@kky42/pievo-server 2.3.0 → 2.4.2

package/.output/server/_ssr/{actionUi-BN55TNYE.mjs → actionUi-DJBWuNwr.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "../_runtime.mjs";
-import { g as require_jsx_runtime, h as require_react } from "../_libs/@base-ui/react+[...].mjs";
-import { c as btnDanger, l as btnPrimary, o as btn } from "./ui-Ww2tTM2u.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/actionUi-BN55TNYE.js
+import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { a as btn, o as btnDanger, s as btnPrimary } from "./ui-D5KWstlb.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/actionUi-DJBWuNwr.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**

package/.output/server/_ssr/{artifactFiles-BCaIIrrT.mjs → artifactFiles-DtpRidFZ.mjs}

@@ -1,21 +1,20 @@
-import { G as getArtifactSync, W as getArtifactFile, Zt as safeRelPath, xt as listArtifactsWithMeta } from "./boot-3BNKujyp.mjs";
-import { t as toArtifactSummary } from "./adapters-BoLkOf1T.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/artifactFiles-BCaIIrrT.js
+import { F as getArtifactFile, I as getArtifactSync, Lt as safeRelPath, lt as listArtifacts } from "./boot-sNlIkoLe.mjs";
+import { t as toArtifactSummary } from "./loopProjection-B8a829ij.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/artifactFiles-DtpRidFZ.js
 /**
-* Server-side reads over a loop's live-synced artifacts (Phase 2). Pure helpers
+* Server-side reads over a loop's current exact artifacts. Pure helpers
 * (no request/session context) so they're shared by the lazy server fns
 * (`getArtifacts` / `getArtifact` in loopApi) AND the download route, and are
 * directly unit-testable against an injected blob store — authorization is the
-* caller's job (the server fn via `ownedLoop`, the route via `canAccessLoop`).
+* caller's loop (the server fn via `ownedLoop`, the route via `canAccessLoop`).
 *
 * The bytes live in the gateway's BlobStore (local by default, R2 when configured);
 * here we only read them — never write — so the feature is strictly read-only and
 * the server's zero-exec invariant holds (it decodes text, never interprets it).
 */
-/** The loop's current (non-deleted) file set as compact UI rows, path-sorted, each
-*  carrying its blob's front-matter meta (one indexed join, no per-file fetch). */
+/** The loop's current (non-deleted) file set as compact UI rows, path-sorted. */
 async function listLoopArtifacts(loopId) {
-	return (await listArtifactsWithMeta(loopId)).map(toArtifactSummary);
+	return (await listArtifacts(loopId)).map(toArtifactSummary);
 }
 /**
 * One file's content for inline display: decoded text for a text file, or a

package/.output/server/_ssr/{artifactKind-BW0isV8L.mjs → artifactKind-FBYbgSuf.mjs}

@@ -1,4 +1,29 @@
-//#region node_modules/.nitro/vite/services/ssr/assets/artifactKind-BW0isV8L.js
+import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
+import { i as authClient, u as getAuthState } from "./SocialLinks-Cm4H8pUJ.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/artifactKind-FBYbgSuf.js
+var $$splitComponentImporter = () => import("./loops._loopId-DS16Phmq.mjs");
+/**
+* Loop detail page — `/loops/$loopId`: a loop header and action toolbar, the
+* exact artifact Files panel, and the runs timeline. The view owns its own
+* data + self-poll (ssr:false so the session cookie rides along with its fetches,
+* like the dashboard loader). Run rows link on to `/loops/$loopId/runs/$runId`.
+*
+* Auth-gated exactly like the dashboard (`/`): the loader checks getAuthState +
+* the session so a logged-out/expired DEEP LINK shows the sign-in CTA instead of
+* a raw `loop not found` error from the ownership-blocked data fetch.
+*/
+var Route = createFileRoute("/loops/$loopId")({
+	ssr: false,
+	loader: async () => {
+		const auth = await getAuthState();
+		if (auth.enabled) {
+			const { data: session } = await authClient.getSession();
+			if (!session) return { auth };
+		}
+		return { auth };
+	},
+	component: lazyRouteComponent($$splitComponentImporter, "component")
+});
 /** Extension → MIME for the image types we serve inline. This is an ALLOWLIST:
 *  the route serves an inline content-type only for these, everything else stays
 *  a download. SVG is included but is only ever rendered via <img> (never inline
@@ -34,4 +59,4 @@ function artifactKind(path) {
 	return "text";
 }
 //#endregion
-export { imageMime as n, artifactKind as t };
+export { artifactKind as n, imageMime as r, Route as t };

package/.output/server/_ssr/artifacts-BR3jj0NC.mjs

@@ -0,0 +1,2 @@
+import { Tt as parseArtifactSyncBody, f as SYNC_BODY_CAP, i as BLOB_CAP } from "./boot-sNlIkoLe.mjs";
+export { BLOB_CAP, SYNC_BODY_CAP, parseArtifactSyncBody };

package/.output/server/_ssr/{auth-30Z4lV1w.mjs → auth-C0zoZCGe.mjs}

@@ -1,6 +1,6 @@
-import { A as sql, C as or, S as notInArray, _ as isNull$1, b as lte, c as asc, d as eq, f as gt, g as isNotNull, h as inArray, l as desc, m as ilike, o as count, p as gte, u as and, v as like, x as ne, y as lt } from "../_libs/drizzle-orm+postgres.mjs";
-import { B as ensureTeam, E as createDefu, K as getBaseURL, N as db, Nt as loginGateEnabled, P as defu, Q as getHost, Rt as normalizePathname, V as env, X as getEnvVar, Xt as resolveBaseURL, a as BetterAuthError, bt as kAPIErrorHeaderSymbol, g as betterFetch, lt as isDevelopment, m as ValidationError$1, mt as isRequestLike, n as APIError$1, nn as teamIdForUser, nt as getOrigin, o as BetterCallError, pt as isProduction, q as getBooleanEnvVar, r as BASE_ERROR_CODES, rt as getProtocol, t as APIError, u as ENV, un as wildcardMatch, ut as isDynamicBaseURLConfig, vt as isTeamMember, y as capitalizeFirstLetter, yt as isTest } from "./boot-3BNKujyp.mjs";
-import { C as withSpan, S as shouldPublishLog, _ as logger, a as __getBetterAuthGlobal, b as runWithTransaction, c as createRandomStringGenerator, d as getAuthTables, f as getBetterAuthVersion, g as initGetModelName, h as initGetFieldName, l as generateId$2, m as import_src, n as ATTR_HOOK_TYPE, o as createAdapterFactory, p as getCurrentAdapter, r as ATTR_OPERATION_ID, s as createLogger, t as ATTR_CONTEXT, u as getAsyncLocalStorage, v as queueAfterTransactionHook, x as safeJSONParse, y as runWithAdapter } from "./factory-CWWwV7XZ.mjs";
+import { C as notInArray, S as ne, _ as isNotNull, b as lt, d as and, f as eq, g as inArray, h as ilike, j as sql, l as asc, m as gte, p as gt, s as count, u as desc, v as isNull$1, w as or, x as lte, y as like } from "../_libs/drizzle-orm+postgres.mjs";
+import { $ as isDevelopment, B as getEnvVar, D as defu, E as db, H as getHost, It as resolveBaseURL, K as getOrigin, L as getBaseURL, M as ensureTeam, N as env, R as getBooleanEnvVar, Wt as teamIdForUser, a as BetterAuthError, b as createDefu, c as ENV, ct as kAPIErrorHeaderSymbol, en as wildcardMatch, et as isDynamicBaseURLConfig, g as capitalizeFirstLetter, h as betterFetch, it as isRequestLike, n as APIError$1, o as BetterCallError, ot as isTeamMember, p as ValidationError$1, q as getProtocol, r as BASE_ERROR_CODES, rt as isProduction, st as isTest, t as APIError, wt as normalizePathname, yt as loginGateEnabled } from "./boot-sNlIkoLe.mjs";
+import { C as withSpan, S as shouldPublishLog, _ as logger, a as __getBetterAuthGlobal, b as runWithTransaction, c as createRandomStringGenerator, d as getAuthTables, f as getBetterAuthVersion, g as initGetModelName, h as initGetFieldName, l as generateId$2, m as import_src, n as ATTR_HOOK_TYPE, o as createAdapterFactory, p as getCurrentAdapter, r as ATTR_OPERATION_ID, s as createLogger, t as ATTR_CONTEXT, u as getAsyncLocalStorage, v as queueAfterTransactionHook, x as safeJSONParse, y as runWithAdapter } from "./factory-Dv3Zopis.mjs";
 import { randomBytes, scrypt } from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
@@ -1700,7 +1700,7 @@ var JOIN_TYPE_SQL = freeze({
 	Using: "using"
 });
 //#endregion
-//#region node_modules/.nitro/vite/services/ssr/assets/auth-30Z4lV1w.js
+//#region node_modules/.nitro/vite/services/ssr/assets/auth-C0zoZCGe.js
 /**
 * @internal
 */
@@ -15993,7 +15993,7 @@ var createKyselyAdapter = async (config) => {
 	if ("getConnection" in db) dialect = new MysqlDialect(db);
 	if ("connect" in db) dialect = new PostgresDialect({ pool: db });
 	if ("fileControl" in db) {
-		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-BW9W1_Ps-_7tfuNRi.mjs");
+		const { BunSqliteDialect } = await import("./bun-sqlite-dialect-BW9W1_Ps-DmlZWqO7.mjs");
 		dialect = new BunSqliteDialect({ database: db });
 	}
 	if ("createSession" in db) {
@@ -16009,12 +16009,12 @@ var createKyselyAdapter = async (config) => {
 			if (error !== null && typeof error === "object" && "code" in error && error.code !== "ERR_UNKNOWN_BUILTIN_MODULE") throw error;
 		}
 		if (DatabaseSync && db instanceof DatabaseSync) {
-			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-D_3JmkMo.mjs");
+			const { NodeSqliteDialect } = await import("./node-sqlite-dialect-CjNineno.mjs");
 			dialect = new NodeSqliteDialect({ database: db });
 		}
 	}
 	if ("batch" in db && "exec" in db && "prepare" in db) {
-		const { D1SqliteDialect } = await import("./d1-sqlite-dialect-BLC8LXE6-ucDUbeBk.mjs");
+		const { D1SqliteDialect } = await import("./d1-sqlite-dialect-BLC8LXE6-CCNzqZwZ.mjs");
 		dialect = new D1SqliteDialect({ database: db });
 	}
 	return {
@@ -36526,7 +36526,7 @@ async function getBaseAdapter(options, handleDirectDatabase) {
 			acc[key] = [];
 			return acc;
 		}, {});
-		const { memoryAdapter } = await import("./dist-Cd6nlLlO.mjs");
+		const { memoryAdapter } = await import("./dist-B3SxDOpW.mjs");
 		adapter = memoryAdapter(memoryDB)(options);
 	} else if (typeof options.database === "function") adapter = options.database(options);
 	else adapter = await handleDirectDatabase(options);
@@ -36540,10 +36540,10 @@ async function getBaseAdapter(options, handleDirectDatabase) {
 }
 async function getAdapter(options) {
 	return getBaseAdapter(options, async (opts) => {
-		const { createKyselyAdapter } = await import("./kysely-adapter-C8iS51DB.mjs");
+		const { createKyselyAdapter } = await import("./kysely-adapter-nL7WKSgw.mjs");
 		const { kysely, databaseType, transaction } = await createKyselyAdapter(opts);
 		if (!kysely) throw new BetterAuthError("Failed to initialize database adapter");
-		const { kyselyAdapter } = await import("./kysely-adapter-C8iS51DB.mjs");
+		const { kyselyAdapter } = await import("./kysely-adapter-nL7WKSgw.mjs");
 		return kyselyAdapter(kysely, {
 			type: databaseType || "sqlite",
 			debugLogs: opts.database && "debugLogs" in opts.database ? opts.database.debugLogs : false,
@@ -38278,13 +38278,10 @@ var drizzleAdapter = (db, config) => {
 	};
 };
 /**
-* Better Auth — GitHub social login, gated by a login allowlist
-* (PIEVO_ALLOWED_LOGINS = comma-separated emails). Shared workspace: any
-* allowed user sees all loops/machines; `userId` is attribution only.
-*
-* OFF by default: with no GITHUB_CLIENT_ID/SECRET the app stays open (no gate),
-* so local dev + the verified Cookie/dashboard flow are unaffected. Set the
-* GitHub OAuth creds + PIEVO_ALLOWED_LOGINS to turn the gate on.
+* Better Auth with GitHub social login. Supplying the GitHub OAuth credentials
+* enables authentication; `PIEVO_ALLOWED_LOGINS` optionally narrows who may sign
+* in. Authenticated data is team-scoped, while `userId` retains creator/owner
+* attribution. With no GitHub credentials the local server runs in open mode.
 */
 var clientId = process.env.GITHUB_CLIENT_ID?.trim();
 var clientSecret = process.env.GITHUB_CLIENT_SECRET?.trim();
@@ -38341,10 +38338,10 @@ async function selectedTeam() {
 	return v ? decodeURIComponent(v) : null;
 }
 /**
-* Per-request data scope. Machines / loops / channels are scoped by `teamId`.
+* Per-request data scope. Machines and loops are scoped by `teamId`.
 * The active team is resolved from (in precedence order) an EXPLICIT team — the
 * `/t/<teamId>` route param, so a tab/bookmark pins its own team independent of
-* any cookie (Phase 2) — else the `pievo.team` cookie (now only a last-used
+* any cookie; otherwise the `pievo.team` cookie (only a last-used
 * default hint). Either source is VALIDATED here against membership, never
 * trusted blind, and falls back to the user's personal team.
 *

package/.output/server/_ssr/boot-CdOO4xOo.mjs

@@ -0,0 +1,2 @@
+import { I as getArtifactSync, V as getGateway, z as getCliGateway } from "./boot-sNlIkoLe.mjs";
+export { getArtifactSync, getCliGateway, getGateway };