perf(dashboard): bundle menor, corrige bugs e restringe CSP

.github/workflows/deploy.yml

@@ -56,9 +56,11 @@ jobs:
         uses: actions/configure-pages@v4
 
       - name: Build
+        env:
+          BASE_PATH: /slcomp/
+          VITE_MINIO_ENDPOINT: ${{ secrets.VITE_MINIO_ENDPOINT }}
         run: |
           cd dashboard
-          export BASE_PATH=/slcomp/
           npm run build
 
       - name: Upload artifact

dashboard/index.html

@@ -5,7 +5,12 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <meta name="description" content="LaStBeRu Explorer - Interactive dashboard for astronomical data exploration" />
     <meta name="author" content="CosmoObs" />
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src 'self' data: blob: https: http:; style-src 'self' 'unsafe-inline'; script-src 'self'; connect-src 'self' https: http: ws: wss:; worker-src 'self' blob:; object-src 'none';" />
+    <!--
+      ws:/wss: are required by Vite HMR in dev. They are also harmless in prod
+      (only same-origin or explicitly-fetched URLs reach the page). For a
+      stricter prod-only policy, set the CSP via server headers and drop them.
+    -->
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; script-src 'self'; connect-src 'self' https: ws: wss:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none';" />
     <title>The LaStBeRu Explorer</title>
     <link rel="icon" type="image/png" href="telescope.png" />
     <style>

dashboard/package.json

@@ -14,11 +14,9 @@
     "@emotion/styled": "^11.13.0",
     "@mui/icons-material": "^6.0.0",
     "@mui/material": "^6.0.0",
-    "@mui/x-data-grid": "^8.11.1",
     "@tanstack/react-query": "^5.56.2",
     "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "recoil": "^0.7.7"
+    "react-dom": "^18.3.1"
   },
   "devDependencies": {
     "@eslint/compat": "^1.3.2",

dashboard/prepare_data.py

@@ -251,7 +251,11 @@ def get_proper_values_scalar(item):
     reference = len(entry.Reference[0])
     for column in values:
         if bool(pd.isna(entry[column])[0]):
-            entry.loc[0, column] = np.repeat(np.nan, reference)
+            # `.at[]` (scalar accessor) accepts storing the list as the cell
+            # value; `.loc[0, column] = <iterable>` raises in pandas >= 2.x
+            # ("Must have equal len keys and value when setting with an iterable").
+            entry[column] = entry[column].astype(object)
+            entry.at[0, column] = [np.nan] * reference
     df_new = pd.concat([df_new, entry], axis=0).reset_index(drop=True)
 
 df_new = df_new.drop(columns=["multiple"])