@circuitwall/jarela 0.14.0 → 1.0.0

package/.next/standalone/.next/server/chunks/210.js

@@ -36,11 +36,11 @@ async function bootNode() {
     installConsolePatch();
     const { registerShutdownHandlers } = await Promise.all(/* import() */[__webpack_require__.e(8067), __webpack_require__.e(9032)]).then(__webpack_require__.bind(__webpack_require__, 39032));
     registerShutdownHandlers();
-    const { initTools } = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(947), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 59198));
+    const { initTools } = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(8866), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 32920));
     initTools();
-    const triggers = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(947), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 64439));
+    const triggers = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(8866), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 64439));
     await triggers.startAllTriggerHandlers();
-    const { startScheduler } = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(947), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 3464));
+    const { startScheduler } = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(6447), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(8866), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 3464));
     startScheduler();
     warnIfExposedBind();
 }

package/.next/standalone/.next/server/chunks/210.js.map

@@ -1 +1 @@
-{"version":3,"file":"210.js","mappings":";;;;;;;;;;;AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AAEjB,eAAeA;IACpB,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,EAAEC,0BAA0B,EAAE,GAAG,MAAM,gJAA6B;IAC1E,MAAMC,IAAID;IACV,IAAIC,EAAEC,OAAO,GAAG,KAAKD,EAAEE,OAAO,GAAG,GAAG;QAClC,oEAAoE;QACpE,mEAAmE;QACnE,qBAAqB;QACrBC,QAAQC,MAAM,CAACC,KAAK,CAClB,CAAC,wBAAwB,EAAEL,EAAEC,OAAO,CAAC,UAAU,EAAED,EAAEE,OAAO,CAAC,mBAAmB,CAAC;IAEnF;IAEA,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,gJAA4B;IAClEA;IAEA,MAAM,EAAEC,wBAAwB,EAAE,GAAG,MAAM,gJAAkC;IAC7EA;IAEA,MAAM,EAAEC,SAAS,EAAE,GAAG,MAAM,2TAAqB;IACjDA;IAEA,MAAMC,WAAW,MAAM,2TAAwB;IAC/C,MAAMA,SAASC,uBAAuB;IAEtC,MAAM,EAAEC,cAAc,EAAE,GAAG,MAAM,0TAAyB;IAC1DA;IAEAC;AACF;AAEA,SAASA;IACP,MAAMC,OAAO,CAACV,QAAQW,GAAG,CAACC,QAAQ,IAAI,EAAC,EAAGC,IAAI;IAC9C,IAAI,CAACH,MAAM;IACX,MAAMI,aACJJ,SAAS,eACTA,SAAS,SACTA,SAAS,eACTA,KAAKK,UAAU,CAAC;IAClB,IAAID,YAAY;IAChB,IAAId,QAAQW,GAAG,CAACK,6BAA6B,KAAK,KAAK;IACvD,IAAI;QACF,MAAMC,KAA+BC,mBAAOA,CAAC,KAAS;QACtD,IAAID,GAAGE,UAAU,CAAC,gBAAgB;IACpC,EAAE,OAAM;IACN,kCAAkC,GACpC;IACA,IAAInB,QAAQW,GAAG,CAACS,uBAAuB,EAAE;IACzCC,QAAQC,IAAI,CACV,CAAC,EAAE,CAAC,GACF,CAAC,8BAA8B,EAAEZ,KAAK,0BAA0B,CAAC,GACjE,CAAC,4EAA4E,CAAC,GAC9E,CAAC,sEAAsE,CAAC,GACxE,CAAC,wEAAwE,CAAC,GAC1E,CAAC,oDAAoD,CAAC,GACtD,CAAC,wEAAwE,CAAC,GAC1E,CAAC,kCAAkC,CAAC;AAE1C","sources":["webpack://@circuitwall/jarela/./instrumentation-node.ts"],"sourcesContent":["// Node-only bootstrap split out of `instrumentation.ts` so the edge-runtime\n// build never has to trace its dependency graph (which transitively pulls\n// in node-only modules like `child_process` via the MCP stdio client).\n//\n// `instrumentation.ts` only loads this file when running on the nodejs\n// server in production.\n\nexport async function bootNode(): Promise<void> {\n  // ADR-0060 — apply persisted env-overrides FIRST so subsequent module\n  // imports see the overridden values from the start. Done before the\n  // logging / shutdown / tools imports because each of them caches env\n  // reads at module-init time.\n  const { applyOverridesToProcessEnv } = await import(\"@/lib/env/overrides\");\n  const r = applyOverridesToProcessEnv();\n  if (r.applied > 0 || r.skipped > 0) {\n    // Use raw stdout — console isn't patched yet and we don't want this\n    // line to land in the logs panel (the entries it produces would be\n    // pre-patch anyway).\n    process.stdout.write(\n      `[env-overrides] applied ${r.applied}, skipped ${r.skipped} (already in env)\\n`,\n    );\n  }\n\n  // ADR-0058 — install the console patch second so every subsequent\n  // boot-time log line lands in the in-memory ring + the live Logs\n  // panel feed. Idempotent (guarded by a global Symbol), so dev HMR\n  // doesn't double-patch.\n  const { installConsolePatch } = await import(\"@/lib/logging/sink\");\n  installConsolePatch();\n\n  const { registerShutdownHandlers } = await import(\"@/lib/lifecycle/shutdown\");\n  registerShutdownHandlers();\n\n  const { initTools } = await import(\"@/lib/tools\");\n  initTools();\n\n  const triggers = await import(\"@/lib/triggers\");\n  await triggers.startAllTriggerHandlers();\n\n  const { startScheduler } = await import(\"@/lib/scheduler\");\n  startScheduler();\n\n  warnIfExposedBind();\n}\n\nfunction warnIfExposedBind(): void {\n  const host = (process.env.HOSTNAME || \"\").trim();\n  if (!host) return;\n  const isLoopback =\n    host === \"127.0.0.1\" ||\n    host === \"::1\" ||\n    host === \"localhost\" ||\n    host.startsWith(\"127.\");\n  if (isLoopback) return;\n  if (process.env.JARELA_ALLOW_NONLOOPBACK_BIND === \"1\") return;\n  try {\n    const fs: typeof import(\"node:fs\") = require(\"node:fs\");\n    if (fs.existsSync(\"/.dockerenv\")) return;\n  } catch {\n    /* not on a POSIX runtime, ignore */\n  }\n  if (process.env.KUBERNETES_SERVICE_HOST) return;\n  console.warn(\n    `\\n` +\n      `[security] Jarela is bound to ${host}, which is NOT loopback.\\n` +\n      `           Non-loopback callers are only gated by the Tailscale-User-Login\\n` +\n      `           header, which can be forged by anyone on the LAN unless a\\n` +\n      `           Tailscale-Serve (or equivalent reverse proxy) is sitting in\\n` +\n      `           front of this process and injecting it.\\n` +\n      `           Bind to 127.0.0.1 or set JARELA_ALLOW_NONLOOPBACK_BIND=1 to\\n` +\n      `           silence this warning.\\n`,\n  );\n}\n"],"names":["bootNode","applyOverridesToProcessEnv","r","applied","skipped","process","stdout","write","installConsolePatch","registerShutdownHandlers","initTools","triggers","startAllTriggerHandlers","startScheduler","warnIfExposedBind","host","env","HOSTNAME","trim","isLoopback","startsWith","JARELA_ALLOW_NONLOOPBACK_BIND","fs","require","existsSync","KUBERNETES_SERVICE_HOST","console","warn"],"sourceRoot":"","ignoreList":[]}
+{"version":3,"file":"210.js","mappings":";;;;;;;;;;;AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AAEjB,eAAeA;IACpB,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,EAAEC,0BAA0B,EAAE,GAAG,MAAM,gJAA6B;IAC1E,MAAMC,IAAID;IACV,IAAIC,EAAEC,OAAO,GAAG,KAAKD,EAAEE,OAAO,GAAG,GAAG;QAClC,oEAAoE;QACpE,mEAAmE;QACnE,qBAAqB;QACrBC,QAAQC,MAAM,CAACC,KAAK,CAClB,CAAC,wBAAwB,EAAEL,EAAEC,OAAO,CAAC,UAAU,EAAED,EAAEE,OAAO,CAAC,mBAAmB,CAAC;IAEnF;IAEA,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,gJAA4B;IAClEA;IAEA,MAAM,EAAEC,wBAAwB,EAAE,GAAG,MAAM,gJAAkC;IAC7EA;IAEA,MAAM,EAAEC,SAAS,EAAE,GAAG,MAAM,4TAAqB;IACjDA;IAEA,MAAMC,WAAW,MAAM,4TAAwB;IAC/C,MAAMA,SAASC,uBAAuB;IAEtC,MAAM,EAAEC,cAAc,EAAE,GAAG,MAAM,2TAAyB;IAC1DA;IAEAC;AACF;AAEA,SAASA;IACP,MAAMC,OAAO,CAACV,QAAQW,GAAG,CAACC,QAAQ,IAAI,EAAC,EAAGC,IAAI;IAC9C,IAAI,CAACH,MAAM;IACX,MAAMI,aACJJ,SAAS,eACTA,SAAS,SACTA,SAAS,eACTA,KAAKK,UAAU,CAAC;IAClB,IAAID,YAAY;IAChB,IAAId,QAAQW,GAAG,CAACK,6BAA6B,KAAK,KAAK;IACvD,IAAI;QACF,MAAMC,KAA+BC,mBAAOA,CAAC,KAAS;QACtD,IAAID,GAAGE,UAAU,CAAC,gBAAgB;IACpC,EAAE,OAAM;IACN,kCAAkC,GACpC;IACA,IAAInB,QAAQW,GAAG,CAACS,uBAAuB,EAAE;IACzCC,QAAQC,IAAI,CACV,CAAC,EAAE,CAAC,GACF,CAAC,8BAA8B,EAAEZ,KAAK,0BAA0B,CAAC,GACjE,CAAC,4EAA4E,CAAC,GAC9E,CAAC,sEAAsE,CAAC,GACxE,CAAC,wEAAwE,CAAC,GAC1E,CAAC,oDAAoD,CAAC,GACtD,CAAC,wEAAwE,CAAC,GAC1E,CAAC,kCAAkC,CAAC;AAE1C","sources":["webpack://@circuitwall/jarela/./instrumentation-node.ts"],"sourcesContent":["// Node-only bootstrap split out of `instrumentation.ts` so the edge-runtime\n// build never has to trace its dependency graph (which transitively pulls\n// in node-only modules like `child_process` via the MCP stdio client).\n//\n// `instrumentation.ts` only loads this file when running on the nodejs\n// server in production.\n\nexport async function bootNode(): Promise<void> {\n  // ADR-0060 — apply persisted env-overrides FIRST so subsequent module\n  // imports see the overridden values from the start. Done before the\n  // logging / shutdown / tools imports because each of them caches env\n  // reads at module-init time.\n  const { applyOverridesToProcessEnv } = await import(\"@/lib/env/overrides\");\n  const r = applyOverridesToProcessEnv();\n  if (r.applied > 0 || r.skipped > 0) {\n    // Use raw stdout — console isn't patched yet and we don't want this\n    // line to land in the logs panel (the entries it produces would be\n    // pre-patch anyway).\n    process.stdout.write(\n      `[env-overrides] applied ${r.applied}, skipped ${r.skipped} (already in env)\\n`,\n    );\n  }\n\n  // ADR-0058 — install the console patch second so every subsequent\n  // boot-time log line lands in the in-memory ring + the live Logs\n  // panel feed. Idempotent (guarded by a global Symbol), so dev HMR\n  // doesn't double-patch.\n  const { installConsolePatch } = await import(\"@/lib/logging/sink\");\n  installConsolePatch();\n\n  const { registerShutdownHandlers } = await import(\"@/lib/lifecycle/shutdown\");\n  registerShutdownHandlers();\n\n  const { initTools } = await import(\"@/lib/tools\");\n  initTools();\n\n  const triggers = await import(\"@/lib/triggers\");\n  await triggers.startAllTriggerHandlers();\n\n  const { startScheduler } = await import(\"@/lib/scheduler\");\n  startScheduler();\n\n  warnIfExposedBind();\n}\n\nfunction warnIfExposedBind(): void {\n  const host = (process.env.HOSTNAME || \"\").trim();\n  if (!host) return;\n  const isLoopback =\n    host === \"127.0.0.1\" ||\n    host === \"::1\" ||\n    host === \"localhost\" ||\n    host.startsWith(\"127.\");\n  if (isLoopback) return;\n  if (process.env.JARELA_ALLOW_NONLOOPBACK_BIND === \"1\") return;\n  try {\n    const fs: typeof import(\"node:fs\") = require(\"node:fs\");\n    if (fs.existsSync(\"/.dockerenv\")) return;\n  } catch {\n    /* not on a POSIX runtime, ignore */\n  }\n  if (process.env.KUBERNETES_SERVICE_HOST) return;\n  console.warn(\n    `\\n` +\n      `[security] Jarela is bound to ${host}, which is NOT loopback.\\n` +\n      `           Non-loopback callers are only gated by the Tailscale-User-Login\\n` +\n      `           header, which can be forged by anyone on the LAN unless a\\n` +\n      `           Tailscale-Serve (or equivalent reverse proxy) is sitting in\\n` +\n      `           front of this process and injecting it.\\n` +\n      `           Bind to 127.0.0.1 or set JARELA_ALLOW_NONLOOPBACK_BIND=1 to\\n` +\n      `           silence this warning.\\n`,\n  );\n}\n"],"names":["bootNode","applyOverridesToProcessEnv","r","applied","skipped","process","stdout","write","installConsolePatch","registerShutdownHandlers","initTools","triggers","startAllTriggerHandlers","startScheduler","warnIfExposedBind","host","env","HOSTNAME","trim","isLoopback","startsWith","JARELA_ALLOW_NONLOOPBACK_BIND","fs","require","existsSync","KUBERNETES_SERVICE_HOST","console","warn"],"sourceRoot":"","ignoreList":[]}