@xpert-ai/plugin-live-dashboard 0.3.0 → 0.4.0

package/.xpertai-plugin/plugin.json

@@ -1,8 +1,16 @@
 {
   "name": "@xpert-ai/plugin-live-dashboard",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "level": "system",
   "artifactNamespace": "live_dashboard",
   "sandboxActions": "./dist/sandbox-actions/action.json",
-  "skills": "./skills"
+  "skills": "./skills",
+  "assets": {
+    "screenshots": [
+      "./assets/branding/cover-v1.webp",
+      "./assets/previews/trend-workspace.png",
+      "./assets/previews/profit-atlas.png",
+      "./assets/previews/customer-brief.png"
+    ]
+  }
 }

package/README.md

@@ -35,6 +35,17 @@ Tools are `dashboard_list_sources`, `dashboard_discover`, `dashboard_preview`, `
 
 Specialized Assistants may configure `allowedFinalProviders` on the middleware, for example `["workspace_script.query"]`. Upstream discovery and preview still work with other providers, but Agent save rejects final bindings outside this list. Omit it for the existing unrestricted provider workflow. This is an Agent workflow policy, not a substitute for the server's source/Artifact authorization.
 
+The settings form now selects each entry from a dropdown. Options come from
+`GET /api/live-dashboard/provider-options`, using the host Analytics capability
+with the authenticated tenant, organization and user. It lists distinct Provider
+types of **currently accessible data sources**, not every installed adapter or
+individual database connection. The list refreshes on loading the selector;
+unavailable saved IDs remain visible and are not silently removed. A configured
+policy still requires 1–20 values; the saved `string[]` contract is unchanged.
+An empty catalog means no accessible sources; authorization/catalog errors remain
+errors. This uses the existing platform `remoteSelect` control and requires no
+platform changes.
+
 For a dedicated Dashboard Assistant, mark its connected `LiveDashboard` middleware node `required: true` (see the [graph fragment](examples/assistant-middleware.yaml)). ChatKit sends an explicit capability allowlist; an optional middleware is unavailable until the user selects it. Enabling the Workbench view alone does not enable Agent tools. Preserve that platform selection behavior for general-purpose Assistants.
 
 Only the LLM boundary uses `requestJson` / `payloadJson` strings, because recursive JSON unions are unreliable in model function schemas. The plugin parses these into the unchanged canonical JSON protocol before calling the platform. Protocol version and operation come from the discovered provider contract; parameter name also supplies the Agent-created control ID. Saved manifests retain the full generic Binding protocol. Preview uses Binding parameter defaults, avoiding a second control mapping for the model to repeat. Provider syntax is learned from discovery, not embedded in platform prompts.
@@ -59,6 +70,59 @@ Artifacts are owner-only within their agent/project host for this MVP. MIME: `ap
 
 ## Built-in prompt workflows / 内置提示词模板
 
+### Chat shortcut buttons / 聊天快捷按钮
+
+Like Presentation Studio, this plugin contributes an Assistant template with
+12 workspace prompt workflows. In the plugin's contents, choose **实时看板助手 /
+Live Dashboard Assistant**, install it into the target workspace, and select the
+model and sandbox in the existing setup wizard. Its required LiveDashboard,
+Skills and SandboxFile middleware nodes are already connected. Workspace prompts
+use `insert_text`: clicking a shortcut opens editable text before sending.
+
+Shortcut resources use names beginning with `live-dashboard-`. The legacy
+middleware commands below keep their `/dashboard-` names: the host gives middleware
+commands precedence, so reusing those names would hide the workspace shortcuts.
+Both paths share the same prompt content. The workspace prompt library remains
+the place to edit labels, content and Assistant associations.
+
+**Existing Assistants:** a plugin update alone does not seed workspace resources.
+Import the prompts once, or associate already imported prompts with the Assistant
+in the workspace prompt library. The following shipped helper supports a one-time
+import without changing the Assistant graph, model, publication or existing prompts:
+
+1. Configure and publish the Assistant with LiveDashboard connected to its main
+   Agent and **System middleware** enabled. Keep its normal Skills, SandboxFile,
+   model and sandbox configuration.
+2. From this plugin package directory (source checkout: build first), use Node 20+
+   and a platform login token with authoring access to the target workspace.
+   Provide `XPERT_TOKEN` through your normal secret environment; do not store it
+   in shell history or commit it. IDs come from the selected organization and
+   published Assistant.
+
+   ```sh
+   node scripts/import-prompts.mjs \
+     --api-url https://your-xpert-host/api \
+     --organization-id YOUR_ORGANIZATION_UUID \
+     --assistant-id YOUR_ASSISTANT_UUID
+   ```
+
+3. Review the read-only preview. Repeat with `--apply` to create only the missing
+   resources, associated with this Assistant. The script then checks the published
+   runtime exposes the new `insert_text` shortcuts. Reopen the chat/new conversation
+   to refresh its command list. No republishing is needed just for prompt import.
+
+The helper never overwrites or archives prompts or changes associations. Matching,
+active and applicable prompts are skipped. Edited/archived prompts, resources
+associated with another Assistant, or disabled/overridden command-profile entries
+stop the import before writes: resolve those deliberately in the prompt library
+or Assistant command settings. For a second Assistant in the same workspace,
+associate the existing resources instead of importing duplicates. Network failures
+can leave some newly created prompts; rerunning safely skips them. Use HTTPS for
+remote hosts and configure trust for private certificates; do not disable TLS
+verification. The helper does not install or update the plugin.
+
+### Middleware slash commands / 中间件斜杠命令
+
 When the Assistant has the `LiveDashboard` middleware, type `/dashboard-` in its
 chat composer and select a workflow. Selection inserts an invocation so the user
 can add requirements before sending; it does not submit or publish automatically.
@@ -180,3 +244,9 @@ Open the dashboard picker and use the trash icon beside an entry. The confirmati
 The owner can delete private Assistant dashboards; Project dashboards require the current user's management permission. Read-only shared pages expose no delete control. The platform checks the confirmed draft revision atomically, rejecting concurrent edits. Entries without a saved working draft (legacy version-only or incomplete first saves) have no recycle revision and do not expose this action. No Agent deletion tool is registered.
 
 Manual acceptance after installing the updated plugin: cancel a deletion and confirm the entry remains; delete an unused saved dashboard and confirm it stays absent after reload; delete the selected dashboard and confirm the preview clears and its old shared link is unavailable.
+
+## Quick start and examples
+
+See [快速开始与样例](docs/quick-start.mdx). The App initializes the project-scoped authoring Assistant. Three versioned recipes bundle source, labeled synthetic data, previews and checks in [skills/live-dashboard/examples](skills/live-dashboard/examples/README.md). Existing dashboards remain independent of recipe upgrades.
+
+Superstore 企业 BI 样例的数据准备、三个页面和指标口径见 [Superstore](docs/superstore.mdx)。

package/assets/branding/cover-v1.prompt.txt

@@ -0,0 +1,27 @@
+Use case: ads-marketing.
+Create a NEW premium 16:9 Explore app cover for "Live Dashboard". The visual must communicate conversational creation, real connected data, interactive analytics, and editable animated data storytelling — not just a conventional static sales report.
+Style reference: the attached DB Studio image is STYLE ONLY. Retain its bright warm ivory studio environment, confident Chinese typography, tactile white surfaces, subtle soft shadows. Combine this with beautifully art-directed dimensional motion graphics. Do not copy the database UI or its branding.
+Layout: left 40% typography, right 55% compelling connected data/animation scene, generous spacing. Keep all essential information above 72% height. Bottom 23% quiet ivory background, reserved for the marketplace card overlay. Main message must remain readable as a 384px thumbnail.
+Palette: ivory #F7F5EF, deep ink #142C42, restrained blue #3659A2, teal #178577 and small warm amber accents. Sophisticated, precise, high-end product design. No dark cyberpunk, no rainbow glow, no decorative plants or notebooks.
+
+Exact text:
+Brand upper left: "Live Dashboard"
+Large two-line headline:
+"数据会说话，"
+"洞察动起来。"
+First line deep ink, second line blue with a teal punctuation mark.
+Support line: "对话生成 · 交互分析 · 动态可视化"
+
+Visual story on right:
+A single harmonious composition of two connected, layered white panels, almost frontal with mild perspective. Rear panel: a compact real-data dashboard labeled "实时洞察", with clear region-filter chips, two KPI cards "76,000" and "380", blue trend chart, teal bar chart. Small text "示例数据" makes the numbers clearly illustrative.
+Front-right panel: an animated-data explainer labeled "动态演示", featuring sculptural blue/teal bars emerging into 3D, a flowing curved trajectory linking highlighted chart points, and two subtle translucent previous positions of a moving amber marker to make MOTION unmistakable. A small simple play triangle is allowed inside this illustrative panel, but no video export button or standalone editor UI. Let visual objects extend slightly beyond the panel border to convey expressive HTML/3D authoring. Motion should feel meaningful and beautifully choreographed, not a pile of floating widgets.
+At the upper-left edge of the visualization add one tiny chat bubble: "把趋势讲清楚" connected by a restrained curved line into the dashboard. This conveys conversation-to-visual creation. Bottom edge of the right visual include small label "能力示意".
+The linked dashboard and animated explainer should be distinct but form one flowing product narrative, with strong visual hierarchy, readable charts, deliberate negative space.
+
+Constraints: only brand is Live Dashboard. Absolutely no Claude, Anthropic or other competitor name/logo/branding, no starburst assistant mark, no database cylinder, no invented app logo, no external product logos. No MP4/export labels, no unsupported automated-update promises, no camera/live-action imagery, no realistic people. Do not reproduce a real customer's data. The result is a marketing illustration, not a claimed actual UI screenshot. All Chinese text must be clean and correctly written. Avoid adding any text beyond the specified short labels.
+
+Final refinement (built-in image_gen):
+Change ONLY the small three-colored-bars logo immediately to the left of the 'Live Dashboard' brand text: remove that logo completely and fill its area with the surrounding warm ivory background. Align the 'Live Dashboard' brand text to the same left margin as the large Chinese headline. Keep every other element exactly unchanged: all Chinese text, the dashboard, the animated 3D chart and play symbol, the chat bubble, colors, lighting, margins and wide framing. Do not create any replacement icon or brand symbol.
+
+Capability basis: docs/frontend-libraries.mdx, docs/editing.mdx and docs/quick-start.mdx. The cover illustrates conversational authoring, data-bound interactive views and authored HTML/chart/3D motion. It does not claim a separate video editor or MP4 export workflow.
+Research: https://claude.com/resources/articles/dashboards-and-motion and https://support.claude.com/en/articles/17454997-get-started-with-claude-motion (2026-11-01). Competitor names and marks must not appear in the image.

package/dist/index.js

@@ -3,9 +3,22 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const plugin_1 = require("./lib/plugin");
+const project_1 = require("./lib/project");
+const templates_1 = require("./lib/templates");
+const assistant_template_1 = require("./lib/assistant-template");
+const dashboard_icon_1 = require("./lib/dashboard-icon");
 const packageJson = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, '../package.json'), 'utf8'));
 const plugin = {
-    meta: { name: packageJson.name, version: packageJson.version, category: 'middleware', displayName: 'Live dashboards', description: 'Live dashboards', author: 'XpertAI', level: packageJson.xpert.plugin.level, artifactNamespace: packageJson.xpert.plugin.artifactNamespace },
+    meta: {
+        name: packageJson.name, version: packageJson.version, category: 'middleware', displayName: 'Live dashboards', description: 'Live dashboards',
+        author: 'XpertAI', level: packageJson.xpert.plugin.level, artifactNamespace: packageJson.xpert.plugin.artifactNamespace, icon: dashboard_icon_1.dashboardIcon,
+        targetApps: ['xpert', 'data-xpert'],
+        targetAppMeta: { xpert: { types: ['business-app', 'workbench-view', 'assistant-template'], capabilities: ['live_dashboard'], marketplace: { contents: [
+                        project_1.dashboardApp,
+                        { type: 'assistant-template', name: assistant_template_1.DASHBOARD_TEMPLATE_KEY, displayName: assistant_template_1.dashboardAssistantTemplate.title, description: assistant_template_1.dashboardAssistantTemplate.description }
+                    ] } } }
+    },
+    templates: templates_1.dashboardTemplates,
     register: () => ({ module: plugin_1.LiveDashboardPlugin })
 };
 exports.default = plugin;

package/dist/lib/agent.schema.d.ts

@@ -15,7 +15,6 @@ export declare const discoverToolSchema: z.ZodObject<{
 }>;
 export declare const agentBindingSchema: z.ZodObject<{
     source: z.ZodType<import("@xpert-ai/contracts").AnalyticsSourceRef, z.ZodTypeDef, import("@xpert-ai/contracts").AnalyticsSourceRef>;
-    providerId: z.ZodString;
     output: z.ZodObject<{
         datasetId: z.ZodString;
         fields: z.ZodArray<z.ZodObject<{
@@ -74,6 +73,7 @@ export declare const agentBindingSchema: z.ZodObject<{
         }[];
         grain?: string[];
     }>;
+    providerId: z.ZodString;
 } & {
     parameters: z.ZodArray<z.ZodObject<Omit<{
         name: z.ZodString;
@@ -98,14 +98,6 @@ export declare const agentBindingSchema: z.ZodObject<{
     payloadJson: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     source: import("@xpert-ai/contracts").AnalyticsSourceRef;
-    parameters: {
-        type: "string" | "number" | "boolean" | "date";
-        name: string;
-        required: boolean;
-        defaultValue?: string | number | boolean | null | undefined;
-        allowedValues?: (string | number | boolean | null)[] | undefined;
-    }[];
-    providerId: string;
     output: {
         datasetId?: string;
         fields?: {
@@ -120,9 +112,6 @@ export declare const agentBindingSchema: z.ZodObject<{
         }[];
         grain?: string[];
     };
-    payloadJson: string;
-}, {
-    source: import("@xpert-ai/contracts").AnalyticsSourceRef;
     parameters: {
         type: "string" | "number" | "boolean" | "date";
         name: string;
@@ -131,6 +120,9 @@ export declare const agentBindingSchema: z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     providerId: string;
+    payloadJson: string;
+}, {
+    source: import("@xpert-ai/contracts").AnalyticsSourceRef;
     output: {
         datasetId?: string;
         fields?: {
@@ -145,12 +137,19 @@ export declare const agentBindingSchema: z.ZodObject<{
         }[];
         grain?: string[];
     };
+    parameters: {
+        type: "string" | "number" | "boolean" | "date";
+        name: string;
+        required: boolean;
+        defaultValue?: string | number | boolean | null | undefined;
+        allowedValues?: (string | number | boolean | null)[] | undefined;
+    }[];
+    providerId: string;
     payloadJson: string;
 }>;
 export declare const previewToolSchema: z.ZodObject<{
     binding: z.ZodObject<{
         source: z.ZodType<import("@xpert-ai/contracts").AnalyticsSourceRef, z.ZodTypeDef, import("@xpert-ai/contracts").AnalyticsSourceRef>;
-        providerId: z.ZodString;
         output: z.ZodObject<{
             datasetId: z.ZodString;
             fields: z.ZodArray<z.ZodObject<{
@@ -209,6 +208,7 @@ export declare const previewToolSchema: z.ZodObject<{
             }[];
             grain?: string[];
         }>;
+        providerId: z.ZodString;
     } & {
         parameters: z.ZodArray<z.ZodObject<Omit<{
             name: z.ZodString;
@@ -233,14 +233,6 @@ export declare const previewToolSchema: z.ZodObject<{
         payloadJson: z.ZodString;
     }, "strict", z.ZodTypeAny, {
         source: import("@xpert-ai/contracts").AnalyticsSourceRef;
-        parameters: {
-            type: "string" | "number" | "boolean" | "date";
-            name: string;
-            required: boolean;
-            defaultValue?: string | number | boolean | null | undefined;
-            allowedValues?: (string | number | boolean | null)[] | undefined;
-        }[];
-        providerId: string;
         output: {
             datasetId?: string;
             fields?: {
@@ -255,9 +247,6 @@ export declare const previewToolSchema: z.ZodObject<{
             }[];
             grain?: string[];
         };
-        payloadJson: string;
-    }, {
-        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         parameters: {
             type: "string" | "number" | "boolean" | "date";
             name: string;
@@ -266,6 +255,9 @@ export declare const previewToolSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         providerId: string;
+        payloadJson: string;
+    }, {
+        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         output: {
             datasetId?: string;
             fields?: {
@@ -280,11 +272,6 @@ export declare const previewToolSchema: z.ZodObject<{
             }[];
             grain?: string[];
         };
-        payloadJson: string;
-    }>;
-}, "strict", z.ZodTypeAny, {
-    binding: {
-        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         parameters: {
             type: "string" | "number" | "boolean" | "date";
             name: string;
@@ -293,6 +280,11 @@ export declare const previewToolSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         providerId: string;
+        payloadJson: string;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    binding: {
+        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         output: {
             datasetId?: string;
             fields?: {
@@ -307,11 +299,6 @@ export declare const previewToolSchema: z.ZodObject<{
             }[];
             grain?: string[];
         };
-        payloadJson: string;
-    };
-}, {
-    binding: {
-        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         parameters: {
             type: "string" | "number" | "boolean" | "date";
             name: string;
@@ -320,6 +307,11 @@ export declare const previewToolSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         providerId: string;
+        payloadJson: string;
+    };
+}, {
+    binding: {
+        source: import("@xpert-ai/contracts").AnalyticsSourceRef;
         output: {
             datasetId?: string;
             fields?: {
@@ -334,10 +326,19 @@ export declare const previewToolSchema: z.ZodObject<{
             }[];
             grain?: string[];
         };
+        parameters: {
+            type: "string" | "number" | "boolean" | "date";
+            name: string;
+            required: boolean;
+            defaultValue?: string | number | boolean | null | undefined;
+            allowedValues?: (string | number | boolean | null)[] | undefined;
+        }[];
+        providerId: string;
         payloadJson: string;
     };
 }>;
 export declare const createToolSchema: z.ZodObject<{} & {
+    creationIntent: z.ZodOptional<z.ZodEnum<["new", "copy"]>>;
     title: z.ZodString;
     supersedesPaths: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
     controls: z.ZodEffects<z.ZodArray<z.ZodObject<{
@@ -446,17 +447,20 @@ export declare const createToolSchema: z.ZodObject<{} & {
         fields: string[];
     }[];
     previewIds: string[];
+    creationIntent?: "new" | "copy" | undefined;
     supersedesPaths?: string[] | undefined;
 }, {
     title: string;
     controls?: unknown;
     charts?: unknown;
     tables?: unknown;
+    creationIntent?: "new" | "copy" | undefined;
     supersedesPaths?: string[] | undefined;
     previewIds?: unknown;
 }>;
 export declare const htmlPathSchema: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
 export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
+    creationIntent: z.ZodOptional<z.ZodEnum<["new", "copy"]>>;
     title: z.ZodString;
     supersedesPaths: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
     controls: z.ZodEffects<z.ZodArray<z.ZodObject<{
@@ -542,7 +546,7 @@ export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
     previewIds: z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], unknown>;
 }, "charts" | "tables"> & {
     path: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
-    libraries: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodEnum<["echarts", "three"]>, "many">, ("echarts" | "three")[], ("echarts" | "three")[]>>;
+    libraries: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodArray<z.ZodEnum<["echarts", "three", "trend-workspace", "profit-atlas", "customer-brief"]>, "many">, ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[], ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[]>, ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[], ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[]>>;
 }, "strict", z.ZodTypeAny, {
     path: string;
     title: string;
@@ -554,15 +558,17 @@ export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     previewIds: string[];
+    creationIntent?: "new" | "copy" | undefined;
     supersedesPaths?: string[] | undefined;
-    libraries?: ("echarts" | "three")[] | undefined;
+    libraries?: ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[] | undefined;
 }, {
     path: string;
     title: string;
     controls?: unknown;
+    creationIntent?: "new" | "copy" | undefined;
     supersedesPaths?: string[] | undefined;
     previewIds?: unknown;
-    libraries?: ("echarts" | "three")[] | undefined;
+    libraries?: ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[] | undefined;
 }>;
 export declare function parseObjectJson(text: string): Record<string, import("@xpert-ai/contracts").JSONValue>;
 export declare function fromAgentBinding(input: z.infer<typeof agentBindingSchema>, contract: AnalyticsDiscoveryResult['queryContract']): import("@xpert-ai/contracts").AnalyticsBinding;

package/dist/lib/agent.schema.js

@@ -22,6 +22,7 @@ exports.agentBindingSchema = analytics_1.analyticsBindingObjectSchema.omit({ pay
 }).strict();
 exports.previewToolSchema = v3_1.z.object({ binding: exports.agentBindingSchema }).strict();
 exports.createToolSchema = dashboard_schema_1.dashboardSchema.innerType().omit({ schema: true, id: true, bindings: true, presentation: true }).extend({
+    creationIntent: v3_1.z.enum(['new', 'copy']).optional().describe('Required when an editing target exists. Use only when the user explicitly requests a new independent dashboard or a copy; ordinary refinements must use dashboard_open/update.'),
     title: dashboard_schema_1.dashboardSchema.innerType().shape.title.describe('Saved Artifact title. When renaming an HTML dashboard, include the new title in the SAME dashboard_update call as htmlPath; changing the HTML heading alone does not rename the saved Artifact.'),
     supersedesPaths: v3_1.z.array(plugin_sdk_1.workspaceRelativeFilePathSchema).max(16).optional().describe('Explicitly abandon earlier unsaved HTML creation candidates after this dashboard saves successfully. Copy exact pending paths; never include an Artifact editing copy. Files are not deleted or claimed as saved. Also use when choosing a standard dashboard instead of an HTML prototype.'),
     controls: (0, plugin_sdk_1.jsonEncodedSchema)(agentControlsSchema),
@@ -35,7 +36,7 @@ exports.htmlPathSchema = plugin_sdk_1.workspaceRelativeFilePathSchema.refine(pat
 }, 'Use a named HTML file such as dashboards/sales.html; .html alone is not a dashboard filename.')
     .describe('Workspace-relative HTML file created or edited with SandboxFile, for example dashboards/sales.html. Copy the complete htmlPath from dashboard_open when editing.');
 exports.createHtmlToolSchema = exports.createToolSchema.omit({ charts: true, tables: true }).extend({ path: exports.htmlPathSchema,
-    libraries: document_libraries_1.libraryRequestsSchema.optional().describe('Bundled library IDs from dashboard_libraries. Omit for native SVG/Canvas/DOM; use ["echarts"] for ECharts or ["three"] for Three.js.') }).strict();
+    libraries: document_libraries_1.libraryRequestsSchema.optional().describe('Bundled IDs from dashboard_libraries. Omit for native SVG/Canvas/DOM; use echarts or three for charts. Optional: add exactly one visual theme (trend-workspace, profit-atlas, customer-brief) with echarts. Preserve the saved theme unless a change is requested.') }).strict();
 function parseObjectJson(text) {
     try {
         return analytics_1.analyticsOptionsSchema.parse(JSON.parse(text));

package/dist/lib/app-config.d.ts

@@ -0,0 +1,62 @@
+export declare const dashboardAppConfig: {
+    scope: "organization";
+    assistantTemplateKey: string;
+    workspace: {
+        mode: "dedicated";
+        sharing: "private";
+        name: {
+            en_US: string;
+            zh_Hans: string;
+        };
+        description: {
+            en_US: string;
+            zh_Hans: string;
+        };
+    };
+    knowledgebases: never[];
+    modelRequirements: {
+        primary: true;
+    };
+    presentation: {
+        developer: string;
+        tagline: {
+            en_US: string;
+            zh_Hans: string;
+        };
+        longDescription: {
+            en_US: string;
+            zh_Hans: string;
+        };
+        screenshots: string[];
+        features: {
+            key: string;
+            title: {
+                en_US: string;
+                zh_Hans: string;
+            };
+            description: {
+                en_US: string;
+                zh_Hans: string;
+            };
+        }[];
+        useCases: {
+            en_US: string;
+            zh_Hans: string;
+        }[];
+        dataScope: {
+            en_US: string;
+            zh_Hans: string;
+        };
+        initializationSummary: {
+            en_US: string;
+            zh_Hans: string;
+        };
+        initializationSteps: {
+            en_US: string;
+            zh_Hans: string;
+        }[];
+    };
+    entry: {
+        type: "assistant-chat";
+    };
+};

package/dist/lib/app-config.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardAppConfig = void 0;
+const text = (en_US, zh_Hans) => ({ en_US, zh_Hans });
+exports.dashboardAppConfig = {
+    scope: 'organization',
+    assistantTemplateKey: 'live-dashboard-assistant',
+    workspace: {
+        mode: 'dedicated', sharing: 'private',
+        name: text('Live Dashboard workspace', '实时看板工作空间'),
+        description: text('Assistant configuration for project-scoped dashboard authoring.', '管理按项目制作看板的助理配置。')
+    },
+    knowledgebases: [],
+    modelRequirements: { primary: true },
+    presentation: {
+        developer: 'Xpert AI',
+        tagline: text('From a working example to your live business data', '从可运行样例开始，连接你的业务数据'),
+        longDescription: text('Create dashboards with an Assistant in ChatKit. Select a Project, explore clearly labeled demo data or connect authorized files and business sources, then review a saved draft before publication.', '在 ChatKit 中与助理一起制作看板。选择项目，体验明确标注的演示数据或连接有权限的文件及业务数据源，检查保存的草稿后再发布。'),
+        screenshots: [
+            './assets/branding/cover-v1.webp',
+            './assets/previews/trend-workspace.png',
+            './assets/previews/profit-atlas.png',
+            './assets/previews/customer-brief.png'
+        ],
+        features: [
+            { key: 'visual-styles', title: text('Three visual styles', '三种视觉风格'), description: text('Preview the Trend Workspace overview, Profit Atlas profitability desk and Customer Brief report prototypes. Each style includes reusable Agent recipes.', '预览 Trend Workspace 经营总览、Profit Atlas 盈利分析台与 Customer Brief 客户报告原型。每种风格均提供 Agent 可复用配方。') },
+            { key: 'superstore', title: text('Enterprise retail analytics', '企业零售 BI 样例'), description: text('A reproducible Tableau Superstore dataset and three dashboards query your authorized published Data Xpert model.', '可复现的 Tableau Superstore 数据与三个企业看板，通过有权限的 Data Xpert 发布模型查询。') },
+            { key: 'examples', title: text('Three runnable examples', '三个可运行样例'), description: text('Regional sales, sales overview and production quality include source, demo data and validation checks.', '区域销售、销售总览和生产质量均附带源码、演示数据与核对清单。') },
+            { key: 'project', title: text('One synchronized Project', '项目双向同步'), description: text('ChatKit and the dashboard view use the same Project and resource permissions.', 'ChatKit 与看板视图使用同一项目及资源权限。') },
+            { key: 'draft', title: text('Review before publication', '先检查，再发布'), description: text('The Assistant saves a draft; a project manager publishes the reviewed revision.', '助理保存草稿，项目管理者检查后发布指定修订。') }
+        ],
+        useCases: [text('Sales analysis', '销售分析'), text('Production and quality review', '生产与质量分析')],
+        dataScope: text('A private configuration workspace; dashboards and files belong to the selected Project. Installation does not grant data access.', '配置工作空间保持私有；看板和文件归属所选项目。安装应用不会授予数据访问权限。'),
+        initializationSummary: text('Prepare a workspace and publish the authoring Assistant. Choose or create a Project when entering chat.', '准备工作空间并发布制作助理。进入聊天后选择或创建项目。'),
+        initializationSteps: [text('Create the private workspace', '创建私有工作空间'), text('Install the authoring template and its dependencies', '安装制作模板及依赖'), text('Configure the primary model and publish the Assistant', '配置主模型并发布助理')]
+    },
+    entry: { type: 'assistant-chat' }
+};

package/dist/lib/artifact-type.provider.d.ts

@@ -0,0 +1,15 @@
+import { DashboardService } from './dashboard.service';
+import type { ArtifactDraftRecord } from '@xpert-ai/plugin-sdk';
+import { type RuntimeCapabilityRegistry, type ArtifactTypeDefinition, type ArtifactTypeSource, type ArtifactTypeActor, type ContentOperation, type IArtifactTypeProvider } from '@xpert-ai/plugin-sdk';
+/** Drafts require Project edit access; explicit authenticated shares may expand formal-version readership. */
+export declare class DashboardArtifactType implements IArtifactTypeProvider {
+    private readonly runtime;
+    private readonly dashboards;
+    constructor(runtime: RuntimeCapabilityRegistry, dashboards: DashboardService);
+    readonly definition: ArtifactTypeDefinition;
+    authorize(source: ArtifactTypeSource, actor: ArtifactTypeActor, _operation: ContentOperation): Promise<void>;
+    validateContent(content: Buffer, mimeType: string): void;
+    authorizeDraft(source: ArtifactTypeSource, actor: ArtifactTypeActor, operation: ContentOperation): Promise<void>;
+    assertDraftPublication(source: ArtifactTypeSource, actor: ArtifactTypeActor, draft: ArtifactDraftRecord): Promise<void>;
+    validateLegacyContent(source: ArtifactTypeSource, content: Buffer, mimeType: string): void;
+}

package/dist/lib/artifact-type.provider.js

@@ -0,0 +1,78 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DashboardArtifactType = void 0;
+const dashboard_service_1 = require("./dashboard.service");
+const common_1 = require("@nestjs/common");
+const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
+const document_package_1 = require("./document-package");
+const dashboard_sharing_1 = require("./dashboard-sharing");
+/** Drafts require Project edit access; explicit authenticated shares may expand formal-version readership. */
+let DashboardArtifactType = class DashboardArtifactType {
+    constructor(runtime, dashboards) {
+        this.runtime = runtime;
+        this.dashboards = dashboards;
+        this.definition = {
+            versioning: { mode: 'draft-only' },
+            title: { en_US: 'Live dashboard', zh_Hans: '实时看板' },
+            kinds: ['file'], content: { mimeTypes: ['application/json'], maxBytes: document_package_1.MAX_DASHBOARD_PACKAGE_BYTES },
+            collection: { allowCopy: false },
+            sharing: { projectAccess: 'link-audience', accessModes: ['organization_all'], versionModes: ['latest', 'version'],
+                allowDownload: false, mutableLinks: true, descriptor: true, shareKey: dashboard_sharing_1.DASHBOARD_SHARE_KEY },
+            presentation: { mode: 'authenticated' }
+        };
+    }
+    async authorize(source, actor, _operation) {
+        if (!actor.userId || !actor.tenantId || source.tenantId !== actor.tenantId ||
+            source.pluginName !== '@xpert-ai/plugin-live-dashboard' || source.resourceType !== 'live-dashboard')
+            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+    }
+    validateContent(content, mimeType) {
+        if (mimeType !== 'application/json' || content.length > document_package_1.MAX_DASHBOARD_PACKAGE_BYTES)
+            throw new common_1.ForbiddenException('DASHBOARD_VERSION_UNAVAILABLE');
+        (0, document_package_1.decodeDashboardPackage)(content);
+    }
+    async authorizeDraft(source, actor, operation) {
+        await this.authorize(source, actor, operation);
+        if (source.userId || !source.projectId)
+            return;
+        const access = (await this.runtime.require(plugin_sdk_1.ProjectAccessRuntimeCapability).listReadable({
+            actor: { tenantId: actor.tenantId, userId: actor.userId, organizationId: source.organizationId }, projectIds: [source.projectId]
+        }))[0];
+        if (!access || access.role === 'member')
+            throw new common_1.ForbiddenException('DASHBOARD_DRAFT_ACCESS_DENIED');
+    }
+    async assertDraftPublication(source, actor, draft) {
+        await this.authorizeDraft(source, actor, 'manage');
+        if (!actor.tenantId || !actor.userId || !source.organizationId)
+            throw new common_1.ForbiddenException('DASHBOARD_ACCESS_DENIED');
+        const currentActor = { tenantId: actor.tenantId, userId: actor.userId, organizationId: source.organizationId };
+        await this.dashboards.validatePublication({ ...currentActor, hostType: source.projectId ? 'project' : 'agent',
+            hostId: source.projectId ?? source.xpertId, slots: [] }, draft.artifactId, draft.revision, draft.baseVersionId);
+    }
+    validateLegacyContent(source, content, mimeType) {
+        this.validateContent(content, mimeType);
+        const { manifest } = (0, document_package_1.decodeDashboardPackage)(content);
+        const prefix = source.projectId ? `project/${source.projectId}/` : source.xpertId ? `agent/${source.xpertId}/` : null;
+        if (!prefix || source.resourceId !== `${prefix}${manifest.id}`)
+            throw new common_1.ForbiddenException('DASHBOARD_IDENTITY_MISMATCH');
+    }
+};
+exports.DashboardArtifactType = DashboardArtifactType;
+exports.DashboardArtifactType = DashboardArtifactType = __decorate([
+    (0, common_1.Injectable)(),
+    (0, plugin_sdk_1.ArtifactTypeProvider)('live-dashboard'),
+    __param(0, (0, common_1.Inject)(plugin_sdk_1.XPERT_RUNTIME_CAPABILITIES_TOKEN)),
+    __metadata("design:paramtypes", [Object, dashboard_service_1.DashboardService])
+], DashboardArtifactType);

package/dist/lib/assistant-template.d.ts

@@ -0,0 +1,2 @@
+export declare const DASHBOARD_TEMPLATE_KEY = "live-dashboard-assistant";
+export declare const dashboardAssistantTemplate: import("@xpert-ai/plugin-sdk").XpertTemplateContribution;

package/dist/lib/assistant-template.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardAssistantTemplate = exports.DASHBOARD_TEMPLATE_KEY = void 0;
+const templates_1 = require("./templates");
+exports.DASHBOARD_TEMPLATE_KEY = 'live-dashboard-assistant';
+// The App and standalone marketplace entry install the same project-aware author.
+exports.dashboardAssistantTemplate = templates_1.dashboardTemplates[0];