@xpert-ai/plugin-live-dashboard 0.5.0 → 0.6.0

package/dist/lib/dashboard.schema.d.ts

@@ -128,16 +128,16 @@ export declare const dashboardSchema: z.ZodEffects<z.ZodObject<{
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -173,8 +173,8 @@ export declare const dashboardSchema: z.ZodEffects<z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     charts: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -220,8 +220,8 @@ export declare const dashboardSchema: z.ZodEffects<z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     charts: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -273,8 +273,8 @@ export declare const dashboardSchema: z.ZodEffects<z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     charts: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -320,8 +320,8 @@ export declare const dashboardSchema: z.ZodEffects<z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[];
     charts: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -493,16 +493,16 @@ export declare const dashboardChangesSchema: z.ZodObject<{
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -556,8 +556,8 @@ export declare const dashboardChangesSchema: z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[] | undefined;
     charts?: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -607,8 +607,8 @@ export declare const dashboardChangesSchema: z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[] | undefined;
     charts?: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -754,16 +754,16 @@ export declare const saveSchema: z.ZodObject<{
             y: z.ZodString;
             color: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
             y: string;
             color?: string | undefined;
         }, {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -799,8 +799,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -846,8 +846,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -899,8 +899,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -946,8 +946,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -1003,8 +1003,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;
@@ -1054,8 +1054,8 @@ export declare const saveSchema: z.ZodObject<{
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;

package/dist/lib/dashboard.schema.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.queryBindingSchema = exports.querySchema = exports.saveSchema = exports.controlsSchema = exports.dashboardChangesSchema = exports.dashboardSchema = void 0;
+const capacity_1 = require("./capacity");
 const v3_1 = require("zod/v3");
 const analytics_1 = require("@xpert-ai/plugin-sdk/analytics");
 const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
@@ -8,7 +9,7 @@ const dashboard_sources_1 = require("./dashboard-sources");
 const id = v3_1.z.string().regex(/^[A-Za-z][A-Za-z0-9_.-]{0,79}$/);
 exports.dashboardSchema = v3_1.z.object({
     schema: v3_1.z.literal('xpert.live-dashboard'), id: v3_1.z.string().uuid(), title: v3_1.z.string().min(1).max(160),
-    bindings: v3_1.z.array(analytics_1.analyticsBindingSchema).max(8),
+    bindings: v3_1.z.array(analytics_1.analyticsBindingSchema).max(capacity_1.MAX_DASHBOARD_BINDINGS),
     sourceMetadata: dashboard_sources_1.sourceMetadataSchema.optional(),
     components: dashboard_sources_1.dashboardComponentsSchema.optional(),
     presentation: v3_1.z.object({ type: v3_1.z.literal('html'), html: artifact_document_1.artifactDocumentHtml, dependencies: artifact_document_1.artifactDocumentDependencyLocks.optional() }).strict().optional(),

package/dist/lib/dashboard.service.d.ts

@@ -1,3 +1,4 @@
+import { type DashboardConfig } from './capacity';
 import type { AnalyticsValue, AnalyticsDiscoveryRequest, AnalyticsQueryRequest, XpertResolvedViewHostContext } from '@xpert-ai/contracts';
 import { type RuntimeCapabilityRegistry } from '@xpert-ai/plugin-sdk';
 import { type DashboardManifest, type DashboardChanges } from './dashboard.schema';
@@ -5,10 +6,18 @@ import { type ArtifactDocumentDependencyAsset } from '@xpert-ai/plugin-sdk/artif
 import { HtmlDashboardValidation } from './html-validation';
 import type { DashboardAccess, DashboardMode } from './project';
 export declare const PLUGIN_NAME = "@xpert-ai/plugin-live-dashboard";
+export type SaveProgress = (stage: string, completed: number, total: number) => Promise<void>;
+export type SaveOptions = {
+    requestId: string;
+    progress: SaveProgress;
+};
 export declare class DashboardService {
     private readonly runtime;
     private readonly htmlValidation;
-    constructor(runtime: RuntimeCapabilityRegistry, htmlValidation: HtmlDashboardValidation);
+    private readonly config?;
+    constructor(runtime: RuntimeCapabilityRegistry, htmlValidation: HtmlDashboardValidation, config?: DashboardConfig | undefined);
+    get maxBindings(): number;
+    assertCapacity(count: number, previousCount?: number): void;
     sources(context: XpertResolvedViewHostContext): Promise<import("@xpert-ai/contracts").AnalyticsSourceSummary[]>;
     discover(context: XpertResolvedViewHostContext, input: AnalyticsDiscoveryRequest): Promise<import("@xpert-ai/contracts").AnalyticsDiscoveryResult>;
     preview(context: XpertResolvedViewHostContext, input: AnalyticsQueryRequest): Promise<import("@xpert-ai/contracts").AnalyticalDataset>;
@@ -64,7 +73,17 @@ export declare class DashboardService {
     trash(context: XpertResolvedViewHostContext, artifactId: string, expectedRevision: number): Promise<{
         artifactId: string;
     }>;
-    save(context: XpertResolvedViewHostContext, manifest: DashboardManifest, expectedVersionId: string | null, expectedRevision?: number, importedDependencies?: ArtifactDocumentDependencyAsset[]): Promise<{
+    previousBindingCount(context: XpertResolvedViewHostContext, manifest: DashboardManifest): Promise<number>;
+    /** Read-only reconciliation of a completed CAS after a worker/status-store interruption. */
+    savedRequestReceipt(context: XpertResolvedViewHostContext, manifestId: string, requestId: string, expectedRevision: number): Promise<{
+        artifactId: string;
+        draftId: string;
+        draftRevision: number;
+        baseVersionId: string | null;
+        status: "draft";
+        title: string;
+    } | null>;
+    save(context: XpertResolvedViewHostContext, manifest: DashboardManifest, expectedVersionId: string | null, expectedRevision?: number, importedDependencies?: ArtifactDocumentDependencyAsset[], task?: SaveOptions): Promise<{
         artifactId: string;
         draftId: string;
         draftRevision: number;
@@ -86,8 +105,8 @@ export declare class DashboardService {
                 allowedValues?: (string | number | boolean | null)[] | undefined;
             }[];
             charts: {
-                title: string;
                 type: "bar" | "line" | "area" | "pie" | "scatter";
+                title: string;
                 id: string;
                 datasetId: string;
                 x: string;
@@ -147,8 +166,8 @@ export declare class DashboardService {
                 allowedValues?: (string | number | boolean | null)[] | undefined;
             }[];
             charts: {
-                title: string;
                 type: "bar" | "line" | "area" | "pie" | "scatter";
+                title: string;
                 id: string;
                 datasetId: string;
                 x: string;
@@ -293,8 +312,8 @@ export declare class DashboardService {
                 allowedValues?: (string | number | boolean | null)[] | undefined;
             }[];
             charts: {
-                title: string;
                 type: "bar" | "line" | "area" | "pie" | "scatter";
+                title: string;
                 id: string;
                 datasetId: string;
                 x: string;

package/dist/lib/dashboard.service.js

@@ -14,6 +14,8 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DashboardService = exports.PLUGIN_NAME = void 0;
 exports.projectId = projectId;
+const capacity_1 = require("./capacity");
+const bounded_map_1 = require("./bounded-map");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const plugin_sdk_1 = require("@xpert-ai/plugin-sdk");
@@ -30,9 +32,19 @@ exports.PLUGIN_NAME = '@xpert-ai/plugin-live-dashboard';
 const RESOURCE_TYPE = 'live-dashboard';
 const MIME_TYPE = 'application/json';
 let DashboardService = class DashboardService {
-    constructor(runtime, htmlValidation) {
+    constructor(runtime, htmlValidation, config) {
         this.runtime = runtime;
         this.htmlValidation = htmlValidation;
+        this.config = config;
+    }
+    get maxBindings() { return this.config?.maxBindings ?? capacity_1.DEFAULT_DASHBOARD_BINDINGS; }
+    assertCapacity(count, previousCount = 0) {
+        try {
+            (0, capacity_1.assertBindingCapacity)(count, previousCount, this.maxBindings);
+        }
+        catch (error) {
+            throw new common_1.BadRequestException(error instanceof Error ? error.message : 'DASHBOARD_BINDING_CAPACITY');
+        }
     }
     async sources(context) { await this.authorizeProject(context); return this.runtime.require(plugin_sdk_1.AnalyticsRuntimeCapability).list(actor(context)); }
     async discover(context, input) { await this.authorizeProject(context); return this.runtime.require(plugin_sdk_1.AnalyticsRuntimeCapability).discover(actor(context), input); }
@@ -100,7 +112,31 @@ let DashboardService = class DashboardService {
         await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).setRecycled({ artifactId, expectedRevision, recycled: true });
         return { artifactId };
     }
-    async save(context, manifest, expectedVersionId, expectedRevision = 0, importedDependencies) {
+    async previousBindingCount(context, manifest) {
+        await this.authorizeProject(context, 'write');
+        const existing = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).findArtifactBySource({ pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceId: `${hostPrefix(context)}${manifest.id}` });
+        if (!existing)
+            return 0;
+        assertOwned(context, existing);
+        const draft = (await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).list([existing.id]))[0];
+        return existing.currentVersionId || draft ? (await this.open(context, existing.id)).manifest.bindings.length : 0;
+    }
+    /** Read-only reconciliation of a completed CAS after a worker/status-store interruption. */
+    async savedRequestReceipt(context, manifestId, requestId, expectedRevision) {
+        await this.authorizeProject(context, 'write');
+        const artifact = await this.runtime.require(plugin_sdk_1.ArtifactsRuntimeCapability).findArtifactBySource({ pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE, resourceId: `${hostPrefix(context)}${manifestId}` });
+        if (!artifact)
+            return null;
+        assertOwned(context, artifact);
+        if (artifact.status !== 'active')
+            throw new common_1.ForbiddenException('DASHBOARD_ARCHIVED');
+        const draft = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).get(artifact.id);
+        if (draft?.metadata?.saveRequestId !== requestId || draft.revision !== expectedRevision + 1)
+            return null;
+        return { artifactId: artifact.id, draftId: draft.id, draftRevision: draft.revision, baseVersionId: draft.baseVersionId, status: 'draft', title: draft.title ?? artifact.title ?? '' };
+    }
+    async save(context, manifest, expectedVersionId, expectedRevision = 0, importedDependencies, task) {
+        await task?.progress('authorization', 0, manifest.bindings.length);
         await this.authorizeProject(context, 'write');
         const scopedActor = actor(context);
         const parsed = dashboard_schema_1.dashboardSchema.parse(manifest);
@@ -115,6 +151,7 @@ let DashboardService = class DashboardService {
         }
         // A failed first upload can leave an Artifact with no saved content; revision 0 initializes it.
         const previous = existing && (existing.currentVersionId || expectedRevision > 0) ? await this.openDocument(context, existing.id) : null;
+        this.assertCapacity(parsed.bindings.length, previous?.manifest.bindings.length ?? 0);
         if (importedDependencies && existing)
             throw new common_1.BadRequestException('DASHBOARD_IMPORT_NEW_ID_REQUIRED');
         const dependencies = importedDependencies ? (0, artifact_document_1.verifyArtifactDocumentDependencies)(importedDependencies, parsed.presentation?.dependencies ?? [])
@@ -123,21 +160,31 @@ let DashboardService = class DashboardService {
         if (buffer.byteLength > document_package_1.MAX_DASHBOARD_PACKAGE_BYTES)
             throw new common_1.BadRequestException('DASHBOARD_MANIFEST_TOO_LARGE');
         const digest = (0, node_crypto_1.createHash)('sha256').update(buffer).digest('hex');
+        if (existing && task) {
+            const draft = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).get(existing.id);
+            if (draft?.metadata?.saveRequestId === task.requestId && draft.sha256 === digest && draft.revision === expectedRevision + 1)
+                return { artifactId: existing.id, draftId: draft.id, draftRevision: draft.revision, baseVersionId: draft.baseVersionId, status: 'draft', title: parsed.title };
+        }
         if ((existing?.currentVersionId ?? null) !== expectedVersionId)
             throw new common_1.ConflictException('DASHBOARD_VERSION_CONFLICT');
         // Recheck current data access even for an idempotent retry; the platform enforces the final CAS under a row lock.
-        const preview = await this.execute(context, parsed, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])));
+        const preview = await (0, dashboard_queries_1.queryDashboard)(this.runtime, actor(context), parsed, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])), task ? completed => task.progress('queries', completed, parsed.bindings.length) : undefined);
         if (!parsed.presentation)
             (0, renderer_1.toDataAnalyticsPayload)(parsed, preview);
-        for (const binding of parsed.bindings)
-            await this.probeControls(context, binding, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])));
+        let completedFilters = 0;
+        await (0, bounded_map_1.boundedMap)(parsed.bindings, async (binding) => {
+            await this.probeControls(context, binding, Object.fromEntries(parsed.controls.filter((control) => control.defaultValue !== undefined).map((control) => [control.controlId, control.defaultValue ?? null])), task ? () => task.progress('filters', completedFilters, parsed.bindings.length) : undefined);
+            await task?.progress('filters', ++completedFilters, parsed.bindings.length);
+        });
+        await task?.progress('html', 0, 1);
         const htmlValidation = await this.htmlValidation.validate(context, parsed, preview, dependencies);
+        await task?.progress('save', 0, 1);
         const artifact = existing ?? await artifacts.createArtifact({ source, type: { pluginName: exports.PLUGIN_NAME, resourceType: RESOURCE_TYPE }, kind: 'file', title: parsed.title,
             scope: { ...scopedActor, ...(projectId(context) ? { projectId: projectId(context), userId: null } : { xpertId: context.hostId }) } });
         const reference = await this.runtime.require(plugin_sdk_1.ArtifactContentRuntimeCapability).write({ artifactId: artifact.id, buffer });
         const result = await this.runtime.require(plugin_sdk_1.ArtifactDraftsRuntimeCapability).save({ artifactId: artifact.id, expectedRevision,
             expectedCurrentVersionId: expectedVersionId, mimeType: MIME_TYPE, title: parsed.title, fileName: 'dashboard.json', sha256: digest,
-            ...(htmlValidation ? { metadata: { htmlValidation } } : {}), workspaceFileRef: reference });
+            ...((htmlValidation || task) ? { metadata: { ...(htmlValidation ? { htmlValidation } : {}), ...(task ? { saveRequestId: task.requestId } : {}) } } : {}), workspaceFileRef: reference });
         return { artifactId: artifact.id, draftId: result.id, draftRevision: result.revision, baseVersionId: result.baseVersionId, status: 'draft', title: parsed.title };
     }
     async open(context, artifactId, versionId, draftRevision, mode = 'draft') {
@@ -242,7 +289,7 @@ let DashboardService = class DashboardService {
     execute(context, manifest, input) {
         return (0, dashboard_queries_1.queryDashboard)(this.runtime, actor(context), manifest, input);
     }
-    async probeControls(context, binding, input) {
+    async probeControls(context, binding, input, checkpoint) {
         const controls = Object.fromEntries(binding.parameters.map((parameter) => [parameter.controlId,
             Object.hasOwn(input, parameter.controlId) ? input[parameter.controlId] : parameter.defaultValue ?? null]));
         // A null default can bypass a native predicate entirely. Verify a real selection too,
@@ -253,6 +300,7 @@ let DashboardService = class DashboardService {
             const samples = [...(alternative !== undefined ? [alternative] : []),
                 ...(current !== null && parameter.allowedValues?.includes(null) ? [null] : [])];
             for (const value of samples) {
+                await checkpoint?.();
                 // Analytics already redacts provider failures. Preserve its actionable validation
                 // errors: a duplicate grain is not a malformed filter and needs a different repair.
                 await this.runtime.require(plugin_sdk_1.AnalyticsRuntimeCapability).query(actor(context), { binding, controls: { ...controls, [parameter.controlId]: value } });
@@ -264,7 +312,9 @@ exports.DashboardService = DashboardService;
 exports.DashboardService = DashboardService = __decorate([
     (0, common_1.Injectable)(),
     __param(0, (0, common_1.Inject)(plugin_sdk_1.XPERT_RUNTIME_CAPABILITIES_TOKEN)),
-    __metadata("design:paramtypes", [Object, html_validation_1.HtmlDashboardValidation])
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(capacity_1.DASHBOARD_CONFIG)),
+    __metadata("design:paramtypes", [Object, html_validation_1.HtmlDashboardValidation, Object])
 ], DashboardService);
 function actor(context) {
     if (!context.tenantId || !context.organizationId || !context.userId || !['agent', 'project'].includes(context.hostType))

package/dist/lib/definition-tools.d.ts

@@ -31,26 +31,26 @@ export declare function createDefinitionTools(context: IAgentMiddlewareContext,
     definitionJson: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     name: string;
+    requestId: string;
     providerId: string;
     connectionKey: string;
-    requestId: string;
     definitionJson: string;
 }, {
     name: string;
+    requestId: string;
     providerId: string;
     connectionKey: string;
-    requestId: string;
     definitionJson: string;
 }>, {
     name: string;
+    requestId: string;
     providerId: string;
     connectionKey: string;
-    requestId: string;
     definitionJson: string;
 }, {
     name: string;
+    requestId: string;
     providerId: string;
     connectionKey: string;
-    requestId: string;
     definitionJson: string;
 }, string>)[];

package/dist/lib/document-host.js

@@ -6,7 +6,7 @@ const artifact_document_1 = require("@xpert-ai/plugin-sdk/artifact-document");
 const document_network_1 = require("./document-network");
 /** The HTML never supplies or overrides its network permissions. */
 function mountDashboardDocument(frame, options) {
-    return (0, artifact_document_1.mountArtifactDocument)(frame, { ...options, networkPolicy: document_network_1.DASHBOARD_NETWORK_POLICY });
+    return (0, artifact_document_1.mountArtifactDocument)(frame, { ...options, dispatchesPerMinute: 60, networkPolicy: document_network_1.DASHBOARD_NETWORK_POLICY });
 }
 function isDashboardResourceAllowed(resourceType, url) {
     return (0, artifact_document_1.isArtifactDocumentResourceAllowed)(document_network_1.DASHBOARD_NETWORK_POLICY, resourceType, url);

package/dist/lib/document-package.d.ts

@@ -17,8 +17,8 @@ export declare function decodeDashboardPackage(bytes: Buffer): {
             allowedValues?: (string | number | boolean | null)[] | undefined;
         }[];
         charts: {
-            title: string;
             type: "bar" | "line" | "area" | "pie" | "scatter";
+            title: string;
             id: string;
             datasetId: string;
             x: string;

package/dist/lib/editing-patch.js

@@ -4,10 +4,11 @@ exports.removalsSchema = void 0;
 exports.upsertComponents = upsertComponents;
 exports.htmlElementIds = htmlElementIds;
 exports.assertHtmlPreserved = assertHtmlPreserved;
+const capacity_1 = require("./capacity");
 const parse5_1 = require("parse5");
 const v3_1 = require("zod/v3");
 exports.removalsSchema = v3_1.z.object({
-    bindingIds: v3_1.z.array(v3_1.z.string()).max(8).default([]), controlIds: v3_1.z.array(v3_1.z.string()).max(24).default([]),
+    bindingIds: v3_1.z.array(v3_1.z.string()).max(capacity_1.MAX_DASHBOARD_BINDINGS).default([]), controlIds: v3_1.z.array(v3_1.z.string()).max(24).default([]),
     viewIds: v3_1.z.array(v3_1.z.string()).max(40).default([]), htmlElementIds: v3_1.z.array(v3_1.z.string()).max(500).default([]),
     componentIds: v3_1.z.array(v3_1.z.string()).max(160).default([])
 }).strict().optional().describe('Only explicitly requested removals. Arrays of changed components otherwise upsert by stable ID and preserve omitted components.');

package/dist/lib/editing.d.ts

@@ -1,3 +1,4 @@
+import type { DashboardSaveRequests } from './save-requests';
 import { z } from 'zod/v3';
 import type { AnalyticsBinding, XpertResolvedViewHostContext } from '@xpert-ai/contracts';
 import { type IAgentMiddlewareContext } from '@xpert-ai/plugin-sdk';
@@ -101,24 +102,24 @@ export declare const updateToolSchema: z.ZodObject<{
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }>, "many">, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -202,8 +203,8 @@ export declare const updateToolSchema: z.ZodObject<{
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[] | undefined;
     charts?: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -251,7 +252,7 @@ export declare const updateToolSchema: z.ZodObject<{
 }>;
 export declare const EDITING_GUIDANCE = "Opening or reading a dashboard does not modify it. A selection_required result is normal: show its message to the user and wait for an explicit selection; do not retry, infer a target from history, or create a replacement. Do not save an unchanged editing copy or reopen/update merely to confirm a successful save; use the mutation receipt. For existing dashboards, call dashboard_open first and inspect presentation.type. For standard dashboards, update definition fields directly: a rename needs only title, editId, expectedRevision and expectedCurrentVersionId. No HTML file exists; omit htmlPath and libraries. For HTML dashboards only, open prepares a unique editing copy at htmlPath. Read with sandbox_read_file. If a long HTML line is truncated, do not repeat the same read: use dashboard_read_html with editId and follow nextOffset until null to inspect the saved source, then apply exact replacements to htmlPath. Never replace a file with a truncated preview. Edit with sandbox_edit_file/multi_edit_file (sandbox_write_file is create-only), then call dashboard_update with that exact htmlPath and read revisions. If the user requests a rename, include the new title in this same update; editing the HTML heading alone does not rename the Artifact. Save each batch automatically without human confirmation. Files are not dashboard saves. Preserve Binding semantics, stable component IDs and dependency locks unless requested. To add filters to an existing Binding, copy its complete dashboard_open.bindings[] entry, retain binding.id and existing parameters[].controlId, and call dashboard_preview_binding after changing payload/parameters/defaults. Binding ID is independent of output.datasetId; simplified dashboard_preview derives the ID from datasetId and can accidentally add a new Binding instead of updating the old one. Use the stable Binding ID in HTML query/subscribe calls. Submit every intended changed/new Binding previewId and matching controls with htmlPath in the same dashboard_update. Update arrays upsert by ID, preserving omitted components; removals must name explicitly requested deletions. On preflight failure, compare expected/requested Binding IDs, repair the HTML or previews, and retain all intended previewIds, controls, title and htmlPath when retrying. Dropping previewIds does not register new HTML queries. Do not remove an existing Binding merely to suppress validation. HTML updates retain existing element IDs. For new HTML, assign stable IDs to every KPI, chart, detail table and filter. Read and patch the current file instead of rebuilding unrelated sections. On conflict retain the editing file, open the latest draft and reconcile; never silently overwrite. Historical versions are read-only references. All Agent saves are drafts; only the Workbench human publish action creates formal versions. Read the live-dashboard skill for the complete workflow.";
 /** Run-local read receipts carry planning versions; authorization and CAS remain in the domain service. */
-export declare function createEditingTools(service: DashboardService, scope: XpertResolvedViewHostContext, context: IAgentMiddlewareContext, resolvePreviews: (ids: string[]) => AnalyticsBinding[], validateFinal: (manifest: DashboardManifest, requirePreviews: boolean, changedBindingIds?: string[]) => void, onOpen?: (path: string, artifactId: string) => void, currentTarget?: (config: unknown) => DashboardSelection | null | undefined): (import("@langchain/core/tools").DynamicStructuredTool<z.ZodObject<{
+export declare function createEditingTools(service: DashboardService, scope: XpertResolvedViewHostContext, context: IAgentMiddlewareContext, resolvePreviews: (ids: string[]) => AnalyticsBinding[], validateFinal: (manifest: DashboardManifest, requirePreviews: boolean, changedBindingIds?: string[]) => void, onOpen?: (path: string, artifactId: string) => void, currentTarget?: (config: unknown) => DashboardSelection | null | undefined, saveRequests?: DashboardSaveRequests): (import("@langchain/core/tools").DynamicStructuredTool<z.ZodObject<{
     page: z.ZodDefault<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
     page: number;
@@ -394,24 +395,24 @@ export declare function createEditingTools(service: DashboardService, scope: Xpe
         y: z.ZodString;
         color: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
         y: string;
         color?: string | undefined;
     }>, "many">, {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -495,8 +496,8 @@ export declare function createEditingTools(service: DashboardService, scope: Xpe
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[] | undefined;
     charts?: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;
@@ -569,8 +570,8 @@ export declare function createEditingTools(service: DashboardService, scope: Xpe
         allowedValues?: (string | number | boolean | null)[] | undefined;
     }[] | undefined;
     charts?: {
-        title: string;
         type: "bar" | "line" | "area" | "pie" | "scatter";
+        title: string;
         id: string;
         datasetId: string;
         x: string;

package/dist/lib/editing.js

@@ -25,7 +25,7 @@ const readHtmlSchema = v3_1.z.object({ editId: v3_1.z.string().uuid(), versionId
     length: v3_1.z.number().int().min(1).max(24000).default(16000) }).strict();
 exports.EDITING_GUIDANCE = `Opening or reading a dashboard does not modify it. A selection_required result is normal: show its message to the user and wait for an explicit selection; do not retry, infer a target from history, or create a replacement. Do not save an unchanged editing copy or reopen/update merely to confirm a successful save; use the mutation receipt. For existing dashboards, call dashboard_open first and inspect presentation.type. For standard dashboards, update definition fields directly: a rename needs only title, editId, expectedRevision and expectedCurrentVersionId. No HTML file exists; omit htmlPath and libraries. For HTML dashboards only, open prepares a unique editing copy at htmlPath. Read with sandbox_read_file. If a long HTML line is truncated, do not repeat the same read: use dashboard_read_html with editId and follow nextOffset until null to inspect the saved source, then apply exact replacements to htmlPath. Never replace a file with a truncated preview. Edit with sandbox_edit_file/multi_edit_file (sandbox_write_file is create-only), then call dashboard_update with that exact htmlPath and read revisions. If the user requests a rename, include the new title in this same update; editing the HTML heading alone does not rename the Artifact. Save each batch automatically without human confirmation. Files are not dashboard saves. Preserve Binding semantics, stable component IDs and dependency locks unless requested. To add filters to an existing Binding, copy its complete dashboard_open.bindings[] entry, retain binding.id and existing parameters[].controlId, and call dashboard_preview_binding after changing payload/parameters/defaults. Binding ID is independent of output.datasetId; simplified dashboard_preview derives the ID from datasetId and can accidentally add a new Binding instead of updating the old one. Use the stable Binding ID in HTML query/subscribe calls. Submit every intended changed/new Binding previewId and matching controls with htmlPath in the same dashboard_update. Update arrays upsert by ID, preserving omitted components; removals must name explicitly requested deletions. On preflight failure, compare expected/requested Binding IDs, repair the HTML or previews, and retain all intended previewIds, controls, title and htmlPath when retrying. Dropping previewIds does not register new HTML queries. Do not remove an existing Binding merely to suppress validation. HTML updates retain existing element IDs. For new HTML, assign stable IDs to every KPI, chart, detail table and filter. Read and patch the current file instead of rebuilding unrelated sections. On conflict retain the editing file, open the latest draft and reconcile; never silently overwrite. Historical versions are read-only references. All Agent saves are drafts; only the Workbench human publish action creates formal versions. Read the live-dashboard skill for the complete workflow.`;
 /** Run-local read receipts carry planning versions; authorization and CAS remain in the domain service. */
-function createEditingTools(service, scope, context, resolvePreviews, validateFinal, onOpen = () => undefined, currentTarget = editing_session_1.selectionFromConfig) {
+function createEditingTools(service, scope, context, resolvePreviews, validateFinal, onOpen = () => undefined, currentTarget = editing_session_1.selectionFromConfig, saveRequests) {
     const target = (input, config) => {
         const selected = currentTarget(config);
         if (input.artifactId)
@@ -119,6 +119,10 @@ function createEditingTools(service, scope, context, resolvePreviews, validateFi
                 ...(sourceMetadata.length || saved.manifest.sourceMetadata ? { sourceMetadata } : {}), ...(components.length || saved.manifest.components ? { components } : {}),
                 ...(presentation ? { presentation } : {}) });
             validateFinal(manifest, previewIds !== undefined, changedBindings?.map(item => item.id));
+            if (saveRequests && manifest.bindings.length > 8) {
+                const key = (0, node_crypto_1.createHash)('sha256').update(JSON.stringify([editId, expectedRevision, expectedCurrentVersionId, manifest, sourceFile])).digest('hex');
+                return JSON.stringify(await saveRequests.submit(scope, manifest, expectedCurrentVersionId, expectedRevision, key, sourceFile));
+            }
             const { schema, id, ...update } = manifest;
             const result = await service.update(scope, editId, expectedRevision, update, expectedCurrentVersionId);
             const resourceCard = await (0, resource_card_1.emitDashboardCard)(scope, { ...result, state: 'draft', revision: result.draftRevision }, config);

package/dist/lib/filter-evidence.d.ts

@@ -1,6 +1,34 @@
 import { z } from 'zod/v3';
 import type { AnalyticsBinding, AnalyticsValue, XpertResolvedViewHostContext } from '@xpert-ai/contracts';
 import type { DashboardService } from './dashboard.service';
+export declare const filterTestSchema: z.ZodObject<{
+    previewId: z.ZodString;
+    controls: z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>, Record<string, string | number | boolean | null>, unknown>;
+    expectations: z.ZodEffects<z.ZodArray<z.ZodObject<{
+        fieldId: z.ZodString;
+        oneOf: z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        fieldId: string;
+        oneOf: (string | number | boolean | null)[];
+    }, {
+        fieldId: string;
+        oneOf: (string | number | boolean | null)[];
+    }>, "many">, {
+        fieldId: string;
+        oneOf: (string | number | boolean | null)[];
+    }[], unknown>;
+}, "strict", z.ZodTypeAny, {
+    controls: Record<string, string | number | boolean | null>;
+    previewId: string;
+    expectations: {
+        fieldId: string;
+        oneOf: (string | number | boolean | null)[];
+    }[];
+}, {
+    previewId: string;
+    controls?: unknown;
+    expectations?: unknown;
+}>;
 /** Model quality evidence, not authorization: every query still goes through Analytics. */
 export declare function createFilterEvidence(service: DashboardService, scope: XpertResolvedViewHostContext, previews: Map<string, AnalyticsBinding>): {
     requirements(binding: AnalyticsBinding, previewId: string, rows: Record<string, AnalyticsValue>[]): {