@circuitwall/jarela 1.4.0 → 1.4.1

package/.next/standalone/.next/server/chunks/8167.js

@@ -141,14 +141,14 @@ async function request(path, init) {
                 signal: timeoutCtrl.signal
             });
             if (!res.ok) {
-                // 423 screen-locked: surface a window event so the AppShell can
-                // mount the ScreenLock overlay. We still throw so the caller
-                // sees the failure, but no point retrying — the lock isn't
-                // going to clear on its own.
+                // 423 lock states: distinct events so AppShell can mount the
+                // right overlay (decrypt vs presence-check). Both throw so the
+                // caller still sees the failure — no point retrying, the lock
+                // isn't going to clear on its own.
                 if (res.status === 423) {
                     const cloned = res.clone();
                     const body = await cloned.json().catch(()=>null);
-                    if (body?.error === "screen-locked" && "undefined" !== "undefined") {}
+                    if (false) {}
                     throw new Error(`423 ${body?.error ?? "locked"}`);
                 }
                 const text = await res.text().catch(()=>res.statusText);
@@ -926,210 +926,26 @@ const api = {
 /* harmony export */ });
 /* harmony import */ var react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(48249);
 /* harmony import */ var react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(67484);
-/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_1___default = /*#__PURE__*/__webpack_require__.n(react__WEBPACK_IMPORTED_MODULE_1__);
-/* harmony import */ var _components_ui_Logo__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(41357);
+/* harmony import */ var next_navigation__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(19099);
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(67484);
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(react__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var _PinKeypad__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(71654);
 /* __next_internal_client_entry_do_not_use__ UnlockScreen auto */ 
 
 
-// PIN unlock splash for ADR-0063 PIN-wrapped keyfiles. Rendered by the
-// root route when the server detects the master key is locked. Submits
-// the 6-digit PIN to /api/v1/security/unlock; on success, reloads so
-// the server re-renders into the normal authenticated tree.
-const PIN_LENGTH = 6;
-function UnlockScreen() {
-    const [digits, setDigits] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)("");
-    const [error, setError] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(null);
-    const [submitting, setSubmitting] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(false);
-    const [retryAfterSec, setRetryAfterSec] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(0);
-    const containerRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(null);
-    // Hard guard against parallel submits. setState updaters can run more
-    // than once (dev StrictMode, concurrent rendering), so if `submit`
-    // were called from inside `setDigits` we'd POST twice and the second
-    // request would race the first into `unlockMasterKey()` after state
-    // already flipped to unlocked - the route would 500.
-    const submittingRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(false);
-    const submit = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)(async (pin)=>{
-        if (submittingRef.current) return;
-        submittingRef.current = true;
-        setSubmitting(true);
-        setError(null);
-        try {
-            const res = await fetch("/api/v1/security/unlock", {
-                method: "POST",
-                headers: {
-                    "content-type": "application/json"
-                },
-                body: JSON.stringify({
-                    pin
-                })
-            });
-            if (res.ok) {
-                window.location.reload();
-                return;
-            }
-            const body = await res.json().catch(()=>({}));
-            if (res.status === 409 && body.error === "not-locked") {
-                // Master key was already unlocked (host typed the PIN, or
-                // another tab beat us to it). The goal state is reached —
-                // reload into the app shell.
-                window.location.reload();
-                return;
-            }
-            if (res.status === 429 && typeof body.retry_after_ms === "number") {
-                setRetryAfterSec(Math.ceil(body.retry_after_ms / 1000));
-                setError("Too many attempts. Try again later.");
-            } else if (res.status === 401) {
-                setError("Wrong PIN. Try again.");
-            } else if (res.status === 400) {
-                setError("Invalid PIN format.");
-            } else {
-                setError(body.error ?? `Error (${res.status})`);
-            }
-            setDigits("");
-        } catch (err) {
-            setError(err instanceof Error ? err.message : String(err));
-            setDigits("");
-        } finally{
-            submittingRef.current = false;
-            setSubmitting(false);
-        }
-    }, []);
-    const append = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)((d)=>{
-        if (submitting || retryAfterSec > 0) return;
-        setError(null);
-        setDigits((cur)=>cur.length >= PIN_LENGTH ? cur : cur + d);
-    }, [
-        submitting,
-        retryAfterSec
-    ]);
-    // Auto-submit once the buffer hits 6 digits. Effect runs once per
-    // state transition (not per updater invocation), so we POST exactly
-    // one time even under StrictMode double-render.
-    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
-        if (digits.length === PIN_LENGTH && !submittingRef.current) {
-            void submit(digits);
-        }
-    }, [
-        digits,
-        submit
-    ]);
-    const backspace = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)(()=>{
-        if (submitting) return;
-        setError(null);
-        setDigits((cur)=>cur.slice(0, -1));
-    }, [
-        submitting
-    ]);
-    // Physical keyboard support.
-    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
-        function onKey(e) {
-            if (/^[0-9]$/.test(e.key)) {
-                e.preventDefault();
-                append(e.key);
-            } else if (e.key === "Backspace") {
-                e.preventDefault();
-                backspace();
-            }
-        }
-        window.addEventListener("keydown", onKey);
-        return ()=>window.removeEventListener("keydown", onKey);
-    }, [
-        append,
-        backspace
-    ]);
-    // Tick down the rate-limit countdown.
-    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
-        if (retryAfterSec <= 0) return;
-        const t = setInterval(()=>{
-            setRetryAfterSec((s)=>s > 0 ? s - 1 : 0);
-        }, 1000);
-        return ()=>clearInterval(t);
+
+function UnlockScreen({ onUnlock } = {}) {
+    const router = (0,next_navigation__WEBPACK_IMPORTED_MODULE_1__.useRouter)();
+    const onSuccess = (0,react__WEBPACK_IMPORTED_MODULE_2__.useCallback)(()=>{
+        if (onUnlock) onUnlock();
+        else router.refresh();
     }, [
-        retryAfterSec
+        onUnlock,
+        router
     ]);
-    return /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
-        ref: containerRef,
-        className: "fixed inset-0 z-[1000] flex flex-col items-center justify-center gap-6 bg-surface text-fg",
-        style: {
-            paddingTop: "env(safe-area-inset-top)",
-            paddingBottom: "env(safe-area-inset-bottom)"
-        },
-        children: [
-            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(_components_ui_Logo__WEBPACK_IMPORTED_MODULE_2__/* .Logo */ .g, {
-                className: "h-16 w-auto"
-            }),
-            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
-                className: "w-full max-w-xs p-6",
-                children: [
-                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("h1", {
-                        className: "mb-1 text-center text-lg font-semibold text-fg",
-                        children: "Unlock Jarela"
-                    }),
-                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("p", {
-                        className: "mb-6 text-center text-xs text-fg-faint",
-                        children: "Enter your 6-digit PIN to decrypt your data."
-                    }),
-                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
-                        className: "mb-6 flex justify-center gap-3",
-                        "aria-label": "PIN entry progress",
-                        children: Array.from({
-                            length: PIN_LENGTH
-                        }).map((_, i)=>/*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("span", {
-                                className: `h-3 w-3 rounded-full transition-colors ${i < digits.length ? error ? "bg-red-500" : "bg-fg" : "bg-surface-3"}`
-                            }, i))
-                    }),
-                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
-                        className: "grid grid-cols-3 gap-2",
-                        children: [
-                            [
-                                "1",
-                                "2",
-                                "3",
-                                "4",
-                                "5",
-                                "6",
-                                "7",
-                                "8",
-                                "9"
-                            ].map((d)=>/*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
-                                    digit: d,
-                                    onPress: ()=>append(d),
-                                    disabled: submitting || retryAfterSec > 0
-                                }, d)),
-                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {}),
-                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
-                                digit: "0",
-                                onPress: ()=>append("0"),
-                                disabled: submitting || retryAfterSec > 0
-                            }),
-                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
-                                digit: "←",
-                                onPress: backspace,
-                                disabled: submitting || digits.length === 0,
-                                ariaLabel: "Backspace"
-                            })
-                        ]
-                    }),
-                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("p", {
-                        className: `mt-4 min-h-[1.5rem] text-center text-xs ${error ? "text-red-400" : "text-fg-faint"}`,
-                        role: "status",
-                        "aria-live": "polite",
-                        children: retryAfterSec > 0 ? `Try again in ${retryAfterSec}s` : error ?? (submitting ? "Unlocking…" : "\u00A0")
-                    })
-                ]
-            })
-        ]
-    });
-}
-function PinKey({ digit, onPress, disabled, ariaLabel }) {
-    return /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("button", {
-        type: "button",
-        onClick: onPress,
-        disabled: disabled,
-        "aria-label": ariaLabel ?? digit,
-        className: "h-14 rounded-xl bg-surface-3 text-xl font-medium text-fg transition-colors hover:bg-surface-3/70 active:bg-surface-3/50 disabled:cursor-not-allowed disabled:opacity-50",
-        children: digit
+    return /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(_PinKeypad__WEBPACK_IMPORTED_MODULE_3__/* .PinKeypad */ .y, {
+        mode: "decrypt",
+        onSuccess: onSuccess
     });
 }
 
@@ -1757,6 +1573,241 @@ function() { throw new Error("Attempted to call UnlockScreen() from the server b
 "UnlockScreen",
 );
 
+/***/ }),
+
+/***/ 71654:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   y: () => (/* binding */ PinKeypad)
+/* harmony export */ });
+/* harmony import */ var react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(48249);
+/* harmony import */ var react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(67484);
+/* harmony import */ var react__WEBPACK_IMPORTED_MODULE_1___default = /*#__PURE__*/__webpack_require__.n(react__WEBPACK_IMPORTED_MODULE_1__);
+/* harmony import */ var _components_ui_Logo__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(41357);
+/* __next_internal_client_entry_do_not_use__ PinKeypad auto */ 
+
+
+// Shared 6-digit PIN keypad used by both the decrypt splash (master key
+// locked at boot) and the screen-lock overlay (idle timer fired). The
+// only differences between the two states are (a) the endpoint hit
+// (b) the copy on screen and (c) what happens after success. Everything
+// else — keypad layout, dot strip, rate-limit handling, keyboard
+// support, error mapping — is identical, so the two were collapsed into
+// one component to avoid drift.
+const PIN_LENGTH = 6;
+const MODES = {
+    decrypt: {
+        endpoint: "/api/v1/security/unlock",
+        title: "Decrypt Jarela",
+        subtitle: "Enter your 6-digit PIN to decrypt your data.",
+        busyLabel: "Decrypting\u2026"
+    },
+    unlock: {
+        endpoint: "/api/v1/security/verify-pin",
+        title: "Welcome back",
+        subtitle: "Enter your 6-digit PIN to unlock.",
+        busyLabel: "Unlocking\u2026"
+    }
+};
+function PinKeypad({ mode, onSuccess }) {
+    const cfg = MODES[mode];
+    const [digits, setDigits] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)("");
+    const [error, setError] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(null);
+    const [submitting, setSubmitting] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(false);
+    const [retryAfterSec, setRetryAfterSec] = (0,react__WEBPACK_IMPORTED_MODULE_1__.useState)(0);
+    // Hard guard against parallel submits. setState updaters can run more
+    // than once (dev StrictMode, concurrent rendering), so if `submit`
+    // were called from inside `setDigits` we'd POST twice and the second
+    // request would race the first into `unlockMasterKey()` after state
+    // already flipped to unlocked — the route would 500.
+    const submittingRef = (0,react__WEBPACK_IMPORTED_MODULE_1__.useRef)(false);
+    const submit = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)(async (pin)=>{
+        if (submittingRef.current) return;
+        submittingRef.current = true;
+        setSubmitting(true);
+        setError(null);
+        try {
+            const res = await fetch(cfg.endpoint, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json"
+                },
+                body: JSON.stringify({
+                    pin
+                })
+            });
+            if (res.ok) {
+                onSuccess();
+                return;
+            }
+            const body = await res.json().catch(()=>({}));
+            // Goal-state convergence: both endpoints can return 409 when the
+            // server already reached the target state (decrypt → master key
+            // already unlocked; unlock → screen not locked). Treat as success
+            // rather than surfacing a confusing error.
+            if (res.status === 409 && (body.error === "not-locked" || body.error === "no-pin")) {
+                onSuccess();
+                return;
+            }
+            if (res.status === 429 && typeof body.retry_after_ms === "number") {
+                setRetryAfterSec(Math.ceil(body.retry_after_ms / 1000));
+                setError("Too many attempts. Try again later.");
+            } else if (res.status === 401) {
+                setError("Wrong PIN. Try again.");
+            } else if (res.status === 400) {
+                setError("Invalid PIN format.");
+            } else {
+                setError(body.error ?? `Error (${res.status})`);
+            }
+            setDigits("");
+        } catch (err) {
+            setError(err instanceof Error ? err.message : String(err));
+            setDigits("");
+        } finally{
+            submittingRef.current = false;
+            setSubmitting(false);
+        }
+    }, [
+        cfg.endpoint,
+        onSuccess
+    ]);
+    const append = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)((d)=>{
+        if (submitting || retryAfterSec > 0) return;
+        setError(null);
+        setDigits((cur)=>cur.length >= PIN_LENGTH ? cur : cur + d);
+    }, [
+        submitting,
+        retryAfterSec
+    ]);
+    // Auto-submit once the buffer hits 6 digits.
+    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
+        if (digits.length === PIN_LENGTH && !submittingRef.current) {
+            void submit(digits);
+        }
+    }, [
+        digits,
+        submit
+    ]);
+    const backspace = (0,react__WEBPACK_IMPORTED_MODULE_1__.useCallback)(()=>{
+        if (submitting) return;
+        setError(null);
+        setDigits((cur)=>cur.slice(0, -1));
+    }, [
+        submitting
+    ]);
+    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
+        function onKey(e) {
+            if (/^[0-9]$/.test(e.key)) {
+                e.preventDefault();
+                append(e.key);
+            } else if (e.key === "Backspace") {
+                e.preventDefault();
+                backspace();
+            }
+        }
+        window.addEventListener("keydown", onKey);
+        return ()=>window.removeEventListener("keydown", onKey);
+    }, [
+        append,
+        backspace
+    ]);
+    process.env.__NEXT_PRIVATE_MINIMIZE_MACRO_FALSE && (0,react__WEBPACK_IMPORTED_MODULE_1__.useEffect)(()=>{
+        if (retryAfterSec <= 0) return;
+        const t = setInterval(()=>{
+            setRetryAfterSec((s)=>s > 0 ? s - 1 : 0);
+        }, 1000);
+        return ()=>clearInterval(t);
+    }, [
+        retryAfterSec
+    ]);
+    return /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
+        className: "fixed inset-0 z-[1000] flex flex-col items-center justify-center gap-6 bg-surface text-fg animate-in fade-in duration-200",
+        style: {
+            paddingTop: "env(safe-area-inset-top)",
+            paddingBottom: "env(safe-area-inset-bottom)"
+        },
+        "data-pin-mode": mode,
+        children: [
+            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(_components_ui_Logo__WEBPACK_IMPORTED_MODULE_2__/* .Logo */ .g, {
+                className: "h-16 w-auto"
+            }),
+            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
+                className: "w-full max-w-xs p-6",
+                children: [
+                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("h1", {
+                        className: "mb-1 text-center text-lg font-semibold text-fg",
+                        children: cfg.title
+                    }),
+                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("p", {
+                        className: "mb-6 text-center text-xs text-fg-faint",
+                        children: cfg.subtitle
+                    }),
+                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {
+                        className: "mb-6 flex justify-center gap-3",
+                        "aria-label": "PIN entry progress",
+                        children: Array.from({
+                            length: PIN_LENGTH
+                        }).map((_, i)=>/*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("span", {
+                                className: `h-3 w-3 rounded-full transition-colors ${i < digits.length ? error ? "bg-red-500" : "bg-fg" : "bg-surface-3"}`
+                            }, i))
+                    }),
+                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsxs)("div", {
+                        className: "grid grid-cols-3 gap-2",
+                        children: [
+                            [
+                                "1",
+                                "2",
+                                "3",
+                                "4",
+                                "5",
+                                "6",
+                                "7",
+                                "8",
+                                "9"
+                            ].map((d)=>/*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
+                                    digit: d,
+                                    onPress: ()=>append(d),
+                                    disabled: submitting || retryAfterSec > 0
+                                }, d)),
+                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("div", {}),
+                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
+                                digit: "0",
+                                onPress: ()=>append("0"),
+                                disabled: submitting || retryAfterSec > 0
+                            }),
+                            /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)(PinKey, {
+                                digit: "\\u2190",
+                                onPress: backspace,
+                                disabled: submitting || digits.length === 0,
+                                ariaLabel: "Backspace"
+                            })
+                        ]
+                    }),
+                    /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("p", {
+                        className: `mt-4 min-h-[1.5rem] text-center text-xs ${error ? "text-red-400" : "text-fg-faint"}`,
+                        role: "status",
+                        "aria-live": "polite",
+                        children: retryAfterSec > 0 ? `Try again in ${retryAfterSec}s` : error ?? (submitting ? cfg.busyLabel : "\u00A0")
+                    })
+                ]
+            })
+        ]
+    });
+}
+function PinKey({ digit, onPress, disabled, ariaLabel }) {
+    return /*#__PURE__*/ (0,react_jsx_runtime__WEBPACK_IMPORTED_MODULE_0__.jsx)("button", {
+        type: "button",
+        onClick: onPress,
+        disabled: disabled,
+        "aria-label": ariaLabel ?? digit,
+        className: "h-14 rounded-xl bg-surface-3 text-xl font-medium text-fg transition-colors hover:bg-surface-3/70 active:bg-surface-3/50 disabled:cursor-not-allowed disabled:opacity-50",
+        children: digit
+    });
+}
+
+
 /***/ }),
 
 /***/ 95984: