@circuitwall/jarela 1.3.0 → 1.4.1

package/.next/standalone/.next/server/chunks/210.js

@@ -34,6 +34,7 @@ async function bootNode() {
     // doesn't double-patch.
     const { installConsolePatch } = await Promise.all(/* import() */[__webpack_require__.e(8067), __webpack_require__.e(6210)]).then(__webpack_require__.bind(__webpack_require__, 16210));
     installConsolePatch();
+    installGlobalErrorHandlers();
     const { registerShutdownHandlers } = await Promise.all(/* import() */[__webpack_require__.e(8067), __webpack_require__.e(9032)]).then(__webpack_require__.bind(__webpack_require__, 39032));
     registerShutdownHandlers();
     const { initTools } = await Promise.all(/* import() */[__webpack_require__.e(1218), __webpack_require__.e(5743), __webpack_require__.e(127), __webpack_require__.e(3169), __webpack_require__.e(423), __webpack_require__.e(8067), __webpack_require__.e(8866), __webpack_require__.e(2768)]).then(__webpack_require__.bind(__webpack_require__, 68318));
@@ -58,6 +59,33 @@ function warnIfExposedBind() {
     if (process.env.KUBERNETES_SERVICE_HOST) return;
     console.warn(`\n` + `[security] Jarela is bound to ${host}, which is NOT loopback.\n` + `           Non-loopback callers are only gated by the Tailscale-User-Login\n` + `           header, which can be forged by anyone on the LAN unless a\n` + `           Tailscale-Serve (or equivalent reverse proxy) is sitting in\n` + `           front of this process and injecting it.\n` + `           Bind to 127.0.0.1 or set JARELA_ALLOW_NONLOOPBACK_BIND=1 to\n` + `           silence this warning.\n`);
 }
+// Global last-resort handlers for errors that escape every other try/catch.
+// Without these, Node's default behaviour is to print a stack to stderr
+// and (for uncaughtException) exit the process. We instead route them
+// through the patched console so the in-memory log ring and the Logs
+// panel capture them, and we keep the process alive — the launcher
+// supervisor already restarts on hard crashes, but most stray rejections
+// in HTTP handlers or background jobs shouldn't kill the whole server.
+// Idempotent via a Symbol so dev HMR / multiple imports never stack
+// handlers (which would double-log every event).
+const HANDLERS_INSTALLED = Symbol.for("@jarela/global-error-handlers");
+function installGlobalErrorHandlers() {
+    const p = process;
+    if (p[HANDLERS_INSTALLED]) return;
+    process.on("uncaughtException", (err, origin)=>{
+        try {
+            console.error(`[uncaughtException] origin=${origin}:`, err instanceof Error ? err.stack ?? err.message : String(err));
+        } catch  {
+        /* logging itself failed — nothing safe to do */ }
+    });
+    process.on("unhandledRejection", (reason)=>{
+        try {
+            console.error(`[unhandledRejection]:`, reason instanceof Error ? reason.stack ?? reason.message : String(reason));
+        } catch  {
+        /* logging itself failed — nothing safe to do */ }
+    });
+    p[HANDLERS_INSTALLED] = true;
+}
 
 
 /***/ })

package/.next/standalone/.next/server/chunks/210.js.map

@@ -1 +1 @@
-{"version":3,"file":"210.js","mappings":";;;;;;;;;;;AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AAEjB,eAAeA;IACpB,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,EAAEC,0BAA0B,EAAE,GAAG,MAAM,gJAA6B;IAC1E,MAAMC,IAAID;IACV,IAAIC,EAAEC,OAAO,GAAG,KAAKD,EAAEE,OAAO,GAAG,GAAG;QAClC,oEAAoE;QACpE,mEAAmE;QACnE,qBAAqB;QACrBC,QAAQC,MAAM,CAACC,KAAK,CAClB,CAAC,wBAAwB,EAAEL,EAAEC,OAAO,CAAC,UAAU,EAAED,EAAEE,OAAO,CAAC,mBAAmB,CAAC;IAEnF;IAEA,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,gJAA4B;IAClEA;IAEA,MAAM,EAAEC,wBAAwB,EAAE,GAAG,MAAM,gJAAkC;IAC7EA;IAEA,MAAM,EAAEC,SAAS,EAAE,GAAG,MAAM,4TAAqB;IACjDA;IAEA,MAAMC,WAAW,MAAM,4TAAwB;IAC/C,MAAMA,SAASC,uBAAuB;IAEtC,MAAM,EAAEC,cAAc,EAAE,GAAG,MAAM,2TAAyB;IAC1DA;IAEAC;AACF;AAEA,SAASA;IACP,MAAMC,OAAO,CAACV,QAAQW,GAAG,CAACC,QAAQ,IAAI,EAAC,EAAGC,IAAI;IAC9C,IAAI,CAACH,MAAM;IACX,MAAMI,aACJJ,SAAS,eACTA,SAAS,SACTA,SAAS,eACTA,KAAKK,UAAU,CAAC;IAClB,IAAID,YAAY;IAChB,IAAId,QAAQW,GAAG,CAACK,6BAA6B,KAAK,KAAK;IACvD,IAAI;QACF,MAAMC,KAA+BC,mBAAOA,CAAC,KAAS;QACtD,IAAID,GAAGE,UAAU,CAAC,gBAAgB;IACpC,EAAE,OAAM;IACN,kCAAkC,GACpC;IACA,IAAInB,QAAQW,GAAG,CAACS,uBAAuB,EAAE;IACzCC,QAAQC,IAAI,CACV,CAAC,EAAE,CAAC,GACF,CAAC,8BAA8B,EAAEZ,KAAK,0BAA0B,CAAC,GACjE,CAAC,4EAA4E,CAAC,GAC9E,CAAC,sEAAsE,CAAC,GACxE,CAAC,wEAAwE,CAAC,GAC1E,CAAC,oDAAoD,CAAC,GACtD,CAAC,wEAAwE,CAAC,GAC1E,CAAC,kCAAkC,CAAC;AAE1C","sources":["webpack://@circuitwall/jarela/./instrumentation-node.ts"],"sourcesContent":["// Node-only bootstrap split out of `instrumentation.ts` so the edge-runtime\n// build never has to trace its dependency graph (which transitively pulls\n// in node-only modules like `child_process` via the MCP stdio client).\n//\n// `instrumentation.ts` only loads this file when running on the nodejs\n// server in production.\n\nexport async function bootNode(): Promise<void> {\n  // ADR-0060 — apply persisted env-overrides FIRST so subsequent module\n  // imports see the overridden values from the start. Done before the\n  // logging / shutdown / tools imports because each of them caches env\n  // reads at module-init time.\n  const { applyOverridesToProcessEnv } = await import(\"@/lib/env/overrides\");\n  const r = applyOverridesToProcessEnv();\n  if (r.applied > 0 || r.skipped > 0) {\n    // Use raw stdout — console isn't patched yet and we don't want this\n    // line to land in the logs panel (the entries it produces would be\n    // pre-patch anyway).\n    process.stdout.write(\n      `[env-overrides] applied ${r.applied}, skipped ${r.skipped} (already in env)\\n`,\n    );\n  }\n\n  // ADR-0058 — install the console patch second so every subsequent\n  // boot-time log line lands in the in-memory ring + the live Logs\n  // panel feed. Idempotent (guarded by a global Symbol), so dev HMR\n  // doesn't double-patch.\n  const { installConsolePatch } = await import(\"@/lib/logging/sink\");\n  installConsolePatch();\n\n  const { registerShutdownHandlers } = await import(\"@/lib/lifecycle/shutdown\");\n  registerShutdownHandlers();\n\n  const { initTools } = await import(\"@/lib/tools\");\n  initTools();\n\n  const triggers = await import(\"@/lib/triggers\");\n  await triggers.startAllTriggerHandlers();\n\n  const { startScheduler } = await import(\"@/lib/scheduler\");\n  startScheduler();\n\n  warnIfExposedBind();\n}\n\nfunction warnIfExposedBind(): void {\n  const host = (process.env.HOSTNAME || \"\").trim();\n  if (!host) return;\n  const isLoopback =\n    host === \"127.0.0.1\" ||\n    host === \"::1\" ||\n    host === \"localhost\" ||\n    host.startsWith(\"127.\");\n  if (isLoopback) return;\n  if (process.env.JARELA_ALLOW_NONLOOPBACK_BIND === \"1\") return;\n  try {\n    const fs: typeof import(\"node:fs\") = require(\"node:fs\");\n    if (fs.existsSync(\"/.dockerenv\")) return;\n  } catch {\n    /* not on a POSIX runtime, ignore */\n  }\n  if (process.env.KUBERNETES_SERVICE_HOST) return;\n  console.warn(\n    `\\n` +\n      `[security] Jarela is bound to ${host}, which is NOT loopback.\\n` +\n      `           Non-loopback callers are only gated by the Tailscale-User-Login\\n` +\n      `           header, which can be forged by anyone on the LAN unless a\\n` +\n      `           Tailscale-Serve (or equivalent reverse proxy) is sitting in\\n` +\n      `           front of this process and injecting it.\\n` +\n      `           Bind to 127.0.0.1 or set JARELA_ALLOW_NONLOOPBACK_BIND=1 to\\n` +\n      `           silence this warning.\\n`,\n  );\n}\n"],"names":["bootNode","applyOverridesToProcessEnv","r","applied","skipped","process","stdout","write","installConsolePatch","registerShutdownHandlers","initTools","triggers","startAllTriggerHandlers","startScheduler","warnIfExposedBind","host","env","HOSTNAME","trim","isLoopback","startsWith","JARELA_ALLOW_NONLOOPBACK_BIND","fs","require","existsSync","KUBERNETES_SERVICE_HOST","console","warn"],"sourceRoot":"","ignoreList":[]}
+{"version":3,"file":"210.js","mappings":";;;;;;;;;;;AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AAEjB,eAAeA;IACpB,sEAAsE;IACtE,oEAAoE;IACpE,qEAAqE;IACrE,6BAA6B;IAC7B,MAAM,EAAEC,0BAA0B,EAAE,GAAG,MAAM,gJAA6B;IAC1E,MAAMC,IAAID;IACV,IAAIC,EAAEC,OAAO,GAAG,KAAKD,EAAEE,OAAO,GAAG,GAAG;QAClC,oEAAoE;QACpE,mEAAmE;QACnE,qBAAqB;QACrBC,QAAQC,MAAM,CAACC,KAAK,CAClB,CAAC,wBAAwB,EAAEL,EAAEC,OAAO,CAAC,UAAU,EAAED,EAAEE,OAAO,CAAC,mBAAmB,CAAC;IAEnF;IAEA,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,wBAAwB;IACxB,MAAM,EAAEI,mBAAmB,EAAE,GAAG,MAAM,gJAA4B;IAClEA;IAEAC;IAEA,MAAM,EAAEC,wBAAwB,EAAE,GAAG,MAAM,gJAAkC;IAC7EA;IAEA,MAAM,EAAEC,SAAS,EAAE,GAAG,MAAM,4TAAqB;IACjDA;IAEA,MAAMC,WAAW,MAAM,4TAAwB;IAC/C,MAAMA,SAASC,uBAAuB;IAEtC,MAAM,EAAEC,cAAc,EAAE,GAAG,MAAM,2TAAyB;IAC1DA;IAEAC;AACF;AAEA,SAASA;IACP,MAAMC,OAAO,CAACX,QAAQY,GAAG,CAACC,QAAQ,IAAI,EAAC,EAAGC,IAAI;IAC9C,IAAI,CAACH,MAAM;IACX,MAAMI,aACJJ,SAAS,eACTA,SAAS,SACTA,SAAS,eACTA,KAAKK,UAAU,CAAC;IAClB,IAAID,YAAY;IAChB,IAAIf,QAAQY,GAAG,CAACK,6BAA6B,KAAK,KAAK;IACvD,IAAI;QACF,MAAMC,KAA+BC,mBAAOA,CAAC,KAAS;QACtD,IAAID,GAAGE,UAAU,CAAC,gBAAgB;IACpC,EAAE,OAAM;IACN,kCAAkC,GACpC;IACA,IAAIpB,QAAQY,GAAG,CAACS,uBAAuB,EAAE;IACzCC,QAAQC,IAAI,CACV,CAAC,EAAE,CAAC,GACF,CAAC,8BAA8B,EAAEZ,KAAK,0BAA0B,CAAC,GACjE,CAAC,4EAA4E,CAAC,GAC9E,CAAC,sEAAsE,CAAC,GACxE,CAAC,wEAAwE,CAAC,GAC1E,CAAC,oDAAoD,CAAC,GACtD,CAAC,wEAAwE,CAAC,GAC1E,CAAC,kCAAkC,CAAC;AAE1C;AAEA,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,iDAAiD;AACjD,MAAMa,qBAAoCC,OAAOC,GAAG,CAAC;AAErD,SAAStB;IACP,MAAMuB,IAAI3B;IACV,IAAI2B,CAAC,CAACH,mBAAmB,EAAE;IAC3BxB,QAAQ4B,EAAE,CAAC,qBAAqB,CAACC,KAAKC;QACpC,IAAI;YACFR,QAAQS,KAAK,CACX,CAAC,2BAA2B,EAAED,OAAO,CAAC,CAAC,EACvCD,eAAeG,QAASH,IAAII,KAAK,IAAIJ,IAAIK,OAAO,GAAIC,OAAON;QAE/D,EAAE,OAAM;QACN,8CAA8C,GAChD;IACF;IACA7B,QAAQ4B,EAAE,CAAC,sBAAsB,CAACQ;QAChC,IAAI;YACFd,QAAQS,KAAK,CACX,CAAC,qBAAqB,CAAC,EACvBK,kBAAkBJ,QAASI,OAAOH,KAAK,IAAIG,OAAOF,OAAO,GAAIC,OAAOC;QAExE,EAAE,OAAM;QACN,8CAA8C,GAChD;IACF;IACAT,CAAC,CAACH,mBAAmB,GAAG;AAC1B","sources":["webpack://@circuitwall/jarela/./instrumentation-node.ts"],"sourcesContent":["// Node-only bootstrap split out of `instrumentation.ts` so the edge-runtime\n// build never has to trace its dependency graph (which transitively pulls\n// in node-only modules like `child_process` via the MCP stdio client).\n//\n// `instrumentation.ts` only loads this file when running on the nodejs\n// server in production.\n\nexport async function bootNode(): Promise<void> {\n  // ADR-0060 — apply persisted env-overrides FIRST so subsequent module\n  // imports see the overridden values from the start. Done before the\n  // logging / shutdown / tools imports because each of them caches env\n  // reads at module-init time.\n  const { applyOverridesToProcessEnv } = await import(\"@/lib/env/overrides\");\n  const r = applyOverridesToProcessEnv();\n  if (r.applied > 0 || r.skipped > 0) {\n    // Use raw stdout — console isn't patched yet and we don't want this\n    // line to land in the logs panel (the entries it produces would be\n    // pre-patch anyway).\n    process.stdout.write(\n      `[env-overrides] applied ${r.applied}, skipped ${r.skipped} (already in env)\\n`,\n    );\n  }\n\n  // ADR-0058 — install the console patch second so every subsequent\n  // boot-time log line lands in the in-memory ring + the live Logs\n  // panel feed. Idempotent (guarded by a global Symbol), so dev HMR\n  // doesn't double-patch.\n  const { installConsolePatch } = await import(\"@/lib/logging/sink\");\n  installConsolePatch();\n\n  installGlobalErrorHandlers();\n\n  const { registerShutdownHandlers } = await import(\"@/lib/lifecycle/shutdown\");\n  registerShutdownHandlers();\n\n  const { initTools } = await import(\"@/lib/tools\");\n  initTools();\n\n  const triggers = await import(\"@/lib/triggers\");\n  await triggers.startAllTriggerHandlers();\n\n  const { startScheduler } = await import(\"@/lib/scheduler\");\n  startScheduler();\n\n  warnIfExposedBind();\n}\n\nfunction warnIfExposedBind(): void {\n  const host = (process.env.HOSTNAME || \"\").trim();\n  if (!host) return;\n  const isLoopback =\n    host === \"127.0.0.1\" ||\n    host === \"::1\" ||\n    host === \"localhost\" ||\n    host.startsWith(\"127.\");\n  if (isLoopback) return;\n  if (process.env.JARELA_ALLOW_NONLOOPBACK_BIND === \"1\") return;\n  try {\n    const fs: typeof import(\"node:fs\") = require(\"node:fs\");\n    if (fs.existsSync(\"/.dockerenv\")) return;\n  } catch {\n    /* not on a POSIX runtime, ignore */\n  }\n  if (process.env.KUBERNETES_SERVICE_HOST) return;\n  console.warn(\n    `\\n` +\n      `[security] Jarela is bound to ${host}, which is NOT loopback.\\n` +\n      `           Non-loopback callers are only gated by the Tailscale-User-Login\\n` +\n      `           header, which can be forged by anyone on the LAN unless a\\n` +\n      `           Tailscale-Serve (or equivalent reverse proxy) is sitting in\\n` +\n      `           front of this process and injecting it.\\n` +\n      `           Bind to 127.0.0.1 or set JARELA_ALLOW_NONLOOPBACK_BIND=1 to\\n` +\n      `           silence this warning.\\n`,\n  );\n}\n\n// Global last-resort handlers for errors that escape every other try/catch.\n// Without these, Node's default behaviour is to print a stack to stderr\n// and (for uncaughtException) exit the process. We instead route them\n// through the patched console so the in-memory log ring and the Logs\n// panel capture them, and we keep the process alive — the launcher\n// supervisor already restarts on hard crashes, but most stray rejections\n// in HTTP handlers or background jobs shouldn't kill the whole server.\n// Idempotent via a Symbol so dev HMR / multiple imports never stack\n// handlers (which would double-log every event).\nconst HANDLERS_INSTALLED: unique symbol = Symbol.for(\"@jarela/global-error-handlers\");\ntype ProcessWithFlag = NodeJS.Process & { [HANDLERS_INSTALLED]?: true };\nfunction installGlobalErrorHandlers(): void {\n  const p = process as ProcessWithFlag;\n  if (p[HANDLERS_INSTALLED]) return;\n  process.on(\"uncaughtException\", (err, origin) => {\n    try {\n      console.error(\n        `[uncaughtException] origin=${origin}:`,\n        err instanceof Error ? (err.stack ?? err.message) : String(err),\n      );\n    } catch {\n      /* logging itself failed — nothing safe to do */\n    }\n  });\n  process.on(\"unhandledRejection\", (reason) => {\n    try {\n      console.error(\n        `[unhandledRejection]:`,\n        reason instanceof Error ? (reason.stack ?? reason.message) : String(reason),\n      );\n    } catch {\n      /* logging itself failed — nothing safe to do */\n    }\n  });\n  p[HANDLERS_INSTALLED] = true;\n}\n"],"names":["bootNode","applyOverridesToProcessEnv","r","applied","skipped","process","stdout","write","installConsolePatch","installGlobalErrorHandlers","registerShutdownHandlers","initTools","triggers","startAllTriggerHandlers","startScheduler","warnIfExposedBind","host","env","HOSTNAME","trim","isLoopback","startsWith","JARELA_ALLOW_NONLOOPBACK_BIND","fs","require","existsSync","KUBERNETES_SERVICE_HOST","console","warn","HANDLERS_INSTALLED","Symbol","for","p","on","err","origin","error","Error","stack","message","String","reason"],"sourceRoot":"","ignoreList":[]}

package/.next/standalone/.next/server/chunks/423.js

@@ -923,7 +923,8 @@ async function startDeviceFlow() {
         body: JSON.stringify({
             client_id: COPILOT_CLIENT_ID,
             scope: SCOPE
-        })
+        }),
+        signal: AbortSignal.timeout(30000)
     });
     if (!res.ok) {
         const body = await res.text().catch(()=>res.statusText);
@@ -947,7 +948,8 @@ async function pollDeviceFlow(device_code) {
             client_id: COPILOT_CLIENT_ID,
             device_code,
             grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-        })
+        }),
+        signal: AbortSignal.timeout(30000)
     });
     if (!res.ok) {
         return {
@@ -1064,7 +1066,8 @@ async function getCopilotToken(pat) {
         headers: {
             Authorization: `token ${pat}`,
             "User-Agent": "Jarela/1.0"
-        }
+        },
+        signal: AbortSignal.timeout(30000)
     });
     if (!res.ok) {
         const body = await res.text().catch(()=>res.statusText);