@xpert-ai/plugin-live-dashboard 0.1.3 → 0.2.0

package/dist/lib/dashboard-search.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardSearchProjection = dashboardSearchProjection;
+/** Explicit allowlist: no Binding source, parameter values, HTML/script, credentials
+ * or queried rows cross the shared knowledge boundary. Data access stays viewer-specific. */
+function dashboardSearchProjection(manifest, revision) {
+    return { revision, sections: [
+            { anchor: { kind: 'document', id: manifest.id }, text: manifest.title },
+            ...[...manifest.charts, ...manifest.tables].map(view => ({ anchor: { kind: 'widget', id: view.id }, text: view.title })),
+            ...manifest.controls.map(control => ({ anchor: { kind: 'control', id: control.controlId }, text: control.label }))
+        ] };
+}

package/dist/lib/dashboard-sharing.js

@@ -2,12 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DASHBOARD_SHARE_KEY = void 0;
 exports.dashboardSharingIssues = dashboardSharingIssues;
+const analytics_source_1 = require("./analytics-source");
 exports.DASHBOARD_SHARE_KEY = 'team-readonly';
 /** Apply the same provider policy when enabling a share and advancing a latest share. */
 function dashboardSharingIssues(manifest, sources) {
     const issues = [];
     for (const binding of manifest.bindings) {
-        const provider = sources.find(source => source.id === binding.dataSourceId)?.providers.find(provider => provider.id === binding.providerId);
+        const provider = sources.find(source => (0, analytics_source_1.sameAnalyticsResource)(source.source, binding.source))?.providers.find(provider => provider.id === binding.providerId);
         if (!provider)
             issues.push({ code: 'DASHBOARD_SOURCE_UNAVAILABLE', bindingId: binding.id });
         else if (provider.sharing?.mode === 'owner_only')