@trops/dash-core 0.1.614 → 0.1.616

package/dist/index.js

@@ -4657,18 +4657,17 @@ function _objectSpread$16(e) { for (var r = 1; r < arguments.length; r++) { var
 function _createForOfIteratorHelper$K(r, e) { var t = "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (!t) { if (Array.isArray(r) || (t = _unsupportedIterableToArray$K(r)) || e && r && "number" == typeof r.length) { t && (r = t); var _n = 0, F = function F() {}; return { s: F, n: function n() { return _n >= r.length ? { done: !0 } : { done: !1, value: r[_n++] }; }, e: function e(r) { throw r; }, f: F }; } throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); } var o, a = !0, u = !1; return { s: function s() { t = t.call(r); }, n: function n() { var r = t.next(); return a = r.done, r; }, e: function e(r) { u = !0, o = r; }, f: function f() { try { a || null == t["return"] || t["return"](); } finally { if (u) throw o; } } }; }
 function _unsupportedIterableToArray$K(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray$K(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray$K(r, a) : void 0; } }
 function _arrayLikeToArray$K(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
-var secondaryBtnClass = "px-3 py-2 text-sm font-medium rounded bg-gray-700 hover:bg-gray-600 disabled:bg-gray-800 disabled:text-gray-500 disabled:cursor-not-allowed text-gray-100";
-var primaryBtnClass = "px-3 py-2 text-sm font-medium rounded bg-blue-600 hover:bg-blue-500 disabled:bg-gray-700 disabled:text-gray-500 disabled:cursor-not-allowed text-white";
+var secondaryBtnClass$1 = "px-3 py-2 text-sm font-medium rounded bg-gray-700 hover:bg-gray-600 disabled:bg-gray-800 disabled:text-gray-500 disabled:cursor-not-allowed text-gray-100";
+var primaryBtnClass$1 = "px-3 py-2 text-sm font-medium rounded bg-blue-600 hover:bg-blue-500 disabled:bg-gray-700 disabled:text-gray-500 disabled:cursor-not-allowed text-white";
 
 /**
  * Flatten a single widget's `missing` blob (output of useWidgetUpdates'
- * preflight computation) into an array of keyed lines the modal can
+ * preflight computation) into an array of keyed lines the panel can
  * render as toggleable checkboxes.
  *
  * Each line carries `apply(acc)` that mutates an accumulator into the
- * grant-blob shape the main process accepts. Mirrors the shape
- * PreflightConsentModal uses for the dashboard-load case so the modal
- * UX stays consistent (server / tool / readPath / writePath rows).
+ * grant-blob shape the main process accepts (server / tool / readPath /
+ * writePath rows).
  */
 function flattenPreflightLines(missing) {
   var lines = [];
@@ -4764,6 +4763,213 @@ function flattenPreflightLines(missing) {
   }
   return lines;
 }
+var WidgetPreflightReview = function WidgetPreflightReview(_ref) {
+  var pendingPreflight = _ref.pendingPreflight,
+    resolvePreflight = _ref.resolvePreflight;
+  // Per-line checkbox state — `{ [widgetId]: { [lineKey]: bool } }`.
+  // Initialized to "everything checked" on each new pendingPreflight so
+  // the default action approves the full ask; the user opts OUT of
+  // individual lines by unchecking.
+  var _useState = React.useState({}),
+    _useState2 = _slicedToArray(_useState, 2),
+    preflightChecked = _useState2[0],
+    setPreflightChecked = _useState2[1];
+  var _useState3 = React.useState(null),
+    _useState4 = _slicedToArray(_useState3, 2),
+    selectedPreflightWidgetId = _useState4[0],
+    setSelectedPreflightWidgetId = _useState4[1];
+  React.useEffect(function () {
+    var _pendingPreflight$wid;
+    if (!pendingPreflight || !((_pendingPreflight$wid = pendingPreflight.widgets) !== null && _pendingPreflight$wid !== void 0 && _pendingPreflight$wid.length)) return;
+    var initial = {};
+    var _iterator4 = _createForOfIteratorHelper$K(pendingPreflight.widgets),
+      _step4;
+    try {
+      for (_iterator4.s(); !(_step4 = _iterator4.n()).done;) {
+        var w = _step4.value;
+        initial[w.widgetId] = {};
+        var _iterator5 = _createForOfIteratorHelper$K(flattenPreflightLines(w.missing)),
+          _step5;
+        try {
+          for (_iterator5.s(); !(_step5 = _iterator5.n()).done;) {
+            var ln = _step5.value;
+            initial[w.widgetId][ln.key] = true;
+          }
+        } catch (err) {
+          _iterator5.e(err);
+        } finally {
+          _iterator5.f();
+        }
+      }
+    } catch (err) {
+      _iterator4.e(err);
+    } finally {
+      _iterator4.f();
+    }
+    setPreflightChecked(initial);
+    setSelectedPreflightWidgetId(pendingPreflight.widgets[0].widgetId);
+  }, [pendingPreflight]);
+  if (!pendingPreflight) return null;
+  var widgets = pendingPreflight.widgets || [];
+  var widgetCount = widgets.length;
+  var selected = widgets.find(function (w) {
+    return w.widgetId === selectedPreflightWidgetId;
+  }) || widgets[0];
+  var togglePreflightLine = function togglePreflightLine(widgetId, lineKey) {
+    setPreflightChecked(function (prev) {
+      return _objectSpread$16(_objectSpread$16({}, prev), {}, _defineProperty({}, widgetId, _objectSpread$16(_objectSpread$16({}, prev[widgetId] || {}), {}, _defineProperty({}, lineKey, !(prev[widgetId] && prev[widgetId][lineKey])))));
+    });
+  };
+  var handlePreflightApprove = function handlePreflightApprove() {
+    if (typeof resolvePreflight !== "function") return;
+    // Build the per-widget addition blob from checked lines. Skip
+    // widgets where the user unchecked everything.
+    var acceptedByWidgetId = {};
+    var _iterator6 = _createForOfIteratorHelper$K(widgets),
+      _step6;
+    try {
+      for (_iterator6.s(); !(_step6 = _iterator6.n()).done;) {
+        var w = _step6.value;
+        var _lines = flattenPreflightLines(w.missing);
+        var acc = {};
+        var any = false;
+        var _iterator7 = _createForOfIteratorHelper$K(_lines),
+          _step7;
+        try {
+          for (_iterator7.s(); !(_step7 = _iterator7.n()).done;) {
+            var _preflightChecked$w$w;
+            var ln = _step7.value;
+            if ((_preflightChecked$w$w = preflightChecked[w.widgetId]) !== null && _preflightChecked$w$w !== void 0 && _preflightChecked$w$w[ln.key]) {
+              ln.apply(acc);
+              any = true;
+            }
+          }
+        } catch (err) {
+          _iterator7.e(err);
+        } finally {
+          _iterator7.f();
+        }
+        if (any) acceptedByWidgetId[w.widgetId] = acc;
+      }
+    } catch (err) {
+      _iterator6.e(err);
+    } finally {
+      _iterator6.f();
+    }
+    resolvePreflight({
+      acceptedByWidgetId: acceptedByWidgetId
+    });
+  };
+  var handlePreflightCancel = function handlePreflightCancel() {
+    if (typeof resolvePreflight !== "function") return;
+    resolvePreflight(null);
+  };
+  var lines = selected ? flattenPreflightLines(selected.missing) : [];
+  return /*#__PURE__*/jsxRuntime.jsxs("div", {
+    className: "flex flex-col w-full max-w-xl mx-auto border border-gray-700 rounded bg-gray-900",
+    "data-testid": "widget-preflight-review",
+    children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+      className: "px-5 py-4 border-b border-gray-700",
+      children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+        className: "flex items-center gap-2 text-base font-semibold text-gray-100",
+        children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
+          icon: "shield-halved",
+          className: "text-amber-400"
+        }), /*#__PURE__*/jsxRuntime.jsxs("span", {
+          children: ["Review ", widgetCount, " widget", widgetCount === 1 ? "" : "s", " before installing"]
+        })]
+      }), /*#__PURE__*/jsxRuntime.jsx("div", {
+        className: "text-xs text-gray-400 mt-1",
+        children: "New versions request permissions you haven't granted yet. Approve what you're comfortable with \u2014 the rest stays denied and the install still goes through."
+      })]
+    }), /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "px-5 py-4",
+      children: /*#__PURE__*/jsxRuntime.jsxs("div", {
+        className: "flex flex-col gap-4",
+        "data-testid": "widget-preflight-review-body",
+        children: [/*#__PURE__*/jsxRuntime.jsx("div", {
+          className: "px-3 py-2 rounded border border-amber-700 bg-amber-900/30 text-xs text-amber-200",
+          children: "These widgets need new permissions to function after the update. Review and approve before installing \u2014 anything you leave unchecked will be denied at runtime and can be granted later in Settings \u2192 Privacy & Security."
+        }), selected && /*#__PURE__*/jsxRuntime.jsxs("div", {
+          className: "flex border border-gray-700 rounded overflow-hidden",
+          children: [/*#__PURE__*/jsxRuntime.jsx("div", {
+            className: "flex flex-col w-44 border-r border-gray-700 bg-gray-900/40 max-h-64 overflow-y-auto",
+            children: widgets.map(function (w) {
+              var lineCount = flattenPreflightLines(w.missing).length;
+              var isActive = w.widgetId === selected.widgetId;
+              return /*#__PURE__*/jsxRuntime.jsxs("button", {
+                type: "button",
+                onClick: function onClick() {
+                  return setSelectedPreflightWidgetId(w.widgetId);
+                },
+                className: "flex items-center justify-between gap-2 px-3 py-2 text-left text-xs border-b border-gray-800 transition-colors ".concat(isActive ? "bg-blue-900/30 text-gray-100" : "text-gray-300 hover:bg-gray-800/40"),
+                "data-testid": "widget-preflight-review-widget-".concat(w.widgetId),
+                children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+                  className: "truncate",
+                  children: w.displayName
+                }), /*#__PURE__*/jsxRuntime.jsx("span", {
+                  className: "text-xs px-1.5 py-0.5 rounded bg-amber-900/40 text-amber-300 shrink-0",
+                  children: lineCount
+                })]
+              }, w.widgetId);
+            })
+          }), /*#__PURE__*/jsxRuntime.jsxs("div", {
+            className: "flex flex-col flex-1 min-w-0 p-3 gap-2 max-h-64 overflow-y-auto",
+            children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
+              className: "text-xs text-gray-400 mb-1",
+              children: [/*#__PURE__*/jsxRuntime.jsx("span", {
+                className: "font-semibold text-gray-200",
+                children: selected.displayName
+              }), " ", /*#__PURE__*/jsxRuntime.jsx("span", {
+                className: "opacity-60 font-mono",
+                children: selected.packageId
+              })]
+            }), lines.length === 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+              className: "text-xs text-gray-500",
+              children: "No new permissions for this widget."
+            }), lines.map(function (ln) {
+              var _preflightChecked$sel;
+              var isChecked = !!((_preflightChecked$sel = preflightChecked[selected.widgetId]) !== null && _preflightChecked$sel !== void 0 && _preflightChecked$sel[ln.key]);
+              return /*#__PURE__*/jsxRuntime.jsxs("label", {
+                className: "flex items-center gap-2 text-xs text-gray-300 cursor-pointer px-2 py-1 rounded hover:bg-gray-800/40",
+                children: [/*#__PURE__*/jsxRuntime.jsx("input", {
+                  type: "checkbox",
+                  checked: isChecked,
+                  onChange: function onChange() {
+                    return togglePreflightLine(selected.widgetId, ln.key);
+                  }
+                }), /*#__PURE__*/jsxRuntime.jsx("span", {
+                  children: ln.label
+                })]
+              }, ln.key);
+            })]
+          })]
+        })]
+      })
+    }), /*#__PURE__*/jsxRuntime.jsx("div", {
+      className: "flex items-center justify-end px-5 py-3 border-t border-gray-700",
+      children: /*#__PURE__*/jsxRuntime.jsxs("div", {
+        className: "flex items-center gap-2",
+        children: [/*#__PURE__*/jsxRuntime.jsx("button", {
+          type: "button",
+          onClick: handlePreflightCancel,
+          className: secondaryBtnClass$1,
+          "data-testid": "widget-preflight-review-cancel",
+          children: "Cancel update"
+        }), /*#__PURE__*/jsxRuntime.jsxs("button", {
+          type: "button",
+          onClick: handlePreflightApprove,
+          className: primaryBtnClass$1,
+          "data-testid": "widget-preflight-review-approve",
+          children: ["Approve and install", widgetCount > 0 ? " (".concat(widgetCount, ")") : ""]
+        })]
+      })
+    })]
+  });
+};
+
+var secondaryBtnClass = "px-3 py-2 text-sm font-medium rounded bg-gray-700 hover:bg-gray-600 disabled:bg-gray-800 disabled:text-gray-500 disabled:cursor-not-allowed text-gray-100";
+var primaryBtnClass = "px-3 py-2 text-sm font-medium rounded bg-blue-600 hover:bg-blue-500 disabled:bg-gray-700 disabled:text-gray-500 disabled:cursor-not-allowed text-white";
 
 /**
  * AppUpdatesModal — top-level "updates available" prompt the app shell
@@ -4800,7 +5006,6 @@ function flattenPreflightLines(missing) {
  *     "shown for this session" so the same launch doesn't nag).
  */
 var AppUpdatesModal = function AppUpdatesModal(_ref) {
-  var _pendingPreflight$wid3, _pendingPreflight$wid4;
   var isOpen = _ref.isOpen,
     setIsOpen = _ref.setIsOpen,
     _ref$widgetUpdates = _ref.widgetUpdates,
@@ -4873,54 +5078,7 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
     if (isOpen) return;
     setLastRunResult(null);
     setIsUpdatingWidgets(false);
-    setPreflightChecked({});
-    setSelectedPreflightWidgetId(null);
   }, [isOpen]);
-
-  // Preflight checkbox state — `{ [widgetId]: { [lineKey]: bool } }`.
-  // Initialized to "everything checked" on each new pendingPreflight
-  // so the default action approves the full ask; the user opts OUT of
-  // individual lines by unchecking. Mirror of how
-  // PreflightConsentModal seeds its checks.
-  var _useState7 = React.useState({}),
-    _useState8 = _slicedToArray(_useState7, 2),
-    preflightChecked = _useState8[0],
-    setPreflightChecked = _useState8[1];
-  var _useState9 = React.useState(null),
-    _useState0 = _slicedToArray(_useState9, 2),
-    selectedPreflightWidgetId = _useState0[0],
-    setSelectedPreflightWidgetId = _useState0[1];
-  React.useEffect(function () {
-    var _pendingPreflight$wid;
-    if (!pendingPreflight || !((_pendingPreflight$wid = pendingPreflight.widgets) !== null && _pendingPreflight$wid !== void 0 && _pendingPreflight$wid.length)) return;
-    var initial = {};
-    var _iterator4 = _createForOfIteratorHelper$K(pendingPreflight.widgets),
-      _step4;
-    try {
-      for (_iterator4.s(); !(_step4 = _iterator4.n()).done;) {
-        var w = _step4.value;
-        initial[w.widgetId] = {};
-        var _iterator5 = _createForOfIteratorHelper$K(flattenPreflightLines(w.missing)),
-          _step5;
-        try {
-          for (_iterator5.s(); !(_step5 = _iterator5.n()).done;) {
-            var ln = _step5.value;
-            initial[w.widgetId][ln.key] = true;
-          }
-        } catch (err) {
-          _iterator5.e(err);
-        } finally {
-          _iterator5.f();
-        }
-      }
-    } catch (err) {
-      _iterator4.e(err);
-    } finally {
-      _iterator4.f();
-    }
-    setPreflightChecked(initial);
-    setSelectedPreflightWidgetId(pendingPreflight.widgets[0].widgetId);
-  }, [pendingPreflight]);
   var totalUpdates = widgetUpdates.length + dashboardUpdates.length;
   // Single source of truth for "user needs to sign in before we can
   // run the batch": either the proactive check found no session, or
@@ -4993,59 +5151,6 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
     setIsOpen(false);
   };
 
-  // --- Preflight handlers ---
-  var togglePreflightLine = function togglePreflightLine(widgetId, lineKey) {
-    setPreflightChecked(function (prev) {
-      return _objectSpread$16(_objectSpread$16({}, prev), {}, _defineProperty({}, widgetId, _objectSpread$16(_objectSpread$16({}, prev[widgetId] || {}), {}, _defineProperty({}, lineKey, !(prev[widgetId] && prev[widgetId][lineKey])))));
-    });
-  };
-  var handlePreflightApprove = function handlePreflightApprove() {
-    if (typeof resolvePreflight !== "function" || !pendingPreflight) return;
-    // Build the per-widget addition blob from checked lines. Skip
-    // widgets where the user unchecked everything (mergeMcpGrants
-    // would no-op them anyway, but explicit is cheaper than
-    // mysterious).
-    var acceptedByWidgetId = {};
-    var _iterator6 = _createForOfIteratorHelper$K(pendingPreflight.widgets),
-      _step6;
-    try {
-      for (_iterator6.s(); !(_step6 = _iterator6.n()).done;) {
-        var w = _step6.value;
-        var lines = flattenPreflightLines(w.missing);
-        var acc = {};
-        var any = false;
-        var _iterator7 = _createForOfIteratorHelper$K(lines),
-          _step7;
-        try {
-          for (_iterator7.s(); !(_step7 = _iterator7.n()).done;) {
-            var _preflightChecked$w$w;
-            var ln = _step7.value;
-            if ((_preflightChecked$w$w = preflightChecked[w.widgetId]) !== null && _preflightChecked$w$w !== void 0 && _preflightChecked$w$w[ln.key]) {
-              ln.apply(acc);
-              any = true;
-            }
-          }
-        } catch (err) {
-          _iterator7.e(err);
-        } finally {
-          _iterator7.f();
-        }
-        if (any) acceptedByWidgetId[w.widgetId] = acc;
-      }
-    } catch (err) {
-      _iterator6.e(err);
-    } finally {
-      _iterator6.f();
-    }
-    resolvePreflight({
-      acceptedByWidgetId: acceptedByWidgetId
-    });
-  };
-  var handlePreflightCancel = function handlePreflightCancel() {
-    if (typeof resolvePreflight !== "function") return;
-    resolvePreflight(null);
-  };
-
   // The three render modes: checking, up-to-date, or updates-available.
   // Each gets its own clear visual identity so the user reads the
   // current state in one glance. The result banner (set after a
@@ -5114,79 +5219,7 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
       })]
     });
   };
-  var renderPreflightBody = function renderPreflightBody() {
-    if (!pendingPreflight) return null;
-    var widgets = pendingPreflight.widgets || [];
-    var selected = widgets.find(function (w) {
-      return w.widgetId === selectedPreflightWidgetId;
-    }) || widgets[0];
-    if (!selected) return null;
-    var lines = flattenPreflightLines(selected.missing);
-    return /*#__PURE__*/jsxRuntime.jsxs("div", {
-      className: "flex flex-col gap-4",
-      "data-testid": "app-updates-modal-preflight",
-      children: [/*#__PURE__*/jsxRuntime.jsx("div", {
-        className: "px-3 py-2 rounded border border-amber-700 bg-amber-900/30 text-xs text-amber-200",
-        children: "These widgets need new permissions to function after the update. Review and approve before installing \u2014 anything you leave unchecked will be denied at runtime and can be granted later in Settings \u2192 Privacy & Security."
-      }), /*#__PURE__*/jsxRuntime.jsxs("div", {
-        className: "flex border border-gray-700 rounded overflow-hidden",
-        children: [/*#__PURE__*/jsxRuntime.jsx("div", {
-          className: "flex flex-col w-44 border-r border-gray-700 bg-gray-900/40 max-h-64 overflow-y-auto",
-          children: widgets.map(function (w) {
-            var lineCount = flattenPreflightLines(w.missing).length;
-            var isActive = w.widgetId === selected.widgetId;
-            return /*#__PURE__*/jsxRuntime.jsxs("button", {
-              type: "button",
-              onClick: function onClick() {
-                return setSelectedPreflightWidgetId(w.widgetId);
-              },
-              className: "flex items-center justify-between gap-2 px-3 py-2 text-left text-xs border-b border-gray-800 transition-colors ".concat(isActive ? "bg-blue-900/30 text-gray-100" : "text-gray-300 hover:bg-gray-800/40"),
-              "data-testid": "app-updates-modal-preflight-widget-".concat(w.widgetId),
-              children: [/*#__PURE__*/jsxRuntime.jsx("span", {
-                className: "truncate",
-                children: w.displayName
-              }), /*#__PURE__*/jsxRuntime.jsx("span", {
-                className: "text-xs px-1.5 py-0.5 rounded bg-amber-900/40 text-amber-300 shrink-0",
-                children: lineCount
-              })]
-            }, w.widgetId);
-          })
-        }), /*#__PURE__*/jsxRuntime.jsxs("div", {
-          className: "flex flex-col flex-1 min-w-0 p-3 gap-2 max-h-64 overflow-y-auto",
-          children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
-            className: "text-xs text-gray-400 mb-1",
-            children: [/*#__PURE__*/jsxRuntime.jsx("span", {
-              className: "font-semibold text-gray-200",
-              children: selected.displayName
-            }), " ", /*#__PURE__*/jsxRuntime.jsx("span", {
-              className: "opacity-60 font-mono",
-              children: selected.packageId
-            })]
-          }), lines.length === 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
-            className: "text-xs text-gray-500",
-            children: "No new permissions for this widget."
-          }), lines.map(function (ln) {
-            var _preflightChecked$sel;
-            var isChecked = !!((_preflightChecked$sel = preflightChecked[selected.widgetId]) !== null && _preflightChecked$sel !== void 0 && _preflightChecked$sel[ln.key]);
-            return /*#__PURE__*/jsxRuntime.jsxs("label", {
-              className: "flex items-center gap-2 text-xs text-gray-300 cursor-pointer px-2 py-1 rounded hover:bg-gray-800/40",
-              children: [/*#__PURE__*/jsxRuntime.jsx("input", {
-                type: "checkbox",
-                checked: isChecked,
-                onChange: function onChange() {
-                  return togglePreflightLine(selected.widgetId, ln.key);
-                }
-              }), /*#__PURE__*/jsxRuntime.jsx("span", {
-                children: ln.label
-              })]
-            }, ln.key);
-          })]
-        })]
-      })]
-    });
-  };
   var renderBody = function renderBody() {
-    if (pendingPreflight) return renderPreflightBody();
     if (isChecking && totalUpdates === 0) {
       return /*#__PURE__*/jsxRuntime.jsxs("div", {
         className: "flex flex-col gap-4",
@@ -5287,26 +5320,6 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
   // "Close"; preflight → "Cancel update" + "Approve and install";
   // updates-found → "Remind me later" + per-category action buttons.
   var renderFooter = function renderFooter() {
-    if (pendingPreflight) {
-      var _pendingPreflight$wid2;
-      var widgetCount = ((_pendingPreflight$wid2 = pendingPreflight.widgets) === null || _pendingPreflight$wid2 === void 0 ? void 0 : _pendingPreflight$wid2.length) || 0;
-      return /*#__PURE__*/jsxRuntime.jsxs("div", {
-        className: "flex items-center gap-2",
-        children: [/*#__PURE__*/jsxRuntime.jsx("button", {
-          type: "button",
-          onClick: handlePreflightCancel,
-          className: secondaryBtnClass,
-          "data-testid": "app-updates-modal-preflight-cancel",
-          children: "Cancel update"
-        }), /*#__PURE__*/jsxRuntime.jsxs("button", {
-          type: "button",
-          onClick: handlePreflightApprove,
-          className: primaryBtnClass,
-          "data-testid": "app-updates-modal-preflight-approve",
-          children: ["Approve and install", widgetCount > 0 ? " (".concat(widgetCount, ")") : ""]
-        })]
-      });
-    }
     if (isChecking && totalUpdates === 0) {
       return /*#__PURE__*/jsxRuntime.jsx("button", {
         type: "button",
@@ -5368,6 +5381,23 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
       }))]
     });
   };
+
+  // Preflight consent is its own dialog. When the batch suspends for
+  // permission approval, render the shared WidgetPreflightReview inside
+  // this modal's shell (same Modal chrome as before the extraction) and
+  // short-circuit the normal updates/checking/up-to-date body. The
+  // hook clears pendingPreflight when the user resolves, returning the
+  // modal to its normal mode.
+  if (pendingPreflight) {
+    return /*#__PURE__*/jsxRuntime.jsx(DashReact.Modal, {
+      isOpen: isOpen,
+      setIsOpen: setIsOpen,
+      children: /*#__PURE__*/jsxRuntime.jsx(WidgetPreflightReview, {
+        pendingPreflight: pendingPreflight,
+        resolvePreflight: resolvePreflight
+      })
+    });
+  }
   return /*#__PURE__*/jsxRuntime.jsx(DashReact.Modal, {
     isOpen: isOpen,
     setIsOpen: setIsOpen,
@@ -5379,15 +5409,12 @@ var AppUpdatesModal = function AppUpdatesModal(_ref) {
         children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
           className: "flex items-center gap-2 text-base font-semibold text-gray-100",
           children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
-            icon: pendingPreflight ? "shield-halved" : isChecking && totalUpdates === 0 ? "spinner" : hasChecked && totalUpdates === 0 ? "circle-check" : "arrow-up",
-            className: pendingPreflight ? "text-amber-400" : isChecking && totalUpdates === 0 ? "text-blue-400 animate-spin" : hasChecked && totalUpdates === 0 ? "text-emerald-400" : "text-blue-400"
+            icon: isChecking && totalUpdates === 0 ? "spinner" : hasChecked && totalUpdates === 0 ? "circle-check" : "arrow-up",
+            className: isChecking && totalUpdates === 0 ? "text-blue-400 animate-spin" : hasChecked && totalUpdates === 0 ? "text-emerald-400" : "text-blue-400"
           }), /*#__PURE__*/jsxRuntime.jsx("span", {
-            children: pendingPreflight ? "Review ".concat(((_pendingPreflight$wid3 = pendingPreflight.widgets) === null || _pendingPreflight$wid3 === void 0 ? void 0 : _pendingPreflight$wid3.length) || 0, " widget").concat((((_pendingPreflight$wid4 = pendingPreflight.widgets) === null || _pendingPreflight$wid4 === void 0 ? void 0 : _pendingPreflight$wid4.length) || 0) === 1 ? "" : "s", " before installing") : isChecking && totalUpdates === 0 ? "Checking for updates" : hasChecked && totalUpdates === 0 ? "Up to date" : "".concat(totalUpdates, " update").concat(totalUpdates === 1 ? "" : "s", " available")
+            children: isChecking && totalUpdates === 0 ? "Checking for updates" : hasChecked && totalUpdates === 0 ? "Up to date" : "".concat(totalUpdates, " update").concat(totalUpdates === 1 ? "" : "s", " available")
           })]
-        }), pendingPreflight ? /*#__PURE__*/jsxRuntime.jsx("div", {
-          className: "text-xs text-gray-400 mt-1",
-          children: "New versions request permissions you haven't granted yet. Approve what you're comfortable with \u2014 the rest stays denied and the install still goes through."
-        }) : totalUpdates > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
+        }), totalUpdates > 0 && /*#__PURE__*/jsxRuntime.jsx("div", {
           className: "text-xs text-gray-400 mt-1",
           children: needsSignIn && widgetUpdates.length > 0 ? "Sign in to the registry to install ".concat(widgetUpdates.length, " widget package update").concat(widgetUpdates.length === 1 ? "" : "s", ".") : widgetUpdates.length > 0 && dashboardUpdates.length > 0 ? "".concat(widgetUpdates.length, " widget package").concat(widgetUpdates.length === 1 ? "" : "s", " and ").concat(dashboardUpdates.length, " dashboard").concat(dashboardUpdates.length === 1 ? "" : "s", " have newer versions on the registry.") : widgetUpdates.length > 0 ? "".concat(widgetUpdates.length, " widget package").concat(widgetUpdates.length === 1 ? "" : "s", " have newer versions on the registry.") : "".concat(dashboardUpdates.length, " dashboard").concat(dashboardUpdates.length === 1 ? "" : "s", " have newer versions on the registry.")
         })]
@@ -49982,8 +50009,15 @@ var UpdateAllWidgetsModal = function UpdateAllWidgetsModal(_ref) {
       }), /*#__PURE__*/jsxRuntime.jsxs("div", {
         className: "flex items-center justify-between px-5 py-3 border-t border-gray-700",
         children: [/*#__PURE__*/jsxRuntime.jsxs("div", {
-          className: "text-xs text-gray-500",
-          children: [runSummary && "Run complete: ".concat(runSummary.done, " succeeded, ").concat(runSummary.failed, " failed."), isBatchUpdating && "Updating selected packages…"]
+          className: "text-xs text-gray-500 flex items-center gap-2",
+          children: [runSummary && "Run complete: ".concat(runSummary.done, " succeeded, ").concat(runSummary.failed, " failed."), isBatchUpdating && /*#__PURE__*/jsxRuntime.jsxs("span", {
+            className: "flex items-center gap-2 text-blue-300",
+            "data-testid": "update-all-batch-spinner",
+            children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.FontAwesomeIcon, {
+              icon: "spinner",
+              className: "animate-spin"
+            }), "Updating selected packages\u2026"]
+          })]
         }), /*#__PURE__*/jsxRuntime.jsxs("div", {
           className: "flex gap-2",
           children: [/*#__PURE__*/jsxRuntime.jsx(DashReact.Button, {
@@ -50036,7 +50070,9 @@ var WidgetsSection = function WidgetsSection(_ref) {
     isUpdating = _useWidgetUpdates.isUpdating,
     needsAuth = _useWidgetUpdates.needsAuth,
     clearNeedsAuth = _useWidgetUpdates.clearNeedsAuth,
-    updateError = _useWidgetUpdates.updateError;
+    updateError = _useWidgetUpdates.updateError,
+    pendingPreflight = _useWidgetUpdates.pendingPreflight,
+    resolvePreflight = _useWidgetUpdates.resolvePreflight;
 
   // "Update all" modal visibility — opened from the footer when there
   // are package-level updates available; closed by the user (or by
@@ -50987,6 +51023,17 @@ var WidgetsSection = function WidgetsSection(_ref) {
       batchStatus: batchStatus,
       isBatchUpdating: isBatchUpdating,
       onConfirm: updatePackages
+    }), /*#__PURE__*/jsxRuntime.jsx(DashReact.Modal, {
+      isOpen: !!pendingPreflight,
+      setIsOpen: function setIsOpen(open) {
+        if (!open && typeof resolvePreflight === "function") {
+          resolvePreflight(null);
+        }
+      },
+      children: /*#__PURE__*/jsxRuntime.jsx(WidgetPreflightReview, {
+        pendingPreflight: pendingPreflight,
+        resolvePreflight: resolvePreflight
+      })
     })]
   });
 };