@xpert-ai/plugin-live-dashboard 0.1.4 → 0.3.0

package/dist/lib/middleware.js

@@ -20,6 +20,7 @@ const v3_1 = require("zod/v3");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
 const document_libraries_1 = require("./document-libraries");
+const document_network_1 = require("./document-network");
 const agent_schema_1 = require("./agent.schema");
 const html_guidance_1 = require("./html-guidance");
 const dashboard_service_1 = require("./dashboard.service");
@@ -31,6 +32,8 @@ const filter_evidence_1 = require("./filter-evidence");
 const save_evidence_1 = require("./save-evidence");
 const resource_card_1 = require("./resource-card");
 const dashboard_icon_1 = require("./dashboard-icon");
+const preview_retry_1 = require("./preview-retry");
+const prompt_workflows_1 = require("./prompt-workflows");
 const middlewareOptionsSchema = v3_1.z.object({ allowedFinalProviders: v3_1.z.array(v3_1.z.string().min(1)).min(1).max(20).optional() }).strict().default({});
 exports.DASHBOARD_GUIDANCE = `For a new independent dashboard, use a new unused HTML file path. An existing filename or matching title is not authorization to edit another Artifact; do not switch from creation to dashboard_open/update because a file already exists. For a new dashboard, call dashboard_list_sources before searching raw files, reading old scripts or creating transformations. Named governed sources may already provide the required query; inspect their provider contracts first. File-backed sources do not imply that a script must be written. For creating or editing live dashboards, first read the installed live-dashboard skill using read_skill_file and follow only the references relevant to the task. Use SandboxFile tools for all source-file authoring; HTML alone is not a saved dashboard. Follow preview.validation.checks immediately before authoring HTML; each suggestedCall must actually succeed. Business definitions, real data previews and nullable-filter tests are required before saving new or changed Bindings. Do not invent business data or substitute a different metric without agreement. Report completion only from a successful dashboard_create/dashboard_create_html/dashboard_update draft receipt. Human publication is separate. Successful create, update and open tools emit a chat resource card automatically; resourceCard.status reports emission. Its Open button selects the exact dashboard in Workbench. Never fabricate a link, call present_files for dashboard HTML, or output card JSON as text. If card delivery is unavailable, report the saved receipt and use the Workbench picker.`;
 let DashboardMiddleware = class DashboardMiddleware {
@@ -39,6 +42,7 @@ let DashboardMiddleware = class DashboardMiddleware {
         this.meta = {
             name: 'LiveDashboard', label: { en_US: 'Live dashboards', zh_Hans: '实时看板' },
             description: { en_US: 'Discover, preview, create and update governed live dashboards.', zh_Hans: '发现业务数据、验证查询并持续修改实时看板。' },
+            slashCommands: prompt_workflows_1.dashboardPromptWorkflows,
             // Tools inherit this self-contained icon through the platform middleware metadata.
             icon: dashboard_icon_1.dashboardIcon, features: [view_provider_1.FEATURE], configSchema: { type: 'object', properties: {
                     allowedFinalProviders: { type: 'array', items: { type: 'string' }, title: { en_US: 'Allowed final dashboard providers', zh_Hans: '最终看板允许的 Provider' },
@@ -56,13 +60,37 @@ let DashboardMiddleware = class DashboardMiddleware {
         };
         // Evidence belongs to this run and actor, never a process-wide cache of business data.
         const discovered = new Map(), previews = new Map();
+        const discovering = new Map();
         let listedSources;
+        const assertSourceSelection = (input) => {
+            if (listedSources && !listedSources.some(source => (0, analytics_source_1.sameAnalyticsResource)(source.source, input.source) && source.providers.some(provider => provider.id === input.providerId)))
+                throw new Error(`DASHBOARD_SOURCE_SELECTION_INVALID: copy an exact source/providerId pair from dashboard_list_sources; do not invent or combine IDs. Known pairs: ${JSON.stringify(listedSources.map(source => ({ source: source.source, name: source.name, providerIds: source.providers.map(provider => provider.id) })))}. Refresh the list if the source changed. Initial requestJson is "{}"; then follow inspectRequest/nextRequest.`);
+        };
+        const discover = async (input) => {
+            assertSourceSelection(input);
+            const result = await this.service.discover(scope, input);
+            discovered.set(`${(0, analytics_1.analyticsSourceKey)(input.source)}/${input.providerId}`, result.queryContract);
+            return result;
+        };
+        const ensureContract = async (input) => {
+            assertSourceSelection(input);
+            const key = `${(0, analytics_1.analyticsSourceKey)(input.source)}/${input.providerId}`;
+            const cached = discovered.get(key);
+            if (cached)
+                return cached;
+            // Parallel previews share discovery, but failures are retryable and never become evidence.
+            let pending = discovering.get(key);
+            if (!pending) {
+                pending = discover({ source: input.source, providerId: input.providerId, request: {} })
+                    .then(result => result.queryContract).finally(() => discovering.delete(key));
+                discovering.set(key, pending);
+            }
+            return pending;
+        };
         const filterEvidence = (0, filter_evidence_1.createFilterEvidence)(this.service, scope, previews);
         const created = new Map();
         const preview = async (binding) => {
-            const contract = discovered.get(`${(0, analytics_1.analyticsSourceKey)(binding.source)}/${binding.providerId}`);
-            if (!contract)
-                throw new Error('DASHBOARD_DISCOVER_REQUIRED');
+            const contract = await ensureContract(binding);
             (0, plugin_sdk_1.validateAnalyticsPayload)(binding.payload, contract.payloadSchema);
             const controls = Object.fromEntries(binding.parameters.map((parameter) => [parameter.controlId, parameter.defaultValue ?? null]));
             const dataset = await this.service.preview(scope, { binding, controls });
@@ -124,6 +152,7 @@ let DashboardMiddleware = class DashboardMiddleware {
                 throw new Error('DASHBOARD_WORKSPACE_REQUIRED');
             return files;
         });
+        const previewRetries = (0, preview_retry_1.createPreviewRetryGuard)();
         let modelCalls = 0;
         return { name: 'LiveDashboard', contextSchema: editing_1.dashboardContextSchema,
             wrapToolCall: async (request, handler) => {
@@ -134,11 +163,20 @@ let DashboardMiddleware = class DashboardMiddleware {
                     : name === 'dashboard_create' ? agent_schema_1.createToolSchema.safeParse(args) : undefined;
                 const save = dashboard_receipt_1.DASHBOARD_MUTATION_TOOLS.includes(name) ? evidence.beginSave(creation?.success ? creation.data.supersedesPaths : undefined, name === 'dashboard_create' ? 'draft' : 'source') : undefined;
                 const result = path && (evidence.has(path) || previews.size > 0 && agent_schema_1.htmlPathSchema.safeParse(path).success)
-                    ? await evidence.trackWrite(path, async () => handler(request)) : await handler(request);
+                    ? await evidence.trackWrite(path, async () => handler(request)) : await previewRetries.run(request, handler);
                 if (save && 'content' in result && (!('status' in result) || result.status !== 'error'))
                     await evidence.accept(save, result.content);
                 return result;
             }, wrapModelCall: async (request, handler) => {
+                if (previewRetries.exhausted) {
+                    const summary = previewRetries.summary + (evidence.pending ? ` Unsaved Workspace files: ${JSON.stringify(evidence.pendingPaths)}.` : '');
+                    const result = await handler({ ...request, tools: [], toolChoice: 'none', systemMessage: new messages_1.SystemMessage({ content: [
+                                ...(typeof request.systemMessage?.content === 'string' ? [{ type: 'text', text: request.systemMessage.content }] : request.systemMessage?.content ?? []),
+                                { type: 'text', text: summary }
+                            ] }) });
+                    // A noncompliant model must not restart the failed loop even after tools were removed.
+                    return result?.tool_calls?.length ? new messages_1.AIMessage(summary) : result;
+                }
                 const exhausted = ++modelCalls > 24;
                 if (exhausted && evidence.pending)
                     throw new Error('DASHBOARD_SAVE_NOT_CONFIRMED: no successful draft save receipt; Workspace changes have not been saved to the dashboard.');
@@ -153,6 +191,8 @@ let DashboardMiddleware = class DashboardMiddleware {
                 filterEvidence.tool,
                 ...(0, definition_tools_1.createDefinitionTools)(context, () => { listedSources = undefined; }),
                 (0, tools_1.tool)(async () => JSON.stringify({ libraries: await (0, document_libraries_1.libraryLocks)(['echarts', 'three']),
+                    online: { ...document_network_1.DASHBOARD_NETWORK_POLICY,
+                        usage: 'HTML may load scripts, stylesheets and fonts directly from these exact HTTPS origins. Use script src and link rel="stylesheet"; pin exact versions where available. Tailwind CDN https://cdn.tailwindcss.com is supported. Online resources require connectivity when saving and viewing; loading failures fail preflight. Keep all business data queries on window.xpertLiveArtifact; fetch/XHR, external images, workers, iframes and eval remain unavailable. Online resources do not belong in the packaged libraries array.' },
                     pageRuntime: {
                         global: 'window.xpertLiveArtifact',
                         bindingIds: [...new Set([...previews.values()].map(binding => binding.id))],
@@ -162,7 +202,7 @@ let DashboardMiddleware = class DashboardMiddleware {
                     },
                     usage: { echarts: 'window.echarts: init(element, null, {renderer:"svg"}) then setOption(completeOption, {notMerge:true}). Canvas is also available. Derive active series/legend dimensions from each received Dataset, including filtered results; never retain excluded groups as zero-valued series. Aggregate repeated categories using all grain dimensions, clear empty results, and redraw KPI, chart and details together in subscribe. Use ResizeObserver to resize and reuse the instance on filter/refresh.',
                         three: 'window.THREE: bundled core including WebGLRenderer. Requires WebGL2; catch unavailable GPU contexts and show a clear fallback. External textures/models, loaders/addons, WebGPU and workers are not bundled.' },
-                    lifecycle: 'Pass libraries IDs to dashboard_create_html or dashboard_update. Actual version and bytes are pinned on save; omitted libraries on update preserves saved locks. No CDN, imports or network access.' }), { name: 'dashboard_libraries', description: 'Discover packaged frontend libraries and exact versions available to HTML dashboards. Read before using ECharts/Three.js. Returns metadata, never library source.',
+                    lifecycle: 'Pass packaged library IDs to dashboard_create_html or dashboard_update. Actual version and bytes are pinned on save; omitted libraries on update preserves saved locks. Online resources are listed separately under online, are not pinned in the Artifact, and must load successfully when saving and viewing.' }), { name: 'dashboard_libraries', description: 'Discover packaged frontend libraries, exact versions and allowed HTTPS origins for online scripts, stylesheets and fonts. Read before using Tailwind CDN or ECharts/Three.js. Returns metadata, never library source.',
                     schema: v3_1.z.object({}).strict(), verboseParsingErrors: true, metadata: { toolName: { en_US: 'Discover dashboard libraries', zh_Hans: '查看看板前端图库' } } }),
                 ...(0, editing_1.createEditingTools)(this.service, scope, context, resolvePreviews, validateFinal, (path, artifactId) => evidence.opened(path, artifactId)),
                 (0, tools_1.tool)(async () => {
@@ -173,24 +213,18 @@ let DashboardMiddleware = class DashboardMiddleware {
                     schema: v3_1.z.object({}).strict(), verboseParsingErrors: true, metadata: { toolName: { en_US: 'List analytics sources', zh_Hans: '发现分析数据源' } }
                 }),
                 (0, tools_1.tool)(async (input) => {
-                    if (listedSources && !listedSources.some(source => (0, analytics_source_1.sameAnalyticsResource)(source.source, input.source) && source.providers.some(provider => provider.id === input.providerId)))
-                        throw new Error(`DASHBOARD_SOURCE_SELECTION_INVALID: copy an exact source/providerId pair from dashboard_list_sources; do not invent or combine IDs. Known pairs: ${JSON.stringify(listedSources.map(source => ({ source: source.source, name: source.name, providerIds: source.providers.map(provider => provider.id) })))}. Refresh the list if the source changed. Initial requestJson is "{}"; then follow inspectRequest/nextRequest.`);
                     const parsed = { source: input.source, providerId: input.providerId, request: (0, agent_schema_1.parseObjectJson)(input.requestJson) };
-                    const result = await this.service.discover(scope, parsed);
-                    discovered.set(`${(0, analytics_1.analyticsSourceKey)(parsed.source)}/${parsed.providerId}`, result.queryContract);
-                    return JSON.stringify(result);
+                    return JSON.stringify(await discover(parsed));
                 }, { name: 'dashboard_discover', description: 'Discover provider-owned business metadata. Start requestJson="{}" then serialize inspectRequest/nextRequest. Inspect dataset fields, comments, measures and native query format before preview.',
                     schema: agent_schema_1.discoverToolSchema, verboseParsingErrors: true, metadata: { toolName: { en_US: 'Inspect business data', zh_Hans: '理解业务数据与指标' } } }),
                 (0, tools_1.tool)(async (input) => {
-                    const contract = discovered.get(`${(0, analytics_1.analyticsSourceKey)(input.binding.source)}/${input.binding.providerId}`);
-                    if (!contract)
-                        throw new Error('DASHBOARD_DISCOVER_REQUIRED: discover the source before preview');
+                    const contract = await ensureContract(input.binding);
                     const binding = (0, agent_schema_1.fromAgentBinding)(input.binding, contract);
                     return preview(binding);
-                }, { name: 'dashboard_preview', description: 'Run one read-only binding using parameters[].defaultValue. Returns validated Dataset fields, first 20 rows, full query completeness and audit. Required before create; changes to binding/defaults require another preview.',
+                }, { name: 'dashboard_preview', description: 'Run one read-only binding using parameters[].defaultValue. Automatically discovers the source/provider query contract when absent in this run; use dashboard_discover to inspect business metadata or repair invalid queries. Returns validated Dataset fields, first 20 rows, full query completeness and audit. Required before create; changes to binding/defaults require another preview.',
                     schema: agent_schema_1.previewToolSchema, verboseParsingErrors: true, metadata: { toolName: { en_US: 'Verify dashboard data', zh_Hans: '预览并验证看板数据' } } }),
                 (0, tools_1.tool)(async ({ bindingJson }) => preview(plugin_sdk_1.analyticsBindingSchema.parse(JSON.parse(bindingJson))), {
-                    name: 'dashboard_preview_binding', description: 'Preview a complete canonical AnalyticsBinding returned by another tool. Serialize the complete canonical Binding (for example discovery items[].metadata.binding), including parameters[].controlId. bindingPayload is only the payload, not a Binding. If adding a parameter, include name, controlId, type, required and defaultValue. Do not convert it to the simplified dashboard_preview input. Discovery of the source is still required. Returns the same previewId receipt for dashboard_create.',
+                    name: 'dashboard_preview_binding', description: 'Preview a complete canonical AnalyticsBinding returned by another tool. Serialize the complete canonical Binding (for example discovery items[].metadata.binding), including parameters[].controlId. bindingPayload is only the payload, not a Binding. If adding a parameter, include name, controlId, type, required and defaultValue. Do not convert it to the simplified dashboard_preview input. Automatically discovers the source/provider query contract when absent in this run; use dashboard_discover for business metadata. Returns the same previewId receipt for dashboard_create.',
                     schema: v3_1.z.object({ bindingJson: v3_1.z.string().min(2).max(200000) }).strict(), verboseParsingErrors: true,
                     metadata: { toolName: { en_US: 'Verify registered dataset', zh_Hans: '验证已注册数据集' } }
                 }),

package/dist/lib/plugin.js

@@ -7,6 +7,8 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LiveDashboardPlugin = void 0;
+const content_capability_1 = require("./content-capability");
+const content_provider_1 = require("./content.provider");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 const dashboard_service_1 = require("./dashboard.service");
 const view_provider_1 = require("./view.provider");
@@ -18,5 +20,5 @@ let LiveDashboardPlugin = class LiveDashboardPlugin {
 };
 exports.LiveDashboardPlugin = LiveDashboardPlugin;
 exports.LiveDashboardPlugin = LiveDashboardPlugin = __decorate([
-    (0, plugin_sdk_1.XpertServerPlugin)({ providers: [dashboard_service_1.DashboardService, view_provider_1.DashboardViewProvider, middleware_1.DashboardMiddleware, html_validation_1.HtmlDashboardValidation, presentation_provider_1.DashboardPresentationProvider, sharing_service_1.DashboardSharingService] })
+    (0, plugin_sdk_1.XpertServerPlugin)({ providers: [content_capability_1.DashboardCapability, content_provider_1.DashboardContentProvider, content_provider_1.DashboardContentEditor, dashboard_service_1.DashboardService, view_provider_1.DashboardViewProvider, middleware_1.DashboardMiddleware, html_validation_1.HtmlDashboardValidation, presentation_provider_1.DashboardPresentationProvider, sharing_service_1.DashboardSharingService] })
 ], LiveDashboardPlugin);

package/dist/lib/presentation.provider.d.ts

@@ -117,6 +117,11 @@ export declare class DashboardPresentationProvider implements IArtifactPresentat
             };
         } | undefined;
         datasets: import("@xpert-ai/contracts").AnalyticalDataset[];
+        failures: {
+            bindingId: string;
+            datasetId: string;
+            reason: "unavailable";
+        }[];
     }>;
     private open;
 }

package/dist/lib/presentation.provider.js

@@ -44,8 +44,8 @@ let DashboardPresentationProvider = class DashboardPresentationProvider {
             return (0, dashboard_queries_1.queryDashboardBinding)(this.runtime, context.actor, saved.manifest, input.bindingId, input.controls);
         if (request.operation !== 'query')
             throw new common_1.ForbiddenException('DASHBOARD_ACTION_UNSUPPORTED');
-        const datasets = await (0, dashboard_queries_1.queryDashboard)(this.runtime, context.actor, saved.manifest, input.controls);
-        return { datasets, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
+        const { datasets, failures } = await (0, dashboard_queries_1.queryDashboardPartial)(this.runtime, context.actor, saved.manifest, input.controls);
+        return { datasets, failures, ...(saved.manifest.presentation ? {} : { payload: (0, renderer_1.toDataAnalyticsPayload)(saved.manifest, datasets) }) };
     }
     open(context) {
         const { artifact, version, content } = context;

package/dist/lib/preview-retry.d.ts

@@ -0,0 +1,7 @@
+import type { AgentBuiltInState, ToolCallHandler, ToolCallRequest } from '@xpert-ai/plugin-sdk';
+/** Run-local bounds include tool-schema failures, before any discovery or query executes. */
+export declare function createPreviewRetryGuard(): {
+    readonly exhausted: boolean;
+    readonly summary: string;
+    run(request: ToolCallRequest<AgentBuiltInState>, handler: ToolCallHandler): Promise<import("@langchain/core/messages").ToolMessage | import("@langchain/langgraph").Command<unknown, Record<string, unknown>, string>>;
+};

package/dist/lib/preview-retry.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPreviewRetryGuard = createPreviewRetryGuard;
+const node_crypto_1 = require("node:crypto");
+const PREVIEW_TOOLS = new Set(['dashboard_preview', 'dashboard_preview_binding', 'dashboard_test_filter']);
+/** Run-local bounds include tool-schema failures, before any discovery or query executes. */
+function createPreviewRetryGuard() {
+    const failures = new Map(), pending = new Set();
+    let consecutiveFailures = 0, lastError = '';
+    const recordFailure = (key, message) => {
+        failures.set(key, { count: (failures.get(key)?.count ?? 0) + 1, message: message.slice(0, 2000) });
+        consecutiveFailures++;
+        lastError = message.slice(0, 2000);
+    };
+    return {
+        get exhausted() { return consecutiveFailures >= 6; },
+        get summary() { return `DASHBOARD_PREVIEW_RETRY_LIMIT: preview validation repeatedly failed. This run has stopped making tool calls. Report the last error and the required repair; do not claim an unconfirmed save. Last error: ${lastError}`; },
+        async run(request, handler) {
+            if (!PREVIEW_TOOLS.has(request.toolCall.name))
+                return handler(request);
+            const key = (0, node_crypto_1.createHash)('sha256').update(JSON.stringify({ name: request.toolCall.name, args: request.toolCall.args }, (_key, value) => value && typeof value === 'object' && !Array.isArray(value) ? Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b))) : value)).digest('hex');
+            if (consecutiveFailures >= 6)
+                throw new Error(this.summary);
+            if ((failures.get(key)?.count ?? 0) >= 2) {
+                consecutiveFailures++;
+                throw new Error(`DASHBOARD_PREVIEW_REPEAT_BLOCKED: this exact tool input already failed twice; no query was executed. Correct the input using the previous diagnostic, or stop and report the blocker. Last error: ${failures.get(key).message}`);
+            }
+            // Concurrent duplicate calls must not multiply queries or bypass the per-input bound.
+            if (pending.has(key))
+                throw new Error('DASHBOARD_PREVIEW_IN_PROGRESS: wait for the identical preview already in progress; do not submit duplicates.');
+            pending.add(key);
+            try {
+                const result = await handler(request);
+                if ('status' in result && result.status === 'error' && 'content' in result) {
+                    recordFailure(key, typeof result.content === 'string' ? result.content : 'Preview tool returned an error');
+                }
+                else {
+                    failures.delete(key);
+                    consecutiveFailures = 0;
+                }
+                return result;
+            }
+            catch (error) {
+                recordFailure(key, error instanceof Error ? error.message : 'Preview tool failed');
+                throw error;
+            }
+            finally {
+                pending.delete(key);
+            }
+        }
+    };
+}

package/dist/lib/prompt-workflows.d.ts

@@ -0,0 +1,3 @@
+import type { SkillSlashCommand } from '@xpert-ai/contracts';
+/** Commands are resolved from the installed middleware, including on existing Assistants. */
+export declare const dashboardPromptWorkflows: SkillSlashCommand[];

package/dist/lib/prompt-workflows.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardPromptWorkflows = void 0;
+const dashboard_icon_1 = require("./dashboard-icon");
+const context = `Work in the current authorized Assistant/project scope. Use the user's language for the page and response. Read the installed live-dashboard skill through read_skill_file and follow the references relevant to this task. Respect provider policy, access controls and tool schemas. Never change deployment, credentials, Assistant configuration or business-source data.
+Resolve source/provider pairs, Artifact IDs, fields and file paths from current tools, not names or previous conversation claims. Use only real query results; no invented business data, targets, thresholds, comparison periods or activity feeds. Keep queries read-only and bounded. Report actual tool failures and diagnosticId when supplied. A missing capability or runtime binding is a blocker, not permission to bypass validation or switch presentation modes.`;
+const metrics = `Confirm metric definitions, units, time range, grain and join keys from metadata and small real samples. Compute ratios from aggregated numerators and denominators, not sums/averages of percentages. Keep unknown/zero denominators as unavailable, not zero. Check join cardinality and avoid duplicate totals. Use chronological date ordering and comparable complete periods. State freshness and gaps; historical data must not be described as current operations. Avoid exposing unnecessary personal or sensitive row-level fields.`;
+const discover = `Call dashboard_list_sources first, then dashboard_discover for exact authorized source/provider pairs. Follow returned inspectRequest/nextRequest and query contracts; do not scan unrelated schemas or guess SQL fields. Prefer existing governed definitions. If the requested source is missing, use analytics_definition_connections and analytics_definition_inspect; register a missing definition with analytics_definition_register only when needed for this requested dashboard, then refresh sources. Never duplicate an existing definition or ask the user to supply internal IDs.`;
+const preview = `Before saving new or changed Bindings, call dashboard_preview or dashboard_preview_binding with the exact final queries and typed default controls in this run. Execute every preview.validation.checks[].suggestedCall with dashboard_test_filter; use observed non-default values and the all-values/null case when applicable. Follow each tool's schema, serialize JSON-string fields correctly, and copy returned bindingJson rather than nesting a Binding inside SQL. Changed queries/defaults need fresh evidence. Use at most eight final Bindings, sharing a query where its metric, grain and filters permit it. Never reuse historical previewIds or hard-code preview rows into the page.`;
+const receipt = `Save a working draft and require a successful domain receipt with dashboard.artifactId, status "draft" and draftRevision. File writes, an existing resource card or an older published version are not proof of this save. Open the exact saved Artifact to inspect it; do not update an unchanged copy just to verify persistence. Verify real filter changes and refresh where available, distinguishing tool checks from unperformed viewer checks. Return the saved receipt, sources, metric definitions and a short manual acceptance checklist. Formal publication remains a separate human Workbench action.`;
+const newDashboard = `Create a NEW independent dashboard. Do not modify, rename or replace an existing Artifact, including the currently selected dashboard. Choose a distinct business title. In HTML mode choose an unused workspace-relative named .html path; never reuse an old page just because it has a similar title. Reuse verified source definitions, not an old dashboard's identity. If this run already saved the requested dashboard, keep its Artifact rather than creating a duplicate.`;
+const automaticTheme = `Choose one useful business theme from the authorized data, prioritizing an operational decision such as delivery delays, inventory backlog, supplier performance or production quality. Compare only a few plausible sources by completeness, freshness, metric clarity and actionable detail; then select the strongest one without repeatedly asking the user to choose. Explain who will use it, which decision it supports and which records require attention. If no source supports a defensible theme, report the missing data instead of making a decorative demo.`;
+const specifiedTheme = `Use the business theme, audience and question supplied by the user. Translate them into a small coherent set of metrics, trends, comparisons and actionable detail. If the theme is missing or a material business definition is ambiguous, ask one focused question. Do not silently replace the requested theme or data source. Omit unsupported metrics and explain the gap.`;
+const standard = `Use the STANDARD dashboard definition and native charts/tables/controls with dashboard_create for a new dashboard. Do not author HTML, load ECharts, call dashboard_create_html or convert the dashboard to HTML. Choose only components supported by the current tool schema; express summary metrics with supported charts/tables rather than inventing a KPI-card type. Include a useful time trend, a business-dimension comparison, a bounded detail table (normally at most 50 rows), and supported filters. Bind all views to real queries so filter changes and refresh requery the source.`;
+const html = `Use a custom HTML dashboard. Call dashboard_libraries and read the installed skill's HTML runtime/lifecycle reference before authoring. Check the actual available libraries and pageRuntime contract; do not assume Browser Runtime is healthy. Author through SandboxFile tools and save a new page with dashboard_create_html. The page must declare const live = window.xpertLiveArtifact, subscribe before await live.ready(), and call live.query(bindingId, typedControls) for initial load and all affected bindings on filter application. Refresh each exact Binding ID with live.refresh(bindingId). Data comes only through these declared bindings, never direct database/REST requests or embedded preview rows. Follow allowed library origins, locks and runtime validation; do not add arbitrary dependencies.`;
+const design = `Build a polished business workspace, not a wall of large charts. Use a restrained light enterprise theme unless the user supplies another style: quiet page background, clean panels, consistent spacing, readable typography and one main accent. At desktop widths, place three or four meaningful summary metrics above a main trend/comparison area with a narrower attention list; place actionable detail below. Adapt to the actual embedded viewport and stack on narrow widths without clipping. Use compact chart heights, clear units, restrained gridlines, legible tooltips and deliberate whitespace. Attention lists and comparison badges require real evidence; otherwise omit them. Support loading, no-data, error and partial-data states distinctly. Display the effective filters, data period and last successful refresh, never a fabricated refresh timestamp. Keep interactions functional and keyboard accessible.`;
+const existing = `Use only the explicitly selected dashboard or a uniquely identified target from dashboard_list. Ask for a target if ambiguous; never choose by recency. Call dashboard_open, inspect its presentation.type and read the current definition/editing copy. Preserve Artifact identity, saved Bindings, business semantics and library locks unless the requested change requires changing them. Copy saveArguments and revision fields from the current open result, include the requested/current title, and save real changes with dashboard_update. On revision conflict retain the edits and reconcile with the latest draft; do not overwrite blindly.`;
+const recovery = `Inspect the actual failed call, its full returned error and the current saved/unsaved state first. A previous response quoting an error is not a fresh execution. If an earlier save outcome is unknown, inspect matching saved Artifacts before attempting creation again. Repair only the evidenced argument, query, filter or page defect. Obtain fresh previews and filter evidence in this run for new/changed Bindings, then retry the appropriate domain save. Do not repeatedly guess. For RUNTIME_UNBOUND, missing tools, permission failures or unavailable Browser Runtime, stop with the precise blocker and preserved file/Artifact references; do not edit infrastructure or downgrade presentation. Report success only from a new successful save receipt.`;
+function command(prompt) {
+    return {
+        name: prompt.name,
+        label: prompt.label,
+        description: prompt.description,
+        icon: dashboard_icon_1.dashboardIcon,
+        category: 'live-dashboard',
+        kind: 'prompt_workflow',
+        workflow: { type: 'prompt_workflow', name: prompt.name, label: prompt.label, description: prompt.description, tags: ['live-dashboard', prompt.group] },
+        argsHint: prompt.argsHint,
+        action: { type: 'insert_invocation', template: [context, ...prompt.instructions, 'User requirements / 用户需求：', '{{args}}'].join('\n\n') }
+    };
+}
+/** Commands are resolved from the installed middleware, including on existing Assistants. */
+exports.dashboardPromptWorkflows = [
+    {
+        name: 'dashboard-standard-auto', group: 'standard',
+        label: { en_US: 'Standard · Choose a business theme', zh_Hans: '标准看板 · 自动选题新建' },
+        description: { en_US: 'Choose a useful theme from real data and create an independent native dashboard.', zh_Hans: '根据数据质量和业务价值选题，新建可筛选、刷新的标准看板。' },
+        argsHint: '数据源、使用人群、希望解决的问题、时间范围（可选）',
+        instructions: [newDashboard, discover, automaticTheme, metrics, standard, preview, receipt]
+    },
+    {
+        name: 'dashboard-standard-new', group: 'standard',
+        label: { en_US: 'Standard · Create for a topic', zh_Hans: '标准看板 · 指定主题新建' },
+        description: { en_US: 'Create a native dashboard for a specific business question.', zh_Hans: '围绕指定业务问题设计指标、趋势、对比、明细和筛选。' },
+        argsHint: '业务主题、数据源、使用人群、时间范围、必需指标',
+        instructions: [newDashboard, specifiedTheme, discover, metrics, standard, preview, receipt]
+    },
+    {
+        name: 'dashboard-standard-improve', group: 'standard',
+        label: { en_US: 'Standard · Improve a dashboard', zh_Hans: '标准看板 · 优化已有看板' },
+        description: { en_US: 'Improve the selected native dashboard while preserving its identity.', zh_Hans: '调整指定标准看板的图表、指标或筛选，保留原看板身份。' },
+        argsHint: '选中的看板或准确名称、需要调整的图表/指标/筛选',
+        instructions: [existing, 'Require a standard presentation. If the target is HTML, explain the mismatch rather than converting it. Edit only supported definition fields and omit htmlPath/libraries. Use dashboard_update, not a creation tool.', metrics, preview, receipt]
+    },
+    {
+        name: 'dashboard-standard-recover', group: 'standard',
+        label: { en_US: 'Standard · Recover a save', zh_Hans: '标准看板 · 恢复保存' },
+        description: { en_US: 'Diagnose a failed native draft save and resume with fresh evidence.', zh_Hans: '定位标准看板保存错误，按本轮真实验证结果恢复草稿保存。' },
+        argsHint: '失败工具及原始错误、新建还是修改、目标看板（如有）',
+        instructions: [recovery, 'Keep standard mode. For a failed new creation use dashboard_create after checking for an existing successful save. Do not create HTML files or call dashboard_create_html. If the existing target is HTML, report the mismatch instead of converting it.', `Only when recovering an existing Artifact: ${existing}`, metrics, preview, receipt]
+    },
+    {
+        name: 'dashboard-html-auto', group: 'html',
+        label: { en_US: 'HTML · Choose a business theme', zh_Hans: 'HTML 看板 · 自动选题新建' },
+        description: { en_US: 'Choose an actionable business theme and build a polished independent HTML dashboard.', zh_Hans: '选择有真实业务价值的数据，创建布局精致、可实际使用的 HTML 看板。' },
+        argsHint: '数据源、使用人群、业务目标、时间范围、风格（可选）',
+        instructions: [newDashboard, discover, automaticTheme, metrics, preview, html, design, receipt]
+    },
+    {
+        name: 'dashboard-html-new', group: 'html',
+        label: { en_US: 'HTML · Create for a topic', zh_Hans: 'HTML 看板 · 指定主题新建' },
+        description: { en_US: 'Build a custom live HTML page for a specific business decision.', zh_Hans: '围绕指定业务问题制作自定义 HTML 看板，保留真实查询与交互。' },
+        argsHint: '业务主题、数据源、使用人群、日期、必需指标、风格/参考图',
+        instructions: [newDashboard, specifiedTheme, discover, metrics, preview, html, design, receipt]
+    },
+    {
+        name: 'dashboard-html-style', group: 'html',
+        label: { en_US: 'HTML · Style from a reference', zh_Hans: 'HTML 看板 · 参考图片美化' },
+        description: { en_US: 'Restyle a selected HTML dashboard using a reference without fabricating business content.', zh_Hans: '参考图片或风格描述美化指定 HTML 看板，保留指标、绑定和功能。' },
+        argsHint: '目标 HTML 看板、参考图片或风格描述、希望改善的地方',
+        instructions: [existing, 'Require an HTML target. Read the returned htmlPath editing copy and dashboard_libraries runtime contract; save with dashboard_update using that exact editing path. Use the reference for hierarchy, layout, typography and visual rhythm, not its example data, unsupported widgets or invented business events. If no usable reference/style was supplied, ask for the missing input. Preserve query/subscription/filter/refresh behavior and dependency locks for style-only work; do not rebuild unchanged queries or require fresh previews for unchanged Bindings.', design, receipt]
+    },
+    {
+        name: 'dashboard-html-recover', group: 'html',
+        label: { en_US: 'HTML · Recover a save', zh_Hans: 'HTML 看板 · 恢复保存' },
+        description: { en_US: 'Resume an unsaved HTML candidate or draft using actual validation diagnostics.', zh_Hans: '保留已有页面与真实查询，定位运行校验问题并恢复保存。' },
+        argsHint: '失败工具和原始错误、HTML 文件路径、目标看板（如有）',
+        instructions: [recovery, 'Keep HTML mode. Read the existing candidate instead of rewriting it. For a new unsaved candidate, use its verified path with dashboard_create_html after checking prior save outcomes. For an existing HTML Artifact, save the current editing copy with dashboard_update. If the target is standard, report the mismatch instead of converting it. Read dashboard_libraries and the skill HTML lifecycle reference before a targeted page repair.', `Only when recovering an existing Artifact: ${existing}`, metrics, preview, receipt]
+    },
+    {
+        name: 'dashboard-explore', group: 'checks',
+        label: { en_US: 'Inspect · Explore sources', zh_Hans: '通用检查 · 探索数据源' },
+        description: { en_US: 'Inspect available sources and propose useful themes without creating resources.', zh_Hans: '只读检查来源、字段、数据新鲜度，推荐可用的业务主题。' },
+        argsHint: '指定来源或业务方向、关注的问题（可选）',
+        instructions: ['This is inspection only: do not register definitions, write files, create or update dashboards. Call dashboard_list_sources, inspect relevant contracts with dashboard_discover and use small bounded previews. If a source is missing, inspect available analytics_definition_connections/analytics_definition_inspect without registration.', metrics, 'Return a short source inventory with supported queries, date coverage and gaps, then up to three ranked business themes with audience, decision, useful metrics and readiness. No exhaustive database scan.']
+    },
+    {
+        name: 'dashboard-test-source', group: 'checks',
+        label: { en_US: 'Inspect · Test a source', zh_Hans: '通用检查 · 验证查询' },
+        description: { en_US: 'Run a minimal real query and filter acceptance for one source.', zh_Hans: '验证一个来源的发现、真实查询、字段映射和筛选链路。' },
+        argsHint: '数据源名称、一个业务指标、一个筛选维度（可选）',
+        instructions: ['This is a bounded read-only source test: do not register definitions, write files or save dashboards. Resolve the requested source with dashboard_list_sources and dashboard_discover. Preview one minimal real query; inspect field types, units, completeness and actual rows. Test one observed non-default filter and the all-values/null case when supported using dashboard_test_filter. Stop at the first unresolved failure. Report exact tool/error, the step that passed and the remaining gap; provider connectivity alone is not full dashboard acceptance.']
+    },
+    {
+        name: 'dashboard-audit-metrics', group: 'checks',
+        label: { en_US: 'Inspect · Audit metric definitions', zh_Hans: '通用检查 · 核对指标口径' },
+        description: { en_US: 'Check calculations, grain and comparisons without changing the dashboard.', zh_Hans: '检查分子分母、去重、关联粒度、统计期间与单位。' },
+        argsHint: '目标看板或数据源、需要核对的指标及已知业务口径',
+        instructions: ['Audit only. Inspect the selected/uniquely identified dashboard with dashboard_open, or resolve the supplied source with dashboard_list_sources/dashboard_discover. Do not register definitions, edit files or save changes. Use bounded independent previews to check the declared calculations against source data.', metrics, 'Return each metric with its actual formula, grain, period, unit, evidence and verdict: verified, incorrect or insufficient evidence. Distinguish business-definition uncertainty from a query defect. Recommend concrete corrections without applying them.']
+    },
+    {
+        name: 'dashboard-verify', group: 'checks',
+        label: { en_US: 'Inspect · Verify a saved dashboard', zh_Hans: '通用检查 · 验证筛选与刷新' },
+        description: { en_US: 'Verify saved identity, real filters and refresh; distinguish viewer checks from tool evidence.', zh_Hans: '核对保存版本、筛选与刷新，区分真实执行证据和待人工验证项。' },
+        argsHint: '目标看板、筛选场景、预期业务结果（可选）',
+        instructions: ['Acceptance only. Resolve the exact requested Artifact, open its current saved state with dashboard_open and record its identity/revision. Do not modify files, call save tools, publish or change source data. Preview its saved Bindings with actual defaults and observed alternative filter values; use dashboard_test_filter to validate affected queries and the null/all case. For HTML inspect its saved lifecycle and dependency contract as well. If actual viewer controls can be exercised through available authorized tools, check initial load, apply filters, refresh and reopening. Otherwise mark viewer behavior untested and give at most three manual actions with observable expected results. Do not equate a successful query or resource card with a verified browser interaction.']
+    }
+].map(command);

package/dist/lib/renderer.js

@@ -3,6 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.toDataAnalyticsPayload = toDataAnalyticsPayload;
 /** The only Data Analytics v1 translation. Providers never see chart encoding syntax. */
 function toDataAnalyticsPayload(manifest, datasets) {
+    // Missing datasets are failures, not empty/zero business results. The caller renders
+    // their failure state separately; successful empty datasets still retain their views.
+    const available = new Set(datasets.map(dataset => dataset.datasetId));
+    manifest = { ...manifest, charts: manifest.charts.filter(chart => available.has(chart.datasetId)),
+        tables: manifest.tables.filter(table => available.has(table.datasetId)) };
     const snapshot = Object.fromEntries(datasets.flatMap((dataset) => [
         [dataset.datasetId, dataset.rows],
         ...(!manifest.charts.some((chart) => chart.datasetId === dataset.datasetId) ? [] : [[`__plot.${dataset.datasetId}`, dataset.rows.map((row) => Object.fromEntries(dataset.fields.map((field) => [field.id, manifest.charts.some((chart) => chart.datasetId === dataset.datasetId && [chart.x, chart.y].includes(field.id)) ? renderValue(row[field.id], field.logicalType) : row[field.id]])))]])

package/dist/lib/save-evidence.d.ts

@@ -15,7 +15,7 @@ export declare function dashboardSaveEvidence(files: () => WorkspaceFilesApi): {
         token: number;
         generations: Map<string, number>;
         supersedesPaths: string[];
-        confirmation: "source" | "draft";
+        confirmation: "draft" | "source";
     };
     accept(save: SaveAttempt, output: unknown): Promise<void>;
     readonly pending: boolean;

package/dist/lib/sharing.service.js

@@ -41,6 +41,7 @@ let DashboardSharingService = class DashboardSharingService {
                 versionId: link.artifactVersionId, url: link.presentationUrl, expiresAt: link.expiresAt } : null };
     }
     async share(context, input) {
+        await this.dashboards.authorizeProject(context, 'manage');
         const state = await this.inspect(context, input.artifactId, input.versionMode === 'version' ? input.versionId : undefined);
         if (state.issues.length || !state.published?.versionId)
             throw new common_1.BadRequestException({ code: 'DASHBOARD_SHARE_BLOCKED', issues: state.issues });
@@ -52,6 +53,7 @@ let DashboardSharingService = class DashboardSharingService {
         return this.inspect(context, input.artifactId, input.versionMode === 'version' ? input.versionId : undefined);
     }
     async revoke(context, artifactId) {
+        await this.dashboards.authorizeProject(context, 'manage');
         await this.dashboards.history(context, artifactId);
         await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).revokeArtifactShare({ artifactId, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY });
         return this.inspect(context, artifactId);

package/dist/lib/view.provider.d.ts

@@ -80,6 +80,8 @@ export declare class DashboardViewProvider implements IXpertViewExtensionProvide
             };
             dashboards: {
                 title: string | null | undefined;
+                draftRevision?: number | undefined;
+                canDelete: boolean;
                 artifactId: string;
                 versionId: string | null | undefined;
                 versionNumber: number | undefined;
@@ -116,123 +118,6 @@ export declare class DashboardViewProvider implements IXpertViewExtensionProvide
         success: boolean;
         data: {
             artifactId: string;
-            versionId: string;
-            versionNumber: number;
-            title: string | null | undefined;
-        };
-        refresh: boolean;
-    } | {
-        success: boolean;
-        data: {
-            artifactId: string;
-            draftId: string;
-            draftRevision: number;
-            baseVersionId: string | null;
-            status: "draft";
-            title: string;
-        };
-        refresh: boolean;
-    } | {
-        success: boolean;
-        data: {
-            payload?: {
-                ok: boolean;
-                widget_type: string;
-                surface: string;
-                sources: never[];
-                manifest: {
-                    version: number;
-                    surface: string;
-                    title: string;
-                    cards: never[];
-                    filters: never[];
-                    sources: never[];
-                    charts: {
-                        id: string;
-                        title: string;
-                        type: "bar" | "line" | "area" | "pie" | "scatter";
-                        dataset: string;
-                        encodings: {
-                            color?: {
-                                field: string;
-                            } | undefined;
-                            x: {
-                                field: string;
-                            };
-                            y: {
-                                field: string;
-                            };
-                        };
-                    }[];
-                    tables: {
-                        id: string;
-                        title: string;
-                        dataset: string;
-                        columns: {
-                            field: string;
-                            label: string;
-                        }[];
-                    }[];
-                    blocks: ({
-                        id: string;
-                        type: string;
-                        chartId: string;
-                    } | {
-                        id: string;
-                        type: string;
-                        tableId: string;
-                    })[];
-                };
-                snapshot: {
-                    version: number;
-                    generatedAt: string;
-                    status: string;
-                    datasets: any;
-                };
-            } | undefined;
-            datasets: import("@xpert-ai/contracts").AnalyticalDataset[];
-            manifest: {
-                schema: "xpert.live-dashboard";
-                id: string;
-                title: string;
-                bindings: import("@xpert-ai/contracts").AnalyticsBinding[];
-                controls: {
-                    type: "string" | "number" | "boolean" | "date";
-                    controlId: string;
-                    label: string;
-                    defaultValue?: string | number | boolean | null | undefined;
-                    allowedValues?: (string | number | boolean | null)[] | undefined;
-                }[];
-                charts: {
-                    type: "bar" | "line" | "area" | "pie" | "scatter";
-                    id: string;
-                    title: string;
-                    datasetId: string;
-                    x: string;
-                    y: string;
-                    color?: string | undefined;
-                }[];
-                tables: {
-                    id: string;
-                    title: string;
-                    datasetId: string;
-                    fields: string[];
-                }[];
-                presentation?: {
-                    type: "html";
-                    html: string;
-                    dependencies?: import("@xpert-ai/plugin-sdk/artifact-document").ArtifactDocumentDependencyLock[] | undefined;
-                } | undefined;
-            };
-            draftId?: string | undefined;
-            draftRevision?: number | undefined;
-            baseVersionId?: string | null | undefined;
-            isDraft?: boolean | undefined;
-            title: string | null | undefined;
-            updatedAt: string | Date | undefined;
-            artifactId: string;
-            versionId: string | null | undefined;
-            versionNumber: number | undefined;
         };
         refresh: boolean;
     } | {

package/dist/lib/view.provider.js

@@ -32,21 +32,22 @@ let DashboardViewProvider = class DashboardViewProvider {
     }
     supports(context) { return context.hostType === 'agent' || context.hostType === 'project'; }
     getViewManifests(context, slot) {
-        if (!(context.hostType === 'agent' && slot === 'agent.workbench' || context.hostType === 'project' && slot === 'detail.sections'))
+        if (!(context.hostType === 'agent' && ['agent.workbench', 'agent.workbench.fixed', 'agent.workbench.main'].includes(slot) || context.hostType === 'project' && slot === 'detail.sections'))
             return [];
         return [{ key: exports.VIEW_KEY, title: text('Live dashboards', '实时看板'), hostType: context.hostType, slot, order: 35,
-                icon: dashboard_icon_1.dashboardIcon, refreshable: true, activation: { requiredFeatures: [exports.FEATURE] },
+                icon: dashboard_icon_1.dashboardIcon, refreshable: true, activation: { projectResource: true, requiredFeatures: [exports.FEATURE] },
                 source: { provider: exports.VIEW_PROVIDER, plugin: dashboard_service_1.PLUGIN_NAME },
-                workbench: { fixed: true, menu: { enabled: true, label: text('Live dashboards', '实时看板'), icon: dashboard_icon_1.dashboardIcon, order: 35 } },
+                workbench: { fixed: true, openMode: 'on-demand', menu: { enabled: true, label: text('Live dashboards', '实时看板'), icon: dashboard_icon_1.dashboardIcon, order: 35 } },
                 view: { type: 'remote_component', runtime: 'react', protocolVersion: 1, component: { isolation: 'iframe', entry: exports.VIEW_KEY }, dataSource: { mode: 'platform' } },
                 dataSource: { mode: 'platform', querySchema: { supportsSelection: true, supportsParameters: true }, cache: { enabled: false } },
-                clientCommands: [{ key: contracts_1.ASSISTANT_CONTEXT_SET_COMMAND, label: text('Select dashboard for Assistant', '设置助理当前看板') },
+                clientCommands: [{ key: 'workbench.content.status' }, { key: 'workbench.content.resolve' }, { key: contracts_1.ASSISTANT_CONTEXT_SET_COMMAND, label: text('Select dashboard for Assistant', '设置助理当前看板') },
                     { key: contracts_1.ARTIFACT_PRESENTATION_OPEN_COMMAND, label: text('Open shared page', '打开独立页面') },
                     { key: contracts_1.WORKBENCH_NAVIGATION_OPEN_COMMAND, label: text('Open dashboard', '打开看板') }],
                 hostEvents: { subscriptions: [{ key: 'dashboard-created', event: 'assistant.tool.completed',
                             filter: { toolNames: dashboard_receipt_1.DASHBOARD_MUTATION_TOOLS }, action: { type: 'forward', debounceMs: 0 } }] },
                 actions: [
                     ...['share-status', 'share', 'revoke-share'].map(key => ({ key, label: text('Team sharing', '团队分享'), actionType: 'invoke', placement: 'toolbar', inputSchema: { type: 'object', properties: {}, additionalProperties: true } })),
+                    { key: 'delete', label: text('Delete dashboard', '删除看板'), actionType: 'invoke', placement: 'toolbar', inputSchema: { type: 'object', properties: {}, additionalProperties: true } },
                     { key: 'publish', label: text('Publish draft', '发布草稿'), actionType: 'invoke', placement: 'toolbar', inputSchema: { type: 'object', properties: {}, additionalProperties: true } },
                     { key: 'save', label: text('Save', '保存'), actionType: 'invoke', placement: 'toolbar', inputSchema: { type: 'object', properties: {}, additionalProperties: true } },
                     { key: 'query', label: text('Refresh', '刷新'), actionType: 'invoke', placement: 'toolbar', inputSchema: { type: 'object', properties: {}, additionalProperties: true } },
@@ -69,6 +70,13 @@ let DashboardViewProvider = class DashboardViewProvider {
             const input = v3_1.z.object({ artifactId: v3_1.z.string().uuid(), versionId: v3_1.z.string().uuid().optional() }).strict().parse(request.input);
             return { success: true, data: action === 'share-status' ? await this.sharing.inspect(context, input.artifactId, input.versionId) : await this.sharing.revoke(context, input.artifactId), refresh: false };
         }
+        if (action === 'delete') {
+            const parsed = v3_1.z.object({ artifactId: v3_1.z.string().uuid(), expectedRevision: v3_1.z.number().int().positive(), confirmed: v3_1.z.literal(true) }).strict().safeParse(request.input);
+            if (!parsed.success)
+                throw new common_1.BadRequestException('DASHBOARD_DELETION_CONFIRMATION_REQUIRED');
+            const input = parsed.data;
+            return { success: true, data: await this.service.trash(context, input.artifactId, input.expectedRevision), refresh: false };
+        }
         if (action === 'publish') {
             const parsed = v3_1.z.object({ artifactId: v3_1.z.string().uuid(), expectedRevision: v3_1.z.number().int().positive(),
                 expectedCurrentVersionId: v3_1.z.string().uuid().nullable(), confirmed: v3_1.z.literal(true) }).strict().safeParse(request.input);