@xpert-ai/plugin-live-dashboard 0.5.0 → 0.6.0

package/.xpertai-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "@xpert-ai/plugin-live-dashboard",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "level": "system",
   "artifactNamespace": "live_dashboard",
   "sandboxActions": "./dist/sandbox-actions/action.json",

package/README.md

@@ -8,6 +8,8 @@ Sources, component Inspect and portable dashboard archives are tracked in the
 [feature guide](docs/sources-inspect-portability.mdx) and
 [current acceptance record](docs/sources-inspect-portability-acceptance.mdx).
 
+Large dashboards now support 32 Bindings by default (64 protocol ceiling), bounded query scheduling, batch preview/filter validation and durable save progress. See the [feature guide](docs/large-dashboards.mdx) and [acceptance record](docs/large-dashboards-acceptance.mdx). These features require published SDK/contracts 3.33.0 or later; no SDK patch is required.
+
 ## Ownership and flow
 
 ```text
@@ -194,7 +196,7 @@ See [HTML mode and acceptance](docs/html-mode.md). Agent tools write a complete
 
 The platform browser entry `@xpert-ai/plugin-sdk/artifact-document` owns the sandbox, CSP, MessageChannel, request validation and latest-response policy. The plugin owns lifecycle and supplies a narrow callback to `query-binding`. Its server loads the exact saved Artifact version, finds the declared Binding, validates controls and rechecks source access. The endpoint rejects full Binding, Provider, SQL/payload and alternate source fields.
 
-HTML preflight checks each native select's alternative/restored values and each button path in a fresh document mount, with at most two pages active. A button path also clicks controls it inserts, reveals or enables, retaining their prerequisite state and the same query quota; traversal is bounded to the first 12 buttons and 12 clicks per path. Every scenario checks initial bindings and host refresh using the same preview datasets. Successful static resources can be reused within this validation (bounded to 32 MB, up to 8 MB per resource); every replay still passes the resource policy, and failed, redirected or non-cacheable responses are not replayed. A 55-second validation deadline fails closed and cancels remaining pages before the host's 60-second Action limit. This prevents repeated resource downloads and the synthetic interaction sweep from exhausting the Action budget or one document's rate window without raising the SDK's query/concurrency limits. A request storm within a scenario still blocks saving; preflight is not a full combinatorial or sustained-load test.
+HTML preflight checks each native select's alternative/restored values and each button path in a fresh document mount, with at most two pages active. A button path also clicks controls it inserts, reveals or enables, retaining their prerequisite state and the same query quota; traversal is bounded to the first 12 buttons and 12 clicks per path. Every scenario checks initial bindings and host refresh using the same preview datasets. Successful static resources can be reused within this validation (bounded to 32 MB, up to 8 MB per resource); every replay still passes the resource policy, and failed, redirected or non-cacheable responses are not replayed. A 55-second validation deadline fails closed and cancels remaining pages before the host's 60-second Action limit. This prevents repeated resource downloads and the synthetic interaction sweep from exhausting the Action budget or one document's rate window with a separate immutable-snapshot budget of at most 16 replays per Binding; live queries remain limited to 60 dispatches per minute and concurrency 4. A request storm within a scenario still blocks saving; preflight is not a full combinatorial or sustained-load test.
 
 Pages call `window.xpertLiveArtifact.ready()`, `subscribe(bindingId, render)`, `query(bindingId, controls)` and `refresh(bindingId)`. Register subscriptions before the first query so the toolbar can refresh without resetting the document. Use inline DOM/SVG/Canvas or online scripts/styles/fonts from the HTTPS origins returned by `dashboard_libraries.online`. Tailwind CDN, jsDelivr, cdnjs, unpkg and Google Fonts are supported according to their resource-type allowlist. Preflight and the displayed page use the same policy; failed loads prevent saving. Pin online versions where possible. Unlike packaged libraries, online bytes are not part of the immutable Artifact snapshot. Direct data requests, external images, eval, workers and frames remain unavailable. Script processing remains in the separate Workspace Script provider.
 
@@ -208,7 +210,7 @@ The renderer runs in a script-only sandbox with no-network CSP. A small in-memor
 
 ## Build and validation
 
-Use the xpertai workspace's declared Corepack/pnpm. Development dependencies pin published SDK/contracts 3.27.0 and the Data Analytics renderer 0.1.35; no local platform or community links are required. SDK 3.27.0 includes the host-owned online resource policy, so no SDK patch is required. Rebuild both the viewer and HTML preflight assets after changing the SDK; `verify:dist` checks their source fingerprints.
+Use the xpertai workspace's declared Corepack/pnpm. Development dependencies pin published SDK/contracts 3.33.0 and the Data Analytics renderer 0.1.35; no local platform or community links are required. SDK 3.33.0 supplies the host-owned online resource policy, bounded query scheduler and grouped query runtime without a local SDK patch. Rebuild both the viewer and HTML preflight assets after changing the SDK; `verify:dist` checks their source fingerprints.
 
 ```sh
 corepack pnpm install --frozen-lockfile

package/dist/index.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const capacity_1 = require("./lib/capacity");
 const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const plugin_1 = require("./lib/plugin");
@@ -18,7 +19,8 @@ const plugin = {
                         { type: 'assistant-template', name: assistant_template_1.DASHBOARD_TEMPLATE_KEY, displayName: assistant_template_1.dashboardAssistantTemplate.title, description: assistant_template_1.dashboardAssistantTemplate.description }
                     ] } } }
     },
+    config: { schema: capacity_1.dashboardConfigSchema },
     templates: templates_1.dashboardTemplates,
-    register: () => ({ module: plugin_1.LiveDashboardPlugin })
+    register: context => ({ module: plugin_1.LiveDashboardPlugin, providers: [{ provide: capacity_1.DASHBOARD_CONFIG, useValue: capacity_1.dashboardConfigSchema.parse(context.config ?? {}) }] })
 };
 exports.default = plugin;

package/dist/lib/agent.schema.d.ts

@@ -376,24 +376,24 @@ export declare const createToolSchema: z.ZodObject<{} & {
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }>, "many">, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -492,8 +492,8 @@ export declare const createToolSchema: z.ZodObject<{} & {
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     charts: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -575,24 +575,24 @@ export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }>, "many">, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -685,8 +685,8 @@ export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
     path: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
     libraries: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodArray<z.ZodEnum<["echarts", "three", "trend-workspace", "profit-atlas", "customer-brief"]>, "many">, ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[], ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[]>, ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[], ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[]>>;
 }, "strict", z.ZodTypeAny, {
-    title: string;
     path: string;
+    title: string;
     controls: {
         type: "string" | "number" | "boolean" | "date";
         controlId: string;
@@ -714,8 +714,8 @@ export declare const createHtmlToolSchema: z.ZodObject<Omit<{} & {
     supersedesPaths?: string[] | undefined;
     libraries?: ("echarts" | "three" | "trend-workspace" | "profit-atlas" | "customer-brief")[] | undefined;
 }, {
-    title: string;
     path: string;
+    title: string;
     sourceMetadata?: unknown;
     components?: unknown;
     controls?: unknown;

package/dist/lib/agent.schema.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createHtmlToolSchema = exports.htmlPathSchema = exports.createToolSchema = exports.previewToolSchema = exports.agentBindingSchema = exports.discoverToolSchema = void 0;
 exports.parseObjectJson = parseObjectJson;
 exports.fromAgentBinding = fromAgentBinding;
+const capacity_1 = require("./capacity");
 const v3_1 = require("zod/v3");
 const analytics_1 = require("@xpert-ai/plugin-sdk/analytics");
 const dashboard_schema_1 = require("./dashboard.schema");
@@ -31,7 +32,7 @@ exports.createToolSchema = dashboard_schema_1.dashboardSchema.innerType().omit({
     tables: (0, plugin_sdk_1.jsonEncodedSchema)(dashboard_schema_1.dashboardSchema.innerType().shape.tables),
     sourceMetadata: (0, plugin_sdk_1.jsonEncodedSchema)(dashboard_schema_1.dashboardSchema.innerType().shape.sourceMetadata.unwrap()).optional(),
     components: (0, plugin_sdk_1.jsonEncodedSchema)(dashboard_schema_1.dashboardSchema.innerType().shape.components.unwrap()).optional(),
-    previewIds: (0, plugin_sdk_1.jsonEncodedSchema)(v3_1.z.array(v3_1.z.string().min(1)).min(1).max(8).describe('Exact current-run previewId receipts from successful dashboard_preview or dashboard_preview_binding calls. For updates, changed bindings upsert by stable binding.id; omitted bindings remain. Keep every intended changed/new binding receipt when retrying a failed save. Do not repeat bindings.'))
+    previewIds: (0, plugin_sdk_1.jsonEncodedSchema)(v3_1.z.array(v3_1.z.string().min(1)).min(1).max(capacity_1.MAX_DASHBOARD_BINDINGS).describe('Exact current-run previewId receipts from successful dashboard_preview or dashboard_preview_binding calls. For updates, changed bindings upsert by stable binding.id; omitted bindings remain. Keep every intended changed/new binding receipt when retrying a failed save. Do not repeat bindings.'))
 }).strict();
 exports.htmlPathSchema = plugin_sdk_1.workspaceRelativeFilePathSchema.refine(path => {
     const name = path.split('/').at(-1) ?? '';

package/dist/lib/archive.service.d.ts

@@ -1,3 +1,4 @@
+import { DashboardSaveRequests } from './save-requests';
 import { z } from 'zod/v3';
 import type { XpertResolvedViewHostContext } from '@xpert-ai/contracts';
 import { type RuntimeCapabilityRegistry, type WorkspacePortableFileReference } from '@xpert-ai/plugin-sdk';
@@ -52,8 +53,9 @@ type ImportInput = z.infer<typeof importInputSchema>;
 export declare class DashboardArchiveService {
     private readonly dashboards;
     private readonly runtime;
+    private readonly saves?;
     private readonly imports;
-    constructor(dashboards: DashboardService, runtime: RuntimeCapabilityRegistry);
+    constructor(dashboards: DashboardService, runtime: RuntimeCapabilityRegistry, saves?: DashboardSaveRequests | undefined);
     private authorize;
     private session;
     prepare(context: XpertResolvedViewHostContext, bytes: Buffer): Promise<{
@@ -71,8 +73,8 @@ export declare class DashboardArchiveService {
                 allowedValues?: (string | number | boolean | null)[] | undefined;
             }[];
             charts: {
-                title: string;
                 type: "bar" | "line" | "area" | "pie" | "scatter";
+                title: string;
                 id: string;
                 datasetId: string;
                 x: string;
@@ -131,6 +133,28 @@ export declare class DashboardArchiveService {
         baseVersionId: string | null;
         status: "draft";
         title: string;
+    } | {
+        cursor: string;
+        nextAction: string;
+        error?: string | undefined;
+        sourceFile?: {
+            path: string;
+            sha256: string;
+        } | undefined;
+        dashboard?: {
+            status: "draft";
+            title: string;
+            artifactId: string;
+            draftRevision: number;
+            draftId: string;
+            baseVersionId: string | null;
+        } | undefined;
+        requestId: string;
+        state: "failed" | "running" | "succeeded" | "queued";
+        stage: string;
+        completed: number;
+        total: number;
+        terminal: boolean;
     }>;
     discard(context: XpertResolvedViewHostContext, id: string): Promise<{
         discarded: boolean;

package/dist/lib/archive.service.js

@@ -13,6 +13,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.importBrowseSchema = exports.DashboardArchiveService = exports.importInputSchema = void 0;
+const save_requests_1 = require("./save-requests");
+const capacity_1 = require("./capacity");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const v3_1 = require("zod/v3");
@@ -23,14 +25,15 @@ const dashboard_schema_1 = require("./dashboard.schema");
 const dashboard_archive_1 = require("./dashboard-archive");
 const document_package_1 = require("./document-package");
 exports.importInputSchema = v3_1.z.object({ importId: v3_1.z.string().uuid(),
-    bindings: v3_1.z.array(v3_1.z.object({ bindingId: v3_1.z.string(), source: analytics_1.analyticsSourceRefSchema, payload: analytics_1.analyticsBindingObjectSchema.shape.payload }).strict()).max(8)
+    bindings: v3_1.z.array(v3_1.z.object({ bindingId: v3_1.z.string(), source: analytics_1.analyticsSourceRefSchema, payload: analytics_1.analyticsBindingObjectSchema.shape.payload }).strict()).max(capacity_1.MAX_DASHBOARD_BINDINGS)
 }).strict();
 const importBrowseSchema = v3_1.z.object({ importId: v3_1.z.string().uuid(), bindingId: v3_1.z.string(), source: analytics_1.analyticsSourceRefSchema, request: analytics_1.analyticsOptionsSchema.default({}) }).strict();
 exports.importBrowseSchema = importBrowseSchema;
 let DashboardArchiveService = class DashboardArchiveService {
-    constructor(dashboards, runtime) {
+    constructor(dashboards, runtime, saves) {
         this.dashboards = dashboards;
         this.runtime = runtime;
+        this.saves = saves;
         this.imports = new Map();
     }
     async authorize(context) {
@@ -76,6 +79,11 @@ let DashboardArchiveService = class DashboardArchiveService {
                 return replacement ? { ...binding, source: replacement.source, payload: replacement.payload } : binding;
             }) });
         const hash = (0, node_crypto_1.createHash)('sha256').update((0, document_package_1.encodeDashboardPackage)(manifest, session.dependencies)).digest('hex');
+        if (session.submitted && this.saves) {
+            if (session.submitted.hash !== hash)
+                throw new common_1.BadRequestException('DASHBOARD_IMPORT_ALREADY_SUBMITTED');
+            return this.saves.get(context, session.submitted.requestId);
+        }
         if (session.committed) {
             if (session.committed.hash !== hash)
                 throw new common_1.BadRequestException('DASHBOARD_IMPORT_ALREADY_COMPLETED');
@@ -85,6 +93,11 @@ let DashboardArchiveService = class DashboardArchiveService {
         }
         session.busy = true;
         try {
+            if (this.saves && manifest.bindings.length > 8) {
+                const request = await this.saves.submit(context, manifest, null, 0, `import/${input.importId}/${hash}`, undefined, session.dependencies);
+                session.submitted = { hash, requestId: request.requestId };
+                return request;
+            }
             const receipt = await this.dashboards.save(context, manifest, null, 0, session.dependencies);
             session.committed = { hash, receipt };
             return receipt;
@@ -126,7 +139,8 @@ exports.DashboardArchiveService = DashboardArchiveService;
 exports.DashboardArchiveService = DashboardArchiveService = __decorate([
     (0, common_1.Injectable)(),
     __param(1, (0, common_1.Inject)(plugin_sdk_1.XPERT_RUNTIME_CAPABILITIES_TOKEN)),
-    __metadata("design:paramtypes", [dashboard_service_1.DashboardService, Object])
+    __param(2, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [dashboard_service_1.DashboardService, Object, save_requests_1.DashboardSaveRequests])
 ], DashboardArchiveService);
 function importScope(context) {
     return JSON.stringify([context.tenantId, context.organizationId, context.userId, context.hostType, context.hostId, (0, dashboard_service_1.projectId)(context)]);

package/dist/lib/bounded-map.d.ts

@@ -0,0 +1,2 @@
+/** Drain every started task before returning; never exceed the worker budget on rejection. */
+export declare function boundedMap<T, R>(items: readonly T[], run: (item: T, index: number) => Promise<R>, concurrency?: number): Promise<R[]>;

package/dist/lib/bounded-map.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.boundedMap = boundedMap;
+/** Drain every started task before returning; never exceed the worker budget on rejection. */
+async function boundedMap(items, run, concurrency = 4) {
+    const results = new Array(items.length);
+    let next = 0, failed = false, failure;
+    await Promise.all(Array.from({ length: Math.min(Math.max(1, Math.min(8, concurrency)), items.length) }, async () => {
+        while (!failed && next < items.length) {
+            const index = next++;
+            try {
+                results[index] = await run(items[index], index);
+            }
+            catch (error) {
+                if (!failed) {
+                    failed = true;
+                    failure = error;
+                }
+            }
+        }
+    }));
+    if (failed)
+        throw failure;
+    return results;
+}

package/dist/lib/capacity.d.ts

@@ -0,0 +1,14 @@
+import { z } from 'zod/v3';
+/** Storage compatibility is independent of the administrator's authoring policy. */
+export declare const MAX_DASHBOARD_BINDINGS = 64;
+export declare const DEFAULT_DASHBOARD_BINDINGS = 32;
+export declare const DASHBOARD_CONFIG = "live-dashboard.config";
+export declare const dashboardConfigSchema: z.ZodDefault<z.ZodObject<{
+    maxBindings: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    maxBindings: number;
+}, {
+    maxBindings?: number | undefined;
+}>>;
+export type DashboardConfig = z.infer<typeof dashboardConfigSchema>;
+export declare function assertBindingCapacity(count: number, previousCount?: number, limit?: number): void;

package/dist/lib/capacity.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dashboardConfigSchema = exports.DASHBOARD_CONFIG = exports.DEFAULT_DASHBOARD_BINDINGS = exports.MAX_DASHBOARD_BINDINGS = void 0;
+exports.assertBindingCapacity = assertBindingCapacity;
+const v3_1 = require("zod/v3");
+/** Storage compatibility is independent of the administrator's authoring policy. */
+exports.MAX_DASHBOARD_BINDINGS = 64;
+exports.DEFAULT_DASHBOARD_BINDINGS = 32;
+exports.DASHBOARD_CONFIG = 'live-dashboard.config';
+exports.dashboardConfigSchema = v3_1.z.object({
+    maxBindings: v3_1.z.number().int().min(1).max(exports.MAX_DASHBOARD_BINDINGS).default(exports.DEFAULT_DASHBOARD_BINDINGS)
+}).strict().default({});
+function assertBindingCapacity(count, previousCount = 0, limit = exports.DEFAULT_DASHBOARD_BINDINGS) {
+    if (count > exports.MAX_DASHBOARD_BINDINGS || count > limit && count > previousCount)
+        throw new Error(`DASHBOARD_BINDING_CAPACITY: ${count} bindings; authoring limit ${limit}, storage limit ${exports.MAX_DASHBOARD_BINDINGS}. Reuse existing queries or increase the installation policy.`);
+}

package/dist/lib/dashboard-archive.d.ts

@@ -31,8 +31,8 @@ export declare function decodeDashboardArchive(bytes: Buffer): {
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;

package/dist/lib/dashboard-queries.d.ts

@@ -5,7 +5,7 @@ export declare function validateControls(manifest: DashboardManifest, input: Rec
     [x: string]: AnalyticsValue;
 };
 export declare function queryDashboardBinding(runtime: RuntimeCapabilityRegistry, actor: DataSourceActor, manifest: DashboardManifest, bindingId: string, input: Record<string, AnalyticsValue>): Promise<AnalyticalDataset>;
-export declare function queryDashboard(runtime: RuntimeCapabilityRegistry, actor: DataSourceActor, manifest: DashboardManifest, input: Record<string, AnalyticsValue>): Promise<AnalyticalDataset[]>;
+export declare function queryDashboard(runtime: RuntimeCapabilityRegistry, actor: DataSourceActor, manifest: DashboardManifest, input: Record<string, AnalyticsValue>, progress?: (completed: number) => Promise<void>): Promise<AnalyticalDataset[]>;
 /** Read-only rendering can show independent successful bindings. Saving/publishing still
  * uses queryDashboard and requires every binding to validate. Never return native error
  * details, which may contain private source configuration or query text. */

package/dist/lib/dashboard-queries.js

@@ -4,6 +4,7 @@ exports.validateControls = validateControls;
 exports.queryDashboardBinding = queryDashboardBinding;
 exports.queryDashboard = queryDashboard;
 exports.queryDashboardPartial = queryDashboardPartial;
+const bounded_map_1 = require("./bounded-map");
 const common_1 = require("@nestjs/common");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
 function validateControls(manifest, input) {
@@ -29,11 +30,15 @@ async function queryDashboardBinding(runtime, actor, manifest, bindingId, input)
     const selected = Object.fromEntries(Object.entries(controls).filter(([id]) => binding.parameters.some(parameter => parameter.controlId === id)));
     return runtime.require(plugin_sdk_1.AnalyticsRuntimeCapability).query(actor, { binding, controls: selected });
 }
-async function queryDashboard(runtime, actor, manifest, input) {
+async function queryDashboard(runtime, actor, manifest, input, progress) {
     validateControls(manifest, input);
-    const datasets = [];
-    for (const binding of manifest.bindings)
-        datasets.push(await queryDashboardBinding(runtime, actor, manifest, binding.id, input));
+    let completed = 0;
+    const datasets = await (0, bounded_map_1.boundedMap)(manifest.bindings, async (binding) => {
+        await progress?.(completed);
+        const result = await queryDashboardBinding(runtime, actor, manifest, binding.id, input);
+        await progress?.(++completed);
+        return result;
+    });
     if (Buffer.byteLength(JSON.stringify(datasets)) > 3_000_000)
         throw new common_1.BadRequestException('DASHBOARD_RESULT_TOO_LARGE');
     return datasets;
@@ -45,14 +50,14 @@ async function queryDashboardPartial(runtime, actor, manifest, input) {
     validateControls(manifest, input);
     const datasets = [];
     const failures = [];
-    for (const binding of manifest.bindings) {
+    await (0, bounded_map_1.boundedMap)(manifest.bindings, async (binding) => {
         try {
             datasets.push(await queryDashboardBinding(runtime, actor, manifest, binding.id, input));
         }
         catch {
             failures.push({ bindingId: binding.id, datasetId: binding.output.datasetId, reason: 'unavailable' });
         }
-    }
+    });
     if (Buffer.byteLength(JSON.stringify(datasets)) > 3_000_000)
         throw new common_1.BadRequestException('DASHBOARD_RESULT_TOO_LARGE');
     return { datasets, failures };

package/dist/lib/dashboard-receipt.js

@@ -4,7 +4,7 @@ exports.DASHBOARD_MUTATION_TOOLS = void 0;
 exports.createdDashboard = createdDashboard;
 exports.savedDashboardSource = savedDashboardSource;
 const v3_1 = require("zod/v3");
-exports.DASHBOARD_MUTATION_TOOLS = ['dashboard_create', 'dashboard_create_html', 'dashboard_update'];
+exports.DASHBOARD_MUTATION_TOOLS = ['dashboard_create', 'dashboard_create_html', 'dashboard_update', 'dashboard_wait_request', 'dashboard_get_request'];
 const receiptSchema = v3_1.z.object({ dashboard: v3_1.z.object({ artifactId: v3_1.z.string().uuid(), draftRevision: v3_1.z.number().int().positive(), status: v3_1.z.literal('draft') }) });
 /** Tool start/failed logs can share the host event channel; only a saved receipt opens a View. */
 function createdDashboard(output) {

package/dist/lib/dashboard-sources.js

@@ -4,15 +4,16 @@ exports.dashboardComponentsSchema = exports.sourceMetadataSchema = exports.compo
 exports.dashboardComponents = dashboardComponents;
 exports.dashboardSources = dashboardSources;
 exports.publicDashboardManifest = publicDashboardManifest;
+const capacity_1 = require("./capacity");
 const v3_1 = require("zod/v3");
 exports.componentId = v3_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_.-]{0,79}$/);
 exports.sourceMetadataSchema = v3_1.z.array(v3_1.z.object({
     bindingId: exports.componentId, title: v3_1.z.string().min(1).max(160), description: v3_1.z.string().max(2000).optional()
-}).strict()).max(8);
+}).strict()).max(capacity_1.MAX_DASHBOARD_BINDINGS);
 exports.dashboardComponentsSchema = v3_1.z.array(v3_1.z.object({
     id: exports.componentId, elementId: exports.componentId, title: v3_1.z.string().min(1).max(160),
     kind: v3_1.z.enum(['metric', 'chart', 'table', 'filter', 'text']),
-    sources: v3_1.z.array(v3_1.z.object({ bindingId: exports.componentId, fieldIds: v3_1.z.array(exports.componentId).max(80).optional() }).strict()).max(8)
+    sources: v3_1.z.array(v3_1.z.object({ bindingId: exports.componentId, fieldIds: v3_1.z.array(exports.componentId).max(80).optional() }).strict()).max(capacity_1.MAX_DASHBOARD_BINDINGS)
 }).strict()).max(160);
 function dashboardComponents(manifest) {
     if (manifest.presentation)

package/dist/lib/dashboard-view.schema.d.ts

@@ -239,16 +239,16 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             y: z.ZodString;
             color: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
             y: string;
             color?: string | undefined;
         }, {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -284,8 +284,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -331,8 +331,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -384,8 +384,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -431,8 +431,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -516,8 +516,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -575,8 +575,8 @@ export declare const dashboardSavedSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -902,16 +902,16 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     y: z.ZodString;
                     color: z.ZodOptional<z.ZodString>;
                 }, "strict", z.ZodTypeAny, {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
                     y: string;
                     color?: string | undefined;
                 }, {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -947,8 +947,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -994,8 +994,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1047,8 +1047,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1094,8 +1094,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1179,8 +1179,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1238,8 +1238,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1359,8 +1359,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1479,8 +1479,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1614,8 +1614,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;
@@ -1736,8 +1736,8 @@ export declare const dashboardViewDataSchema: z.ZodObject<{
                     allowedValues?: (string | number | boolean | null)[] | undefined;
                 }[];
                 charts: {
-                    title: string;
                     type: "bar" | "line" | "area" | "pie" | "scatter";
+                    title: string;
                     id: string;
                     datasetId: string;
                     x: string;