livedesk 0.1.701 → 0.1.702

package/electron/after-pack.cjs

@@ -106,4 +106,9 @@ module.exports = async function afterPack(context) {
       `Packaged ${platform} RemoteFast must be executable before immutable assembly; mode=${executableMode.toString(8)}`
     );
   }
+  if (platform === 'linux') {
+    chmodSync(join(__dirname, 'linux-updater', 'vuvodesk-update-helper'), 0o755);
+    chmodSync(join(__dirname, 'linux-updater', 'release-public-key.json'), 0o644);
+    chmodSync(join(__dirname, 'linux-updater', 'com.vuvodesk.update.policy'), 0o644);
+  }
 };

package/electron/electron-builder.linux-x64.yml

@@ -43,8 +43,8 @@ deb:
   packageCategory: utils
   description: >-
     View your computers together and control a selected screen with VuvoDesk.
-    Updates are checked and downloaded inside VuvoDesk. Installing a deb update
-    may require your administrator password.
+    After the first administrator-approved installation, verified VuvoDesk
+    updates install automatically without another password prompt.
   fpm:
     - --replaces
     - livedesk
@@ -52,7 +52,16 @@ deb:
     - livedesk
     - --provides
     - livedesk
+    - --depends
+    - python3
+    - --depends
+    - openssl
+    - --depends
+    - pkexec | policykit-1
     - packages/vuvodesk/electron/vuvodesk.metainfo.xml=/usr/share/metainfo/com.livedesk.desktop.metainfo.xml
+    - packages/vuvodesk/electron/linux-updater/vuvodesk-update-helper=/usr/lib/vuvodesk-updater/vuvodesk-update-helper
+    - packages/vuvodesk/electron/linux-updater/release-public-key.json=/usr/lib/vuvodesk-updater/release-public-key.json
+    - packages/vuvodesk/electron/linux-updater/com.vuvodesk.update.policy=/usr/share/polkit-1/actions/com.vuvodesk.update.policy
 extraMetadata:
   homepage: https://vuvodesk.com
 publish:

package/electron/linux-signed-updater.mjs

@@ -0,0 +1,107 @@
+import { execFile } from 'node:child_process';
+import { mkdtemp, writeFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, basename } from 'node:path';
+import { promisify } from 'node:util';
+
+const execute = promisify(execFile);
+const HELPER = '/usr/lib/vuvodesk-updater/vuvodesk-update-helper';
+const VERSION = /^(0|[1-9][0-9]{0,5})\.(0|[1-9][0-9]{0,5})\.(0|[1-9][0-9]{0,5})$/;
+const FEED = /^https:\/\/livedesk-desktop-updates\.lovecrdm\.workers\.dev\/(dev|stable)\/linux\/x64\/?$/;
+
+async function runHelper(args) {
+  let output;
+  try {
+    output = await execute('/usr/bin/pkexec', ['--disable-internal-agent', HELPER, ...args], {
+      encoding: 'utf8', maxBuffer: 8192, timeout: args[0] === 'install' ? 340_000 : 130_000,
+      windowsHide: true, shell: false
+    });
+  } catch (error) {
+    let code = 'linux-update-helper-unavailable';
+    try {
+      const parsed = JSON.parse(error.stdout);
+      if (/^linux-update-[a-z-]+$/.test(parsed.error)) code = parsed.error;
+    } catch { /* Never forward paths, command lines, or arbitrary helper output. */ }
+    throw new Error(code);
+  }
+  const result = JSON.parse(output.stdout);
+  if (result.state === 'error') throw new Error('linux-update-helper-failed');
+  return result;
+}
+
+async function readEnvelope(url) {
+  const response = await fetch(url, { signal: AbortSignal.timeout(15_000), redirect: 'error', cache: 'no-store' });
+  if (!response.ok || Number(response.headers.get('content-length') || 0) > 8192) {
+    await response.body?.cancel();
+    throw new Error('linux-update-signature-unavailable');
+  }
+  const reader = response.body.getReader();
+  const chunks = [];
+  let size = 0;
+  try {
+    for (;;) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > 8192) throw new Error('linux-update-signature-too-large');
+      chunks.push(value);
+    }
+    return Buffer.concat(chunks, size);
+  } finally {
+    await reader.cancel().catch(() => undefined);
+    reader.releaseLock();
+  }
+}
+
+// Injection is confined to this unprivileged adapter. The installed root helper
+// has no test flag, environment-selected key, URL, command, or staging root.
+export function signedDebUpdaterClass(DebUpdater, { helper = runHelper, envelope = readEnvelope,
+  noteQuit = () => undefined } = {}) {
+  return class SignedDebUpdater extends DebUpdater {
+    preparedRelease = null;
+    // Install only through the manager's exact runtime-drain owner. The base
+    // quit handler would invoke synchronous dpkg outside that lifecycle.
+    addQuitHandler() {}
+
+    async prepareVerifiedInstall({ version, feedUrl }) {
+      if (!VERSION.test(version) || !FEED.test(feedUrl)) throw new Error('linux-update-target-invalid');
+      if (this.preparedRelease) throw new Error('linux-update-already-prepared');
+      const channel = feedUrl.match(FEED)[1];
+      const file = `VuvoDesk-${version}${channel === 'dev' ? '-dev' : ''}-amd64.deb`;
+      const installer = this.installerPath;
+      if (!installer || basename(installer) !== file) throw new Error('linux-update-installer-mismatch');
+      const directory = await mkdtemp(join(tmpdir(), 'vuvodesk-update-signature-'));
+      try {
+        const documentPath = join(directory, 'release.json');
+        await writeFile(documentPath, await envelope(`${feedUrl.replace(/\/$/, '')}/${file}.update.json`), { mode: 0o600, flag: 'wx' });
+        const prepared = await helper(['prepare', version, installer, documentPath]);
+        if (prepared.state !== 'prepared' || prepared.version !== version || !/^[a-f0-9]{32}$/.test(prepared.token)) {
+          throw new Error('linux-update-prepared-proof-invalid');
+        }
+        this.preparedRelease = { token: prepared.token, version, installer };
+      } finally {
+        await rm(directory, { recursive: true, force: true });
+      }
+    }
+
+    async cancelVerifiedInstall() {
+      const prepared = this.preparedRelease;
+      this.preparedRelease = null;
+      if (prepared) await helper(['cancel', prepared.token]);
+    }
+
+    async quitAndInstall(_silent = true, forceRunAfter = true) {
+      const prepared = this.preparedRelease;
+      if (!prepared || prepared.installer !== this.installerPath) throw new Error('linux-update-prepared-owner-missing');
+      // Clear before awaiting so no second caller can install the same owner.
+      this.preparedRelease = null;
+      const installed = await helper(['install', prepared.token]);
+      if (installed.state !== 'installed' || installed.version !== prepared.version) {
+        throw new Error('linux-update-installed-proof-invalid');
+      }
+      if (forceRunAfter) this.app.relaunch();
+      noteQuit();
+      this.app.quit();
+    }
+  };
+}

package/electron/linux-updater/com.vuvodesk.update.policy

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE policyconfig PUBLIC "-//freedesktop//DTD polkit Policy Configuration 1.0//EN"
+ "http://www.freedesktop.org/software/polkit/policyconfig-1.dtd">
+<policyconfig>
+  <vendor>VuvoDesk</vendor>
+  <vendor_url>https://vuvodesk.com</vendor_url>
+  <icon_name>livedesk</icon_name>
+  <action id="com.vuvodesk.update.install-signed-release">
+    <description>Install a verified VuvoDesk update</description>
+    <message>Install a newer VuvoDesk release signed by its publisher</message>
+    <!-- This exact root-owned helper accepts only signed, newer VuvoDesk debs.
+         It cannot run a command, URL, installer, or script chosen by the caller.
+         Remote and inactive sessions need updates too; no general sudo rule. -->
+    <defaults>
+      <allow_any>yes</allow_any>
+      <allow_inactive>yes</allow_inactive>
+      <allow_active>yes</allow_active>
+    </defaults>
+    <annotate key="org.freedesktop.policykit.exec.path">/usr/lib/vuvodesk-updater/vuvodesk-update-helper</annotate>
+  </action>
+</policyconfig>

package/electron/linux-updater/release-public-key.json

@@ -0,0 +1,5 @@
+{
+  "schema": 1,
+  "algorithm": "Ed25519",
+  "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAQZxBhAsKb23JDzilyvpa1O3SUBiUEn/dil+JJxe3LQ8=\n-----END PUBLIC KEY-----\n"
+}

package/electron/linux-updater/vuvodesk-update-helper

@@ -0,0 +1,264 @@
+#!/usr/bin/python3 -I
+"""Install only signed, newer VuvoDesk debs. No caller-selected command or URL."""
+import base64
+import fcntl
+import hashlib
+import json
+import os
+from pathlib import Path
+import re
+import resource
+import secrets
+import signal
+import shutil
+import stat
+import subprocess
+import sys
+import tempfile
+import time
+
+BASE = Path('/var/lib/vuvodesk-updater')
+KEY = Path('/usr/lib/vuvodesk-updater/release-public-key.json')
+FEED = Path('/opt/VuvoDesk/resources/app-update.yml')
+MAX_PACKAGE = 1024 * 1024 * 1024
+MAX_DOCUMENT = 8192
+PREPARED_TTL = 600
+VERSION = re.compile(r'(0|[1-9][0-9]{0,5})\.(0|[1-9][0-9]{0,5})\.(0|[1-9][0-9]{0,5})\Z')
+SAFE_ENV = {'PATH': '/usr/sbin:/usr/bin:/sbin:/bin', 'HOME': '/root',
+            'LANG': 'C', 'LC_ALL': 'C', 'DEBIAN_FRONTEND': 'noninteractive'}
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError('linux-update-' + reason)
+
+
+def version_tuple(value):
+    require(isinstance(value, str) and VERSION.fullmatch(value), 'version-invalid')
+    return tuple(map(int, value.split('.')))
+
+
+def safe_owned_file(path, uid, limit):
+    require(os.path.isabs(path), 'path-invalid')
+    fd = os.open(path, os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK)
+    try:
+        info = os.fstat(fd)
+        require(stat.S_ISREG(info.st_mode) and info.st_uid == uid, 'file-owner-invalid')
+        require(uid != 0 or info.st_mode & 0o022 == 0, 'trusted-file-writable')
+        require(0 < info.st_size <= limit and info.st_nlink == 1, 'file-size-or-links-invalid')
+        return os.fdopen(fd, 'rb'), info.st_size
+    except BaseException:
+        os.close(fd)
+        raise
+
+
+def read_document(path, uid=0):
+    source, size = safe_owned_file(str(path), uid, MAX_DOCUMENT)
+    with source:
+        data = source.read(MAX_DOCUMENT + 1)
+    require(len(data) == size, 'document-changed')
+    return data
+
+
+def run_checked(args, timeout=15):
+    # Fixed system tools only; never execute a caller path or preserve its env.
+    capture = args[0] != '/usr/bin/dpkg'
+    def bound_query_output():
+        resource.setrlimit(resource.RLIMIT_FSIZE, (MAX_DOCUMENT, MAX_DOCUMENT))
+    with tempfile.TemporaryFile() as output_file:
+        child = subprocess.Popen(args, stdin=subprocess.DEVNULL,
+                                 stdout=output_file if capture else subprocess.DEVNULL,
+                                 stderr=subprocess.DEVNULL, env=SAFE_ENV, cwd='/', start_new_session=True,
+                                 preexec_fn=bound_query_output if capture else None)
+        try:
+            child.wait(timeout=timeout)
+        except BaseException:
+            # Even a timed-out maintainer script must not survive its exact owner.
+            try:
+                os.killpg(child.pid, signal.SIGKILL)
+            except ProcessLookupError:
+                pass
+            child.wait()
+            raise
+        require(child.returncode == 0, 'system-check-failed')
+        output_file.seek(0)
+        output = output_file.read(MAX_DOCUMENT + 1)
+        # A writer may accept a short write at RLIMIT_FSIZE and exit zero.
+        # Reaching the cap is therefore unconfirmed/truncated output, not proof.
+        require(len(output) < MAX_DOCUMENT, 'system-output-too-large')
+        return output.decode('utf8').strip()
+
+
+def installed_version():
+    record = run_checked(['/usr/bin/dpkg-query', '-W', '-f=${Status}\n${Version}', 'vuvodesk'])
+    status, version = record.split('\n')
+    require(status == 'install ok installed', 'package-state-invalid')
+    version_tuple(version)
+    return version
+
+
+def installed_channel():
+    raw = read_document(FEED).decode('utf8')
+    matches = re.findall(r'^url: https://livedesk-desktop-updates\.lovecrdm\.workers\.dev/(dev|stable)/linux/x64\s*$', raw, re.M)
+    require(len(matches) == 1, 'installed-feed-invalid')
+    return matches[0]
+
+
+def verify_envelope(raw, scratch, channel, expected_version):
+    require(len(raw) <= MAX_DOCUMENT, 'document-too-large')
+    envelope = json.loads(raw)
+    require(set(envelope) == {'payload', 'signature'}, 'envelope-invalid')
+    payload = base64.b64decode(envelope['payload'], validate=True)
+    signature = base64.b64decode(envelope['signature'], validate=True)
+    require(len(signature) == 64 and 0 < len(payload) <= 4096, 'signature-invalid')
+    trust = json.loads(read_document(KEY))
+    require(trust['algorithm'] == 'Ed25519' and trust['schema'] == 1, 'trust-invalid')
+    (scratch / 'public.pem').write_text(trust['publicKey'], encoding='ascii')
+    (scratch / 'payload').write_bytes(payload)
+    (scratch / 'signature').write_bytes(signature)
+    run_checked(['/usr/bin/openssl', 'pkeyutl', '-verify', '-pubin', '-rawin',
+                 '-inkey', str(scratch / 'public.pem'), '-in', str(scratch / 'payload'),
+                 '-sigfile', str(scratch / 'signature')])
+    document = json.loads(payload)
+    require(set(document) == {'schema', 'package', 'version', 'arch', 'channel', 'file', 'size', 'sha256'}, 'payload-invalid')
+    require(document['schema'] == 1 and document['package'] == 'vuvodesk'
+            and document['arch'] == 'amd64' and document['channel'] == channel, 'release-scope-invalid')
+    version_tuple(document['version'])
+    require(document['version'] == expected_version, 'target-mismatch')
+    suffix = '-dev' if channel == 'dev' else ''
+    require(document['file'] == f'VuvoDesk-{expected_version}{suffix}-amd64.deb', 'filename-invalid')
+    require(type(document['size']) is int and 0 < document['size'] <= MAX_PACKAGE, 'size-invalid')
+    require(isinstance(document['sha256'], str) and re.fullmatch('[a-f0-9]{64}', document['sha256']), 'hash-invalid')
+    return document
+
+
+def verify_package(path, document):
+    digest = hashlib.sha256()
+    with path.open('rb') as source:
+        for chunk in iter(lambda: source.read(1024 * 1024), b''):
+            digest.update(chunk)
+    require(path.stat().st_size == document['size'] and digest.hexdigest() == document['sha256'], 'package-hash-mismatch')
+    for field, expected in [('Package', 'vuvodesk'), ('Version', document['version']), ('Architecture', 'amd64')]:
+        require(run_checked(['/usr/bin/dpkg-deb', '-f', str(path), field]) == expected, 'package-metadata-mismatch')
+
+
+def prepare(uid, version, package_path, envelope_path):
+    version_tuple(version)
+    previous = installed_version()
+    require(version_tuple(version) > version_tuple(previous), 'not-newer')
+    channel = installed_channel()
+    pending = BASE / 'pending'
+    if pending.exists():
+        require(not pending.is_symlink() and pending.is_dir(), 'staging-invalid')
+        state = json.loads(read_document(pending / 'state.json'))
+        require(time.time() - state['created'] > PREPARED_TTL, 'busy')
+        shutil.rmtree(pending)
+    # A failed request never leaves a prepared owner or an unbounded cache.
+    scratch = BASE / 'work'
+    if scratch.exists():
+        require(not scratch.is_symlink() and scratch.is_dir(), 'staging-invalid')
+        shutil.rmtree(scratch)
+    scratch.mkdir(mode=0o700)
+    try:
+        raw = read_document(envelope_path, uid)
+        document = verify_envelope(raw, scratch, channel, version)
+        source, size = safe_owned_file(package_path, uid, MAX_PACKAGE)
+        with source:
+            require(size == document['size'], 'package-size-mismatch')
+            require(shutil.disk_usage(BASE).free > size + 256 * 1024 * 1024, 'disk-space-low')
+            total = 0
+            with (scratch / 'package.deb').open('xb') as destination:
+                while True:
+                    chunk = source.read(min(1024 * 1024, size - total + 1))
+                    if not chunk:
+                        break
+                    total += len(chunk)
+                    require(total <= size, 'package-changed')
+                    destination.write(chunk)
+                destination.flush()
+                os.fsync(destination.fileno())
+            require(total == size, 'package-changed')
+        verify_package(scratch / 'package.deb', document)
+        # Only this signed package is inspected; do not invoke apt repair or scripts here.
+        run_checked(['/usr/bin/dpkg', '--no-act', '--install', str(scratch / 'package.deb')], 30)
+        token = secrets.token_hex(16)
+        state = {'token': token, 'uid': uid, 'created': time.time(), 'previous': previous,
+                 'document': document}
+        (scratch / 'state.json').write_text(json.dumps(state), encoding='utf8')
+        os.rename(scratch, pending)
+    finally:
+        if scratch.exists():
+            shutil.rmtree(scratch)
+    return {'state': 'prepared', 'token': token, 'version': version}
+
+
+def apply_prepared(uid, token):
+    require(re.fullmatch('[a-f0-9]{32}', token), 'token-invalid')
+    pending = BASE / 'pending'
+    state = json.loads(read_document(pending / 'state.json'))
+    require(state['uid'] == uid and secrets.compare_digest(state['token'], token), 'owner-mismatch')
+    require(0 <= time.time() - state['created'] <= PREPARED_TTL, 'prepared-expired')
+    document = state['document']
+    require(installed_channel() == document['channel'], 'channel-changed')
+    require(installed_version() == state['previous'], 'installed-version-changed')
+    verify_package(pending / 'package.deb', document)
+    # Lock ownership stays with this process throughout dpkg. No restart command,
+    # shell, arbitrary args, dependency repair, downgrade, or auth data access.
+    try:
+        run_checked(['/usr/bin/dpkg', '--force-confdef', '--force-confold', '--install',
+                     str(pending / 'package.deb')], 300)
+        require(installed_version() == document['version'], 'installed-proof-missing')
+    finally:
+        shutil.rmtree(pending)
+    return {'state': 'installed', 'version': document['version']}
+
+
+def cancel(uid, token):
+    require(re.fullmatch('[a-f0-9]{32}', token), 'token-invalid')
+    pending = BASE / 'pending'
+    if pending.exists():
+        state = json.loads(read_document(pending / 'state.json'))
+        require(state['uid'] == uid and secrets.compare_digest(state['token'], token), 'owner-mismatch')
+        shutil.rmtree(pending)
+    return {'state': 'cancelled'}
+
+
+def main():
+    require(os.geteuid() == 0, 'administrator-helper-required')
+    uid = int(os.environ.get('PKEXEC_UID', '-1'))
+    require(uid > 0, 'caller-invalid')
+    os.environ.clear()
+    os.environ.update(SAFE_ENV)
+    os.umask(0o077)
+    os.chdir('/')
+    require(len(sys.argv) in (3, 5), 'arguments-invalid')
+    action = sys.argv[1]
+    require((action == 'prepare' and len(sys.argv) == 5)
+            or (action in ('install', 'cancel') and len(sys.argv) == 3), 'arguments-invalid')
+    BASE.mkdir(mode=0o700, exist_ok=True)
+    info = BASE.lstat()
+    require(stat.S_ISDIR(info.st_mode) and info.st_uid == 0 and info.st_mode & 0o077 == 0, 'staging-owner-invalid')
+    fd = os.open(BASE / 'lock', os.O_CREAT | os.O_RDWR | os.O_NOFOLLOW, 0o600)
+    with os.fdopen(fd, 'w') as lock:
+        fcntl.flock(lock, fcntl.LOCK_EX | fcntl.LOCK_NB)
+        def deadline(_signal, _frame):
+            raise ValueError('linux-update-deadline')
+        signal.signal(signal.SIGALRM, deadline)
+        signal.alarm(325 if action == 'install' else 120)
+        if action == 'prepare':
+            result = prepare(uid, *sys.argv[2:])
+        elif action == 'install':
+            result = apply_prepared(uid, sys.argv[2])
+        else:
+            result = cancel(uid, sys.argv[2])
+        print(json.dumps(result), flush=True)
+        signal.alarm(0)
+
+
+if __name__ == '__main__':
+    try:
+        main()
+    except BaseException as error:
+        code = str(error) if isinstance(error, ValueError) and str(error).startswith('linux-update-') else 'linux-update-helper-failed'
+        print(json.dumps({'state': 'error', 'error': code}), flush=True)
+        sys.exit(1)

package/electron/update-manager.mjs

@@ -3,6 +3,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { EventEmitter } from 'node:events';
 import { resolveDesktopUpdateFeed } from './update-feed-resolver.mjs';
+import { signedDebUpdaterClass } from './linux-signed-updater.mjs';
 import {
   installBoundedMultipartRangeBatching,
   markUpdaterWithBoundedMultipartRangeBatching,
@@ -36,14 +37,20 @@ export function createPlatformProductUpdater(platform = process.platform) {
     return updater;
   }
   if (platform === 'darwin') return new module.MacUpdater();
+  let packageType = '';
   try {
-    const packageType = String(readFileSync(join(process.resourcesPath, 'package-type'), 'utf8')).trim();
-    if (packageType === 'deb') return new module.DebUpdater();
-    if (packageType === 'rpm') return new module.RpmUpdater();
-    if (packageType === 'pacman') return new module.PacmanUpdater();
+    packageType = String(readFileSync(join(process.resourcesPath, 'package-type'), 'utf8')).trim();
   } catch {
     // AppImage is the Linux fallback used by electron-updater itself.
   }
+  if (packageType === 'deb') {
+    const SignedDebUpdater = signedDebUpdaterClass(module.DebUpdater, {
+      noteQuit: () => require('electron').autoUpdater.emit('before-quit-for-update')
+    });
+    return new SignedDebUpdater();
+  }
+  if (packageType === 'rpm') return new module.RpmUpdater();
+  if (packageType === 'pacman') return new module.PacmanUpdater();
   return new module.AppImageUpdater();
 }
 
@@ -883,6 +890,7 @@ export function createProductUpdateManager({
       }
       installOperationPending = true;
       const operation = (async () => {
+        let drainStarted = false;
         try {
           if (status.downloaded
             && (!status.downloadedVersion || status.downloadedVersion !== status.availableVersion)) {
@@ -912,22 +920,38 @@ export function createProductUpdateManager({
             automaticInstallFailure = null;
             updater.autoInstallOnAppQuit = true;
           }
+          // Reject an unsigned/wrong-owner Linux package while the current
+          // runtime is still healthy. Only a root-owned verified copy may
+          // cross the subsequent drain/install boundary.
+          await updater.prepareVerifiedInstall?.({ version: installTargetVersion, feedUrl: feed.url });
           // The updater may launch its installer synchronously from
           // quitAndInstall. Prove the exact runtime descendant tree is already
-          // zero before allowing that replacement process to exist.
-          await beforeInstall();
+          // zero before allowing that replacement process to exist.
+          drainStarted = true;
+          await beforeInstall();
           installRuntimePrepared = true;
           publish({ state: 'installing', error: '', errorCode: '' });
           // Long-running desktop Clients must not stop at the assisted NSIS
           // wizard after the runtime has already shut down for replacement.
-          updater.quitAndInstall(true, true);
+          await updater.quitAndInstall(true, true);
           // BaseUpdater can emit a synchronous error and return instead of
           // throwing. Keep this install owner locked until runtime recovery
           // completes, so Retry cannot begin a second pre-install drain.
           if (installRecoveryPromise) await installRecoveryPromise;
           return snapshot();
         } catch (error) {
-          const failure = rememberInstallerFailure(error);
+          try {
+            await updater.cancelVerifiedInstall?.();
+          } catch {
+            publish({ preparedCleanupUnconfirmed: true });
+          }
+          // A signature fetch or package-manager busy check before drain is
+          // safe to retry on the existing recurring cadence. Only a started
+          // drain/installer blocks repeated automatic shutdown of this target.
+          const failure = drainStarted ? rememberInstallerFailure(error) : {
+            state: 'error', error: String(error?.message || error),
+            errorCode: 'desktop-update-preparation-failed'
+          };
           await recoverPreparedRuntime(error);
           if (!status.reopenRequired) {
             const message = String(error?.message || error);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "livedesk",
-  "version": "0.1.701",
+  "version": "0.1.702",
   "livedeskClientVersion": "0.1.277",
   "buildFlavor": "production",
   "description": "VuvoDesk Hub and client launcher",

package/web/dist/app.html

@@ -52,7 +52,7 @@
       .vuvodesk-static-boot [hidden] { display: none; }
       @keyframes vuvodesk-static-boot-spin { to { transform: rotate(360deg); } }
     </style>
-    <script type="module" crossorigin src="/assets/app-CUM2wTSb.js" data-vuvodesk-entry></script>
+    <script type="module" crossorigin src="/assets/app-CgvQQda5.js" data-vuvodesk-entry></script>
     <link rel="modulepreload" crossorigin href="/assets/public-site-routing-pddZbLCj.js">
     <link rel="modulepreload" crossorigin href="/assets/pwa-bootstrap-ljOQTt2e.js">
   </head>

package/web/dist/app.webmanifest

@@ -4,7 +4,7 @@
   "short_name": "VuvoDesk",
   "description": "Monitor and control your VuvoDesk computers from your phone.",
   "lang": "en",
-  "start_url": "/app?pwa=0.1.701",
+  "start_url": "/app?pwa=0.1.702",
   "scope": "/",
   "display": "standalone",
   "orientation": "any",

package/web/dist/assets/{AgentSettingsTab-D0oebRk-.js → AgentSettingsTab-BOUun4gQ.js}

@@ -1 +1 @@
-import{j as t}from"./pwa-startup-C8kDd3Vd.js";import{r as c,d as A,S as q,T as I,e as z}from"./icons-BwhnWKHR.js";import{h as x}from"./MonitorStackIcon-BD7Yn-Z9.js";import"./pwa-bootstrap-ljOQTt2e.js";const E={enabled:!0};function w(i){return{enabled:i?.enabled===!0}}async function L(i,p,f){let l=null;for(let s=0;s<2;s+=1){const g=await x("/api/settings",{signal:f},p);if(g.settings.agent?.enabled===i)return;try{await x("/api/settings",{method:"PATCH",signal:f,body:JSON.stringify({revision:g.revision,agent:{enabled:i}})},p);return}catch(a){if(l=a,s!==0||!String(a instanceof Error?a.message:a).startsWith("409 "))throw a}}throw l}function H({hubUrl:i,showToast:p}){const[f,l]=c.useState(E),[s,g]=c.useState(null),[a,m]=c.useState(""),[j,v]=c.useState(""),[y,d]=c.useState(""),b=c.useRef(0),u=c.useRef(null);c.useEffect(()=>{let e=!0;u.current?.abort();const n=new AbortController;u.current=n;const h=++b.current;return g(null),l(E),m(""),d(""),v(""),x("/api/settings/agent",{signal:n.signal},i).then(o=>{!e||n.signal.aborted||h!==b.current||(g(o.settings),l(w(o.settings)))}).catch(o=>{e&&!n.signal.aborted&&h===b.current&&d(o instanceof Error?o.message:String(o))}),()=>{e=!1,n.abort(),u.current===n&&(u.current=null)}},[i]);const k=(e,n)=>l(h=>({...h,[e]:n})),C=e=>{g(e),l(w(e))},S=()=>({generation:b.current,controller:u.current}),r=e=>e.generation===b.current&&e.controller!==null&&e.controller===u.current&&!e.controller.signal.aborted,R=async()=>{if(!s){d("Agent settings are not available yet.");return}const e=S();if(r(e)){m("save"),d(""),v("");try{if(await L(f.enabled,i,e.controller.signal),!r(e))return;const n=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(n.settings),v("Codex Agent settings saved.")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},T=async()=>{const e=S();if(r(e)){m("test"),d(""),v("");try{const n=await x("/api/settings/agent/test",{method:"POST",signal:e.controller.signal,body:JSON.stringify({})},i);if(!r(e))return;const h=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(h.settings);const o=Number.isFinite(n.connection?.latencyMs)?Math.max(0,Math.round(n.connection.latencyMs)):null;p(`Codex Agent connection verified${o!==null?` in ${o} ms.`:"."}`,"success")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},D=s?.codexInstallation==="installed"&&s.codexAuth==="signed-in",N=s!==null;return t.jsxs("div",{className:"settings-tab-content agent-settings-content",children:[t.jsxs("section",{className:"settings-section-card agent-enable-card",children:[t.jsxs("label",{className:"settings-toggle agent-enable-toggle",children:[t.jsx("input",{type:"checkbox",checked:f.enabled,onChange:e=>k("enabled",e.target.checked),disabled:!N||a!==""}),t.jsx("span",{children:"Enable Codex Agent"})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," Enabled by default. Agent commands use only the Codex account signed in on this Hub."]})]}),y&&t.jsx("div",{className:"agent-settings-alert error",role:"alert",children:y}),j&&t.jsx("div",{className:"agent-settings-alert success",role:"status",children:j}),t.jsxs("section",{className:"settings-section-card",children:[t.jsxs("div",{className:"settings-section-heading",children:[t.jsxs("div",{children:[t.jsx("span",{children:"Connection"}),t.jsx("h3",{children:"Codex SDK / CLI"})]}),t.jsx(q,{size:20})]}),t.jsxs("div",{className:"agent-connection-row",children:[t.jsx("span",{className:`agent-connection-dot ${D?"connected":s?.codexAuth==="not-signed-in"?"unavailable":""}`}),t.jsx("span",{children:s?.codexInstallation==="not-installed"?"Codex SDK not installed":s?.codexAuth==="signed-in"?"Codex CLI signed in":s?.codexAuth==="not-signed-in"?"Codex CLI sign-in required":"Codex status not tested"}),t.jsxs("button",{className:"settings-reset",onClick:()=>{T()},disabled:a!=="",type:"button",children:[t.jsx(I,{size:15})," ",a==="test"?"Testing":"Test connection"]})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," The Hub uses the installed Codex SDK / CLI to plan approved commands and run them through VuvoDesk Agent tools on selected computers. VuvoDesk never asks for separate credentials."]})]}),t.jsx("div",{className:"settings-action-row agent-settings-actions",children:t.jsxs("button",{className:"text-button primary",onClick:()=>{R()},disabled:!N||a!=="",type:"button",children:[t.jsx(z,{size:15})," ",a==="save"?"Saving":"Save Agent settings"]})})]})}export{H as AgentSettingsTab};
+import{j as t}from"./pwa-startup-C8kDd3Vd.js";import{r as c,d as A,S as q,T as I,e as z}from"./icons-BwhnWKHR.js";import{h as x}from"./MonitorStackIcon-QQhyrZEW.js";import"./pwa-bootstrap-ljOQTt2e.js";const E={enabled:!0};function w(i){return{enabled:i?.enabled===!0}}async function L(i,p,f){let l=null;for(let s=0;s<2;s+=1){const g=await x("/api/settings",{signal:f},p);if(g.settings.agent?.enabled===i)return;try{await x("/api/settings",{method:"PATCH",signal:f,body:JSON.stringify({revision:g.revision,agent:{enabled:i}})},p);return}catch(a){if(l=a,s!==0||!String(a instanceof Error?a.message:a).startsWith("409 "))throw a}}throw l}function H({hubUrl:i,showToast:p}){const[f,l]=c.useState(E),[s,g]=c.useState(null),[a,m]=c.useState(""),[j,v]=c.useState(""),[y,d]=c.useState(""),b=c.useRef(0),u=c.useRef(null);c.useEffect(()=>{let e=!0;u.current?.abort();const n=new AbortController;u.current=n;const h=++b.current;return g(null),l(E),m(""),d(""),v(""),x("/api/settings/agent",{signal:n.signal},i).then(o=>{!e||n.signal.aborted||h!==b.current||(g(o.settings),l(w(o.settings)))}).catch(o=>{e&&!n.signal.aborted&&h===b.current&&d(o instanceof Error?o.message:String(o))}),()=>{e=!1,n.abort(),u.current===n&&(u.current=null)}},[i]);const k=(e,n)=>l(h=>({...h,[e]:n})),C=e=>{g(e),l(w(e))},S=()=>({generation:b.current,controller:u.current}),r=e=>e.generation===b.current&&e.controller!==null&&e.controller===u.current&&!e.controller.signal.aborted,R=async()=>{if(!s){d("Agent settings are not available yet.");return}const e=S();if(r(e)){m("save"),d(""),v("");try{if(await L(f.enabled,i,e.controller.signal),!r(e))return;const n=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(n.settings),v("Codex Agent settings saved.")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},T=async()=>{const e=S();if(r(e)){m("test"),d(""),v("");try{const n=await x("/api/settings/agent/test",{method:"POST",signal:e.controller.signal,body:JSON.stringify({})},i);if(!r(e))return;const h=await x("/api/settings/agent",{signal:e.controller.signal},i);if(!r(e))return;C(h.settings);const o=Number.isFinite(n.connection?.latencyMs)?Math.max(0,Math.round(n.connection.latencyMs)):null;p(`Codex Agent connection verified${o!==null?` in ${o} ms.`:"."}`,"success")}catch(n){r(e)&&d(n instanceof Error?n.message:String(n))}finally{r(e)&&m("")}}},D=s?.codexInstallation==="installed"&&s.codexAuth==="signed-in",N=s!==null;return t.jsxs("div",{className:"settings-tab-content agent-settings-content",children:[t.jsxs("section",{className:"settings-section-card agent-enable-card",children:[t.jsxs("label",{className:"settings-toggle agent-enable-toggle",children:[t.jsx("input",{type:"checkbox",checked:f.enabled,onChange:e=>k("enabled",e.target.checked),disabled:!N||a!==""}),t.jsx("span",{children:"Enable Codex Agent"})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," Enabled by default. Agent commands use only the Codex account signed in on this Hub."]})]}),y&&t.jsx("div",{className:"agent-settings-alert error",role:"alert",children:y}),j&&t.jsx("div",{className:"agent-settings-alert success",role:"status",children:j}),t.jsxs("section",{className:"settings-section-card",children:[t.jsxs("div",{className:"settings-section-heading",children:[t.jsxs("div",{children:[t.jsx("span",{children:"Connection"}),t.jsx("h3",{children:"Codex SDK / CLI"})]}),t.jsx(q,{size:20})]}),t.jsxs("div",{className:"agent-connection-row",children:[t.jsx("span",{className:`agent-connection-dot ${D?"connected":s?.codexAuth==="not-signed-in"?"unavailable":""}`}),t.jsx("span",{children:s?.codexInstallation==="not-installed"?"Codex SDK not installed":s?.codexAuth==="signed-in"?"Codex CLI signed in":s?.codexAuth==="not-signed-in"?"Codex CLI sign-in required":"Codex status not tested"}),t.jsxs("button",{className:"settings-reset",onClick:()=>{T()},disabled:a!=="",type:"button",children:[t.jsx(I,{size:15})," ",a==="test"?"Testing":"Test connection"]})]}),t.jsxs("p",{className:"settings-help",children:[t.jsx(A,{size:12})," The Hub uses the installed Codex SDK / CLI to plan approved commands and run them through VuvoDesk Agent tools on selected computers. VuvoDesk never asks for separate credentials."]})]}),t.jsx("div",{className:"settings-action-row agent-settings-actions",children:t.jsxs("button",{className:"text-button primary",onClick:()=>{R()},disabled:!N||a!=="",type:"button",children:[t.jsx(z,{size:15})," ",a==="save"?"Saving":"Save Agent settings"]})})]})}export{H as AgentSettingsTab};

package/web/dist/assets/{AgentsPage-BBj64SpA.js → AgentsPage-Cx7U-mYh.js}

@@ -1,4 +1,4 @@
-import{j as t}from"./pwa-startup-C8kDd3Vd.js";import{r as d,ae as ht,af as Ce,a3 as yt,y as ee,X as xe,ag as vt,ah as wt,ai as Ze,aj as kt,ak as bt,al as Se,b as H,am as Ct,O as xt,an as _e,m as St,ao as jt,S as Je,ap as At,N as Rt,c as Nt,aq as Pt,ar as It,A as Tt,as as ue,M as Xe}from"./icons-BwhnWKHR.js";import{r as Et,h as F}from"./MonitorStackIcon-BD7Yn-Z9.js";import"./pwa-bootstrap-ljOQTt2e.js";const Ot=d.forwardRef(function({value:s,onChange:n,onSubmit:r,onOpenSuggestedTasks:i,suggestedOpen:m=!1,suggestedTaskCount:c,disabled:v=!1,placeholder:S="Ask VuvoDesk to work across your machines...",compact:g=!1},x){return t.jsxs("form",{className:"agents-composer",onSubmit:w=>{w.preventDefault(),r()},children:[t.jsx("button",{className:`agents-suggested-trigger ${m?"active":""}`,type:"button","aria-label":c===void 0?"Open Suggested tasks":`Open Suggested tasks (${c} available)`,"aria-expanded":m,onClick:i,disabled:v,children:t.jsx(ht,{size:17})}),t.jsx("textarea",{ref:x,value:s,onChange:w=>n(w.target.value.slice(0,4e3)),placeholder:S,"aria-label":"Ask VuvoDesk",rows:g?1:2,disabled:v}),t.jsxs("button",{className:"agents-run-button",type:"submit",disabled:v||!s.trim(),children:[v?t.jsx(Ce,{className:"spin",size:16}):t.jsx(yt,{size:16}),v?"Running":"Run"]})]})}),$t=["read","processControl","serviceControl","applicationControl","fileRead","fileWrite","fileDelete","shell","script","softwareInstall","network","systemPower","systemConfiguration","userAccount"];function de(e){return e.deviceName?.trim()||e.hostname?.trim()||e.deviceId}function pe(e){return e.connected!==!0?!1:e.synthetic===!0?!0:!e.channels||e.channels.control===!0}function Dt(e){return e==="running"||e==="completed"||e==="failed"||e==="cancelled"?e:"queued"}function _t(e){switch(e){case"process.list":return"Process list";case"system.health":return"System health";case"gpu.status":return"GPU status";case"disk.status":return"Disk status";case"service.status":return"Service status";case"diagnostics.collect":return"Diagnostics";case"process.control":return"Process control";case"service.control":return"Service control";case"application.launch":return"Launch application";case"application.close":return"Close application";case"file.read":return"Read file";case"file.write":return"Write file";case"file.delete":return"Delete file";case"file.list":return"List directory";case"command.run":return"Run command";case"script.run":return"Run script";case"software.install":return"Install software";case"network.status":return"Network status";case"system.power":return"Power action";case"system.configure":return"System configuration";case"logs.collect":return"Collect logs"}}const Mt=64*1024,Me="[Earlier log output hidden by PWA display limit.]",Qe=new TextEncoder,zt=new TextDecoder("utf-8",{fatal:!0}),ze=16*1024,Lt=200,Le="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Ft="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Bt="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|credential|password|secret|cookie)",qt=/\b(?:sk-(?:proj-|ant-)?[A-Za-z0-9_-]{8,}|gh[pousr]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|(?:AKIA|ASIA)[A-Z0-9]{16}|AIza[A-Za-z0-9_-]{35}|npm_[A-Za-z0-9]{8,}|xox[a-z]-[A-Za-z0-9-]{8,}|(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{8,})\b/g;function Ut(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Fe(e){return Qe.encode(e).byteLength}function Be(e,s){const n=Qe.encode(e);if(n.byteLength<=s)return{value:e,truncated:!1};let r=n.byteLength-s;for(;r<n.byteLength&&(n[r]&192)===128;)r+=1;let i=zt.decode(n.subarray(r));const m=i.indexOf(`
+import{j as t}from"./pwa-startup-C8kDd3Vd.js";import{r as d,ae as ht,af as Ce,a3 as yt,y as ee,X as xe,ag as vt,ah as wt,ai as Ze,aj as kt,ak as bt,al as Se,b as H,am as Ct,O as xt,an as _e,m as St,ao as jt,S as Je,ap as At,N as Rt,c as Nt,aq as Pt,ar as It,A as Tt,as as ue,M as Xe}from"./icons-BwhnWKHR.js";import{r as Et,h as F}from"./MonitorStackIcon-QQhyrZEW.js";import"./pwa-bootstrap-ljOQTt2e.js";const Ot=d.forwardRef(function({value:s,onChange:n,onSubmit:r,onOpenSuggestedTasks:i,suggestedOpen:m=!1,suggestedTaskCount:c,disabled:v=!1,placeholder:S="Ask VuvoDesk to work across your machines...",compact:g=!1},x){return t.jsxs("form",{className:"agents-composer",onSubmit:w=>{w.preventDefault(),r()},children:[t.jsx("button",{className:`agents-suggested-trigger ${m?"active":""}`,type:"button","aria-label":c===void 0?"Open Suggested tasks":`Open Suggested tasks (${c} available)`,"aria-expanded":m,onClick:i,disabled:v,children:t.jsx(ht,{size:17})}),t.jsx("textarea",{ref:x,value:s,onChange:w=>n(w.target.value.slice(0,4e3)),placeholder:S,"aria-label":"Ask VuvoDesk",rows:g?1:2,disabled:v}),t.jsxs("button",{className:"agents-run-button",type:"submit",disabled:v||!s.trim(),children:[v?t.jsx(Ce,{className:"spin",size:16}):t.jsx(yt,{size:16}),v?"Running":"Run"]})]})}),$t=["read","processControl","serviceControl","applicationControl","fileRead","fileWrite","fileDelete","shell","script","softwareInstall","network","systemPower","systemConfiguration","userAccount"];function de(e){return e.deviceName?.trim()||e.hostname?.trim()||e.deviceId}function pe(e){return e.connected!==!0?!1:e.synthetic===!0?!0:!e.channels||e.channels.control===!0}function Dt(e){return e==="running"||e==="completed"||e==="failed"||e==="cancelled"?e:"queued"}function _t(e){switch(e){case"process.list":return"Process list";case"system.health":return"System health";case"gpu.status":return"GPU status";case"disk.status":return"Disk status";case"service.status":return"Service status";case"diagnostics.collect":return"Diagnostics";case"process.control":return"Process control";case"service.control":return"Service control";case"application.launch":return"Launch application";case"application.close":return"Close application";case"file.read":return"Read file";case"file.write":return"Write file";case"file.delete":return"Delete file";case"file.list":return"List directory";case"command.run":return"Run command";case"script.run":return"Run script";case"software.install":return"Install software";case"network.status":return"Network status";case"system.power":return"Power action";case"system.configure":return"System configuration";case"logs.collect":return"Collect logs"}}const Mt=64*1024,Me="[Earlier log output hidden by PWA display limit.]",Qe=new TextEncoder,zt=new TextDecoder("utf-8",{fatal:!0}),ze=16*1024,Lt=200,Le="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Ft="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|private[_-]?key|connection[_-]?string|credential|password|passwd|secret|cookie|set-cookie)",Bt="(?:access[_-]?(?:token|key)|refresh[_-]?token|id[_-]?token|pair[_-]?(?:token|key)|token|authorization|api[_-]?key|credential|password|secret|cookie)",qt=/\b(?:sk-(?:proj-|ant-)?[A-Za-z0-9_-]{8,}|gh[pousr]_[A-Za-z0-9]{8,}|github_pat_[A-Za-z0-9_]{8,}|(?:AKIA|ASIA)[A-Z0-9]{16}|AIza[A-Za-z0-9_-]{35}|npm_[A-Za-z0-9]{8,}|xox[a-z]-[A-Za-z0-9-]{8,}|(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{8,})\b/g;function Ut(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:null}function Fe(e){return Qe.encode(e).byteLength}function Be(e,s){const n=Qe.encode(e);if(n.byteLength<=s)return{value:e,truncated:!1};let r=n.byteLength-s;for(;r<n.byteLength&&(n[r]&192)===128;)r+=1;let i=zt.decode(n.subarray(r));const m=i.indexOf(`
 `);return m>=0&&m<i.length-1&&(i=i.slice(m+1)),{value:i,truncated:!0}}function et(e){return e.replace(/-----BEGIN [^-\r\n]*PRIVATE KEY-----[\s\S]*?-----END [^-\r\n]*PRIVATE KEY-----/gi,"[REDACTED PRIVATE KEY]").replace(/\b(?:proxy-)?authorization\s*[:=]\s*[^\r\n]*|\b(?:set-)?cookie\s*[:=]\s*[^\r\n]*/gi,"credential-header=[REDACTED]").replace(/\bBearer\s+(?:"[^"]*"|'[^']*'|[^\s,;]+)/gi,"Bearer [REDACTED]").replace(new RegExp(`("${Le}"\\s*:\\s*")[^"\\r\\n]*(")`,"gi"),"$1[REDACTED]$2").replace(new RegExp(`('${Le}'\\s*:\\s*')[^'\\r\\n]*(')`,"gi"),"$1[REDACTED]$2").replace(new RegExp(`((?:[A-Za-z0-9.-]+[_-])?${Ft}\\s*[:=]\\s*)(?!\\[REDACTED\\])[^\\s,;&]+`,"gi"),"$1[REDACTED]").replace(new RegExp(`([?&]${Bt}=)[^&\\s]+`,"gi"),"$1[REDACTED]").replace(/\b(?:eyJ|[A-Za-z0-9_-]{8,}\.)[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,"[REDACTED TOKEN]").replace(qt,"[REDACTED KEY]")}function Gt(e){return typeof e!="string"?"source unknown":et(e).replace(/[\u0000-\u001f\u007f]/g," ").trim().slice(0,64)||"source unknown"}function qe(e){return typeof e=="number"&&Number.isSafeInteger(e)&&e>=0?Math.floor(e):null}function Vt(e){if(typeof e!="string"||e.length===0)return{output:"",displayTruncated:!1};const s=Be(e.replace(/\r\n?/g,`
 `),Mt);let n=et(s.value).replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g," ").trim(),r=s.truncated;const i=n?n.split(`
 `):[];if(i.length>Lt-1&&(n=i.slice(-199).join(`

package/web/dist/assets/{CaptureGallery-DF6gZHy0.js → CaptureGallery-DNRbC4Nm.js}

@@ -1 +1 @@
-import{j as e}from"./pwa-startup-C8kDd3Vd.js";import{r as i,R as x,E as j,D as u,f as g,h as f}from"./icons-BwhnWKHR.js";import{l as b,c as d,d as y}from"./HubApp-DJsiVqWP.js";import"./pwa-bootstrap-ljOQTt2e.js";import"./public-site-routing-pddZbLCj.js";import"./MonitorStackIcon-BD7Yn-Z9.js";import"./supabase-C7qjtLN3.js";import"./frame-lifecycle-D-BxeTQV.js";function z({hubUrl:s,onToast:n}){const[o,m]=i.useState([]),[h,c]=i.useState(!0),r=i.useCallback(async()=>{c(!0);try{m((await b(s)).captures||[])}catch(t){n(t instanceof Error?t.message:String(t))}finally{c(!1)}},[s,n]);i.useEffect(()=>{r()},[r]);const p=async t=>{const a=d(t.id,s);if(navigator.share)try{await navigator.share({title:t.fileName,url:a});return}catch{}window.open(a,"_blank","noopener,noreferrer")};return e.jsxs("section",{className:"capture-gallery",children:[e.jsxs("header",{children:[e.jsxs("div",{children:[e.jsx("span",{className:"settings-eyebrow",children:"Capture Gallery"}),e.jsx("h2",{children:"Saved captures"})]}),e.jsxs("button",{className:"text-button",onClick:()=>{r()},type:"button",children:[e.jsx(x,{size:15})," Refresh"]})]}),h?e.jsx("p",{className:"settings-help",children:"Loading captures..."}):o.length===0?e.jsx("p",{className:"settings-help",children:"No captures saved yet."}):e.jsx("div",{className:"capture-gallery-grid",children:o.map(t=>{const a=d(t.id,s);return e.jsxs("article",{className:"capture-gallery-card",children:[t.mimeType.startsWith("image/")?e.jsx("img",{src:a,alt:t.target.label}):e.jsx("video",{src:a,controls:!0,preload:"metadata"}),e.jsxs("div",{className:"capture-gallery-card-body",children:[e.jsx("strong",{children:t.fileName}),e.jsxs("small",{children:[t.target.label," · ",new Date(t.createdAt).toLocaleString()," · ",Math.ceil(t.sizeBytes/1024)," KB"]}),e.jsxs("div",{children:[e.jsx("button",{className:"icon-button",title:"Open","aria-label":"Open",onClick:()=>window.open(a,"_blank","noopener,noreferrer"),type:"button",children:e.jsx(j,{size:15})}),e.jsx("a",{className:"icon-button",title:"Download","aria-label":"Download",href:`${a}?download=1`,download:t.fileName,children:e.jsx(u,{size:15})}),e.jsx("button",{className:"icon-button",title:"Share","aria-label":"Share",onClick:()=>{p(t)},type:"button",children:e.jsx(g,{size:15})}),e.jsx("button",{className:"icon-button danger",title:"Delete","aria-label":"Delete",onClick:()=>{window.confirm(`Delete ${t.fileName}?`)&&y(t.id,s).then(()=>r()).catch(l=>n(l instanceof Error?l.message:String(l)))},type:"button",children:e.jsx(f,{size:15})})]})]})]},t.id)})})]})}export{z as CaptureGallery};
+import{j as e}from"./pwa-startup-C8kDd3Vd.js";import{r as i,R as x,E as j,D as u,f as g,h as f}from"./icons-BwhnWKHR.js";import{l as b,c as d,d as y}from"./HubApp-CbKj-EB_.js";import"./pwa-bootstrap-ljOQTt2e.js";import"./public-site-routing-pddZbLCj.js";import"./MonitorStackIcon-QQhyrZEW.js";import"./supabase-C7qjtLN3.js";import"./frame-lifecycle-D-BxeTQV.js";function z({hubUrl:s,onToast:n}){const[o,m]=i.useState([]),[h,c]=i.useState(!0),r=i.useCallback(async()=>{c(!0);try{m((await b(s)).captures||[])}catch(t){n(t instanceof Error?t.message:String(t))}finally{c(!1)}},[s,n]);i.useEffect(()=>{r()},[r]);const p=async t=>{const a=d(t.id,s);if(navigator.share)try{await navigator.share({title:t.fileName,url:a});return}catch{}window.open(a,"_blank","noopener,noreferrer")};return e.jsxs("section",{className:"capture-gallery",children:[e.jsxs("header",{children:[e.jsxs("div",{children:[e.jsx("span",{className:"settings-eyebrow",children:"Capture Gallery"}),e.jsx("h2",{children:"Saved captures"})]}),e.jsxs("button",{className:"text-button",onClick:()=>{r()},type:"button",children:[e.jsx(x,{size:15})," Refresh"]})]}),h?e.jsx("p",{className:"settings-help",children:"Loading captures..."}):o.length===0?e.jsx("p",{className:"settings-help",children:"No captures saved yet."}):e.jsx("div",{className:"capture-gallery-grid",children:o.map(t=>{const a=d(t.id,s);return e.jsxs("article",{className:"capture-gallery-card",children:[t.mimeType.startsWith("image/")?e.jsx("img",{src:a,alt:t.target.label}):e.jsx("video",{src:a,controls:!0,preload:"metadata"}),e.jsxs("div",{className:"capture-gallery-card-body",children:[e.jsx("strong",{children:t.fileName}),e.jsxs("small",{children:[t.target.label," · ",new Date(t.createdAt).toLocaleString()," · ",Math.ceil(t.sizeBytes/1024)," KB"]}),e.jsxs("div",{children:[e.jsx("button",{className:"icon-button",title:"Open","aria-label":"Open",onClick:()=>window.open(a,"_blank","noopener,noreferrer"),type:"button",children:e.jsx(j,{size:15})}),e.jsx("a",{className:"icon-button",title:"Download","aria-label":"Download",href:`${a}?download=1`,download:t.fileName,children:e.jsx(u,{size:15})}),e.jsx("button",{className:"icon-button",title:"Share","aria-label":"Share",onClick:()=>{p(t)},type:"button",children:e.jsx(g,{size:15})}),e.jsx("button",{className:"icon-button danger",title:"Delete","aria-label":"Delete",onClick:()=>{window.confirm(`Delete ${t.fileName}?`)&&y(t.id,s).then(()=>r()).catch(l=>n(l instanceof Error?l.message:String(l)))},type:"button",children:e.jsx(f,{size:15})})]})]})]},t.id)})})]})}export{z as CaptureGallery};