@circuitwall/jarela 1.4.0 → 1.4.1

package/.next/standalone/.next/static/chunks/app/{page-74846c864241b96d.js → page-145150e0468544e7.js}

@@ -23096,195 +23096,26 @@ function BootScreen({ agents, agentsLoaded, activeAgentId, onPickAgent, suppress
     });
 }
 
+// EXTERNAL MODULE: ./components/setup/PinKeypad.tsx
+var PinKeypad = __webpack_require__(772);
 ;// ./components/setup/ScreenLock.tsx
 /* __next_internal_client_entry_do_not_use__ ScreenLock auto */ 
 
-
-// Screen-lock overlay (presence check). Shown when the server reports
-// `screen_locked: true` after an idle timeout. Distinct from
-// UnlockScreen — this does NOT touch the in-memory master key, just
-// verifies the human at the keyboard knows the PIN. Background work
-// (agents, scheduler, bridges) keeps running underneath.
-const PIN_LENGTH = 6;
+// Screen-lock overlay (presence check). Mounted by AppShell when the
+// idle timer fires or the server returns 423 `screen-locked`. Does
+// NOT touch the in-memory master key — background work (agents,
+// scheduler, bridges) keeps running underneath. The /verify-pin
+// endpoint just confirms the human at the keyboard and clears the
+// idle flag.
 function ScreenLock({ onUnlock }) {
-    const [digits, setDigits] = (0,react.useState)("");
-    const [error, setError] = (0,react.useState)(null);
-    const [submitting, setSubmitting] = (0,react.useState)(false);
-    const [retryAfterSec, setRetryAfterSec] = (0,react.useState)(0);
-    const submittingRef = (0,react.useRef)(false);
-    const submit = (0,react.useCallback)(async (pin)=>{
-        if (submittingRef.current) return;
-        submittingRef.current = true;
-        setSubmitting(true);
-        setError(null);
-        try {
-            const res = await fetch("/api/v1/security/verify-pin", {
-                method: "POST",
-                headers: {
-                    "content-type": "application/json"
-                },
-                body: JSON.stringify({
-                    pin
-                })
-            });
-            if (res.ok) {
-                onUnlock();
-                return;
-            }
-            const body = await res.json().catch(()=>({}));
-            if (res.status === 429 && typeof body.retry_after_ms === "number") {
-                setRetryAfterSec(Math.ceil(body.retry_after_ms / 1000));
-                setError("Too many attempts. Try again later.");
-            } else if (res.status === 401) {
-                setError("Wrong PIN. Try again.");
-            } else if (res.status === 400) {
-                setError("Invalid PIN format.");
-            } else {
-                setError(body.error ?? `Error (${res.status})`);
-            }
-            setDigits("");
-        } catch (err) {
-            setError(err instanceof Error ? err.message : String(err));
-            setDigits("");
-        } finally{
-            submittingRef.current = false;
-            setSubmitting(false);
-        }
-    }, [
-        onUnlock
-    ]);
-    const append = (0,react.useCallback)((d)=>{
-        if (submitting || retryAfterSec > 0) return;
-        setError(null);
-        setDigits((cur)=>cur.length >= PIN_LENGTH ? cur : cur + d);
-    }, [
-        submitting,
-        retryAfterSec
-    ]);
-    (0,react.useEffect)(()=>{
-        if (digits.length === PIN_LENGTH && !submittingRef.current) {
-            void submit(digits);
-        }
-    }, [
-        digits,
-        submit
-    ]);
-    const backspace = (0,react.useCallback)(()=>{
-        if (submitting) return;
-        setError(null);
-        setDigits((cur)=>cur.slice(0, -1));
-    }, [
-        submitting
-    ]);
-    (0,react.useEffect)(()=>{
-        function onKey(e) {
-            if (/^[0-9]$/.test(e.key)) {
-                e.preventDefault();
-                append(e.key);
-            } else if (e.key === "Backspace") {
-                e.preventDefault();
-                backspace();
-            }
-        }
-        window.addEventListener("keydown", onKey);
-        return ()=>window.removeEventListener("keydown", onKey);
-    }, [
-        append,
-        backspace
-    ]);
-    (0,react.useEffect)(()=>{
-        if (retryAfterSec <= 0) return;
-        const t = setInterval(()=>{
-            setRetryAfterSec((s)=>s > 0 ? s - 1 : 0);
-        }, 1000);
-        return ()=>clearInterval(t);
-    }, [
-        retryAfterSec
-    ]);
-    return /*#__PURE__*/ (0,jsx_runtime.jsxs)("div", {
-        className: "fixed inset-0 z-[1000] flex flex-col items-center justify-center gap-6 bg-surface text-fg",
-        style: {
-            paddingTop: "env(safe-area-inset-top)",
-            paddingBottom: "env(safe-area-inset-bottom)"
-        },
-        children: [
-            /*#__PURE__*/ (0,jsx_runtime.jsx)(Logo/* Logo */.g, {
-                className: "h-16 w-auto"
-            }),
-            /*#__PURE__*/ (0,jsx_runtime.jsxs)("div", {
-                className: "w-full max-w-xs p-6",
-                children: [
-                    /*#__PURE__*/ (0,jsx_runtime.jsx)("h1", {
-                        className: "mb-1 text-center text-lg font-semibold text-fg",
-                        children: "Locked"
-                    }),
-                    /*#__PURE__*/ (0,jsx_runtime.jsx)("p", {
-                        className: "mb-6 text-center text-xs text-fg-faint",
-                        children: "Enter your 6-digit PIN to resume."
-                    }),
-                    /*#__PURE__*/ (0,jsx_runtime.jsx)("div", {
-                        className: "mb-6 flex justify-center gap-3",
-                        "aria-label": "PIN entry progress",
-                        children: Array.from({
-                            length: PIN_LENGTH
-                        }).map((_, i)=>/*#__PURE__*/ (0,jsx_runtime.jsx)("span", {
-                                className: `h-3 w-3 rounded-full transition-colors ${i < digits.length ? error ? "bg-red-500" : "bg-fg" : "bg-surface-3"}`
-                            }, i))
-                    }),
-                    /*#__PURE__*/ (0,jsx_runtime.jsxs)("div", {
-                        className: "grid grid-cols-3 gap-2",
-                        children: [
-                            [
-                                "1",
-                                "2",
-                                "3",
-                                "4",
-                                "5",
-                                "6",
-                                "7",
-                                "8",
-                                "9"
-                            ].map((d)=>/*#__PURE__*/ (0,jsx_runtime.jsx)(PinKey, {
-                                    digit: d,
-                                    onPress: ()=>append(d),
-                                    disabled: submitting || retryAfterSec > 0
-                                }, d)),
-                            /*#__PURE__*/ (0,jsx_runtime.jsx)("div", {}),
-                            /*#__PURE__*/ (0,jsx_runtime.jsx)(PinKey, {
-                                digit: "0",
-                                onPress: ()=>append("0"),
-                                disabled: submitting || retryAfterSec > 0
-                            }),
-                            /*#__PURE__*/ (0,jsx_runtime.jsx)(PinKey, {
-                                digit: "←",
-                                onPress: backspace,
-                                disabled: submitting || digits.length === 0,
-                                ariaLabel: "Backspace"
-                            })
-                        ]
-                    }),
-                    /*#__PURE__*/ (0,jsx_runtime.jsx)("p", {
-                        className: `mt-4 min-h-[1.5rem] text-center text-xs ${error ? "text-red-400" : "text-fg-faint"}`,
-                        role: "status",
-                        "aria-live": "polite",
-                        children: retryAfterSec > 0 ? `Try again in ${retryAfterSec}s` : error ?? (submitting ? "Verifying…" : "\u00A0")
-                    })
-                ]
-            })
-        ]
-    });
-}
-function PinKey({ digit, onPress, disabled, ariaLabel }) {
-    return /*#__PURE__*/ (0,jsx_runtime.jsx)("button", {
-        type: "button",
-        onClick: onPress,
-        disabled: disabled,
-        "aria-label": ariaLabel ?? digit,
-        className: "h-14 rounded-xl bg-surface-3 text-xl font-medium text-fg transition-colors hover:bg-surface-3/70 active:bg-surface-3/50 disabled:cursor-not-allowed disabled:opacity-50",
-        children: digit
+    return /*#__PURE__*/ (0,jsx_runtime.jsx)(PinKeypad/* PinKeypad */.y, {
+        mode: "unlock",
+        onSuccess: onUnlock
     });
 }
 
+// EXTERNAL MODULE: ./components/setup/UnlockScreen.tsx
+var UnlockScreen = __webpack_require__(2283);
 // EXTERNAL MODULE: ./node_modules/lucide-react/dist/esm/icons/message-square.mjs
 var message_square = __webpack_require__(5494);
 // EXTERNAL MODULE: ./node_modules/lucide-react/dist/esm/icons/chart-column.mjs
@@ -25723,6 +25554,7 @@ function InteractiveCostChart({ series, currencyInfo, selectedDay, onSelectDay }
 
 
 
+
 
 
 const AppShell_ADVANCED_TABS = new Set([
@@ -25893,24 +25725,30 @@ function AppShell() {
         showAgentPicker
     ]);
     const activeAgent = state.activeAgentId ? agents.find((a)=>a.id === state.activeAgentId) ?? null : null;
-    // Screen-lock overlay. Distinct from the boot-time master-key unlock
-    // (that's gated server-side in `app/page.tsx`). This one is the
-    // presence check that fires after `idle_timeout_ms` of inactivity:
-    // background work keeps running but the UI is hidden until the user
-    // re-enters their PIN. Triggered either by a 423 `screen-locked`
-    // response from the api client or by the periodic state probe below.
+    // Screen-lock overlay (presence check) AND master-key-locked overlay
+    // (decrypt). Distinct from the boot-time gate in `app/page.tsx`:
+    // those mounts are triggered mid-session — either by an idle timer
+    // (screen-lock) or by the master key being re-locked by an external
+    // process (decrypt). Both are signalled by the API client when it
+    // sees the matching 423 response.
     const [screenLocked, setScreenLocked] = (0,react.useState)(false);
+    const [masterKeyLocked, setMasterKeyLocked] = (0,react.useState)(false);
     // Bumped after each unlock so BootScreen remounts with fresh state
     // (its `done` / `pickedId` / `prefetchStartedRef` would otherwise
-    // suppress the picker on the second appearance).
+    // suppress the picker on the second appearance). Both unlock paths
+    // bump this — the agent selector is always the post-unlock landing.
     const [bootSeq, setBootSeq] = (0,react.useState)(0);
     (0,react.useEffect)(()=>{
         let cancelled = false;
         let timer = null;
-        function onLocked() {
+        function onScreenLocked() {
             if (!cancelled) setScreenLocked(true);
         }
-        window.addEventListener("jarela:screen-locked", onLocked);
+        function onMasterKeyLocked() {
+            if (!cancelled) setMasterKeyLocked(true);
+        }
+        window.addEventListener("jarela:screen-locked", onScreenLocked);
+        window.addEventListener("jarela:master-key-locked", onMasterKeyLocked);
         // Soft poll every 30s so the overlay still appears if no user
         // action triggered a request after the idle timer elapsed.
         async function probe() {
@@ -25918,11 +25756,13 @@ function AppShell() {
                 const res = await fetch("/api/v1/security/state");
                 if (!res.ok) return;
                 const body = await res.json();
-                if (!cancelled && body.screen_locked === true) {
-                    setScreenLocked(true);
-                }
-            } catch  {
-            // Network blip; try again next tick.
+                if (cancelled) return;
+                if (body.state === "locked") setMasterKeyLocked(true);
+                if (body.screen_locked === true) setScreenLocked(true);
+            } catch (err) {
+                // Network blip; try again next tick. Logged at debug-level so
+                // a sustained outage is at least findable in devtools.
+                if (false) {}
             }
         }
         void probe();
@@ -25930,9 +25770,22 @@ function AppShell() {
         return ()=>{
             cancelled = true;
             if (timer) clearInterval(timer);
-            window.removeEventListener("jarela:screen-locked", onLocked);
+            window.removeEventListener("jarela:screen-locked", onScreenLocked);
+            window.removeEventListener("jarela:master-key-locked", onMasterKeyLocked);
         };
     }, []);
+    // Shared post-unlock landing: clear the current chat and force the
+    // BootScreen to remount so the user lands on the agent picker. Used
+    // by BOTH the screen-unlock and the master-key decrypt paths so the
+    // two transitions feel identical from the user's side.
+    const landOnAgentPicker = (0,react.useCallback)(()=>{
+        dispatch({
+            type: "NEW_CHAT"
+        });
+        setBootSeq((n)=>n + 1);
+    }, [
+        dispatch
+    ]);
     return(// `dvh` natively tracks the visible viewport on iOS 16.4+ / modern
     // Chromium, including the on-screen keyboard. The `--actual-vh`
     // override (set by the iOS-standalone-PWA shim in layout.tsx) covers
@@ -25966,13 +25819,21 @@ function AppShell() {
                 onUnlock: ()=>{
                     // Drop the user back on the picker so they consciously
                     // re-enter their workspace rather than landing mid-chat.
-                    dispatch({
-                        type: "NEW_CHAT"
-                    });
-                    setBootSeq((n)=>n + 1);
+                    landOnAgentPicker();
                     setScreenLocked(false);
                 }
             }),
+            masterKeyLocked && !screenLocked && // Master key got re-locked mid-session (e.g. external lock
+            // command). Mount the decrypt splash — same shared keypad as
+            // boot — and on success drop back to the agent picker. The
+            // existing components below stay mounted underneath; once
+            // unlocked they resume against the now-unlocked DB.
+            /*#__PURE__*/ (0,jsx_runtime.jsx)(UnlockScreen.UnlockScreen, {
+                onUnlock: ()=>{
+                    landOnAgentPicker();
+                    setMasterKeyLocked(false);
+                }
+            }),
             /*#__PURE__*/ (0,jsx_runtime.jsx)(NotificationStatus, {}),
             /*#__PURE__*/ (0,jsx_runtime.jsx)(Toaster, {}),
             /*#__PURE__*/ (0,jsx_runtime.jsx)(ServerStatus, {}),
@@ -26220,9 +26081,9 @@ Promise.resolve(/* import() eager */).then(__webpack_require__.bind(__webpack_re
 },
 /******/ __webpack_require__ => { // webpackRuntimeModules
 /******/ var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-/******/ __webpack_require__.O(0, [1973,9209,7537,2351,8441,3457,7358], () => (__webpack_exec__(9852)));
+/******/ __webpack_require__.O(0, [1973,4097,7537,2351,8441,3457,7358], () => (__webpack_exec__(9852)));
 /******/ var __webpack_exports__ = __webpack_require__.O();
 /******/ _N_E = __webpack_exports__;
 /******/ }
 ]);
-//# sourceMappingURL=page-74846c864241b96d.js.map
+//# sourceMappingURL=page-145150e0468544e7.js.map