62:I[707087,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1bpgyrs5qflhu.js","/_next/static/immutable/chunks/0-6vu2ul1h6ld.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"RegistryDependencies"] 63:I[314491,["/_next/static/immutable/chunks/3arlv5bvukoo2.js","/_next/static/immutable/chunks/39v64hmfyo-sr.js","/_next/static/immutable/chunks/2nvof3-29tvc3.js","/_next/static/immutable/chunks/3tjobt77z_9dj.js","/_next/static/immutable/chunks/04j_o97cgxn2x.js","/_next/static/immutable/chunks/3upr08c9vtj8w.js","/_next/static/immutable/chunks/1ww0328si-u8x.js","/_next/static/immutable/chunks/11mfl5ymqld9-.js","/_next/static/immutable/chunks/2xxcqy6ppds3l.js","/_next/static/immutable/chunks/1bpgyrs5qflhu.js","/_next/static/immutable/chunks/0-6vu2ul1h6ld.js","/_next/static/immutable/chunks/43_s7jweyypoh.js","/_next/static/immutable/chunks/0p6vao205o1jc.js","/_next/static/immutable/chunks/1_kyvgkyokw92.js","/_next/static/immutable/chunks/1lo-zn37dolb5.js","/_next/static/immutable/chunks/1v8k6yxw1rg0u.js"],"FilesView"] 64:Tb30f,'use client' import * as React from 'react' import { AlertTriangle, Check, CheckCircle2, Clock, Copy, Database, Globe, Info, KeyRound, Lock, MoreHorizontal, Pause, Pencil, Play, Plus, RefreshCw, Search, Server, ShieldCheck, Terminal, X, } from 'lucide-react' import { cn } from '@/lib/utils' import { Badge } from '@/components/ui/badge' import { Button } from '@/components/ui/button' import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card' import { Dialog, DialogContent, DialogDescription, DialogFooter, DialogHeader, DialogTitle, } from '@/components/ui/dialog' import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, } from '@/components/ui/dropdown-menu' import { Input } from '@/components/ui/input' import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select' import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from '@/components/ui/table' export type SecretType = 'Postgres DB' | 'API Key' | 'RSA Keypair' | 'KMS Key' | 'Redis Auth' | 'MySQL DB' export type RotationStatus = 'healthy' | 'due-soon' | 'manual-needed' | 'paused' | 'rotating' export interface RotationSchedule { interval: string daysInterval: number lambdaArn?: string zeroDowntimeVerified: boolean } export interface ManagedSecret { id: string name: string arn: string type: SecretType schedule: RotationSchedule lastRotated: string nextRotationDue: string dueRelative: string status: RotationStatus currentVersion: string stagingVersion?: string lastLogSnippet?: string } export interface SecretsRotationStats { totalSecrets: number autoRotationActive: number autoRotationPercentage: number dueSoonCount: number overdueCount: number } export interface SecretsRotationSchedulerProps { initialSecrets?: ManagedSecret[] initialStats?: SecretsRotationStats className?: string } const defaultSecrets: ManagedSecret[] = [ { id: 'sec-1', name: 'prod/postgres/master-credentials', arn: 'arn:aws:secretsmanager:us-east-1:182938491029:secret:prod/postgres/master-cred-9aF1x', type: 'Postgres DB', schedule: { interval: 'Every 30 Days', daysInterval: 30, lambdaArn: 'arn:aws:lambda:us-east-1:182938491029:function:RotatePostgresMaster', zeroDowntimeVerified: true, }, lastRotated: 'Aug 10, 2026', nextRotationDue: 'Sep 09, 2026', dueRelative: 'in 19 days', status: 'healthy', currentVersion: 'v2.4 (AWSCURRENT)', stagingVersion: 'v2.5 (AWSPENDING)', lastLogSnippet: 'Postgres dual-user handshake verified. Master role privileges synchronized with 0 connection terminations.', }, { id: 'sec-2', name: 'prod/stripe/webhook-secret', arn: 'arn:aws:secretsmanager:us-east-1:182938491029:secret:prod/stripe/wh-sec-48k2p', type: 'API Key', schedule: { interval: 'Every 90 Days', daysInterval: 90, lambdaArn: 'arn:aws:lambda:us-east-1:182938491029:function:RotateStripeWebhook', zeroDowntimeVerified: true, }, lastRotated: 'Jul 14, 2026', nextRotationDue: 'Aug 22, 2026', dueRelative: 'in 24 hours', status: 'due-soon', currentVersion: 'v1.8 (AWSCURRENT)', stagingVersion: 'v1.9 (AWSPENDING)', lastLogSnippet: 'Dual webhook signature validation window active. Webhook endpoint test passed with 200 OK.', }, { id: 'sec-3', name: 'prod/jwt/signing-key-rsa', arn: 'arn:aws:secretsmanager:us-east-1:182938491029:secret:prod/jwt/rsa-pair-71b3e', type: 'RSA Keypair', schedule: { interval: 'Every 7 Days', daysInterval: 7, lambdaArn: 'arn:aws:lambda:us-east-1:182938491029:function:RotateJWTRSAKeys', zeroDowntimeVerified: true, }, lastRotated: 'Aug 18, 2026', nextRotationDue: 'Aug 25, 2026', dueRelative: 'in 4 days', status: 'healthy', currentVersion: 'v9.1 (AWSCURRENT)', stagingVersion: 'v9.2 (AWSPENDING)', lastLogSnippet: 'JWKS endpoint updated with secondary public key kid:rsa-2026-w34. Token signature verification succeeded.', }, { id: 'sec-4', name: 'prod/aws/kms-envelope-key', arn: 'arn:aws:kms:us-east-1:182938491029:key/mrk-8492019a-9e1b-4f21-99ad', type: 'KMS Key', schedule: { interval: 'Every 365 Days', daysInterval: 365, lambdaArn: 'arn:aws:lambda:us-east-1:182938491029:function:KmsEnvelopeRotationHandler', zeroDowntimeVerified: true, }, lastRotated: 'Oct 01, 2025', nextRotationDue: 'Oct 01, 2026', dueRelative: 'in 41 days', status: 'healthy', currentVersion: 'v3.0 (AWSCURRENT)', stagingVersion: 'v3.1 (AWSPENDING)', lastLogSnippet: 'Hardware Security Module (HSM) backing key refreshed. Transparent decryption verified for existing ciphertexts.', }, { id: 'sec-5', name: 'prod/redis/cache-auth', arn: 'arn:aws:secretsmanager:us-east-1:182938491029:secret:prod/redis/auth-token-6c90d', type: 'Redis Auth', schedule: { interval: 'Manual Only', daysInterval: 0, zeroDowntimeVerified: false, }, lastRotated: 'May 12, 2026', nextRotationDue: 'Aug 20, 2026', dueRelative: 'Overdue (1 day)', status: 'manual-needed', currentVersion: 'v1.0 (AWSCURRENT)', stagingVersion: undefined, lastLogSnippet: 'Automated lambda execution unconfigured. Dual-AUTH token rotation requires manual trigger or handler attachment.', }, ] const defaultStats: SecretsRotationStats = { totalSecrets: 18, autoRotationActive: 15, autoRotationPercentage: 83.3, dueSoonCount: 2, overdueCount: 0, } function getTypeBadgeVariant(type: SecretType): 'default' | 'secondary' | 'outline' | 'info' | 'warning' { switch (type) { case 'Postgres DB': case 'MySQL DB': return 'info' case 'API Key': return 'secondary' case 'RSA Keypair': return 'outline' case 'KMS Key': return 'default' case 'Redis Auth': return 'warning' default: return 'outline' } } export function SecretsRotationScheduler({ initialSecrets = defaultSecrets, initialStats = defaultStats, className, }: SecretsRotationSchedulerProps) { const [secrets, setSecrets] = React.useState(initialSecrets) const [search, setSearch] = React.useState('') const [statusFilter, setStatusFilter] = React.useState('all') const [bannerMessage, setBannerMessage] = React.useState<{ type: 'success' | 'info'; text: string } | null>(null) const [rotatingSecretId, setRotatingSecretId] = React.useState(null) const [copiedArn, setCopiedArn] = React.useState(null) // Dialogs const [isRotateModalOpen, setIsRotateModalOpen] = React.useState(false) const [selectedSecretForRotate, setSelectedSecretForRotate] = React.useState(null) const [isRotatingInProgress, setIsRotatingInProgress] = React.useState(false) const [isScheduleModalOpen, setIsScheduleModalOpen] = React.useState(false) const [editingSecret, setEditingSecret] = React.useState(null) const [formName, setFormName] = React.useState('') const [formArn, setFormArn] = React.useState('') const [formType, setFormType] = React.useState('Postgres DB') const [formInterval, setFormInterval] = React.useState('Every 30 Days') const [formLambdaArn, setFormLambdaArn] = React.useState('') const [formZeroDowntime, setFormZeroDowntime] = React.useState(true) const [isLogsModalOpen, setIsLogsModalOpen] = React.useState(false) const [selectedSecretForLogs, setSelectedSecretForLogs] = React.useState(null) const filteredSecrets = React.useMemo(() => { const q = search.trim().toLowerCase() return secrets.filter((sec) => { const matchesStatus = statusFilter === 'all' || sec.status === statusFilter || (statusFilter === 'healthy' && sec.status === 'healthy') || (statusFilter === 'due-soon' && sec.status === 'due-soon') || (statusFilter === 'manual-needed' && sec.status === 'manual-needed') || (statusFilter === 'paused' && sec.status === 'paused') const matchesSearch = !q || sec.name.toLowerCase().includes(q) || sec.arn.toLowerCase().includes(q) || sec.type.toLowerCase().includes(q) return matchesStatus && matchesSearch }) }, [secrets, search, statusFilter]) const copyToClipboard = async (text: string, id: string) => { try { await navigator.clipboard.writeText(text) setCopiedArn(id) setTimeout(() => setCopiedArn(null), 2000) } catch { setCopiedArn(id) setTimeout(() => setCopiedArn(null), 2000) } } const openInstantRotate = (secret: ManagedSecret) => { setSelectedSecretForRotate(secret) setIsRotateModalOpen(true) } const executeRotation = () => { if (!selectedSecretForRotate) return setIsRotatingInProgress(true) const targetId = selectedSecretForRotate.id setRotatingSecretId(targetId) setTimeout(() => { setIsRotatingInProgress(false) setIsRotateModalOpen(false) setRotatingSecretId(null) setSecrets((prev) => prev.map((s) => s.id === targetId ? { ...s, lastRotated: 'Just now', nextRotationDue: 'Sep 20, 2026', dueRelative: 'in 30 days', status: 'healthy', currentVersion: 'v2.5 (AWSCURRENT)', stagingVersion: undefined, lastLogSnippet: 'Zero-downtime rotation completed successfully. Version B verified, promoted to AWSCURRENT, and staged safely.', } : s, ), ) setBannerMessage({ type: 'success', text: `Zero-downtime rotation successfully completed for "${selectedSecretForRotate.name}". Credentials validated with 0 dropped sockets.`, }) }, 1400) } const openScheduleModal = (secret?: ManagedSecret) => { if (secret) { setEditingSecret(secret) setFormName(secret.name) setFormArn(secret.arn) setFormType(secret.type) setFormInterval(secret.schedule.interval) setFormLambdaArn(secret.schedule.lambdaArn || '') setFormZeroDowntime(secret.schedule.zeroDowntimeVerified) } else { setEditingSecret(null) setFormName('') setFormArn('') setFormType('Postgres DB') setFormInterval('Every 30 Days') setFormLambdaArn('arn:aws:lambda:us-east-1:182938491029:function:RotateSecretHandler') setFormZeroDowntime(true) } setIsScheduleModalOpen(true) } const saveSchedule = () => { if (!formName.trim()) return if (editingSecret) { setSecrets((prev) => prev.map((s) => s.id === editingSecret.id ? { ...s, name: formName.trim(), arn: formArn.trim() || s.arn, type: formType, schedule: { ...s.schedule, interval: formInterval, lambdaArn: formLambdaArn.trim() || undefined, zeroDowntimeVerified: formZeroDowntime, }, } : s, ), ) setBannerMessage({ type: 'info', text: `Rotation schedule for "${formName}" updated successfully.`, }) } else { const newId = `sec-${Date.now()}` const generatedArn = formArn.trim() || `arn:aws:secretsmanager:us-east-1:182938491029:secret:${formName.trim().toLowerCase()}-${Math.random().toString(36).substring(2, 7)}` const newSecret: ManagedSecret = { id: newId, name: formName.trim(), arn: generatedArn, type: formType, schedule: { interval: formInterval, daysInterval: formInterval.includes('7') ? 7 : formInterval.includes('90') ? 90 : 30, lambdaArn: formLambdaArn.trim() || undefined, zeroDowntimeVerified: formZeroDowntime, }, lastRotated: 'Never (Initial)', nextRotationDue: 'Pending First Run', dueRelative: 'in 2 hours', status: 'healthy', currentVersion: 'v1.0 (AWSCURRENT)', stagingVersion: undefined, lastLogSnippet: 'Initial rotation schedule registered with automated zero-downtime dual-version handshake.', } setSecrets((prev) => [newSecret, ...prev]) setBannerMessage({ type: 'success', text: `New secret rotation schedule registered for "${newSecret.name}".`, }) } setIsScheduleModalOpen(false) } const togglePause = (secret: ManagedSecret) => { const nextStatus: RotationStatus = secret.status === 'paused' ? 'healthy' : 'paused' setSecrets((prev) => prev.map((s) => (s.id === secret.id ? { ...s, status: nextStatus } : s))) setBannerMessage({ type: 'info', text: `Rotation schedule for "${secret.name}" ${nextStatus === 'paused' ? 'paused' : 'resumed'}.`, }) } const openLogsModal = (secret: ManagedSecret) => { setSelectedSecretForLogs(secret) setIsLogsModalOpen(true) } return (

{/* Header */}

Automated Secrets Rotation & Key Lifecycle

Configure zero-downtime rotation schedules for database credentials, API keys, and certificates.

{/* Notification / Action banner */} {bannerMessage && (

{bannerMessage.type === 'success' ? ( ) : ( )} {bannerMessage.text}

)} {/* 4 Key Lifecycle Telemetry Cards */}

{/* Total Managed Secrets */} Total Managed Secrets

{initialStats.totalSecrets} credentials

Across 4 cloud regions

{/* Auto-Rotation Active */} Auto-Rotation Active

{initialStats.autoRotationActive} / {initialStats.totalSecrets} secrets {initialStats.autoRotationPercentage}%

Zero-downtime dual versioning enabled

{/* Rotation Due Soon */} Rotation Due Soon

{initialStats.dueSoonCount} secrets Next 48h

Automated queue pre-scheduled

{/* Expired / Overdue */} Expired / Overdue

{initialStats.overdueCount} critical overdue Compliant

Zero security compliance violations

{/* Secrets Rotation Table Card */}

Managed Secrets & Automated Rotation {filteredSecrets.length} of {secrets.length} cryptographic secrets configured for automated lifecycle management.

setSearch(e.target.value)} placeholder="Search secrets or ARN" className="h-8 pl-9 text-xs" />

AWS us-east-1

Secret Name & ARN Identifier Secret Type Rotation Interval Last Rotated & Next Due Rotation Status Actions {filteredSecrets.map((secret) => ( {/* Secret Name & ARN Identifier */}

{secret.name} {rotatingSecretId === secret.id && ( )}


                            {secret.arn}

{/* Secret Type Badge */} {(secret.type === 'Postgres DB' || secret.type === 'MySQL DB') && ( )} {secret.type === 'API Key' && } {secret.type === 'RSA Keypair' && } {secret.type === 'KMS Key' && } {secret.type === 'Redis Auth' && } {secret.type} {/* Rotation Interval */}

{secret.schedule.interval}

{secret.schedule.lambdaArn ? (

λ {secret.schedule.lambdaArn.split(':function:')[1] || 'Lambda'}

) : (

Manual trigger

)}

{/* Last Rotated & Next Due */}

{secret.nextRotationDue} {secret.status === 'due-soon' ? ( ({secret.dueRelative}) ) : ( ({secret.dueRelative}) )}

Last: {secret.lastRotated}

{/* Rotation Status Badge */}

{secret.status === 'healthy' && ( Automated · Healthy )} {secret.status === 'due-soon' && ( Rotation Due Soon )} {secret.status === 'manual-needed' && ( Manual Rotation Needed )} {secret.status === 'paused' && ( Paused )} {secret.status === 'rotating' && ( Rotating )}

{secret.currentVersion}

{/* Actions Menu */} Rotation Controls openInstantRotate(secret)}> Rotate Now (Zero Downtime) openScheduleModal(secret)}> Edit Schedule openLogsModal(secret)}> View Rotation Lambda Log togglePause(secret)}> {secret.status !== 'paused' ? ( <> Pause Auto-Rotation ) : ( <> Resume Auto-Rotation )} ))} {filteredSecrets.length === 0 && ( No secrets found matching the selected filter criteria. )}

{/* Instant Rotate Modal / Dialog (Zero-Downtime Confirmation) */} {/* Schedule / Edit Schedule Dialog */} {/* View Rotation Lambda Log Dialog */}

) } export default SecretsRotationScheduler 61:["$","div",null,{"className":"mt-3 flex min-h-0 min-w-0 flex-1 flex-col gap-3","children":[["$","div",null,{"className":"flex shrink-0 items-start gap-3","children":[["$","div",null,{"className":"flex max-h-28 min-w-0 flex-1 flex-wrap items-center gap-2 overflow-y-auto","children":[["$","ul",null,{"className":"flex min-w-0 flex-wrap gap-2","aria-label":"Package dependencies","children":[["$","li","lucide-react",{"className":"min-w-0 max-w-full","children":["$","a",null,{"href":"https://www.npmjs.com/package/lucide-react","target":"_blank","rel":"noopener noreferrer","className":"flex max-w-full min-w-0 items-center gap-1.5 rounded-md border px-2 py-1.5 text-xs","children":[["$","svg",null,{"viewBox":"0 0 24 24","className":"size-3 shrink-0","children":["$","path",null,{"d":"M1.763 0C.786 0 0 .786 0 1.763v20.474C0 23.214.786 24 1.763 24h20.474c.977 0 1.763-.786 1.763-1.763V1.763C24 .786 23.214 0 22.237 0zM5.13 5.323l13.837.019-.009 13.836h-3.464l.01-10.382h-3.456L12.04 19.17H5.113z","fill":"currentColor"}]}],["$","span",null,{"className":"min-w-0 break-all text-xs font-medium","children":"lucide-react"}]]}]}]]}],["$","$L62",null,{"namespace":"@registrydirectory","registryDependencies":["https://uipkge.dev/r/react/badge.json","https://uipkge.dev/r/react/button.json","https://uipkge.dev/r/react/card.json","https://uipkge.dev/r/react/dialog.json","https://uipkge.dev/r/react/dropdown-menu.json","https://uipkge.dev/r/react/input.json","https://uipkge.dev/r/react/select.json","https://uipkge.dev/r/react/table.json"]}]]}],null]}],["$","$L63",null,{"files":[{"path":"packages/registry-react/blocks/secrets-rotation-scheduler/SecretsRotationScheduler.tsx","content":"$64","type":"registry:block","target":"~/components/blocks/SecretsRotationScheduler.tsx"}],"className":"h-[70svh] min-h-80"}]]}]