@circuitwall/jarela 2.2.1 → 2.4.0

package/.next/standalone/.next/server/app/api/v1/security/idle-timeout/route.js

@@ -40,326 +40,7 @@ module.exports = require("next/dist/server/runtime-reacts.external.js");
 
 /***/ }),
 
-/***/ 9956:
-/***/ ((module) => {
-
-module.exports = require("undici");
-
-/***/ }),
-
-/***/ 10846:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
-
-/***/ }),
-
-/***/ 14268:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-__webpack_require__.r(__webpack_exports__);
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   GET: () => (/* binding */ GET),
-/* harmony export */   PATCH: () => (/* binding */ PATCH)
-/* harmony export */ });
-/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
-/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
-/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(46);
-/* harmony import */ var _lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(20971);
-/**
- * @public — `GET/PATCH /api/v1/security/idle-timeout`
- *
- * Reads or updates the screen-lock idle timeout. The value persists
- * across restarts (stored in app-settings). 0 disables the auto-lock.
- *
- * GET returns:  `{ idle_timeout_ms: number }`
- * PATCH body:   `{ idle_timeout_ms: number }` (0 to 24h)
- * PATCH returns: `{ idle_timeout_ms: number }`
- */ 
-
-
-
-const ONE_DAY_MS = 24 * 60 * 60 * 1000;
-const PatchBody = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
-    idle_timeout_ms: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().int().min(0).max(ONE_DAY_MS)
-});
-// Reachable from any whitelisted caller so the settings UI can render
-// + adjust the timeout from any device. The proxy's tailscale-identity
-// gate is the security boundary.
-function GET(_req) {
-    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
-    });
-}
-async function PATCH(req) {
-    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
-    let body;
-    try {
-        body = await req.json();
-    } catch  {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: "bad-json"
-        }, {
-            status: 400
-        });
-    }
-    const parsed = PatchBody.safeParse(body);
-    if (!parsed.success) {
-        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-            error: "bad-timeout"
-        }, {
-            status: 400
-        });
-    }
-    (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .setIdleTimeoutMs */ .yW)(parsed.data.idle_timeout_ms);
-    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
-        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
-    });
-}
-
-
-/***/ }),
-
-/***/ 16698:
-/***/ ((module) => {
-
-module.exports = require("node:async_hooks");
-
-/***/ }),
-
-/***/ 19121:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
-
-/***/ }),
-
-/***/ 20971:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   Gk: () => (/* binding */ getIdleTimeoutMs),
-/* harmony export */   HI: () => (/* binding */ isScreenLocked),
-/* harmony export */   LT: () => (/* binding */ unlockScreen),
-/* harmony export */   yW: () => (/* binding */ setIdleTimeoutMs)
-/* harmony export */ });
-/* unused harmony exports recordUserActivity, lockScreen */
-/* harmony import */ var _lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4400);
-/**
- * Screen-lock state for the running app process.
- *
- * Distinct from the master-key lock (lib/crypto/master-key.ts):
- *
- *   - Master-key lock = crypto lock. Key wiped from memory; decryption
- *     throws; background work stalls until PIN unwraps the keyfile.
- *
- *   - Screen lock = presence lock. The master key stays in memory so
- *     scheduled tasks, bridges, and streaming runs keep going. The UI
- *     is hidden behind a PIN re-prompt that just verifies the user
- *     entered the same PIN that wraps their keyfile — a "is the human
- *     still here?" check, not a re-derivation of the key.
- *
- * Triggered by inactivity: the proxy records every non-polling /api/v1/*
- * request as user activity. After `idleTimeoutMs` of silence the next
- * request flips the screen-locked flag and gets a 423.
- *
- * Pinned to globalThis to survive Next.js dev bundle isolation (each
- * route handler / proxy file gets its own ESM instance — bare module-
- * level `let`s wouldn't share state). Same pattern as master-key.ts.
- */ 
-const DEFAULT_IDLE_TIMEOUT_MS = 60 * 60 * 1000; // 1 hour
-const _host = globalThis;
-const _g = _host.__jarelaScreenLock ?? (_host.__jarelaScreenLock = {
-    lastActivity: Date.now(),
-    idleTimeoutMs: DEFAULT_IDLE_TIMEOUT_MS,
-    locked: false,
-    hydrated: false
-});
-// Pull the user-configured timeout off disk the first time we're asked
-// after a process start. Done lazily so importing this module doesn't
-// force a DB open before initMasterKey() has run.
-function hydrateOnce() {
-    if (_g.hydrated) return;
-    try {
-        const persisted = (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .getScreenLockIdleTimeoutMs */ .J2)();
-        if (persisted !== null) _g.idleTimeoutMs = persisted;
-        _g.hydrated = true;
-    } catch (err) {
-        // DB not ready yet (first request before initMasterKey ran). Leave
-        // the default and try again on the next call — don't flip hydrated.
-        console.warn("[screen-lock] could not hydrate idle timeout:", err);
-    }
-}
-/**
- * Record a user-initiated HTTP request. Resets the idle timer and (if
- * the screen was locked passively) does NOT unlock it — only an explicit
- * verify-pin call may clear the lock.
- */ function recordUserActivity() {
-    if (!_g.locked) {
-        _g.lastActivity = Date.now();
-    }
-}
-/**
- * Returns true if the screen should be considered locked right now.
- * Lazily flips the flag when the idle timeout has elapsed so we don't
- * need a background timer.
- */ function isScreenLocked() {
-    hydrateOnce();
-    if (_g.locked) return true;
-    if (_g.idleTimeoutMs <= 0) return false; // disabled
-    if (Date.now() - _g.lastActivity > _g.idleTimeoutMs) {
-        _g.locked = true;
-        return true;
-    }
-    return false;
-}
-/** Unlock — called after a successful verify-pin. */ function unlockScreen() {
-    _g.locked = false;
-    _g.lastActivity = Date.now();
-}
-/** Force-lock immediately. Used by manual "lock now" actions. */ function lockScreen() {
-    _g.locked = true;
-}
-function getIdleTimeoutMs() {
-    hydrateOnce();
-    return _g.idleTimeoutMs;
-}
-/** 0 disables the auto-lock entirely. */ function setIdleTimeoutMs(ms) {
-    if (!Number.isFinite(ms) || ms < 0) throw new Error("invalid timeout");
-    _g.idleTimeoutMs = Math.floor(ms);
-    _g.lastActivity = Date.now();
-    _g.hydrated = true; // we just set it; skip the load-from-disk path
-    try {
-        (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .setScreenLockIdleTimeoutMs */ .Z0)(_g.idleTimeoutMs);
-    } catch (err) {
-        console.warn("[screen-lock] could not persist idle timeout:", err);
-    }
-}
-
-
-/***/ }),
-
-/***/ 27910:
-/***/ ((module) => {
-
-module.exports = require("stream");
-
-/***/ }),
-
-/***/ 28354:
-/***/ ((module) => {
-
-module.exports = require("util");
-
-/***/ }),
-
-/***/ 29021:
-/***/ ((module) => {
-
-module.exports = require("fs");
-
-/***/ }),
-
-/***/ 29294:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
-
-/***/ }),
-
-/***/ 31421:
-/***/ ((module) => {
-
-module.exports = require("node:child_process");
-
-/***/ }),
-
-/***/ 33873:
-/***/ ((module) => {
-
-module.exports = require("path");
-
-/***/ }),
-
-/***/ 37067:
-/***/ ((module) => {
-
-module.exports = require("node:http");
-
-/***/ }),
-
-/***/ 38522:
-/***/ ((module) => {
-
-module.exports = require("node:zlib");
-
-/***/ }),
-
-/***/ 44708:
-/***/ ((module) => {
-
-module.exports = require("node:https");
-
-/***/ }),
-
-/***/ 44870:
-/***/ ((module) => {
-
-module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
-
-/***/ }),
-
-/***/ 48161:
-/***/ ((module) => {
-
-module.exports = require("node:os");
-
-/***/ }),
-
-/***/ 51455:
-/***/ ((module) => {
-
-module.exports = require("node:fs/promises");
-
-/***/ }),
-
-/***/ 55511:
-/***/ ((module) => {
-
-module.exports = require("crypto");
-
-/***/ }),
-
-/***/ 55591:
-/***/ ((module) => {
-
-module.exports = require("https");
-
-/***/ }),
-
-/***/ 57075:
-/***/ ((module) => {
-
-module.exports = require("node:stream");
-
-/***/ }),
-
-/***/ 57975:
-/***/ ((module) => {
-
-module.exports = require("node:util");
-
-/***/ }),
-
-/***/ 63033:
-/***/ ((module) => {
-
-module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
-
-/***/ }),
-
-/***/ 63175:
+/***/ 8213:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
 __webpack_require__.r(__webpack_exports__);
@@ -798,8 +479,327 @@ async function handler(req, res, ctx) {
     }
 }
 
-//# sourceMappingURL=app-route.js.map
+//# sourceMappingURL=app-route.js.map
+
+
+/***/ }),
+
+/***/ 9956:
+/***/ ((module) => {
+
+module.exports = require("undici");
+
+/***/ }),
+
+/***/ 10846:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-page.runtime.prod.js");
+
+/***/ }),
+
+/***/ 14268:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.r(__webpack_exports__);
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   GET: () => (/* binding */ GET),
+/* harmony export */   PATCH: () => (/* binding */ PATCH)
+/* harmony export */ });
+/* harmony import */ var next_server__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(23211);
+/* harmony import */ var zod__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(97377);
+/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(46);
+/* harmony import */ var _lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(20971);
+/**
+ * @public — `GET/PATCH /api/v1/security/idle-timeout`
+ *
+ * Reads or updates the screen-lock idle timeout. The value persists
+ * across restarts (stored in app-settings). 0 disables the auto-lock.
+ *
+ * GET returns:  `{ idle_timeout_ms: number }`
+ * PATCH body:   `{ idle_timeout_ms: number }` (0 to 24h)
+ * PATCH returns: `{ idle_timeout_ms: number }`
+ */ 
+
+
+
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+const PatchBody = zod__WEBPACK_IMPORTED_MODULE_3__/* .object */ .Ikc({
+    idle_timeout_ms: zod__WEBPACK_IMPORTED_MODULE_3__/* .number */ .aig().int().min(0).max(ONE_DAY_MS)
+});
+// Reachable from any whitelisted caller so the settings UI can render
+// + adjust the timeout from any device. The proxy's tailscale-identity
+// gate is the security boundary.
+function GET(_req) {
+    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
+    });
+}
+async function PATCH(req) {
+    (0,_lib_db__WEBPACK_IMPORTED_MODULE_1__/* .getDb */ .Lf)();
+    let body;
+    try {
+        body = await req.json();
+    } catch  {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: "bad-json"
+        }, {
+            status: 400
+        });
+    }
+    const parsed = PatchBody.safeParse(body);
+    if (!parsed.success) {
+        return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+            error: "bad-timeout"
+        }, {
+            status: 400
+        });
+    }
+    (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .setIdleTimeoutMs */ .yW)(parsed.data.idle_timeout_ms);
+    return next_server__WEBPACK_IMPORTED_MODULE_0__.NextResponse.json({
+        idle_timeout_ms: (0,_lib_security_screen_lock__WEBPACK_IMPORTED_MODULE_2__/* .getIdleTimeoutMs */ .Gk)()
+    });
+}
+
+
+/***/ }),
+
+/***/ 16698:
+/***/ ((module) => {
+
+module.exports = require("node:async_hooks");
+
+/***/ }),
+
+/***/ 19121:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/action-async-storage.external.js");
+
+/***/ }),
+
+/***/ 20971:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
+
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   Gk: () => (/* binding */ getIdleTimeoutMs),
+/* harmony export */   HI: () => (/* binding */ isScreenLocked),
+/* harmony export */   LT: () => (/* binding */ unlockScreen),
+/* harmony export */   yW: () => (/* binding */ setIdleTimeoutMs)
+/* harmony export */ });
+/* unused harmony exports recordUserActivity, lockScreen */
+/* harmony import */ var _lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(4400);
+/**
+ * Screen-lock state for the running app process.
+ *
+ * Distinct from the master-key lock (lib/crypto/master-key.ts):
+ *
+ *   - Master-key lock = crypto lock. Key wiped from memory; decryption
+ *     throws; background work stalls until PIN unwraps the keyfile.
+ *
+ *   - Screen lock = presence lock. The master key stays in memory so
+ *     scheduled tasks, bridges, and streaming runs keep going. The UI
+ *     is hidden behind a PIN re-prompt that just verifies the user
+ *     entered the same PIN that wraps their keyfile — a "is the human
+ *     still here?" check, not a re-derivation of the key.
+ *
+ * Triggered by inactivity: the proxy records every non-polling /api/v1/*
+ * request as user activity. After `idleTimeoutMs` of silence the next
+ * request flips the screen-locked flag and gets a 423.
+ *
+ * Pinned to globalThis to survive Next.js dev bundle isolation (each
+ * route handler / proxy file gets its own ESM instance — bare module-
+ * level `let`s wouldn't share state). Same pattern as master-key.ts.
+ */ 
+const DEFAULT_IDLE_TIMEOUT_MS = 60 * 60 * 1000; // 1 hour
+const _host = globalThis;
+const _g = _host.__jarelaScreenLock ?? (_host.__jarelaScreenLock = {
+    lastActivity: Date.now(),
+    idleTimeoutMs: DEFAULT_IDLE_TIMEOUT_MS,
+    locked: false,
+    hydrated: false
+});
+// Pull the user-configured timeout off disk the first time we're asked
+// after a process start. Done lazily so importing this module doesn't
+// force a DB open before initMasterKey() has run.
+function hydrateOnce() {
+    if (_g.hydrated) return;
+    try {
+        const persisted = (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .getScreenLockIdleTimeoutMs */ .J2)();
+        if (persisted !== null) _g.idleTimeoutMs = persisted;
+        _g.hydrated = true;
+    } catch (err) {
+        // DB not ready yet (first request before initMasterKey ran). Leave
+        // the default and try again on the next call — don't flip hydrated.
+        console.warn("[screen-lock] could not hydrate idle timeout:", err);
+    }
+}
+/**
+ * Record a user-initiated HTTP request. Resets the idle timer and (if
+ * the screen was locked passively) does NOT unlock it — only an explicit
+ * verify-pin call may clear the lock.
+ */ function recordUserActivity() {
+    if (!_g.locked) {
+        _g.lastActivity = Date.now();
+    }
+}
+/**
+ * Returns true if the screen should be considered locked right now.
+ * Lazily flips the flag when the idle timeout has elapsed so we don't
+ * need a background timer.
+ */ function isScreenLocked() {
+    hydrateOnce();
+    if (_g.locked) return true;
+    if (_g.idleTimeoutMs <= 0) return false; // disabled
+    if (Date.now() - _g.lastActivity > _g.idleTimeoutMs) {
+        _g.locked = true;
+        return true;
+    }
+    return false;
+}
+/** Unlock — called after a successful verify-pin. */ function unlockScreen() {
+    _g.locked = false;
+    _g.lastActivity = Date.now();
+}
+/** Force-lock immediately. Used by manual "lock now" actions. */ function lockScreen() {
+    _g.locked = true;
+}
+function getIdleTimeoutMs() {
+    hydrateOnce();
+    return _g.idleTimeoutMs;
+}
+/** 0 disables the auto-lock entirely. */ function setIdleTimeoutMs(ms) {
+    if (!Number.isFinite(ms) || ms < 0) throw new Error("invalid timeout");
+    _g.idleTimeoutMs = Math.floor(ms);
+    _g.lastActivity = Date.now();
+    _g.hydrated = true; // we just set it; skip the load-from-disk path
+    try {
+        (0,_lib_stores_app_settings__WEBPACK_IMPORTED_MODULE_0__/* .setScreenLockIdleTimeoutMs */ .Z0)(_g.idleTimeoutMs);
+    } catch (err) {
+        console.warn("[screen-lock] could not persist idle timeout:", err);
+    }
+}
+
+
+/***/ }),
+
+/***/ 27910:
+/***/ ((module) => {
+
+module.exports = require("stream");
+
+/***/ }),
+
+/***/ 28354:
+/***/ ((module) => {
+
+module.exports = require("util");
+
+/***/ }),
+
+/***/ 29021:
+/***/ ((module) => {
+
+module.exports = require("fs");
+
+/***/ }),
+
+/***/ 29294:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-async-storage.external.js");
+
+/***/ }),
+
+/***/ 31421:
+/***/ ((module) => {
+
+module.exports = require("node:child_process");
+
+/***/ }),
+
+/***/ 33873:
+/***/ ((module) => {
+
+module.exports = require("path");
+
+/***/ }),
+
+/***/ 37067:
+/***/ ((module) => {
+
+module.exports = require("node:http");
+
+/***/ }),
+
+/***/ 38522:
+/***/ ((module) => {
+
+module.exports = require("node:zlib");
+
+/***/ }),
+
+/***/ 44708:
+/***/ ((module) => {
+
+module.exports = require("node:https");
+
+/***/ }),
+
+/***/ 44870:
+/***/ ((module) => {
+
+module.exports = require("next/dist/compiled/next-server/app-route.runtime.prod.js");
+
+/***/ }),
+
+/***/ 48161:
+/***/ ((module) => {
+
+module.exports = require("node:os");
+
+/***/ }),
+
+/***/ 51455:
+/***/ ((module) => {
+
+module.exports = require("node:fs/promises");
+
+/***/ }),
+
+/***/ 55511:
+/***/ ((module) => {
+
+module.exports = require("crypto");
 
+/***/ }),
+
+/***/ 55591:
+/***/ ((module) => {
+
+module.exports = require("https");
+
+/***/ }),
+
+/***/ 57075:
+/***/ ((module) => {
+
+module.exports = require("node:stream");
+
+/***/ }),
+
+/***/ 57975:
+/***/ ((module) => {
+
+module.exports = require("node:util");
+
+/***/ }),
+
+/***/ 63033:
+/***/ ((module) => {
+
+module.exports = require("next/dist/server/app-render/work-unit-async-storage.external.js");
 
 /***/ }),
 
@@ -824,6 +824,13 @@ module.exports = require("node:path");
 
 /***/ }),
 
+/***/ 77030:
+/***/ ((module) => {
+
+module.exports = require("node:net");
+
+/***/ }),
+
 /***/ 77598:
 /***/ ((module) => {
 
@@ -887,7 +894,7 @@ module.exports = import("@huggingface/transformers");;
 var __webpack_require__ = require("../../../../../webpack-runtime.js");
 __webpack_require__.C(exports);
 var __webpack_exec__ = (moduleId) => (__webpack_require__(__webpack_require__.s = moduleId))
-var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(63175)));
+var __webpack_exports__ = __webpack_require__.X(0, [2970,7377,1813,7981,4992,46], () => (__webpack_exec__(8213)));
 module.exports = __webpack_exports__;
 
 })();