@xpert-ai/plugin-live-dashboard 0.1.4 → 0.3.0

package/dist/lib/dashboard-view.schema.d.ts

@@ -6,6 +6,7 @@ export declare const dashboardSummarySchema: z.ZodObject<{
     title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     updatedAt: z.ZodOptional<z.ZodString>;
     draftRevision: z.ZodOptional<z.ZodNumber>;
+    canDelete: z.ZodOptional<z.ZodBoolean>;
     isDraft: z.ZodOptional<z.ZodBoolean>;
     baseVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
@@ -17,6 +18,7 @@ export declare const dashboardSummarySchema: z.ZodObject<{
     baseVersionId?: string | null | undefined;
     isDraft?: boolean | undefined;
     updatedAt?: string | undefined;
+    canDelete?: boolean | undefined;
 }, {
     artifactId: string;
     title?: string | null | undefined;
@@ -26,6 +28,7 @@ export declare const dashboardSummarySchema: z.ZodObject<{
     baseVersionId?: string | null | undefined;
     isDraft?: boolean | undefined;
     updatedAt?: string | undefined;
+    canDelete?: boolean | undefined;
 }>;
 export declare const dashboardSavedSchema: z.ZodObject<{
     artifactId: z.ZodString;
@@ -34,6 +37,7 @@ export declare const dashboardSavedSchema: z.ZodObject<{
     title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     updatedAt: z.ZodOptional<z.ZodString>;
     draftRevision: z.ZodOptional<z.ZodNumber>;
+    canDelete: z.ZodOptional<z.ZodBoolean>;
     isDraft: z.ZodOptional<z.ZodBoolean>;
     baseVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 } & {
@@ -365,6 +369,7 @@ export declare const dashboardSavedSchema: z.ZodObject<{
     baseVersionId?: string | null | undefined;
     isDraft?: boolean | undefined;
     updatedAt?: string | undefined;
+    canDelete?: boolean | undefined;
 }, {
     manifest: {
         schema: "xpert.live-dashboard";
@@ -421,6 +426,7 @@ export declare const dashboardSavedSchema: z.ZodObject<{
     baseVersionId?: string | null | undefined;
     isDraft?: boolean | undefined;
     updatedAt?: string | undefined;
+    canDelete?: boolean | undefined;
 }>;
 export declare const dashboardViewDataSchema: z.ZodObject<{
     meta: z.ZodObject<{
@@ -453,6 +459,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             updatedAt: z.ZodOptional<z.ZodString>;
             draftRevision: z.ZodOptional<z.ZodNumber>;
+            canDelete: z.ZodOptional<z.ZodBoolean>;
             isDraft: z.ZodOptional<z.ZodBoolean>;
             baseVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, "strip", z.ZodTypeAny, {
@@ -464,6 +471,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }, {
             artifactId: string;
             title?: string | null | undefined;
@@ -473,6 +481,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }>, "many">;
         sources: z.ZodArray<z.ZodObject<{
             source: z.ZodType<import("@xpert-ai/contracts").AnalyticsSourceRef, z.ZodTypeDef, import("@xpert-ai/contracts").AnalyticsSourceRef>;
@@ -491,6 +500,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             updatedAt: z.ZodOptional<z.ZodString>;
             draftRevision: z.ZodOptional<z.ZodNumber>;
+            canDelete: z.ZodOptional<z.ZodBoolean>;
             isDraft: z.ZodOptional<z.ZodBoolean>;
             baseVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         } & {
@@ -822,6 +832,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }, {
             manifest: {
                 schema: "xpert.live-dashboard";
@@ -878,6 +889,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }>>;
         versions: z.ZodOptional<z.ZodArray<z.ZodObject<{
             artifactId: z.ZodString;
@@ -886,6 +898,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             updatedAt: z.ZodOptional<z.ZodString>;
             draftRevision: z.ZodOptional<z.ZodNumber>;
+            canDelete: z.ZodOptional<z.ZodBoolean>;
             isDraft: z.ZodOptional<z.ZodBoolean>;
             baseVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, "strip", z.ZodTypeAny, {
@@ -897,6 +910,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }, {
             artifactId: string;
             title?: string | null | undefined;
@@ -906,6 +920,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         sources: {
@@ -921,6 +936,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[];
         saved?: {
             manifest: {
@@ -965,6 +981,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         } | undefined;
         navigationTarget?: {
             target: "workbench.view";
@@ -983,6 +1000,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[] | undefined;
     }, {
         sources: {
@@ -998,6 +1016,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[];
         saved?: {
             manifest: {
@@ -1055,6 +1074,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         } | undefined;
         navigationTarget?: {
             target: "workbench.view";
@@ -1073,6 +1093,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[] | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
@@ -1090,6 +1111,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[];
         saved?: {
             manifest: {
@@ -1134,6 +1156,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         } | undefined;
         navigationTarget?: {
             target: "workbench.view";
@@ -1152,6 +1175,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[] | undefined;
     };
 }, {
@@ -1169,6 +1193,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[];
         saved?: {
             manifest: {
@@ -1226,6 +1251,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         } | undefined;
         navigationTarget?: {
             target: "workbench.view";
@@ -1244,6 +1270,7 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
             baseVersionId?: string | null | undefined;
             isDraft?: boolean | undefined;
             updatedAt?: string | undefined;
+            canDelete?: boolean | undefined;
         }[] | undefined;
     };
 }>;

package/dist/lib/dashboard-view.schema.js

@@ -6,7 +6,7 @@ const analytics_1 = require("@xpert-ai/plugin-sdk/analytics");
 const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
 const dashboard_schema_1 = require("./dashboard.schema");
 const dashboard_navigation_1 = require("./dashboard-navigation");
-exports.dashboardSummarySchema = v3_1.z.object({ artifactId: v3_1.z.string(), versionId: v3_1.z.string().nullish(), versionNumber: v3_1.z.number().optional(), title: v3_1.z.string().nullish(), updatedAt: v3_1.z.string().optional(), draftRevision: v3_1.z.number().optional(), isDraft: v3_1.z.boolean().optional(), baseVersionId: v3_1.z.string().nullish() });
+exports.dashboardSummarySchema = v3_1.z.object({ artifactId: v3_1.z.string(), versionId: v3_1.z.string().nullish(), versionNumber: v3_1.z.number().optional(), title: v3_1.z.string().nullish(), updatedAt: v3_1.z.string().optional(), draftRevision: v3_1.z.number().optional(), canDelete: v3_1.z.boolean().optional(), isDraft: v3_1.z.boolean().optional(), baseVersionId: v3_1.z.string().nullish() });
 exports.dashboardSavedSchema = exports.dashboardSummarySchema.extend({ manifest: dashboard_schema_1.dashboardSchema, dependencies: artifact_document_1.artifactDocumentDependencyAssets.optional() });
 // Source identities belong to Analytics, including immutable Definitions and Artifacts.
 // The viewer consumes only the reference and label; DataSource fields are not universal.

package/dist/lib/dashboard.schema.js

@@ -7,7 +7,7 @@ const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
 const id = v3_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_.-]{0,79}$/);
 exports.dashboardSchema = v3_1.z.object({
     schema: v3_1.z.literal('xpert.live-dashboard'), id: v3_1.z.string().uuid(), title: v3_1.z.string().min(1).max(160),
-    bindings: v3_1.z.array(analytics_1.analyticsBindingSchema).min(1).max(8),
+    bindings: v3_1.z.array(analytics_1.analyticsBindingSchema).max(8),
     presentation: v3_1.z.object({ type: v3_1.z.literal('html'), html: artifact_document_1.artifactDocumentHtml, dependencies: artifact_document_1.artifactDocumentDependencyLocks.optional() }).strict().optional(),
     controls: v3_1.z.array(v3_1.z.object({ controlId: id, type: v3_1.z.enum(['string', 'number', 'boolean', 'date']),
         defaultValue: v3_1.z.union([v3_1.z.string(), v3_1.z.number(), v3_1.z.boolean(), v3_1.z.null()]).optional(),
@@ -21,11 +21,13 @@ exports.dashboardSchema = v3_1.z.object({
         if (new Set(values).size !== values.length)
             ctx.addIssue({ code: 'custom', message: `Duplicate ${name}` });
     };
+    if (!manifest.bindings.length && (manifest.presentation || manifest.controls.length || manifest.charts.length || manifest.tables.length))
+        ctx.addIssue({ code: 'custom', message: 'An unconfigured draft must contain no views or controls' });
     unique(manifest.bindings.map((binding) => binding.id), 'binding');
     unique(manifest.bindings.map((binding) => binding.output.datasetId), 'dataset');
     unique(manifest.controls.map((control) => control.controlId), 'control');
     unique([...manifest.charts, ...manifest.tables].map((view) => view.id), 'view');
-    if (!manifest.presentation && !manifest.charts.length && !manifest.tables.length)
+    if (manifest.bindings.length && !manifest.presentation && !manifest.charts.length && !manifest.tables.length)
         ctx.addIssue({ code: 'custom', message: 'At least one chart or table is required' });
     if (manifest.presentation && (manifest.charts.length || manifest.tables.length))
         ctx.addIssue({ code: 'custom', message: 'HTML presentation owns its charts; use empty charts/tables arrays' });

package/dist/lib/dashboard.service.d.ts

@@ -12,11 +12,16 @@ export declare class DashboardService {
     preview(context: XpertResolvedViewHostContext, input: AnalyticsQueryRequest): Promise<import("@xpert-ai/contracts").AnalyticalDataset>;
     list(context: XpertResolvedViewHostContext): Promise<{
         title: string | null | undefined;
+        draftRevision?: number | undefined;
+        canDelete: boolean;
         artifactId: string;
         versionId: string | null | undefined;
         versionNumber: number | undefined;
         updatedAt: string | Date | undefined;
     }[]>;
+    trash(context: XpertResolvedViewHostContext, artifactId: string, expectedRevision: number): Promise<{
+        artifactId: string;
+    }>;
     save(context: XpertResolvedViewHostContext, manifest: DashboardManifest, expectedVersionId: string | null, expectedRevision?: number): Promise<{
         artifactId: string;
         draftId: string;
@@ -194,6 +199,11 @@ export declare class DashboardService {
             };
         } | undefined;
         datasets: import("@xpert-ai/contracts").AnalyticalDataset[];
+        failures: {
+            bindingId: string;
+            datasetId: string;
+            reason: "unavailable";
+        }[];
         manifest: {
             schema: "xpert.live-dashboard";
             id: string;
@@ -238,6 +248,9 @@ export declare class DashboardService {
         versionNumber: number | undefined;
     }>;
     queryBinding(context: XpertResolvedViewHostContext, artifactId: string, versionId: string | undefined, bindingId: string, input: Record<string, AnalyticsValue>, draftRevision?: number): Promise<import("@xpert-ai/contracts").AnalyticalDataset>;
+    /** Every operation uses the current human's Project role; data queries still use actor(context). */
+    authorizeProject(context: XpertResolvedViewHostContext, operation?: 'read' | 'write' | 'manage'): Promise<import("@xpert-ai/plugin-sdk").ProjectHumanAccess | undefined>;
     private execute;
     private probeControls;
 }
+export declare function projectId(context: XpertResolvedViewHostContext): string | null | undefined;

package/dist/lib/dashboard.service.js

@@ -13,6 +13,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DashboardService = exports.PLUGIN_NAME = void 0;
+exports.projectId = projectId;
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
@@ -39,20 +40,38 @@ let DashboardService = class DashboardService {
         return dataset;
     }
     async list(context) {
-        actor(context);
+        const access = await this.authorizeProject(context);
         const result = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).listArtifacts({ pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceIdPrefix: hostPrefix(context), status: 'active', pageSize: 100, includeCurrentVersion: true });
-        const items = result.items.filter((item) => item.resourceId.startsWith(hostPrefix(context)) && item.userId === context.userId);
+        const items = result.items.filter((item) => item.resourceId.startsWith(hostPrefix(context)) && (item.userId === context.userId || !item.userId && item.projectId === projectId(context)));
         const drafts = new Map((await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).list(items.map(item => item.id))).map(draft => [draft.artifactId, draft]));
-        return items.map(item => ({ ...summary(item), ...(drafts.has(item.id) ? { title: drafts.get(item.id).title ?? item.title } : {}) }));
+        return items.map(item => {
+            const draft = drafts.get(item.id);
+            return { ...summary(item), canDelete: !!draft && (!projectId(context) || access?.canManage === true),
+                ...(draft ? { title: draft.title ?? item.title, draftRevision: draft.revision } : {}) };
+        });
+    }
+    async trash(context, artifactId, expectedRevision) {
+        await this.authorizeProject(context, 'manage');
+        const artifact = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifact(artifactId);
+        assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
+        // Reuse the platform's atomic revision check, recycle state and share revocation.
+        await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).setRecycled({ artifactId, expectedRevision, recycled: true });
+        return { artifactId };
     }
     async save(context, manifest, expectedVersionId, expectedRevision = 0) {
+        await this.authorizeProject(context, 'write');
         const scopedActor = actor(context);
         const parsed = dashboard_schema_1.dashboardSchema.parse(manifest);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const source = { pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceId: `${hostPrefix(context)}${parsed.id}` };
         const existing = await artifacts.findArtifactBySource(source);
-        if (existing && existing.userId !== scopedActor.userId)
-            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+        if (existing) {
+            assertOwned(context, existing);
+            if (existing.status !== 'active')
+                throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
+        }
         // A failed first upload can leave an Artifact with no saved content; revision 0 initializes it.
         const previous = existing && (existing.currentVersionId || expectedRevision > 0) ? await this.openDocument(context, existing.id) : null;
         const dependencies = await (0, document_libraries_1.resolveLibraryAssets)(parsed.presentation?.dependencies ?? [], previous?.dependencies);
@@ -70,14 +89,22 @@ let DashboardService = class DashboardService {
             await this.probeControls(context, binding, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])));
         const htmlValidation = await this.htmlValidation.validate(context, parsed, preview, dependencies);
         const artifact = existing ?? await artifacts.createArtifact({ source, kind: 'file', title: parsed.title,
-            scope: { ...scopedActor, ...(context.hostType === 'project' ? { projectId: context.hostId } : { xpertId: context.hostId }) } });
+            scope: { ...scopedActor, ...(projectId(context) ? { projectId: projectId(context), userId: null } : { xpertId: context.hostId }) } });
         const files = this.runtime.require(plugin_sdk_1.WorkspaceFilesRuntimeCapability);
-        const scope = { tenantId: scopedActor.tenantId, userId: scopedActor.userId, catalog: 'users' };
-        const file = await files.uploadBuffer({ ...scope, buffer, originalName: 'dashboard.json', fileName: `${digest}.json`, folder: `live-dashboards/${parsed.id}`, mimeType: MIME_TYPE });
+        const project = projectId(context);
+        // Shared definitions live in the Project volume; private legacy dashboards retain their user volume.
+        const privateScope = { tenantId: scopedActor.tenantId, userId: scopedActor.userId, catalog: 'users' };
+        const reference = project
+            ? (await files.writeRuntimeBuffer({ tenantId: scopedActor.tenantId, userId: scopedActor.userId,
+                catalog: 'projects', scopeId: project, projectId: project, buffer, originalName: 'dashboard.json',
+                fileName: `${digest}.json`, folder: `.xpert/live-dashboards/${parsed.id}`, mimeType: MIME_TYPE })).reference
+            : await files.uploadBuffer({ ...privateScope, buffer, originalName: 'dashboard.json', fileName: `${digest}.json`,
+                folder: `live-dashboards/${parsed.id}`, mimeType: MIME_TYPE }).then(file => ({
+                source: 'platform.workspace.files', ...privateScope, filePath: file.filePath, workspacePath: file.workspacePath
+            }));
         const result = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).save({ artifactId: artifact.id, expectedRevision,
             expectedCurrentVersionId: expectedVersionId, mimeType: MIME_TYPE, title: parsed.title, fileName: 'dashboard.json', sha256: digest,
-            ...(htmlValidation ? { metadata: { htmlValidation } } : {}),
-            workspaceFileRef: { source: 'platform.workspace.files', ...scope, filePath: file.filePath, workspacePath: file.workspacePath } });
+            ...(htmlValidation ? { metadata: { htmlValidation } } : {}), workspaceFileRef: reference });
         return { artifactId: artifact.id, draftId: result.id, draftRevision: result.revision, baseVersionId: result.baseVersionId, status: 'draft', title: parsed.title };
     }
     async open(context, artifactId, versionId, draftRevision) {
@@ -86,10 +113,12 @@ let DashboardService = class DashboardService {
     }
     /** Trusted View transport only. Agent read tools receive locks, never megabytes of library code. */
     async openDocument(context, artifactId, versionId, draftRevision) {
-        actor(context);
+        await this.authorizeProject(context);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const artifact = await artifacts.getArtifact(artifactId);
         assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
         const draft = !versionId || draftRevision !== undefined ? await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).get(artifactId) : null;
         if (draftRevision !== undefined && draft?.revision !== draftRevision)
             throw new common_1.ConflictException('DASHBOARD_DRAFT_CONFLICT');
@@ -109,10 +138,12 @@ let DashboardService = class DashboardService {
                 isDraft: draft.revision !== draft.publishedRevision, title: draft.title, updatedAt: draft.updatedAt } : {}), manifest, dependencies };
     }
     async history(context, artifactId) {
-        actor(context);
+        await this.authorizeProject(context);
         const artifacts = this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability);
         const artifact = await artifacts.getArtifact(artifactId);
         assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
         const versions = await artifacts.listArtifactVersions({ artifactId, status: 'active' });
         return versions.map(version => ({ ...summary(artifact, version), current: version.id === artifact.currentVersionId }))
             .sort((a, b) => (b.versionNumber ?? 0) - (a.versionNumber ?? 0));
@@ -124,7 +155,10 @@ let DashboardService = class DashboardService {
         return this.save(context, dashboard_schema_1.dashboardSchema.parse({ ...saved.manifest, ...dashboard_schema_1.dashboardChangesSchema.parse(changes) }), saved.baseVersionId ?? saved.versionId ?? null, expectedRevision);
     }
     async publish(context, artifactId, expectedRevision, expectedCurrentVersionId) {
+        await this.authorizeProject(context, 'manage');
         const saved = await this.open(context, artifactId, undefined, expectedRevision);
+        if (!saved.manifest.bindings.length)
+            throw new common_1.BadRequestException('DASHBOARD_CONFIGURE_BEFORE_PUBLISHING');
         const share = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).getArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         if (share?.status === 'active' && share.versionMode === 'latest' && (!share.expiresAt || new Date(share.expiresAt).getTime() > Date.now())) {
             const issues = (0, dashboard_sharing_1.dashboardSharingIssues)(saved.manifest, await this.sources(context));
@@ -138,13 +172,31 @@ let DashboardService = class DashboardService {
     }
     async query(context, artifactId, versionId, controls, draftRevision) {
         const saved = await this.open(context, artifactId, versionId, draftRevision);
-        const datasets = await this.execute(context, saved.manifest, controls);
-        return { ...saved, datasets, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
+        const { datasets, failures } = await (0, dashboard_queries_1.queryDashboardPartial)(this.runtime, actor(context), saved.manifest, controls);
+        return { ...saved, datasets, failures, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
     }
     async queryBinding(context, artifactId, versionId, bindingId, input, draftRevision) {
         const saved = await this.open(context, artifactId, versionId, draftRevision);
         return (0, dashboard_queries_1.queryDashboardBinding)(this.runtime, actor(context), saved.manifest, bindingId, input);
     }
+    /** Every operation uses the current human's Project role; data queries still use actor(context). */
+    async authorizeProject(context, operation = 'read') {
+        const scopedActor = actor(context), project = projectId(context);
+        if (!project)
+            return;
+        const access = this.runtime.require(plugin_sdk_1.ProjectAccessRuntimeCapability);
+        const input = { actor: scopedActor, projectId: project };
+        if (context.hostType === 'agent')
+            await access.assertAssistant({ ...input, assistantId: context.hostId });
+        if (operation === 'write')
+            return access.assertEdit(input);
+        if (operation === 'manage')
+            return access.assertManage(input);
+        const readable = (await access.listReadable({ actor: scopedActor, projectIds: [project] })).find(item => item.projectId === project);
+        if (!readable)
+            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+        return readable;
+    }
     execute(context, manifest, input) {
         return (0, dashboard_queries_1.queryDashboard)(this.runtime, actor(context), manifest, input);
     }
@@ -177,10 +229,11 @@ function actor(context) {
         throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
     return { tenantId: context.tenantId, organizationId: context.organizationId, userId: context.userId };
 }
-function hostPrefix(context) { return `${context.hostType}/${context.hostId}/`; }
+function projectId(context) { return context.hostType === 'project' ? context.hostId : context.runtimeScope?.projectId; }
+function hostPrefix(context) { return projectId(context) ? `project/${projectId(context)}/` : `${context.hostType}/${context.hostId}/`; }
 function assertOwned(context, artifact) {
     if (artifact.pluginName !== exports.PLUGIN_NAME || artifact.resourceType !== RESOURCE_TYPE || !artifact.resourceId.startsWith(hostPrefix(context)) ||
-        artifact.tenantId !== context.tenantId || artifact.organizationId !== context.organizationId || artifact.userId !== context.userId)
+        artifact.tenantId !== context.tenantId || artifact.organizationId !== context.organizationId || (artifact.userId ? artifact.userId !== context.userId : !projectId(context) || artifact.projectId !== projectId(context)))
         throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
 }
 function summary(artifact, version = artifact.currentVersion) {

package/dist/lib/document-host.d.ts

@@ -0,0 +1,4 @@
+import { type ArtifactDocumentHostOptions } from '@xpert-ai/plugin-sdk/artifact-document';
+/** The HTML never supplies or overrides its network permissions. */
+export declare function mountDashboardDocument<T>(frame: HTMLIFrameElement, options: ArtifactDocumentHostOptions<T>): import("@xpert-ai/plugin-sdk/artifact-document").ArtifactDocumentHost;
+export declare function isDashboardResourceAllowed(resourceType: string, url: string): boolean;

package/dist/lib/document-host.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mountDashboardDocument = mountDashboardDocument;
+exports.isDashboardResourceAllowed = isDashboardResourceAllowed;
+const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
+const document_network_1 = require("./document-network");
+/** The HTML never supplies or overrides its network permissions. */
+function mountDashboardDocument(frame, options) {
+    return (0, artifact_document_1.mountArtifactDocument)(frame, { ...options, networkPolicy: document_network_1.DASHBOARD_NETWORK_POLICY });
+}
+function isDashboardResourceAllowed(resourceType, url) {
+    return (0, artifact_document_1.isArtifactDocumentResourceAllowed)(document_network_1.DASHBOARD_NETWORK_POLICY, resourceType, url);
+}

package/dist/lib/document-network.d.ts

@@ -0,0 +1,3 @@
+import type { ArtifactDocumentNetworkPolicy } from '@xpert-ai/plugin-sdk/artifact-document';
+/** Trusted plugin policy, shared by the displayed document and browser preflight. */
+export declare const DASHBOARD_NETWORK_POLICY: ArtifactDocumentNetworkPolicy;

package/dist/lib/document-network.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DASHBOARD_NETWORK_POLICY = void 0;
+/** Trusted plugin policy, shared by the displayed document and browser preflight. */
+exports.DASHBOARD_NETWORK_POLICY = {
+    scripts: ['https://cdn.tailwindcss.com', 'https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com'],
+    styles: ['https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com', 'https://fonts.googleapis.com'],
+    fonts: ['https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com', 'https://fonts.gstatic.com']
+};

package/dist/lib/html-guidance.d.ts

@@ -1 +1 @@
-export declare const HTML_DASHBOARD_GUIDANCE = "For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. ECharts/Three.js are available via dashboard_libraries; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control=\"<controlId>\"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.";
+export declare const HTML_DASHBOARD_GUIDANCE = "For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. Call dashboard_libraries for packaged ECharts/Three.js and the allowed HTTPS origins for online scripts, stylesheets and fonts. Tailwind CDN is supported through script src; pin a version when possible. Online resource failures must be repaired before saving. Do not add online URLs to the packaged libraries array; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control=\"<controlId>\"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.";

package/dist/lib/html-guidance.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HTML_DASHBOARD_GUIDANCE = void 0;
-exports.HTML_DASHBOARD_GUIDANCE = `For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. ECharts/Three.js are available via dashboard_libraries; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control="<controlId>"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.`;
+exports.HTML_DASHBOARD_GUIDANCE = `For free-layout HTML dashboards, read the installed live-dashboard skill's references/html-runtime.md through read_skill_file, relative to its SKILL.md path in the skill catalog. Create/edit the HTML with SandboxFile; then dashboard_create_html or dashboard_update validates and saves it. Do not use generic present_files to save or preview a live dashboard. Its preview belongs to the Live dashboards Workbench. Call dashboard_libraries for packaged ECharts/Three.js and the allowed HTTPS origins for online scripts, stylesheets and fonts. Tailwind CDN is supported through script src; pin a version when possible. Online resource failures must be repaired before saving. Do not add online URLs to the packaged libraries array; all data access remains declarative Binding queries through window.xpertLiveArtifact. The page MUST declare const live = window.xpertLiveArtifact in its script (live is not a host global), register live.subscribe(bindingId, render), await live.ready(), and invoke live.query(bindingId, typedControls) for initial data and filter changes. window.__datasets and window.__refresh are not platform APIs and are never populated by the host. Read the runtime reference and its html-lifecycle.md example before writing HTML; preserve that lifecycle while freely changing the layout. Use one complete Dataset for KPI, trend and details when they share the same metric and filters; do not create a redundant unfiltered total Binding. Never let filtered and unfiltered subscriptions both write the same KPI: a refresh would race and overwrite the selected-region total. Distinct global totals need distinct, clearly labeled elements. Native data selects require data-dashboard-control="<controlId>"; purely visual selects use data-dashboard-presentation. A data filter must query, not only filter cached browser rows. bindSelect controls ONE binding only. For a shared dimension filter across multiple bindings, follow the skill custom-select example and query every affected binding with the same typed controls; matching control IDs do not broadcast automatically. bindSelect derives options from Dataset fields and is only for dimension filters. Fixed query enums (days, page size, granularity) need options from parameter.allowedValues and a typed change listener calling live.query; never use date rows as numeric day-count options.`;