@trops/dash-core 0.1.82 → 0.1.83

package/dist/electron/index.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var require$$0 = require('electron');
+var require$$0$1 = require('electron');
 var require$$1 = require('electron-store');
 var require$$1$1 = require('path');
 var require$$2 = require('fs');
@@ -11,19 +11,19 @@ var require$$3 = require('xml2js');
 var require$$4 = require('JSONStream');
 var require$$5 = require('stream');
 var require$$6 = require('csv-parser');
-var require$$0$1 = require('image-downloader');
+var require$$0$2 = require('image-downloader');
 var require$$2$2 = require('get-pixels');
 var require$$3$1 = require('extract-colors');
 var require$$8 = require('https');
-var require$$0$2 = require('@modelcontextprotocol/sdk/client/index.js');
+var require$$0$3 = require('@modelcontextprotocol/sdk/client/index.js');
 var require$$1$3 = require('@modelcontextprotocol/sdk/client/stdio.js');
 var require$$2$3 = require('@modelcontextprotocol/sdk/client/streamableHttp.js');
 var require$$5$2 = require('child_process');
 var require$$2$4 = require('algoliasearch');
 var require$$3$2 = require('node:path');
-var require$$0$3 = require('openai');
+var require$$0$4 = require('openai');
 require('live-plugin-manager');
-var require$$0$4 = require('@anthropic-ai/sdk');
+var require$$0$5 = require('@anthropic-ai/sdk');
 var require$$2$6 = require('os');
 var require$$3$3 = require('adm-zip');
 var require$$4$1 = require('url');
@@ -629,7 +629,7 @@ var events$8 = {
  * Open a dialog window for choosing files
  */
 
-const { dialog } = require$$0;
+const { dialog } = require$$0$1;
 const events$7 = events$8;
 
 const showDialog$1 = async (win, message, allowFile, extensions = ["*"]) => {
@@ -654,11 +654,11 @@ var dialogController$1 = {
  * secureStore
  */
 
-const { safeStorage } = require$$0;
+const { safeStorage } = require$$0$1;
 const Store = require$$1;
 const events$6 = events$8;
 
-const schema = {
+const schema$1 = {
   appId: {
     type: "string",
   },
@@ -684,7 +684,7 @@ const decryptString = (win, str) => {
 
 const saveData$1 = (key, value) => {
   try {
-    const store = new Store({ schema });
+    const store = new Store({ schema: schema$1 });
     store.set(key, value);
     return getData$1(key);
   } catch (e) {
@@ -694,7 +694,7 @@ const saveData$1 = (key, value) => {
 
 const getData$1 = (key) => {
   try {
-    const store = new Store({ schema });
+    const store = new Store({ schema: schema$1 });
     const value = store.get(key);
     if (value) {
       return { [key]: value };
@@ -864,7 +864,7 @@ var file = {
   checkDirectory: checkDirectory$1,
 };
 
-const { app: app$7 } = require$$0;
+const { app: app$7 } = require$$0$1;
 const path$c = require$$1$1;
 const { writeFileSync: writeFileSync$3 } = require$$2;
 const { getFileContents: getFileContents$5 } = file;
@@ -1116,7 +1116,7 @@ const workspaceController$1 = {
 
 var workspaceController_1 = workspaceController$1;
 
-const { app: app$6 } = require$$0;
+const { app: app$6 } = require$$0$1;
 const path$b = require$$1$1;
 const { writeFileSync: writeFileSync$2 } = require$$2;
 const { getFileContents: getFileContents$4 } = file;
@@ -1273,7 +1273,7 @@ var JSONStream$1 = require$$4;
 const stream = require$$5;
 var csv = require$$6;
 const path$a = require$$1$1;
-const { app: app$5 } = require$$0;
+const { app: app$5 } = require$$0$1;
 const { ensureDirectoryExistence: ensureDirectoryExistence$1 } = file;
 
 const TRANSFORM_APP_NAME = "Dashboard";
@@ -3386,7 +3386,7 @@ var ntc_1 = ntc$1;
  * - extractColorsFromImageURL
  */
 
-const download = require$$0$1;
+const download = require$$0$2;
 const getPixels = require$$2$2;
 const { extractColors } = require$$3$1;
 const ntc = ntc_1;
@@ -3430,7 +3430,7 @@ async function extractColorsFromImageURL$2(url, toDirectory) {
 
 var color = { extractColorsFromImageURL: extractColorsFromImageURL$2 };
 
-const { app: app$4 } = require$$0;
+const { app: app$4 } = require$$0$1;
 var fs$7 = require$$2;
 const path$9 = require$$1$1;
 const events$5 = events$8;
@@ -3917,7 +3917,7 @@ var dataController_1 = dataController$1;
  * settingsController
  */
 
-const { app: app$3 } = require$$0;
+const { app: app$3 } = require$$0$1;
 const path$8 = require$$1$1;
 const fs$6 = require$$2;
 const { getFileContents: getFileContents$2, writeToFile } = file;
@@ -4399,7 +4399,7 @@ function requireClientCache () {
 	   * Call this once in the consuming app's electron.js alongside setupWidgetRegistryHandlers().
 	   */
 	  setupCacheHandlers() {
-	    const { ipcMain } = require$$0;
+	    const { ipcMain } = require$$0$1;
 	    const responseCache = responseCache_1;
 
 	    ipcMain.handle(
@@ -4440,7 +4440,7 @@ var hasRequiredProviderController;
 function requireProviderController () {
 	if (hasRequiredProviderController) return providerController_1;
 	hasRequiredProviderController = 1;
-	const { app, safeStorage } = require$$0;
+	const { app, safeStorage } = require$$0$1;
 	const path = require$$1$1;
 	const { writeFileSync, readFileSync, existsSync } = require$$2;
 	const {
@@ -4771,7 +4771,7 @@ function requireProviderController () {
 	return providerController_1;
 }
 
-const { app: app$2 } = require$$0;
+const { app: app$2 } = require$$0$1;
 const path$7 = require$$1$1;
 const { writeFileSync: writeFileSync$1 } = require$$2;
 const events$4 = events$8;
@@ -4861,7 +4861,7 @@ var mcpController$3 = {exports: {}};
  * Uses @modelcontextprotocol/sdk for protocol handling.
  */
 
-const { Client } = require$$0$2;
+const { Client } = require$$0$3;
 const {
   StdioClientTransport,
 } = require$$1$3;
@@ -6647,7 +6647,7 @@ const algoliaController$1 = {
 
 var algoliaController_1 = algoliaController$1;
 
-const OpenAI = require$$0$3;
+const OpenAI = require$$0$4;
 const events$2 = events$8;
 
 const openaiController$1 = {
@@ -6688,7 +6688,7 @@ const openaiController$1 = {
 
 var openaiController_1 = openaiController$1;
 
-const { app: app$1 } = require$$0;
+const { app: app$1 } = require$$0$1;
 const path$3 = require$$1$1;
 const { writeFileSync } = require$$2;
 const { getFileContents } = file;
@@ -6763,7 +6763,7 @@ const menuItemsController$1 = {
 var menuItemsController_1 = menuItemsController$1;
 
 const path$2 = require$$1$1;
-const { app } = require$$0;
+const { app } = require$$0$1;
 
 const pluginController$1 = {
   install: (win, packageName, filepath) => {
@@ -7224,7 +7224,7 @@ var cliController_1 = cliController$2;
  * per-request, receiving the full messages array each time.
  */
 
-const Anthropic = require$$0$4;
+const Anthropic = require$$0$5;
 const mcpController$1 = mcpControllerExports;
 const cliController$1 = cliController_1;
 const {
@@ -7553,7 +7553,7 @@ clientCache$1.registerFactory("algolia", (credentials) => {
 
 // --- OpenAI ---
 clientCache$1.registerFactory("openai", (credentials) => {
-  const OpenAI = require$$0$3;
+  const OpenAI = require$$0$4;
   return new OpenAI({ apiKey: credentials.apiKey });
 });
 
@@ -7660,7 +7660,7 @@ var controller = {
   searchIndex,
 };
 
-const { ipcRenderer: ipcRenderer$h } = require$$0;
+const { ipcRenderer: ipcRenderer$h } = require$$0$1;
 const {
   SECURE_STORE_ENCRYPTION_CHECK,
   SECURE_STORE_SET_DATA,
@@ -7686,7 +7686,7 @@ var secureStoreApi_1 = secureStoreApi$2;
  * Handle the workspace configuration file
  */
 
-const { ipcRenderer: ipcRenderer$g } = require$$0;
+const { ipcRenderer: ipcRenderer$g } = require$$0$1;
 const {
   WORKSPACE_LIST,
   WORKSPACE_SAVE,
@@ -7736,7 +7736,7 @@ var workspaceApi_1 = workspaceApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$f } = require$$0;
+const { ipcRenderer: ipcRenderer$f } = require$$0$1;
 
 const { LAYOUT_LIST, LAYOUT_SAVE } = events$8;
 
@@ -7756,7 +7756,7 @@ var layoutApi_1 = layoutApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$e } = require$$0;
+const { ipcRenderer: ipcRenderer$e } = require$$0$1;
 
 const {
   DATA_JSON_TO_CSV_FILE,
@@ -7871,7 +7871,7 @@ var dataApi_1 = dataApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$d } = require$$0;
+const { ipcRenderer: ipcRenderer$d } = require$$0$1;
 
 const {
   SETTINGS_GET,
@@ -7904,7 +7904,7 @@ var settingsApi_1 = settingsApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$c } = require$$0;
+const { ipcRenderer: ipcRenderer$c } = require$$0$1;
 
 const { CHOOSE_FILE } = events$8;
 
@@ -7935,7 +7935,7 @@ var dialogApi_1 = dialogApi$2;
  * mainApi.widgets.uninstall('Weather')
  */
 
-const { ipcRenderer: ipcRenderer$b } = require$$0;
+const { ipcRenderer: ipcRenderer$b } = require$$0$1;
 
 const widgetApi$2 = {
   /**
@@ -8263,7 +8263,7 @@ var widgetApi_1 = widgetApi$2;
  * Communicates with main process via IPC to handle encryption and file storage
  */
 
-const { ipcRenderer: ipcRenderer$a } = require$$0;
+const { ipcRenderer: ipcRenderer$a } = require$$0$1;
 const {
   PROVIDER_SAVE,
   PROVIDER_LIST,
@@ -8434,7 +8434,7 @@ var providerApi_1 = providerApi$2;
  * Communicates with main process via IPC to manage MCP server lifecycle.
  */
 
-const { ipcRenderer: ipcRenderer$9 } = require$$0;
+const { ipcRenderer: ipcRenderer$9 } = require$$0$1;
 const {
   MCP_START_SERVER,
   MCP_STOP_SERVER,
@@ -8568,7 +8568,7 @@ var mcpApi_1 = mcpApi$2;
  * mainApi.registry.checkUpdates([{ name: "weather-widgets", version: "1.0.0" }])
  */
 
-const { ipcRenderer: ipcRenderer$8 } = require$$0;
+const { ipcRenderer: ipcRenderer$8 } = require$$0$1;
 
 const registryApi$2 = {
   /**
@@ -8643,7 +8643,7 @@ var registryApi_1 = registryApi$2;
  * Handle the theme configuration file
  */
 
-const { ipcRenderer: ipcRenderer$7 } = require$$0;
+const { ipcRenderer: ipcRenderer$7 } = require$$0$1;
 
 const { THEME_LIST, THEME_SAVE, THEME_DELETE } = events$8;
 
@@ -8665,7 +8665,7 @@ var themeApi_1 = themeApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$6 } = require$$0;
+const { ipcRenderer: ipcRenderer$6 } = require$$0$1;
 
 const {
   ALGOLIA_LIST_INDICES,
@@ -8748,7 +8748,7 @@ var algoliaApi_1 = algoliaApi$2;
  * openAI
  */
 
-const { ipcRenderer: ipcRenderer$5 } = require$$0;
+const { ipcRenderer: ipcRenderer$5 } = require$$0$1;
 
 const { OPENAI_DESCRIBE_IMAGE } = openaiEvents$1;
 
@@ -8766,7 +8766,7 @@ var openaiApi_1 = openaiApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$4 } = require$$0;
+const { ipcRenderer: ipcRenderer$4 } = require$$0$1;
 
 const { MENU_ITEMS_SAVE, MENU_ITEMS_LIST } = events$8;
 
@@ -8785,7 +8785,7 @@ var menuItemsApi_1 = menuItemsApi$2;
  */
 
 // ipcRenderer that must be used to invoke the events
-const { ipcRenderer: ipcRenderer$3 } = require$$0;
+const { ipcRenderer: ipcRenderer$3 } = require$$0$1;
 
 const pluginApi$2 = {
   install: (packageName, filepath) =>
@@ -8803,7 +8803,7 @@ var pluginApi_1 = pluginApi$2;
  * tool-use events, and request cancellation.
  */
 
-const { ipcRenderer: ipcRenderer$2 } = require$$0;
+const { ipcRenderer: ipcRenderer$2 } = require$$0$1;
 const {
   LLM_SEND_MESSAGE,
   LLM_ABORT_REQUEST,
@@ -8963,7 +8963,7 @@ var llmApi_1 = llmApi$2;
  * and manage the response cache.
  */
 
-const { ipcRenderer: ipcRenderer$1 } = require$$0;
+const { ipcRenderer: ipcRenderer$1 } = require$$0$1;
 const {
   CLIENT_CACHE_INVALIDATE,
   CLIENT_CACHE_INVALIDATE_ALL,
@@ -9428,7 +9428,7 @@ var dynamicWidgetLoaderExports = dynamicWidgetLoader$2.exports;
 	const os = require$$2$6;
 	const AdmZip = require$$3$3;
 	const { fileURLToPath } = require$$4$1;
-	const { app, ipcMain, BrowserWindow } = require$$0;
+	const { app, ipcMain, BrowserWindow } = require$$0$1;
 	const { dynamicWidgetLoader } = dynamicWidgetLoaderExports;
 	const { compileWidget, findWidgetsDir } = widgetCompiler$1;
 
@@ -10377,6 +10377,510 @@ var dynamicWidgetLoaderExports = dynamicWidgetLoader$2.exports;
 
 var widgetRegistryExports = widgetRegistry$1.exports;
 
+var $schema = "https://json-schema.org/draft/2020-12/schema";
+var $id = "https://trops.github.io/dash-registry/dashboard-config.schema.json";
+var title = "Dashboard Configuration";
+var description = "Schema for portable dashboard configuration files (.dashboard.json)";
+var type = "object";
+var required = [
+	"schemaVersion",
+	"name",
+	"workspace",
+	"widgets"
+];
+var properties = {
+	schemaVersion: {
+		type: "string",
+		description: "Schema version for forward compatibility",
+		pattern: "^\\d+\\.\\d+\\.\\d+$",
+		examples: [
+			"1.0.0"
+		]
+	},
+	name: {
+		type: "string",
+		description: "Display name of the dashboard",
+		minLength: 1,
+		maxLength: 100
+	},
+	description: {
+		type: "string",
+		description: "Human-readable description of the dashboard",
+		maxLength: 1000,
+		"default": ""
+	},
+	author: {
+		type: "object",
+		description: "Dashboard curator/creator (separate from widget authors)",
+		required: [
+			"name"
+		],
+		properties: {
+			name: {
+				type: "string",
+				description: "Author display name"
+			},
+			id: {
+				type: "string",
+				description: "Author identifier"
+			}
+		},
+		additionalProperties: false
+	},
+	shareable: {
+		type: "boolean",
+		description: "true for user-created dashboards, false for imported. Only shareable dashboards can be published to the registry.",
+		"default": true
+	},
+	tags: {
+		type: "array",
+		description: "Searchable tags for discovery",
+		items: {
+			type: "string",
+			maxLength: 50
+		},
+		maxItems: 20,
+		"default": [
+		]
+	},
+	icon: {
+		type: "string",
+		description: "FontAwesome icon name",
+		"default": "grip"
+	},
+	screenshots: {
+		type: "array",
+		description: "Screenshot URLs or references",
+		items: {
+			type: "string"
+		},
+		"default": [
+		]
+	},
+	workspace: {
+		type: "object",
+		description: "Full workspace configuration (DashboardModel JSON)",
+		required: [
+			"layout"
+		],
+		properties: {
+			id: {
+				description: "Workspace ID (timestamp or number)"
+			},
+			name: {
+				type: "string"
+			},
+			type: {
+				type: "string",
+				"enum": [
+					"layout",
+					"widget",
+					"workspace",
+					"grid"
+				],
+				"default": "workspace"
+			},
+			label: {
+				type: "string"
+			},
+			version: {
+				"default": 1
+			},
+			layout: {
+				type: "array",
+				description: "Array of layout items (LayoutModel objects)",
+				items: {
+					type: "object"
+				},
+				minItems: 1
+			},
+			menuId: {
+				"default": 1
+			}
+		},
+		additionalProperties: true
+	},
+	widgets: {
+		type: "array",
+		description: "Widget dependencies required by this dashboard",
+		items: {
+			type: "object",
+			required: [
+				"id",
+				"package"
+			],
+			properties: {
+				id: {
+					type: "string",
+					description: "Widget identifier (e.g., trops.algolia.AlgoliaSearchPage)"
+				},
+				"package": {
+					type: "string",
+					description: "npm package name (e.g., @trops/algolia-search)"
+				},
+				version: {
+					type: "string",
+					description: "Semver range (e.g., ^1.0.0)",
+					"default": "*"
+				},
+				required: {
+					type: "boolean",
+					description: "Whether this widget is required for the dashboard to function",
+					"default": true
+				},
+				author: {
+					type: "string",
+					description: "Original widget author (preserved from widget package metadata)"
+				}
+			},
+			additionalProperties: false
+		}
+	},
+	providers: {
+		type: "array",
+		description: "Provider dependencies required by widgets in this dashboard",
+		items: {
+			type: "object",
+			required: [
+				"type",
+				"providerClass"
+			],
+			properties: {
+				type: {
+					type: "string",
+					description: "Provider type identifier (e.g., algolia, slack, github)"
+				},
+				providerClass: {
+					type: "string",
+					description: "Provider class: credential or mcp",
+					"enum": [
+						"credential",
+						"mcp"
+					]
+				},
+				required: {
+					type: "boolean",
+					"default": true
+				},
+				usedBy: {
+					type: "array",
+					description: "Widget component names that use this provider",
+					items: {
+						type: "string"
+					},
+					"default": [
+					]
+				}
+			},
+			additionalProperties: false
+		},
+		"default": [
+		]
+	},
+	eventWiring: {
+		type: "array",
+		description: "Pre-configured event connections between widgets",
+		items: {
+			type: "object",
+			required: [
+				"source",
+				"target"
+			],
+			properties: {
+				source: {
+					type: "object",
+					required: [
+						"widget",
+						"event"
+					],
+					properties: {
+						widget: {
+							type: "string",
+							description: "Source widget component name"
+						},
+						event: {
+							type: "string",
+							description: "Event name published by source widget"
+						}
+					},
+					additionalProperties: false
+				},
+				target: {
+					type: "object",
+					required: [
+						"widget",
+						"handler"
+					],
+					properties: {
+						widget: {
+							type: "string",
+							description: "Target widget component name"
+						},
+						handler: {
+							type: "string",
+							description: "Event handler name on target widget"
+						}
+					},
+					additionalProperties: false
+				}
+			},
+			additionalProperties: false
+		},
+		"default": [
+		]
+	}
+};
+var additionalProperties = false;
+var require$$0 = {
+	$schema: $schema,
+	$id: $id,
+	title: title,
+	description: description,
+	type: type,
+	required: required,
+	properties: properties,
+	additionalProperties: additionalProperties
+};
+
+/**
+ * dashboardConfigValidator.js
+ *
+ * Validates dashboard configuration objects against the dashboard-config schema.
+ * Runs in the Electron main process (CJS).
+ *
+ * Uses a lightweight validation approach based on the JSON Schema definition
+ * without requiring a full JSON Schema validator library.
+ */
+
+const schema = require$$0;
+
+const CURRENT_SCHEMA_VERSION = "1.0.0";
+
+/**
+ * Validate a dashboard configuration object.
+ *
+ * @param {Object} config - The dashboard config to validate
+ * @returns {{ valid: boolean, errors: string[] }} Validation result
+ */
+function validateDashboardConfig(config) {
+    const errors = [];
+
+    if (config === null || config === undefined || typeof config !== "object") {
+        return { valid: false, errors: ["Config must be a non-null object"] };
+    }
+
+    // Required fields
+    for (const field of schema.required) {
+        if (!(field in config)) {
+            errors.push(`Missing required field: "${field}"`);
+        }
+    }
+
+    // If required fields are missing, return early — further checks would be noisy
+    if (errors.length > 0) {
+        return { valid: false, errors };
+    }
+
+    // schemaVersion
+    if (typeof config.schemaVersion !== "string") {
+        errors.push(`"schemaVersion" must be a string`);
+    } else if (!/^\d+\.\d+\.\d+$/.test(config.schemaVersion)) {
+        errors.push(
+            `"schemaVersion" must be a semver string (e.g., "1.0.0"), got "${config.schemaVersion}"`,
+        );
+    }
+
+    // name
+    if (typeof config.name !== "string" || config.name.length === 0) {
+        errors.push(`"name" must be a non-empty string`);
+    } else if (config.name.length > 100) {
+        errors.push(`"name" must be 100 characters or fewer`);
+    }
+
+    // description (optional)
+    if ("description" in config && typeof config.description !== "string") {
+        errors.push(`"description" must be a string`);
+    }
+
+    // author (optional)
+    if ("author" in config) {
+        if (
+            typeof config.author !== "object" ||
+            config.author === null ||
+            Array.isArray(config.author)
+        ) {
+            errors.push(`"author" must be an object with at least a "name" field`);
+        } else if (!config.author.name || typeof config.author.name !== "string") {
+            errors.push(`"author.name" must be a non-empty string`);
+        }
+    }
+
+    // shareable (optional)
+    if ("shareable" in config && typeof config.shareable !== "boolean") {
+        errors.push(`"shareable" must be a boolean`);
+    }
+
+    // tags (optional)
+    if ("tags" in config) {
+        if (!Array.isArray(config.tags)) {
+            errors.push(`"tags" must be an array of strings`);
+        } else {
+            for (let i = 0; i < config.tags.length; i++) {
+                if (typeof config.tags[i] !== "string") {
+                    errors.push(`"tags[${i}]" must be a string`);
+                }
+            }
+        }
+    }
+
+    // workspace
+    if (typeof config.workspace !== "object" || config.workspace === null) {
+        errors.push(`"workspace" must be an object`);
+    } else {
+        if (!Array.isArray(config.workspace.layout)) {
+            errors.push(`"workspace.layout" must be an array`);
+        } else if (config.workspace.layout.length === 0) {
+            errors.push(`"workspace.layout" must contain at least one layout item`);
+        }
+    }
+
+    // widgets
+    if (!Array.isArray(config.widgets)) {
+        errors.push(`"widgets" must be an array`);
+    } else {
+        for (let i = 0; i < config.widgets.length; i++) {
+            const w = config.widgets[i];
+            if (typeof w !== "object" || w === null) {
+                errors.push(`"widgets[${i}]" must be an object`);
+                continue;
+            }
+            if (!w.id || typeof w.id !== "string") {
+                errors.push(`"widgets[${i}].id" must be a non-empty string`);
+            }
+            if (!w.package || typeof w.package !== "string") {
+                errors.push(`"widgets[${i}].package" must be a non-empty string`);
+            }
+            if ("version" in w && typeof w.version !== "string") {
+                errors.push(`"widgets[${i}].version" must be a string`);
+            }
+            if ("required" in w && typeof w.required !== "boolean") {
+                errors.push(`"widgets[${i}].required" must be a boolean`);
+            }
+            if ("author" in w && typeof w.author !== "string") {
+                errors.push(`"widgets[${i}].author" must be a string`);
+            }
+        }
+    }
+
+    // providers (optional)
+    if ("providers" in config) {
+        if (!Array.isArray(config.providers)) {
+            errors.push(`"providers" must be an array`);
+        } else {
+            const validClasses = ["credential", "mcp"];
+            for (let i = 0; i < config.providers.length; i++) {
+                const p = config.providers[i];
+                if (typeof p !== "object" || p === null) {
+                    errors.push(`"providers[${i}]" must be an object`);
+                    continue;
+                }
+                if (!p.type || typeof p.type !== "string") {
+                    errors.push(
+                        `"providers[${i}].type" must be a non-empty string`,
+                    );
+                }
+                if (!validClasses.includes(p.providerClass)) {
+                    errors.push(
+                        `"providers[${i}].providerClass" must be "credential" or "mcp", got "${p.providerClass}"`,
+                    );
+                }
+                if ("usedBy" in p && !Array.isArray(p.usedBy)) {
+                    errors.push(`"providers[${i}].usedBy" must be an array`);
+                }
+            }
+        }
+    }
+
+    // eventWiring (optional)
+    if ("eventWiring" in config) {
+        if (!Array.isArray(config.eventWiring)) {
+            errors.push(`"eventWiring" must be an array`);
+        } else {
+            for (let i = 0; i < config.eventWiring.length; i++) {
+                const ew = config.eventWiring[i];
+                if (typeof ew !== "object" || ew === null) {
+                    errors.push(`"eventWiring[${i}]" must be an object`);
+                    continue;
+                }
+                // source
+                if (
+                    typeof ew.source !== "object" ||
+                    ew.source === null ||
+                    !ew.source.widget ||
+                    !ew.source.event
+                ) {
+                    errors.push(
+                        `"eventWiring[${i}].source" must have "widget" and "event" strings`,
+                    );
+                }
+                // target
+                if (
+                    typeof ew.target !== "object" ||
+                    ew.target === null ||
+                    !ew.target.widget ||
+                    !ew.target.handler
+                ) {
+                    errors.push(
+                        `"eventWiring[${i}].target" must have "widget" and "handler" strings`,
+                    );
+                }
+            }
+        }
+    }
+
+    // Reject unknown top-level fields
+    const allowedFields = Object.keys(schema.properties);
+    for (const key of Object.keys(config)) {
+        if (!allowedFields.includes(key)) {
+            errors.push(`Unknown field: "${key}"`);
+        }
+    }
+
+    return { valid: errors.length === 0, errors };
+}
+
+/**
+ * Apply defaults to a dashboard config (fills in optional fields with defaults).
+ *
+ * @param {Object} config - A valid dashboard config
+ * @returns {Object} Config with defaults applied (does not mutate original)
+ */
+function applyDefaults(config) {
+    return {
+        schemaVersion: CURRENT_SCHEMA_VERSION,
+        description: "",
+        shareable: true,
+        tags: [],
+        icon: "grip",
+        screenshots: [],
+        providers: [],
+        eventWiring: [],
+        ...config,
+        workspace: {
+            type: "workspace",
+            version: 1,
+            menuId: 1,
+            ...config.workspace,
+        },
+    };
+}
+
+var dashboardConfigValidator$1 = {
+    validateDashboardConfig,
+    applyDefaults,
+    CURRENT_SCHEMA_VERSION,
+};
+
 /**
  * mainApi.js
  *
@@ -10390,7 +10894,7 @@ var widgetRegistryExports = widgetRegistry$1.exports;
  *   contextBridge.exposeInMainWorld("mainApi", defaultMainApi);
  */
 
-const { ipcRenderer, shell } = require$$0;
+const { ipcRenderer, shell } = require$$0$1;
 const secureStoreApi$1 = secureStoreApi_1;
 const workspaceApi$1 = workspaceApi_1;
 const layoutApi$1 = layoutApi_1;
@@ -10560,6 +11064,9 @@ const widgetRegistry = widgetRegistryExports;
 const widgetCompiler = widgetCompiler$1;
 const dynamicWidgetLoader = dynamicWidgetLoaderExports;
 
+// --- Schema ---
+const dashboardConfigValidator = dashboardConfigValidator$1;
+
 // --- Factory: createMainApi ---
 const { createMainApi, defaultMainApi } = mainApi;
 
@@ -10620,6 +11127,9 @@ var electron = {
   clientCache,
   responseCache,
 
+  // Schema
+  dashboardConfigValidator,
+
   // Setup helpers
   setupCacheHandlers: clientCache.setupCacheHandlers.bind(clientCache),
 };