@xpert-ai/plugin-live-dashboard 0.1.4 → 0.2.0

package/dist/lib/dashboard.service.js

@@ -13,6 +13,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DashboardService = exports.PLUGIN_NAME = void 0;
+exports.projectId = projectId;
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
@@ -39,20 +40,24 @@ let DashboardService = class DashboardService {
         return dataset;
     }
     async list(context) {
-        actor(context);
+        await this.authorizeProject(context);
         const result = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).listArtifacts({ pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceIdPrefix: hostPrefix(context), status: 'active', pageSize: 100, includeCurrentVersion: true });
-        const items = result.items.filter((item) => item.resourceId.startsWith(hostPrefix(context)) && item.userId === context.userId);
+        const items = result.items.filter((item) => item.resourceId.startsWith(hostPrefix(context)) && (item.userId === context.userId || !item.userId && item.projectId === projectId(context)));
         const drafts = new Map((await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).list(items.map(item => item.id))).map(draft => [draft.artifactId, draft]));
         return items.map(item => ({ ...summary(item), ...(drafts.has(item.id) ? { title: drafts.get(item.id).title ?? item.title } : {}) }));
     }
     async save(context, manifest, expectedVersionId, expectedRevision = 0) {
+        await this.authorizeProject(context, 'write');
         const scopedActor = actor(context);
         const parsed = dashboard_schema_1.dashboardSchema.parse(manifest);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const source = { pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceId: `${hostPrefix(context)}${parsed.id}` };
         const existing = await artifacts.findArtifactBySource(source);
-        if (existing && existing.userId !== scopedActor.userId)
-            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+        if (existing) {
+            assertOwned(context, existing);
+            if (existing.status !== 'active')
+                throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
+        }
         // A failed first upload can leave an Artifact with no saved content; revision 0 initializes it.
         const previous = existing && (existing.currentVersionId || expectedRevision > 0) ? await this.openDocument(context, existing.id) : null;
         const dependencies = await (0, document_libraries_1.resolveLibraryAssets)(parsed.presentation?.dependencies ?? [], previous?.dependencies);
@@ -70,14 +75,22 @@ let DashboardService = class DashboardService {
             await this.probeControls(context, binding, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])));
         const htmlValidation = await this.htmlValidation.validate(context, parsed, preview, dependencies);
         const artifact = existing ?? await artifacts.createArtifact({ source, kind: 'file', title: parsed.title,
-            scope: { ...scopedActor, ...(context.hostType === 'project' ? { projectId: context.hostId } : { xpertId: context.hostId }) } });
+            scope: { ...scopedActor, ...(projectId(context) ? { projectId: projectId(context), userId: null } : { xpertId: context.hostId }) } });
         const files = this.runtime.require(plugin_sdk_1.WorkspaceFilesRuntimeCapability);
-        const scope = { tenantId: scopedActor.tenantId, userId: scopedActor.userId, catalog: 'users' };
-        const file = await files.uploadBuffer({ ...scope, buffer, originalName: 'dashboard.json', fileName: `${digest}.json`, folder: `live-dashboards/${parsed.id}`, mimeType: MIME_TYPE });
+        const project = projectId(context);
+        // Shared definitions live in the Project volume; private legacy dashboards retain their user volume.
+        const privateScope = { tenantId: scopedActor.tenantId, userId: scopedActor.userId, catalog: 'users' };
+        const reference = project
+            ? (await files.writeRuntimeBuffer({ tenantId: scopedActor.tenantId, userId: scopedActor.userId,
+                catalog: 'projects', scopeId: project, projectId: project, buffer, originalName: 'dashboard.json',
+                fileName: `${digest}.json`, folder: `.xpert/live-dashboards/${parsed.id}`, mimeType: MIME_TYPE })).reference
+            : await files.uploadBuffer({ ...privateScope, buffer, originalName: 'dashboard.json', fileName: `${digest}.json`,
+                folder: `live-dashboards/${parsed.id}`, mimeType: MIME_TYPE }).then(file => ({
+                source: 'platform.workspace.files', ...privateScope, filePath: file.filePath, workspacePath: file.workspacePath
+            }));
         const result = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).save({ artifactId: artifact.id, expectedRevision,
             expectedCurrentVersionId: expectedVersionId, mimeType: MIME_TYPE, title: parsed.title, fileName: 'dashboard.json', sha256: digest,
-            ...(htmlValidation ? { metadata: { htmlValidation } } : {}),
-            workspaceFileRef: { source: 'platform.workspace.files', ...scope, filePath: file.filePath, workspacePath: file.workspacePath } });
+            ...(htmlValidation ? { metadata: { htmlValidation } } : {}), workspaceFileRef: reference });
         return { artifactId: artifact.id, draftId: result.id, draftRevision: result.revision, baseVersionId: result.baseVersionId, status: 'draft', title: parsed.title };
     }
     async open(context, artifactId, versionId, draftRevision) {
@@ -86,10 +99,12 @@ let DashboardService = class DashboardService {
     }
     /** Trusted View transport only. Agent read tools receive locks, never megabytes of library code. */
     async openDocument(context, artifactId, versionId, draftRevision) {
-        actor(context);
+        await this.authorizeProject(context);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const artifact = await artifacts.getArtifact(artifactId);
         assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
         const draft = !versionId || draftRevision !== undefined ? await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).get(artifactId) : null;
         if (draftRevision !== undefined && draft?.revision !== draftRevision)
             throw new common_1.ConflictException('DASHBOARD_DRAFT_CONFLICT');
@@ -109,10 +124,12 @@ let DashboardService = class DashboardService {
                 isDraft: draft.revision !== draft.publishedRevision, title: draft.title, updatedAt: draft.updatedAt } : {}), manifest, dependencies };
     }
     async history(context, artifactId) {
-        actor(context);
+        await this.authorizeProject(context);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const artifact = await artifacts.getArtifact(artifactId);
         assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
         const versions = await artifacts.listArtifactVersions({ artifactId, status: 'active' });
         return versions.map(version => ({ ...summary(artifact, version), current: version.id === artifact.currentVersionId }))
             .sort((a, b) => (b.versionNumber ?? 0) - (a.versionNumber ?? 0));
@@ -124,7 +141,10 @@ let DashboardService = class DashboardService {
         return this.save(context, dashboard_schema_1.dashboardSchema.parse({ ...saved.manifest, ...dashboard_schema_1.dashboardChangesSchema.parse(changes) }), saved.baseVersionId ?? saved.versionId ?? null, expectedRevision);
     }
     async publish(context, artifactId, expectedRevision, expectedCurrentVersionId) {
+        await this.authorizeProject(context, 'manage');
         const saved = await this.open(context, artifactId, undefined, expectedRevision);
+        if (!saved.manifest.bindings.length)
+            throw new common_1.BadRequestException('DASHBOARD_CONFIGURE_BEFORE_PUBLISHING');
         const share = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         if (share?.status === 'active' && share.versionMode === 'latest' && (!share.expiresAt || new Date(share.expiresAt).getTime() > Date.now())) {
             const issues = (0, dashboard_sharing_1.dashboardSharingIssues)(saved.manifest, await this.sources(context));
@@ -138,13 +158,29 @@ let DashboardService = class DashboardService {
     }
     async query(context, artifactId, versionId, controls, draftRevision) {
         const saved = await this.open(context, artifactId, versionId, draftRevision);
-        const datasets = await this.execute(context, saved.manifest, controls);
-        return { ...saved, datasets, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
+        const { datasets, failures } = await (0, dashboard_queries_1.queryDashboardPartial)(this.runtime, actor(context), saved.manifest, controls);
+        return { ...saved, datasets, failures, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
     }
     async queryBinding(context, artifactId, versionId, bindingId, input, draftRevision) {
         const saved = await this.open(context, artifactId, versionId, draftRevision);
         return (0, dashboard_queries_1.queryDashboardBinding)(this.runtime, actor(context), saved.manifest, bindingId, input);
     }
+    /** Every operation uses the current human's Project role; data queries still use actor(context). */
+    async authorizeProject(context, operation = 'read') {
+        const scopedActor = actor(context), project = projectId(context);
+        if (!project)
+            return;
+        const access = this.runtime.require(plugin_sdk_1.ProjectAccessRuntimeCapability);
+        const input = { actor: scopedActor, projectId: project };
+        if (context.hostType === 'agent')
+            await access.assertAssistant({ ...input, assistantId: context.hostId });
+        if (operation === 'write')
+            await access.assertEdit(input);
+        else if (operation === 'manage')
+            await access.assertManage(input);
+        else if (!(await access.listReadable({ actor: scopedActor, projectIds: [project] })).length)
+            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+    }
     execute(context, manifest, input) {
         return (0, dashboard_queries_1.queryDashboard)(this.runtime, actor(context), manifest, input);
     }
@@ -177,10 +213,11 @@ function actor(context) {
         throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
     return { tenantId: context.tenantId, organizationId: context.organizationId, userId: context.userId };
 }
-function hostPrefix(context) { return `${context.hostType}/${context.hostId}/`; }
+function projectId(context) { return context.hostType === 'project' ? context.hostId : context.runtimeScope?.projectId; }
+function hostPrefix(context) { return projectId(context) ? `project/${projectId(context)}/` : `${context.hostType}/${context.hostId}/`; }
 function assertOwned(context, artifact) {
     if (artifact.pluginName !== exports.PLUGIN_NAME || artifact.resourceType !== RESOURCE_TYPE || !artifact.resourceId.startsWith(hostPrefix(context)) ||
-        artifact.tenantId !== context.tenantId || artifact.organizationId !== context.organizationId || artifact.userId !== context.userId)
+        artifact.tenantId !== context.tenantId || artifact.organizationId !== context.organizationId || (artifact.userId ? artifact.userId !== context.userId : !projectId(context) || artifact.projectId !== projectId(context)))
         throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
 }
 function summary(artifact, version = artifact.currentVersion) {

package/dist/lib/document-host.d.ts

@@ -0,0 +1,4 @@
+import { type ArtifactDocumentHostOptions } from '@xpert-ai/plugin-sdk/artifact-document';
+/** The HTML never supplies or overrides its network permissions. */
+export declare function mountDashboardDocument<T>(frame: HTMLIFrameElement, options: ArtifactDocumentHostOptions<T>): import("@xpert-ai/plugin-sdk/artifact-document").ArtifactDocumentHost;
+export declare function isDashboardResourceAllowed(resourceType: string, url: string): boolean;

package/dist/lib/document-host.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mountDashboardDocument = mountDashboardDocument;
+exports.isDashboardResourceAllowed = isDashboardResourceAllowed;
+const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
+const document_network_1 = require("./document-network");
+/** The HTML never supplies or overrides its network permissions. */
+function mountDashboardDocument(frame, options) {
+    return (0, artifact_document_1.mountArtifactDocument)(frame, { ...options, networkPolicy: document_network_1.DASHBOARD_NETWORK_POLICY });
+}
+function isDashboardResourceAllowed(resourceType, url) {
+    return (0, artifact_document_1.isArtifactDocumentResourceAllowed)(document_network_1.DASHBOARD_NETWORK_POLICY, resourceType, url);
+}

package/dist/lib/document-network.d.ts

@@ -0,0 +1,3 @@
+import type { ArtifactDocumentNetworkPolicy } from '@xpert-ai/plugin-sdk/artifact-document';
+/** Trusted plugin policy, shared by the displayed document and browser preflight. */
+export declare const DASHBOARD_NETWORK_POLICY: ArtifactDocumentNetworkPolicy;

package/dist/lib/document-network.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DASHBOARD_NETWORK_POLICY = void 0;
+/** Trusted plugin policy, shared by the displayed document and browser preflight. */
+exports.DASHBOARD_NETWORK_POLICY = {
+    scripts: ['https://cdn.tailwindcss.com', 'https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com'],
+    styles: ['https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com', 'https://fonts.googleapis.com'],
+    fonts: ['https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com', 'https://fonts.gstatic.com']
+};

package/dist/lib/html-guidance.d.ts

@@ -1 +1 @@
-export declare const HTML_DASHBOARD_GUIDANCE = "For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. ECharts/Three.js are available via dashboard_libraries; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control=\"<controlId>\"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.";
+export declare const HTML_DASHBOARD_GUIDANCE = "For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. Call dashboard_libraries for packaged ECharts/Three.js and the allowed HTTPS origins for online scripts, stylesheets and fonts. Tailwind CDN is supported through script src; pin a version when possible. Online resource failures must be repaired before saving. Do not add online URLs to the packaged libraries array; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control=\"<controlId>\"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.";

package/dist/lib/html-guidance.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HTML_DASHBOARD_GUIDANCE = void 0;
-exports.HTML_DASHBOARD_GUIDANCE = `For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. ECharts/Three.js are available via dashboard_libraries; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control="<controlId>"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.`;
+exports.HTML_DASHBOARD_GUIDANCE = `For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. Call dashboard_libraries for packaged ECharts/Three.js and the allowed HTTPS origins for online scripts, stylesheets and fonts. Tailwind CDN is supported through script src; pin a version when possible. Online resource failures must be repaired before saving. Do not add online URLs to the packaged libraries array; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control="<controlId>"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.`;

package/dist/lib/middleware.js

@@ -20,6 +20,7 @@ const v3_1 = require("zod/v3");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
 const document_libraries_1 = require("./document-libraries");
+const document_network_1 = require("./document-network");
 const agent_schema_1 = require("./agent.schema");
 const html_guidance_1 = require("./html-guidance");
 const dashboard_service_1 = require("./dashboard.service");
@@ -31,6 +32,7 @@ const filter_evidence_1 = require("./filter-evidence");
 const save_evidence_1 = require("./save-evidence");
 const resource_card_1 = require("./resource-card");
 const dashboard_icon_1 = require("./dashboard-icon");
+const preview_retry_1 = require("./preview-retry");
 const middlewareOptionsSchema = v3_1.z.object({ allowedFinalProviders: v3_1.z.array(v3_1.z.string().min(1)).min(1).max(20).optional() }).strict().default({});
 exports.DASHBOARD_GUIDANCE = `For a new independent dashboard, use a new unused HTML file path. An existing filename or matching title is not authorization to edit another Artifact; do not switch from creation to dashboard_open/update because a file already exists. For a new dashboard, call dashboard_list_sources before searching raw files, reading old scripts or creating transformations. Named governed sources may already provide the required query; inspect their provider contracts first. File-backed sources do not imply that a script must be written. For creating or editing live dashboards, first read the installed live-dashboard skill using read_skill_file and follow only the references relevant to the task. Use SandboxFile tools for all source-file authoring; HTML alone is not a saved dashboard. Follow preview.validation.checks immediately before authoring HTML; each suggestedCall must actually succeed. Business definitions, real data previews and nullable-filter tests are required before saving new or changed Bindings. Do not invent business data or substitute a different metric without agreement. Report completion only from a successful dashboard_create/dashboard_create_html/dashboard_update draft receipt. Human publication is separate. Successful create, update and open tools emit a chat resource card automatically; resourceCard.status reports emission. Its Open button selects the exact dashboard in Workbench. Never fabricate a link, call present_files for dashboard HTML, or output card JSON as text. If card delivery is unavailable, report the saved receipt and use the Workbench picker.`;
 let DashboardMiddleware = class DashboardMiddleware {
@@ -56,13 +58,37 @@ let DashboardMiddleware = class DashboardMiddleware {
         };
         // Evidence belongs to this run and actor, never a process-wide cache of business data.
         const discovered = new Map(), previews = new Map();
+        const discovering = new Map();
         let listedSources;
+        const assertSourceSelection = (input) => {
+            if (listedSources && !listedSources.some(source => (0, analytics_source_1.sameAnalyticsResource)(source.source, input.source) && source.providers.some(provider => provider.id === input.providerId)))
+                throw new Error(`DASHBOARD_SOURCE_SELECTION_INVALID: copy an exact source/providerId pair from dashboard_list_sources; do not invent or combine IDs. Known pairs: ${JSON.stringify(listedSources.map(source => ({ source: source.source, name: source.name, providerIds: source.providers.map(provider => provider.id) })))}. Refresh the list if the source changed. Initial requestJson is "{}"; then follow inspectRequest/nextRequest.`);
+        };
+        const discover = async (input) => {
+            assertSourceSelection(input);
+            const result = await this.service.discover(scope, input);
+            discovered.set(`${(0, analytics_1.analyticsSourceKey)(input.source)}/${input.providerId}`, result.queryContract);
+            return result;
+        };
+        const ensureContract = async (input) => {
+            assertSourceSelection(input);
+            const key = `${(0, analytics_1.analyticsSourceKey)(input.source)}/${input.providerId}`;
+            const cached = discovered.get(key);
+            if (cached)
+                return cached;
+            // Parallel previews share discovery, but failures are retryable and never become evidence.
+            let pending = discovering.get(key);
+            if (!pending) {
+                pending = discover({ source: input.source, providerId: input.providerId, request: {} })
+                    .then(result => result.queryContract).finally(() => discovering.delete(key));
+                discovering.set(key, pending);
+            }
+            return pending;
+        };
         const filterEvidence = (0, filter_evidence_1.createFilterEvidence)(this.service, scope, previews);
         const created = new Map();
         const preview = async (binding) => {
-            const contract = discovered.get(`${(0, analytics_1.analyticsSourceKey)(binding.source)}/${binding.providerId}`);
-            if (!contract)
-                throw new Error('DASHBOARD_DISCOVER_REQUIRED');
+            const contract = await ensureContract(binding);
             (0, plugin_sdk_1.validateAnalyticsPayload)(binding.payload, contract.payloadSchema);
             const controls = Object.fromEntries(binding.parameters.map((parameter) => [parameter.controlId, parameter.defaultValue ?? null]));
             const dataset = await this.service.preview(scope, { binding, controls });
@@ -124,6 +150,7 @@ let DashboardMiddleware = class DashboardMiddleware {
                 throw new Error('DASHBOARD_WORKSPACE_REQUIRED');
             return files;
         });
+        const previewRetries = (0, preview_retry_1.createPreviewRetryGuard)();
         let modelCalls = 0;
         return { name: 'LiveDashboard', contextSchema: editing_1.dashboardContextSchema,
             wrapToolCall: async (request, handler) => {
@@ -134,11 +161,20 @@ let DashboardMiddleware = class DashboardMiddleware {
                     : name === 'dashboard_create' ? agent_schema_1.createToolSchema.safeParse(args) : undefined;
                 const save = dashboard_receipt_1.DASHBOARD_MUTATION_TOOLS.includes(name) ? evidence.beginSave(creation?.success ? creation.data.supersedesPaths : undefined, name === 'dashboard_create' ? 'draft' : 'source') : undefined;
                 const result = path && (evidence.has(path) || previews.size > 0 && agent_schema_1.htmlPathSchema.safeParse(path).success)
-                    ? await evidence.trackWrite(path, async () => handler(request)) : await handler(request);
+                    ? await evidence.trackWrite(path, async () => handler(request)) : await previewRetries.run(request, handler);
                 if (save && 'content' in result && (!('status' in result) || result.status !== 'error'))
                     await evidence.accept(save, result.content);
                 return result;
             }, wrapModelCall: async (request, handler) => {
+                if (previewRetries.exhausted) {
+                    const summary = previewRetries.summary + (evidence.pending ? ` Unsaved Workspace files: ${JSON.stringify(evidence.pendingPaths)}.` : '');
+                    const result = await handler({ ...request, tools: [], toolChoice: 'none', systemMessage: new messages_1.SystemMessage({ content: [
+                                ...(typeof request.systemMessage?.content === 'string' ? [{ type: 'text', text: request.systemMessage.content }] : request.systemMessage?.content ?? []),
+                                { type: 'text', text: summary }
+                            ] }) });
+                    // A noncompliant model must not restart the failed loop even after tools were removed.
+                    return result?.tool_calls?.length ? new messages_1.AIMessage(summary) : result;
+                }
                 const exhausted = ++modelCalls > 24;
                 if (exhausted && evidence.pending)
                     throw new Error('DASHBOARD_SAVE_NOT_CONFIRMED: no successful draft save receipt; Workspace changes have not been saved to the dashboard.');
@@ -153,6 +189,8 @@ let DashboardMiddleware = class DashboardMiddleware {
                 filterEvidence.tool,
                 ...(0, definition_tools_1.createDefinitionTools)(context, () => { listedSources = undefined; }),
                 (0, tools_1.tool)(async () => JSON.stringify({ libraries: await (0, document_libraries_1.libraryLocks)(['echarts', 'three']),
+                    online: { ...document_network_1.DASHBOARD_NETWORK_POLICY,
+                        usage: 'HTML may load scripts, stylesheets and fonts directly from these exact HTTPS origins. Use script src and link rel="stylesheet"; pin exact versions where available. Tailwind CDN https://cdn.tailwindcss.com is supported. Online resources require connectivity when saving and viewing; loading failures fail preflight. Keep all business data queries on window.xpertLiveArtifact; fetch/XHR, external images, workers, iframes and eval remain unavailable. Online resources do not belong in the packaged libraries array.' },
                     pageRuntime: {
                         global: 'window.xpertLiveArtifact',
                         bindingIds: [...new Set([...previews.values()].map(binding => binding.id))],
@@ -162,7 +200,7 @@ let DashboardMiddleware = class DashboardMiddleware {
                     },
                     usage: { echarts: 'window.echarts: init(element, null, {renderer:"svg"}) then setOption(completeOption, {notMerge:true}). Canvas is also available. Derive active series/legend dimensions from each received Dataset, including filtered results; never retain excluded groups as zero-valued series. Aggregate repeated categories using all grain dimensions, clear empty results, and redraw KPI, chart and details together in subscribe. Use ResizeObserver to resize and reuse the instance on filter/refresh.',
                         three: 'window.THREE: bundled core including WebGLRenderer. Requires WebGL2; catch unavailable GPU contexts and show a clear fallback. External textures/models, loaders/addons, WebGPU and workers are not bundled.' },
-                    lifecycle: 'Pass libraries IDs to dashboard_create_html or dashboard_update. Actual version and bytes are pinned on save; omitted libraries on update preserves saved locks. No CDN, imports or network access.' }), { name: 'dashboard_libraries', description: 'Discover packaged frontend libraries and exact versions available to HTML dashboards. Read before using ECharts/Three.js. Returns metadata, never library source.',
+                    lifecycle: 'Pass packaged library IDs to dashboard_create_html or dashboard_update. Actual version and bytes are pinned on save; omitted libraries on update preserves saved locks. Online resources are listed separately under online, are not pinned in the Artifact, and must load successfully when saving and viewing.' }), { name: 'dashboard_libraries', description: 'Discover packaged frontend libraries, exact versions and allowed HTTPS origins for online scripts, stylesheets and fonts. Read before using Tailwind CDN or ECharts/Three.js. Returns metadata, never library source.',
                     schema: v3_1.z.object({}).strict(), verboseParsingErrors: true, metadata: { toolName: { en_US: 'Discover dashboard libraries', zh_Hans: '查看看板前端图库' } } }),
                 ...(0, editing_1.createEditingTools)(this.service, scope, context, resolvePreviews, validateFinal, (path, artifactId) => evidence.opened(path, artifactId)),
                 (0, tools_1.tool)(async () => {
@@ -173,24 +211,18 @@ let DashboardMiddleware = class DashboardMiddleware {
                     schema: v3_1.z.object({}).strict(), verboseParsingErrors: true, metadata: { toolName: { en_US: 'List analytics sources', zh_Hans: '发现分析数据源' } }
                 }),
                 (0, tools_1.tool)(async (input) => {
-                    if (listedSources && !listedSources.some(source => (0, analytics_source_1.sameAnalyticsResource)(source.source, input.source) && source.providers.some(provider => provider.id === input.providerId)))
-                        throw new Error(`DASHBOARD_SOURCE_SELECTION_INVALID: copy an exact source/providerId pair from dashboard_list_sources; do not invent or combine IDs. Known pairs: ${JSON.stringify(listedSources.map(source => ({ source: source.source, name: source.name, providerIds: source.providers.map(provider => provider.id) })))}. Refresh the list if the source changed. Initial requestJson is "{}"; then follow inspectRequest/nextRequest.`);
                     const parsed = { source: input.source, providerId: input.providerId, request: (0, agent_schema_1.parseObjectJson)(input.requestJson) };
-                    const result = await this.service.discover(scope, parsed);
-                    discovered.set(`${(0, analytics_1.analyticsSourceKey)(parsed.source)}/${parsed.providerId}`, result.queryContract);
-                    return JSON.stringify(result);
+                    return JSON.stringify(await discover(parsed));
                 }, { name: 'dashboard_discover', description: 'Discover provider-owned business metadata. Start requestJson="{}" then serialize inspectRequest/nextRequest. Inspect dataset fields, comments, measures and native query format before preview.',
                     schema: agent_schema_1.discoverToolSchema, verboseParsingErrors: true, metadata: { toolName: { en_US: 'Inspect business data', zh_Hans: '理解业务数据与指标' } } }),
                 (0, tools_1.tool)(async (input) => {
-                    const contract = discovered.get(`${(0, analytics_1.analyticsSourceKey)(input.binding.source)}/${input.binding.providerId}`);
-                    if (!contract)
-                        throw new Error('DASHBOARD_DISCOVER_REQUIRED: discover the source before preview');
+                    const contract = await ensureContract(input.binding);
                     const binding = (0, agent_schema_1.fromAgentBinding)(input.binding, contract);
                     return preview(binding);
-                }, { name: 'dashboard_preview', description: 'Run one read-only binding using parameters[].defaultValue. Returns validated Dataset fields, first 20 rows, full query completeness and audit. Required before create; changes to binding/defaults require another preview.',
+                }, { name: 'dashboard_preview', description: 'Run one read-only binding using parameters[].defaultValue. Automatically discovers the source/provider query contract when absent in this run; use dashboard_discover to inspect business metadata or repair invalid queries. Returns validated Dataset fields, first 20 rows, full query completeness and audit. Required before create; changes to binding/defaults require another preview.',
                     schema: agent_schema_1.previewToolSchema, verboseParsingErrors: true, metadata: { toolName: { en_US: 'Verify dashboard data', zh_Hans: '预览并验证看板数据' } } }),
                 (0, tools_1.tool)(async ({ bindingJson }) => preview(plugin_sdk_1.analyticsBindingSchema.parse(JSON.parse(bindingJson))), {
-                    name: 'dashboard_preview_binding', description: 'Preview a complete canonical AnalyticsBinding returned by another tool. Serialize the complete canonical Binding (for example discovery items[].metadata.binding), including parameters[].controlId. bindingPayload is only the payload, not a Binding. If adding a parameter, include name, controlId, type, required and defaultValue. Do not convert it to the simplified dashboard_preview input. Discovery of the source is still required. Returns the same previewId receipt for dashboard_create.',
+                    name: 'dashboard_preview_binding', description: 'Preview a complete canonical AnalyticsBinding returned by another tool. Serialize the complete canonical Binding (for example discovery items[].metadata.binding), including parameters[].controlId. bindingPayload is only the payload, not a Binding. If adding a parameter, include name, controlId, type, required and defaultValue. Do not convert it to the simplified dashboard_preview input. Automatically discovers the source/provider query contract when absent in this run; use dashboard_discover for business metadata. Returns the same previewId receipt for dashboard_create.',
                     schema: v3_1.z.object({ bindingJson: v3_1.z.string().min(2).max(200000) }).strict(), verboseParsingErrors: true,
                     metadata: { toolName: { en_US: 'Verify registered dataset', zh_Hans: '验证已注册数据集' } }
                 }),

package/dist/lib/plugin.js

@@ -7,6 +7,8 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LiveDashboardPlugin = void 0;
+const content_capability_1 = require("./content-capability");
+const content_provider_1 = require("./content.provider");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 const dashboard_service_1 = require("./dashboard.service");
 const view_provider_1 = require("./view.provider");
@@ -18,5 +20,5 @@ let LiveDashboardPlugin = class LiveDashboardPlugin {
 };
 exports.LiveDashboardPlugin = LiveDashboardPlugin;
 exports.LiveDashboardPlugin = LiveDashboardPlugin = __decorate([
-    (0, plugin_sdk_1.XpertServerPlugin)({ providers: [dashboard_service_1.DashboardService, view_provider_1.DashboardViewProvider, middleware_1.DashboardMiddleware, html_validation_1.HtmlDashboardValidation, presentation_provider_1.DashboardPresentationProvider, sharing_service_1.DashboardSharingService] })
+    (0, plugin_sdk_1.XpertServerPlugin)({ providers: [content_capability_1.DashboardCapability, content_provider_1.DashboardContentProvider, content_provider_1.DashboardContentEditor, dashboard_service_1.DashboardService, view_provider_1.DashboardViewProvider, middleware_1.DashboardMiddleware, html_validation_1.HtmlDashboardValidation, presentation_provider_1.DashboardPresentationProvider, sharing_service_1.DashboardSharingService] })
 ], LiveDashboardPlugin);

package/dist/lib/presentation.provider.d.ts

@@ -117,6 +117,11 @@ export declare class DashboardPresentationProvider implements IArtifactPresentat
             };
         } | undefined;
         datasets: import("@xpert-ai/contracts").AnalyticalDataset[];
+        failures: {
+            bindingId: string;
+            datasetId: string;
+            reason: "unavailable";
+        }[];
     }>;
     private open;
 }

package/dist/lib/presentation.provider.js

@@ -44,8 +44,8 @@ let DashboardPresentationProvider = class DashboardPresentationProvider {
             return (0, dashboard_queries_1.queryDashboardBinding)(this.runtime, context.actor, saved.manifest, input.bindingId, input.controls);
         if (request.operation !== 'query')
             throw new common_1.ForbiddenException('DASHBOARD_ACTION_UNSUPPORTED');
-        const datasets = await (0, dashboard_queries_1.queryDashboard)(this.runtime, context.actor, saved.manifest, input.controls);
-        return { datasets, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
+        const { datasets, failures } = await (0, dashboard_queries_1.queryDashboardPartial)(this.runtime, context.actor, saved.manifest, input.controls);
+        return { datasets, failures, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
     }
     open(context) {
         const { artifact, version, content } = context;

package/dist/lib/preview-retry.d.ts

@@ -0,0 +1,7 @@
+import type { AgentBuiltInState, ToolCallHandler, ToolCallRequest } from '@xpert-ai/plugin-sdk';
+/** Run-local bounds include tool-schema failures, before any discovery or query executes. */
+export declare function createPreviewRetryGuard(): {
+    readonly exhausted: boolean;
+    readonly summary: string;
+    run(request: ToolCallRequest<AgentBuiltInState>, handler: ToolCallHandler): Promise<import("@langchain/core/messages").ToolMessage | import("@langchain/langgraph").Command<unknown, Record<string, unknown>, string>>;
+};

package/dist/lib/preview-retry.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPreviewRetryGuard = createPreviewRetryGuard;
+const node_crypto_1 = require("node:crypto");
+const PREVIEW_TOOLS = new Set(['dashboard_preview', 'dashboard_preview_binding', 'dashboard_test_filter']);
+/** Run-local bounds include tool-schema failures, before any discovery or query executes. */
+function createPreviewRetryGuard() {
+    const failures = new Map(), pending = new Set();
+    let consecutiveFailures = 0, lastError = '';
+    const recordFailure = (key, message) => {
+        failures.set(key, { count: (failures.get(key)?.count ?? 0) + 1, message: message.slice(0, 2000) });
+        consecutiveFailures++;
+        lastError = message.slice(0, 2000);
+    };
+    return {
+        get exhausted() { return consecutiveFailures >= 6; },
+        get summary() { return `DASHBOARD_PREVIEW_RETRY_LIMIT: preview validation repeatedly failed. This run has stopped making tool calls. Report the last error and the required repair; do not claim an unconfirmed save. Last error: ${lastError}`; },
+        async run(request, handler) {
+            if (!PREVIEW_TOOLS.has(request.toolCall.name))
+                return handler(request);
+            const key = (0, node_crypto_1.createHash)('sha256').update(JSON.stringify({ name: request.toolCall.name, args: request.toolCall.args }, (_key, value) => value && typeof value === 'object' && !Array.isArray(value) ? Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b))) : value)).digest('hex');
+            if (consecutiveFailures >= 6)
+                throw new Error(this.summary);
+            if ((failures.get(key)?.count ?? 0) >= 2) {
+                consecutiveFailures++;
+                throw new Error(`DASHBOARD_PREVIEW_REPEAT_BLOCKED: this exact tool input already failed twice; no query was executed. Correct the input using the previous diagnostic, or stop and report the blocker. Last error: ${failures.get(key).message}`);
+            }
+            // Concurrent duplicate calls must not multiply queries or bypass the per-input bound.
+            if (pending.has(key))
+                throw new Error('DASHBOARD_PREVIEW_IN_PROGRESS: wait for the identical preview already in progress; do not submit duplicates.');
+            pending.add(key);
+            try {
+                const result = await handler(request);
+                if ('status' in result && result.status === 'error' && 'content' in result) {
+                    recordFailure(key, typeof result.content === 'string' ? result.content : 'Preview tool returned an error');
+                }
+                else {
+                    failures.delete(key);
+                    consecutiveFailures = 0;
+                }
+                return result;
+            }
+            catch (error) {
+                recordFailure(key, error instanceof Error ? error.message : 'Preview tool failed');
+                throw error;
+            }
+            finally {
+                pending.delete(key);
+            }
+        }
+    };
+}

package/dist/lib/renderer.js

@@ -3,6 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.toDataAnalyticsPayload = toDataAnalyticsPayload;
 /** The only Data Analytics v1 translation. Providers never see chart encoding syntax. */
 function toDataAnalyticsPayload(manifest, datasets) {
+    // Missing datasets are failures, not empty/zero business results. The caller renders
+    // their failure state separately; successful empty datasets still retain their views.
+    const available = new Set(datasets.map(dataset => dataset.datasetId));
+    manifest = { ...manifest, charts: manifest.charts.filter(chart => available.has(chart.datasetId)),
+        tables: manifest.tables.filter(table => available.has(table.datasetId)) };
     const snapshot = Object.fromEntries(datasets.flatMap((dataset) => [
         [dataset.datasetId, dataset.rows],
         ...(!manifest.charts.some((chart) => chart.datasetId === dataset.datasetId) ? [] : [[`__plot.${dataset.datasetId}`, dataset.rows.map((row) => Object.fromEntries(dataset.fields.map((field) => [field.id, manifest.charts.some((chart) => chart.datasetId === dataset.datasetId && [chart.x, chart.y].includes(field.id)) ? renderValue(row[field.id], field.logicalType) : row[field.id]])))]])

package/dist/lib/save-evidence.d.ts

@@ -15,7 +15,7 @@ export declare function dashboardSaveEvidence(files: () => WorkspaceFilesApi): {
         token: number;
         generations: Map<string, number>;
         supersedesPaths: string[];
-        confirmation: "source" | "draft";
+        confirmation: "draft" | "source";
     };
     accept(save: SaveAttempt, output: unknown): Promise<void>;
     readonly pending: boolean;

package/dist/lib/sharing.service.js

@@ -41,6 +41,7 @@ let DashboardSharingService = class DashboardSharingService {
                 versionId: link.artifactVersionId, url: link.presentationUrl, expiresAt: link.expiresAt } : null };
     }
     async share(context, input) {
+        await this.dashboards.authorizeProject(context, 'manage');
         const state = await this.inspect(context, input.artifactId, input.versionMode === 'version' ? input.versionId : undefined);
         if (state.issues.length || !state.published?.versionId)
             throw new common_1.BadRequestException({ code: 'DASHBOARD_SHARE_BLOCKED', issues: state.issues });
@@ -52,6 +53,7 @@ let DashboardSharingService = class DashboardSharingService {
         return this.inspect(context, input.artifactId, input.versionMode === 'version' ? input.versionId : undefined);
     }
     async revoke(context, artifactId) {
+        await this.dashboards.authorizeProject(context, 'manage');
         await this.dashboards.history(context, artifactId);
         await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).revokeArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         return this.inspect(context, artifactId);

package/dist/lib/view.provider.d.ts

@@ -191,6 +191,11 @@ export declare class DashboardViewProvider implements IXpertViewExtensionProvide
                 };
             } | undefined;
             datasets: import("@xpert-ai/contracts").AnalyticalDataset[];
+            failures: {
+                bindingId: string;
+                datasetId: string;
+                reason: "unavailable";
+            }[];
             manifest: {
                 schema: "xpert.live-dashboard";
                 id: string;

package/dist/lib/view.provider.js

@@ -32,15 +32,15 @@ let DashboardViewProvider = class DashboardViewProvider {
     }
     supports(context) { return context.hostType === 'agent' || context.hostType === 'project'; }
     getViewManifests(context, slot) {
-        if (!(context.hostType === 'agent' && slot === 'agent.workbench' || context.hostType === 'project' && slot === 'detail.sections'))
+        if (!(context.hostType === 'agent' && ['agent.workbench', 'agent.workbench.fixed', 'agent.workbench.main'].includes(slot) || context.hostType === 'project' && slot === 'detail.sections'))
             return [];
         return [{ key: exports.VIEW_KEY, title: text('Live dashboards', '实时看板'), hostType: context.hostType, slot, order: 35,
-                icon: dashboard_icon_1.dashboardIcon, refreshable: true, activation: { requiredFeatures: [exports.FEATURE] },
+                icon: dashboard_icon_1.dashboardIcon, refreshable: true, activation: { projectResource: true, requiredFeatures: [exports.FEATURE] },
                 source: { provider: exports.VIEW_PROVIDER, plugin: dashboard_service_1.PLUGIN_NAME },
-                workbench: { fixed: true, menu: { enabled: true, label: text('Live dashboards', '实时看板'), icon: dashboard_icon_1.dashboardIcon, order: 35 } },
+                workbench: { fixed: true, openMode: 'on-demand', menu: { enabled: true, label: text('Live dashboards', '实时看板'), icon: dashboard_icon_1.dashboardIcon, order: 35 } },
                 view: { type: 'remote_component', runtime: 'react', protocolVersion: 1, component: { isolation: 'iframe', entry: exports.VIEW_KEY }, dataSource: { mode: 'platform' } },
                 dataSource: { mode: 'platform', querySchema: { supportsSelection: true, supportsParameters: true }, cache: { enabled: false } },
-                clientCommands: [{ key: contracts_1.ASSISTANT_CONTEXT_SET_COMMAND, label: text('Select dashboard for Assistant', '设置助理当前看板') },
+                clientCommands: [{ key: 'workbench.content.status' }, { key: 'workbench.content.resolve' }, { key: contracts_1.ASSISTANT_CONTEXT_SET_COMMAND, label: text('Select dashboard for Assistant', '设置助理当前看板') },
                     { key: contracts_1.ARTIFACT_PRESENTATION_OPEN_COMMAND, label: text('Open shared page', '打开独立页面') },
                     { key: contracts_1.WORKBENCH_NAVIGATION_OPEN_COMMAND, label: text('Open dashboard', '打开看板') }],
                 hostEvents: { subscriptions: [{ key: 'dashboard-created', event: 'assistant.tool.completed',