c1c60d5434
Some checks failed
Security / Security check (push) Failing after 1s
Settings dialog's Theme Plugin section is now a grid of swatched tiles: - Built-in (none) — falls back to FaiTheme.light/.dark - One tile per installed studio.theme.* plugin, each showing the plugin's primary/secondary/tertiary as live colour dots. Tile loads its preview lazily so a dozen installed themes don't block the picker. - Custom — opens a colour-picker dialog with 12 curated Material presets + a hex input + live preview. Selecting applies ColorScheme.fromSeed for both brightnesses. main.dart's _pluginThemes parses a 'custom:#RRGGBB' sigil in the same notifier slot as plugin capability ids, so the existing persistence + restoration paths cover the custom case with no new state. Bumps editor to 0.11.0 (type-checked port connections + dynamic card width fix + card-height border allowance) and Studio to 0.58.0. Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>
67 lines
2.4 KiB
Dart
67 lines
2.4 KiB
Dart
import 'dart:io';
|
|
import 'package:path/path.dart' as p;
|
|
|
|
/// Operator-managed registry auth token, kept at
|
|
/// `~/.fai/registry-token` (mode 0600 on Unix). The hub reads
|
|
/// this file at install time when `FAI_REGISTRY_TOKEN` is unset
|
|
/// — see `download_to_temp` in `crates/fai_hub/src/lib.rs`.
|
|
///
|
|
/// Studio writes the file directly so a fresh install never
|
|
/// requires the operator to fiddle with shell env vars.
|
|
class RegistryToken {
|
|
static String _faiHome() {
|
|
final home =
|
|
Platform.environment['HOME'] ?? Platform.environment['USERPROFILE'];
|
|
if (home == null || home.isEmpty) {
|
|
throw StateError('Cannot resolve home directory (no HOME / USERPROFILE)');
|
|
}
|
|
return p.join(home, '.fai');
|
|
}
|
|
|
|
/// Absolute path to the token file.
|
|
static String get path => p.join(_faiHome(), 'registry-token');
|
|
|
|
/// True iff the file exists with a non-empty trimmed body.
|
|
static Future<bool> isConfigured() async {
|
|
final f = File(path);
|
|
if (!await f.exists()) return false;
|
|
final content = await f.readAsString();
|
|
return content.trim().isNotEmpty;
|
|
}
|
|
|
|
/// Length of the trimmed token, or null when the file is
|
|
/// missing / empty. Used for status display ("Configured
|
|
/// (40 chars)") without ever surfacing the secret.
|
|
static Future<int?> charCount() async {
|
|
final f = File(path);
|
|
if (!await f.exists()) return null;
|
|
final content = await f.readAsString();
|
|
final trimmed = content.trim();
|
|
return trimmed.isEmpty ? null : trimmed.length;
|
|
}
|
|
|
|
/// Persist [token] to disk, creating `~/.fai/` if needed.
|
|
/// On Unix the file is chmod-ed to 0600 (owner read/write
|
|
/// only). On Windows the default user-ACL is left alone —
|
|
/// best-effort, no PowerShell handshake.
|
|
static Future<void> write(String token) async {
|
|
final f = File(path);
|
|
await f.parent.create(recursive: true);
|
|
await f.writeAsString(token.trim(), flush: true);
|
|
if (Platform.isLinux || Platform.isMacOS) {
|
|
try {
|
|
await Process.run('chmod', ['600', f.path]);
|
|
} catch (_) {
|
|
// best-effort; if chmod is unavailable the file still
|
|
// exists with default perms (usually 0644, world-readable
|
|
// but only on the operator's own machine).
|
|
}
|
|
}
|
|
}
|
|
|
|
/// Delete the token file. No-op when the file doesn't exist.
|
|
static Future<void> delete() async {
|
|
final f = File(path);
|
|
if (await f.exists()) await f.delete();
|
|
}
|
|
}
|