@hot-updater/console 0.36.7 → 1.0.0-rc.0

package/.output/server/_ssr/signing-k8GxyBDF.mjs

@@ -0,0 +1,202 @@
+import { it as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { c as createServerFn } from "./createServerFn-B2hcXoPM.mjs";
+import { E as Clipboard, O as CircleCheck, T as Download, c as ShieldCheck, d as RefreshCw, n as TriangleAlert, x as Info } from "../_libs/lucide-react.mjs";
+import { _ as Skeleton, g as SidebarTrigger, t as Button$1, w as createSsrRpc } from "./createSsrRpc-9P0S0lJ3.mjs";
+import { n as useQuery } from "../_libs/tanstack__react-query.mjs";
+import { t as Textarea } from "./textarea-DYHnskhb.mjs";
+import { a as Card, i as AlertTitle, l as CardHeader, n as AlertAction, o as CardContent, r as AlertDescription, s as CardDescription, t as Alert, u as CardTitle } from "./alert-Dim3MGY5.mjs";
+import { t as Badge } from "./badge-DCxbEeof.mjs";
+import { n as toast } from "../_libs/sonner.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/signing-k8GxyBDF.js
+var import_jsx_runtime = require_jsx_runtime();
+var getBundleSigningInspectionRpc = createServerFn({ method: "GET" }).handler(createSsrRpc("662034966679a6d29db2b55e7ba665e26e6c9a58a5529f33aa857a2049616233"));
+var bundleSigningQueryKey = ["bundle-signing"];
+var getBundleSigningInspectionQueryOptions = () => ({
+	queryFn: () => getBundleSigningInspectionRpc(),
+	queryKey: bundleSigningQueryKey,
+	staleTime: 3e4
+});
+var useBundleSigningInspectionQuery = () => useQuery(getBundleSigningInspectionQueryOptions());
+var PUBLIC_KEY_FILENAME = "hot-updater-public-key.pem";
+function InspectionLoading() {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		"aria-label": "Loading bundle signing",
+		className: "flex flex-col gap-6",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-4 w-36" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-3 w-4/5" })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardContent, {
+			className: "flex flex-col gap-4",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-12 w-full" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-12 w-full" })]
+		})] }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-4 w-28" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-3 w-3/5" })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardContent, { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Skeleton, { className: "h-56 w-full" }) })] })]
+	});
+}
+function InspectionError({ refetch }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, {
+		variant: "destructive",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(TriangleAlert, { "aria-hidden": "true" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Bundle signing couldn't be loaded" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Check the Console connection and try again." }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertAction, { children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
+				onClick: refetch,
+				size: "xs",
+				variant: "outline",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(RefreshCw, { "data-icon": "inline-start" }), "Retry"]
+			}) })
+		]
+	});
+}
+function SigningStatusCard({ inspection }) {
+	const enabled = inspection.status === "enabled";
+	const misconfigured = inspection.status === "misconfigured";
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "flex flex-wrap items-center justify-between gap-2",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardTitle, {
+			className: "text-sm font-medium",
+			children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: "Signing status" })
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Badge, {
+			variant: misconfigured ? "destructive" : enabled ? "default" : "outline",
+			children: enabled ? "Enabled" : misconfigured ? "Misconfigured" : "Disabled"
+		})]
+	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardDescription, { children: enabled ? "The Console found the public key configured for bundle verification." : misconfigured ? "Signing is enabled, but the public key cannot be inspected safely." : "Bundle signing is disabled in the current Hot Updater configuration." })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardContent, {
+		className: "flex flex-col gap-5",
+		children: inspection.status === "disabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, { children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Info, { "aria-hidden": "true" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Configure signing outside the Console" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Use your signing provider or the Hot Updater CLI to configure a key. The Console never creates or stores private keys." })
+		] }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("dl", {
+			className: "grid gap-4 sm:grid-cols-2",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex min-w-0 flex-col gap-1",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", {
+					className: "text-xs text-muted-foreground",
+					children: "Provider"
+				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", {
+					className: "truncate text-sm font-medium",
+					children: inspection.provider
+				})]
+			}), inspection.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex min-w-0 flex-col gap-1",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", {
+					className: "text-xs text-muted-foreground",
+					children: "Algorithm"
+				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", {
+					className: "text-sm font-medium",
+					children: inspection.algorithm
+				})]
+			}) : null]
+		}), inspection.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			className: "flex min-w-0 flex-col gap-1 border-t pt-4",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+				className: "text-xs text-muted-foreground",
+				children: "SPKI SHA-256 fingerprint"
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+				className: "break-all font-mono text-xs",
+				children: inspection.fingerprint
+			})]
+		}) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, {
+			variant: "destructive",
+			children: [
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(TriangleAlert, { "aria-hidden": "true" }),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Public key unavailable" }),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: inspection.message })
+			]
+		})] })
+	})] });
+}
+function PublicKeyCard({ publicKey }) {
+	const copyPublicKey = async () => {
+		try {
+			await navigator.clipboard.writeText(publicKey);
+			toast.success("Public key copied");
+		} catch {
+			toast.error("Unable to copy public key");
+		}
+	};
+	const downloadPublicKey = () => {
+		const url = URL.createObjectURL(new Blob([`${publicKey}\n`], { type: "application/x-pem-file" }));
+		const link = document.createElement("a");
+		link.download = PUBLIC_KEY_FILENAME;
+		link.href = url;
+		link.click();
+		URL.revokeObjectURL(url);
+	};
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardTitle, {
+		className: "text-sm font-medium",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: "Public key" })
+	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardDescription, { children: "This public key may be embedded in native app configuration. Private key material is never available in the Console." })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardContent, {
+		className: "flex flex-col gap-3",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Textarea, {
+			"aria-label": "Bundle signing public key",
+			className: "min-h-56 resize-none font-mono text-xs",
+			readOnly: true,
+			spellCheck: false,
+			value: publicKey
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			className: "flex flex-wrap gap-2",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
+				onClick: () => void copyPublicKey(),
+				size: "sm",
+				variant: "outline",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Clipboard, { "data-icon": "inline-start" }), "Copy"]
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
+				onClick: downloadPublicKey,
+				size: "sm",
+				variant: "outline",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Download, { "data-icon": "inline-start" }), "Download"]
+			})]
+		})]
+	})] });
+}
+function BundleSigningPage() {
+	const inspection = useBundleSigningInspectionQuery();
+	if (inspection.isLoading) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(InspectionLoading, {});
+	if (inspection.isError || !inspection.data) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(InspectionError, { refetch: () => void inspection.refetch() });
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "flex flex-col gap-6",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(SigningStatusCard, { inspection: inspection.data }),
+			inspection.data.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PublicKeyCard, { publicKey: inspection.data.publicKey }) : null,
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, { children: [
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CircleCheck, { "aria-hidden": "true" }),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Read-only inspection" }),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Configure or rotate signing keys through the provider or Hot Updater CLI. The Console only reads a checked-in public key file." })
+			] })
+		]
+	});
+}
+function BundleSigningRoute() {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "flex h-svh min-h-0 flex-col",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("header", {
+			className: "sticky top-0 z-10 flex shrink-0 flex-wrap items-center gap-x-3 gap-y-1 border-b bg-background px-3 py-3 sm:min-h-12 sm:flex-nowrap sm:bg-card/70 sm:px-4 sm:backdrop-blur-sm",
+			children: [
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(SidebarTrigger, { className: "-ml-1" }),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+					className: "flex items-center gap-1.5",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(ShieldCheck, {
+						"aria-hidden": "true",
+						className: "size-3.5 text-muted-foreground"
+					}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h1", {
+						className: "text-sm font-medium",
+						children: "Bundle signing"
+					})]
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Badge, {
+					variant: "outline",
+					children: "Read-only"
+				}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "basis-full pl-9 text-xs text-muted-foreground sm:basis-auto sm:pl-0",
+					children: "Inspect the public key used to verify signed updates."
+				})
+			]
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+			className: "min-h-0 min-w-0 flex-1 overflow-y-auto bg-muted/5 p-3 sm:p-6",
+			children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+				className: "mx-auto w-full max-w-5xl",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(BundleSigningPage, {})
+			})
+		})]
+	});
+}
+//#endregion
+export { BundleSigningRoute as component };