@kky42/pievo-server 2.0.1 → 2.0.2

package/.output/server/_ssr/{auth-C6uZpC6v.mjs → auth-BP81awUE.mjs}

@@ -1,6 +1,6 @@
 import { A as sql, C as or, S as notInArray, _ as isNull$1, b as lte, c as asc, d as eq, f as gt, g as isNotNull, h as inArray, l as desc, m as ilike, o as count, p as gte, u as and, v as like, x as ne, y as lt } from "../_libs/drizzle-orm+postgres.mjs";
-import { $ as getProtocol, A as defu, H as getBaseURL, I as ensureTeam, J as getHost, K as getEnvVar, L as env, Nt as normalizePathname, Ot as loginGateEnabled, Q as getOrigin, U as getBooleanEnvVar, Wt as resolveBaseURL, Xt as teamIdForUser, _ as capitalizeFirstLetter, a as BetterAuthError, f as ValidationError$1, gt as kAPIErrorHeaderSymbol, ht as isTest, k as db, l as ENV, lt as isProduction, m as betterFetch, mt as isTeamMember, n as APIError$1, nn as wildcardMatch, o as BetterCallError, ot as isDevelopment, r as BASE_ERROR_CODES, st as isDynamicBaseURLConfig, t as APIError, ut as isRequestLike, w as createDefu } from "./boot-BpqTI96x.mjs";
-import { C as withSpan, S as shouldPublishLog, _ as logger, a as __getBetterAuthGlobal, b as runWithTransaction, c as createRandomStringGenerator, d as getAuthTables, f as getBetterAuthVersion, g as initGetModelName, h as initGetFieldName, l as generateId$2, m as import_src, n as ATTR_HOOK_TYPE, o as createAdapterFactory, p as getCurrentAdapter, r as ATTR_OPERATION_ID, s as createLogger, t as ATTR_CONTEXT, u as getAsyncLocalStorage, v as queueAfterTransactionHook, x as safeJSONParse, y as runWithAdapter } from "./factory-D73dkxmb.mjs";
+import { $t as teamIdForUser, G as getBooleanEnvVar, It as normalizePathname, J as getEnvVar, M as defu, R as ensureTeam, T as createDefu, W as getBaseURL, X as getHost, _t as isTeamMember, a as BetterAuthError, an as wildcardMatch, ct as isDevelopment, et as getOrigin, ft as isProduction, h as betterFetch, j as db, jt as loginGateEnabled, l as ENV, lt as isDynamicBaseURLConfig, n as APIError$1, o as BetterCallError, p as ValidationError$1, pt as isRequestLike, qt as resolveBaseURL, r as BASE_ERROR_CODES, t as APIError, tt as getProtocol, v as capitalizeFirstLetter, vt as isTest, yt as kAPIErrorHeaderSymbol, z as env } from "./boot-sM4t8RJu.mjs";
+import { C as withSpan, S as shouldPublishLog, _ as logger, a as __getBetterAuthGlobal, b as runWithTransaction, c as createRandomStringGenerator, d as getAuthTables, f as getBetterAuthVersion, g as initGetModelName, h as initGetFieldName, l as generateId$2, m as import_src, n as ATTR_HOOK_TYPE, o as createAdapterFactory, p as getCurrentAdapter, r as ATTR_OPERATION_ID, s as createLogger, t as ATTR_CONTEXT, u as getAsyncLocalStorage, v as queueAfterTransactionHook, x as safeJSONParse, y as runWithAdapter } from "./factory-BQ_XiP23.mjs";
 import { randomBytes, scrypt } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
@@ -1700,7 +1700,7 @@ var JOIN_TYPE_SQL = freeze({
 	Using: "using"
 });
 //#endregion
-//#region node_modules/.nitro/vite/services/ssr/assets/auth-C6uZpC6v.js
+//#region node_modules/.nitro/vite/services/ssr/assets/auth-BP81awUE.js
 /**
 * @internal
 */
@@ -15993,7 +15993,7 @@ var createKyselyAdapter = async (config) => {
 	if ("getConnection" in db) dialect = new MysqlDialect(db);
 	if ("connect" in db) dialect = new PostgresDialect({ pool: db });
 	if ("fileControl" in db) {
-		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-BW9W1_Ps-DlRsM3s1.mjs");
+		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-BW9W1_Ps-CZJuWL5Z.mjs");
 		dialect = new BunSqliteDialect({ database: db });
 	}
 	if ("createSession" in db) {
@@ -16009,12 +16009,12 @@ var createKyselyAdapter = async (config) => {
 			if (error !== null && typeof error === "object" && "code" in error && error.code !== "ERR_UNKNOWN_BUILTIN_MODULE") throw error;
 		}
 		if (DatabaseSync && db instanceof DatabaseSync) {
-			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-01BHn7am.mjs");
+			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-BGlhyZkk.mjs");
 			dialect = new NodeSqliteDialect({ database: db });
 		}
 	}
 	if ("batch" in db && "exec" in db && "prepare" in db) {
-		const { D1SqliteDialect } = await import("./d1-sqlite-dialect-BLC8LXE6-Ct-4mGlC.mjs");
+		const { D1SqliteDialect } = await import("./d1-sqlite-dialect-BLC8LXE6-C2PCtZfI.mjs");
 		dialect = new D1SqliteDialect({ database: db });
 	}
 	return {
@@ -36526,7 +36526,7 @@ async function getBaseAdapter(options, handleDirectDatabase) {
 			acc[key] = [];
 			return acc;
 		}, {});
-		const { memoryAdapter } = await import("./dist-lkoxB9C9.mjs");
+		const { memoryAdapter } = await import("./dist-Z7v6ihws.mjs");
 		adapter = memoryAdapter(memoryDB)(options);
 	} else if (typeof options.database === "function") adapter = options.database(options);
 	else adapter = await handleDirectDatabase(options);
@@ -36540,10 +36540,10 @@ async function getBaseAdapter(options, handleDirectDatabase) {
 }
 async function getAdapter(options) {
 	return getBaseAdapter(options, async (opts) => {
-		const { createKyselyAdapter } = await import("./kysely-adapter-YDb9pnV-.mjs");
+		const { createKyselyAdapter } = await import("./kysely-adapter-DjQPkqgJ.mjs");
 		const { kysely, databaseType, transaction } = await createKyselyAdapter(opts);
 		if (!kysely) throw new BetterAuthError("Failed to initialize database adapter");
-		const { kyselyAdapter } = await import("./kysely-adapter-YDb9pnV-.mjs");
+		const { kyselyAdapter } = await import("./kysely-adapter-DjQPkqgJ.mjs");
 		return kyselyAdapter(kysely, {
 			type: databaseType || "sqlite",
 			debugLogs: opts.database && "debugLogs" in opts.database ? opts.database.debugLogs : false,

package/.output/server/_ssr/boot-pUGFIxSA.mjs

@@ -0,0 +1,2 @@
+import { U as getArtifactSync, Y as getGateway, q as getCliGateway } from "./boot-sM4t8RJu.mjs";
+export { getArtifactSync, getCliGateway, getGateway };

package/.output/server/_ssr/{boot-BpqTI96x.mjs → boot-sM4t8RJu.mjs}

@@ -12,7 +12,7 @@ import os from "node:os";
 import fs$1 from "node:fs/promises";
 import { lookup } from "node:dns/promises";
 import { isIP } from "node:net";
-//#region node_modules/.nitro/vite/services/ssr/assets/boot-BpqTI96x.js
+//#region node_modules/.nitro/vite/services/ssr/assets/boot-sM4t8RJu.js
 var import_pino = /* @__PURE__ */ __toESM(require_pino());
 var import_pino_pretty = /* @__PURE__ */ __toESM(require_pino_pretty());
 function defineErrorCodes(codes) {
@@ -3996,6 +3996,45 @@ function machinePresence(online, lastSeen, now = Date.now()) {
 	return "offline";
 }
 /**
+* Tiny semver comparison — just enough to decide "is the daemon older than the
+* latest published version?" for the web's update hint. No dependency; we only
+* need numeric-core ordering (major.minor.patch), and a pre-release is treated
+* as older than its release (a "0.9.0-rc.1" daemon is still behind "0.9.0").
+*/
+/** Parse the leading numeric core `x.y.z` of a version, ignoring any pre-release
+*  / build suffix. Returns null when it isn't a recognizable version. */
+function core(v) {
+	const m = /^\s*v?(\d+)\.(\d+)\.(\d+)/.exec(v);
+	if (!m) return null;
+	return [
+		Number(m[1]),
+		Number(m[2]),
+		Number(m[3])
+	];
+}
+/** Does `v` carry a pre-release suffix (e.g. "1.2.3-rc.1")? */
+function isPre(v) {
+	return /^\s*v?\d+\.\d+\.\d+-/.test(v);
+}
+/**
+* `true` when `current` is strictly older than `latest`. Returns `false` on any
+* unparseable/equal/newer input — the hint is opt-in, so we only ever show it
+* when we can be confident the daemon is genuinely behind.
+*/
+function isOutdated(current, latest) {
+	if (!current || !latest) return false;
+	const a = core(current);
+	const b = core(latest);
+	if (!a || !b) return false;
+	for (let i = 0; i < 3; i++) {
+		const ai = a[i];
+		const bi = b[i];
+		if (ai < bi) return true;
+		if (ai > bi) return false;
+	}
+	return isPre(current) && !isPre(latest);
+}
+/**
 * Machine-route ingress: read + parse a JSON request body under a hard size cap.
 * The gateway's per-field wire caps (WIRE_TEXT_CAP etc.) clip individual strings
 * AFTER parse — without this, an unbounded `request.json()` still buffers an
@@ -5336,6 +5375,23 @@ async function schemaKeysInUse(loopId) {
 	return [...keys];
 }
 /**
+* Lowest daemon package version this server may safely dispatch work to.
+*
+* Keep this as a coarse package-version gate: if a future server changes the
+* prompt/CLI/report protocol incompatibly, bump this constant to the matching
+* daemon release. Unknown versions are treated as incompatible because only
+* daemons that report a version can be known-safe for breaking protocol changes.
+*/
+var MIN_DAEMON_VERSION = "2.0.1";
+function daemonNeedsUpdate(current, required = MIN_DAEMON_VERSION) {
+	if (!current) return true;
+	if (current === required) return false;
+	return isOutdated(current, required);
+}
+function daemonUpgradeCommand() {
+	return "npm install -g @kky42/pievo@latest && pievo daemon restart";
+}
+/**
 * Machine gateway - the run-lifecycle core of the HTTP surface the daemon talks
 * to (poll transport: short-poll while a run is in flight, opt-in server-held
 * long-poll while idle). Framework-agnostic like the rest of the gateway
@@ -5853,9 +5909,12 @@ var MachineGateway = class {
 				code: "VALIDATION_ERROR"
 			}
 		};
-		const base = await this.poll(deviceToken, request.info, current ? [current.runId] : void 0, request.watchDigest, !current);
+		const machineId = isDeviceTokenShape(deviceToken) ? machineIdFromToken(deviceToken) : "";
+		const priorMachine = machineId ? await getMachine(machineId) : void 0;
+		const reportedVersion = typeof request.info?.version === "string" ? clipText(request.info.version, 64) : priorMachine?.daemonVersion;
+		const needsUpdate = daemonNeedsUpdate(reportedVersion);
+		const base = await this.poll(deviceToken, request.info, current ? [current.runId] : void 0, request.watchDigest, !current && !needsUpdate);
 		if (base.status !== 200) return base;
-		const machineId = machineIdFromToken(deviceToken);
 		if ((await getMachine(machineId))?.daemonProtocol !== 2) await updateMachine(machineId, { daemonProtocol: 2 });
 		const running = await runningRunForMachine(machineId);
 		const body = base.body;
@@ -5864,6 +5923,11 @@ var MachineGateway = class {
 			status: 200,
 			body: {
 				delivery: current ? null : body.deliveries[0] ?? null,
+				...needsUpdate ? { needsUpdate: {
+					current: reportedVersion ?? null,
+					required: MIN_DAEMON_VERSION,
+					command: daemonUpgradeCommand()
+				} } : {},
 				...cancelRunId ? { cancelRunId } : {},
 				...current && running && current.runId !== running.id ? { runConflict: {
 					daemonRunId: current.runId,
@@ -9233,4 +9297,4 @@ async function getCliGateway() {
 	return (await ensureServer()).cliGateway;
 }
 //#endregion
-export { getProtocol as $, updateLoop as $t, defu as A, machineIdFromToken as At, getArtifactFile as B, removeTeamMemberGuarded as Bt, createChannel as C, listRuns as Ct, createMachine as D, logger as Dt, createInvite as E, listTeamsForUser as Et, ensureServer as F, pauseLoop as Ft, getCliGateway as G, safeRelPath as Gt, getBaseURL as H, requestDeleteLoop as Ht, ensureTeam as I, prevRunSnapshot as It, getHost as J, startLoop as Jt, getEnvVar as K, setTeamMemberRoleGuarded as Kt, env as L, readJsonBody as Lt, deleteInvite as M, mintDeviceToken as Mt, deleteMachine as N, normalizePathname as Nt, createTeam as O, loginGateEnabled as Ot, deleteTeamCascade as P, normalizeProviderSetting as Pt, getOrigin as Q, tryDeleteLoop as Qt, evolve_default as R, redeemInviteAtomic as Rt, countRuns as S, listPendingInvites as St, createFetch as T, listTeamMembers as Tt, getBooleanEnvVar as U, requestRunCancel as Ut, getArtifactSync as V, renameTeam as Vt, getChannel as W, resolveBaseURL as Wt, getLoop as X, teamIdForUser as Xt, getInvite as Y, stopLoop as Yt, getMachine as Z, toKebabCase as Zt, capitalizeFirstLetter as _, listArtifactsWithMeta as _t, BetterAuthError as a, hasRunningRun as at, coerceUi as b, listMachines as bt, CODING_AGENTS as c, isPersonalTeam as ct, SYNC_BODY_CAP as d, isSafeUrlScheme as dt, updateMachine as en, getRun as et, ValidationError$1 as f, isTaskEntry as ft, canEvolve as g, kAPIErrorHeaderSymbol as gt, buildFileEntries as h, isTest as ht, BLOB_CAP as i, hasPendingRun as it, deleteChannel as j, machinePresence as jt, db as k, loopsForMachine as kt, ENV as l, isProduction as lt, betterFetch as m, isTeamMember as mt, APIError$1 as n, wildcardMatch as nn, getTeam as nt, BetterCallError as o, isDevelopment as ot, addTeamMember as p, isTaskPath as pt, getGateway as q, sha256 as qt, BASE_ERROR_CODES as r, getTeamMember as rt, CHANNELS as s, isDynamicBaseURLConfig as st, APIError as t, userByEmail as tn, getRunSnapshot as tt, MACHINE_BODY_CAP as u, isRequestLike as ut, coerceCodingAgent as v, listChannels as vt, createDefu as w, listRunsBefore as wt, countLoopsForTeam as x, listMachinesForTeam as xt, coerceStateSchema as y, listLoops as yt, forceDeleteLoop as z, rememberConnectKey as zt };
+export { getMachine as $, teamIdForUser as $t, daemonNeedsUpdate as A, logger as At, evolve_default as B, readJsonBody as Bt, countRuns as C, listMachines as Ct, createInvite as D, listRunsBefore as Dt, createFetch as E, listRuns as Et, deleteMachine as F, mintDeviceToken as Ft, getBooleanEnvVar as G, requestDeleteLoop as Gt, getArtifactFile as H, rememberConnectKey as Ht, deleteTeamCascade as I, normalizePathname as It, getEnvVar as J, safeRelPath as Jt, getChannel as K, requestRunCancel as Kt, ensureServer as L, normalizeProviderSetting as Lt, defu as M, loopsForMachine as Mt, deleteChannel as N, machineIdFromToken as Nt, createMachine as O, listTeamMembers as Ot, deleteInvite as P, machinePresence as Pt, getLoop as Q, stopLoop as Qt, ensureTeam as R, pauseLoop as Rt, countLoopsForTeam as S, listLoops as St, createDefu as T, listPendingInvites as Tt, getArtifactSync as U, removeTeamMemberGuarded as Ut, forceDeleteLoop as V, redeemInviteAtomic as Vt, getBaseURL as W, renameTeam as Wt, getHost as X, sha256 as Xt, getGateway as Y, setTeamMemberRoleGuarded as Yt, getInvite as Z, startLoop as Zt, canEvolve as _, isTeamMember as _t, BetterAuthError as a, wildcardMatch as an, getTeamMember as at, coerceStateSchema as b, listArtifactsWithMeta as bt, CODING_AGENTS as c, isDevelopment as ct, MIN_DAEMON_VERSION as d, isPersonalTeam as dt, toKebabCase as en, getOrigin as et, SYNC_BODY_CAP as f, isProduction as ft, buildFileEntries as g, isTaskPath as gt, betterFetch as h, isTaskEntry as ht, BLOB_CAP as i, userByEmail as in, getTeam as it, db as j, loginGateEnabled as jt, createTeam as k, listTeamsForUser as kt, ENV as l, isDynamicBaseURLConfig as lt, addTeamMember as m, isSafeUrlScheme as mt, APIError$1 as n, updateLoop as nn, getRun as nt, BetterCallError as o, hasPendingRun as ot, ValidationError$1 as p, isRequestLike as pt, getCliGateway as q, resolveBaseURL as qt, BASE_ERROR_CODES as r, updateMachine as rn, getRunSnapshot as rt, CHANNELS as s, hasRunningRun as st, APIError as t, tryDeleteLoop as tn, getProtocol as tt, MACHINE_BODY_CAP as u, isOutdated as ut, capitalizeFirstLetter as v, isTest as vt, createChannel as w, listMachinesForTeam as wt, coerceUi as x, listChannels as xt, coerceCodingAgent as y, kAPIErrorHeaderSymbol as yt, env as z, prevRunSnapshot as zt };

package/.output/server/_ssr/{bun-sqlite-dialect-BW9W1_Ps-DlRsM3s1.mjs → bun-sqlite-dialect-BW9W1_Ps-CZJuWL5Z.mjs}

@@ -1,6 +1,6 @@
-import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-C6uZpC6v.mjs";
+import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-BP81awUE.mjs";
 import { n as DEFAULT_MIGRATION_TABLE, t as DEFAULT_MIGRATION_LOCK_TABLE } from "./kysely-migration-tables-JkVUjPF_-bPAX9LR_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/bun-sqlite-dialect-BW9W1_Ps-DlRsM3s1.js
+//#region node_modules/.nitro/vite/services/ssr/assets/bun-sqlite-dialect-BW9W1_Ps-CZJuWL5Z.js
 var BunSqliteAdapter = class {
 	get supportsCreateIfNotExists() {
 		return true;

package/.output/server/_ssr/{d1-sqlite-dialect-BLC8LXE6-Ct-4mGlC.mjs → d1-sqlite-dialect-BLC8LXE6-C2PCtZfI.mjs}

@@ -1,6 +1,6 @@
-import { a as SqliteQueryCompiler, i as SqliteAdapter } from "./auth-C6uZpC6v.mjs";
+import { a as SqliteQueryCompiler, i as SqliteAdapter } from "./auth-BP81awUE.mjs";
 import { n as DEFAULT_MIGRATION_TABLE, t as DEFAULT_MIGRATION_LOCK_TABLE } from "./kysely-migration-tables-JkVUjPF_-bPAX9LR_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/d1-sqlite-dialect-BLC8LXE6-Ct-4mGlC.js
+//#region node_modules/.nitro/vite/services/ssr/assets/d1-sqlite-dialect-BLC8LXE6-C2PCtZfI.js
 var D1SqliteAdapter = class extends SqliteAdapter {};
 var D1SqliteDriver = class {
 	#config;

package/.output/server/_ssr/db-Cc6I8bWL.mjs

@@ -0,0 +1,2 @@
+import { j as db } from "./boot-sM4t8RJu.mjs";
+export { db };

package/.output/server/_ssr/{dist-lkoxB9C9.mjs → dist-Z7v6ihws.mjs}

@@ -1,5 +1,5 @@
-import { _ as logger, o as createAdapterFactory } from "./factory-D73dkxmb.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/dist-lkoxB9C9.js
+import { _ as logger, o as createAdapterFactory } from "./factory-BQ_XiP23.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/dist-Z7v6ihws.js
 /**
 * Case-insensitive in-memory comparison helpers.
 * Used when evaluating where clauses in the memory adapter.

package/.output/server/_ssr/{factory-D73dkxmb.mjs → factory-BQ_XiP23.mjs}

@@ -1,5 +1,5 @@
-import { K as getEnvVar, L as env, a as BetterAuthError } from "./boot-BpqTI96x.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/factory-D73dkxmb.js
+import { J as getEnvVar, a as BetterAuthError, z as env } from "./boot-sM4t8RJu.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/factory-BQ_XiP23.js
 var __defProp = Object.defineProperty;
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __exportAll = (all, no_symbols) => {

package/.output/server/_ssr/{invite._token-C80Kxhqw.mjs → invite._token-CRAl6-yK.mjs}

@@ -2,12 +2,12 @@ import { o as __toESM } from "../_runtime.mjs";
 import { g as require_jsx_runtime, h as require_react } from "../_libs/@base-ui/react+[...].mjs";
 import { l as btnPrimary } from "./ui-WGITbP6Z.mjs";
 import { d as useNavigate } from "../_libs/@tanstack/react-router+[...].mjs";
-import { i as PievoLogo, s as useSession } from "./LoopPlaybook-BxKPoWAp.mjs";
+import { i as PievoLogo, s as useSession } from "./LoopPlaybook-BC9Dvnw2.mjs";
 import { t as setActiveTeamCookie } from "./teamCookie-B7hLOIie.mjs";
 import { c as redeemTeamInvite } from "./teamFns-D4I-0dEB.mjs";
-import { t as Route } from "./invite._token-D-KuiRD1.mjs";
-import { t as SignIn } from "./SignIn-C1duN7oy.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/invite._token-C80Kxhqw.js
+import { t as Route } from "./invite._token-VKmyC9-R.mjs";
+import { t as SignIn } from "./SignIn-D70NUJsN.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/invite._token-CRAl6-yK.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**

package/.output/server/_ssr/{invite._token-D-KuiRD1.mjs → invite._token-VKmyC9-R.mjs}

@@ -1,9 +1,9 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
 import { c as getAuthState } from "./loopApi-BfMnXaKT.mjs";
-import { a as authClient } from "./LoopPlaybook-BxKPoWAp.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/invite._token-D-KuiRD1.js
+import { a as authClient } from "./LoopPlaybook-BC9Dvnw2.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/invite._token-VKmyC9-R.js
 var $$splitErrorComponentImporter = () => import("./invite._token-23daBIfe.mjs");
-var $$splitComponentImporter = () => import("./invite._token-C80Kxhqw.mjs");
+var $$splitComponentImporter = () => import("./invite._token-CRAl6-yK.mjs");
 /**
 * Invite-link redeem (`/invite/<token>`, design §4 option B). The recipient opens
 * the link the owner shared; if signed out (under the gate) they hit the normal

package/.output/server/_ssr/{kysely-adapter-YDb9pnV-.mjs → kysely-adapter-DjQPkqgJ.mjs}

@@ -1,2 +1,2 @@
-import { r as kyselyAdapter, t as createKyselyAdapter } from "./auth-C6uZpC6v.mjs";
+import { r as kyselyAdapter, t as createKyselyAdapter } from "./auth-BP81awUE.mjs";
 export { createKyselyAdapter, kyselyAdapter };

package/.output/server/_ssr/logger-CHoC5_kz.mjs

@@ -0,0 +1,2 @@
+import { At as logger } from "./boot-sM4t8RJu.mjs";
+export { logger };

package/.output/server/_ssr/{loopApi-BXHLHlt_.mjs → loopApi-i7xdpokI.mjs}

@@ -1,9 +1,9 @@
-import { $t as updateLoop, Et as listTeamsForUser, F as ensureServer, Ft as pauseLoop, Ht as requestDeleteLoop, Jt as startLoop, Pt as normalizeProviderSetting, Qt as tryDeleteLoop, Ut as requestRunCancel, W as getChannel, X as getLoop, Yt as stopLoop, Z as getMachine, at as hasRunningRun, b as coerceUi, et as getRun, g as canEvolve, jt as machinePresence, nt as getTeam, rt as getTeamMember, v as coerceCodingAgent, wt as listRunsBefore, y as coerceStateSchema, yt as listLoops, z as forceDeleteLoop } from "./boot-BpqTI96x.mjs";
+import { $ as getMachine, Dt as listRunsBefore, Gt as requestDeleteLoop, K as getChannel, Kt as requestRunCancel, L as ensureServer, Lt as normalizeProviderSetting, Pt as machinePresence, Q as getLoop, Qt as stopLoop, Rt as pauseLoop, St as listLoops, V as forceDeleteLoop, Zt as startLoop, _ as canEvolve, at as getTeamMember, b as coerceStateSchema, it as getTeam, kt as listTeamsForUser, nn as updateLoop, nt as getRun, st as hasRunningRun, tn as tryDeleteLoop, x as coerceUi, y as coerceCodingAgent } from "./boot-sM4t8RJu.mjs";
 import { n as createServerFn } from "./ssr.mjs";
-import { i as toRunSummary, n as toJobDetail, r as toJobSummary } from "./adapters-C10CmWK4.mjs";
-import { canAccessLoop, requestScope } from "./auth-C6uZpC6v.mjs";
+import { i as toRunSummary, n as toJobDetail, r as toJobSummary } from "./adapters-D0d1fBKK.mjs";
+import { canAccessLoop, requestScope } from "./auth-BP81awUE.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-BXHLHlt_.js
+//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-i7xdpokI.js
 var meta_default$6 = {
 	name: "dependency-triage",
 	label: "Dependency Triage",
@@ -135,7 +135,7 @@ var getAuthState_createServerFn_handler = createServerRpc({
 	filename: "src/server/loopApi.ts"
 }, (opts) => getAuthState.__executeServer(opts));
 var getAuthState = createServerFn({ method: "GET" }).handler(getAuthState_createServerFn_handler, async () => {
-	const { authEnabled } = await import("./auth-C6uZpC6v.mjs");
+	const { authEnabled } = await import("./auth-BP81awUE.mjs");
 	return { enabled: authEnabled };
 });
 var getConfig_createServerFn_handler = createServerRpc({
@@ -244,7 +244,7 @@ var getArtifacts_createServerFn_handler = createServerRpc({
 var getArtifacts = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifacts_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return [];
-	const { listLoopArtifacts } = await import("./artifactFiles-uxLErS_7.mjs");
+	const { listLoopArtifacts } = await import("./artifactFiles-BfE1070_.mjs");
 	return listLoopArtifacts(data.loopId);
 });
 var getArtifact_createServerFn_handler = createServerRpc({
@@ -255,7 +255,7 @@ var getArtifact_createServerFn_handler = createServerRpc({
 var getArtifact = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifact_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return { error: "file not found" };
-	const { readLoopArtifact } = await import("./artifactFiles-uxLErS_7.mjs");
+	const { readLoopArtifact } = await import("./artifactFiles-BfE1070_.mjs");
 	return readLoopArtifact(data.loopId, data.path);
 });
 var getRunDiff_createServerFn_handler = createServerRpc({
@@ -274,7 +274,7 @@ var getRunDiff = createServerFn({ method: "GET" }).validator((d) => d).handler(g
 		hasSnapshot: false,
 		files: []
 	};
-	const { computeRunDiff } = await import("./runDiff-CyN5ZR5F.mjs");
+	const { computeRunDiff } = await import("./runDiff-SlGPjjNq.mjs");
 	return computeRunDiff(data.runId);
 });
 var listTemplates_createServerFn_handler = createServerRpc({
@@ -389,7 +389,7 @@ var deleteJob = createServerFn({ method: "POST" }).validator((id) => id).handler
 	if (!await requestDeleteLoop(id)) return { error: "not found" };
 	if (unreachable && mayRetireAuthority) {
 		if (!await forceDeleteLoop(id)) return { error: "delete failed; server data was not deleted" };
-		const { logger } = await import("./logger-Dhuet6zm.mjs");
+		const { logger } = await import("./logger-CHoC5_kz.mjs");
 		logger.child({ mod: "loop-lifecycle" }).warn({
 			action: "unreachable-delete",
 			loopId: id,
@@ -429,7 +429,7 @@ var forceDeleteJob = createServerFn({ method: "POST" }).validator((d) => d).hand
 	}
 	scheduler.removeLoop(data.id);
 	if (!await forceDeleteLoop(data.id)) return { error: "force delete failed; server data was not deleted" };
-	const { logger } = await import("./logger-Dhuet6zm.mjs");
+	const { logger } = await import("./logger-CHoC5_kz.mjs");
 	logger.child({ mod: "loop-lifecycle" }).warn({
 		action: "force-delete",
 		loopId: data.id,
@@ -520,7 +520,7 @@ var mintClaim_createServerFn_handler = createServerRpc({
 }, (opts) => mintClaim.__executeServer(opts));
 var mintClaim = createServerFn({ method: "POST" }).validator((teamId) => teamId).handler(mintClaim_createServerFn_handler, async ({ data: teamId }) => {
 	await backend();
-	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-DuV-D_RB.mjs");
+	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-BCOvumer.mjs");
 	const { userId, teamId: active } = await requestScope(teamId);
 	const owner = userId ?? "shared";
 	const token = mintDeviceToken();

package/.output/server/_ssr/{loops._loopId-DVG3dDvp.mjs → loops._loopId-DOPfN_Op.mjs}

@@ -1,18 +1,18 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_jsx_runtime, h as require_react } from "../_libs/@base-ui/react+[...].mjs";
-import { c as CODING_AGENTS, ft as isTaskEntry, h as buildFileEntries } from "./boot-BpqTI96x.mjs";
+import { c as CODING_AGENTS, g as buildFileEntries, ht as isTaskEntry } from "./boot-sM4t8RJu.mjs";
 import { A as sectionHeadCls, C as isCompleted, D as rel, M as tsShort, N as until, S as isClosed, _ as dur, b as humanBytes, c as btnDanger, d as btnQuiet, h as dotLabel, i as Pre, j as selectCls, k as runPulseStyle, l as btnPrimary, m as dotColor, n as Loading, o as btn, p as cronText, r as Pill, s as btnCost, t as ErrorBanner, v as fmt, w as labelCls, x as inputCls } from "./ui-WGITbP6Z.mjs";
 import { d as useNavigate, u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
 import { C as stopJob, S as startJob, a as evolveJob, b as requestEdit, d as getJobDetail, g as loadOlderRuns, i as deleteJob, s as getArtifacts, v as patchJob, x as runJob, y as pauseJob } from "./loopApi-BfMnXaKT.mjs";
 import { n as TaskFileView, r as ViewerHead, t as ArtifactBody } from "./artifactView-CYV1r48i.mjs";
 import { i as useFlash, n as FlashLine, r as LoadErrorCard, t as ConfirmBar } from "./actionUi-mDYOvJdB.mjs";
-import { s as useSession } from "./LoopPlaybook-BxKPoWAp.mjs";
+import { s as useSession } from "./LoopPlaybook-BC9Dvnw2.mjs";
 import { t as setActiveTeamCookie } from "./teamCookie-B7hLOIie.mjs";
-import { t as SignIn } from "./SignIn-C1duN7oy.mjs";
+import { t as SignIn } from "./SignIn-D70NUJsN.mjs";
 import { i as lifecycleDisplay, n as daemonStopSupport, r as deriveLoopLifecycle, t as DAEMON_UPGRADE_REQUIRED } from "./lifecycleUi-l3nx9i3T.mjs";
-import { a as listChannels, n as Timeline, s as mergeRuns, t as MachinesModal } from "./notifyFns-qZ6FYwAL.mjs";
-import { t as Route } from "./loops._loopId-BVPj6kiH.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-DVG3dDvp.js
+import { a as listChannels, n as Timeline, s as mergeRuns, t as MachinesModal } from "./notifyFns-DWotltSJ.mjs";
+import { t as Route } from "./loops._loopId-jXSgPWG1.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-DOPfN_Op.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**
@@ -556,7 +556,7 @@ var EDIT_SEEDS = [
 		seed: "Give this loop a goal, and finish it once the goal is met: "
 	}
 ];
-var LoopView = (0, import_react.lazy)(() => import("./LoopView-B0AwFjwS.mjs").then((m) => ({ default: m.LoopView })));
+var LoopView = (0, import_react.lazy)(() => import("./LoopView-Dom6Ad5G.mjs").then((m) => ({ default: m.LoopView })));
 /**
 * Loop detail PAGE body (`/loops/$loopId`) — the redesign of the former modal.
 * One scrolling page: a loop header (name / status / schedule / agent / machine +
@@ -1005,6 +1005,36 @@ function LoopDetailView({ id }) {
 			})
 		]
 	});
+	const needsUpdateEl = detail.machine.needsUpdate && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "mb-2.5 flex flex-wrap items-center gap-x-3 gap-y-1.5 rounded-control border border-warn/40 bg-warn/10 px-4 py-2.5",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
+				className: "inline-flex items-center gap-2 text-meta font-medium text-primary",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+					"aria-hidden": true,
+					className: "size-2 rounded-full bg-warn"
+				}), "Daemon update required"]
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
+				className: "text-meta text-secondary",
+				children: [
+					"This server requires v",
+					detail.machine.requiredDaemonVersion,
+					"; ",
+					detail.machine.name ? `“${detail.machine.name}”` : "the bound machine",
+					" reports ",
+					detail.machine.daemonVersion ? `v${detail.machine.daemonVersion}` : "an unknown version",
+					". Queued work will wait."
+				]
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+				type: "button",
+				onClick: () => setMachinesOpen(true),
+				className: "ml-auto cursor-pointer text-meta font-medium text-interactive underline underline-offset-2 transition-colors hover:text-display",
+				children: "Update daemon"
+			})
+		]
+	});
 	const offlineEl = !online && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		className: "mb-2.5 flex flex-wrap items-center gap-x-3 gap-y-1.5 rounded-control border border-hairline bg-raised px-4 py-2.5",
 		children: [
@@ -1198,6 +1228,7 @@ function LoopDetailView({ id }) {
 					className: "mt-5 border-t border-hairline pt-4",
 					children: [
 						crossTeamEl,
+						needsUpdateEl,
 						offlineEl,
 						actionErrEl,
 						flashLine,

package/.output/server/_ssr/{loops._loopId-BVPj6kiH.mjs → loops._loopId-jXSgPWG1.mjs}

@@ -1,8 +1,8 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
 import { c as getAuthState } from "./loopApi-BfMnXaKT.mjs";
-import { a as authClient } from "./LoopPlaybook-BxKPoWAp.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-BVPj6kiH.js
-var $$splitComponentImporter = () => import("./loops._loopId-DVG3dDvp.mjs");
+import { a as authClient } from "./LoopPlaybook-BC9Dvnw2.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-jXSgPWG1.js
+var $$splitComponentImporter = () => import("./loops._loopId-DOPfN_Op.mjs");
 /**
 * Loop detail PAGE — `/loops/$loopId`. The dedicated page that replaced the old
 * dashboard modal: a loop header + action toolbar, the unified Files panel (task

package/.output/server/_ssr/{loops._loopId_.runs._runId-DbEF9MQu.mjs → loops._loopId_.runs._runId-BhoM6DWj.mjs}

@@ -1,8 +1,8 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
 import { c as getAuthState } from "./loopApi-BfMnXaKT.mjs";
-import { a as authClient } from "./LoopPlaybook-BxKPoWAp.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-DbEF9MQu.js
-var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-Db6cTcUT.mjs");
+import { a as authClient } from "./LoopPlaybook-BC9Dvnw2.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-BhoM6DWj.js
+var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-DiBP2rCe.mjs");
 /**
 * Run detail PAGE — `/loops/$loopId/runs/$runId`. A standalone page (the trailing
 * `_` on the `$loopId` segment opts it out of the loop page's component so the run

package/.output/server/_ssr/{loops._loopId_.runs._runId-Db6cTcUT.mjs → loops._loopId_.runs._runId-DiBP2rCe.mjs}

@@ -4,10 +4,10 @@ import { A as sectionHeadCls, _ as dur, a as StatusPill, b as humanBytes, c as b
 import { u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
 import { d as getJobDetail, f as getRunDiff, g as loadOlderRuns, w as stopRun } from "./loopApi-BfMnXaKT.mjs";
 import { r as LoadErrorCard } from "./actionUi-mDYOvJdB.mjs";
-import { s as useSession } from "./LoopPlaybook-BxKPoWAp.mjs";
-import { t as SignIn } from "./SignIn-C1duN7oy.mjs";
-import { t as Route } from "./loops._loopId_.runs._runId-DbEF9MQu.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-Db6cTcUT.js
+import { s as useSession } from "./LoopPlaybook-BC9Dvnw2.mjs";
+import { t as SignIn } from "./SignIn-D70NUJsN.mjs";
+import { t as Route } from "./loops._loopId_.runs._runId-BhoM6DWj.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-DiBP2rCe.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**

package/.output/server/_ssr/{machineFns-B1ZLIrOn.mjs → machineFns-ChO1NM3C.mjs}

@@ -1,6 +1,6 @@
-import { At as machineIdFromToken, D as createMachine$1, F as ensureServer, Mt as mintDeviceToken, N as deleteMachine$1, Z as getMachine, bt as listMachines$1, en as updateMachine, kt as loopsForMachine, qt as sha256, xt as listMachinesForTeam, zt as rememberConnectKey } from "./boot-BpqTI96x.mjs";
+import { $ as getMachine, A as daemonNeedsUpdate, Ct as listMachines$1, F as deleteMachine$1, Ft as mintDeviceToken, Ht as rememberConnectKey, L as ensureServer, Mt as loopsForMachine, Nt as machineIdFromToken, O as createMachine$1, Xt as sha256, d as MIN_DAEMON_VERSION, rn as updateMachine, wt as listMachinesForTeam } from "./boot-sM4t8RJu.mjs";
 import { n as createServerFn } from "./ssr.mjs";
-import { requestScope } from "./auth-C6uZpC6v.mjs";
+import { requestScope } from "./auth-BP81awUE.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
 //#region node_modules/.nitro/vite/services/ssr/assets/machineScope-2h-fcKmG.js
 /**
@@ -28,7 +28,7 @@ function tokenVisibleTo(m, scope) {
 	return !scope.enforce || m.userId === scope.userId;
 }
 //#endregion
-//#region node_modules/.nitro/vite/services/ssr/assets/machineFns-B1ZLIrOn.js
+//#region node_modules/.nitro/vite/services/ssr/assets/machineFns-ChO1NM3C.js
 /**
 * Latest published @kky42/pievo version — a cached, fail-silent lookup of the
 * npm dist-tag `latest`, so the web can tell a user their daemon is outdated and
@@ -165,6 +165,8 @@ async function toSummary(m, scope) {
 		daemonVersion: m.daemonVersion ?? null,
 		daemonProtocol: m.daemonProtocol ?? null,
 		latestDaemonVersion: latestDaemonVersion.get(),
+		needsUpdate: daemonNeedsUpdate(m.daemonVersion),
+		requiredDaemonVersion: MIN_DAEMON_VERSION,
 		token: tokenVisibleTo(m, scope) ? m.token ?? null : null,
 		loopCount: (await loopsForMachine(m.id)).length
 	};

package/.output/server/_ssr/{node-sqlite-dialect-01BHn7am.mjs → node-sqlite-dialect-BGlhyZkk.mjs}

@@ -1,6 +1,6 @@
-import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-C6uZpC6v.mjs";
+import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-BP81awUE.mjs";
 import { n as DEFAULT_MIGRATION_TABLE, t as DEFAULT_MIGRATION_LOCK_TABLE } from "./kysely-migration-tables-JkVUjPF_-bPAX9LR_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/node-sqlite-dialect-01BHn7am.js
+//#region node_modules/.nitro/vite/services/ssr/assets/node-sqlite-dialect-BGlhyZkk.js
 var NodeSqliteAdapter = class {
 	get supportsCreateIfNotExists() {
 		return true;

package/.output/server/_ssr/{notifyFns-CM35mqF2.mjs → notifyFns-B1MSIzrT.mjs}

@@ -1,8 +1,8 @@
-import { C as createChannel$1, F as ensureServer, W as getChannel, j as deleteChannel$1, s as CHANNELS, vt as listChannels$1 } from "./boot-BpqTI96x.mjs";
+import { K as getChannel, L as ensureServer, N as deleteChannel$1, s as CHANNELS, w as createChannel$1, xt as listChannels$1 } from "./boot-sM4t8RJu.mjs";
 import { n as createServerFn } from "./ssr.mjs";
-import { requestScope } from "./auth-C6uZpC6v.mjs";
+import { requestScope } from "./auth-BP81awUE.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/notifyFns-CM35mqF2.js
+//#region node_modules/.nitro/vite/services/ssr/assets/notifyFns-B1MSIzrT.js
 /**
 * Notification-channel server functions. Channels are per-team push targets a
 * loop can route its run messages to. Secrets (bot token / chat id) live in the