@circuitwall/jarela 2.2.1 → 2.3.0

package/.next/standalone/.next/server/app/api/v1/security/idle-timeout/route.js

@@ -40,369 +40,50 @@ module.exports = require("next/dist/server/runtime-reacts.external.js");
 
 /***/ }),
 
-/***/ 9956:
-/***/ ((module) => {
-
-module.exports = require("undici");
-
-/***/ }),
-
-/***/ 10846:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
-
-/***/ }),
-
-/***/ 14268:
+/***/ 8213:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
 /* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   GET: () => (/* binding */ GET),
-/* harmony export */   PATCH: () => (/* binding */ PATCH)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
-/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(46);
-/* harmony import */ var _lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(20971);
-/**
- * @public — `GET/PATCH /api/v1/security/idle-timeout`
- *
- * Reads or updates the screen-lock idle timeout. The value persists
- * across restarts (stored in app-settings). 0 disables the auto-lock.
- *
- * GET returns:  `{ idle_timeout_ms: number }`
- * PATCH body:   `{ idle_timeout_ms: number }` (0 to 24h)
- * PATCH returns: `{ idle_timeout_ms: number }`
- */ 
-
-
-
-const ONE_DAY_MS = 24 * 60 * 60 * 1000;
-const PatchBody = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    idle_timeout_ms: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().int().min(0).max(ONE_DAY_MS)
-});
-// Reachable from any whitelisted caller so the settings UI can render
-// + adjust the timeout from any device. The proxy's tailscale-identity
-// gate is the security boundary.
-function GET(_req) {
-    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
-    });
-}
-async function PATCH(req) {
-    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
-    let body;
-    try {
-        body = await req.json();
-    } catch  {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: "bad-json"
-        }, {
-            status: 400
-        });
-    }
-    const parsed = PatchBody.safeParse(body);
-    if (!parsed.success) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: "bad-timeout"
-        }, {
-            status: 400
-        });
-    }
-    (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .setIdleTimeoutMs */ .yW)(parsed.data.idle_timeout_ms);
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
-    });
-}
-
-
-/***/ }),
-
-/***/ 16698:
-/***/ ((module) => {
-
-module.exports = require("node:async_hooks");
-
-/***/ }),
-
-/***/ 19121:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
-
-/***/ }),
-
-/***/ 20971:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Gk: () => (/* binding */ getIdleTimeoutMs),
-/* harmony export */   HI: () => (/* binding */ isScreenLocked),
-/* harmony export */   LT: () => (/* binding */ unlockScreen),
-/* harmony export */   yW: () => (/* binding */ setIdleTimeoutMs)
+/* harmony export */   handler: () => (/* binding */ handler),
+/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
+/* harmony export */   routeModule: () => (/* binding */ routeModule),
+/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
+/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
+/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
 /* harmony export */ });
-/* unused harmony exports recordUserActivity, lockScreen */
-/* harmony import */ var _lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4400);
-/**
- * Screen-lock state for the running app process.
- *
- * Distinct from the master-key lock (lib/crypto/master-key.ts):
- *
- *   - Master-key lock = crypto lock. Key wiped from memory; decryption
- *     throws; background work stalls until PIN unwraps the keyfile.
- *
- *   - Screen lock = presence lock. The master key stays in memory so
- *     scheduled tasks, bridges, and streaming runs keep going. The UI
- *     is hidden behind a PIN re-prompt that just verifies the user
- *     entered the same PIN that wraps their keyfile — a "is the human
- *     still here?" check, not a re-derivation of the key.
- *
- * Triggered by inactivity: the proxy records every non-polling /api/v1/*
- * request as user activity. After `idleTimeoutMs` of silence the next
- * request flips the screen-locked flag and gets a 423.
- *
- * Pinned to globalThis to survive Next.js dev bundle isolation (each
- * route handler / proxy file gets its own ESM instance — bare module-
- * level `let`s wouldn't share state). Same pattern as master-key.ts.
- */ 
-const DEFAULT_IDLE_TIMEOUT_MS = 60 * 60 * 1000; // 1 hour
-const _host = globalThis;
-const _g = _host.__jarelaScreenLock ?? (_host.__jarelaScreenLock = {
-    lastActivity: Date.now(),
-    idleTimeoutMs: DEFAULT_IDLE_TIMEOUT_MS,
-    locked: false,
-    hydrated: false
-});
-// Pull the user-configured timeout off disk the first time we're asked
-// after a process start. Done lazily so importing this module doesn't
-// force a DB open before initMasterKey() has run.
-function hydrateOnce() {
-    if (_g.hydrated) return;
-    try {
-        const persisted = (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .getScreenLockIdleTimeoutMs */ .J2)();
-        if (persisted !== null) _g.idleTimeoutMs = persisted;
-        _g.hydrated = true;
-    } catch (err) {
-        // DB not ready yet (first request before initMasterKey ran). Leave
-        // the default and try again on the next call — don't flip hydrated.
-        console.warn("[screen-lock] could not hydrate idle timeout:", err);
-    }
-}
-/**
- * Record a user-initiated HTTP request. Resets the idle timer and (if
- * the screen was locked passively) does NOT unlock it — only an explicit
- * verify-pin call may clear the lock.
- */ function recordUserActivity() {
-    if (!_g.locked) {
-        _g.lastActivity = Date.now();
-    }
-}
-/**
- * Returns true if the screen should be considered locked right now.
- * Lazily flips the flag when the idle timeout has elapsed so we don't
- * need a background timer.
- */ function isScreenLocked() {
-    hydrateOnce();
-    if (_g.locked) return true;
-    if (_g.idleTimeoutMs <= 0) return false; // disabled
-    if (Date.now() - _g.lastActivity > _g.idleTimeoutMs) {
-        _g.locked = true;
-        return true;
-    }
-    return false;
-}
-/** Unlock — called after a successful verify-pin. */ function unlockScreen() {
-    _g.locked = false;
-    _g.lastActivity = Date.now();
-}
-/** Force-lock immediately. Used by manual "lock now" actions. */ function lockScreen() {
-    _g.locked = true;
-}
-function getIdleTimeoutMs() {
-    hydrateOnce();
-    return _g.idleTimeoutMs;
-}
-/** 0 disables the auto-lock entirely. */ function setIdleTimeoutMs(ms) {
-    if (!Number.isFinite(ms) || ms < 0) throw new Error("invalid timeout");
-    _g.idleTimeoutMs = Math.floor(ms);
-    _g.lastActivity = Date.now();
-    _g.hydrated = true; // we just set it; skip the load-from-disk path
-    try {
-        (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .setScreenLockIdleTimeoutMs */ .Z0)(_g.idleTimeoutMs);
-    } catch (err) {
-        console.warn("[screen-lock] could not persist idle timeout:", err);
-    }
-}
-
-
-/***/ }),
-
-/***/ 27910:
-/***/ ((module) => {
-
-module.exports = require("stream");
-
-/***/ }),
-
-/***/ 28354:
-/***/ ((module) => {
-
-module.exports = require("util");
-
-/***/ }),
-
-/***/ 29021:
-/***/ ((module) => {
-
-module.exports = require("fs");
-
-/***/ }),
-
-/***/ 29294:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
-
-/***/ }),
-
-/***/ 31421:
-/***/ ((module) => {
-
-module.exports = require("node:child_process");
-
-/***/ }),
-
-/***/ 33873:
-/***/ ((module) => {
-
-module.exports = require("path");
-
-/***/ }),
-
-/***/ 37067:
-/***/ ((module) => {
-
-module.exports = require("node:http");
-
-/***/ }),
-
-/***/ 38522:
-/***/ ((module) => {
-
-module.exports = require("node:zlib");
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
-/***/ }),
-
-/***/ 55511:
-/***/ ((module) => {
-
-module.exports = require("crypto");
-
-/***/ }),
-
-/***/ 55591:
-/***/ ((module) => {
-
-module.exports = require("https");
-
-/***/ }),
-
-/***/ 57075:
-/***/ ((module) => {
-
-module.exports = require("node:stream");
-
-/***/ }),
-
-/***/ 57975:
-/***/ ((module) => {
-
-module.exports = require("node:util");
-
-/***/ }),
-
-/***/ 63033:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
-
-/***/ }),
-
-/***/ 63175:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   handler: () => (/* binding */ handler),
-/* harmony export */   patchFetch: () => (/* binding */ patchFetch),
-/* harmony export */   routeModule: () => (/* binding */ routeModule),
-/* harmony export */   serverHooks: () => (/* binding */ serverHooks),
-/* harmony export */   workAsyncStorage: () => (/* binding */ workAsyncStorage),
-/* harmony export */   workUnitAsyncStorage: () => (/* binding */ workUnitAsyncStorage)
-/* harmony export */ });
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
-/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
-/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
-/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
-/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
-/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
-/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
-/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
-/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
-/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
-/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
-/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
-/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
-/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
-/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
-/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
-/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
-/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(19225);
+/* harmony import */ var next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_route_modules_app_route_module_compiled__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var next_dist_server_route_kind__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(84006);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(8317);
+/* harmony import */ var next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_patch_fetch__WEBPACK_IMPORTED_MODULE_2__);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(99373);
+/* harmony import */ var next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_request_meta__WEBPACK_IMPORTED_MODULE_3__);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(34775);
+/* harmony import */ var next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_tracer__WEBPACK_IMPORTED_MODULE_4__);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__ = __webpack_require__(24235);
+/* harmony import */ var next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_app_render_manifests_singleton__WEBPACK_IMPORTED_MODULE_5__);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__ = __webpack_require__(261);
+/* harmony import */ var next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_router_utils_app_paths__WEBPACK_IMPORTED_MODULE_6__);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__ = __webpack_require__(54365);
+/* harmony import */ var next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_base_http_node__WEBPACK_IMPORTED_MODULE_7__);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__ = __webpack_require__(90771);
+/* harmony import */ var next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_spec_extension_adapters_next_request__WEBPACK_IMPORTED_MODULE_8__);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__ = __webpack_require__(73461);
+/* harmony import */ var next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_trace_constants__WEBPACK_IMPORTED_MODULE_9__);
+/* harmony import */ var next_dist_server_instrumentation_utils__WEBPACK_IMPORTED_MODULE_10__ = __webpack_require__(67798);
+/* harmony import */ var next_dist_server_send_response__WEBPACK_IMPORTED_MODULE_11__ = __webpack_require__(92280);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__ = __webpack_require__(62018);
+/* harmony import */ var next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_web_utils__WEBPACK_IMPORTED_MODULE_12__);
+/* harmony import */ var next_dist_server_lib_cache_control__WEBPACK_IMPORTED_MODULE_13__ = __webpack_require__(45696);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__ = __webpack_require__(47929);
+/* harmony import */ var next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14___default = /*#__PURE__*/__webpack_require__.n(next_dist_lib_constants__WEBPACK_IMPORTED_MODULE_14__);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__ = __webpack_require__(86439);
+/* harmony import */ var next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15___default = /*#__PURE__*/__webpack_require__.n(next_dist_shared_lib_no_fallback_error_external__WEBPACK_IMPORTED_MODULE_15__);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__ = __webpack_require__(10246);
+/* harmony import */ var next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_lib_route_cache_key__WEBPACK_IMPORTED_MODULE_16__);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__ = __webpack_require__(37527);
+/* harmony import */ var next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17___default = /*#__PURE__*/__webpack_require__.n(next_dist_server_response_cache__WEBPACK_IMPORTED_MODULE_17__);
 
 
 
@@ -801,6 +482,325 @@ async function handler(req, res, ctx) {
 //# sourceMappingURL=app-route.js.map
 
 
+/***/ }),
+
+/***/ 9956:
+/***/ ((module) => {
+
+module.exports = require("undici");
+
+/***/ }),
+
+/***/ 10846:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
+
+/***/ }),
+
+/***/ 14268:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   GET: () => (/* binding */ GET),
+/* harmony export */   PATCH: () => (/* binding */ PATCH)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
+/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(46);
+/* harmony import */ var _lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(20971);
+/**
+ * @public — `GET/PATCH /api/v1/security/idle-timeout`
+ *
+ * Reads or updates the screen-lock idle timeout. The value persists
+ * across restarts (stored in app-settings). 0 disables the auto-lock.
+ *
+ * GET returns:  `{ idle_timeout_ms: number }`
+ * PATCH body:   `{ idle_timeout_ms: number }` (0 to 24h)
+ * PATCH returns: `{ idle_timeout_ms: number }`
+ */ 
+
+
+
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+const PatchBody = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    idle_timeout_ms: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().int().min(0).max(ONE_DAY_MS)
+});
+// Reachable from any whitelisted caller so the settings UI can render
+// + adjust the timeout from any device. The proxy's tailscale-identity
+// gate is the security boundary.
+function GET(_req) {
+    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
+    });
+}
+async function PATCH(req) {
+    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
+    let body;
+    try {
+        body = await req.json();
+    } catch  {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: "bad-json"
+        }, {
+            status: 400
+        });
+    }
+    const parsed = PatchBody.safeParse(body);
+    if (!parsed.success) {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: "bad-timeout"
+        }, {
+            status: 400
+        });
+    }
+    (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .setIdleTimeoutMs */ .yW)(parsed.data.idle_timeout_ms);
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
+    });
+}
+
+
+/***/ }),
+
+/***/ 16698:
+/***/ ((module) => {
+
+module.exports = require("node:async_hooks");
+
+/***/ }),
+
+/***/ 19121:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
+
+/***/ }),
+
+/***/ 20971:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Gk: () => (/* binding */ getIdleTimeoutMs),
+/* harmony export */   HI: () => (/* binding */ isScreenLocked),
+/* harmony export */   LT: () => (/* binding */ unlockScreen),
+/* harmony export */   yW: () => (/* binding */ setIdleTimeoutMs)
+/* harmony export */ });
+/* unused harmony exports recordUserActivity, lockScreen */
+/* harmony import */ var _lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4400);
+/**
+ * Screen-lock state for the running app process.
+ *
+ * Distinct from the master-key lock (lib/crypto/master-key.ts):
+ *
+ *   - Master-key lock = crypto lock. Key wiped from memory; decryption
+ *     throws; background work stalls until PIN unwraps the keyfile.
+ *
+ *   - Screen lock = presence lock. The master key stays in memory so
+ *     scheduled tasks, bridges, and streaming runs keep going. The UI
+ *     is hidden behind a PIN re-prompt that just verifies the user
+ *     entered the same PIN that wraps their keyfile — a "is the human
+ *     still here?" check, not a re-derivation of the key.
+ *
+ * Triggered by inactivity: the proxy records every non-polling /api/v1/*
+ * request as user activity. After `idleTimeoutMs` of silence the next
+ * request flips the screen-locked flag and gets a 423.
+ *
+ * Pinned to globalThis to survive Next.js dev bundle isolation (each
+ * route handler / proxy file gets its own ESM instance — bare module-
+ * level `let`s wouldn't share state). Same pattern as master-key.ts.
+ */ 
+const DEFAULT_IDLE_TIMEOUT_MS = 60 * 60 * 1000; // 1 hour
+const _host = globalThis;
+const _g = _host.__jarelaScreenLock ?? (_host.__jarelaScreenLock = {
+    lastActivity: Date.now(),
+    idleTimeoutMs: DEFAULT_IDLE_TIMEOUT_MS,
+    locked: false,
+    hydrated: false
+});
+// Pull the user-configured timeout off disk the first time we're asked
+// after a process start. Done lazily so importing this module doesn't
+// force a DB open before initMasterKey() has run.
+function hydrateOnce() {
+    if (_g.hydrated) return;
+    try {
+        const persisted = (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .getScreenLockIdleTimeoutMs */ .J2)();
+        if (persisted !== null) _g.idleTimeoutMs = persisted;
+        _g.hydrated = true;
+    } catch (err) {
+        // DB not ready yet (first request before initMasterKey ran). Leave
+        // the default and try again on the next call — don't flip hydrated.
+        console.warn("[screen-lock] could not hydrate idle timeout:", err);
+    }
+}
+/**
+ * Record a user-initiated HTTP request. Resets the idle timer and (if
+ * the screen was locked passively) does NOT unlock it — only an explicit
+ * verify-pin call may clear the lock.
+ */ function recordUserActivity() {
+    if (!_g.locked) {
+        _g.lastActivity = Date.now();
+    }
+}
+/**
+ * Returns true if the screen should be considered locked right now.
+ * Lazily flips the flag when the idle timeout has elapsed so we don't
+ * need a background timer.
+ */ function isScreenLocked() {
+    hydrateOnce();
+    if (_g.locked) return true;
+    if (_g.idleTimeoutMs <= 0) return false; // disabled
+    if (Date.now() - _g.lastActivity > _g.idleTimeoutMs) {
+        _g.locked = true;
+        return true;
+    }
+    return false;
+}
+/** Unlock — called after a successful verify-pin. */ function unlockScreen() {
+    _g.locked = false;
+    _g.lastActivity = Date.now();
+}
+/** Force-lock immediately. Used by manual "lock now" actions. */ function lockScreen() {
+    _g.locked = true;
+}
+function getIdleTimeoutMs() {
+    hydrateOnce();
+    return _g.idleTimeoutMs;
+}
+/** 0 disables the auto-lock entirely. */ function setIdleTimeoutMs(ms) {
+    if (!Number.isFinite(ms) || ms < 0) throw new Error("invalid timeout");
+    _g.idleTimeoutMs = Math.floor(ms);
+    _g.lastActivity = Date.now();
+    _g.hydrated = true; // we just set it; skip the load-from-disk path
+    try {
+        (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .setScreenLockIdleTimeoutMs */ .Z0)(_g.idleTimeoutMs);
+    } catch (err) {
+        console.warn("[screen-lock] could not persist idle timeout:", err);
+    }
+}
+
+
+/***/ }),
+
+/***/ 27910:
+/***/ ((module) => {
+
+module.exports = require("stream");
+
+/***/ }),
+
+/***/ 28354:
+/***/ ((module) => {
+
+module.exports = require("util");
+
+/***/ }),
+
+/***/ 29021:
+/***/ ((module) => {
+
+module.exports = require("fs");
+
+/***/ }),
+
+/***/ 29294:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
+
+/***/ }),
+
+/***/ 31421:
+/***/ ((module) => {
+
+module.exports = require("node:child_process");
+
+/***/ }),
+
+/***/ 33873:
+/***/ ((module) => {
+
+module.exports = require("path");
+
+/***/ }),
+
+/***/ 37067:
+/***/ ((module) => {
+
+module.exports = require("node:http");
+
+/***/ }),
+
+/***/ 38522:
+/***/ ((module) => {
+
+module.exports = require("node:zlib");
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 55511:
+/***/ ((module) => {
+
+module.exports = require("crypto");
+
+/***/ }),
+
+/***/ 55591:
+/***/ ((module) => {
+
+module.exports = require("https");
+
+/***/ }),
+
+/***/ 57075:
+/***/ ((module) => {
+
+module.exports = require("node:stream");
+
+/***/ }),
+
+/***/ 57975:
+/***/ ((module) => {
+
+module.exports = require("node:util");
+
+/***/ }),
+
+/***/ 63033:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
+
 /***/ }),
 
 /***/ 73024:
@@ -887,7 +887,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(63175)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(8213)));
 module.exports = __webpack_exports__;
 
 })();