@circuitwall/jarela 2.2.0 → 2.3.0

package/.next/standalone/.next/server/app/api/v1/profile/location/route.js

@@ -204,7 +204,35 @@ module.exports = require("node:zlib");
 
 /***/ }),
 
-/***/ 40207:
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 51565:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
@@ -646,34 +674,6 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
 /***/ }),
 
 /***/ 55511:
@@ -860,7 +860,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(40207)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(51565)));
 module.exports = __webpack_exports__;
 
 })();

package/.next/standalone/.next/server/app/api/v1/profile/route.js

@@ -68,169 +68,7 @@ module.exports = require("next/dist/server/app-render/action-async-storage.exter
 
 /***/ }),
 
-/***/ 27910:
-/***/ ((module) => {
-
-module.exports = require("stream");
-
-/***/ }),
-
-/***/ 28354:
-/***/ ((module) => {
-
-module.exports = require("util");
-
-/***/ }),
-
-/***/ 29021:
-/***/ ((module) => {
-
-module.exports = require("fs");
-
-/***/ }),
-
-/***/ 29294:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
-
-/***/ }),
-
-/***/ 31421:
-/***/ ((module) => {
-
-module.exports = require("node:child_process");
-
-/***/ }),
-
-/***/ 33873:
-/***/ ((module) => {
-
-module.exports = require("path");
-
-/***/ }),
-
-/***/ 37067:
-/***/ ((module) => {
-
-module.exports = require("node:http");
-
-/***/ }),
-
-/***/ 38522:
-/***/ ((module) => {
-
-module.exports = require("node:zlib");
-
-/***/ }),
-
-/***/ 39947:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Bm: () => (/* binding */ cachedJson),
-/* harmony export */   HN: () => (/* binding */ notFoundResponse),
-/* harmony export */   Jb: () => (/* binding */ validateBody),
-/* harmony export */   K2: () => (/* binding */ createdResponse),
-/* harmony export */   Ng: () => (/* binding */ noStoreJson),
-/* harmony export */   yj: () => (/* binding */ errorResponse)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-// Shared HTTP response builders for app/api/v1/** route handlers.
-//
-// Goal: every error/success payload across the v1 surface has the same
-// shape. Before this lived inline, response bodies drifted —
-// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
-// some routes returned Zod's raw issue array, others stringified it.
-
-function errorResponse(message, status = 400) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        error: message
-    }, {
-        status
-    });
-}
-function notFoundResponse(message = "Not found") {
-    return errorResponse(message, 404);
-}
-function createdResponse(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        status: 201
-    });
-}
-// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
-// GET endpoints that serve user-scoped data the client refetches often (panel
-// mounts, navigation back/forward) but mutates rarely. The TTL is short
-// enough that explicit mutations — which patch the client-side ApiClient
-// cache in place — stay observably consistent without an extra roundtrip.
-//
-// swrSeconds (optional): stale-while-revalidate window. When set, the browser
-// serves the cached response immediately and refreshes in the background,
-// making navigation feel instant. Use for data that can tolerate brief
-// staleness (tool list, agent configs, model list). Omit for real-time data
-// (dashboard metrics, credential state).
-function cachedJson(data, maxAgeSeconds, swrSeconds) {
-    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
-        }
-    });
-}
-// Use for endpoints whose response contains live state that must never be
-// served from cache — credentials, connection status, live config values.
-function noStoreJson(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": "no-store"
-        }
-    });
-}
-// Validate a JSON request body against a zod schema.
-// Returns either the parsed data or a 400 NextResponse explaining the issue.
-// Caller pattern:
-//   const parsed = await validateBody(req, Schema);
-//   if (parsed instanceof NextResponse) return parsed;
-//   // use parsed.field
-async function validateBody(req, schema) {
-    let raw;
-    try {
-        raw = await req.json();
-    } catch  {
-        return errorResponse("Request body must be valid JSON", 400);
-    }
-    const parsed = schema.safeParse(raw);
-    if (!parsed.success) {
-        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
-    }
-    return parsed.data;
-}
-
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 49527:
+/***/ 25573:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
@@ -672,6 +510,168 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
+/***/ }),
+
+/***/ 27910:
+/***/ ((module) => {
+
+module.exports = require("stream");
+
+/***/ }),
+
+/***/ 28354:
+/***/ ((module) => {
+
+module.exports = require("util");
+
+/***/ }),
+
+/***/ 29021:
+/***/ ((module) => {
+
+module.exports = require("fs");
+
+/***/ }),
+
+/***/ 29294:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
+
+/***/ }),
+
+/***/ 31421:
+/***/ ((module) => {
+
+module.exports = require("node:child_process");
+
+/***/ }),
+
+/***/ 33873:
+/***/ ((module) => {
+
+module.exports = require("path");
+
+/***/ }),
+
+/***/ 37067:
+/***/ ((module) => {
+
+module.exports = require("node:http");
+
+/***/ }),
+
+/***/ 38522:
+/***/ ((module) => {
+
+module.exports = require("node:zlib");
+
+/***/ }),
+
+/***/ 39947:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Bm: () => (/* binding */ cachedJson),
+/* harmony export */   HN: () => (/* binding */ notFoundResponse),
+/* harmony export */   Jb: () => (/* binding */ validateBody),
+/* harmony export */   K2: () => (/* binding */ createdResponse),
+/* harmony export */   Ng: () => (/* binding */ noStoreJson),
+/* harmony export */   yj: () => (/* binding */ errorResponse)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+// Shared HTTP response builders for app/api/v1/** route handlers.
+//
+// Goal: every error/success payload across the v1 surface has the same
+// shape. Before this lived inline, response bodies drifted —
+// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
+// some routes returned Zod's raw issue array, others stringified it.
+
+function errorResponse(message, status = 400) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        error: message
+    }, {
+        status
+    });
+}
+function notFoundResponse(message = "Not found") {
+    return errorResponse(message, 404);
+}
+function createdResponse(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        status: 201
+    });
+}
+// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
+// GET endpoints that serve user-scoped data the client refetches often (panel
+// mounts, navigation back/forward) but mutates rarely. The TTL is short
+// enough that explicit mutations — which patch the client-side ApiClient
+// cache in place — stay observably consistent without an extra roundtrip.
+//
+// swrSeconds (optional): stale-while-revalidate window. When set, the browser
+// serves the cached response immediately and refreshes in the background,
+// making navigation feel instant. Use for data that can tolerate brief
+// staleness (tool list, agent configs, model list). Omit for real-time data
+// (dashboard metrics, credential state).
+function cachedJson(data, maxAgeSeconds, swrSeconds) {
+    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
+        }
+    });
+}
+// Use for endpoints whose response contains live state that must never be
+// served from cache — credentials, connection status, live config values.
+function noStoreJson(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": "no-store"
+        }
+    });
+}
+// Validate a JSON request body against a zod schema.
+// Returns either the parsed data or a 400 NextResponse explaining the issue.
+// Caller pattern:
+//   const parsed = await validateBody(req, Schema);
+//   if (parsed instanceof NextResponse) return parsed;
+//   // use parsed.field
+async function validateBody(req, schema) {
+    let raw;
+    try {
+        raw = await req.json();
+    } catch  {
+        return errorResponse("Request body must be valid JSON", 400);
+    }
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
+    }
+    return parsed.data;
+}
+
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
 /***/ }),
 
 /***/ 51455:
@@ -929,7 +929,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(49527)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(25573)));
 module.exports = __webpack_exports__;
 
 })();

package/.next/standalone/.next/server/app/api/v1/providers/[provider]/models/route.js

@@ -12,7 +12,49 @@ module.exports = require("next/dist/shared/lib/router/utils/app-paths");
 
 /***/ }),
 
-/***/ 471:
+/***/ 1708:
+/***/ ((module) => {
+
+module.exports = require("node:process");
+
+/***/ }),
+
+/***/ 1932:
+/***/ ((module) => {
+
+module.exports = require("url");
+
+/***/ }),
+
+/***/ 3295:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/after-task-async-storage.external.js");
+
+/***/ }),
+
+/***/ 8128:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/runtime-reacts.external.js");
+
+/***/ }),
+
+/***/ 9956:
+/***/ ((module) => {
+
+module.exports = require("undici");
+
+/***/ }),
+
+/***/ 10846:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
+
+/***/ }),
+
+/***/ 13605:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
@@ -454,48 +496,6 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
-/***/ }),
-
-/***/ 1708:
-/***/ ((module) => {
-
-module.exports = require("node:process");
-
-/***/ }),
-
-/***/ 1932:
-/***/ ((module) => {
-
-module.exports = require("url");
-
-/***/ }),
-
-/***/ 3295:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/after-task-async-storage.external.js");
-
-/***/ }),
-
-/***/ 8128:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/runtime-reacts.external.js");
-
-/***/ }),
-
-/***/ 9956:
-/***/ ((module) => {
-
-module.exports = require("undici");
-
-/***/ }),
-
-/***/ 10846:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
-
 /***/ }),
 
 /***/ 16698:
@@ -1005,13 +1005,21 @@ async function GET(req, { params }) {
             }
         });
     } catch (err) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: String(err)
-        }, {
-            status: 500
-        });
+        return catalogErrorResponse(err);
     }
 }
+// Raised when the saved configuration itself is unusable, so callers get a
+// 4xx they can act on instead of a generic server error.
+class CatalogConfigError extends Error {
+}
+function catalogErrorResponse(err) {
+    const status = err instanceof CatalogConfigError ? 400 : 500;
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        error: String(err)
+    }, {
+        status
+    });
+}
 // POST allows the editor to ship the in-form credentials (api_key /
 // base_url / extra_headers) before the user has saved them. We never cache
 // these responses since they're keyed on user-supplied secrets.
@@ -1029,11 +1037,7 @@ async function POST(req, { params }) {
             }
         });
     } catch (err) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: String(err)
-        }, {
-            status: 500
-        });
+        return catalogErrorResponse(err);
     }
 }
 async function fetchCatalog(provider, overrides) {
@@ -1124,13 +1128,8 @@ async function fetchOpenAICatalog() {
 }
 // ── GitHub Copilot ────────────────────────────────────────────────────────────
 async function fetchGitHubCopilotCatalog() {
-    // We deliberately do NOT return the broad GitHub Models cross-publisher
-    // registry here — that lists hundreds of models from every vendor, which is
-    // confusing when the user is configuring the "github-copilot" provider
-    // specifically. We mirror what Copilot Chat actually serves: its own
-    // /models endpoint when we have an exchangeable credential, else a curated
-    // fallback list. Users who want the raw GitHub Models catalog can type the
-    // namespaced model id directly into the Model ID field.
+    // Use Copilot Chat's account-specific /models endpoint when an exchangeable
+    // credential is available, otherwise return a curated fallback list.
     // 1. Prefer the in-app device-flow OAuth token — it can be exchanged.
     const { getStoredOAuthToken } = await Promise.resolve(/* import() */).then(__webpack_require__.bind(__webpack_require__, 97614));
     const oauth = getStoredOAuthToken();
@@ -1153,8 +1152,13 @@ async function fetchGitHubCopilotCatalog() {
                 if (list.length > 0) return list;
             } catch  {}
         }
-        const apiKey = params.api_key ?? process.env.GITHUB_TOKEN;
-        if (apiKey && !isLikelyGitHubPat(apiKey)) {
+        // Only the Copilot config's own api_key is considered: GITHUB_TOKEN belongs
+        // to the GitHub integration and is usually a PAT unrelated to Copilot.
+        const apiKey = params.api_key?.trim();
+        if (apiKey && isLikelyGitHubPat(apiKey)) {
+            throw new CatalogConfigError("GitHub Copilot: PAT model discovery used GitHub Models, which has been retired. " + "Use device-flow sign-in in the Models panel or set copilot_session_token.");
+        }
+        if (apiKey) {
             try {
                 const sessionToken = await exchangeCopilotSessionToken(apiKey);
                 const list = await fetchCopilotChatCatalog(sessionToken);
@@ -1162,8 +1166,7 @@ async function fetchGitHubCopilotCatalog() {
             } catch  {}
         }
     }
-    // 3. Fallback: curated known-models list. Works even on a PAT — those
-    //    model IDs are valid on both Models API and Copilot Chat.
+    // 3. Fallback: curated known-models list when no credential can be exchanged.
     return githubCopilotKnownModels();
 }
 async function fetchCopilotChatCatalog(sessionToken) {
@@ -1197,12 +1200,12 @@ async function fetchCopilotChatCatalog(sessionToken) {
         }));
 }
 function isLikelyGitHubPat(token) {
-    return token.startsWith("ghp_") || token.startsWith("github_pat_") || token.startsWith("gho_");
+    return token.startsWith("ghp_") || token.startsWith("github_pat_");
 }
-async function exchangeCopilotSessionToken(pat) {
+async function exchangeCopilotSessionToken(githubToken) {
     const res = await fetch("https://api.github.com/copilot_internal/v2/token", {
         headers: {
-            Authorization: `token ${pat}`,
+            Authorization: `token ${githubToken}`,
             "User-Agent": "Jarela/1.0"
         }
     });
@@ -1462,7 +1465,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(471)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(13605)));
 module.exports = __webpack_exports__;
 
 })();

package/.next/standalone/.next/server/app/api/v1/providers/[provider]/probe/route.js

@@ -393,7 +393,14 @@ module.exports = require("next/dist/server/app-render/work-unit-async-storage.ex
 
 /***/ }),
 
-/***/ 63199:
+/***/ 73024:
+/***/ ((module) => {
+
+module.exports = require("node:fs");
+
+/***/ }),
+
+/***/ 73181:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
@@ -835,13 +842,6 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
-/***/ }),
-
-/***/ 73024:
-/***/ ((module) => {
-
-module.exports = require("node:fs");
-
 /***/ }),
 
 /***/ 75919:
@@ -921,7 +921,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(63199)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(73181)));
 module.exports = __webpack_exports__;
 
 })();