@hot-updater/console 1.0.0-rc.0 → 1.0.0-rc.2

package/src/lib/insights-rpc.ts

@@ -0,0 +1,88 @@
+import type {
+  ReportingOverview,
+  InsightsScope,
+  InsightsEventPageInput,
+  InsightsInstallationEventPageInput,
+  ActiveInstallationWindow,
+  InsightsProvider,
+} from "@hot-updater/server";
+import { createServerFn } from "@tanstack/react-start";
+
+import type {
+  InsightsInstallationViewRow,
+  InsightsViewPage,
+} from "./insights-view";
+
+export type InsightsWindow = ActiveInstallationWindow;
+export type ReportingInstallations = ReportingOverview;
+export type InsightsOverviewInput = InsightsScope & {
+  readonly window: InsightsWindow;
+  readonly bundleId?: string;
+};
+
+type EventsPageInput = InsightsEventPageInput;
+
+type InstallationEventsPageInput = InsightsInstallationEventPageInput;
+
+type InstallationsPageInput = {
+  readonly cursor?: string;
+  readonly identity: string;
+  readonly limit: number;
+};
+
+const runtime = async (): Promise<InsightsProvider> => {
+  const { prepareConfig } = await import("./server/config.server");
+  const { hotUpdater } = await prepareConfig();
+  return hotUpdater;
+};
+
+const readOverview = (input: InsightsOverviewInput) => input;
+const readEventsPage = (input: EventsPageInput) => input;
+const readInstallationEventsPage = (input: InstallationEventsPageInput) =>
+  input;
+const readInstallationPage = (input: InstallationsPageInput) => input;
+const readInstallId = (input: { readonly installId: string }) => input;
+
+export const getReportingInstallationsRpc = createServerFn({ method: "GET" })
+  .validator(readOverview)
+  .handler(async ({ data }) => (await runtime()).getReportingOverview(data));
+
+export const listInsightsEventsRpc = createServerFn({ method: "GET" })
+  .validator(readEventsPage)
+  .handler(async ({ data }) => (await runtime()).listEvents(data));
+
+export const listInsightsInstallationEventsRpc = createServerFn({
+  method: "GET",
+})
+  .validator(readInstallationEventsPage)
+  .handler(async ({ data }) => (await runtime()).listInstallationEvents(data));
+
+export const getInsightsInstallationRpc = createServerFn({ method: "GET" })
+  .validator(readInstallId)
+  .handler(async ({ data }) => (await runtime()).getInstallation(data));
+
+export const findInsightsInstallationsRpc = createServerFn({ method: "GET" })
+  .validator(readInstallationPage)
+  .handler(async ({ data }) => {
+    const insights = await runtime();
+    const install = data.cursor
+      ? null
+      : await insights.getInstallation({ installId: data.identity });
+    const matches = await insights.pageInstallationsByCurrentUserId({
+      cursor: data.cursor,
+      limit: Math.max(1, data.limit - (install === null ? 0 : 1)),
+      userId: data.identity,
+    });
+    return {
+      data:
+        install === null
+          ? matches.data
+          : [
+              install,
+              ...matches.data.filter(
+                ({ installId }) => installId !== install.installId,
+              ),
+            ],
+      nextCursor: matches.nextCursor,
+    } satisfies InsightsViewPage<InsightsInstallationViewRow>;
+  });

package/src/lib/insights-view.ts

@@ -0,0 +1,15 @@
+import type { EventHistoryRow, InstallationRow } from "@hot-updater/server";
+
+export type InsightsEventRow = EventHistoryRow;
+export type InsightsInstallationViewRow = InstallationRow;
+
+export type InsightsViewPage<TRow> = {
+  readonly data: readonly TRow[];
+  readonly nextCursor: string | null;
+};
+
+export const outcomeLabels = {
+  applied: "Applied reports",
+  recovered: "Recovered-from reports",
+  adopted: "Adopted reports",
+} as const;

package/src/lib/public-bundle-error.ts

@@ -0,0 +1,19 @@
+import { ReleaseManagementError } from "@hot-updater/plugin-core";
+
+export const withPublicBundleMutationErrors = async <T>(
+  action: () => Promise<T>,
+): Promise<T> => {
+  try {
+    return await action();
+  } catch (error) {
+    if (error instanceof ReleaseManagementError) {
+      throw new Error(
+        error.message
+          .replace(/\bRelease\b/g, "Bundle")
+          .replace("Bundle Bundle", "deployed Bundle"),
+        { cause: error },
+      );
+    }
+    throw error;
+  }
+};

package/src/lib/server/bundle-signing.server.ts

@@ -1,100 +1,23 @@
-import { createHash, createPublicKey } from "node:crypto";
-import { readFile, stat } from "node:fs/promises";
-import path from "node:path";
-
 import type { ConsoleSigningConfig } from "../../index";
 
-const MAX_PUBLIC_KEY_BYTES = 16 * 1024;
 const DEFAULT_PROVIDER = "Configured provider";
-const PUBLIC_KEY_HEADER = "-----BEGIN PUBLIC KEY-----";
-const PUBLIC_KEY_FOOTER = "-----END PUBLIC KEY-----";
 
 export type BundleSigningInspection =
   | { readonly status: "disabled" }
-  | {
-      readonly status: "misconfigured";
-      readonly provider: string;
-      readonly message: string;
-    }
   | {
       readonly status: "enabled";
       readonly provider: string;
       readonly algorithm: "RSA-SHA256";
-      readonly fingerprint: string;
-      readonly publicKey: string;
     };
 
-const misconfigured = (
-  provider: string,
-  message: string,
-): BundleSigningInspection => ({ message, provider, status: "misconfigured" });
-
-const isSpkiPublicKeyPem = (value: string): boolean => {
-  const trimmed = value.trim();
-  return (
-    trimmed.startsWith(PUBLIC_KEY_HEADER) &&
-    trimmed.endsWith(PUBLIC_KEY_FOOTER) &&
-    !trimmed.includes("PRIVATE KEY")
-  );
-};
-
 export const inspectBundleSigning = async (
   signing: ConsoleSigningConfig | undefined,
 ): Promise<BundleSigningInspection> => {
   if (!signing?.enabled) return { status: "disabled" };
 
-  const provider = signing.provider ?? DEFAULT_PROVIDER;
-  if (!signing.publicKeyPath) {
-    return misconfigured(provider, "A public key file is not configured.");
-  }
-
-  try {
-    const publicKeyPath = path.isAbsolute(signing.publicKeyPath)
-      ? signing.publicKeyPath
-      : path.resolve(process.cwd(), signing.publicKeyPath);
-    const publicKeyStat = await stat(publicKeyPath);
-    if (!publicKeyStat.isFile() || publicKeyStat.size > MAX_PUBLIC_KEY_BYTES) {
-      return misconfigured(
-        provider,
-        "The configured public key could not be loaded.",
-      );
-    }
-
-    const publicKeyPem = await readFile(publicKeyPath, "utf8");
-    if (!isSpkiPublicKeyPem(publicKeyPem)) {
-      return misconfigured(
-        provider,
-        "The configured public key is not a valid SPKI public key.",
-      );
-    }
-
-    const publicKey = createPublicKey(publicKeyPem);
-    if (publicKey.asymmetricKeyType !== "rsa") {
-      return misconfigured(
-        provider,
-        "The configured public key is not an RSA public key.",
-      );
-    }
-    if ((publicKey.asymmetricKeyDetails?.modulusLength ?? 0) < 2048) {
-      return misconfigured(
-        provider,
-        "The configured RSA public key must be at least 2048 bits.",
-      );
-    }
-
-    const canonicalDer = publicKey.export({ format: "der", type: "spki" });
-    const canonicalPem = publicKey.export({ format: "pem", type: "spki" });
-    return {
-      algorithm: "RSA-SHA256",
-      fingerprint: createHash("sha256").update(canonicalDer).digest("hex"),
-      provider,
-      publicKey: canonicalPem.toString().trim(),
-      status: "enabled",
-    };
-  } catch {
-    return misconfigured(
-      provider,
-      "The configured public key could not be loaded.",
-    );
-  }
+  return {
+    algorithm: "RSA-SHA256",
+    provider: signing.provider ?? DEFAULT_PROVIDER,
+    status: "enabled",
+  };
 };

package/src/lib/server/console-runtime.server.ts

@@ -1,5 +1,3 @@
-import path from "node:path";
-
 import type {
   ConsoleAuthAdapter,
   ConsoleSigningConfig,
@@ -34,16 +32,9 @@ export const sanitizeConsoleSigningConfig = (
   )
     return undefined;
 
-  // Console never reads private material, even for legacy local configs.
-  const publicKeyPath =
-    readString(signing, "publicKeyPath") ??
-    (privateKeyPath
-      ? path.join(path.dirname(privateKeyPath), "public-key.pem")
-      : undefined);
   return {
     enabled: true,
     provider: getProviderName(signing),
-    ...(publicKeyPath === undefined ? {} : { publicKeyPath }),
   };
 };
 

package/src/lib/server/releaseReachability.ts

@@ -7,15 +7,12 @@ import type {
   ReleaseCatalogModel,
   ReleaseRow,
 } from "@hot-updater/plugin-core";
-import type { BundleEventSummary } from "@hot-updater/server";
 
 export type ReleaseReachabilityRow = ReleaseRow & {
   readonly currentlyUnreachable: boolean;
 };
 
-export type ReleaseListRow = ReleaseReachabilityRow & {
-  readonly activity30d: BundleEventSummary | null;
-};
+export type ReleaseListRow = ReleaseReachabilityRow;
 
 const NON_TARGETED_COHORT = "release-catalog-non-targeted-cohort";
 

package/src/lib/server/runtime.server.ts

@@ -1,47 +1,17 @@
 import type {
-  AnalyticsModel,
   ApiKeyModel,
   BundleRepository,
+  DatabasePlugin,
 } from "@hot-updater/plugin-core";
 import {
-  type ActiveInstallationInput,
-  type AnalyticsProvider,
-  createAnalyticsProvider,
-  type InstallationHistoryRow,
-  type InstallationSearchRow,
-  type OffsetPaginationResult,
+  createInsightsProvider,
+  type InsightsProvider,
 } from "@hot-updater/server";
 
-import {
-  parseActiveInstallationInput,
-  parseBundleEventAnalyticsInput,
-  parseBundleEventSummaryInput,
-  parseInstallationHistoryInput,
-  parseSearchInstallationsInput,
-} from "../analytics-input";
-
-export type InstallationSearchResult =
-  OffsetPaginationResult<InstallationSearchRow>;
-export type InstallationHistoryResult =
-  OffsetPaginationResult<InstallationHistoryRow>;
-
 export function createRuntimeHotUpdater(config: {
-  readonly database: BundleRepository;
-}): AnalyticsProvider | null {
-  const models: unknown = Reflect.get(config.database, "models");
-  const analytics: unknown =
-    typeof models === "object" && models !== null
-      ? Reflect.get(models, "analytics")
-      : undefined;
-  if (
-    typeof analytics !== "object" ||
-    analytics === null ||
-    typeof Reflect.get(analytics, "append") !== "function" ||
-    typeof Reflect.get(analytics, "scan") !== "function"
-  ) {
-    return null;
-  }
-  return createAnalyticsProvider(analytics as AnalyticsModel);
+  readonly database: DatabasePlugin;
+}): InsightsProvider {
+  return createInsightsProvider(config.database.models.insights);
 }
 
 export function createApiKeyStore(config: {
@@ -64,109 +34,3 @@ export function createApiKeyStore(config: {
   }
   return apiKeys as ApiKeyModel;
 }
-
-const providerMethods = [
-  "appendBundleEvent",
-  "getBundleEventSummary",
-  "getBundleEventSummaries",
-  "getBundleEventAnalytics",
-  "getBundleEventOverview",
-  "getActiveInstallationOverview",
-  "searchInstallations",
-  "getInstallationHistory",
-] as const;
-
-const parseAnalyticsProvider = (value: unknown): AnalyticsProvider | null => {
-  if (
-    typeof value !== "object" ||
-    value === null ||
-    Reflect.get(value, "mode") !== "bounded" ||
-    typeof Reflect.get(value, "maxMatchingRows") !== "number" ||
-    !providerMethods.every(
-      (method) => typeof Reflect.get(value, method) === "function",
-    )
-  ) {
-    return null;
-  }
-  return value as AnalyticsProvider;
-};
-
-export const getAnalyticsCapability = async (provider: unknown) => {
-  const parsed = parseAnalyticsProvider(provider);
-  return parsed === null
-    ? ({
-        analytics: false,
-        analyticsQueries: false,
-        eventIngestion: false,
-      } as const)
-    : ({
-        analytics: true,
-        analyticsQueries: true,
-        eventIngestion: true,
-        maxMatchingRows: parsed.maxMatchingRows,
-        mode: "bounded",
-      } as const);
-};
-
-const requireAnalyticsSupport = async (
-  provider: unknown,
-): Promise<AnalyticsProvider> => {
-  const parsedProvider = parseAnalyticsProvider(provider);
-  if (parsedProvider === null) {
-    throw new Error(
-      "Analytics are not supported by the configured database plugin.",
-    );
-  }
-  return parsedProvider;
-};
-
-export async function getBundleEventSummary(provider: unknown, input: unknown) {
-  const { bundleId } = parseBundleEventSummaryInput(input);
-  return (await requireAnalyticsSupport(provider)).getBundleEventSummary(
-    bundleId,
-  );
-}
-
-export async function getActiveInstallationOverview(
-  provider: unknown,
-  input: unknown,
-) {
-  const parsed: ActiveInstallationInput = parseActiveInstallationInput(input);
-  return (
-    await requireAnalyticsSupport(provider)
-  ).getActiveInstallationOverview(parsed);
-}
-
-export async function getBundleEventAnalytics(
-  provider: unknown,
-  input: unknown,
-) {
-  const parsed = parseBundleEventAnalyticsInput(input);
-  return (await requireAnalyticsSupport(provider)).getBundleEventAnalytics(
-    parsed.bundleId,
-    parsed.window,
-    parsed.limit ?? 50,
-    parsed.offset ?? 0,
-  );
-}
-
-export async function searchInstallations(provider: unknown, input: unknown) {
-  const parsed = parseSearchInstallationsInput(input);
-  return (await requireAnalyticsSupport(provider)).searchInstallations(
-    parsed.query,
-    parsed.limit ?? 50,
-    parsed.offset ?? 0,
-  );
-}
-
-export async function getInstallationHistory(
-  provider: unknown,
-  input: unknown,
-) {
-  const parsed = parseInstallationHistoryInput(input);
-  return (await requireAnalyticsSupport(provider)).getInstallationHistory(
-    parsed.installId,
-    parsed.limit ?? 50,
-    parsed.offset ?? 0,
-  );
-}

package/src/routeTree.gen.ts

@@ -11,8 +11,8 @@
 import { Route as rootRouteImport } from './routes/__root'
 import { Route as SigningRouteImport } from './routes/signing'
 import { Route as InstallationsRouteImport } from './routes/installations'
+import { Route as InsightsRouteImport } from './routes/insights'
 import { Route as ApiKeysRouteImport } from './routes/api-keys'
-import { Route as AnalyticsRouteImport } from './routes/analytics'
 import { Route as IndexRouteImport } from './routes/index'
 import { Route as ApiAuthSplatRouteImport } from './routes/api/auth/$'
 import { Route as ApiBundlesBundleIdDownloadRouteImport } from './routes/api/bundles/$bundleId/download'
@@ -27,16 +27,16 @@ const InstallationsRoute = InstallationsRouteImport.update({
   path: '/installations',
   getParentRoute: () => rootRouteImport,
 } as any)
+const InsightsRoute = InsightsRouteImport.update({
+  id: '/insights',
+  path: '/insights',
+  getParentRoute: () => rootRouteImport,
+} as any)
 const ApiKeysRoute = ApiKeysRouteImport.update({
   id: '/api-keys',
   path: '/api-keys',
   getParentRoute: () => rootRouteImport,
 } as any)
-const AnalyticsRoute = AnalyticsRouteImport.update({
-  id: '/analytics',
-  path: '/analytics',
-  getParentRoute: () => rootRouteImport,
-} as any)
 const IndexRoute = IndexRouteImport.update({
   id: '/',
   path: '/',
@@ -56,8 +56,8 @@ const ApiBundlesBundleIdDownloadRoute =
 
 export interface FileRoutesByFullPath {
   '/': typeof IndexRoute
-  '/analytics': typeof AnalyticsRoute
   '/api-keys': typeof ApiKeysRoute
+  '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
   '/signing': typeof SigningRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
@@ -65,8 +65,8 @@ export interface FileRoutesByFullPath {
 }
 export interface FileRoutesByTo {
   '/': typeof IndexRoute
-  '/analytics': typeof AnalyticsRoute
   '/api-keys': typeof ApiKeysRoute
+  '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
   '/signing': typeof SigningRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
@@ -75,8 +75,8 @@ export interface FileRoutesByTo {
 export interface FileRoutesById {
   __root__: typeof rootRouteImport
   '/': typeof IndexRoute
-  '/analytics': typeof AnalyticsRoute
   '/api-keys': typeof ApiKeysRoute
+  '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
   '/signing': typeof SigningRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
@@ -86,8 +86,8 @@ export interface FileRouteTypes {
   fileRoutesByFullPath: FileRoutesByFullPath
   fullPaths:
     | '/'
-    | '/analytics'
     | '/api-keys'
+    | '/insights'
     | '/installations'
     | '/signing'
     | '/api/auth/$'
@@ -95,8 +95,8 @@ export interface FileRouteTypes {
   fileRoutesByTo: FileRoutesByTo
   to:
     | '/'
-    | '/analytics'
     | '/api-keys'
+    | '/insights'
     | '/installations'
     | '/signing'
     | '/api/auth/$'
@@ -104,8 +104,8 @@ export interface FileRouteTypes {
   id:
     | '__root__'
     | '/'
-    | '/analytics'
     | '/api-keys'
+    | '/insights'
     | '/installations'
     | '/signing'
     | '/api/auth/$'
@@ -114,8 +114,8 @@ export interface FileRouteTypes {
 }
 export interface RootRouteChildren {
   IndexRoute: typeof IndexRoute
-  AnalyticsRoute: typeof AnalyticsRoute
   ApiKeysRoute: typeof ApiKeysRoute
+  InsightsRoute: typeof InsightsRoute
   InstallationsRoute: typeof InstallationsRoute
   SigningRoute: typeof SigningRoute
   ApiAuthSplatRoute: typeof ApiAuthSplatRoute
@@ -138,6 +138,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof InstallationsRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/insights': {
+      id: '/insights'
+      path: '/insights'
+      fullPath: '/insights'
+      preLoaderRoute: typeof InsightsRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/api-keys': {
       id: '/api-keys'
       path: '/api-keys'
@@ -145,13 +152,6 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof ApiKeysRouteImport
       parentRoute: typeof rootRouteImport
     }
-    '/analytics': {
-      id: '/analytics'
-      path: '/analytics'
-      fullPath: '/analytics'
-      preLoaderRoute: typeof AnalyticsRouteImport
-      parentRoute: typeof rootRouteImport
-    }
     '/': {
       id: '/'
       path: '/'
@@ -178,8 +178,8 @@ declare module '@tanstack/react-router' {
 
 const rootRouteChildren: RootRouteChildren = {
   IndexRoute: IndexRoute,
-  AnalyticsRoute: AnalyticsRoute,
   ApiKeysRoute: ApiKeysRoute,
+  InsightsRoute: InsightsRoute,
   InstallationsRoute: InstallationsRoute,
   SigningRoute: SigningRoute,
   ApiAuthSplatRoute: ApiAuthSplatRoute,

package/src/router.tsx

@@ -4,6 +4,8 @@ import { setupRouterSsrQueryIntegration } from "@tanstack/react-router-ssr-query
 // Import the route tree selected by the local or hosted Vite integration.
 import { routeTree } from "virtual:hot-updater-console/route-tree";
 
+import { getInsightsScrollRestorationKey } from "./routes/-installations-search";
+
 // Create a new router instance
 export const getRouter = () => {
   const queryClient = new QueryClient();
@@ -12,6 +14,7 @@ export const getRouter = () => {
     context: { queryClient },
 
     scrollRestoration: true,
+    getScrollRestorationKey: getInsightsScrollRestorationKey,
     defaultPreloadStaleTime: 0,
   });
 

package/src/routes/-installations-search.ts

@@ -1,19 +1,32 @@
+import type { ParsedLocation } from "@tanstack/react-router";
+
+const readCursor = (value: unknown): string | undefined =>
+  typeof value === "string" && value.length > 0 ? value : undefined;
+
+const readTimestamp = (value: unknown): number | undefined =>
+  typeof value === "number" && Number.isSafeInteger(value) && value >= 0
+    ? value
+    : undefined;
+
+export function getInsightsScrollRestorationKey(location: ParsedLocation) {
+  if (location.pathname === "/installations") {
+    const search = validateInstallationsSearch(location.search);
+    if (search.query === undefined && search.installId === undefined) {
+      return `/installations?eventsBefore=${search.eventsBefore ?? "new"}&eventsCursor=${search.eventsCursor ?? "first"}`;
+    }
+  }
+  return location.state.__TSR_key!;
+}
+
 export function validateInstallationsSearch(search: Record<string, unknown>) {
   return {
     query: typeof search.query === "string" ? search.query : undefined,
     installId:
       typeof search.installId === "string" ? search.installId : undefined,
-    searchOffset:
-      typeof search.searchOffset === "number" &&
-      Number.isSafeInteger(search.searchOffset) &&
-      search.searchOffset >= 0
-        ? search.searchOffset
-        : 0,
-    historyOffset:
-      typeof search.historyOffset === "number" &&
-      Number.isSafeInteger(search.historyOffset) &&
-      search.historyOffset >= 0
-        ? search.historyOffset
-        : 0,
+    eventsCursor: readCursor(search.eventsCursor),
+    eventsBefore: readTimestamp(search.eventsBefore),
+    searchCursor: readCursor(search.searchCursor),
+    historyCursor: readCursor(search.historyCursor),
+    historyBefore: readTimestamp(search.historyBefore),
   };
 }

package/src/routes/__root.tsx

@@ -9,16 +9,11 @@ import { useEffect, useState } from "react";
 
 import { AppSidebar } from "@/components/AppSidebar";
 import { ConsoleAccessPage } from "@/components/ConsoleAccessPage";
-import { AnalyticsCapabilityProvider } from "@/components/features/analytics/AnalyticsCapabilityContext";
 import { NotFoundPage } from "@/components/NotFoundPage";
 import { ThemeProvider } from "@/components/ThemeProvider";
 import { SidebarInset, SidebarProvider } from "@/components/ui/sidebar";
 import { Toaster } from "@/components/ui/sonner";
 import { TooltipProvider } from "@/components/ui/tooltip";
-import {
-  getAnalyticsCapabilityState,
-  useAnalyticsCapabilitiesQuery,
-} from "@/lib/analytics-api";
 import {
   getConsoleAccessRpc,
   getConsoleAuthProvidersRpc,
@@ -149,9 +144,6 @@ function RootLayout() {
 }
 
 function AuthorizedConsole() {
-  const capabilityQuery = useAnalyticsCapabilitiesQuery();
-  const capability = getAnalyticsCapabilityState(capabilityQuery);
-
   useEffect(() => {
     if (
       import.meta.env.DEV &&
@@ -162,13 +154,11 @@ function AuthorizedConsole() {
     }
   }, []);
   return (
-    <AnalyticsCapabilityProvider value={capability}>
-      <SidebarProvider>
-        <AppSidebar />
-        <SidebarInset className="min-h-0 min-w-0 overflow-hidden">
-          <Outlet />
-        </SidebarInset>
-      </SidebarProvider>
-    </AnalyticsCapabilityProvider>
+    <SidebarProvider>
+      <AppSidebar />
+      <SidebarInset className="min-h-0 min-w-0 overflow-hidden">
+        <Outlet />
+      </SidebarInset>
+    </SidebarProvider>
   );
 }

package/src/routes/api-keys.tsx

@@ -23,7 +23,7 @@ function ApiKeysRoute() {
           <h1 className="text-sm font-medium">API keys</h1>
         </div>
         <p className="basis-full pl-9 text-xs text-muted-foreground sm:basis-auto sm:pl-0">
-          API keys can download OTA updates and submit analytics only.
+          API keys can download OTA updates and submit insights only.
         </p>
       </header>