Skip to content

Widget framework: registry, widget shapes, and queries run with the viewer's permissions #37

Closed

Description

@ascorbic

The widget shape type and registry (src/shared/widgets.ts): typed configs validated by Valibot, widgets rendered as React Flow nodes with a config UI, a widget picker in the toolbar. The Board object runs each watched widget's queries with the viewer's own token (or the app's for public data), caches per query and access, refreshes on webhooks and on refresh, and sends widget-data messages. GitHub and fake-forge search.

Activity

  1. ascorbic commented on Oct 10, 2026

    @ascorbic
    OwnerAuthor

    Done in 6627d17..444c139: the widget registry (Valibot configs), the widget shape and node (config panel, every loading/empty/error/stale state, W tool), one server-side query runner (src/server/widgets/runner.ts) shared with inbox frames, running each query with the viewer's permissions, cached per access level and refreshed on webhooks/schedule; GitHub search (GraphQL with a token, anonymous REST without); the live list (drag rows out as cards with list provenance, pins and linked highlighting); and drop-to-match staging through the changes panel. Try /play?scenario=widgets and /play/widgets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions