,
   ) =>
-    ipcRenderer$i.invoke(MCP_START_SERVER, {
+    ipcRenderer$j.invoke(MCP_START_SERVER, {
       serverName,
       mcpConfig,
       credentials,
@@ -67909,7 +68142,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ success, serverName } | { error, message }>}
    */
   stopServer: (serverName, workspaceId = null) =>
-    ipcRenderer$i.invoke(MCP_STOP_SERVER, { serverName, workspaceId }),
+    ipcRenderer$j.invoke(MCP_STOP_SERVER, { serverName, workspaceId }),
 
   /**
    * listTools
@@ -67920,7 +68153,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ tools } | { error, message }>}
    */
   listTools: (serverName, workspaceId = null) =>
-    ipcRenderer$i.invoke(MCP_LIST_TOOLS, { serverName, workspaceId }),
+    ipcRenderer$j.invoke(MCP_LIST_TOOLS, { serverName, workspaceId }),
 
   /**
    * callTool
@@ -67949,7 +68182,7 @@ const mcpApi$2 = {
     workspaceId = null,
     token = null,
   ) =>
-    ipcRenderer$i.invoke(MCP_CALL_TOOL, {
+    ipcRenderer$j.invoke(MCP_CALL_TOOL, {
       serverName,
       toolName,
       args,
@@ -67968,7 +68201,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ resources } | { error, message }>}
    */
   listResources: (serverName, workspaceId = null) =>
-    ipcRenderer$i.invoke(MCP_LIST_RESOURCES, { serverName, workspaceId }),
+    ipcRenderer$j.invoke(MCP_LIST_RESOURCES, { serverName, workspaceId }),
 
   /**
    * readResource
@@ -67980,7 +68213,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ resource } | { error, message }>}
    */
   readResource: (serverName, uri, workspaceId = null) =>
-    ipcRenderer$i.invoke(MCP_READ_RESOURCE, { serverName, uri, workspaceId }),
+    ipcRenderer$j.invoke(MCP_READ_RESOURCE, { serverName, uri, workspaceId }),
 
   /**
    * getServerStatus
@@ -67991,7 +68224,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ status, tools, error }>}
    */
   getServerStatus: (serverName, workspaceId = null) =>
-    ipcRenderer$i.invoke(MCP_SERVER_STATUS, { serverName, workspaceId }),
+    ipcRenderer$j.invoke(MCP_SERVER_STATUS, { serverName, workspaceId }),
 
   /**
    * getCatalog
@@ -67999,7 +68232,7 @@ const mcpApi$2 = {
    *
    * @returns {Promise<{ catalog } | { error, message }>}
    */
-  getCatalog: () => ipcRenderer$i.invoke(MCP_GET_CATALOG),
+  getCatalog: () => ipcRenderer$j.invoke(MCP_GET_CATALOG),
 
   /**
    * getKnownExternalCatalog
@@ -68011,7 +68244,7 @@ const mcpApi$2 = {
    *
    * @returns {Promise<{ success, servers } | { error, message, servers }>}
    */
-  getKnownExternalCatalog: () => ipcRenderer$i.invoke(MCP_GET_KNOWN_EXTERNAL),
+  getKnownExternalCatalog: () => ipcRenderer$j.invoke(MCP_GET_KNOWN_EXTERNAL),
 
   /**
    * onInstallKnownExternalConfirm
@@ -68025,9 +68258,9 @@ const mcpApi$2 = {
    */
   onInstallKnownExternalConfirm: (callback) => {
     const handler = (_e, data) => callback(data);
-    ipcRenderer$i.on(MCP_INSTALL_KNOWN_EXTERNAL_CONFIRM$1, handler);
+    ipcRenderer$j.on(MCP_INSTALL_KNOWN_EXTERNAL_CONFIRM$1, handler);
     return () =>
-      ipcRenderer$i.removeListener(MCP_INSTALL_KNOWN_EXTERNAL_CONFIRM$1, handler);
+      ipcRenderer$j.removeListener(MCP_INSTALL_KNOWN_EXTERNAL_CONFIRM$1, handler);
   },
 
   /**
@@ -68038,7 +68271,7 @@ const mcpApi$2 = {
    * @param {{ confirmed: boolean, credentials?: object, error?: string }} result
    */
   sendInstallKnownExternalResult: (requestId, result) =>
-    ipcRenderer$i.send(MCP_INSTALL_KNOWN_EXTERNAL_RESULT$1, { requestId, result }),
+    ipcRenderer$j.send(MCP_INSTALL_KNOWN_EXTERNAL_RESULT$1, { requestId, result }),
 
   /**
    * runAuth
@@ -68050,7 +68283,7 @@ const mcpApi$2 = {
    * @returns {Promise<{ success } | { error, message }>}
    */
   runAuth: (mcpConfig, credentials, authCommand) =>
-    ipcRenderer$i.invoke(MCP_RUN_AUTH, { mcpConfig, credentials, authCommand }),
+    ipcRenderer$j.invoke(MCP_RUN_AUTH, { mcpConfig, credentials, authCommand }),
 };
 
 var mcpApi_1 = mcpApi$2;
@@ -68068,7 +68301,7 @@ var mcpApi_1 = mcpApi$2;
  * mainApi.registry.checkUpdates([{ name: "weather-widgets", version: "1.0.0" }])
  */
 
-const { ipcRenderer: ipcRenderer$h } = require$$0$2;
+const { ipcRenderer: ipcRenderer$i } = require$$0$2;
 
 const registryApi$2 = {
   /**
@@ -68078,7 +68311,7 @@ const registryApi$2 = {
    */
   fetchIndex: async (forceRefresh = false) => {
     try {
-      return await ipcRenderer$h.invoke("registry:fetch-index", forceRefresh);
+      return await ipcRenderer$i.invoke("registry:fetch-index", forceRefresh);
     } catch (error) {
       console.error("[RegistryApi] Error fetching index:", error);
       throw error;
@@ -68093,7 +68326,7 @@ const registryApi$2 = {
    */
   search: async (query = "", filters = {}) => {
     try {
-      return await ipcRenderer$h.invoke("registry:search", query, filters);
+      return await ipcRenderer$i.invoke("registry:search", query, filters);
     } catch (error) {
       console.error("[RegistryApi] Error searching registry:", error);
       throw error;
@@ -68107,7 +68340,7 @@ const registryApi$2 = {
    */
   getPackage: async (packageName) => {
     try {
-      return await ipcRenderer$h.invoke("registry:get-package", packageName);
+      return await ipcRenderer$i.invoke("registry:get-package", packageName);
     } catch (error) {
       console.error(
         `[RegistryApi] Error getting package ${packageName}:`,
@@ -68124,7 +68357,7 @@ const registryApi$2 = {
    */
   checkUpdates: async (installedWidgets = []) => {
     try {
-      return await ipcRenderer$h.invoke(
+      return await ipcRenderer$i.invoke(
         "registry:check-updates",
         installedWidgets,
       );
@@ -68142,7 +68375,7 @@ const registryApi$2 = {
    */
   searchDashboards: async (query = "", filters = {}) => {
     try {
-      return await ipcRenderer$h.invoke(
+      return await ipcRenderer$i.invoke(
         "registry:search-dashboards",
         query,
         filters,
@@ -68161,7 +68394,7 @@ const registryApi$2 = {
    */
   searchThemes: async (query = "", filters = {}) => {
     try {
-      return await ipcRenderer$h.invoke("registry:search-themes", query, filters);
+      return await ipcRenderer$i.invoke("registry:search-themes", query, filters);
     } catch (error) {
       console.error("[RegistryApi] Error searching themes:", error);
       throw error;
@@ -68183,7 +68416,7 @@ const registryApi$2 = {
    */
   publishWidget: async (appId, packageId, options = {}) => {
     try {
-      return await ipcRenderer$h.invoke("registry:publish-widget", {
+      return await ipcRenderer$i.invoke("registry:publish-widget", {
         appId,
         packageId,
         options,
@@ -68204,7 +68437,7 @@ const registryApi$2 = {
    */
   inspectWidgetPackage: async (packageId) => {
     try {
-      return await ipcRenderer$h.invoke("registry:inspect-widget-package", {
+      return await ipcRenderer$i.invoke("registry:inspect-widget-package", {
         packageId,
       });
     } catch (error) {
@@ -68225,7 +68458,7 @@ const registryApi$2 = {
    */
   scanWidgetDefaults: async (packageId) => {
     try {
-      return await ipcRenderer$h.invoke("registry:scan-widget-defaults", {
+      return await ipcRenderer$i.invoke("registry:scan-widget-defaults", {
         packageId,
       });
     } catch (error) {
@@ -68248,7 +68481,7 @@ const registryApi$2 = {
    */
   previewFetch: async (packageName, componentName = null) => {
     try {
-      return await ipcRenderer$h.invoke(
+      return await ipcRenderer$i.invoke(
         "registry:preview-fetch",
         packageName,
         componentName,
@@ -68274,7 +68507,7 @@ const registryApi$2 = {
    */
   fetchPackageManifest: async (packageName) => {
     try {
-      return await ipcRenderer$h.invoke(
+      return await ipcRenderer$i.invoke(
         "registry:fetch-package-manifest",
         packageName,
       );
@@ -68296,7 +68529,7 @@ var registryApi_1 = registryApi$2;
  * Handle the theme configuration file
  */
 
-const { ipcRenderer: ipcRenderer$g } = require$$0$2;
+const { ipcRenderer: ipcRenderer$h } = require$$0$2;
 
 const {
   THEME_LIST,
@@ -68309,17 +68542,17 @@ const {
 
 const themeApi$2 = {
   listThemesForApplication: (appId) =>
-    ipcRenderer$g.invoke(THEME_LIST, { appId }),
+    ipcRenderer$h.invoke(THEME_LIST, { appId }),
   saveThemeForApplication: (appId, themeName, themeObject) =>
-    ipcRenderer$g.invoke(THEME_SAVE, { appId, themeName, themeObject }),
+    ipcRenderer$h.invoke(THEME_SAVE, { appId, themeName, themeObject }),
   deleteThemeForApplication: (appId, themeKey) =>
-    ipcRenderer$g.invoke(THEME_DELETE, { appId, themeKey }),
+    ipcRenderer$h.invoke(THEME_DELETE, { appId, themeKey }),
   publishTheme: (appId, themeKey, options) =>
-    ipcRenderer$g.invoke(THEME_PUBLISH, { appId, themeKey, options }),
+    ipcRenderer$h.invoke(THEME_PUBLISH, { appId, themeKey, options }),
   installThemeFromRegistry: (appId, packageName) =>
-    ipcRenderer$g.invoke(THEME_INSTALL_FROM_REGISTRY, { appId, packageName }),
+    ipcRenderer$h.invoke(THEME_INSTALL_FROM_REGISTRY, { appId, packageName }),
   getThemePublishPreview: (appId, themeKey) =>
-    ipcRenderer$g.invoke(THEME_PUBLISH_PREVIEW, { appId, themeKey }),
+    ipcRenderer$h.invoke(THEME_PUBLISH_PREVIEW, { appId, themeKey }),
 };
 
 var themeApi_1 = themeApi$2;
@@ -68331,7 +68564,7 @@ var themeApi_1 = themeApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$f } = require$$0$2;
+const { ipcRenderer: ipcRenderer$g } = require$$0$2;
 
 const {
   ALGOLIA_LIST_INDICES,
@@ -68344,10 +68577,10 @@ const {
 
 const algoliaApi$2 = {
   listIndices: (application) =>
-    ipcRenderer$f.invoke(ALGOLIA_LIST_INDICES, application),
+    ipcRenderer$g.invoke(ALGOLIA_LIST_INDICES, application),
 
   browseObjects: (appId, apiKey, indexName) => {
-    ipcRenderer$f.invoke(ALGOLIA_BROWSE_OBJECTS, {
+    ipcRenderer$g.invoke(ALGOLIA_BROWSE_OBJECTS, {
       appId,
       apiKey,
       indexName,
@@ -68356,7 +68589,7 @@ const algoliaApi$2 = {
   },
 
   getAnalyticsForQuery: (application, indexName, query) =>
-    ipcRenderer$f.invoke(ALGOLIA_ANALYTICS_FOR_QUERY, {
+    ipcRenderer$g.invoke(ALGOLIA_ANALYTICS_FOR_QUERY, {
       application,
       indexName,
       query,
@@ -68369,7 +68602,7 @@ const algoliaApi$2 = {
     dir,
     createIfNotExists = false,
   ) =>
-    ipcRenderer$f.invoke(ALGOLIA_PARTIAL_UPDATE_OBJECTS, {
+    ipcRenderer$g.invoke(ALGOLIA_PARTIAL_UPDATE_OBJECTS, {
       appId,
       apiKey,
       indexName,
@@ -68378,7 +68611,7 @@ const algoliaApi$2 = {
     }),
 
   createBatchesFromFile: (filepath, batchFilepath, batchSize) => {
-    ipcRenderer$f.invoke(ALGOLIA_CREATE_BATCH, {
+    ipcRenderer$g.invoke(ALGOLIA_CREATE_BATCH, {
       filepath,
       batchFilepath,
       batchSize,
@@ -68386,7 +68619,7 @@ const algoliaApi$2 = {
   },
 
   browseObjectsToFile: (appId, apiKey, indexName, toFilename, query = "") => {
-    ipcRenderer$f.invoke(ALGOLIA_BROWSE_OBJECTS, {
+    ipcRenderer$g.invoke(ALGOLIA_BROWSE_OBJECTS, {
       appId,
       apiKey,
       indexName,
@@ -68396,7 +68629,7 @@ const algoliaApi$2 = {
   },
 
   search: (appId, apiKey, indexName, query = "", options = {}) =>
-    ipcRenderer$f.invoke(ALGOLIA_SEARCH, {
+    ipcRenderer$g.invoke(ALGOLIA_SEARCH, {
       appId,
       apiKey,
       indexName,
@@ -68411,14 +68644,14 @@ var algoliaApi_1 = algoliaApi$2;
  * openAI
  */
 
-const { ipcRenderer: ipcRenderer$e } = require$$0$2;
+const { ipcRenderer: ipcRenderer$f } = require$$0$2;
 
 const { OPENAI_DESCRIBE_IMAGE } = openaiEvents$1;
 
 const openaiApi$2 = {
   // convert a json array of objects to a csv string and save to file
   describeImage: (imageUrl, apiKey, prompt = "What's in this image?") =>
-    ipcRenderer$e.invoke(OPENAI_DESCRIBE_IMAGE, { imageUrl, apiKey, prompt }),
+    ipcRenderer$f.invoke(OPENAI_DESCRIBE_IMAGE, { imageUrl, apiKey, prompt }),
 };
 
 var openaiApi_1 = openaiApi$2;
@@ -68429,14 +68662,14 @@ var openaiApi_1 = openaiApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$d } = require$$0$2;
+const { ipcRenderer: ipcRenderer$e } = require$$0$2;
 
 const { MENU_ITEMS_SAVE, MENU_ITEMS_LIST } = events$8;
 
 const menuItemsApi$2 = {
   saveMenuItem: (appId, menuItem) =>
-    ipcRenderer$d.invoke(MENU_ITEMS_SAVE, { appId, menuItem }),
-  listMenuItems: (appId) => ipcRenderer$d.invoke(MENU_ITEMS_LIST, { appId }),
+    ipcRenderer$e.invoke(MENU_ITEMS_SAVE, { appId, menuItem }),
+  listMenuItems: (appId) => ipcRenderer$e.invoke(MENU_ITEMS_LIST, { appId }),
 };
 
 var menuItemsApi_1 = menuItemsApi$2;
@@ -68449,7 +68682,7 @@ var menuItemsApi_1 = menuItemsApi$2;
  * tool-use events, and request cancellation.
  */
 
-const { ipcRenderer: ipcRenderer$c } = require$$0$2;
+const { ipcRenderer: ipcRenderer$d } = require$$0$2;
 const {
   LLM_SEND_MESSAGE,
   LLM_ABORT_REQUEST,
@@ -68471,7 +68704,7 @@ const _listenerMap = new Map();
 function _addListener(channel, callback) {
   const id = String(++_nextListenerId);
   const wrapped = (_event, data) => callback(data);
-  ipcRenderer$c.on(channel, wrapped);
+  ipcRenderer$d.on(channel, wrapped);
   _listenerMap.set(id, { channel, wrapped });
   return id;
 }
@@ -68486,7 +68719,7 @@ const llmApi$2 = {
    * @returns {Promise<void>}
    */
   sendMessage: (requestId, params) =>
-    ipcRenderer$c.invoke(LLM_SEND_MESSAGE, { requestId, ...params }),
+    ipcRenderer$d.invoke(LLM_SEND_MESSAGE, { requestId, ...params }),
 
   /**
    * abortRequest
@@ -68496,7 +68729,7 @@ const llmApi$2 = {
    * @returns {Promise<{ success: boolean }>}
    */
   abortRequest: (requestId) =>
-    ipcRenderer$c.invoke(LLM_ABORT_REQUEST, { requestId }),
+    ipcRenderer$d.invoke(LLM_ABORT_REQUEST, { requestId }),
 
   /**
    * listConnectedTools
@@ -68504,7 +68737,7 @@ const llmApi$2 = {
    *
    * @returns {Promise<Array<{ serverName, tools, resources, status }>>}
    */
-  listConnectedTools: () => ipcRenderer$c.invoke(LLM_LIST_CONNECTED_TOOLS),
+  listConnectedTools: () => ipcRenderer$d.invoke(LLM_LIST_CONNECTED_TOOLS),
 
   /**
    * checkCliAvailable
@@ -68512,7 +68745,7 @@ const llmApi$2 = {
    *
    * @returns {Promise<{ available: boolean, path?: string }>}
    */
-  checkCliAvailable: () => ipcRenderer$c.invoke(LLM_CHECK_CLI_AVAILABLE),
+  checkCliAvailable: () => ipcRenderer$d.invoke(LLM_CHECK_CLI_AVAILABLE),
 
   /**
    * clearCliSession
@@ -68522,7 +68755,7 @@ const llmApi$2 = {
    * @returns {Promise<{ success: boolean }>}
    */
   clearCliSession: (widgetUuid) =>
-    ipcRenderer$c.invoke(LLM_CLEAR_CLI_SESSION, { widgetUuid }),
+    ipcRenderer$d.invoke(LLM_CLEAR_CLI_SESSION, { widgetUuid }),
 
   /**
    * getCliSessionStatus
@@ -68532,7 +68765,7 @@ const llmApi$2 = {
    * @returns {Promise<{ hasSession: boolean, sessionId?: string, isProcessActive: boolean }>}
    */
   getCliSessionStatus: (widgetUuid) =>
-    ipcRenderer$c.invoke(LLM_CLI_SESSION_STATUS, { widgetUuid }),
+    ipcRenderer$d.invoke(LLM_CLI_SESSION_STATUS, { widgetUuid }),
 
   /**
    * endCliSession
@@ -68542,7 +68775,7 @@ const llmApi$2 = {
    * @returns {Promise<{ success: boolean }>}
    */
   endCliSession: (widgetUuid) =>
-    ipcRenderer$c.invoke(LLM_CLI_END_SESSION, { widgetUuid }),
+    ipcRenderer$d.invoke(LLM_CLI_END_SESSION, { widgetUuid }),
 
   // --- Stream event listeners ---
   // Each on* method returns an opaque string ID. Strings cross the
@@ -68576,7 +68809,7 @@ const llmApi$2 = {
     const listenerId = id !== undefined ? String(id) : String(idOrChannel);
     const entry = _listenerMap.get(listenerId);
     if (entry) {
-      ipcRenderer$c.removeListener(entry.channel, entry.wrapped);
+      ipcRenderer$d.removeListener(entry.channel, entry.wrapped);
       _listenerMap.delete(listenerId);
     }
   },
@@ -68588,14 +68821,14 @@ const llmApi$2 = {
    */
   removeAllStreamListeners: () => {
     for (const [, entry] of _listenerMap) {
-      ipcRenderer$c.removeListener(entry.channel, entry.wrapped);
+      ipcRenderer$d.removeListener(entry.channel, entry.wrapped);
     }
     _listenerMap.clear();
-    ipcRenderer$c.removeAllListeners(LLM_STREAM_DELTA);
-    ipcRenderer$c.removeAllListeners(LLM_STREAM_TOOL_CALL);
-    ipcRenderer$c.removeAllListeners(LLM_STREAM_TOOL_RESULT);
-    ipcRenderer$c.removeAllListeners(LLM_STREAM_COMPLETE);
-    ipcRenderer$c.removeAllListeners(LLM_STREAM_ERROR);
+    ipcRenderer$d.removeAllListeners(LLM_STREAM_DELTA);
+    ipcRenderer$d.removeAllListeners(LLM_STREAM_TOOL_CALL);
+    ipcRenderer$d.removeAllListeners(LLM_STREAM_TOOL_RESULT);
+    ipcRenderer$d.removeAllListeners(LLM_STREAM_COMPLETE);
+    ipcRenderer$d.removeAllListeners(LLM_STREAM_ERROR);
   },
 };
 
@@ -68608,7 +68841,7 @@ var llmApi_1 = llmApi$2;
  * Exposed via contextBridge through mainApi.
  */
 
-const { ipcRenderer: ipcRenderer$b } = require$$0$2;
+const { ipcRenderer: ipcRenderer$c } = require$$0$2;
 const {
   DASHBOARD_CONFIG_EXPORT,
   DASHBOARD_CONFIG_SELECT_FILE,
@@ -68635,7 +68868,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Result with success, filePath, and config
    */
   exportDashboardConfig: (appId, workspaceId, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_EXPORT, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_EXPORT, {
       appId,
       workspaceId,
       options,
@@ -68648,7 +68881,7 @@ const dashboardConfigApi$2 = {
    *
    * @returns {Promise<Object>} Result with success, filePath, and dashboardConfig preview
    */
-  selectDashboardFile: () => ipcRenderer$b.invoke(DASHBOARD_CONFIG_SELECT_FILE),
+  selectDashboardFile: () => ipcRenderer$c.invoke(DASHBOARD_CONFIG_SELECT_FILE),
 
   /**
    * Import a dashboard config from a ZIP file.
@@ -68660,7 +68893,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Result with success, workspace, and summary
    */
   importDashboardConfig: (appId, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_IMPORT, { appId, ...options }),
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_IMPORT, { appId, ...options }),
 
   /**
    * Install a dashboard from the registry by package name.
@@ -68678,7 +68911,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Result with success, workspace, and summary
    */
   installDashboardFromRegistry: (appId, packageName, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_INSTALL, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_INSTALL, {
       appId,
       packageName,
       options,
@@ -68692,7 +68925,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Compatibility report with per-widget status
    */
   checkDashboardCompatibility: (appId, dashboardWidgets) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_COMPATIBILITY, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_COMPATIBILITY, {
       appId,
       dashboardWidgets,
     }),
@@ -68708,7 +68941,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Result with success, manifest, filePath
    */
   prepareDashboardForPublish: (appId, workspaceId, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_PUBLISH, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_PUBLISH, {
       appId,
       workspaceId,
       options,
@@ -68727,7 +68960,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} { success, widgets, theme }
    */
   collectDashboardDependencies: (appId, workspaceId, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_COLLECT_DEPENDENCIES, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_COLLECT_DEPENDENCIES, {
       appId,
       workspaceId,
       options,
@@ -68744,7 +68977,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} { success, widgets, theme, registryError? }
    */
   getDashboardPublishPlan: (appId, workspaceId, options = {}) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_PUBLISH_PLAN, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_PUBLISH_PLAN, {
       appId,
       workspaceId,
       options,
@@ -68758,7 +68991,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Preview with metadata, widgets, wiring, compatibility
    */
   getDashboardPreview: (packageName) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_PREVIEW, { packageName }),
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_PREVIEW, { packageName }),
 
   /**
    * Check installed dashboards for available updates.
@@ -68767,7 +69000,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Result with updates array
    */
   checkDashboardUpdates: (appId) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_CHECK_UPDATES, { appId }),
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_CHECK_UPDATES, { appId }),
 
   /**
    * Get provider setup manifest for a dashboard's requirements.
@@ -68777,7 +69010,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Setup manifest with per-provider status
    */
   getProviderSetupManifest: (appId, requiredProviders) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_PROVIDER_SETUP, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_PROVIDER_SETUP, {
       appId,
       requiredProviders,
     }),
@@ -68791,7 +69024,7 @@ const dashboardConfigApi$2 = {
    * @returns {Promise<Object>} Preview with dashboardName, widgetCount, widgets, componentNames
    */
   getPublishPreview: (appId, workspaceId) =>
-    ipcRenderer$b.invoke(DASHBOARD_CONFIG_PUBLISH_PREVIEW, {
+    ipcRenderer$c.invoke(DASHBOARD_CONFIG_PUBLISH_PREVIEW, {
       appId,
       workspaceId,
     }),
@@ -68805,9 +69038,9 @@ const dashboardConfigApi$2 = {
    */
   onInstallProgress: (callback) => {
     const handler = (_event, data) => callback(data);
-    ipcRenderer$b.on(DASHBOARD_CONFIG_INSTALL_PROGRESS, handler);
+    ipcRenderer$c.on(DASHBOARD_CONFIG_INSTALL_PROGRESS, handler);
     return () =>
-      ipcRenderer$b.removeListener(DASHBOARD_CONFIG_INSTALL_PROGRESS, handler);
+      ipcRenderer$c.removeListener(DASHBOARD_CONFIG_INSTALL_PROGRESS, handler);
   },
 };
 
@@ -68820,7 +69053,7 @@ var dashboardConfigApi_1 = dashboardConfigApi$2;
  * Exposed via contextBridge through mainApi.
  */
 
-const { ipcRenderer: ipcRenderer$a } = require$$0$2;
+const { ipcRenderer: ipcRenderer$b } = require$$0$2;
 const {
   REGISTRY_AUTH_INITIATE_LOGIN,
   REGISTRY_AUTH_POLL_TOKEN,
@@ -68841,7 +69074,7 @@ const registryAuthApi$2 = {
    *
    * @returns {Promise<Object>} { deviceCode, userCode, verificationUrl, verificationUrlComplete, expiresIn, interval }
    */
-  initiateLogin: () => ipcRenderer$a.invoke(REGISTRY_AUTH_INITIATE_LOGIN),
+  initiateLogin: () => ipcRenderer$b.invoke(REGISTRY_AUTH_INITIATE_LOGIN),
 
   /**
    * Poll for token after user completes browser auth.
@@ -68850,26 +69083,26 @@ const registryAuthApi$2 = {
    * @returns {Promise<Object>} { status: 'pending' | 'authorized' | 'expired', token?, userId? }
    */
   pollToken: (deviceCode) =>
-    ipcRenderer$a.invoke(REGISTRY_AUTH_POLL_TOKEN, { deviceCode }),
+    ipcRenderer$b.invoke(REGISTRY_AUTH_POLL_TOKEN, { deviceCode }),
 
   /**
    * Get current auth status.
    *
    * @returns {Promise<Object>} { authenticated: boolean, userId?: string }
    */
-  getStatus: () => ipcRenderer$a.invoke(REGISTRY_AUTH_GET_STATUS),
+  getStatus: () => ipcRenderer$b.invoke(REGISTRY_AUTH_GET_STATUS),
 
   /**
    * Get the authenticated user's registry profile.
    *
    * @returns {Promise<Object|null>} User profile or null
    */
-  getProfile: () => ipcRenderer$a.invoke(REGISTRY_AUTH_GET_PROFILE),
+  getProfile: () => ipcRenderer$b.invoke(REGISTRY_AUTH_GET_PROFILE),
 
   /**
    * Logout from registry.
    */
-  logout: () => ipcRenderer$a.invoke(REGISTRY_AUTH_LOGOUT),
+  logout: () => ipcRenderer$b.invoke(REGISTRY_AUTH_LOGOUT),
 
   /**
    * Publish a ZIP to the registry.
@@ -68879,7 +69112,7 @@ const registryAuthApi$2 = {
    * @returns {Promise<Object>} { success, registryUrl, packageId, version, error? }
    */
   publish: (zipPath, manifest) =>
-    ipcRenderer$a.invoke(REGISTRY_AUTH_PUBLISH, { zipPath, manifest }),
+    ipcRenderer$b.invoke(REGISTRY_AUTH_PUBLISH, { zipPath, manifest }),
 
   /**
    * Update the authenticated user's profile.
@@ -68888,14 +69121,14 @@ const registryAuthApi$2 = {
    * @returns {Promise<Object|null>} Updated user or null
    */
   updateProfile: (updates) =>
-    ipcRenderer$a.invoke(REGISTRY_AUTH_UPDATE_PROFILE, updates),
+    ipcRenderer$b.invoke(REGISTRY_AUTH_UPDATE_PROFILE, updates),
 
   /**
    * Get the authenticated user's published packages.
    *
    * @returns {Promise<Object|null>} { packages: [...] } or null
    */
-  getPackages: () => ipcRenderer$a.invoke(REGISTRY_AUTH_GET_PACKAGES),
+  getPackages: () => ipcRenderer$b.invoke(REGISTRY_AUTH_GET_PACKAGES),
 
   /**
    * Update a published package's metadata.
@@ -68906,7 +69139,7 @@ const registryAuthApi$2 = {
    * @returns {Promise<Object|null>} Updated package or null
    */
   updatePackage: (scope, name, updates) =>
-    ipcRenderer$a.invoke(REGISTRY_AUTH_UPDATE_PACKAGE, {
+    ipcRenderer$b.invoke(REGISTRY_AUTH_UPDATE_PACKAGE, {
       scope,
       name,
       updates,
@@ -68920,7 +69153,7 @@ const registryAuthApi$2 = {
    * @returns {Promise<Object|null>} Response or null
    */
   deletePackage: (scope, name) =>
-    ipcRenderer$a.invoke(REGISTRY_AUTH_DELETE_PACKAGE, { scope, name }),
+    ipcRenderer$b.invoke(REGISTRY_AUTH_DELETE_PACKAGE, { scope, name }),
 };
 
 var registryAuthApi_1 = registryAuthApi$2;
@@ -68932,7 +69165,7 @@ var registryAuthApi_1 = registryAuthApi$2;
  * Exposed via contextBridge through `window.mainApi.publisherKey`.
  */
 
-const { ipcRenderer: ipcRenderer$9 } = require$$0$2;
+const { ipcRenderer: ipcRenderer$a } = require$$0$2;
 const {
   PUBLISHER_KEY_GET_OR_CREATE,
   PUBLISHER_KEY_DESCRIBE,
@@ -68952,19 +69185,19 @@ const publisherKeyApi$2 = {
    * Rejects with `{ authRequired: true }` if not signed in to the
    * registry; with a generic error otherwise.
    */
-  getOrCreate: () => ipcRenderer$9.invoke(PUBLISHER_KEY_GET_OR_CREATE),
+  getOrCreate: () => ipcRenderer$a.invoke(PUBLISHER_KEY_GET_OR_CREATE),
 
   /**
    * Summary of the current local key (or null). Does not trigger
    * registration — purely read-only.
    */
-  describe: () => ipcRenderer$9.invoke(PUBLISHER_KEY_DESCRIBE),
+  describe: () => ipcRenderer$a.invoke(PUBLISHER_KEY_DESCRIBE),
 
   /**
    * Revoke the local key on the registry and clear it from disk.
    * Next publish will auto-generate a fresh keypair.
    */
-  revoke: () => ipcRenderer$9.invoke(PUBLISHER_KEY_REVOKE),
+  revoke: () => ipcRenderer$a.invoke(PUBLISHER_KEY_REVOKE),
 };
 
 var publisherKeyApi_1 = publisherKeyApi$2;
@@ -68976,7 +69209,7 @@ var publisherKeyApi_1 = publisherKeyApi$2;
  * Exposed via contextBridge through `window.mainApi.onboarding`.
  */
 
-const { ipcRenderer: ipcRenderer$8 } = require$$0$2;
+const { ipcRenderer: ipcRenderer$9 } = require$$0$2;
 const {
   ONBOARDING_GET_STATUS,
   ONBOARDING_MARK_COMPLETED,
@@ -68989,7 +69222,7 @@ const onboardingApi$2 = {
    * the "never seen" state — the renderer can treat that as the gate
    * to show the OnboardingModal.
    */
-  getStatus: () => ipcRenderer$8.invoke(ONBOARDING_GET_STATUS),
+  getStatus: () => ipcRenderer$9.invoke(ONBOARDING_GET_STATUS),
 
   /**
    * Pin onboarding as completed. Idempotent — safe to call multiple
@@ -69000,11 +69233,40 @@ const onboardingApi$2 = {
    * @returns {Promise<{ completed: true, completedAt: string, source: string|null }>}
    */
   markCompleted: (opts = {}) =>
-    ipcRenderer$8.invoke(ONBOARDING_MARK_COMPLETED, opts),
+    ipcRenderer$9.invoke(ONBOARDING_MARK_COMPLETED, opts),
 };
 
 var onboardingApi_1 = onboardingApi$2;
 
+/**
+ * exportApi.js
+ *
+ * IPC bridge for the Export Everything bundle (renderer side).
+ * Exposed via contextBridge as `window.mainApi.export`.
+ */
+
+const { ipcRenderer: ipcRenderer$8 } = require$$0$2;
+const { EXPORT_EVERYTHING } = events$8;
+
+const exportApi$2 = {
+  /**
+   * Export workspaces + themes + menu items + providers (sans
+   * credentials) as a single ZIP. Opens a native save dialog so the
+   * user picks the destination.
+   *
+   * Resolves with:
+   *   { success: true, filePath, counts: {...} }    on success
+   *   { success: false, canceled: true }            user dismissed the dialog
+   *   { success: false, error: "..." }              anything else
+   *
+   * @param {string} appId
+   * @returns {Promise<Object>}
+   */
+  exportEverything: (appId) => ipcRenderer$8.invoke(EXPORT_EVERYTHING, { appId }),
+};
+
+var exportApi_1 = exportApi$2;
+
 /**
  * notificationApi.js
  *
@@ -70625,6 +70887,7 @@ const webSocketApi$1 = webSocketApi_1;
 const mcpDashServerApi$1 = mcpDashServerApi_1;
 const publisherKeyApi$1 = publisherKeyApi_1;
 const onboardingApi$1 = onboardingApi_1;
+const exportApi$1 = exportApi_1;
 
 // Events constants
 const events$1 = events$8;
@@ -70699,6 +70962,7 @@ function createMainApi$1(extensions = {}) {
     registryAuth: registryAuthApi$1,
     publisherKey: publisherKeyApi$1,
     onboarding: onboardingApi$1,
+    export: exportApi$1,
     session: sessionApi,
     notifications: notificationApi$1,
     scheduler: schedulerApi$1,
@@ -70755,6 +71019,7 @@ const registryAuthController = registryAuthController$2;
 const registryApiController = registryApiController$3;
 const publisherKeyController = publisherKeyController$1;
 const onboardingController = onboardingController$1;
+const exportController = exportController$1;
 const notificationController = notificationController_1;
 const schedulerController = schedulerController_1;
 const themeRegistryController = themeRegistryController$1;
@@ -70798,6 +71063,7 @@ const dashboardConfigApi = dashboardConfigApi_1;
 const registryAuthApi = registryAuthApi_1;
 const publisherKeyApi = publisherKeyApi_1;
 const onboardingApi = onboardingApi_1;
+const exportApi = exportApi_1;
 const notificationApi = notificationApi_1;
 const schedulerApi = schedulerApi_1;
 const themeFromUrlApi = themeFromUrlApi_1;
@@ -70863,6 +71129,7 @@ var electron = {
   registryApiController,
   publisherKeyController,
   onboardingController,
+  exportController,
   notificationController,
   schedulerController,
   themeRegistryController,
@@ -70898,6 +71165,7 @@ var electron = {
   registryAuthApi,
   publisherKeyApi,
   onboardingApi,
+  exportApi,
   notificationApi,
   schedulerApi,
   themeFromUrlApi,