@hot-updater/console 1.0.0-rc.0 → 1.0.0-rc.2

package/.output/server/_ssr/runtime.server-DacU1TBV.mjs

@@ -0,0 +1,438 @@
+import { x as isUUIDv7 } from "./dist-CyzPaI5v.mjs";
+import { t as createUUIDv7 } from "./uuidv7-D0QFkPL_.mjs";
+import { i as toInsightsInstallationRow, n as isInsightsMovementEvent, t as compareInsightsText } from "./insightsContract-fjJDBeEE.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/runtime.server-DacU1TBV.js
+var InsightsBadRequestError = class extends Error {
+	name = "InsightsBadRequestError";
+};
+var MAX_EVENT_STRING_LENGTH = 1024;
+var MAX_IDENTITY_LENGTH$1 = 255;
+var eventKeys = /* @__PURE__ */ new Set([
+	"type",
+	"installId",
+	"toBundleId",
+	"userId",
+	"username",
+	"platform",
+	"appVersion",
+	"channel",
+	"cohort",
+	"fingerprintHash",
+	"fromBundleId",
+	"fromReleaseId",
+	"toReleaseId",
+	"updateStrategy",
+	"sdkVersion"
+]);
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function requireStringField(payload, key) {
+	const value = payload[key];
+	if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_STRING_LENGTH || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+	return value;
+}
+function requireNullableStringField(payload, key) {
+	if (payload[key] === null) return null;
+	return requireStringField(payload, key);
+}
+function requireIdentityField(payload, key) {
+	const value = requireStringField(payload, key);
+	if (value.length > MAX_IDENTITY_LENGTH$1) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+	return value;
+}
+function requireEvent(payload) {
+	if (!isRecord$1(payload) || Object.keys(payload).some((key) => !eventKeys.has(key))) throw new InsightsBadRequestError("Invalid event payload");
+	const platform = requireStringField(payload, "platform");
+	if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid event field: platform");
+	const base = {
+		installId: requireIdentityField(payload, "installId"),
+		toBundleId: requireStringField(payload, "toBundleId"),
+		...payload.userId === void 0 ? {} : { userId: requireIdentityField(payload, "userId") },
+		...payload.username === void 0 ? {} : { username: requireStringField(payload, "username") },
+		platform,
+		appVersion: requireStringField(payload, "appVersion"),
+		channel: requireStringField(payload, "channel"),
+		cohort: requireStringField(payload, "cohort"),
+		fingerprintHash: requireNullableStringField(payload, "fingerprintHash"),
+		sdkVersion: payload.sdkVersion === void 0 ? null : requireNullableStringField(payload, "sdkVersion"),
+		fromReleaseId: requireNullableStringField(payload, "fromReleaseId"),
+		toReleaseId: requireNullableStringField(payload, "toReleaseId")
+	};
+	const type = requireStringField(payload, "type");
+	switch (type) {
+		case "UPDATE_APPLIED":
+		case "RECOVERED":
+		case "RELEASE_ADOPTED": {
+			const updateStrategy = requireStringField(payload, "updateStrategy");
+			if (updateStrategy !== "fingerprint" && updateStrategy !== "appVersion") throw new InsightsBadRequestError("Invalid event field: updateStrategy");
+			return {
+				...base,
+				type,
+				fromBundleId: requireStringField(payload, "fromBundleId"),
+				updateStrategy
+			};
+		}
+		case "UNCHANGED":
+			if (payload.fromBundleId !== null || payload.updateStrategy !== null) throw new InsightsBadRequestError("Invalid unchanged event shape");
+			return {
+				...base,
+				type,
+				fromBundleId: null,
+				updateStrategy: null
+			};
+		default: throw new InsightsBadRequestError("Invalid event field: type");
+	}
+}
+function createBundleEventRow(input) {
+	input = requireEvent(input);
+	const base = {
+		app_version: input.appVersion,
+		channel: input.channel,
+		cohort: input.cohort,
+		fingerprint_hash: input.fingerprintHash,
+		from_release_id: input.fromReleaseId,
+		id: createUUIDv7(),
+		install_id: input.installId,
+		platform: input.platform,
+		received_at_ms: Date.now(),
+		sdk_version: input.sdkVersion ?? null,
+		to_bundle_id: input.toBundleId,
+		to_release_id: input.toReleaseId,
+		user_id: input.userId ?? null,
+		username: input.username ?? null
+	};
+	switch (input.type) {
+		case "UPDATE_APPLIED":
+		case "RECOVERED":
+		case "RELEASE_ADOPTED": return {
+			...base,
+			from_bundle_id: input.fromBundleId,
+			type: input.type,
+			update_strategy: input.updateStrategy
+		};
+		case "UNCHANGED": return {
+			...base,
+			from_bundle_id: null,
+			type: input.type,
+			update_strategy: null
+		};
+	}
+}
+var DEFAULT_PAGE_LIMIT = 50;
+var MAX_PAGE_LIMIT = 100;
+var MAX_EVENT_ID_LENGTH = 1024;
+var MAX_IDENTITY_LENGTH = 255;
+var MAX_CURSOR_LENGTH = 8192;
+var WINDOW_MS = {
+	"24h": 864e5,
+	"7d": 6048e5,
+	"30d": 2592e6
+};
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var requireString = (value, label, maximumLength) => {
+	if (typeof value !== "string" || value.length === 0 || value.length > maximumLength || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid ${label}.`);
+	return value;
+};
+var requireTimestamp = (value, label) => {
+	if (!Number.isSafeInteger(value) || Number(value) < 0) throw new InsightsBadRequestError(`Invalid ${label}.`);
+	return Number(value);
+};
+var readLimit = (value) => {
+	const limit = value ?? DEFAULT_PAGE_LIMIT;
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_PAGE_LIMIT) throw new InsightsBadRequestError("Invalid page limit.");
+	return limit;
+};
+var encodeBase64Url = (value) => {
+	const bytes = new TextEncoder().encode(value);
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+var decodeBase64Url = (value) => {
+	if (value.length === 0 || value.length > MAX_CURSOR_LENGTH) throw new InsightsBadRequestError("Invalid Insights cursor.");
+	try {
+		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+		const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, "=");
+		const binary = atob(padded);
+		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+		return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		throw new InsightsBadRequestError("Invalid Insights cursor.");
+	}
+};
+var encodeCursor = (value) => encodeBase64Url(JSON.stringify(value));
+var decodeCursor = (value) => {
+	try {
+		return JSON.parse(decodeBase64Url(value));
+	} catch (error) {
+		if (error instanceof InsightsBadRequestError) throw error;
+		throw new InsightsBadRequestError("Invalid Insights cursor.");
+	}
+};
+var readScope = (input) => {
+	if (input.platform !== "ios" && input.platform !== "android") throw new InsightsBadRequestError("Invalid Insights platform.");
+	return {
+		platform: input.platform,
+		channel: requireString(input.channel, "channel", MAX_EVENT_ID_LENGTH)
+	};
+};
+var bundleFilter = (input) => {
+	const scope = readScope(input);
+	const bundleId = requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+	switch (input.outcome) {
+		case "applied": return {
+			...scope,
+			type: "UPDATE_APPLIED",
+			toBundleId: bundleId
+		};
+		case "recovered": return {
+			...scope,
+			type: "RECOVERED",
+			fromBundleId: bundleId
+		};
+		case "adopted": return {
+			...scope,
+			type: "RELEASE_ADOPTED",
+			toBundleId: bundleId
+		};
+		default: throw new InsightsBadRequestError("Invalid Insights outcome.");
+	}
+};
+var sameFilter = (left, right) => {
+	if (!isRecord(left) || left.kind !== right.kind) return false;
+	switch (right.kind) {
+		case "all": return true;
+		case "installationMovement": return left.installId === right.installId;
+		case "bundle": return left.platform === right.platform && left.channel === right.channel && left.type === right.type && (right.type === "RECOVERED" ? left.fromBundleId === right.fromBundleId : left.toBundleId === right.toBundleId);
+	}
+};
+var readEventCursor = (value, filter) => {
+	const cursor = decodeCursor(value);
+	if (!isRecord(cursor) || cursor.version !== 2 || cursor.kind !== "events" || !isRecord(cursor.filter) || !isRecord(cursor.after)) throw new InsightsBadRequestError("Invalid Insights cursor.");
+	if (!sameFilter(cursor.filter, filter)) throw new InsightsBadRequestError("Insights cursor does not match the requested events.");
+	if (typeof cursor.after.id !== "string" || !isUUIDv7(cursor.after.id)) throw new InsightsBadRequestError("Invalid Insights event cursor ID.");
+	return {
+		after: {
+			id: cursor.after.id,
+			receivedAtMs: requireTimestamp(cursor.after.receivedAtMs, "event cursor")
+		},
+		beforeReceivedAtMs: requireTimestamp(cursor.beforeReceivedAtMs, "event cutoff"),
+		kind: "events",
+		sinceMs: requireTimestamp(cursor.sinceMs, "event start"),
+		filter,
+		version: 2
+	};
+};
+var readUserInstallationCursor = (value, userId) => {
+	const cursor = decodeCursor(value);
+	if (!isRecord(cursor) || cursor.version !== 1 || cursor.kind !== "user-installations" || cursor.userId !== userId) throw new InsightsBadRequestError("Insights cursor does not match the requested user ID.");
+	return {
+		afterInstallId: requireString(cursor.afterInstallId, "installation cursor", MAX_IDENTITY_LENGTH),
+		kind: "user-installations",
+		userId,
+		version: 1
+	};
+};
+var compareEventNewest = (left, right) => right.received_at_ms - left.received_at_ms || compareInsightsText(right.id, left.id);
+var isAfterEventCursor = (row, after) => row.received_at_ms < after.receivedAtMs || row.received_at_ms === after.receivedAtMs && compareInsightsText(row.id, after.id) < 0;
+var assertEventRows = (rows, input) => {
+	if (rows.length > input.limit) throw new Error("Insights database returned too many event rows.");
+	for (let index = 0; index < rows.length; index += 1) {
+		const row = rows[index];
+		const previous = rows[index - 1];
+		if (!row || typeof row.id !== "string" || !isUUIDv7(row.id) || !Number.isSafeInteger(row.received_at_ms) || row.received_at_ms >= input.beforeReceivedAtMs || row.received_at_ms < input.sinceMs || previous !== void 0 && compareEventNewest(previous, row) >= 0 || input.after !== void 0 && !isAfterEventCursor(row, input.after) || input.filter.kind === "installationMovement" && (row.install_id !== input.filter.installId || !isInsightsMovementEvent(row)) || input.filter.kind === "bundle" && (row.platform !== input.filter.platform || row.channel !== input.filter.channel || row.type !== input.filter.type || (input.filter.type === "RECOVERED" ? row.from_bundle_id !== input.filter.fromBundleId : row.to_bundle_id !== input.filter.toBundleId))) throw new Error("Insights database returned invalid event rows.");
+	}
+};
+var toEventHistoryRow = (row) => ({
+	appVersion: row.app_version,
+	channel: row.channel,
+	cohort: row.cohort,
+	fromBundleId: row.from_bundle_id,
+	id: row.id,
+	installId: row.install_id,
+	platform: row.platform,
+	receivedAtMs: row.received_at_ms,
+	toBundleId: row.to_bundle_id,
+	type: row.type,
+	userId: row.user_id,
+	username: row.username
+});
+var toInstallationRow = (row) => ({
+	appVersion: row.app_version,
+	channel: row.channel,
+	cohort: row.cohort,
+	installId: row.install_id,
+	lastKnownBundleId: row.to_bundle_id,
+	latestStatus: row.type,
+	platform: row.platform,
+	receivedAtMs: row.received_at_ms,
+	userId: row.user_id,
+	username: row.username
+});
+var pageEventRows = async (model, input, filter, map) => {
+	const limit = readLimit(input.limit);
+	const cursor = input.cursor === void 0 ? void 0 : readEventCursor(input.cursor, filter);
+	const beforeReceivedAtMs = cursor?.beforeReceivedAtMs ?? (input.beforeReceivedAtMs === void 0 ? Date.now() : requireTimestamp(input.beforeReceivedAtMs, "event cutoff"));
+	if (cursor !== void 0 && input.beforeReceivedAtMs !== void 0 && input.beforeReceivedAtMs !== beforeReceivedAtMs) throw new InsightsBadRequestError("Insights cursor does not match the requested event cutoff.");
+	const sinceMs = cursor?.sinceMs ?? (input.sinceMs === void 0 ? 0 : requireTimestamp(input.sinceMs, "event start"));
+	if (sinceMs > beforeReceivedAtMs || input.sinceMs !== void 0 && input.sinceMs !== sinceMs || cursor !== void 0 && (cursor.after.receivedAtMs < sinceMs || cursor.after.receivedAtMs >= beforeReceivedAtMs)) throw new InsightsBadRequestError("Insights cursor or range does not match the requested event start.");
+	const databaseInput = {
+		filter,
+		sinceMs,
+		beforeReceivedAtMs,
+		...cursor === void 0 ? {} : { after: cursor.after },
+		limit: limit + 1
+	};
+	const rows = await model.listEvents(databaseInput);
+	assertEventRows(rows, databaseInput);
+	const pageRows = rows.slice(0, limit);
+	const last = pageRows.at(-1);
+	return {
+		beforeReceivedAtMs,
+		data: pageRows.map(map),
+		nextCursor: rows.length > limit && last ? encodeCursor({
+			after: {
+				id: last.id,
+				receivedAtMs: last.received_at_ms
+			},
+			beforeReceivedAtMs,
+			kind: "events",
+			filter,
+			sinceMs,
+			version: 2
+		}) : null
+	};
+};
+var assertInstallationRows = (rows, input) => {
+	if (rows.length > input.limit) throw new Error("Insights database returned too many installation rows.");
+	for (let index = 0; index < rows.length; index += 1) {
+		const row = rows[index];
+		const previous = rows[index - 1];
+		if (!row || row.user_id !== input.userId || input.afterInstallId !== void 0 && compareInsightsText(row.install_id, input.afterInstallId) <= 0 || previous !== void 0 && compareInsightsText(previous.install_id, row.install_id) >= 0) throw new Error("Insights database returned invalid installation rows.");
+	}
+};
+var createInsightsProvider = (model) => Object.freeze({
+	async appendBundleEvent(input) {
+		const event = createBundleEventRow(input);
+		await model.record({
+			event,
+			installation: toInsightsInstallationRow(event)
+		});
+	},
+	listEvents(input) {
+		return pageEventRows(model, input, input.bundle === void 0 ? { kind: "all" } : {
+			kind: "bundle",
+			...bundleFilter(input.bundle)
+		}, toEventHistoryRow);
+	},
+	async listInstallationEvents(input) {
+		if ("bundle" in input && input.bundle !== void 0) throw new InsightsBadRequestError("Installation movement queries cannot include a bundle filter.");
+		return pageEventRows(model, input, {
+			kind: "installationMovement",
+			installId: requireString(input.installId, "install ID", MAX_IDENTITY_LENGTH)
+		}, (row) => toEventHistoryRow(row));
+	},
+	async getInstallation({ installId }) {
+		const normalizedInstallId = requireString(installId, "install ID", MAX_IDENTITY_LENGTH);
+		const rows = await model.findInstallations({ installId: normalizedInstallId });
+		const row = rows[0] ?? null;
+		if (rows.length > 1 || row !== null && row.install_id !== normalizedInstallId) throw new Error("Insights database returned an invalid installation.");
+		return row === null ? null : toInstallationRow(row);
+	},
+	async pageInstallationsByCurrentUserId(input) {
+		const userId = requireString(input.userId, "user ID", MAX_IDENTITY_LENGTH);
+		const limit = readLimit(input.limit);
+		const cursor = input.cursor === void 0 ? void 0 : readUserInstallationCursor(input.cursor, userId);
+		const databaseInput = {
+			userId,
+			...cursor === void 0 ? {} : { afterInstallId: cursor.afterInstallId },
+			limit: limit + 1
+		};
+		const rows = await model.findInstallations(databaseInput);
+		assertInstallationRows(rows, databaseInput);
+		const pageRows = rows.slice(0, limit);
+		const last = pageRows.at(-1);
+		return {
+			data: pageRows.map(toInstallationRow),
+			nextCursor: rows.length > limit && last ? encodeCursor({
+				afterInstallId: last.install_id,
+				kind: "user-installations",
+				userId,
+				version: 1
+			}) : null
+		};
+	},
+	async getReportingOverview(input) {
+		const scope = readScope(input);
+		const { window } = input;
+		if (!Object.hasOwn(WINDOW_MS, window)) throw new InsightsBadRequestError("Invalid reporting installation window.");
+		const beforeReceivedAtMs = Date.now();
+		const sinceMs = Math.max(0, beforeReceivedAtMs - WINDOW_MS[window]);
+		const measure = async (count) => {
+			const value = await count;
+			if (!Number.isSafeInteger(value) || value < 0) throw new Error("Insights database returned an invalid count.");
+			return {
+				count: value,
+				measuredAtMs: Date.now()
+			};
+		};
+		const bundleId = input.bundleId === void 0 ? void 0 : requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+		const reporting = measure(model.countInstallations({
+			...scope,
+			sinceMs
+		}));
+		if (bundleId === void 0) return {
+			...scope,
+			window,
+			sinceMs,
+			beforeReceivedAtMs,
+			reportingInstallations: await reporting
+		};
+		const countOutcome = (outcome) => measure(model.countEvents({
+			filter: bundleFilter({
+				...scope,
+				bundleId,
+				outcome
+			}),
+			sinceMs,
+			beforeReceivedAtMs
+		}));
+		const [reportingInstallations, bundleInstallations, appliedReports, recoveredReports, adoptedReports] = await Promise.all([
+			reporting,
+			measure(model.countInstallations({
+				...scope,
+				sinceMs,
+				bundleId
+			})),
+			countOutcome("applied"),
+			countOutcome("recovered"),
+			countOutcome("adopted")
+		]);
+		return {
+			...scope,
+			window,
+			sinceMs,
+			beforeReceivedAtMs,
+			reportingInstallations,
+			bundle: {
+				bundleId,
+				reportingInstallations: bundleInstallations,
+				appliedReports,
+				recoveredReports,
+				adoptedReports
+			}
+		};
+	}
+});
+function createRuntimeHotUpdater(config) {
+	return createInsightsProvider(config.database.models.insights);
+}
+function createApiKeyStore(config) {
+	const models = Reflect.get(config.database, "models");
+	const apiKeys = typeof models === "object" && models !== null ? Reflect.get(models, "apiKeys") : void 0;
+	if (typeof apiKeys !== "object" || apiKeys === null || typeof Reflect.get(apiKeys, "create") !== "function" || typeof Reflect.get(apiKeys, "findByHash") !== "function" || typeof Reflect.get(apiKeys, "list") !== "function" || typeof Reflect.get(apiKeys, "revoke") !== "function") return null;
+	return apiKeys;
+}
+//#endregion
+export { createApiKeyStore, createRuntimeHotUpdater };

package/.output/server/_ssr/{server-BjzmvXnO.mjs → server-D_C2rMzf.mjs}

@@ -1,8 +1,8 @@
 import "../_runtime.mjs";
-import { at as require_react, it as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { a as X_TSS_RAW_RESPONSE, d as getStartOptions, f as isRedirect, g as safeObjectMerge, h as runWithStartContext, i as TSS_SERVER_FUNCTION, l as flattenMiddlewares, m as mergeHeaders, n as TSS_CONTENT_TYPE_FRAMED_VERSIONED, o as X_TSS_SERIALIZED, p as isResolvedRedirect, r as TSS_FORMDATA_CONTEXT, s as createNullProtoObject, t as FrameType, u as getStartContext } from "./createServerFn-B2hcXoPM.mjs";
-import { t as getServerFnById } from "../__23tanstack-start-server-fn-resolver-DBP9TQ7K.mjs";
-import { n as defineHandlerCallback, r as renderRouterToString, s as RouterProvider, t as renderRouterToStream } from "../_libs/@tanstack/react-router+[...].mjs";
+import { t as getServerFnById } from "../__23tanstack-start-server-fn-resolver-B7ioJhtE.mjs";
+import { J as require_react, q as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { c as RouterProvider, n as defineHandlerCallback, r as renderRouterToString, t as renderRouterToStream } from "../_libs/@tanstack/react-router+[...].mjs";
 import { PassThrough, Readable } from "node:stream";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { ReadableStream as ReadableStream$1 } from "node:stream/web";
@@ -4901,7 +4901,7 @@ var defaultSerovalPlugins = [
 * the dev styles URL for route-scoped CSS collection.
 */
 async function getStartManifest(matchedRoutes) {
-	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-CH4StzJu.mjs");
+	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-2MjTyxil.mjs");
 	const startManifest = tsrStartManifest();
 	let routes = startManifest.routes;
 	routes[rootRouteId];
@@ -7041,7 +7041,7 @@ var getBaseManifest = getProdBaseManifest;
 var createEarlyHintsForRequest = createEarlyHintsCollector;
 async function loadEntries() {
 	const [routerEntry, startEntry, pluginAdapters] = await Promise.all([
-		import("./router-C-KUBfOi.mjs"),
+		import("./router-B9wG_9f8.mjs"),
 		import("./start-DpViQGnt.mjs"),
 		import("./empty-plugin-adapters-B5QvGpEl.mjs")
 	]);

package/.output/server/_ssr/{signing-k8GxyBDF.mjs → signing-Dz1WkZOf.mjs}

@@ -1,13 +1,10 @@
-import { it as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { c as createServerFn } from "./createServerFn-B2hcXoPM.mjs";
-import { E as Clipboard, O as CircleCheck, T as Download, c as ShieldCheck, d as RefreshCw, n as TriangleAlert, x as Info } from "../_libs/lucide-react.mjs";
-import { _ as Skeleton, g as SidebarTrigger, t as Button$1, w as createSsrRpc } from "./createSsrRpc-9P0S0lJ3.mjs";
+import { q as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { S as Info, c as ShieldCheck, d as RefreshCw, k as CircleCheck, n as TriangleAlert } from "../_libs/lucide-react.mjs";
+import { _ as Skeleton, g as SidebarTrigger, t as Button$1, w as createSsrRpc } from "./createSsrRpc-DjWNJ0uc.mjs";
 import { n as useQuery } from "../_libs/tanstack__react-query.mjs";
-import { t as Textarea } from "./textarea-DYHnskhb.mjs";
-import { a as Card, i as AlertTitle, l as CardHeader, n as AlertAction, o as CardContent, r as AlertDescription, s as CardDescription, t as Alert, u as CardTitle } from "./alert-Dim3MGY5.mjs";
-import { t as Badge } from "./badge-DCxbEeof.mjs";
-import { n as toast } from "../_libs/sonner.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/signing-k8GxyBDF.js
+import { a as Badge, c as CardDescription, d as CardTitle, i as AlertTitle, n as AlertAction, o as Card, r as AlertDescription, s as CardContent, t as Alert, u as CardHeader } from "./card-BRiPmi0C.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/signing-Dz1WkZOf.js
 var import_jsx_runtime = require_jsx_runtime();
 var getBundleSigningInspectionRpc = createServerFn({ method: "GET" }).handler(createSsrRpc("662034966679a6d29db2b55e7ba665e26e6c9a58a5529f33aa857a2049616233"));
 var bundleSigningQueryKey = ["bundle-signing"];
@@ -17,7 +14,6 @@ var getBundleSigningInspectionQueryOptions = () => ({
 	staleTime: 3e4
 });
 var useBundleSigningInspectionQuery = () => useQuery(getBundleSigningInspectionQueryOptions());
-var PUBLIC_KEY_FILENAME = "hot-updater-public-key.pem";
 function InspectionLoading() {
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		"aria-label": "Loading bundle signing",
@@ -46,23 +42,22 @@ function InspectionError({ refetch }) {
 }
 function SigningStatusCard({ inspection }) {
 	const enabled = inspection.status === "enabled";
-	const misconfigured = inspection.status === "misconfigured";
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		className: "flex flex-wrap items-center justify-between gap-2",
 		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardTitle, {
 			className: "text-sm font-medium",
 			children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: "Signing status" })
 		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Badge, {
-			variant: misconfigured ? "destructive" : enabled ? "default" : "outline",
-			children: enabled ? "Enabled" : misconfigured ? "Misconfigured" : "Disabled"
+			variant: enabled ? "default" : "outline",
+			children: enabled ? "Enabled" : "Disabled"
 		})]
-	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardDescription, { children: enabled ? "The Console found the public key configured for bundle verification." : misconfigured ? "Signing is enabled, but the public key cannot be inspected safely." : "Bundle signing is disabled in the current Hot Updater configuration." })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardContent, {
+	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardDescription, { children: enabled ? "Bundle signing is enabled in the current Hot Updater configuration." : "Bundle signing is disabled in the current Hot Updater configuration." })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardContent, {
 		className: "flex flex-col gap-5",
 		children: inspection.status === "disabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, { children: [
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Info, { "aria-hidden": "true" }),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Configure signing outside the Console" }),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Use your signing provider or the Hot Updater CLI to configure a key. The Console never creates or stores private keys." })
-		] }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("dl", {
+		] }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("dl", {
 			className: "grid gap-4 sm:grid-cols-2",
 			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 				className: "flex min-w-0 flex-col gap-1",
@@ -73,7 +68,7 @@ function SigningStatusCard({ inspection }) {
 					className: "truncate text-sm font-medium",
 					children: inspection.provider
 				})]
-			}), inspection.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 				className: "flex min-w-0 flex-col gap-1",
 				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", {
 					className: "text-xs text-muted-foreground",
@@ -82,68 +77,8 @@ function SigningStatusCard({ inspection }) {
 					className: "text-sm font-medium",
 					children: inspection.algorithm
 				})]
-			}) : null]
-		}), inspection.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-			className: "flex min-w-0 flex-col gap-1 border-t pt-4",
-			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
-				className: "text-xs text-muted-foreground",
-				children: "SPKI SHA-256 fingerprint"
-			}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
-				className: "break-all font-mono text-xs",
-				children: inspection.fingerprint
 			})]
-		}) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, {
-			variant: "destructive",
-			children: [
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(TriangleAlert, { "aria-hidden": "true" }),
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Public key unavailable" }),
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: inspection.message })
-			]
-		})] })
-	})] });
-}
-function PublicKeyCard({ publicKey }) {
-	const copyPublicKey = async () => {
-		try {
-			await navigator.clipboard.writeText(publicKey);
-			toast.success("Public key copied");
-		} catch {
-			toast.error("Unable to copy public key");
-		}
-	};
-	const downloadPublicKey = () => {
-		const url = URL.createObjectURL(new Blob([`${publicKey}\n`], { type: "application/x-pem-file" }));
-		const link = document.createElement("a");
-		link.download = PUBLIC_KEY_FILENAME;
-		link.href = url;
-		link.click();
-		URL.revokeObjectURL(url);
-	};
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Card, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardHeader, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardTitle, {
-		className: "text-sm font-medium",
-		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", { children: "Public key" })
-	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CardDescription, { children: "This public key may be embedded in native app configuration. Private key material is never available in the Console." })] }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardContent, {
-		className: "flex flex-col gap-3",
-		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Textarea, {
-			"aria-label": "Bundle signing public key",
-			className: "min-h-56 resize-none font-mono text-xs",
-			readOnly: true,
-			spellCheck: false,
-			value: publicKey
-		}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-			className: "flex flex-wrap gap-2",
-			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
-				onClick: () => void copyPublicKey(),
-				size: "sm",
-				variant: "outline",
-				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Clipboard, { "data-icon": "inline-start" }), "Copy"]
-			}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
-				onClick: downloadPublicKey,
-				size: "sm",
-				variant: "outline",
-				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Download, { "data-icon": "inline-start" }), "Download"]
-			})]
-		})]
+		})
 	})] });
 }
 function BundleSigningPage() {
@@ -152,15 +87,11 @@ function BundleSigningPage() {
 	if (inspection.isError || !inspection.data) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(InspectionError, { refetch: () => void inspection.refetch() });
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		className: "flex flex-col gap-6",
-		children: [
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(SigningStatusCard, { inspection: inspection.data }),
-			inspection.data.status === "enabled" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PublicKeyCard, { publicKey: inspection.data.publicKey }) : null,
-			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, { children: [
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CircleCheck, { "aria-hidden": "true" }),
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Read-only inspection" }),
-				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Configure or rotate signing keys through the provider or Hot Updater CLI. The Console only reads a checked-in public key file." })
-			] })
-		]
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(SigningStatusCard, { inspection: inspection.data }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Alert, { children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CircleCheck, { "aria-hidden": "true" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "Read-only inspection" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: "Configure or rotate signing keys through the provider or Hot Updater CLI. The Console never accesses signing credentials." })
+		] })]
 	});
 }
 function BundleSigningRoute() {

package/.output/server/_ssr/ssr.mjs

@@ -1,4 +1,4 @@
-import { i as defaultStreamHandler, n as createStartHandler } from "./server-BjzmvXnO.mjs";
+import { i as defaultStreamHandler, n as createStartHandler } from "./server-D_C2rMzf.mjs";
 //#region node_modules/.nitro/vite/services/ssr/index.js
 var fetch = createStartHandler(defaultStreamHandler);
 function createServerEntry(entry) {