@trops/dash-core 0.1.617 → 0.1.622

package/dist/index.js

@@ -24689,6 +24689,102 @@ var WidgetNotFound = function WidgetNotFound(_ref) {
   });
 };
 
+/**
+ * scopedComponentId.js
+ *
+ * Single source of truth for the canonical scoped component id used by
+ * ComponentManager registration, layout items, and publish-time scope
+ * remap. Format: `scope.packageName.ComponentName`.
+ *
+ * Why a 3-part dotted form (and not `@scope/pkg.Component`)?
+ * - Matches existing `config.id` shape that `.dash.js` files already
+ *   set when authored explicitly (see ComponentManager.registerWidget:
+ *   `const registrationKey = config.id || widgetKey;`).
+ * - Trivial to parse (`split(".")` — three parts, ordered).
+ * - Avoids slashes inside object keys, which some downstream serializers
+ *   (older dash-registry indexers) historically choked on.
+ *
+ * The upstream package id may arrive in either of two shapes:
+ *   - "@scope/pkg" (npm-style)
+ *   - "scope/pkg"  (bare scope)
+ * Both produce the same scoped id.
+ */
+
+/**
+ * Build the canonical scoped component id from a package name and a
+ * bare component name.
+ *
+ * @param {string} packageName e.g. "@ai-built/pipeline" or "ai-built/pipeline"
+ * @param {string} componentName e.g. "ProspectListColumn"
+ * @returns {string} e.g. "ai-built.pipeline.ProspectListColumn"
+ */
+function makeScopedComponentId(packageName, componentName) {
+  if (!componentName) return "";
+  if (!packageName) return componentName;
+  var cleaned = String(packageName).replace(/^@/, "").replace(/\//g, ".");
+  return "".concat(cleaned, ".").concat(componentName);
+}
+
+/**
+ * Parse a scoped component id into its three parts. Returns null when
+ * the input isn't a 3-part dotted id (e.g. legacy bare names).
+ *
+ * @param {string} scopedId
+ * @returns {{scope: string, packageName: string, componentName: string} | null}
+ */
+function parseScopedComponentId(scopedId) {
+  if (typeof scopedId !== "string") return null;
+  var parts = scopedId.split(".");
+  if (parts.length !== 3) return null;
+  return {
+    scope: parts[0],
+    packageName: parts[1],
+    componentName: parts[2]
+  };
+}
+
+/**
+ * True when `s` is a canonical 3-part scoped id (`scope.package.Component`)
+ * rather than a bare component name or an `@scope/pkg` form.
+ */
+function isScopedComponentId(s) {
+  return typeof s === "string" && s.split(".").length === 3 && !s.includes("/");
+}
+
+/**
+ * Resolve the widgetId the permission gate should key grants by.
+ *
+ * Grants are written (preflight consent, Settings → grants,
+ * `expandToComponentRows`) under the canonical SCOPED id
+ * (`scope.package.Component`). At render time the layout item passes that
+ * scoped id as the component, but a bare `params.name` (the component's
+ * short name) used to shadow it — so the gate looked up a bare key, missed
+ * the grant, and re-prompted per call. Prefer a scoped id among the
+ * candidates so the gate's lookup hits the grant the user already approved;
+ * fall back to the legacy behavior for built-in/bare widgets.
+ *
+ * @param {string} component the component id from the layout item
+ * @param {string} [paramsName] params.name on the layout item
+ * @returns {string}
+ */
+function resolveGateWidgetId(component, paramsName) {
+  if (isScopedComponentId(component)) return component;
+  if (isScopedComponentId(paramsName)) return paramsName;
+  return paramsName || component;
+}
+
+/**
+ * Pull the bare component name from a scoped or unscoped id.
+ *
+ * @param {string} idOrName
+ * @returns {string}
+ */
+function bareComponentName(idOrName) {
+  if (typeof idOrName !== "string") return "";
+  var parts = idOrName.split(".");
+  return parts[parts.length - 1] || "";
+}
+
 function ownKeys$O(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
 function _objectSpread$O(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys$O(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys$O(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 /**
@@ -25154,10 +25250,13 @@ var WidgetRenderer = function WidgetRenderer(_ref) {
       // MountTokenWrapper owns the per-widget mount-token IPC
       // (register at mount, unregister at unmount) and provides the
       // WidgetContext value (widgetData + bound api) to descendants.
-      // The widgetId used for registration is the package name —
-      // that's what grants are keyed by, so the gate's
-      // token → widgetId resolution finds the right grant.
-      var widgetIdForGate = (params === null || params === void 0 ? void 0 : params.name) || component;
+      // The widgetId must match the canonical SCOPED id grants are keyed
+      // by (scope.package.Component) — the same id the preflight consent,
+      // Settings → grants, and expandToComponentRows write under. A bare
+      // `params.name` used to shadow the scoped `component` here, so the
+      // gate looked up a bare key, missed the approved grant, and
+      // re-prompted per call (the ~20 popups after a package update).
+      var widgetIdForGate = resolveGateWidgetId(component, params === null || params === void 0 ? void 0 : params.name);
       return /*#__PURE__*/jsxRuntime.jsx(MountTokenWrapper, {
         widgetId: widgetIdForGate,
         widgetData: widgetData,
@@ -32283,72 +32382,6 @@ function resolveComponentKey(componentMap, component) {
   return component in componentMap ? component : null;
 }
 
-/**
- * scopedComponentId.js
- *
- * Single source of truth for the canonical scoped component id used by
- * ComponentManager registration, layout items, and publish-time scope
- * remap. Format: `scope.packageName.ComponentName`.
- *
- * Why a 3-part dotted form (and not `@scope/pkg.Component`)?
- * - Matches existing `config.id` shape that `.dash.js` files already
- *   set when authored explicitly (see ComponentManager.registerWidget:
- *   `const registrationKey = config.id || widgetKey;`).
- * - Trivial to parse (`split(".")` — three parts, ordered).
- * - Avoids slashes inside object keys, which some downstream serializers
- *   (older dash-registry indexers) historically choked on.
- *
- * The upstream package id may arrive in either of two shapes:
- *   - "@scope/pkg" (npm-style)
- *   - "scope/pkg"  (bare scope)
- * Both produce the same scoped id.
- */
-
-/**
- * Build the canonical scoped component id from a package name and a
- * bare component name.
- *
- * @param {string} packageName e.g. "@ai-built/pipeline" or "ai-built/pipeline"
- * @param {string} componentName e.g. "ProspectListColumn"
- * @returns {string} e.g. "ai-built.pipeline.ProspectListColumn"
- */
-function makeScopedComponentId(packageName, componentName) {
-  if (!componentName) return "";
-  if (!packageName) return componentName;
-  var cleaned = String(packageName).replace(/^@/, "").replace(/\//g, ".");
-  return "".concat(cleaned, ".").concat(componentName);
-}
-
-/**
- * Parse a scoped component id into its three parts. Returns null when
- * the input isn't a 3-part dotted id (e.g. legacy bare names).
- *
- * @param {string} scopedId
- * @returns {{scope: string, packageName: string, componentName: string} | null}
- */
-function parseScopedComponentId(scopedId) {
-  if (typeof scopedId !== "string") return null;
-  var parts = scopedId.split(".");
-  if (parts.length !== 3) return null;
-  return {
-    scope: parts[0],
-    packageName: parts[1],
-    componentName: parts[2]
-  };
-}
-
-/**
- * Pull the bare component name from a scoped or unscoped id.
- *
- * @param {string} idOrName
- * @returns {string}
- */
-function bareComponentName(idOrName) {
-  if (typeof idOrName !== "string") return "";
-  var parts = idOrName.split(".");
-  return parts[parts.length - 1] || "";
-}
-
 var _componentMap = {};
 var _containerComponent = null;
 var _gridContainerComponent = null;
@@ -69380,6 +69413,7 @@ exports.isContainer = isContainer;
 exports.isLikelySecret = isLikelySecret;
 exports.isMaxOrderForItem = isMaxOrderForItem;
 exports.isMinOrderForItem = isMinOrderForItem;
+exports.isScopedComponentId = isScopedComponentId;
 exports.isWidget = isWidget;
 exports.isWidgetResolvable = isWidgetResolvable;
 exports.isWorkspace = isWorkspace;
@@ -69398,6 +69432,7 @@ exports.renderGridLayoutFlow = renderGridLayoutFlow;
 exports.renderLayout = _renderLayout;
 exports.renderLayoutMenu = renderLayoutMenu;
 exports.replaceItemInLayout = replaceItemInLayout;
+exports.resolveGateWidgetId = resolveGateWidgetId;
 exports.resolveIcon = resolveIcon;
 exports.serialize = serialize;
 exports.setHostModules = setHostModules;