feat(#287): Dashboard v1 Phase 5 — portable import/export + import planner + workspace aggregate source of truth

[BorisTyshkevich]

What & why

Dashboard v1 Phase 5 of epic #280: portable open/import/export with a transactional import planner, and — by owner decision — making the StoredWorkspaceV1 aggregate the single source of truth for the saved-query collection.

Closes #287. (See the deferral note below — the trust preflight moved to #288 by owner decision, recorded in #68/#280.)

Delivered

• One canonical interchange format (altinity-sql-browser/portable-bundle, PortableBundleV1) through the deterministic canonical encoder. Export Dashboard = dependency closure (Dashboard + only its referenced queries); Export workspace = full catalog + zero/one Dashboard. Export never mutates identity/revision.
• Transactional import planner (src/workspace/import-planner.ts): parse → schema validation → select Dashboard → dependency closure → conflict detection → decisions → complete ID remapping → central reference rewrite → candidate workspace → whole-workspace validation → atomic commit. Conflict actions use-existing (auto only on canonical equality), copy (fresh id + full rewrite), replace, skip (skipping a required Dashboard dep invalidates the import, never silently drops a tile). Multi-Dashboard bundles ask which one.
• Legacy Library v1/v2 files remain importable (normalized to an in-memory bundle with dashboards: []); no new Library-only JSON is written.
• File menu reworked (Append gone): New workspace / Import queries / Import Dashboard / Replace workspace / Export Dashboard / Export workspace, with a global-default + per-row-override conflict dialog and a multi-Dashboard picker. Import Dashboard/Replace workspace/New workspace confirm before destructive commits.

Re-scope (owner decisions during planning)

• Persistence migration (broader than the issue's written acceptance): all query CRUD (create/edit/rename/delete/star) now commits the whole workspace through WorkspaceRepository (strict async, validate-before-publish per Make Dashboard a first-class module with one-dashboard-per-current-workspace v1 UX #280), retiring the flat asb:saved write path (read once only for legacy migration). state.savedQueries is a projection; boot loads + projects the aggregate. Writes are serialized (app.serializeWrite) so overlapping ops can't resurrect a deleted query.
• Trust preflight deferred to Phase 6 (Dashboard v1 phase 6 (#280): direct + full-screen viewing with one-time IndexedDB handoff #288): the "Run Dashboard on " confirm + never-auto-execute gate + durable cross-tab transport land with Dashboard v1 phase 6 (#280): direct + full-screen viewing with one-time IndexedDB handoff #288's external-view execution path. Every Phase-5 file op only commits to the workspace and never executes queries, so no untrusted-execution path exists here.

Review (adversarial, pre-PR) — fixes applied in this PR

• CRITICAL: basic-auth connect() didn't run loadWorkspaceOnBoot, stranding legacy migration → fixed + verified live.
• MAJOR: Import Dashboard silently discarded an existing Dashboard → now confirms first.
• MAJOR: concurrent CRUD commits could resurrect a deleted query → serialized via app.serializeWrite (with a regression test).
• Minor: import-planner aliasing (now deep-cloned), dirty-dot tooltip wording.

Follow-ups filed

• Wire the Workbench star button to Dashboard tile membership (post-#287 aggregate) #299 — Workbench star → Dashboard tile membership wiring (pre-existing Dashboard v1 phase 3 (#280): authoring domain — atomic commands, presentation resolution, workspace-wide validation #285-adjacent gap).
• Corrupt-but-present workspace aggregate silently blocks re-migration with no error surfaced #300 — corrupt-but-present aggregate surfacing.

Verification

• npm test — 3435 passing, per-file coverage gate, tsc --noEmit clean, node build/check-boundaries.mjs OK, npm run build clean.
• npm run test:e2e — chromium + webkit, 90 passing.
• Live: basic-auth login (exercises the connect() fix) → File menu (Append gone, all new ops present) → Export workspace downloads a valid .json, against the served build.

Checklist

• npm test passes (the per-file coverage gate is non-negotiable)
• Tests added/updated in the same change as the code
• npm run build succeeds (single-file dist/sql.html)
• Layers kept honest: pure logic in src/core/src/dashboard/model/src/workspace, DOM in src/ui, injected seams; boundaries check passes
• No new runtime dependency
• README / CHANGELOG.md ([Unreleased]) updated
• Reconciled affected tracked work (roadmap Roadmap to 1.0.0 #68, epic Make Dashboard a first-class module with one-dashboard-per-current-workspace v1 UX #280, ADR-0001 addendum, CHANGELOG)

🤖 Generated with Claude Code

https://claude.ai/code/session_01GLMprUnwnz4oaz3cnLRKcz