@circuitwall/jarela 1.3.0 → 1.4.1

package/.next/standalone/.next/static/chunks/app/setup/{page-9a465b5fa755b3c3.js → page-a1463a9ace439ff7.js}

@@ -13,9 +13,9 @@ Promise.resolve(/* import() eager */).then(__webpack_require__.bind(__webpack_re
 },
 /******/ __webpack_require__ => { // webpackRuntimeModules
 /******/ var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-/******/ __webpack_require__.O(0, [9209,2351,8441,3457,7358], () => (__webpack_exec__(7339)));
+/******/ __webpack_require__.O(0, [4097,2351,8441,3457,7358], () => (__webpack_exec__(7339)));
 /******/ var __webpack_exports__ = __webpack_require__.O();
 /******/ _N_E = __webpack_exports__;
 /******/ }
 ]);
-//# sourceMappingURL=page-9a465b5fa755b3c3.js.map
+//# sourceMappingURL=page-a1463a9ace439ff7.js.map

package/.next/standalone/.next/static/chunks/app/setup/{page-9a465b5fa755b3c3.js.map → page-a1463a9ace439ff7.js.map}

@@ -1 +1 @@
-{"version":3,"file":"static/chunks/app/setup/page-9a465b5fa755b3c3.js","mappings":";;;;;AAAA,+FAAgJ;AAChJ;AACA,+FAAwI","sources":["webpack://_N_E/?e6bd"],"sourcesContent":["import(/* webpackMode: \"eager\", webpackExports: [\"OnboardingWizard\"] */ \"/home/runner/work/jarela/jarela/components/setup/OnboardingWizard.tsx\");\n;\nimport(/* webpackMode: \"eager\", webpackExports: [\"UnlockScreen\"] */ \"/home/runner/work/jarela/jarela/components/setup/UnlockScreen.tsx\");\n"],"names":[],"sourceRoot":"","ignoreList":[]}
+{"version":3,"file":"static/chunks/app/setup/page-a1463a9ace439ff7.js","mappings":";;;;;AAAA,+FAAgJ;AAChJ;AACA,+FAAwI","sources":["webpack://_N_E/?e6bd"],"sourcesContent":["import(/* webpackMode: \"eager\", webpackExports: [\"OnboardingWizard\"] */ \"/home/runner/work/jarela/jarela/components/setup/OnboardingWizard.tsx\");\n;\nimport(/* webpackMode: \"eager\", webpackExports: [\"UnlockScreen\"] */ \"/home/runner/work/jarela/jarela/components/setup/UnlockScreen.tsx\");\n"],"names":[],"sourceRoot":"","ignoreList":[]}

package/.next/standalone/.next/static/chunks/{webpack-ff5627013a5e3842.js → webpack-f4ac5c5f92cfd1c1.js}

@@ -68,6 +68,18 @@
 /******/ 		};
 /******/ 	})();
 /******/ 	
+/******/ 	/* webpack/runtime/compat get default export */
+/******/ 	(() => {
+/******/ 		// getDefaultExport function for compatibility with non-harmony modules
+/******/ 		__webpack_require__.n = (module) => {
+/******/ 			var getter = module && module.__esModule ?
+/******/ 				() => (module['default']) :
+/******/ 				() => (module);
+/******/ 			__webpack_require__.d(getter, { a: getter });
+/******/ 			return getter;
+/******/ 		};
+/******/ 	})();
+/******/ 	
 /******/ 	/* webpack/runtime/create fake namespace object */
 /******/ 	(() => {
 /******/ 		var getProto = Object.getPrototypeOf ? (obj) => (Object.getPrototypeOf(obj)) : (obj) => (obj.__proto__);
@@ -327,4 +339,4 @@
 /******/ 	
 /******/ })()
 ;
-//# sourceMappingURL=webpack-ff5627013a5e3842.js.map
+//# sourceMappingURL=webpack-f4ac5c5f92cfd1c1.js.map

package/.next/standalone/.next/static/chunks/webpack-f4ac5c5f92cfd1c1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static/chunks/webpack-f4ac5c5f92cfd1c1.js","mappings":";;;;UAAA;UACA;;UAEA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;UACA;;UAEA;UACA;UACA;UACA;UACA;UACA,GAAG;UACH;UACA;;UAEA;UACA;UACA;;UAEA;UACA;;;;;WC/BA;WACA;WACA;WACA;WACA,+BAA+B,wCAAwC;WACvE;WACA;WACA;WACA;WACA,iBAAiB,qBAAqB;WACtC;WACA;WACA,kBAAkB,qBAAqB;WACvC;WACA;WACA,KAAK;WACL;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;;;;WC3BA;WACA;WACA;WACA;WACA;WACA,iCAAiC,WAAW;WAC5C;WACA;;;;;WCPA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,sDAAsD;WACtD,sCAAsC,iEAAiE;WACvG;WACA;WACA;WACA;WACA;WACA;;;;;WCzBA;WACA;WACA;WACA;WACA,yCAAyC,wCAAwC;WACjF;WACA;WACA;;;;;WCPA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,EAAE;WACF;;;;;WCRA;WACA;WACA;WACA;WACA;;;;;WCJA;WACA;WACA;WACA;WACA;;;;;WCJA;;;;;WCAA;WACA;WACA;WACA;WACA,uBAAuB,4BAA4B;WACnD;WACA;WACA;WACA,iBAAiB,oBAAoB;WACrC;WACA,mGAAmG,YAAY;WAC/G;WACA;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,mEAAmE,iCAAiC;WACpG;WACA;WACA;WACA;;;;;WCzCA;WACA;WACA;WACA,uDAAuD,iBAAiB;WACxE;WACA,gDAAgD,aAAa;WAC7D;;;;;WCNA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;;;;WCZA;;;;;WCAA;;;;;WCAA;;WAEA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA,iCAAiC;;WAEjC;WACA;WACA;WACA,KAAK;WACL;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,MAAM;WACN;WACA;WACA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA;WACA,MAAM,qBAAqB;WAC3B;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;WAEA;WACA;WACA","sources":["webpack://_N_E/webpack/bootstrap","webpack://_N_E/webpack/runtime/chunk loaded","webpack://_N_E/webpack/runtime/compat get default export","webpack://_N_E/webpack/runtime/create fake namespace object","webpack://_N_E/webpack/runtime/define property getters","webpack://_N_E/webpack/runtime/ensure chunk","webpack://_N_E/webpack/runtime/get javascript chunk filename","webpack://_N_E/webpack/runtime/get mini-css chunk filename","webpack://_N_E/webpack/runtime/hasOwnProperty shorthand","webpack://_N_E/webpack/runtime/load script","webpack://_N_E/webpack/runtime/make namespace object","webpack://_N_E/webpack/runtime/trusted types policy","webpack://_N_E/webpack/runtime/trusted types script url","webpack://_N_E/webpack/runtime/publicPath","webpack://_N_E/webpack/runtime/jsonp chunk loading","webpack://_N_E/webpack/before-startup","webpack://_N_E/webpack/startup","webpack://_N_E/webpack/after-startup"],"sourcesContent":["// The module cache\nvar __webpack_module_cache__ = {};\n\n// The require function\nfunction __webpack_require__(moduleId) {\n\t// Check if module is in cache\n\tvar cachedModule = __webpack_module_cache__[moduleId];\n\tif (cachedModule !== undefined) {\n\t\treturn cachedModule.exports;\n\t}\n\t// Create a new module (and put it into the cache)\n\tvar module = __webpack_module_cache__[moduleId] = {\n\t\t// no module.id needed\n\t\t// no module.loaded needed\n\t\texports: {}\n\t};\n\n\t// Execute the module function\n\tvar threw = true;\n\ttry {\n\t\t__webpack_modules__[moduleId].call(module.exports, module, module.exports, __webpack_require__);\n\t\tthrew = false;\n\t} finally {\n\t\tif(threw) delete __webpack_module_cache__[moduleId];\n\t}\n\n\t// Return the exports of the module\n\treturn module.exports;\n}\n\n// expose the modules object (__webpack_modules__)\n__webpack_require__.m = __webpack_modules__;\n\n","var deferred = [];\n__webpack_require__.O = (result, chunkIds, fn, priority) => {\n\tif(chunkIds) {\n\t\tpriority = priority || 0;\n\t\tfor(var i = deferred.length; i > 0 && deferred[i - 1][2] > priority; i--) deferred[i] = deferred[i - 1];\n\t\tdeferred[i] = [chunkIds, fn, priority];\n\t\treturn;\n\t}\n\tvar notFulfilled = Infinity;\n\tfor (var i = 0; i < deferred.length; i++) {\n\t\tvar [chunkIds, fn, priority] = deferred[i];\n\t\tvar fulfilled = true;\n\t\tfor (var j = 0; j < chunkIds.length; j++) {\n\t\t\tif ((priority & 1 === 0 || notFulfilled >= priority) && Object.keys(__webpack_require__.O).every((key) => (__webpack_require__.O[key](chunkIds[j])))) {\n\t\t\t\tchunkIds.splice(j--, 1);\n\t\t\t} else {\n\t\t\t\tfulfilled = false;\n\t\t\t\tif(priority < notFulfilled) notFulfilled = priority;\n\t\t\t}\n\t\t}\n\t\tif(fulfilled) {\n\t\t\tdeferred.splice(i--, 1)\n\t\t\tvar r = fn();\n\t\t\tif (r !== undefined) result = r;\n\t\t}\n\t}\n\treturn result;\n};","// getDefaultExport function for compatibility with non-harmony modules\n__webpack_require__.n = (module) => {\n\tvar getter = module && module.__esModule ?\n\t\t() => (module['default']) :\n\t\t() => (module);\n\t__webpack_require__.d(getter, { a: getter });\n\treturn getter;\n};","var getProto = Object.getPrototypeOf ? (obj) => (Object.getPrototypeOf(obj)) : (obj) => (obj.__proto__);\nvar leafPrototypes;\n// create a fake namespace object\n// mode & 1: value is a module id, require it\n// mode & 2: merge all properties of value into the ns\n// mode & 4: return value when already ns object\n// mode & 16: return value when it's Promise-like\n// mode & 8|1: behave like require\n__webpack_require__.t = function(value, mode) {\n\tif(mode & 1) value = this(value);\n\tif(mode & 8) return value;\n\tif(typeof value === 'object' && value) {\n\t\tif((mode & 4) && value.__esModule) return value;\n\t\tif((mode & 16) && typeof value.then === 'function') return value;\n\t}\n\tvar ns = Object.create(null);\n\t__webpack_require__.r(ns);\n\tvar def = {};\n\tleafPrototypes = leafPrototypes || [null, getProto({}), getProto([]), getProto(getProto)];\n\tfor(var current = mode & 2 && value; typeof current == 'object' && !~leafPrototypes.indexOf(current); current = getProto(current)) {\n\t\tObject.getOwnPropertyNames(current).forEach((key) => (def[key] = () => (value[key])));\n\t}\n\tdef['default'] = () => (value);\n\t__webpack_require__.d(ns, def);\n\treturn ns;\n};","// define getter functions for harmony exports\n__webpack_require__.d = (exports, definition) => {\n\tfor(var key in definition) {\n\t\tif(__webpack_require__.o(definition, key) && !__webpack_require__.o(exports, key)) {\n\t\t\tObject.defineProperty(exports, key, { enumerable: true, get: definition[key] });\n\t\t}\n\t}\n};","__webpack_require__.f = {};\n// This file contains only the entry chunk.\n// The chunk loading function for additional chunks\n__webpack_require__.e = (chunkId) => {\n\treturn Promise.all(Object.keys(__webpack_require__.f).reduce((promises, key) => {\n\t\t__webpack_require__.f[key](chunkId, promises);\n\t\treturn promises;\n\t}, []));\n};","// This function allow to reference async chunks\n__webpack_require__.u = (chunkId) => {\n\t// return url for filenames based on template\n\treturn undefined;\n};","// This function allow to reference async chunks\n__webpack_require__.miniCssF = (chunkId) => {\n\t// return url for filenames based on template\n\treturn undefined;\n};","__webpack_require__.o = (obj, prop) => (Object.prototype.hasOwnProperty.call(obj, prop))","var inProgress = {};\nvar dataWebpackPrefix = \"_N_E:\";\n// loadScript function to load a script via script tag\n__webpack_require__.l = (url, done, key, chunkId) => {\n\tif(inProgress[url]) { inProgress[url].push(done); return; }\n\tvar script, needAttach;\n\tif(key !== undefined) {\n\t\tvar scripts = document.getElementsByTagName(\"script\");\n\t\tfor(var i = 0; i < scripts.length; i++) {\n\t\t\tvar s = scripts[i];\n\t\t\tif(s.getAttribute(\"src\") == url || s.getAttribute(\"data-webpack\") == dataWebpackPrefix + key) { script = s; break; }\n\t\t}\n\t}\n\tif(!script) {\n\t\tneedAttach = true;\n\t\tscript = document.createElement('script');\n\n\t\tscript.charset = 'utf-8';\n\t\tscript.timeout = 120;\n\t\tif (__webpack_require__.nc) {\n\t\t\tscript.setAttribute(\"nonce\", __webpack_require__.nc);\n\t\t}\n\t\tscript.setAttribute(\"data-webpack\", dataWebpackPrefix + key);\n\n\t\tscript.src = __webpack_require__.tu(url);\n\t}\n\tinProgress[url] = [done];\n\tvar onScriptComplete = (prev, event) => {\n\t\t// avoid mem leaks in IE.\n\t\tscript.onerror = script.onload = null;\n\t\tclearTimeout(timeout);\n\t\tvar doneFns = inProgress[url];\n\t\tdelete inProgress[url];\n\t\tscript.parentNode && script.parentNode.removeChild(script);\n\t\tdoneFns && doneFns.forEach((fn) => (fn(event)));\n\t\tif(prev) return prev(event);\n\t}\n\tvar timeout = setTimeout(onScriptComplete.bind(null, undefined, { type: 'timeout', target: script }), 120000);\n\tscript.onerror = onScriptComplete.bind(null, script.onerror);\n\tscript.onload = onScriptComplete.bind(null, script.onload);\n\tneedAttach && document.head.appendChild(script);\n};","// define __esModule on exports\n__webpack_require__.r = (exports) => {\n\tif(typeof Symbol !== 'undefined' && Symbol.toStringTag) {\n\t\tObject.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });\n\t}\n\tObject.defineProperty(exports, '__esModule', { value: true });\n};","var policy;\n__webpack_require__.tt = () => {\n\t// Create Trusted Type policy if Trusted Types are available and the policy doesn't exist yet.\n\tif (policy === undefined) {\n\t\tpolicy = {\n\t\t\tcreateScriptURL: (url) => (url)\n\t\t};\n\t\tif (typeof trustedTypes !== \"undefined\" && trustedTypes.createPolicy) {\n\t\t\tpolicy = trustedTypes.createPolicy(\"nextjs#bundler\", policy);\n\t\t}\n\t}\n\treturn policy;\n};","__webpack_require__.tu = (url) => (__webpack_require__.tt().createScriptURL(url));","__webpack_require__.p = \"/_next/\";","// no baseURI\n\n// object to store loaded and loading chunks\n// undefined = chunk not loaded, null = chunk preloaded/prefetched\n// [resolve, reject, Promise] = chunk loading, 0 = chunk loaded\nvar installedChunks = {\n\t8068: 0,\n\t7513: 0,\n\t1973: 0\n};\n\n__webpack_require__.f.j = (chunkId, promises) => {\n\t\t// JSONP chunk loading for javascript\n\t\tvar installedChunkData = __webpack_require__.o(installedChunks, chunkId) ? installedChunks[chunkId] : undefined;\n\t\tif(installedChunkData !== 0) { // 0 means \"already installed\".\n\n\t\t\t// a Promise means \"currently loading\".\n\t\t\tif(installedChunkData) {\n\t\t\t\tpromises.push(installedChunkData[2]);\n\t\t\t} else {\n\t\t\t\tif(!/^(1973|7513|8068)$/.test(chunkId)) {\n\t\t\t\t\t// setup Promise in chunk cache\n\t\t\t\t\tvar promise = new Promise((resolve, reject) => (installedChunkData = installedChunks[chunkId] = [resolve, reject]));\n\t\t\t\t\tpromises.push(installedChunkData[2] = promise);\n\n\t\t\t\t\t// start chunk loading\n\t\t\t\t\tvar url = __webpack_require__.p + __webpack_require__.u(chunkId);\n\t\t\t\t\t// create error before stack unwound to get useful stacktrace later\n\t\t\t\t\tvar error = new Error();\n\t\t\t\t\tvar loadingEnded = (event) => {\n\t\t\t\t\t\tif(__webpack_require__.o(installedChunks, chunkId)) {\n\t\t\t\t\t\t\tinstalledChunkData = installedChunks[chunkId];\n\t\t\t\t\t\t\tif(installedChunkData !== 0) installedChunks[chunkId] = undefined;\n\t\t\t\t\t\t\tif(installedChunkData) {\n\t\t\t\t\t\t\t\tvar errorType = event && (event.type === 'load' ? 'missing' : event.type);\n\t\t\t\t\t\t\t\tvar realSrc = event && event.target && event.target.src;\n\t\t\t\t\t\t\t\terror.message = 'Loading chunk ' + chunkId + ' failed.\\n(' + errorType + ': ' + realSrc + ')';\n\t\t\t\t\t\t\t\terror.name = 'ChunkLoadError';\n\t\t\t\t\t\t\t\terror.type = errorType;\n\t\t\t\t\t\t\t\terror.request = realSrc;\n\t\t\t\t\t\t\t\tinstalledChunkData[1](error);\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t};\n\t\t\t\t\t__webpack_require__.l(url, loadingEnded, \"chunk-\" + chunkId, chunkId);\n\t\t\t\t} else installedChunks[chunkId] = 0;\n\t\t\t}\n\t\t}\n};\n\n// no prefetching\n\n// no preloaded\n\n// no HMR\n\n// no HMR manifest\n\n__webpack_require__.O.j = (chunkId) => (installedChunks[chunkId] === 0);\n\n// install a JSONP callback for chunk loading\nvar webpackJsonpCallback = (parentChunkLoadingFunction, data) => {\n\tvar [chunkIds, moreModules, runtime] = data;\n\t// add \"moreModules\" to the modules object,\n\t// then flag all \"chunkIds\" as loaded and fire callback\n\tvar moduleId, chunkId, i = 0;\n\tif(chunkIds.some((id) => (installedChunks[id] !== 0))) {\n\t\tfor(moduleId in moreModules) {\n\t\t\tif(__webpack_require__.o(moreModules, moduleId)) {\n\t\t\t\t__webpack_require__.m[moduleId] = moreModules[moduleId];\n\t\t\t}\n\t\t}\n\t\tif(runtime) var result = runtime(__webpack_require__);\n\t}\n\tif(parentChunkLoadingFunction) parentChunkLoadingFunction(data);\n\tfor(;i < chunkIds.length; i++) {\n\t\tchunkId = chunkIds[i];\n\t\tif(__webpack_require__.o(installedChunks, chunkId) && installedChunks[chunkId]) {\n\t\t\tinstalledChunks[chunkId][0]();\n\t\t}\n\t\tinstalledChunks[chunkId] = 0;\n\t}\n\treturn __webpack_require__.O(result);\n}\n\nvar chunkLoadingGlobal = self[\"webpackChunk_N_E\"] = self[\"webpackChunk_N_E\"] || [];\nchunkLoadingGlobal.forEach(webpackJsonpCallback.bind(null, 0));\nchunkLoadingGlobal.push = webpackJsonpCallback.bind(null, chunkLoadingGlobal.push.bind(chunkLoadingGlobal));","","",""],"names":[],"sourceRoot":"","ignoreList":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17]}

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@circuitwall/jarela",
-  "version": "1.3.0",
+  "version": "1.4.1",
   "description": "Jarela — local chat interface for LangGraph agents (multi-provider, single-process, SQLite-backed).",
   "license": "Apache-2.0",
   "author": "Andrew Ge Wu",
@@ -100,6 +100,7 @@
     "test:live:isolated:full": "node scripts/live-test-isolated.mjs --llm",
     "test:e2e": "playwright test",
     "test:e2e:ui": "playwright test --ui",
+    "promo:record": "node scripts/promo-record.mjs",
     "release:docker": "node scripts/release-docker.mjs",
     "release:docker:dry": "node scripts/release-docker.mjs --dry-run"
   },

package/CHANGELOG.md

@@ -7,6 +7,90 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.4.1] - 2026-06-09
+
+A reliability + UX polish patch on top of 1.4.0. The PIN keypad used at
+boot-time decrypt and screen-unlock has been collapsed into a single
+component with two modes, the API client treats both 423 lock states
+symmetrically (master-key-locked is no longer surfaced as a toast
+error), and several silent failure modes uncovered during last
+night's launcher diagnosis are now bounded and observable.
+
+### Changed
+
+- **Unified PIN keypad**
+  ([#226](https://github.com/CircuitWall/jarela/pull/226)).
+  `UnlockScreen` and `ScreenLock` were near-duplicate 6-digit keypads;
+  collapsed into a single `PinKeypad` with `mode: "decrypt" | "unlock"`.
+  Both unlock paths converge on a shared `landOnAgentPicker()` so the
+  user always lands on the agent selector. Boot-time decrypt now uses
+  `router.refresh()` instead of a full `window.location.reload()`, so
+  the transition to the AppShell is seamless. The API client handles
+  423 `locked` symmetrically with `screen-locked` — neither lock state
+  is surfaced as a toast error any more; the matching overlay mounts
+  instead.
+
+### Fixed
+
+- **Bounded resource leaks and last-resort error handlers**
+  ([#227](https://github.com/CircuitWall/jarela/pull/227)). Installs
+  `process.on("uncaughtException")` and `process.on("unhandledRejection")`
+  in `instrumentation-node.ts` so stray async errors land in the in-memory
+  log ring instead of going to raw stderr or killing the server. The
+  thread-run SSE route's `cancel()` now tears down its 500 ms poll and
+  event subscriber on client disconnect; the provider-probe route clears
+  its timeout on the win-path; `lib/tools/async-results` exposes
+  `stopAsyncResults()` and the shutdown drain calls it. Gmail and GitHub
+  page-walkers switched from `Promise.all` to `Promise.allSettled` so one
+  failed item no longer bins the whole page. `AbortSignal.timeout()`
+  added to the dashboard currency lookups (Nominatim, restcountries,
+  open.er-api) and the GitHub-Copilot provider fetches.
+- **Installer captures node stdio and bounds task retries**
+  ([#225](https://github.com/CircuitWall/jarela/pull/225)). Replaces
+  `Start-Process -RedirectStandardOutput/Error` (which silently dropped
+  both streams under `wscript -> powershell`) with a raw
+  `[System.Diagnostics.Process]` plus async `BeginOutputReadLine` /
+  `BeginErrorReadLine` writing through autoflushed `StreamWriter` s, so
+  `server.out.log` and `server.err.log` actually contain output. Logs
+  node's exit code on every cycle. Tightens the in-launcher rate limiter
+  from 5 to 3 restarts in 60 s. Reduces the scheduled-task retry policy
+  from `RestartCount=999, RestartInterval=1m` to `RestartCount=3,
+  RestartInterval=5m` — with an encrypted master key, every retry needs
+  manual PIN re-entry, so 999 silent retries was strictly worse than
+  failing loudly.
+- **README promo video renders**
+  ([#223](https://github.com/CircuitWall/jarela/pull/223)). GitHub raw
+  was serving the audio-less `.webm` as `audio/webm` (mime-sniffer
+  mis-classifies); browsers refused to render it in a `<video>`.
+  Re-encoded to h264 mp4 (faststart, video-only) which raw.githubusercontent.com
+  tags as `video/mp4`, and switched the README to absolute raw URLs for
+  `src` and `poster` since the markdown sanitizer doesn't rewrite
+  relative paths inside `<video>`.
+
+## [1.4.0] - 2026-06-08
+
+### Added
+
+- **Browser-extension element screenshot.** The page-capture flow now
+  ships a cropped PNG of the picked element alongside the text. The
+  content script grabs the visible viewport via
+  `chrome.tabs.captureVisibleTab` (loopback only, via the service worker)
+  and crops it to the element's bounding rect through `OffscreenCanvas`
+  at `devicePixelRatio`. The server validates the base64 payload (≤ 4 MB
+  encoded), persists the user message as a multipart `ContentPart[]` of
+  `[text, image]` so the bubble renders the picture inline, and
+  forwards the image part to the silent observer turn so vision-capable
+  agents see it on the immediate follow-up run. Falls back cleanly to
+  text-only capture if the snapshot is denied. See
+  [`docs/api.md`](./docs/api.md#post-apiv1page-capture) for the updated
+  request schema.
+- **Promo video recorder.** `npm run promo:record` (via
+  [`scripts/promo-record.mjs`](./scripts/promo-record.mjs)) drives your
+  real local install in a 9:16 vertical PWA viewport and records a
+  dark-theme `.webm` of the tap-to-unlock intro, agent picker, a
+  human-paced chat turn, and a tour of every side panel. First run
+  saves auth state to `promo/.storage.json` and reuses it thereafter.
+
 ## [1.3.0] - 2026-06-08
 
 Two new agent capabilities and a hardening pass on tool wall-clocks.

package/README.md

@@ -1,29 +1,31 @@
-
-
-
-<p align="center">
-  <img src="./public/logo-mark-transparent.png" alt="Jarela" width="160" />
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="./public/icon-512.png" />
+    <img src="./public/icon-512-light.png" alt="Jarela" width="140" />
+  </picture>
 </p>
 
 <h1 align="center">Jarela</h1>
 
 <p align="center">
-  <b>A local-first, browser-based GUI for orchestrating multi-provider LLM agents.</b><br/>
-  <sub>Next.js 16 + LangGraph + SQLite. PWA-installable. No cloud backend, no telemetry.</sub>
+  <b>A local-first, browser-based GUI for orchestrating multi-provider LLM agents.</b>
+</p>
+<p align="center">
+  <sub>Next.js 16 &middot; LangGraph &middot; SQLite &middot; PWA-installable &middot; no cloud backend, no telemetry</sub>
 </p>
 
 <p align="center">
-  <a href="#quick-start">Quick start</a> ·
-  <a href="#configuration-guide-home--work">Config guide</a> ·
-  <a href="#supported-platforms">Platforms</a> ·
-  <a href="#features">Features</a> ·
-  <a href="#productivity-stacks-google--microsoft-at-parity">Google + Microsoft</a> ·
-  <a href="#built-in-toolbelt">Tools</a> ·
-  <a href="#providers">Providers</a> ·
-  <a href="#connections">Connections</a> ·
-  <a href="./docs/EXTENDING.md">Extending</a> ·
-  <a href="./docs/ARCHITECTURE.md">Architecture</a> ·
-  <a href="./CONTRIBUTING.md">Contributing</a> ·
+  <a href="#quick-start">Quick start</a> &middot;
+  <a href="#configuration-guide-home--work">Config guide</a> &middot;
+  <a href="#supported-platforms">Platforms</a> &middot;
+  <a href="#features">Features</a> &middot;
+  <a href="#productivity-stacks-google--microsoft-at-parity">Google + Microsoft</a> &middot;
+  <a href="#built-in-toolbelt">Tools</a> &middot;
+  <a href="#providers">Providers</a> &middot;
+  <a href="#connections">Connections</a> &middot;
+  <a href="./docs/EXTENDING.md">Extending</a> &middot;
+  <a href="./docs/ARCHITECTURE.md">Architecture</a> &middot;
+  <a href="./CONTRIBUTING.md">Contributing</a> &middot;
   <a href="#documentation">Docs</a>
 </p>
 
@@ -51,15 +53,16 @@
   </a>
 </p>
 
----
-
 <p align="center">
-  <video src="https://github.com/user-attachments/assets/0f33f8d3-07bb-4850-9fcc-cfc97036f180" controls width="640" muted>
-    Your browser doesn't support embedded video.
-    <a href="https://github.com/user-attachments/assets/0f33f8d3-07bb-4850-9fcc-cfc97036f180">Download the clip</a>.
+  <video src="https://raw.githubusercontent.com/CircuitWall/jarela/main/docs/assets/jarela-promo.webm" poster="https://raw.githubusercontent.com/CircuitWall/jarela/main/docs/assets/jarela-promo-poster.jpg" autoplay loop muted playsinline controls width="320">
+    <img src="./docs/assets/jarela-promo-poster.jpg" alt="Jarela promo &mdash; PIN unlock, agent picker, chat, panel tour" width="320" />
   </video>
+  <br/>
+  <sub><i>Tap-to-unlock &rarr; agent picker &rarr; human-paced chat &rarr; full panel tour</i> &middot; <a href="./docs/assets/jarela-promo.webm">Download .webm</a></sub>
 </p>
 
+---
+
 ## Quick start
 
 Get to a working local agent in under 10 minutes:
@@ -239,9 +242,12 @@ create an Outlook Calendar invite in the same turn.
   **Memory**, **Documents**, **Profile**, **Bridges**, **Scheduled tasks**,
   and **Pending approvals**.
 - **Browser extension** ([`browser-extension/`](./browser-extension)) —
-  Chrome MV3, click an element on any page and POST it to your local
-  Jarela as a new user message (ADR-0018). Loopback only; toolbar icon
-  greys out when Jarela isn't running.
+  Chrome MV3, click an element on any page and POST it (with a cropped
+  PNG of the picked element) to your local Jarela as a new user message
+  (ADR-0018). The screenshot is rendered inline in the chat bubble and
+  forwarded to vision-capable agents on the silent observer turn that
+  fires immediately after the capture. Loopback only; toolbar icon greys
+  out when Jarela isn't running.
 
 ### Operational
 
@@ -914,6 +920,25 @@ on every push and PR: `lint + tsc --noEmit + next build`, then the same
 live integration suite against the production server output. The build
 badge at the top of this README links straight to the latest run.
 
+## Recording a promo video
+
+[scripts/promo-record.mjs](./scripts/promo-record.mjs) drives your real
+local install (default `http://localhost:4312`) inside a 540&times;960
+vertical (9:16) PWA viewport and records a `.webm` of a five-scene tour
+in dark theme: a simulated PIN unlock, agent picker, a human-paced chat
+turn, every side panel, and a closing pose.
+
+```bash
+npm run dev            # in one terminal
+npm run promo:record   # in another — output lands in ./promo/
+```
+
+The first run opens a headed Chromium so you can manually unlock the
+install if needed; the resulting auth state is saved to
+`promo/.storage.json` and reused on every subsequent run. Override the
+target with `JARELA_PROMO_URL`, the chat line with `JARELA_PROMO_MSG`,
+or skip the actual send with `JARELA_PROMO_SKIP_CHAT=1`.
+
 ## Security
 
 - **CSRF / origin guard** ([lib/auth/access.ts](./lib/auth/access.ts))

package/api/client.ts

@@ -157,20 +157,21 @@ async function request<T>(path: string, init?: RequestInit & { timeoutMs?: numbe
         signal: timeoutCtrl.signal,
       });
       if (!res.ok) {
-        // 423 screen-locked: surface a window event so the AppShell can
-        // mount the ScreenLock overlay. We still throw so the caller
-        // sees the failure, but no point retrying — the lock isn't
-        // going to clear on its own.
+        // 423 lock states: distinct events so AppShell can mount the
+        // right overlay (decrypt vs presence-check). Both throw so the
+        // caller still sees the failure — no point retrying, the lock
+        // isn't going to clear on its own.
         if (res.status === 423) {
           const cloned = res.clone();
           const body = (await cloned.json().catch(() => null)) as
             | { error?: string }
             | null;
-          if (
-            body?.error === "screen-locked" &&
-            typeof window !== "undefined"
-          ) {
-            window.dispatchEvent(new CustomEvent("jarela:screen-locked"));
+          if (typeof window !== "undefined") {
+            if (body?.error === "screen-locked") {
+              window.dispatchEvent(new CustomEvent("jarela:screen-locked"));
+            } else if (body?.error === "locked") {
+              window.dispatchEvent(new CustomEvent("jarela:master-key-locked"));
+            }
           }
           throw new Error(`423 ${body?.error ?? "locked"}`);
         }

package/app/api/v1/dashboard/currency/route.ts

@@ -53,7 +53,8 @@ export async function GET(req: NextRequest) {
         source: "manual",
         updated_at: new Date().toISOString(),
       }, 3600);
-    } catch {
+    } catch (err) {
+      console.warn("[currency] manual lookup failed, falling back to USD:", err);
       return cachedJson<CurrencyResponse>({
         currency: "USD",
         rate_from_usd: 1,
@@ -116,7 +117,8 @@ export async function GET(req: NextRequest) {
       source: "location",
       updated_at: new Date().toISOString(),
     }, 3600);
-  } catch {
+  } catch (err) {
+    console.warn("[currency] location lookup failed, falling back to USD:", err);
     return cachedJson<CurrencyResponse>({
       currency: "USD",
       rate_from_usd: 1,
@@ -140,6 +142,7 @@ async function reverseCountryCode(lat: number, lng: number): Promise<string | nu
       "user-agent": "jarela-dashboard-currency/1.0",
       accept: "application/json",
     },
+    signal: AbortSignal.timeout(8_000),
   });
   if (!res.ok) return null;
   const body = await res.json() as {
@@ -158,6 +161,7 @@ async function resolveCurrencyForCountry(countryCode: string): Promise<string |
 
   const res = await fetch(`https://restcountries.com/v3.1/alpha/${countryCode}?fields=currencies`, {
     headers: { accept: "application/json" },
+    signal: AbortSignal.timeout(8_000),
   });
   if (!res.ok) return null;
   const body = await res.json() as Array<{ currencies?: Record<string, { name?: string }> }>;
@@ -173,6 +177,7 @@ async function fetchFxRates(): Promise<Record<string, number>> {
 
   const res = await fetch("https://open.er-api.com/v6/latest/USD", {
     headers: { accept: "application/json" },
+    signal: AbortSignal.timeout(8_000),
   });
   if (!res.ok) throw new Error(`fx status ${res.status}`);
 

package/app/api/v1/providers/[provider]/probe/route.ts

@@ -66,14 +66,25 @@ export async function POST(req: NextRequest, { params }: Params) {
     try { await (iter as { return?: () => Promise<unknown> }).return?.(); } catch { /* best-effort */ }
   };
 
+  let timer: ReturnType<typeof setTimeout> | null = null;
   try {
     await Promise.race([
       probe(),
-      new Promise((_, reject) => setTimeout(() => reject(new Error(`probe timed out after ${PROBE_TIMEOUT_MS}ms`)), PROBE_TIMEOUT_MS)),
+      new Promise<never>((_, reject) => {
+        timer = setTimeout(
+          () => reject(new Error(`probe timed out after ${PROBE_TIMEOUT_MS}ms`)),
+          PROBE_TIMEOUT_MS,
+        );
+      }),
     ]);
     return NextResponse.json({ ok: true });
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     return NextResponse.json({ ok: false, error: msg });
+  } finally {
+    // Without this, the 15s timer keeps firing after probe() wins the
+    // race and the route returns — leaking an unhandled rejection per
+    // probe (which then trips the global handler).
+    if (timer) clearTimeout(timer);
   }
 }

package/app/api/v1/threads/[thread_id]/run/route.ts

@@ -233,9 +233,17 @@ function attachStream(
   thread_id: string,
   stream_options?: StreamOptions,
 ): Response {
+  // Captured by both start() and cancel() so the cancel branch can tear
+  // down the poll timer + subscription when the client disconnects.
+  // Without this, navigating away from a long-running thread leaks an
+  // event subscriber + 2Hz setInterval per visit until the run finishes
+  // (or forever if it doesn't).
+  let poll: ReturnType<typeof setInterval> | null = null;
+  let unsubscribe: (() => void) | null = null;
+  let clientGone = false;
+
   const stream = new ReadableStream({
     start(controller) {
-      let clientGone = false;
       const safeEnqueue = (chunk: Uint8Array): void => {
         if (clientGone) return;
         try { controller.enqueue(chunk); } catch { clientGone = true; }
@@ -246,14 +254,15 @@ function attachStream(
         safeEnqueue(sse({ type: ev.type, ...ev.data }));
       };
 
-      const { run, unsubscribe } = subscribe(thread_id, onEvent);
-      if (!run) {
+      const sub = subscribe(thread_id, onEvent);
+      unsubscribe = sub.unsubscribe;
+      if (!sub.run) {
         controller.close();
         return;
       }
 
       // If run already terminal, close after replay.
-      if (run.status !== "running") {
+      if (sub.run.status !== "running") {
         try { controller.close(); } catch { /* */ }
         return;
       }
@@ -261,11 +270,11 @@ function attachStream(
       // When the run finishes (status changes), close our response. We
       // poll lightly because the run might finish due to other subscribers'
       // signals; simpler than wiring a second listener channel.
-      const poll = setInterval(() => {
+      poll = setInterval(() => {
         const r = getRun(thread_id);
         if (!r || r.status !== "running") {
-          clearInterval(poll);
-          unsubscribe();
+          if (poll) { clearInterval(poll); poll = null; }
+          if (unsubscribe) { unsubscribe(); unsubscribe = null; }
           if (!clientGone) {
             try { controller.close(); } catch { /* */ }
           }
@@ -274,7 +283,12 @@ function attachStream(
       poll.unref?.();
     },
     cancel() {
-      // Client navigated away — agent run keeps going in registry.
+      // Client navigated away — agent run keeps going in registry, but
+      // tear down OUR poll + subscription so we don't leak a timer +
+      // subscriber per disconnect.
+      clientGone = true;
+      if (poll) { clearInterval(poll); poll = null; }
+      if (unsubscribe) { unsubscribe(); unsubscribe = null; }
     },
   });
 

package/components/chat/InputBar.tsx

@@ -73,6 +73,12 @@ function fileToContentPart(file: File): Promise<ContentPart> {
   });
 }
 
+function attachmentKey(a: ContentPart, i: number): string {
+  if (a.type === "text") return `text:${i}:${a.text.length}`;
+  const name = a.type === "file" ? a.name : "";
+  return `${a.type}:${a.media_type}:${name}:${a.data.length}:${a.data.slice(0, 16)}`;
+}
+
 export function InputBar({ attachments, onAttachmentsChange, onSubmit, onQueue, onStop, streaming, disabled, placeholder, voiceEnabled, agentId, onVoiceTranscript }: Props) {
   // Text state is intentionally LOCAL. Lifting it to ChatView would re-render
   // the entire message list (every MessageBubble + ReactMarkdown pass) on
@@ -268,7 +274,10 @@ export function InputBar({ attachments, onAttachmentsChange, onSubmit, onQueue,
       {attachments.length > 0 && (
         <div className="flex flex-wrap gap-2 mb-2">
           {attachments.map((a, i) => (
-            <div key={i} className="relative group shrink-0">
+            // Content-derived key — using the index reused DOM nodes when
+            // earlier attachments were removed, flashing the wrong preview
+            // (and the wrong filename) into the slot of the survivor.
+            <div key={attachmentKey(a, i)} className="relative group shrink-0">
               {a.type === "image" ? (
                 // eslint-disable-next-line @next/next/no-img-element
                 <img

package/components/layout/AppShell.tsx

@@ -31,6 +31,7 @@ import { Toaster } from "@/components/ui/Toaster";
 import { Logo } from "@/components/ui/Logo";
 import { BootScreen } from "@/components/ui/BootScreen";
 import { ScreenLock } from "@/components/setup/ScreenLock";
+import { UnlockScreen } from "@/components/setup/UnlockScreen";
 import { clearUnreadForAgent, useUnreadCount } from "@/lib/ui/toasts";
 import { getAppName } from "@/lib/env/app-config";
 import { MenuPanel } from "./MenuPanel";
@@ -198,25 +199,31 @@ export function AppShell() {
     ? agents.find((a) => a.id === state.activeAgentId) ?? null
     : null;
 
-  // Screen-lock overlay. Distinct from the boot-time master-key unlock
-  // (that's gated server-side in `app/page.tsx`). This one is the
-  // presence check that fires after `idle_timeout_ms` of inactivity:
-  // background work keeps running but the UI is hidden until the user
-  // re-enters their PIN. Triggered either by a 423 `screen-locked`
-  // response from the api client or by the periodic state probe below.
+  // Screen-lock overlay (presence check) AND master-key-locked overlay
+  // (decrypt). Distinct from the boot-time gate in `app/page.tsx`:
+  // those mounts are triggered mid-session — either by an idle timer
+  // (screen-lock) or by the master key being re-locked by an external
+  // process (decrypt). Both are signalled by the API client when it
+  // sees the matching 423 response.
   const [screenLocked, setScreenLocked] = useState(false);
+  const [masterKeyLocked, setMasterKeyLocked] = useState(false);
   // Bumped after each unlock so BootScreen remounts with fresh state
   // (its `done` / `pickedId` / `prefetchStartedRef` would otherwise
-  // suppress the picker on the second appearance).
+  // suppress the picker on the second appearance). Both unlock paths
+  // bump this — the agent selector is always the post-unlock landing.
   const [bootSeq, setBootSeq] = useState(0);
   useEffect(() => {
     let cancelled = false;
     let timer: ReturnType<typeof setInterval> | null = null;
 
-    function onLocked() {
+    function onScreenLocked() {
       if (!cancelled) setScreenLocked(true);
     }
-    window.addEventListener("jarela:screen-locked", onLocked);
+    function onMasterKeyLocked() {
+      if (!cancelled) setMasterKeyLocked(true);
+    }
+    window.addEventListener("jarela:screen-locked", onScreenLocked);
+    window.addEventListener("jarela:master-key-locked", onMasterKeyLocked);
 
     // Soft poll every 30s so the overlay still appears if no user
     // action triggered a request after the idle timer elapsed.
@@ -224,12 +231,19 @@ export function AppShell() {
       try {
         const res = await fetch("/api/v1/security/state");
         if (!res.ok) return;
-        const body = (await res.json()) as { screen_locked?: boolean };
-        if (!cancelled && body.screen_locked === true) {
-          setScreenLocked(true);
+        const body = (await res.json()) as {
+          screen_locked?: boolean;
+          state?: string;
+        };
+        if (cancelled) return;
+        if (body.state === "locked") setMasterKeyLocked(true);
+        if (body.screen_locked === true) setScreenLocked(true);
+      } catch (err) {
+        // Network blip; try again next tick. Logged at debug-level so
+        // a sustained outage is at least findable in devtools.
+        if (process.env.NODE_ENV !== "production") {
+          console.debug("[security/state] probe failed:", err);
         }
-      } catch {
-        // Network blip; try again next tick.
       }
     }
     void probe();
@@ -238,10 +252,20 @@ export function AppShell() {
     return () => {
       cancelled = true;
       if (timer) clearInterval(timer);
-      window.removeEventListener("jarela:screen-locked", onLocked);
+      window.removeEventListener("jarela:screen-locked", onScreenLocked);
+      window.removeEventListener("jarela:master-key-locked", onMasterKeyLocked);
     };
   }, []);
 
+  // Shared post-unlock landing: clear the current chat and force the
+  // BootScreen to remount so the user lands on the agent picker. Used
+  // by BOTH the screen-unlock and the master-key decrypt paths so the
+  // two transitions feel identical from the user's side.
+  const landOnAgentPicker = useCallback(() => {
+    dispatch({ type: "NEW_CHAT" });
+    setBootSeq((n) => n + 1);
+  }, [dispatch]);
+
   return (
     // `dvh` natively tracks the visible viewport on iOS 16.4+ / modern
     // Chromium, including the on-screen keyboard. The `--actual-vh`
@@ -270,12 +294,24 @@ export function AppShell() {
           onUnlock={() => {
             // Drop the user back on the picker so they consciously
             // re-enter their workspace rather than landing mid-chat.
-            dispatch({ type: "NEW_CHAT" });
-            setBootSeq((n) => n + 1);
+            landOnAgentPicker();
             setScreenLocked(false);
           }}
         />
       )}
+      {masterKeyLocked && !screenLocked && (
+        // Master key got re-locked mid-session (e.g. external lock
+        // command). Mount the decrypt splash — same shared keypad as
+        // boot — and on success drop back to the agent picker. The
+        // existing components below stay mounted underneath; once
+        // unlocked they resume against the now-unlocked DB.
+        <UnlockScreen
+          onUnlock={() => {
+            landOnAgentPicker();
+            setMasterKeyLocked(false);
+          }}
+        />
+      )}
       <NotificationStatus />
       <Toaster />
       <ServerStatus />