@circuitwall/jarela 2.2.0 → 2.3.0

package/.next/standalone/.next/server/app/api/v1/allowed-sites/[hostname]/route.js

@@ -354,391 +354,96 @@ module.exports = require("node:zlib");
 
 /***/ }),
 
-/***/ 39947:
+/***/ 39321:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
+__webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Bm: () => (/* binding */ cachedJson),
-/* harmony export */   HN: () => (/* binding */ notFoundResponse),
-/* harmony export */   Jb: () => (/* binding */ validateBody),
-/* harmony export */   K2: () => (/* binding */ createdResponse),
-/* harmony export */   Ng: () => (/* binding */ noStoreJson),
-/* harmony export */   yj: () => (/* binding */ errorResponse)
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
 /* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-// Shared HTTP response builders for app/api/v1/** route handlers.
-//
-// Goal: every error/success payload across the v1 surface has the same
-// shape. Before this lived inline, response bodies drifted —
-// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
-// some routes returned Zod's raw issue array, others stringified it.
-
-function errorResponse(message, status = 400) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        error: message
-    }, {
-        status
-    });
-}
-function notFoundResponse(message = "Not found") {
-    return errorResponse(message, 404);
-}
-function createdResponse(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        status: 201
-    });
-}
-// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
-// GET endpoints that serve user-scoped data the client refetches often (panel
-// mounts, navigation back/forward) but mutates rarely. The TTL is short
-// enough that explicit mutations — which patch the client-side ApiClient
-// cache in place — stay observably consistent without an extra roundtrip.
-//
-// swrSeconds (optional): stale-while-revalidate window. When set, the browser
-// serves the cached response immediately and refreshes in the background,
-// making navigation feel instant. Use for data that can tolerate brief
-// staleness (tool list, agent configs, model list). Omit for real-time data
-// (dashboard metrics, credential state).
-function cachedJson(data, maxAgeSeconds, swrSeconds) {
-    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
-        }
-    });
-}
-// Use for endpoints whose response contains live state that must never be
-// served from cache — credentials, connection status, live config values.
-function noStoreJson(data) {
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
-        headers: {
-            "Cache-Control": "no-store"
-        }
-    });
-}
-// Validate a JSON request body against a zod schema.
-// Returns either the parsed data or a 400 NextResponse explaining the issue.
-// Caller pattern:
-//   const parsed = await validateBody(req, Schema);
-//   if (parsed instanceof NextResponse) return parsed;
-//   // use parsed.field
-async function validateBody(req, schema) {
-    let raw;
-    try {
-        raw = await req.json();
-    } catch  {
-        return errorResponse("Request body must be valid JSON", 400);
-    }
-    const parsed = schema.safeParse(raw);
-    if (!parsed.success) {
-        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
-    }
-    return parsed.data;
-}
-
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
-/***/ }),
-
-/***/ 55511:
-/***/ ((module) => {
-
-module.exports = require("crypto");
-
-/***/ }),
-
-/***/ 55591:
-/***/ ((module) => {
-
-module.exports = require("https");
-
-/***/ }),
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
 
-/***/ 57075:
-/***/ ((module) => {
 
-module.exports = require("node:stream");
 
-/***/ }),
 
-/***/ 57975:
-/***/ ((module) => {
 
-module.exports = require("node:util");
 
-/***/ }),
 
-/***/ 63033:
-/***/ ((module) => {
 
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
 
-/***/ }),
 
-/***/ 73024:
-/***/ ((module) => {
 
-module.exports = require("node:fs");
 
-/***/ }),
 
-/***/ 75338:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   DELETE: () => (/* binding */ DELETE),
-/* harmony export */   PATCH: () => (/* binding */ PATCH),
-/* harmony export */   PUT: () => (/* binding */ PUT)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
-/* harmony import */ var _lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(30558);
-/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
 
 
 
 
-// Per-host operations on the allowed-sites list.
-//
-//   PUT    — extension pushes the latest cookie set for this host. Returns
-//            403 if the host is not on the list (defense in depth — the
-//            extension's local cache might be stale).
-//   PATCH  — toggle SSRF bypass for this host. UI-only.
-//   DELETE — remove the host from the allow-list. Cascade drops cookies.
-//
-// PUT body shape mirrors chrome.cookies.Cookie so the extension can pass
-// the result of chrome.cookies.getAll() through with minimal reshape.
-const CookieSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    name: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
-    value: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
-    domain: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
-    path: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
-    secure: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional(),
-    httpOnly: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional(),
-    expirationDate: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().optional()
-});
-const PutInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    cookies: zod__WEBPACK_IMPORTED_MODULE_3__/* .array */ .YOg(CookieSchema).max(500)
-});
-const PatchInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    ssrf_bypass: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY()
-});
-async function PUT(req, ctx) {
-    const { hostname } = await ctx.params;
-    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PutInputSchema);
-    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
-    const ok = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .putCookies */ .Rw)(hostname, parsed.cookies);
-    if (!ok) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: "host is not on the allowed-sites list"
-        }, {
-            status: 403
-        });
-    }
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        ok: true,
-        count: parsed.cookies.length
-    });
-}
-async function PATCH(req, ctx) {
-    const { hostname } = await ctx.params;
-    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PatchInputSchema);
-    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
-    const ok = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .setSsrfBypass */ .Tp)(hostname, parsed.ssrf_bypass);
-    if (!ok) return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        error: "host not found"
-    }, {
-        status: 404
-    });
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        ok: true
-    });
-}
-async function DELETE(_req, ctx) {
-    const { hostname } = await ctx.params;
-    const removed = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .removeAllowedSite */ .uc)(hostname);
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        deleted: removed
-    });
-}
-
-
-/***/ }),
-
-/***/ 75919:
-/***/ ((module) => {
-
-module.exports = require("node:worker_threads");
-
-/***/ }),
-
-/***/ 76760:
-/***/ ((module) => {
-
-module.exports = require("node:path");
-
-/***/ }),
-
-/***/ 77598:
-/***/ ((module) => {
-
-module.exports = require("node:crypto");
-
-/***/ }),
-
-/***/ 79428:
-/***/ ((module) => {
-
-module.exports = require("buffer");
-
-/***/ }),
-
-/***/ 80099:
-/***/ ((module) => {
-
-module.exports = require("node:sqlite");
-
-/***/ }),
-
-/***/ 80481:
-/***/ ((module) => {
-
-module.exports = require("node:readline");
-
-/***/ }),
-
-/***/ 81630:
-/***/ ((module) => {
-
-module.exports = require("http");
-
-/***/ }),
-
-/***/ 86439:
-/***/ ((module) => {
-
-module.exports = require("next/dist/shared/lib/no-fallback-error.external");
-
-/***/ }),
-
-/***/ 94163:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-// We inject the nextConfigOutput here so that we can use them in the route
-// module.
-const nextConfigOutput = "standalone"
-const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
-    definition: {
-        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
-        page: "/api/v1/allowed-sites/[hostname]/route",
-        pathname: "/api/v1/allowed-sites/[hostname]",
-        filename: "route",
-        bundlePath: "app/api/v1/allowed-sites/[hostname]/route"
-    },
-    distDir: ".next" || 0,
-    relativeProjectDir:  false || '',
-    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/allowed-sites/[hostname]/route.ts",
-    nextConfigOutput,
-    // The lazy require factory ensures that:
-    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
-    //   correctly attributing module load time to application-code rather than
-    //   framework internals.
-    // - In all modes: async modules (route files with top-level await) are
-    //   handled correctly — require() returns a Promise for such modules, which
-    //   ensureUserland() awaits before the first request is handled.
-    userland: ()=>__webpack_require__(75338),
-    // In Turbopack dev mode, also provide a synchronous per-request getter so
-    // server HMR updates are picked up without re-executing the entry chunk.
-    // Using require() (synchronous) avoids adding async overhead that would be
-    // incorrectly attributed to application-code time in devRequestTiming.
-    ... false ? 0 : {}
+// We inject the nextConfigOutput here so that we can use them in the route
+// module.
+const nextConfigOutput = "standalone"
+const routeModule = new next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__.AppRouteRouteModule({
+    definition: {
+        kind: next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__.RouteKind.APP_ROUTE,
+        page: "/api/v1/allowed-sites/[hostname]/route",
+        pathname: "/api/v1/allowed-sites/[hostname]",
+        filename: "route",
+        bundlePath: "app/api/v1/allowed-sites/[hostname]/route"
+    },
+    distDir: ".next" || 0,
+    relativeProjectDir:  false || '',
+    resolvedPagePath: "/home/runner/work/jarela/jarela/app/api/v1/allowed-sites/[hostname]/route.ts",
+    nextConfigOutput,
+    // The lazy require factory ensures that:
+    // - In dev: devRequestTimingInternalsEnd is set before userland executes,
+    //   correctly attributing module load time to application-code rather than
+    //   framework internals.
+    // - In all modes: async modules (route files with top-level await) are
+    //   handled correctly — require() returns a Promise for such modules, which
+    //   ensureUserland() awaits before the first request is handled.
+    userland: ()=>__webpack_require__(75338),
+    // In Turbopack dev mode, also provide a synchronous per-request getter so
+    // server HMR updates are picked up without re-executing the entry chunk.
+    // Using require() (synchronous) avoids adding async overhead that would be
+    // incorrectly attributed to application-code time in devRequestTiming.
+    ... false ? 0 : {}
 });
 // Pull out the exports that we need to expose from the module. This should
 // be eliminated when we've moved the other routes to the new format. These
@@ -1091,6 +796,301 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
+/***/ }),
+
+/***/ 39947:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Bm: () => (/* binding */ cachedJson),
+/* harmony export */   HN: () => (/* binding */ notFoundResponse),
+/* harmony export */   Jb: () => (/* binding */ validateBody),
+/* harmony export */   K2: () => (/* binding */ createdResponse),
+/* harmony export */   Ng: () => (/* binding */ noStoreJson),
+/* harmony export */   yj: () => (/* binding */ errorResponse)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+// Shared HTTP response builders for app/api/v1/** route handlers.
+//
+// Goal: every error/success payload across the v1 surface has the same
+// shape. Before this lived inline, response bodies drifted —
+// `{error: "x"}` vs `{message: "x"}`, 400 vs 422 for the same condition,
+// some routes returned Zod's raw issue array, others stringified it.
+
+function errorResponse(message, status = 400) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        error: message
+    }, {
+        status
+    });
+}
+function notFoundResponse(message = "Not found") {
+    return errorResponse(message, 404);
+}
+function createdResponse(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        status: 201
+    });
+}
+// Wrap a 200 JSON response with a private Cache-Control header. Use on safe
+// GET endpoints that serve user-scoped data the client refetches often (panel
+// mounts, navigation back/forward) but mutates rarely. The TTL is short
+// enough that explicit mutations — which patch the client-side ApiClient
+// cache in place — stay observably consistent without an extra roundtrip.
+//
+// swrSeconds (optional): stale-while-revalidate window. When set, the browser
+// serves the cached response immediately and refreshes in the background,
+// making navigation feel instant. Use for data that can tolerate brief
+// staleness (tool list, agent configs, model list). Omit for real-time data
+// (dashboard metrics, credential state).
+function cachedJson(data, maxAgeSeconds, swrSeconds) {
+    const swr = swrSeconds ? `, stale-while-revalidate=${swrSeconds}` : "";
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": `private, max-age=${maxAgeSeconds}${swr}`
+        }
+    });
+}
+// Use for endpoints whose response contains live state that must never be
+// served from cache — credentials, connection status, live config values.
+function noStoreJson(data) {
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json(data, {
+        headers: {
+            "Cache-Control": "no-store"
+        }
+    });
+}
+// Validate a JSON request body against a zod schema.
+// Returns either the parsed data or a 400 NextResponse explaining the issue.
+// Caller pattern:
+//   const parsed = await validateBody(req, Schema);
+//   if (parsed instanceof NextResponse) return parsed;
+//   // use parsed.field
+async function validateBody(req, schema) {
+    let raw;
+    try {
+        raw = await req.json();
+    } catch  {
+        return errorResponse("Request body must be valid JSON", 400);
+    }
+    const parsed = schema.safeParse(raw);
+    if (!parsed.success) {
+        return errorResponse(parsed.error.issues[0]?.message ?? "invalid body", 400);
+    }
+    return parsed.data;
+}
+
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 55511:
+/***/ ((module) => {
+
+module.exports = require("crypto");
+
+/***/ }),
+
+/***/ 55591:
+/***/ ((module) => {
+
+module.exports = require("https");
+
+/***/ }),
+
+/***/ 57075:
+/***/ ((module) => {
+
+module.exports = require("node:stream");
+
+/***/ }),
+
+/***/ 57975:
+/***/ ((module) => {
+
+module.exports = require("node:util");
+
+/***/ }),
+
+/***/ 63033:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
+
+/***/ }),
+
+/***/ 73024:
+/***/ ((module) => {
+
+module.exports = require("node:fs");
+
+/***/ }),
+
+/***/ 75338:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   DELETE: () => (/* binding */ DELETE),
+/* harmony export */   PATCH: () => (/* binding */ PATCH),
+/* harmony export */   PUT: () => (/* binding */ PUT)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
+/* harmony import */ var _lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(30558);
+/* harmony import */ var _lib_api_responses__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(39947);
+
+
+
+
+// Per-host operations on the allowed-sites list.
+//
+//   PUT    — extension pushes the latest cookie set for this host. Returns
+//            403 if the host is not on the list (defense in depth — the
+//            extension's local cache might be stale).
+//   PATCH  — toggle SSRF bypass for this host. UI-only.
+//   DELETE — remove the host from the allow-list. Cascade drops cookies.
+//
+// PUT body shape mirrors chrome.cookies.Cookie so the extension can pass
+// the result of chrome.cookies.getAll() through with minimal reshape.
+const CookieSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    name: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
+    value: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
+    domain: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
+    path: zod__WEBPACK_IMPORTED_MODULE_3__/* .string */ .YjP(),
+    secure: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional(),
+    httpOnly: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY().optional(),
+    expirationDate: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().optional()
+});
+const PutInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    cookies: zod__WEBPACK_IMPORTED_MODULE_3__/* .array */ .YOg(CookieSchema).max(500)
+});
+const PatchInputSchema = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    ssrf_bypass: zod__WEBPACK_IMPORTED_MODULE_3__/* .boolean */ .zMY()
+});
+async function PUT(req, ctx) {
+    const { hostname } = await ctx.params;
+    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PutInputSchema);
+    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
+    const ok = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .putCookies */ .Rw)(hostname, parsed.cookies);
+    if (!ok) {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: "host is not on the allowed-sites list"
+        }, {
+            status: 403
+        });
+    }
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        ok: true,
+        count: parsed.cookies.length
+    });
+}
+async function PATCH(req, ctx) {
+    const { hostname } = await ctx.params;
+    const parsed = await (0,_lib_api_responses__WEBPACK_IMPORTED_MODULE_2__/* .validateBody */ .Jb)(req, PatchInputSchema);
+    if (parsed instanceof next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse) return parsed;
+    const ok = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .setSsrfBypass */ .Tp)(hostname, parsed.ssrf_bypass);
+    if (!ok) return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        error: "host not found"
+    }, {
+        status: 404
+    });
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        ok: true
+    });
+}
+async function DELETE(_req, ctx) {
+    const { hostname } = await ctx.params;
+    const removed = (0,_lib_stores_allowed_sites__WEBPACK_IMPORTED_MODULE_1__/* .removeAllowedSite */ .uc)(hostname);
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        deleted: removed
+    });
+}
+
+
+/***/ }),
+
+/***/ 75919:
+/***/ ((module) => {
+
+module.exports = require("node:worker_threads");
+
+/***/ }),
+
+/***/ 76760:
+/***/ ((module) => {
+
+module.exports = require("node:path");
+
+/***/ }),
+
+/***/ 77598:
+/***/ ((module) => {
+
+module.exports = require("node:crypto");
+
+/***/ }),
+
+/***/ 79428:
+/***/ ((module) => {
+
+module.exports = require("buffer");
+
+/***/ }),
+
+/***/ 80099:
+/***/ ((module) => {
+
+module.exports = require("node:sqlite");
+
+/***/ }),
+
+/***/ 80481:
+/***/ ((module) => {
+
+module.exports = require("node:readline");
+
+/***/ }),
+
+/***/ 81630:
+/***/ ((module) => {
+
+module.exports = require("http");
+
+/***/ }),
+
+/***/ 86439:
+/***/ ((module) => {
+
+module.exports = require("next/dist/shared/lib/no-fallback-error.external");
+
 /***/ }),
 
 /***/ 94735:
@@ -1114,7 +1114,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(94163)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(39321)));
 module.exports = __webpack_exports__;
 
 })();