@hot-updater/console 1.1.4 → 1.2.0-rc.1

package/src/routeTree.gen.ts

@@ -13,10 +13,14 @@ import { Route as IndexRouteImport } from './routes/index'
 import { Route as ApiKeysRouteImport } from './routes/api-keys'
 import { Route as InsightsRouteImport } from './routes/insights'
 import { Route as InstallationsRouteImport } from './routes/installations'
+import { Route as NativeBuildsRouteImport } from './routes/native-builds'
 import { Route as RemoteConfigRouteImport } from './routes/remote-config'
 import { Route as InsightsDistributionRouteImport } from './routes/insights_.distribution'
+import { Route as NativeBuildsBuildIdRouteImport } from './routes/native-builds_.$buildId'
+import { Route as HotUpdaterNativeBuildsQrRouteImport } from './routes/[_]hot-updater/native-builds/qr'
 import { Route as ApiAuthSplatRouteImport } from './routes/api/auth/$'
 import { Route as ApiBundlesBundleIdDownloadRouteImport } from './routes/api/bundles/$bundleId/download'
+import { Route as ApiNativeBuildsBuildIdDownloadRouteImport } from './routes/api/native-builds/$buildId/download'
 
 const IndexRoute = IndexRouteImport.update({
   id: '/',
@@ -38,6 +42,11 @@ const InstallationsRoute = InstallationsRouteImport.update({
   path: '/installations',
   getParentRoute: () => rootRouteImport,
 } as any)
+const NativeBuildsRoute = NativeBuildsRouteImport.update({
+  id: '/native-builds',
+  path: '/native-builds',
+  getParentRoute: () => rootRouteImport,
+} as any)
 const RemoteConfigRoute = RemoteConfigRouteImport.update({
   id: '/remote-config',
   path: '/remote-config',
@@ -48,6 +57,17 @@ const InsightsDistributionRoute = InsightsDistributionRouteImport.update({
   path: '/insights/distribution',
   getParentRoute: () => rootRouteImport,
 } as any)
+const NativeBuildsBuildIdRoute = NativeBuildsBuildIdRouteImport.update({
+  id: '/native-builds_/$buildId',
+  path: '/native-builds/$buildId',
+  getParentRoute: () => rootRouteImport,
+} as any)
+const HotUpdaterNativeBuildsQrRoute =
+  HotUpdaterNativeBuildsQrRouteImport.update({
+    id: '/_hot-updater/native-builds/qr',
+    path: '/_hot-updater/native-builds/qr',
+    getParentRoute: () => rootRouteImport,
+  } as any)
 const ApiAuthSplatRoute = ApiAuthSplatRouteImport.update({
   id: '/api/auth/$',
   path: '/api/auth/$',
@@ -59,26 +79,40 @@ const ApiBundlesBundleIdDownloadRoute =
     path: '/api/bundles/$bundleId/download',
     getParentRoute: () => rootRouteImport,
   } as any)
+const ApiNativeBuildsBuildIdDownloadRoute =
+  ApiNativeBuildsBuildIdDownloadRouteImport.update({
+    id: '/api/native-builds/$buildId/download',
+    path: '/api/native-builds/$buildId/download',
+    getParentRoute: () => rootRouteImport,
+  } as any)
 
 export interface FileRoutesByFullPath {
   '/': typeof IndexRoute
   '/api-keys': typeof ApiKeysRoute
   '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
+  '/native-builds': typeof NativeBuildsRoute
   '/remote-config': typeof RemoteConfigRoute
   '/insights/distribution': typeof InsightsDistributionRoute
+  '/native-builds/$buildId': typeof NativeBuildsBuildIdRoute
+  '/_hot-updater/native-builds/qr': typeof HotUpdaterNativeBuildsQrRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/bundles/$bundleId/download': typeof ApiBundlesBundleIdDownloadRoute
+  '/api/native-builds/$buildId/download': typeof ApiNativeBuildsBuildIdDownloadRoute
 }
 export interface FileRoutesByTo {
   '/': typeof IndexRoute
   '/api-keys': typeof ApiKeysRoute
   '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
+  '/native-builds': typeof NativeBuildsRoute
   '/remote-config': typeof RemoteConfigRoute
   '/insights/distribution': typeof InsightsDistributionRoute
+  '/native-builds/$buildId': typeof NativeBuildsBuildIdRoute
+  '/_hot-updater/native-builds/qr': typeof HotUpdaterNativeBuildsQrRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/bundles/$bundleId/download': typeof ApiBundlesBundleIdDownloadRoute
+  '/api/native-builds/$buildId/download': typeof ApiNativeBuildsBuildIdDownloadRoute
 }
 export interface FileRoutesById {
   __root__: typeof rootRouteImport
@@ -86,10 +120,14 @@ export interface FileRoutesById {
   '/api-keys': typeof ApiKeysRoute
   '/insights': typeof InsightsRoute
   '/installations': typeof InstallationsRoute
+  '/native-builds': typeof NativeBuildsRoute
   '/remote-config': typeof RemoteConfigRoute
   '/insights_/distribution': typeof InsightsDistributionRoute
+  '/native-builds_/$buildId': typeof NativeBuildsBuildIdRoute
+  '/_hot-updater/native-builds/qr': typeof HotUpdaterNativeBuildsQrRoute
   '/api/auth/$': typeof ApiAuthSplatRoute
   '/api/bundles/$bundleId/download': typeof ApiBundlesBundleIdDownloadRoute
+  '/api/native-builds/$buildId/download': typeof ApiNativeBuildsBuildIdDownloadRoute
 }
 export interface FileRouteTypes {
   fileRoutesByFullPath: FileRoutesByFullPath
@@ -98,30 +136,42 @@ export interface FileRouteTypes {
     | '/api-keys'
     | '/insights'
     | '/installations'
+    | '/native-builds'
     | '/remote-config'
     | '/insights/distribution'
+    | '/native-builds/$buildId'
+    | '/_hot-updater/native-builds/qr'
     | '/api/auth/$'
     | '/api/bundles/$bundleId/download'
+    | '/api/native-builds/$buildId/download'
   fileRoutesByTo: FileRoutesByTo
   to:
     | '/'
     | '/api-keys'
     | '/insights'
     | '/installations'
+    | '/native-builds'
     | '/remote-config'
     | '/insights/distribution'
+    | '/native-builds/$buildId'
+    | '/_hot-updater/native-builds/qr'
     | '/api/auth/$'
     | '/api/bundles/$bundleId/download'
+    | '/api/native-builds/$buildId/download'
   id:
     | '__root__'
     | '/'
     | '/api-keys'
     | '/insights'
     | '/installations'
+    | '/native-builds'
     | '/remote-config'
     | '/insights_/distribution'
+    | '/native-builds_/$buildId'
+    | '/_hot-updater/native-builds/qr'
     | '/api/auth/$'
     | '/api/bundles/$bundleId/download'
+    | '/api/native-builds/$buildId/download'
   fileRoutesById: FileRoutesById
 }
 export interface RootRouteChildren {
@@ -129,10 +179,14 @@ export interface RootRouteChildren {
   ApiKeysRoute: typeof ApiKeysRoute
   InsightsRoute: typeof InsightsRoute
   InstallationsRoute: typeof InstallationsRoute
+  NativeBuildsRoute: typeof NativeBuildsRoute
   RemoteConfigRoute: typeof RemoteConfigRoute
   InsightsDistributionRoute: typeof InsightsDistributionRoute
+  NativeBuildsBuildIdRoute: typeof NativeBuildsBuildIdRoute
+  HotUpdaterNativeBuildsQrRoute: typeof HotUpdaterNativeBuildsQrRoute
   ApiAuthSplatRoute: typeof ApiAuthSplatRoute
   ApiBundlesBundleIdDownloadRoute: typeof ApiBundlesBundleIdDownloadRoute
+  ApiNativeBuildsBuildIdDownloadRoute: typeof ApiNativeBuildsBuildIdDownloadRoute
 }
 
 declare module '@tanstack/react-router' {
@@ -165,6 +219,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof InstallationsRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/native-builds': {
+      id: '/native-builds'
+      path: '/native-builds'
+      fullPath: '/native-builds'
+      preLoaderRoute: typeof NativeBuildsRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/remote-config': {
       id: '/remote-config'
       path: '/remote-config'
@@ -179,6 +240,20 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof InsightsDistributionRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/native-builds_/$buildId': {
+      id: '/native-builds_/$buildId'
+      path: '/native-builds/$buildId'
+      fullPath: '/native-builds/$buildId'
+      preLoaderRoute: typeof NativeBuildsBuildIdRouteImport
+      parentRoute: typeof rootRouteImport
+    }
+    '/_hot-updater/native-builds/qr': {
+      id: '/_hot-updater/native-builds/qr'
+      path: '/_hot-updater/native-builds/qr'
+      fullPath: '/_hot-updater/native-builds/qr'
+      preLoaderRoute: typeof HotUpdaterNativeBuildsQrRouteImport
+      parentRoute: typeof rootRouteImport
+    }
     '/api/auth/$': {
       id: '/api/auth/$'
       path: '/api/auth/$'
@@ -193,6 +268,13 @@ declare module '@tanstack/react-router' {
       preLoaderRoute: typeof ApiBundlesBundleIdDownloadRouteImport
       parentRoute: typeof rootRouteImport
     }
+    '/api/native-builds/$buildId/download': {
+      id: '/api/native-builds/$buildId/download'
+      path: '/api/native-builds/$buildId/download'
+      fullPath: '/api/native-builds/$buildId/download'
+      preLoaderRoute: typeof ApiNativeBuildsBuildIdDownloadRouteImport
+      parentRoute: typeof rootRouteImport
+    }
   }
 }
 
@@ -201,20 +283,25 @@ const rootRouteChildren: RootRouteChildren = {
   ApiKeysRoute: ApiKeysRoute,
   InsightsRoute: InsightsRoute,
   InstallationsRoute: InstallationsRoute,
+  NativeBuildsRoute: NativeBuildsRoute,
   RemoteConfigRoute: RemoteConfigRoute,
   InsightsDistributionRoute: InsightsDistributionRoute,
+  NativeBuildsBuildIdRoute: NativeBuildsBuildIdRoute,
+  HotUpdaterNativeBuildsQrRoute: HotUpdaterNativeBuildsQrRoute,
   ApiAuthSplatRoute: ApiAuthSplatRoute,
   ApiBundlesBundleIdDownloadRoute: ApiBundlesBundleIdDownloadRoute,
+  ApiNativeBuildsBuildIdDownloadRoute: ApiNativeBuildsBuildIdDownloadRoute,
 }
 export const routeTree = rootRouteImport
   ._addFileChildren(rootRouteChildren)
   ._addFileTypes<FileRouteTypes>()
 
 import type { getRouter } from './router.tsx'
-import type { createStart } from '@tanstack/react-start'
+import type { startInstance } from './start.ts'
 declare module '@tanstack/react-start' {
   interface Register {
     ssr: true
     router: Awaited<ReturnType<typeof getRouter>>
+    config: Awaited<ReturnType<typeof startInstance.getOptions>>
   }
 }

package/src/router.tsx

@@ -4,11 +4,21 @@ import { setupRouterSsrQueryIntegration } from "@tanstack/react-router-ssr-query
 // Import the route tree selected by the local or hosted Vite integration.
 import { routeTree } from "virtual:hot-updater-console/route-tree";
 
+import { schemaMigrationQueryKey } from "./lib/schema-migration-api";
 import { routeScrollRestorationKey } from "./lib/scroll-restoration";
 
 // Create a new router instance
 export const getRouter = () => {
-  const queryClient = new QueryClient();
+  const queryClient: QueryClient = new QueryClient({
+    defaultOptions: {
+      queries: {
+        // A database that needs migrations stays refused until someone runs
+        // them; the console's notice retries when asked.
+        retry: (failures) =>
+          failures < 3 && !queryClient.getQueryData(schemaMigrationQueryKey),
+      },
+    },
+  });
   const router = createRouter({
     routeTree,
     context: { queryClient },

package/src/routes/-native-builds-search.ts

@@ -0,0 +1,51 @@
+import { assertCanonicalChannelName } from "@hot-updater/protocol";
+
+import type { NativeBuildDetailSearch } from "@/components/features/native-builds/NativeBuildDetailPage";
+import type { NativeBuildPage } from "@/lib/api";
+
+const text = (value: unknown) =>
+  typeof value === "string" && value.length > 0 ? value : undefined;
+
+/** A channel name a build can embed, or undefined. */
+const channelName = (value: unknown) => {
+  const channel = text(value);
+  if (channel === undefined) return undefined;
+  try {
+    assertCanonicalChannelName(channel);
+    return channel;
+  } catch {
+    return undefined;
+  }
+};
+
+const defined = <T extends object>(values: T): T =>
+  Object.fromEntries(
+    Object.entries(values).filter(([, value]) => value !== undefined),
+  ) as T;
+
+/**
+ * The native build list's URL: a channel the builds embed, and one keyset
+ * page. A page has one direction, so `before` wins over `after`.
+ */
+export const validateNativeBuildsSearch = (
+  search: Record<string, unknown>,
+): NativeBuildPage => {
+  const before = text(search.before);
+  return defined({
+    channel: channelName(search.channel),
+    before,
+    after: before === undefined ? text(search.after) : undefined,
+  });
+};
+
+/** A native build page's URL: one page of the patches from it. */
+export const validateNativeBuildDetailSearch = (
+  search: Record<string, unknown>,
+): NativeBuildDetailSearch => {
+  const patchesBefore = text(search.patchesBefore);
+  return defined({
+    patchesBefore,
+    patchesAfter:
+      patchesBefore === undefined ? text(search.patchesAfter) : undefined,
+  });
+};

package/src/routes/[_]hot-updater/native-builds/qr.ts

@@ -0,0 +1,14 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+// A native build's download QR code takes no session and reads nothing:
+// see nativeBuildQr.ts.
+const handle = async ({ request }: { readonly request: Request }) => {
+  const { serveNativeBuildQr } = await import("@/lib/server/nativeBuildQr");
+  return serveNativeBuildQr(request);
+};
+
+export const Route = createFileRoute("/_hot-updater/native-builds/qr")({
+  server: {
+    handlers: { ANY: handle },
+  },
+});

package/src/routes/__root.tsx

@@ -10,6 +10,7 @@ import { useEffect, useState } from "react";
 import { AppSidebar } from "@/components/AppSidebar";
 import { ConsoleAccessPage } from "@/components/ConsoleAccessPage";
 import { NotFoundPage } from "@/components/NotFoundPage";
+import { SchemaMigrationRequired } from "@/components/SchemaMigrationRequired";
 import { ThemeProvider } from "@/components/ThemeProvider";
 import { SidebarInset, SidebarProvider } from "@/components/ui/sidebar";
 import { Toaster } from "@/components/ui/sonner";
@@ -19,6 +20,7 @@ import {
   getConsoleAuthProvidersRpc,
 } from "@/lib/auth-rpc";
 import { consoleFeaturesQueryOptions } from "@/lib/console-features-api";
+import { useSchemaMigration } from "@/lib/schema-migration-api";
 
 import appCss from "../styles.css?url";
 
@@ -150,6 +152,7 @@ function RootLayout() {
 }
 
 function AuthorizedConsole({ canSignOut }: { canSignOut: boolean }) {
+  const schema = useSchemaMigration();
   useEffect(() => {
     if (
       import.meta.env.DEV &&
@@ -163,7 +166,14 @@ function AuthorizedConsole({ canSignOut }: { canSignOut: boolean }) {
     <SidebarProvider>
       <AppSidebar canSignOut={canSignOut} />
       <SidebarInset className="min-h-0 min-w-0 overflow-hidden">
-        <Outlet />
+        {schema.status ? (
+          <SchemaMigrationRequired
+            status={schema.status}
+            onRetry={schema.retry}
+          />
+        ) : (
+          <Outlet />
+        )}
       </SidebarInset>
     </SidebarProvider>
   );

package/src/routes/api/native-builds/$buildId/download.ts

@@ -0,0 +1,50 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+/**
+ * Whether a request is a browser opening the URL as a page, as a phone does
+ * after scanning a QR code, rather than a script fetching it.
+ */
+const isNavigation = (request: Request) =>
+  request.headers.get("sec-fetch-mode") === "navigate" ||
+  (request.headers.get("accept") ?? "").includes("text/html");
+
+export const Route = createFileRoute("/api/native-builds/$buildId/download")({
+  server: {
+    handlers: {
+      GET: async ({ params, request }) => {
+        const { prepareConfig } = await import("@/lib/server/config.server");
+        const { downloadNativeBuild } =
+          await import("@/lib/server/nativeBuilds");
+        let deps: Awaited<ReturnType<typeof prepareConfig>>;
+        try {
+          deps = await prepareConfig(request);
+        } catch (error) {
+          // A browser without a session opens the build's page instead,
+          // where the console signs it in and returns to this download
+          // (`returnTo`, relative to that page). Both paths are relative,
+          // so they stay under the console's own path, wherever that is
+          // mounted; sign-in takes `returnTo` only on the console's origin.
+          if (
+            error instanceof Response &&
+            error.status === 401 &&
+            isNavigation(request)
+          ) {
+            const buildId = encodeURIComponent(params.buildId);
+            const returnTo = encodeURIComponent(
+              `../api/native-builds/${buildId}/download`,
+            );
+            return new Response(null, {
+              headers: {
+                "cache-control": "no-store",
+                location: `../../../native-builds/${buildId}?returnTo=${returnTo}`,
+              },
+              status: 302,
+            });
+          }
+          throw error;
+        }
+        return downloadNativeBuild(params.buildId, deps);
+      },
+    },
+  },
+});

package/src/routes/native-builds.tsx

@@ -0,0 +1,21 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { NativeBuildsPage } from "@/components/features/native-builds/NativeBuildsPage";
+
+import { validateNativeBuildsSearch } from "./-native-builds-search";
+
+export const Route = createFileRoute("/native-builds")({
+  component: NativeBuildsRoute,
+  validateSearch: validateNativeBuildsSearch,
+});
+
+function NativeBuildsRoute() {
+  const search = Route.useSearch();
+  const navigate = Route.useNavigate();
+  return (
+    <NativeBuildsPage
+      onSearchChange={(next) => void navigate({ search: next })}
+      search={search}
+    />
+  );
+}

package/src/routes/native-builds_.$buildId.tsx

@@ -0,0 +1,23 @@
+import { createFileRoute } from "@tanstack/react-router";
+
+import { NativeBuildDetailPage } from "@/components/features/native-builds/NativeBuildDetailPage";
+
+import { validateNativeBuildDetailSearch } from "./-native-builds-search";
+
+export const Route = createFileRoute("/native-builds_/$buildId")({
+  component: NativeBuildDetailRoute,
+  validateSearch: validateNativeBuildDetailSearch,
+});
+
+function NativeBuildDetailRoute() {
+  const { buildId } = Route.useParams();
+  const search = Route.useSearch();
+  const navigate = Route.useNavigate();
+  return (
+    <NativeBuildDetailPage
+      buildId={buildId}
+      onSearchChange={(next) => void navigate({ search: next, replace: true })}
+      search={search}
+    />
+  );
+}

package/src/start.ts

@@ -0,0 +1,33 @@
+import {
+  createCsrfMiddleware,
+  createMiddleware,
+  createStart,
+} from "@tanstack/react-start";
+
+/**
+ * Server functions answer only their own console's pages: a request
+ * another site sends, such as a form that posts to one, gets 403. TanStack
+ * Start adds this check itself only while no `start.ts` exists, so it is
+ * listed here, and `start.spec.ts` keeps it listed.
+ */
+const sameOriginServerFunctions = createCsrfMiddleware({
+  filter: (context) => context.handlerType === "serverFn",
+});
+
+/**
+ * The local console's lock, before any page, server function, or route:
+ * this machine's `Host` only, changes from its own pages only, and the
+ * run's session for every page, server function, and route. A hosted
+ * console has none: its sign-in guards it.
+ */
+const localConsoleGuard = createMiddleware().server(
+  async ({ request, next }) => {
+    const { default: guard } =
+      await import("virtual:hot-updater-console/request-guard");
+    return (await guard?.(request)) ?? next();
+  },
+);
+
+export const startInstance = createStart(() => ({
+  requestMiddleware: [sameOriginServerFunctions, localConsoleGuard],
+}));

package/src/virtual-modules.d.ts

@@ -19,3 +19,21 @@ declare module "virtual:hot-updater-console/package-router" {
 declare module "virtual:hot-updater-console/route-tree" {
   export { routeTree } from "./routeTree.gen";
 }
+
+declare module "virtual:hot-updater-console/request-guard" {
+  /**
+   * The local console's request guard: a refusal or redirect to answer
+   * with, or undefined to let the request through. A hosted console has
+   * none.
+   */
+  const guard:
+    | ((
+        request: Request,
+      ) => Response | undefined | Promise<Response | undefined>)
+    | undefined;
+  export default guard;
+}
+
+declare module "virtual:hot-updater-console/package-start" {
+  export { startInstance } from "./start";
+}

package/src/vite-internal.ts

@@ -14,14 +14,23 @@ const virtualConfigModuleId = "virtual:hot-updater-console/config";
 const virtualPackageRouterModuleId =
   "virtual:hot-updater-console/package-router";
 const virtualRouteTreeModuleId = "virtual:hot-updater-console/route-tree";
+const virtualPackageStartModuleId = "virtual:hot-updater-console/package-start";
+const virtualRequestGuardModuleId = "virtual:hot-updater-console/request-guard";
 
 const resolvedVirtualAuthModuleId = `\0${virtualAuthModuleId}`;
 const resolvedVirtualConfigModuleId = `\0${virtualConfigModuleId}`;
 const resolvedVirtualPackageRouterModuleId = `\0${virtualPackageRouterModuleId}`;
+const resolvedVirtualPackageStartModuleId = `\0${virtualPackageStartModuleId}`;
+const resolvedVirtualRequestGuardModuleId = `\0${virtualRequestGuardModuleId}`;
 
 const packageRoot = path.resolve(import.meta.dirname, "..");
 const packagePublicDirectory = path.join(packageRoot, "public");
 const packageRouterFile = path.join(packageRoot, "src/router.tsx");
+const packageStartFile = path.join(packageRoot, "src/start.ts");
+const localConsoleGuardFile = path.join(
+  packageRoot,
+  "src/lib/server/local-console.ts",
+);
 const packageRoutesDirectory = path.join(packageRoot, "src/routes");
 const packageSourceDirectory = path.join(packageRoot, "src");
 const localRouteTreeFile = path.join(
@@ -80,6 +89,15 @@ const createConsoleModulesPlugin = (mode: ConsoleModuleMode): Plugin => {
             "",
           ].join("\n"),
         );
+        // The package's request middleware, same-origin server functions
+        // included, which TanStack Start reads from the source directory.
+        writeFileIfChanged(
+          path.join(cacheDirectory, "start.ts"),
+          [
+            `export { startInstance } from ${JSON.stringify(virtualPackageStartModuleId)};`,
+            "",
+          ].join("\n"),
+        );
       }
 
       return {
@@ -116,6 +134,12 @@ const createConsoleModulesPlugin = (mode: ConsoleModuleMode): Plugin => {
       if (id === virtualPackageRouterModuleId) {
         return resolvedVirtualPackageRouterModuleId;
       }
+      if (id === virtualPackageStartModuleId) {
+        return resolvedVirtualPackageStartModuleId;
+      }
+      if (id === virtualRequestGuardModuleId) {
+        return resolvedVirtualRequestGuardModuleId;
+      }
       if (id === virtualRouteTreeModuleId) {
         return generatedRouteTreeFile;
       }
@@ -126,6 +150,36 @@ const createConsoleModulesPlugin = (mode: ConsoleModuleMode): Plugin => {
         return `export { getRouter } from ${JSON.stringify(toImportPath(packageRouterFile))};`;
       }
 
+      if (id === resolvedVirtualPackageStartModuleId) {
+        return `export { startInstance } from ${JSON.stringify(toImportPath(packageStartFile))};`;
+      }
+
+      if (id === resolvedVirtualRequestGuardModuleId) {
+        if (mode.type === "hosted") {
+          // Its sign-in guards a hosted console.
+          return "export default undefined;";
+        }
+        // `hot-updater console` passes the run's session. Vite's dev server
+        // checks the Host header itself, and a dev console makes its own
+        // session and prints the link.
+        return [
+          `import { guardLocalConsoleRequest, LOCAL_CONSOLE_SESSION_ENV, LOCAL_CONSOLE_SESSION_PARAM } from ${JSON.stringify(toImportPath(localConsoleGuardFile))};`,
+          "let session = process.env[LOCAL_CONSOLE_SESSION_ENV] || undefined;",
+          "if (session === undefined && import.meta.env.DEV) {",
+          "  const bytes = crypto.getRandomValues(new Uint8Array(32));",
+          '  session = btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");',
+          "  console.info(`Open the console at /?${LOCAL_CONSOLE_SESSION_PARAM}=${session}`);",
+          "}",
+          "const port = process.env.NITRO_PORT || process.env.PORT || undefined;",
+          "export default (request) =>",
+          "  guardLocalConsoleRequest(request, {",
+          "    session,",
+          "    port: import.meta.env.DEV ? undefined : port,",
+          "    checkHost: !import.meta.env.DEV,",
+          "  });",
+        ].join("\n");
+      }
+
       if (id === resolvedVirtualConfigModuleId) {
         if (mode.type === "local") {
           // hot-updater.config.ts's database, storage, and plugins, as the
@@ -148,7 +202,9 @@ const createConsoleModulesPlugin = (mode: ConsoleModuleMode): Plugin => {
             "    database: config.database,",
             "    storage: config.storage,",
             "    plugins: config.plugins,",
-            "    console: { gitUrl: config.console.gitUrl },",
+            "    console: {",
+            "      gitUrl: config.console.gitUrl,",
+            "    },",
             "  };",
             "};",
           ].join("\n");

package/.output/public/assets/EventDetails-gbD_fCqc.js

@@ -1 +0,0 @@
-import{Fn as e,Ur as t,_ as n,ar as r,b as i,ei as a,g as o,ri as s,v as c,x as l,y as u}from"./sidebar-BqX460IW.js";import{o as d}from"./useCompositeListItem-B-UkrDlu.js";import{f}from"./insights-api-1ZjVu3Sb.js";import{p,t as m}from"./badge-Bqf3UDee.js";import{r as h,t as g}from"./HashValueDisplay-BGkDPaYi.js";import{s as _}from"./input-group-B4nrqIh0.js";import{t as v}from"./smartphone-CtsHuiIC.js";import{n as y}from"./dist-dDj-R6uh.js";import{i as b,o as x,r as S,t as C}from"./empty-Bf4DanOL.js";import{n as w,r as T}from"./InsightsPageHeader-BRw8XkJW.js";var E=r(`activity`,[[`path`,{d:`M22 12h-2.48a2 2 0 0 0-1.93 1.46l-2.35 8.36a.25.25 0 0 1-.48 0L9.24 2.18a.25.25 0 0 0-.48 0l-2.35 8.36A2 2 0 0 1 4.49 12H2`,key:`169zse`}]]),D=r(`arrow-right-left`,[[`path`,{d:`m16 3 4 4-4 4`,key:`1x1c3m`}],[`path`,{d:`M20 7H4`,key:`zbl0bi`}],[`path`,{d:`m8 21-4-4 4-4`,key:`h9nckh`}],[`path`,{d:`M4 17h16`,key:`g4d7ey`}]]),O=r(`circle-alert`,[[`circle`,{cx:`12`,cy:`12`,r:`10`,key:`1mglay`}],[`line`,{x1:`12`,x2:`12`,y1:`8`,y2:`12`,key:`1pkeuh`}],[`line`,{x1:`12`,x2:`12.01`,y1:`16`,y2:`16`,key:`4dfq90`}]]),k=r(`copy`,[[`rect`,{width:`14`,height:`14`,x:`8`,y:`8`,rx:`2`,ry:`2`,key:`17jyea`}],[`path`,{d:`M4 16c-1.1 0-2-.9-2-2V4c0-1.1.9-2 2-2h10c1.1 0 2 .9 2 2`,key:`zix9uf`}]]),A=r(`sparkles`,[[`path`,{d:`M11.017 2.814a1 1 0 0 1 1.966 0l1.051 5.558a2 2 0 0 0 1.594 1.594l5.558 1.051a1 1 0 0 1 0 1.966l-5.558 1.051a2 2 0 0 0-1.594 1.594l-1.051 5.558a1 1 0 0 1-1.966 0l-1.051-5.558a2 2 0 0 0-1.594-1.594l-5.558-1.051a1 1 0 0 1 0-1.966l5.558-1.051a2 2 0 0 0 1.594-1.594z`,key:`1s2grr`}],[`path`,{d:`M20 2v4`,key:`1rf3ol`}],[`path`,{d:`M22 4h-4`,key:`gwowj6`}],[`circle`,{cx:`4`,cy:`20`,r:`2`,key:`6kqj1y`}]]),j=s(a(),1),M=t(),N={UPDATE_DOWNLOADED:{label:`Downloaded`,description:`Downloaded. It launches when the app restarts.`,variant:`default`,icon:h},UPDATE_APPLIED:{label:`Launched`,description:`The app restarted into the downloaded bundle.`,variant:`success`,icon:p},RECOVERED:{label:`Crashed`,description:`Crashed on the bundle and rolled back.`,variant:`warning`,icon:_},UPDATE_FAILED:{label:`Update failed`,description:`An update check, download, or install failed.`,variant:`destructive`,icon:O},UNCHANGED:{label:`Launch`,description:`The app launched; the report changed nothing.`,variant:`secondary`,icon:E}},P=e=>{let{kinds:t=[],previous:n}=e.change??{};return t.includes(`first_seen`)?{label:`First seen`,description:`The installation's first report to this server.`,variant:`secondary`,icon:A}:t.includes(`app_version`)||t.includes(`native_build`)?{label:`App updated`,description:n&&n.appVersion!==e.appVersion?`From app ${n.appVersion} to ${e.appVersion}.`:`A new build of the same app version.`,variant:`secondary`,icon:v}:t.includes(`bundle`)?{label:`Launched`,description:`Seen running this bundle; the report of the restart into it never arrived.`,variant:`success`,icon:p}:t.includes(`release`)?{label:`Release adopted`,description:`The bundle it runs now ships under another release.`,variant:`secondary`,icon:D}:t.includes(`channel`)?{label:`Channel changed`,description:n?`From ${n.channel} to ${e.channel}.`:`It reports on another channel.`,variant:`secondary`,icon:D}:N.UNCHANGED},F=e=>e.type===`UNCHANGED`&&e.change?P({change:e.change,appVersion:e.appVersion??``,channel:e.channel??``}):N[e.type];function I(){let[e,t]=(0,j.useState)(`UTC`);return(0,j.useEffect)(()=>{t(Intl.DateTimeFormat().resolvedOptions().timeZone)},[]),new Intl.DateTimeFormat(`en`,{timeZone:e,timeZoneName:`shortOffset`,year:`numeric`,month:`2-digit`,day:`2-digit`,hour:`2-digit`,minute:`2-digit`,second:`2-digit`,hourCycle:`h23`})}function L(e,t){let n=Object.fromEntries(t.formatToParts(new Date(e)).map(({type:e,value:t})=>[e,t])),r=n.timeZoneName===`GMT`?`GMT+0`:n.timeZoneName;return`${n.year}/${n.month}/${n.day} ${n.hour}:${n.minute}:${n.second} ${r}`}function R({value:e,formatter:t,touch:n=!1}){let r=new Date(e),i=L(e,t);return(0,M.jsxs)(`details`,{className:`group/time`,children:[(0,M.jsx)(`summary`,{className:`cursor-pointer list-none rounded-md outline-none focus-visible:ring-2 focus-visible:ring-ring/30 [&::-webkit-details-marker]:hidden ${n?`flex min-h-11 items-center`:``}`,children:(0,M.jsxs)(`span`,{className:`flex items-center gap-1`,children:[(0,M.jsx)(`time`,{dateTime:r.toISOString(),className:`whitespace-nowrap`,children:i}),(0,M.jsx)(d,{"aria-hidden":`true`,className:`size-3 text-muted-foreground group-open/time:rotate-180`})]})}),(0,M.jsx)(`p`,{className:`mt-2 text-muted-foreground`,children:r.toISOString().replace(`T`,` `).replace(`Z`,` UTC`)})]})}var z={patch:`A patch delivered it.`,manifest:`Only the changed files were downloaded.`,archive:`The full archive was downloaded.`},B=e=>{if(e.late)return`Counted nothing: the installation had already downloaded or run this bundle.`;if(e.impliedDownload)return`Its download report never arrived; the download counted with it.`;if(e.type===`UPDATE_FAILED`&&e.failure)return f(e.failure);if(e.type===`UPDATE_DOWNLOADED`&&e.delivery){let t=z[e.delivery]??null;return e.patchFallback?`The patch failed. ${t??``}`.trim():t}return null};function V({response:t}){let n=async()=>{try{await navigator.clipboard.writeText(t.body),y.success(`Response body copied`)}catch{y.error(`Could not copy the response body`)}};return(0,M.jsxs)(`section`,{"aria-label":`Response body`,className:`flex min-w-0 flex-col gap-3`,children:[(0,M.jsxs)(`div`,{className:`flex flex-wrap items-center justify-between gap-3`,children:[(0,M.jsx)(`h3`,{className:`text-sm font-medium`,children:`Response body`}),(0,M.jsxs)(e,{variant:`outline`,className:`min-h-11`,disabled:t.body===null||t.body===``,onClick:()=>void n(),children:[(0,M.jsx)(k,{"aria-hidden":`true`,"data-icon":`inline-start`}),` Copy body`]})]}),t.bodyTruncated?(0,M.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:`Truncated to the 4 KiB reporting limit. Copy includes only the stored text.`}):null,t.body?(0,M.jsx)(`pre`,{className:`rounded-md border bg-muted/30 p-4 font-mono text-xs leading-relaxed whitespace-pre-wrap wrap-anywhere`,children:t.body}):(0,M.jsx)(C,{children:(0,M.jsxs)(b,{children:[(0,M.jsx)(x,{children:t.body===null?`Response body unavailable`:`Empty response body`}),(0,M.jsx)(S,{children:t.body===null?`The client received the HTTP status but could not read the body.`:t.status===304?`The server returned no body. The client can reuse its cached catalog.`:`The server returned no text in this response.`})]})})]})}function H({event:t}){let r=t.httpResponse,a=I(),s=r.status===304?`Not modified`:r.status>=500?`Server error`:r.status>=400?`Request error`:r.status>=300?`Redirect`:`Success`,d=r.resource===`catalog`?`Catalog`:`Artifact`,f=[[`App`,t.platform&&`${t.platform===`ios`?`iOS`:`Android`} ${t.appVersion}`],[`Channel`,t.channel],[`SDK`,t.sdkVersion],[`Installation`,t.installId]].filter(([,e])=>e!=null);return(0,M.jsxs)(o,{children:[(0,M.jsxs)(l,{"aria-label":`View ${d.toLowerCase()} response: HTTP ${r.status}`,render:(0,M.jsx)(e,{variant:`ghost`,className:`-ml-2 h-auto min-h-11 justify-start`}),children:[(0,M.jsxs)(m,{variant:r.status>=400?`destructive`:`secondary`,children:[`HTTP `,r.status]}),(0,M.jsxs)(`span`,{children:[d,` response`]})]}),(0,M.jsxs)(n,{className:`data-[side=right]:w-full data-[side=right]:sm:max-w-2xl`,children:[(0,M.jsxs)(u,{className:`border-b pr-14`,children:[(0,M.jsx)(i,{children:`HTTP response`}),(0,M.jsxs)(c,{children:[d,` · HTTP `,r.status,` · `,s,`. Most recent response available when this report was created.`]})]}),(0,M.jsxs)(`div`,{className:`flex min-h-0 flex-1 flex-col gap-6 overflow-y-auto p-6`,children:[(0,M.jsxs)(`section`,{"aria-label":`Request`,className:`flex min-w-0 flex-col gap-2`,children:[(0,M.jsx)(`h3`,{className:`text-sm font-medium`,children:`Request`}),(0,M.jsxs)(`p`,{className:`font-mono text-xs leading-relaxed whitespace-pre-wrap wrap-anywhere`,children:[`GET `,r.path]}),r.receivedAtMs==null?null:(0,M.jsxs)(`div`,{className:`text-xs text-muted-foreground`,children:[`Response received`,` `,(0,M.jsx)(R,{value:r.receivedAtMs,formatter:a})]})]}),(0,M.jsx)(V,{response:r}),f.length?(0,M.jsxs)(`section`,{"aria-label":`Response context`,className:`flex flex-col gap-3`,children:[(0,M.jsx)(`h3`,{className:`text-sm font-medium`,children:`Response context`}),(0,M.jsx)(`dl`,{className:`grid grid-cols-2 gap-x-6 gap-y-4`,children:f.map(([e,t])=>(0,M.jsxs)(`div`,{className:`min-w-0`,children:[(0,M.jsx)(`dt`,{className:`text-xs text-muted-foreground`,children:e}),(0,M.jsx)(`dd`,{className:`mt-1 text-sm wrap-anywhere`,children:t})]},e))})]}):null]})]})]})}function U({event:e}){let t=F(e),n=t.icon,r=B(e);return(0,M.jsxs)(`div`,{className:`flex min-w-0 flex-col items-start gap-2`,children:[(0,M.jsxs)(m,{variant:t.variant,className:`gap-1 whitespace-nowrap [&_svg]:size-3`,children:[(0,M.jsx)(n,{"aria-hidden":`true`}),t.label]}),(0,M.jsx)(`p`,{className:`max-w-56 whitespace-pre-wrap wrap-anywhere text-xs text-muted-foreground`,children:e.type===`UPDATE_FAILED`&&r?r:t.description}),e.httpResponse?(0,M.jsx)(H,{event:e}):null,e.type===`UPDATE_FAILED`&&e.failure?.errorStack?(0,M.jsxs)(`details`,{className:`w-full max-w-56 text-xs`,children:[(0,M.jsx)(`summary`,{className:`cursor-pointer text-muted-foreground`,children:`Stack trace`}),(0,M.jsx)(`pre`,{className:`mt-2 max-h-64 overflow-auto whitespace-pre-wrap wrap-anywhere font-mono`,children:e.failure.errorStack})]}):null,e.type!==`UPDATE_FAILED`&&r?(0,M.jsx)(`p`,{className:`max-w-56 whitespace-normal text-xs text-muted-foreground`,children:r}):null]})}function W({event:e,touch:t=!1}){let n=e.type===`UPDATE_DOWNLOADED`,r=e.type===`UPDATE_FAILED`,i=!r||e.failure?.stage!==`check`,a=e.type===`UNCHANGED`&&e.change?.kinds.includes(`bundle`)===!0&&e.change.previous!==void 0,o=a?e.change.previous.bundleId:e.fromBundleId,s=n||r||a||e.type===`UPDATE_APPLIED`||e.type===`RECOVERED`;return(0,M.jsxs)(`dl`,{className:`grid grid-cols-[auto_minmax(0,1fr)] items-center gap-x-2 gap-y-2`,children:[o&&s?(0,M.jsxs)(M.Fragment,{children:[(0,M.jsx)(`dt`,{className:`text-muted-foreground`,children:n||r?`Running`:`From`}),(0,M.jsxs)(`dd`,{className:`flex min-w-0 flex-wrap items-center gap-2`,children:[(0,M.jsx)(g,{value:o,buttonClassName:t?`min-h-11 px-3`:void 0}),T(o,a?e.change.previous.minBundleId:e.minBundleId)?(0,M.jsx)(w,{}):null]})]}):null,i?(0,M.jsxs)(M.Fragment,{children:[(0,M.jsx)(`dt`,{className:`text-muted-foreground`,children:n?`Pending`:r?`Target`:s?`To`:`Current`}),(0,M.jsxs)(`dd`,{className:`flex min-w-0 flex-wrap items-center gap-2`,children:[(0,M.jsx)(g,{value:e.toBundleId,buttonClassName:t?`min-h-11 px-3`:void 0}),T(e.toBundleId,e.minBundleId)?(0,M.jsx)(w,{}):null]})]}):null]})}export{H as a,V as i,R as n,I as o,U as r,k as s,W as t};

package/.output/public/assets/HashValueDisplay-BGkDPaYi.js

@@ -1 +0,0 @@
-import{Ln as e,Ur as t,ar as n,it as r,nt as i,tt as a}from"./sidebar-BqX460IW.js";import{n as o}from"./dist-dDj-R6uh.js";var s=n(`download`,[[`path`,{d:`M12 15V3`,key:`m9g1x1`}],[`path`,{d:`M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4`,key:`ih7n3h`}],[`path`,{d:`m7 10 5 5 5-5`,key:`brsn70`}]]),c=t(),l=(e,t=12)=>e.length>t?`${e.slice(0,Math.max(1,t-4))}…${e.slice(-4)}`:e;function u({value:t,maxLength:n=12,className:s,buttonClassName:u}){let d=t.length>n,f=l(t,n),p=async()=>{try{await navigator.clipboard.writeText(t),o.success(`Copied to clipboard`,{description:t})}catch{o.error(`Failed to copy value`)}},m=e=>{e.preventDefault(),e.stopPropagation(),p()},h=e=>{(e.key===`Enter`||e.key===` `)&&(e.preventDefault(),e.stopPropagation(),p())},g=(0,c.jsx)(`span`,{translate:`no`,className:e(`font-mono text-xs tabular-nums whitespace-nowrap`,s),children:f});return(0,c.jsxs)(a,{children:[(0,c.jsx)(r,{render:(0,c.jsx)(`button`,{type:`button`,"aria-label":`Copy full value: ${t}`,translate:`no`,className:e(`ring-ring/30 bg-muted/40 border-border/70 inline-flex min-w-0 max-w-full cursor-pointer items-center rounded-md border px-1.5 py-0.5 align-top shadow-xs outline-none transition-[background-color,border-color,transform,box-shadow]`,`hover:bg-muted/70 active:scale-[0.98] active:bg-muted/85 focus-visible:ring-[2px]`,`touch-manipulation select-none motion-reduce:transition-none motion-reduce:active:scale-100`,!d&&`cursor-copy`,u),onClick:m,onKeyDown:h}),children:g}),(0,c.jsx)(i,{hidden:!d,children:(0,c.jsx)(`p`,{translate:`no`,className:`break-all font-mono text-xs tabular-nums`,children:t})})]})}export{l as n,s as r,u as t};

package/.output/public/assets/InsightsPageHeader-BRw8XkJW.js

@@ -1 +0,0 @@
-import{In as e,Ln as t,Ur as n,p as r}from"./sidebar-BqX460IW.js";import{i,l as a,s as o}from"./console-features-api-DPE4C06Y.js";import{b as s,x as c}from"./insights-api-1ZjVu3Sb.js";import{a as l,f as u,i as d,n as f,t as p}from"./badge-Bqf3UDee.js";import{t as m}from"./list-Dtj7TtzV.js";import{i as h,r as g,t as _}from"./tabs-CgEH_fMT.js";var v=n();function y({error:e,fallbackTitle:t}){return o(e)?(0,v.jsxs)(f,{children:[(0,v.jsx)(s,{"aria-hidden":`true`}),(0,v.jsx)(l,{children:`Insights not installed`}),(0,v.jsx)(d,{children:e.message})]}):(0,v.jsxs)(f,{variant:`destructive`,children:[(0,v.jsx)(u,{"aria-hidden":`true`}),(0,v.jsx)(l,{children:t}),(0,v.jsx)(d,{children:`Refresh to try again. If this keeps happening, check your Insights provider connection.`})]})}var b={"24h":{label:`DAU`,period:`24 hours`,interval:`hour`},"7d":{label:`WAU`,period:`7 days`,interval:`6 hours`},"30d":{label:`MAU`,period:`30 days`,interval:`day`},"12m":{label:`YAU`,period:`12 months`,interval:`week`}};function x({label:e,onPeriodChange:t,period:n,periods:r}){return(0,v.jsx)(_,{value:n,onValueChange:e=>{let n=r.find(t=>t.value===e);n&&t(n.value)},children:(0,v.jsx)(g,{"aria-label":e,className:`min-h-11 sm:min-h-9`,children:r.map(({value:e,name:t})=>(0,v.jsx)(h,{value:e,"aria-label":t,className:`min-w-12 px-3`,children:e},e))})})}var S=[`24h`,`7d`,`30d`].map(e=>({value:e,name:b[e].period})),C=Object.keys(b).map(e=>({value:e,name:b[e].period}));function w({window:e,onWindowChange:t}){return(0,v.jsx)(x,{label:`Reporting period`,onPeriodChange:t,period:e,periods:S})}function T({window:e,onWindowChange:t,twelveMonths:n=!0}){return(0,v.jsx)(x,{label:`Reporting period`,onPeriodChange:t,period:e,periods:C.filter(({value:e})=>n||e!==`12m`)})}var E=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-7000-8000-000000000000|00000000-0000-0000-0000-000000000000)$/iu,D=(e,t)=>e!=null&&(e===t||E.test(e));function O(){return(0,v.jsx)(p,{className:`shrink-0 font-sans font-normal`,title:`The bundle the native build shipped`,variant:`secondary`,children:`Built-in bundle`})}function k({view:n,overviewSearch:o}){let s=i(`insightsAnalytics`);return(0,v.jsxs)(`header`,{className:`sticky top-0 z-10 flex shrink-0 flex-wrap items-center gap-3 border-b bg-background px-3 py-3 sm:bg-card/70 sm:px-4 sm:backdrop-blur-sm`,children:[(0,v.jsx)(r,{className:`-ml-1 size-11 lg:size-7`}),(0,v.jsxs)(`div`,{className:`flex items-center gap-1.5`,children:[(0,v.jsx)(c,{"aria-hidden":`true`,className:`size-3.5 text-muted-foreground`}),(0,v.jsx)(`h1`,{className:`text-sm font-medium`,children:`Insights`})]}),(0,v.jsxs)(`nav`,{"aria-label":`Insights views`,className:`ml-auto flex gap-2`,children:[s?(0,v.jsx)(a,{"aria-current":n===`overview`?`page`:void 0,className:t(e({className:`h-11 px-3 lg:h-8 lg:px-2.5`,size:`lg`,variant:n===`overview`?`secondary`:`ghost`})),search:o,to:`/insights`,children:`Overview`}):null,(0,v.jsxs)(a,{"aria-current":n===`events`?`page`:void 0,className:t(e({className:`h-11 px-3 lg:h-8 lg:px-2.5`,size:`lg`,variant:n===`events`?`secondary`:`ghost`})),to:`/installations`,children:[(0,v.jsx)(m,{"aria-hidden":`true`,"data-icon":`inline-start`}),`All events`]})]})]})}export{x as a,y as c,w as i,O as n,T as o,D as r,b as s,k as t};

package/.output/public/assets/NotFoundPage-Cei6W2lm.js

@@ -1 +0,0 @@
-import{In as e,Ur as t}from"./sidebar-BqX460IW.js";import{l as n}from"./console-features-api-DPE4C06Y.js";var r=t(),i={afterReleaseId:void 0,beforeReleaseId:void 0,bundleId:void 0,channelId:void 0,enabled:void 0,platform:void 0,releaseId:void 0,scopeKey:void 0};function a(){return(0,r.jsx)(`div`,{className:`flex min-h-svh flex-1 items-center justify-center px-6 py-10`,children:(0,r.jsxs)(`section`,{className:`flex max-w-md flex-col items-center text-center`,children:[(0,r.jsx)(`h1`,{className:`text-2xl font-semibold tracking-tight text-foreground`,children:`Page not found`}),(0,r.jsx)(n,{className:e({className:`mt-6`,size:`lg`}),to:`/`,search:i,children:`Go to home`})]})})}export{a as t};