@xpert-ai/plugin-live-dashboard 0.1.1 → 0.1.3

package/.xpertai-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-live-dashboard",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "level": "system",
   "artifactNamespace": "live_dashboard",
   "sandboxActions": "./dist/sandbox-actions/action.json",

package/dist/lib/dashboard-navigation.d.ts

@@ -1,5 +1,31 @@
 import { z } from 'zod/v3';
+import type { XpertResolvedViewHostContext } from '@xpert-ai/contracts';
 export declare const DASHBOARD_VIEW_KEY = "live-dashboard__live-dashboard";
+export declare const dashboardNavigationTargetSchema: z.ZodDiscriminatedUnion<"target", [z.ZodObject<{
+    target: z.ZodLiteral<"workbench.view">;
+    viewKey: z.ZodLiteral<"live-dashboard__live-dashboard">;
+}, "strict", z.ZodTypeAny, {
+    target: "workbench.view";
+    viewKey: "live-dashboard__live-dashboard";
+}, {
+    target: "workbench.view";
+    viewKey: "live-dashboard__live-dashboard";
+}>, z.ZodObject<{
+    target: z.ZodLiteral<"assistant.project">;
+    projectId: z.ZodString;
+    viewKey: z.ZodLiteral<"live-dashboard__live-dashboard">;
+}, "strict", z.ZodTypeAny, {
+    projectId: string;
+    target: "assistant.project";
+    viewKey: "live-dashboard__live-dashboard";
+}, {
+    projectId: string;
+    target: "assistant.project";
+    viewKey: "live-dashboard__live-dashboard";
+}>]>;
+export type DashboardNavigationTarget = z.infer<typeof dashboardNavigationTargetSchema>;
+/** Resolve from the authorized host context, never from the dashboard's business identity. */
+export declare function dashboardNavigationTarget(context: XpertResolvedViewHostContext): DashboardNavigationTarget;
 export declare const dashboardNavigationSchema: z.ZodEffects<z.ZodObject<{
     selectionId: z.ZodOptional<z.ZodString>;
     parameters: z.ZodOptional<z.ZodObject<{

package/dist/lib/dashboard-navigation.js

@@ -1,9 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.dashboardNavigationKey = exports.dashboardNavigationSchema = exports.DASHBOARD_VIEW_KEY = void 0;
+exports.dashboardNavigationKey = exports.dashboardNavigationSchema = exports.dashboardNavigationTargetSchema = exports.DASHBOARD_VIEW_KEY = void 0;
+exports.dashboardNavigationTarget = dashboardNavigationTarget;
 const v3_1 = require("zod/v3");
 // The host namespaces provider + local view key; cards use the resolved public key.
 exports.DASHBOARD_VIEW_KEY = 'live-dashboard__live-dashboard';
+exports.dashboardNavigationTargetSchema = v3_1.z.discriminatedUnion('target', [
+    v3_1.z.object({ target: v3_1.z.literal('workbench.view'), viewKey: v3_1.z.literal(exports.DASHBOARD_VIEW_KEY) }).strict(),
+    v3_1.z.object({ target: v3_1.z.literal('assistant.project'), projectId: v3_1.z.string().uuid(), viewKey: v3_1.z.literal(exports.DASHBOARD_VIEW_KEY) }).strict()
+]);
+/** Resolve from the authorized host context, never from the dashboard's business identity. */
+function dashboardNavigationTarget(context) {
+    if (context.hostType !== 'agent' && context.hostType !== 'project')
+        throw new Error('DASHBOARD_HOST_UNSUPPORTED');
+    return {
+        ...(context.hostType === 'project' ? { target: 'assistant.project', projectId: context.hostId } : { target: 'workbench.view' }),
+        viewKey: exports.DASHBOARD_VIEW_KEY
+    };
+}
 exports.dashboardNavigationSchema = v3_1.z.object({
     selectionId: v3_1.z.string().uuid().optional(),
     parameters: v3_1.z.object({ artifactId: v3_1.z.string().uuid().optional(), versionId: v3_1.z.string().uuid().optional() }).strict().optional()

package/dist/lib/dashboard-sharing.d.ts

@@ -0,0 +1,8 @@
+import type { AnalyticsSourceSummary } from '@xpert-ai/contracts';
+import type { DashboardManifest } from './dashboard.schema';
+export declare const DASHBOARD_SHARE_KEY = "team-readonly";
+/** Apply the same provider policy when enabling a share and advancing a latest share. */
+export declare function dashboardSharingIssues(manifest: DashboardManifest, sources: AnalyticsSourceSummary[]): {
+    code: string;
+    bindingId: string;
+}[];

package/dist/lib/dashboard-sharing.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DASHBOARD_SHARE_KEY = void 0;
+exports.dashboardSharingIssues = dashboardSharingIssues;
+exports.DASHBOARD_SHARE_KEY = 'team-readonly';
+/** Apply the same provider policy when enabling a share and advancing a latest share. */
+function dashboardSharingIssues(manifest, sources) {
+    const issues = [];
+    for (const binding of manifest.bindings) {
+        const provider = sources.find(source => source.id === binding.dataSourceId)?.providers.find(provider => provider.id === binding.providerId);
+        if (!provider)
+            issues.push({ code: 'DASHBOARD_SOURCE_UNAVAILABLE', bindingId: binding.id });
+        else if (provider.sharing?.mode === 'owner_only')
+            issues.push({ code: provider.sharing.reasonCode ?? 'DASHBOARD_PRIVATE_DEPENDENCY', bindingId: binding.id });
+    }
+    return issues;
+}

package/dist/lib/dashboard.service.js

@@ -22,6 +22,7 @@ const dashboard_queries_1 = require("./dashboard-queries");
 const html_validation_1 = require("./html-validation");
 const document_libraries_1 = require("./document-libraries");
 const document_package_1 = require("./document-package");
+const dashboard_sharing_1 = require("./dashboard-sharing");
 exports.PLUGIN_NAME = '@xpert-ai/plugin-live-dashboard';
 const RESOURCE_TYPE = 'live-dashboard';
 const MIME_TYPE = 'application/json';
@@ -124,6 +125,12 @@ let DashboardService = class DashboardService {
     }
     async publish(context, artifactId, expectedRevision, expectedCurrentVersionId) {
         const saved = await this.open(context, artifactId, undefined, expectedRevision);
+        const share = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
+        if (share?.status === 'active' && share.versionMode === 'latest' && (!share.expiresAt || new Date(share.expiresAt).getTime() > Date.now())) {
+            const issues = (0, dashboard_sharing_1.dashboardSharingIssues)(saved.manifest, await this.sources(context));
+            if (issues.length)
+                throw new common_1.BadRequestException({ message: 'DASHBOARD_PUBLISH_SHARE_BLOCKED', code: 'DASHBOARD_PUBLISH_SHARE_BLOCKED', issues });
+        }
         // Revalidate current source access and bindings before publishing the exact reviewed bytes.
         await this.execute(context, saved.manifest, {});
         const version = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).publish({ artifactId, expectedRevision, expectedCurrentVersionId });

package/dist/lib/middleware.d.ts

@@ -6,5 +6,5 @@ export declare class DashboardMiddleware implements IAgentMiddlewareStrategy {
     private readonly service;
     readonly meta: TAgentMiddlewareMeta;
     constructor(service: DashboardService);
-    createMiddleware(_options: object, context: IAgentMiddlewareContext): AgentMiddleware;
+    createMiddleware(_options: unknown, context: IAgentMiddlewareContext): AgentMiddleware;
 }

package/dist/lib/middleware.js

@@ -28,7 +28,7 @@ const filter_evidence_1 = require("./filter-evidence");
 const save_evidence_1 = require("./save-evidence");
 const resource_card_1 = require("./resource-card");
 const dashboard_icon_1 = require("./dashboard-icon");
-const middlewareOptionsSchema = v3_1.z.object({ allowedFinalProviders: v3_1.z.array(v3_1.z.string().min(1)).min(1).max(20).optional() }).strict();
+const middlewareOptionsSchema = v3_1.z.object({ allowedFinalProviders: v3_1.z.array(v3_1.z.string().min(1)).min(1).max(20).optional() }).strict().default({});
 exports.DASHBOARD_GUIDANCE = `For a new independent dashboard, use a new unused HTML file path. An existing filename or matching title is not authorization to edit another Artifact; do not switch from creation to dashboard_open/update because a file already exists. For a new dashboard, call dashboard_list_sources before searching raw files, reading old scripts or creating transformations. Named governed sources may already provide the required query; inspect their provider contracts first. File-backed sources do not imply that a script must be written. For creating or editing live dashboards, first read the installed live-dashboard skill using read_skill_file and follow only the references relevant to the task. Use SandboxFile tools for all source-file authoring; HTML alone is not a saved dashboard. Follow preview.validation.checks immediately before authoring HTML; each suggestedCall must actually succeed. Business definitions, real data previews and nullable-filter tests are required before saving new or changed Bindings. Do not invent business data or substitute a different metric without agreement. Report completion only from a successful dashboard_create/dashboard_create_html/dashboard_update draft receipt. Human publication is separate. Successful create, update and open tools emit a chat resource card automatically; resourceCard.status reports emission. Its Open button selects the exact dashboard in Workbench. Never fabricate a link, call present_files for dashboard HTML, or output card JSON as text. If card delivery is unavailable, report the saved receipt and use the Workbench picker.`;
 let DashboardMiddleware = class DashboardMiddleware {
     constructor(service) {

package/dist/lib/resource-card.js

@@ -15,8 +15,7 @@ function dashboardResourceCard(scope, saved) {
         description: saved.state === 'draft' ? `Dashboard · Draft r${saved.revision}` : `Dashboard · v${saved.versionNumber}`,
         icon: dashboard_icon_1.dashboardIcon,
         open: {
-            ...(scope.hostType === 'project' ? { target: 'assistant.project', projectId: scope.hostId } : { target: 'workbench.view' }),
-            viewKey: dashboard_navigation_1.DASHBOARD_VIEW_KEY, selectionId: saved.artifactId,
+            ...(0, dashboard_navigation_1.dashboardNavigationTarget)(scope), selectionId: saved.artifactId,
             ...(saved.state === 'published' && saved.versionId ? { parameters: { versionId: saved.versionId } } : {})
         }
     };

package/dist/lib/sharing.service.js

@@ -17,9 +17,9 @@ const common_1 = require("@nestjs/common");
 const v3_1 = require("zod/v3");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 const dashboard_service_1 = require("./dashboard.service");
+const dashboard_sharing_1 = require("./dashboard-sharing");
 exports.shareInput = v3_1.z.object({ artifactId: v3_1.z.string().uuid(), versionMode: v3_1.z.enum(['latest', 'version']), versionId: v3_1.z.string().uuid().optional() }).strict()
     .refine(value => value.versionMode !== 'version' || !!value.versionId, 'A fixed share requires a published version');
-const SHARE_KEY = 'team-readonly';
 let DashboardSharingService = class DashboardSharingService {
     constructor(dashboards, runtime) {
         this.dashboards = dashboards;
@@ -28,20 +28,14 @@ let DashboardSharingService = class DashboardSharingService {
     async inspect(context, artifactId, versionId) {
         const versions = await this.dashboards.history(context, artifactId);
         const selected = versionId ? versions.find(version => version.versionId === versionId) : versions.find(version => version.current);
-        const link = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifactShare({ artifactId, shareKey: SHARE_KEY });
+        const link = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         const issues = [];
         if (!selected?.versionId)
             issues.push({ code: 'DASHBOARD_PUBLISH_BEFORE_SHARING' });
         else {
             const saved = await this.dashboards.open(context, artifactId, selected.versionId);
             const sources = await this.dashboards.sources(context);
-            for (const binding of saved.manifest.bindings) {
-                const provider = sources.find(source => source.id === binding.dataSourceId)?.providers.find(provider => provider.id === binding.providerId);
-                if (!provider)
-                    issues.push({ code: 'DASHBOARD_SOURCE_UNAVAILABLE', bindingId: binding.id });
-                else if (provider.sharing?.mode === 'owner_only')
-                    issues.push({ code: provider.sharing.reasonCode ?? 'DASHBOARD_PRIVATE_DEPENDENCY', bindingId: binding.id });
-            }
+            issues.push(...(0, dashboard_sharing_1.dashboardSharingIssues)(saved.manifest, sources));
         }
         return { published: selected ?? null, issues, link: link ? { status: link.status, versionMode: link.versionMode,
                 versionId: link.artifactVersionId, url: link.presentationUrl, expiresAt: link.expiresAt } : null };
@@ -50,7 +44,7 @@ let DashboardSharingService = class DashboardSharingService {
         const state = await this.inspect(context, input.artifactId, input.versionMode === 'version' ? input.versionId : undefined);
         if (state.issues.length || !state.published?.versionId)
             throw new common_1.BadRequestException({ code: 'DASHBOARD_SHARE_BLOCKED', issues: state.issues });
-        const result = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).ensureArtifactShare({ artifactId: input.artifactId, shareKey: SHARE_KEY,
+        const result = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).ensureArtifactShare({ artifactId: input.artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY,
             versionMode: input.versionMode, ...(input.versionMode === 'version' ? { artifactVersionId: state.published.versionId } : {}),
             access: { mode: 'organization_all' }, presentation: { allowDownload: false, disposition: 'inline', safeHtmlProfile: 'strict' } });
         if (!result.link.presentationUrl)
@@ -59,7 +53,7 @@ let DashboardSharingService = class DashboardSharingService {
     }
     async revoke(context, artifactId) {
         await this.dashboards.history(context, artifactId);
-        await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).revokeArtifactShare({ artifactId, shareKey: SHARE_KEY });
+        await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).revokeArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         return this.inspect(context, artifactId);
     }
 };

package/dist/lib/view.provider.d.ts

@@ -70,6 +70,14 @@ export declare class DashboardViewProvider implements IXpertViewExtensionProvide
                 title: string | null | undefined;
                 updatedAt: string | Date | undefined;
             }[] | undefined;
+            navigationTarget: {
+                target: "workbench.view";
+                viewKey: "live-dashboard__live-dashboard";
+            } | {
+                projectId: string;
+                target: "assistant.project";
+                viewKey: "live-dashboard__live-dashboard";
+            };
             dashboards: {
                 title: string | null | undefined;
                 artifactId: string;

package/dist/lib/view.provider.js

@@ -56,7 +56,7 @@ let DashboardViewProvider = class DashboardViewProvider {
     async getViewData(context, viewKey, query) {
         assertView(viewKey);
         const params = dashboard_navigation_1.dashboardNavigationSchema.parse(query);
-        return { meta: { dashboards: await this.service.list(context), sources: await this.service.sources(context),
+        return { meta: { navigationTarget: (0, dashboard_navigation_1.dashboardNavigationTarget)(context), dashboards: await this.service.list(context), sources: await this.service.sources(context),
                 ...(params.artifactId ? { saved: await this.service.openDocument(context, params.artifactId, params.versionId),
                     versions: await this.service.history(context, params.artifactId) } : {}) } };
     }