From 687dd41d47c2390d060c2dab748eb9d602064bc5 Mon Sep 17 00:00:00 2001
From: tiennm99 <tiennm99@outlook.com>
Date: Thu, 22 Oct 2026 17:32:01 +0700
Subject: [PATCH] feat: add the updater public key

---
 .gitignore      |  2 ++
 TODO.md         | 11 +++++------
 tauri.conf.json |  2 +-
 3 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/.gitignore b/.gitignore
index 15b76e0..d52ae40 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,5 @@
 /target
 /node_modules
 /gen
+/usage-monitor.key
+/usage-monitor.key.pub
diff --git a/TODO.md b/TODO.md
index 514b67c..acc5c18 100644
--- a/TODO.md
+++ b/TODO.md
@@ -3,12 +3,11 @@
 Steps left before the Tauri v2 port on `feat/tauri-port` can ship. Do them in
 order.
 
-1. **Create the updater signing key.** Run `npx tauri signer generate`, put the
-   public key in `plugins.updater.pubkey` in `tauri.conf.json`, add the
-   `TAURI_SIGNING_PRIVATE_KEY` and `TAURI_SIGNING_PRIVATE_KEY_PASSWORD`
-   repository secrets, and keep an offline backup of the key pair. Until then
-   the release workflow refuses to build and the app rejects every downloaded
-   update.
+1. **Finish the updater signing key.** The key pair exists, its public key is
+   in `tauri.conf.json`, and the `TAURI_SIGNING_PRIVATE_KEY` secret is set.
+   Still to do: add the `TAURI_SIGNING_PRIVATE_KEY_PASSWORD` secret, and keep
+   an offline backup of `usage-monitor.key` and its password. Losing either
+   leaves installed copies unable to update.
 2. **Test on Windows 10 and 11.** Download the exe artifact from the latest CI
    run on `feat/tauri-port` and work through the checklist in
    [the final port review](plans/reports/code-reviewer-261021-1028-tauri-port-final.md).
diff --git a/tauri.conf.json b/tauri.conf.json
index ea0fd0b..1b2b378 100644
--- a/tauri.conf.json
+++ b/tauri.conf.json
@@ -33,7 +33,7 @@
   },
   "plugins": {
     "updater": {
-      "pubkey": "",
+      "pubkey": "dW50cnVzdGVkIGNvbW1lbnQ6IG1pbmlzaWduIHB1YmxpYyBrZXk6IDA1RUQyREMxNDdFNTRCMUYKUldRZlMrVkh3UzN0QllncWx6V2I3NC9qOUNQU0tUS211VW1VRTBmLzlLcnl0cnk4UmdXMWY5cWkK",
       "endpoints": [
         "https://github.com/tiennm99/usage-monitor/releases/latest/download/latest.json"
       ]