@trops/dash-core 0.1.603 → 0.1.605

package/dist/index.esm.js

@@ -2549,6 +2549,27 @@ var ThemeWrapper = function ThemeWrapper(_ref) {
     // eslint-disable-next-line react-hooks/exhaustive-deps
   }, [chosenTheme, themeVariant, themeName, themesForApplication, rawThemes]);
 
+  // Broadcast the app-level theme to a SEPARATE global so
+  // components rendered OUTSIDE the React theme tree
+  // (WidgetBuilderModal, AppUpdatesModal — they live as siblings
+  // of DashboardStage in dash-electron's Dash.js render) can fall
+  // back to it when no dashboard-specific override is in play.
+  //
+  // We can't share the same global with DashboardThemeProvider's
+  // per-workspace broadcast because React commits child effects
+  // BEFORE parent effects — ThemeWrapper would always run last
+  // and silently overwrite the workspace theme. Two separate
+  // globals avoid the race: consumers read
+  // `__dashThemeContext` (workspace) first, fall back to
+  // `__dashAppThemeContext` (app-level) when no workspace is open.
+  useEffect(function () {
+    if (typeof window === "undefined") return undefined;
+    if (contextValue !== null && contextValue !== void 0 && contextValue.currentTheme) {
+      window.__dashAppThemeContext = contextValue;
+      window.dispatchEvent(new Event("dash:theme-changed"));
+    }
+  }, [contextValue]);
+
   // Write the active theme's CSS custom properties to :root so any
   // hex-channel tokens (`bg-[var(--primary-700)]` etc. emitted by
   // ThemeModel) resolve app-wide. Without this, saving a hex theme
@@ -5725,6 +5746,45 @@ function ThemeBroadcast(_ref) {
   return null;
 }
 
+/**
+ * Writes the dashboard theme's cssVars to `:root` while mounted, and
+ * restores the previous values on unmount / theme switch.
+ *
+ * ThemeWrapper writes the APP theme's cssVars at the top of the tree.
+ * Without this helper, a dashboard that overrides the app theme with a
+ * hex-channel theme (like "Slack Generic") would carry the right class
+ * names (`bg-[var(--primary-900)]`) but the `--primary-900` variable
+ * on :root would still be the APP theme's value — or undefined if the
+ * app theme is named-family. Hex-themed surfaces then render with no
+ * background. This effect closes that gap by promoting the dashboard
+ * theme's cssVars to :root for the duration of its mount.
+ */
+function DashboardCssVarsBridge(_ref2) {
+  var cssVars = _ref2.cssVars;
+  useEffect(function () {
+    if (!cssVars || typeof document === "undefined") return undefined;
+    var root = document.documentElement;
+    var previous = {};
+    var keys = Object.keys(cssVars);
+    for (var _i = 0, _keys = keys; _i < _keys.length; _i++) {
+      var key = _keys[_i];
+      previous[key] = root.style.getPropertyValue(key);
+      root.style.setProperty(key, cssVars[key]);
+    }
+    return function () {
+      for (var _i2 = 0, _keys2 = keys; _i2 < _keys2.length; _i2++) {
+        var _key = _keys2[_i2];
+        if (previous[_key]) {
+          root.style.setProperty(_key, previous[_key]);
+        } else {
+          root.style.removeProperty(_key);
+        }
+      }
+    };
+  }, [cssVars]);
+  return null;
+}
+
 /**
  * DashboardThemeProvider
  *
@@ -5735,9 +5795,10 @@ function ThemeBroadcast(_ref) {
  * App chrome (navbar, tab bar, sidebar) stays OUTSIDE this wrapper
  * and keeps the app theme.
  */
-var DashboardThemeProvider = function DashboardThemeProvider(_ref2) {
-  var themeKey = _ref2.themeKey,
-    children = _ref2.children;
+var DashboardThemeProvider = function DashboardThemeProvider(_ref3) {
+  var _contextValue$current;
+  var themeKey = _ref3.themeKey,
+    children = _ref3.children;
   var parentContext = useContext(ThemeContext);
   var themes = parentContext.themes,
     themeVariant = parentContext.themeVariant;
@@ -5769,6 +5830,8 @@ var DashboardThemeProvider = function DashboardThemeProvider(_ref2) {
     value: contextValue,
     children: [/*#__PURE__*/jsx(ThemeBroadcast, {
       ctx: contextValue
+    }), /*#__PURE__*/jsx(DashboardCssVarsBridge, {
+      cssVars: contextValue === null || contextValue === void 0 || (_contextValue$current = contextValue.currentTheme) === null || _contextValue$current === void 0 ? void 0 : _contextValue$current.cssVars
     }), children]
   });
 };
@@ -28958,6 +29021,36 @@ var WorkspaceModel = function WorkspaceModel(workspaceItem) {
 function ownKeys$H(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$H(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$H(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$H(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 
+/**
+ * Last-resort family for ANY channel whose value can't be resolved
+ * (unknown name, missing palette entry, missing shade, …). Picked
+ * because it's universally safelist-covered, has every shade from
+ * 50..950, and is visually neutral — so a misconfigured theme
+ * renders "muted" rather than blank/transparent.
+ *
+ * Slack Generic etc. exposed this: when a channel value was missing
+ * or unrecognized, ThemeModel silently emitted `bg-undefined-700`
+ * (not in any safelist) → Tailwind dropped the class → the
+ * dropdown popover rendered transparent. Falling back here means
+ * no token can be "missing" by the time `getStylesForItem` reads it.
+ */
+var FALLBACK_FAMILY = "gray";
+
+/**
+ * Resolve a channel value to a safelist-covered Tailwind family
+ * name. Returns the original value when it's a hex (the caller
+ * handles those via CSS variables) or a recognized palette family;
+ * otherwise returns FALLBACK_FAMILY so the resulting class always
+ * renders.
+ */
+function resolveChannelFamily(channelValue) {
+  if (isHexColor$1(channelValue)) return channelValue;
+  if (typeof channelValue === "string" && channelValue.length > 0 && TAILWIND_PALETTE && TAILWIND_PALETTE[channelValue]) {
+    return channelValue;
+  }
+  return FALLBACK_FAMILY;
+}
+
 /**
  * getNextLevel
  * Need to generate the levels for tailwind
@@ -28976,6 +29069,11 @@ function invert(shade) {
  * shade. Routes to the arbitrary-value syntax (`bg-[var(--type-shade)]`)
  * when the channel's value is a hex.
  *
+ * Layer 1 fallback (audit follow-up to the Slack Generic bug): if
+ * `channelValue` isn't a hex AND isn't a recognized Tailwind palette
+ * family, fall back to FALLBACK_FAMILY so the emitted class is
+ * always safelist-covered and never resolves to `bg-undefined-700`.
+ *
  * @param {"bg"|"text"|"border"} prefix
  * @param {string} type             channel name (primary | secondary | …)
  * @param {number} shade            tailwind shade (100..950)
@@ -28985,10 +29083,11 @@ function invert(shade) {
 function classFor(prefix, type, shade, channelValue) {
   var hover = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : false;
   var h = hover ? "hover:" : "";
-  if (isHexColor$1(channelValue)) {
+  var resolved = resolveChannelFamily(channelValue);
+  if (isHexColor$1(resolved)) {
     return "".concat(h).concat(prefix, "-[var(--").concat(type, "-").concat(shade, ")]");
   }
-  return "".concat(h).concat(prefix, "-").concat(channelValue, "-").concat(shade);
+  return "".concat(h).concat(prefix, "-").concat(resolved, "-").concat(shade);
 }
 
 /**
@@ -29001,8 +29100,10 @@ function classFor(prefix, type, shade, channelValue) {
  * produce a `var(--{type}-{shade})` reference that resolves against
  * the CSS custom properties ThemePreviewProvider writes to :root.
  *
- * Returns null for unknown named-color families or shades — caller
- * falls back to className-only reactivity for that token.
+ * Layer 1 fallback: when the channel value or shade can't be
+ * resolved, fall back to FALLBACK_FAMILY's shade so cssValue is
+ * never null. Pairs with classFor's same fallback to guarantee
+ * every (type, shade) tuple yields a renderable token.
  */
 function cssValueFor(type, shade, channelValue) {
   if (isHexColor$1(channelValue)) {
@@ -29015,12 +29116,17 @@ function cssValueFor(type, shade, channelValue) {
       var _hex = shades[shade] || shades[String(shade)];
       if (_hex) return _hex;
     }
-    return null;
+    return fallbackCssValue(shade);
   }
   var family = TAILWIND_PALETTE && TAILWIND_PALETTE[channelValue];
-  if (!family) return null;
+  if (!family) return fallbackCssValue(shade);
   var hex = family[shade] || family[String(shade)];
-  return hex || null;
+  return hex || fallbackCssValue(shade);
+}
+function fallbackCssValue(shade) {
+  var fallback = TAILWIND_PALETTE && TAILWIND_PALETTE[FALLBACK_FAMILY];
+  if (!fallback) return null;
+  return fallback[shade] || fallback[String(shade)] || null;
 }
 function gradientFor(direction, type, fromShade, viaShade, toShade, channelValue) {
   if (isHexColor$1(channelValue)) {
@@ -35205,11 +35311,25 @@ var ChannelEditorModal = function ChannelEditorModal(_ref) {
   var nearest = useMemo(function () {
     return nearestSwatch(selectedHex, families);
   }, [selectedHex, families]);
+
+  // Auto-switch the family tab when the underlying selected color
+  // changes (user picked a different channel/shade or the theme
+  // mutated). Track the last hex we synced for so we don't fight
+  // the user's manual tab clicks — without this guard, every
+  // re-render rebuilds `nearest` as a new object reference and the
+  // effect snaps activeFamily back to the family containing the
+  // current color, making it impossible to browse other families.
+  var lastSyncedHexRef = useRef(null);
   useEffect(function () {
-    if (!isOpen) return;
+    if (!isOpen) {
+      lastSyncedHexRef.current = null;
+      return;
+    }
+    if (lastSyncedHexRef.current === selectedHex) return;
+    lastSyncedHexRef.current = selectedHex;
     if (nearest) setActiveFamily(nearest.family);
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [isOpen, nearest]);
+  }, [isOpen, selectedHex, nearest]);
   function expandChannel(channelKey) {
     setActiveChannel(channelKey);
     setActiveSlot("base");
@@ -54892,13 +55012,41 @@ var DashboardLoaderModal = function DashboardLoaderModal(_ref) {
 var KITCHEN_SINK_PACKAGE = "trops/kitchen-sink";
 var STATE = {
   WELCOME: "welcome",
+  // AUTH_REQUIRED replaces the generic "Install Failed" screen when
+  // the registry returns `authRequired: true`. Surfaces a
+  // benefits-driven sign-in CTA instead of asking the user to
+  // figure out why install died.
+  AUTH_REQUIRED: "auth-required",
   INSTALLING: "installing",
   DONE: "done",
   ERROR: "error"
 };
+
+/**
+ * Returns the first workspace that was installed from the Kitchen
+ * Sink package, or null. Used for the modal's dedupe check so we
+ * never create a second Kitchen Sink when one already exists.
+ *
+ * Workspaces installed via the registry carry a
+ * `_dashboardConfig.registryPackage` field — historically the
+ * unscoped name ("kitchen-sink"), more recently the scoped form
+ * ("trops/kitchen-sink"). Match on either trailing segment.
+ */
+function findExistingKitchenSink(workspaces) {
+  if (!Array.isArray(workspaces)) return null;
+  return workspaces.find(function (ws) {
+    var _ws$_dashboardConfig;
+    var pkg = ws === null || ws === void 0 || (_ws$_dashboardConfig = ws._dashboardConfig) === null || _ws$_dashboardConfig === void 0 ? void 0 : _ws$_dashboardConfig.registryPackage;
+    if (typeof pkg !== "string") return false;
+    var trailing = pkg.includes("/") ? pkg.split("/").pop() : pkg;
+    return trailing === "kitchen-sink";
+  }) || null;
+}
 var OnboardingModal = function OnboardingModal(_ref) {
   var open = _ref.open,
     appId = _ref.appId,
+    _ref$workspaces = _ref.workspaces,
+    workspaces = _ref$workspaces === void 0 ? [] : _ref$workspaces,
     onOpenDashboard = _ref.onOpenDashboard,
     onDismiss = _ref.onDismiss,
     onComplete = _ref.onComplete;
@@ -54918,6 +55066,16 @@ var OnboardingModal = function OnboardingModal(_ref) {
     setInstallError = _useState6[1];
   var installResultRef = useRef(null);
   var cleanupProgressRef = useRef(null);
+
+  // Reused device-code OAuth state machine (same hook AppUpdatesModal
+  // uses). `authFlow` carries the user code + verification URL once
+  // initiateAuth fires; while non-null we render the polling panel.
+  var _useRegistryAuth = useRegistryAuth(),
+    isAuthenticating = _useRegistryAuth.isAuthenticating,
+    authFlow = _useRegistryAuth.authFlow,
+    authError = _useRegistryAuth.authError,
+    initiateAuth = _useRegistryAuth.initiateAuth,
+    cancelAuth = _useRegistryAuth.cancelAuth;
   useEffect(function () {
     if (open) {
       setState(STATE.WELCOME);
@@ -54979,7 +55137,7 @@ var OnboardingModal = function OnboardingModal(_ref) {
   })), [markCompletedAndClose, onDismiss]);
   var handleInstall = useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee3() {
     var _window$mainApi2, _window$mainApi2$onIn;
-    var _window$mainApi3, _window$mainApi3$inst, result, _t2;
+    var existing, _window$mainApi3, _window$mainApi3$inst, result, _t2;
     return _regeneratorRuntime.wrap(function (_context3) {
       while (1) switch (_context3.prev = _context3.next) {
         case 0:
@@ -54991,6 +55149,24 @@ var OnboardingModal = function OnboardingModal(_ref) {
           setState(STATE.ERROR);
           return _context3.abrupt("return");
         case 1:
+          // Dedupe: if the user already has a Kitchen Sink workspace
+          // installed from the registry, skip the install entirely and
+          // route them to the existing one. Without this, the modal
+          // could be re-triggered (e.g. after clearing the
+          // onboarding.completed flag) and would silently create
+          // "Kitchen Sink 2", "Kitchen Sink 3", etc.
+          existing = findExistingKitchenSink(workspaces);
+          if (!existing) {
+            _context3.next = 2;
+            break;
+          }
+          installResultRef.current = {
+            success: true,
+            workspace: existing
+          };
+          setState(STATE.DONE);
+          return _context3.abrupt("return");
+        case 2:
           setState(STATE.INSTALLING);
           setProgressItems([]);
           setInstallError(null);
@@ -55018,42 +55194,49 @@ var OnboardingModal = function OnboardingModal(_ref) {
               return next;
             });
           });
-          _context3.prev = 2;
-          _context3.next = 3;
+          _context3.prev = 3;
+          _context3.next = 4;
           return (_window$mainApi3 = window.mainApi) === null || _window$mainApi3 === void 0 || (_window$mainApi3 = _window$mainApi3.dashboardConfig) === null || _window$mainApi3 === void 0 || (_window$mainApi3$inst = _window$mainApi3.installDashboardFromRegistry) === null || _window$mainApi3$inst === void 0 ? void 0 : _window$mainApi3$inst.call(_window$mainApi3, appId, KITCHEN_SINK_PACKAGE, {});
-        case 3:
+        case 4:
           result = _context3.sent;
           if (cleanupProgressRef.current) {
             cleanupProgressRef.current();
             cleanupProgressRef.current = null;
           }
           if (!(!result || !result.success)) {
-            _context3.next = 4;
+            _context3.next = 6;
+            break;
+          }
+          if (!(result !== null && result !== void 0 && result.authRequired)) {
+            _context3.next = 5;
             break;
           }
+          setState(STATE.AUTH_REQUIRED);
+          return _context3.abrupt("return");
+        case 5:
           setInstallError((result === null || result === void 0 ? void 0 : result.error) || "Failed to install Kitchen Sink. Check your internet connection and try again.");
           setState(STATE.ERROR);
           return _context3.abrupt("return");
-        case 4:
+        case 6:
           installResultRef.current = result;
           setState(STATE.DONE);
-          _context3.next = 6;
+          _context3.next = 8;
           break;
-        case 5:
-          _context3.prev = 5;
-          _t2 = _context3["catch"](2);
+        case 7:
+          _context3.prev = 7;
+          _t2 = _context3["catch"](3);
           if (cleanupProgressRef.current) {
             cleanupProgressRef.current();
             cleanupProgressRef.current = null;
           }
           setInstallError((_t2 === null || _t2 === void 0 ? void 0 : _t2.message) || "Installation failed.");
           setState(STATE.ERROR);
-        case 6:
+        case 8:
         case "end":
           return _context3.stop();
       }
-    }, _callee3, null, [[2, 5]]);
-  })), [appId]);
+    }, _callee3, null, [[3, 7]]);
+  })), [appId, workspaces]);
   var handleOpen = useCallback(/*#__PURE__*/_asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee4() {
     var _installResultRef$cur;
     var workspace;
@@ -55078,6 +55261,17 @@ var OnboardingModal = function OnboardingModal(_ref) {
     handleInstall();
   }, [handleInstall]);
 
+  // From the AUTH_REQUIRED state: kick off device-code OAuth. The
+  // hook opens the browser, polls in the background, and fires our
+  // onAuthorized callback on success. We auto-retry the install
+  // there so the user lands on the DONE state without a second
+  // click.
+  var handleSignIn = useCallback(function () {
+    initiateAuth(function () {
+      handleInstall();
+    });
+  }, [initiateAuth, handleInstall]);
+
   // The Modal dispatches setIsOpen(false) on Escape / backdrop click.
   // Route any close attempt through handleSkip so the completion flag
   // is always stamped (otherwise Escape would silently re-show the
@@ -55101,6 +55295,15 @@ var OnboardingModal = function OnboardingModal(_ref) {
         onInstall: handleInstall,
         onSkip: handleSkip,
         textMuted: textMuted
+      }), state === STATE.AUTH_REQUIRED && /*#__PURE__*/jsx(AuthRequiredBody, {
+        onSignIn: handleSignIn,
+        onCancelAuth: cancelAuth,
+        onSkip: handleSkip,
+        isAuthenticating: isAuthenticating,
+        authFlow: authFlow,
+        authError: authError,
+        textMuted: textMuted,
+        borderPanel: borderPanel
       }), state === STATE.INSTALLING && /*#__PURE__*/jsx(InstallingBody, {
         items: progressItems,
         borderPanel: borderPanel,
@@ -55130,11 +55333,13 @@ function WelcomeBody(_ref7) {
       }), /*#__PURE__*/jsx(Heading2, {
         title: "Welcome to Dash"
       })]
-    }), /*#__PURE__*/jsxs(Paragraph, {
+    }), /*#__PURE__*/jsx(Paragraph, {
       className: "".concat(textMuted, " mb-6"),
-      children: ["Get started with the ", /*#__PURE__*/jsx("strong", {
-        children: "Kitchen Sink"
-      }), " dashboard \u2014 a curated set of widgets that shows what Dash can do. You can swap anything out, or build your own from scratch later."]
+      children: /*#__PURE__*/jsxs("span", {
+        children: ["Get started with the ", /*#__PURE__*/jsx("strong", {
+          children: "Kitchen Sink"
+        }), " dashboard \u2014 a curated set of widgets that shows what Dash can do. You can swap anything out, or build your own from scratch later."]
+      })
     }), /*#__PURE__*/jsxs("div", {
       className: "flex items-center justify-end gap-3 mt-2",
       children: [/*#__PURE__*/jsx(Button, {
@@ -55295,6 +55500,153 @@ function ErrorBody(_ref1) {
     })]
   });
 }
+function BenefitRow(_ref10) {
+  var icon = _ref10.icon,
+    title = _ref10.title,
+    description = _ref10.description,
+    textMuted = _ref10.textMuted;
+  return /*#__PURE__*/jsxs("div", {
+    className: "flex items-start gap-3",
+    children: [/*#__PURE__*/jsx("div", {
+      className: "flex-shrink-0 w-7 h-7 flex items-center justify-center mt-0.5",
+      children: /*#__PURE__*/jsx(FontAwesomeIcon, {
+        icon: icon,
+        className: "text-base opacity-70"
+      })
+    }), /*#__PURE__*/jsxs("div", {
+      className: "flex flex-col",
+      children: [/*#__PURE__*/jsx("span", {
+        className: "text-sm font-medium",
+        children: title
+      }), /*#__PURE__*/jsx("span", {
+        className: "text-xs ".concat(textMuted),
+        children: description
+      })]
+    })]
+  });
+}
+function AuthRequiredBody(_ref11) {
+  var onSignIn = _ref11.onSignIn,
+    onCancelAuth = _ref11.onCancelAuth,
+    onSkip = _ref11.onSkip,
+    isAuthenticating = _ref11.isAuthenticating,
+    authFlow = _ref11.authFlow,
+    authError = _ref11.authError,
+    textMuted = _ref11.textMuted,
+    borderPanel = _ref11.borderPanel;
+  // While the device-code flow is polling, swap the benefits panel
+  // for the user-code + verification-URL display so the user knows
+  // what to enter in the browser tab we just opened.
+  if (isAuthenticating && authFlow) {
+    return /*#__PURE__*/jsxs(Fragment, {
+      children: [/*#__PURE__*/jsxs("div", {
+        className: "flex items-center gap-3 mb-2",
+        children: [/*#__PURE__*/jsx(FontAwesomeIcon, {
+          icon: "circle-notch",
+          className: "text-2xl animate-spin"
+        }), /*#__PURE__*/jsx(Heading2, {
+          title: "Waiting for browser sign-in"
+        })]
+      }), /*#__PURE__*/jsx(Paragraph, {
+        className: "".concat(textMuted, " mb-4"),
+        children: /*#__PURE__*/jsx("span", {
+          children: "We opened a browser tab where you can sign in to the Dash Registry. Enter this code if prompted:"
+        })
+      }), /*#__PURE__*/jsxs("div", {
+        className: "border ".concat(borderPanel, " rounded-md p-4 mb-4 text-center"),
+        "data-testid": "onboarding-auth-user-code",
+        children: [/*#__PURE__*/jsx("div", {
+          className: "text-2xl font-mono tracking-widest",
+          children: authFlow.userCode || "—"
+        }), /*#__PURE__*/jsx("div", {
+          className: "text-xs ".concat(textMuted, " mt-2 break-all"),
+          children: authFlow.verificationUrlComplete || authFlow.verificationUrl || ""
+        })]
+      }), /*#__PURE__*/jsx("div", {
+        className: "flex items-center justify-end gap-3",
+        children: /*#__PURE__*/jsx(Button, {
+          onClick: onCancelAuth,
+          title: "Cancel",
+          textSize: "text-sm",
+          padding: "py-2 px-4",
+          backgroundColor: "bg-gray-700",
+          textColor: "text-gray-300",
+          hoverTextColor: "hover:text-white",
+          hoverBackgroundColor: "hover:bg-gray-600",
+          "data-testid": "onboarding-auth-cancel-button"
+        })
+      })]
+    });
+  }
+  return /*#__PURE__*/jsxs(Fragment, {
+    children: [/*#__PURE__*/jsxs("div", {
+      className: "flex items-center gap-3 mb-2",
+      children: [/*#__PURE__*/jsx(FontAwesomeIcon, {
+        icon: "user-plus",
+        className: "text-2xl"
+      }), /*#__PURE__*/jsx(Heading2, {
+        title: "Sign in to the Dash Registry"
+      })]
+    }), /*#__PURE__*/jsx(Paragraph, {
+      className: "".concat(textMuted, " mb-5"),
+      children: /*#__PURE__*/jsx("span", {
+        children: "A free Dash account unlocks the community ecosystem. Sign in to continue installing Kitchen Sink \u2014 and to use everything else the registry offers."
+      })
+    }), /*#__PURE__*/jsxs("div", {
+      className: "grid grid-cols-1 sm:grid-cols-2 gap-4 mb-6",
+      children: [/*#__PURE__*/jsx(BenefitRow, {
+        icon: "cube",
+        title: "Install widgets",
+        description: "Browse and one-click install community widgets",
+        textMuted: textMuted
+      }), /*#__PURE__*/jsx(BenefitRow, {
+        icon: "table-cells",
+        title: "Discover dashboards",
+        description: "Like Kitchen Sink \u2014 curated starters built by others",
+        textMuted: textMuted
+      }), /*#__PURE__*/jsx(BenefitRow, {
+        icon: "palette",
+        title: "Apply themes",
+        description: "Community-built themes for any taste",
+        textMuted: textMuted
+      }), /*#__PURE__*/jsx(BenefitRow, {
+        icon: "upload",
+        title: "Publish your own",
+        description: "Share your widgets and dashboards with the Dash community",
+        textMuted: textMuted
+      })]
+    }), authError && /*#__PURE__*/jsx(Paragraph, {
+      className: "text-red-400 mb-4",
+      children: /*#__PURE__*/jsx("span", {
+        children: authError
+      })
+    }), /*#__PURE__*/jsxs("div", {
+      className: "flex items-center justify-end gap-3 mt-2",
+      children: [/*#__PURE__*/jsx(Button, {
+        onClick: onSkip,
+        title: "Skip for now",
+        textSize: "text-sm",
+        padding: "py-2 px-4",
+        backgroundColor: "bg-gray-700",
+        textColor: "text-gray-300",
+        hoverTextColor: "hover:text-white",
+        hoverBackgroundColor: "hover:bg-gray-600",
+        "data-testid": "onboarding-auth-skip-button"
+      }), /*#__PURE__*/jsx(Button, {
+        onClick: onSignIn,
+        title: "Sign in to Registry",
+        textSize: "text-sm",
+        padding: "py-2 px-4",
+        backgroundColor: "bg-blue-600",
+        textColor: "text-white",
+        hoverTextColor: "hover:text-white",
+        hoverBackgroundColor: "hover:bg-blue-500",
+        icon: "arrow-up-right-from-square",
+        "data-testid": "onboarding-auth-signin-button"
+      })]
+    })]
+  });
+}
 
 var DashCommandPalette = function DashCommandPalette(_ref) {
   var isOpen = _ref.isOpen,
@@ -61308,7 +61660,7 @@ var DashboardStageInner = function DashboardStageInner(_ref3) {
     onboardingCheckedRef.current = true;
     var cancelled = false;
     _asyncToGenerator(/*#__PURE__*/_regeneratorRuntime.mark(function _callee() {
-      var _window$mainApi, _window$mainApi$getSt, status;
+      var _window$mainApi, _window$mainApi$getSt, status, alreadyHasKitchenSink;
       return _regeneratorRuntime.wrap(function (_context) {
         while (1) switch (_context.prev = _context.next) {
           case 0:
@@ -61323,7 +61675,20 @@ var DashboardStageInner = function DashboardStageInner(_ref3) {
             }
             return _context.abrupt("return");
           case 2:
-            if (status && status.completed === false && workspaceConfig.length === 0) {
+            // Defense-in-depth: even if `workspaceConfig.length === 0`
+            // briefly reads true during a race between `isLoadingWorkspaces`
+            // and the workspace array populating, don't show the modal
+            // if the user already has a Kitchen Sink dashboard installed
+            // from the registry. Same dedupe rule the modal's install
+            // path applies.
+            alreadyHasKitchenSink = workspaceConfig.some(function (ws) {
+              var _ws$_dashboardConfig;
+              var pkg = ws === null || ws === void 0 || (_ws$_dashboardConfig = ws._dashboardConfig) === null || _ws$_dashboardConfig === void 0 ? void 0 : _ws$_dashboardConfig.registryPackage;
+              if (typeof pkg !== "string") return false;
+              var trailing = pkg.includes("/") ? pkg.split("/").pop() : pkg;
+              return trailing === "kitchen-sink";
+            });
+            if (status && status.completed === false && workspaceConfig.length === 0 && !alreadyHasKitchenSink) {
               setIsOnboardingOpen(true);
             } else {
               setIsOnboardingOpen(false);
@@ -63127,6 +63492,7 @@ var DashboardStageInner = function DashboardStageInner(_ref3) {
         }), /*#__PURE__*/jsx(OnboardingModal, {
           open: isOnboardingOpen === true,
           appId: credentials === null || credentials === void 0 ? void 0 : credentials.appId,
+          workspaces: workspaceConfig,
           onDismiss: function onDismiss() {
             return setIsOnboardingOpen(false);
           },