@kky42/pievo-server 2.4.1 → 2.4.4

package/.output/server/_ssr/{router-lMkobh5r.mjs → router-DyhWcIzt.mjs}

@@ -1,16 +1,16 @@
 import { j as sql } from "../_libs/drizzle-orm+postgres.mjs";
-import { A as ensureServer, Dt as readJsonBody, Et as readByteBody, Yt as validOptionalPollString, l as MACHINE_BODY_CAP } from "./boot-BbWxaF-z.mjs";
+import { Dt as readByteBody, Ot as readJsonBody, Qt as validPollWireId, Xt as validOptionalPollString, Zt as validPollCurrentRun, d as POLL_HTTP_BODY_FIELDS, j as ensureServer, l as MACHINE_BODY_CAP } from "./boot-sNlIkoLe.mjs";
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { c as createFileRoute, i as HeadContent, l as createRootRoute, o as createRouter, r as Scripts } from "../_libs/@tanstack/react-router+[...].mjs";
-import { t as Route$14 } from "./invite._token-BliJIGk4.mjs";
-import { r as imageMime, t as Route$15 } from "./artifactKind-ByzVa7fg.mjs";
-import { t as Route$16 } from "./loops._loopId_.runs._runId-a_SyY8rX.mjs";
-import { t as Route$17 } from "./routes-CRHc9cLG.mjs";
-import { t as Route$18 } from "./t._teamId-QD2nN0wn.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/router-lMkobh5r.js
+import { t as Route$12 } from "./invite._token-CHR5K84a.mjs";
+import { r as imageMime, t as Route$13 } from "./artifactKind-CwQ_Ddj6.mjs";
+import { t as Route$14 } from "./loops._loopId_.runs._runId-B4jXeonc.mjs";
+import { t as Route$15 } from "./routes-DqIGr7p0.mjs";
+import { t as Route$16 } from "./t._teamId-xFPYdSPu.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/router-DyhWcIzt.js
 var import_jsx_runtime = require_jsx_runtime();
-var app_default = "/assets/app-BAgHQVvr.css";
-var Route$13 = createRootRoute({
+var app_default = "/assets/app-CuZ0I3Mb.css";
+var Route$11 = createRootRoute({
 	head: () => ({
 		meta: [
 			{ charSet: "utf-8" },
@@ -164,7 +164,7 @@ function machineRouteLimit(request, token, opts = {}) {
 	return null;
 }
 /** POST /machine/report — finalize a run (Bearer run token). */
-var Route$12 = createFileRoute("/machine/report")({ server: { handlers: { POST: async ({ request }) => {
+var Route$10 = createFileRoute("/machine/report")({ server: { handlers: { POST: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	const limited = machineRouteLimit(request, token || void 0);
@@ -173,7 +173,7 @@ var Route$12 = createFileRoute("/machine/report")({ server: { handlers: { POST:
 	const parsed = await readJsonBody(request, MACHINE_BODY_CAP);
 	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
 	const body = parsed.kind === "ok" && parsed.body && typeof parsed.body === "object" ? parsed.body : {};
-	const { getGateway } = await import("./boot-COHf8Gv3.mjs");
+	const { getGateway } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getGateway()).report(token, body);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -190,20 +190,14 @@ async function readyResponse(ensure = ensureServer, env = process.env) {
 		nonce: env.PIEVO_SERVER_LAUNCH_NONCE ?? null
 	});
 }
-var Route$11 = createFileRoute("/api/ready")({ server: { handlers: { GET: () => readyResponse() } } });
+var Route$9 = createFileRoute("/api/ready")({ server: { handlers: { GET: () => readyResponse() } } });
 var buildSha = () => process.env.GIT_SHA || "unknown";
 var buildAt = () => process.env.BUILT_AT || "unknown";
-var Route$10 = createFileRoute("/api/health")({ server: { handlers: { GET: async () => Response.json({
+var Route$8 = createFileRoute("/api/health")({ server: { handlers: { GET: async () => Response.json({
 	ok: true,
 	sha: buildSha(),
 	builtAt: buildAt()
 }) } } });
-var bootstrap_default = "# Pievo — connect this machine and create a scheduled prompt\n\nYou're reading this because the user pasted a Pievo capture snippet (`Fetch\n<server-url>/api/bootstrap and help me build a loop.`). Their Pievo web tab is waiting\nfor the machine and new loop. Work end to end, with short confirmations rather than a\nlong interview.\n\n## Pasted values\n\nUse these values exactly as supplied:\n\n- **server-url** — the Pievo server base URL.\n- **connect-key** — the one-time machine connection and web-dialog claim.\n- **pievo-cli** *(optional)* — the command prefix for every Pievo invocation. If it is\n  absent, use `pievo` after installing the current package.\n- An optional task description below the values — the requested scheduled prompt.\n\n## 1 · Connect\n\nFetch and follow the connection reference:\n\n```text\n<server-url>/api/skill/references/connect.md\n```\n\nPass the pasted `server-url` and `connect-key` to its daemon start command. Do not\nreplace a supplied custom `pievo-cli` prefix.\n\n## 2 · Create\n\nAfter the daemon reports the machine online, fetch and follow:\n\n```text\n<server-url>/api/skill/references/create.md\n```\n\nThe create reference owns the remaining flow: identify the concrete prompt, confirm\nits exclusive cron or continuous schedule and three status definitions, choose the\nworking directory and coding agent, optionally select exact artifact files, preview the\ncanonical JSON, and run `pievo new`. On this first-capture path, pass the same\n`connect-key` to `pievo new` so the created loop appears in the waiting web dialog.\n\nPievo is a scheduled prompt runner. Configure only the fields listed in the create\nreference. The stored user prompt is delivered unchanged, followed only by Pievo's\ncomplete status/report contract.\n";
-/** GET /api/bootstrap — the first-capture bootstrap doc Claude Code follows (see ComposeModal). */
-var Route$9 = createFileRoute("/api/bootstrap")({ server: { handlers: { GET: () => new Response(bootstrap_default, { headers: {
-	"content-type": "text/markdown; charset=utf-8",
-	"cache-control": "no-cache"
-} }) } } });
 /**
 * POST /api/machine/sync — exact artifact sync (Bearer DEVICE token). The daemon
 * posts the complete configured-path manifest after a run; the server reconciles
@@ -215,53 +209,41 @@ var Route$9 = createFileRoute("/api/bootstrap")({ server: { handlers: { GET: ()
 * already bounded by the exact-path/hash handshake and 32MB sync-body cap, so a
 * limiter would only throttle a legitimate large sync.
 */
-var Route$8 = createFileRoute("/api/machine/sync")({ server: { handlers: { POST: async ({ request }) => {
+var Route$7 = createFileRoute("/api/machine/sync")({ server: { handlers: { POST: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { SYNC_BODY_CAP, parseArtifactSyncBody } = await import("./artifacts-BhQvaGjF.mjs");
+	const { SYNC_BODY_CAP, parseArtifactSyncBody } = await import("./artifacts-BR3jj0NC.mjs");
 	const parsed = await readJsonBody(request, SYNC_BODY_CAP);
 	if (parsed.kind === "too-large") return Response.json({ error: "sync body too large" }, { status: 413 });
 	if (parsed.kind === "invalid") return Response.json({ error: "invalid JSON" }, { status: 400 });
 	const body = parseArtifactSyncBody(parsed.body);
 	if (!body) return Response.json({ error: "invalid sync body" }, { status: 400 });
-	const { getArtifactSync } = await import("./boot-COHf8Gv3.mjs");
+	const { getArtifactSync } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getArtifactSync()).sync(token, body);
 	return Response.json(r.body, { status: r.status });
 } } } });
 /** GET /api/machine/status — is this machine's daemon live? (Bearer device token) */
-var Route$7 = createFileRoute("/api/machine/status")({ server: { handlers: { GET: async ({ request }) => {
+var Route$6 = createFileRoute("/api/machine/status")({ server: { handlers: { GET: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	const limited = machineRouteLimit(request, token || void 0);
 	if (limited) return limited;
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { getGateway } = await import("./boot-COHf8Gv3.mjs");
+	const { getGateway } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getGateway()).status(token);
 	return Response.json(r.body, { status: r.status });
 } } } });
-var POLL_BODY_FIELDS = new Set([
-	"host",
-	"platform",
-	"arch",
-	"version",
-	"protocolVersion",
-	"currentRuns",
-	"daemonInstanceId",
-	"recoveryComplete"
-]);
-var validWireId = (value) => typeof value === "string" && value.length <= 200 && value.trim().length > 0 && !value.includes("\0");
-var validCurrentRun = (value) => value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).length === 2 && Object.prototype.hasOwnProperty.call(value, "runId") && Object.prototype.hasOwnProperty.call(value, "stage") && validWireId(value.runId) && (value.stage === "executing" || value.stage === "reporting");
 /** Reject non-object bodies, additions, coercible types, over-cap strings, and
 * NUL-bearing text before the gateway is loaded or any state can mutate. */
 function parsePollBody(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	if (Object.keys(value).some((key) => !POLL_BODY_FIELDS.has(key))) return null;
+	if (Object.keys(value).some((key) => !POLL_HTTP_BODY_FIELDS.has(key))) return null;
 	const body = value;
 	if (!validOptionalPollString(body.host, 524288) || !validOptionalPollString(body.platform, 524288) || !validOptionalPollString(body.arch, 524288) || !validOptionalPollString(body.version, 64)) return null;
 	if (body.protocolVersion !== void 0 && (typeof body.protocolVersion !== "number" || !Number.isInteger(body.protocolVersion))) return null;
-	if (body.currentRuns !== void 0 && (!Array.isArray(body.currentRuns) || body.currentRuns.some((run) => !validCurrentRun(run)))) return null;
-	if (body.daemonInstanceId !== void 0 && !validWireId(body.daemonInstanceId)) return null;
+	if (body.currentRuns !== void 0 && (!Array.isArray(body.currentRuns) || body.currentRuns.some((run) => !validPollCurrentRun(run)))) return null;
+	if (body.daemonInstanceId !== void 0 && !validPollWireId(body.daemonInstanceId)) return null;
 	if (body.recoveryComplete !== void 0 && typeof body.recoveryComplete !== "boolean") return null;
 	return body;
 }
@@ -281,7 +263,7 @@ function gatewayPollRequest(body) {
 	};
 }
 /** POST /api/machine/poll — daemon claims this machine's pending runs (Bearer device token). */
-var Route$6 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST: async ({ request }) => {
+var Route$5 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	const limited = machineRouteLimit(request, token || void 0);
@@ -292,7 +274,7 @@ var Route$6 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST:
 	if (parsed.kind !== "ok") return Response.json({ error: "invalid JSON body" }, { status: 400 });
 	const body = parsePollBody(parsed.body);
 	if (!body) return Response.json({ error: "unknown or invalid poll body fields" }, { status: 400 });
-	const { getGateway } = await import("./boot-COHf8Gv3.mjs");
+	const { getGateway } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getGateway()).pollV4Wait(token, gatewayPollRequest(body));
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -309,7 +291,7 @@ function parseCliBody(value) {
 * commands, while an `rk_` run credential can only report its run. Uses the standard
 * 2MB machine JSON body cap.
 */
-var Route$5 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST: async ({ request }) => {
+var Route$4 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	const limited = machineRouteLimit(request, token || void 0);
@@ -319,7 +301,7 @@ var Route$5 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST:
 	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
 	const body = parsed.kind === "ok" ? parseCliBody(parsed.body) : null;
 	if (!body) return Response.json({ error: "body must be exactly {argv:string[]}" }, { status: 400 });
-	const { getCliGateway } = await import("./boot-COHf8Gv3.mjs");
+	const { getCliGateway } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getCliGateway()).cli(token, body.argv);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -346,9 +328,9 @@ var Route$5 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST:
 * Drizzle imported inside the handler so it stays out of the client bundle.
 */
 var PROBE_TIMEOUT_MS = 5e3;
-var Route$4 = createFileRoute("/api/health/db")({ server: { handlers: { GET: async () => {
+var Route$3 = createFileRoute("/api/health/db")({ server: { handlers: { GET: async () => {
 	try {
-		const { db } = await import("./db-dw61xIt1.mjs");
+		const { db } = await import("./db-CwLD-5w1.mjs");
 		const ping = db.execute(sql`select 1`);
 		const timeout = new Promise((_, reject) => {
 			setTimeout(() => reject(/* @__PURE__ */ new Error(`db ping timed out after ${PROBE_TIMEOUT_MS}ms`)), PROBE_TIMEOUT_MS).unref?.();
@@ -367,33 +349,10 @@ var Route$4 = createFileRoute("/api/health/db")({ server: { handlers: { GET: asy
 	}
 } } } });
 /** Better Auth handler — GET/POST /api/auth/* (OAuth callbacks, session, sign-out). */
-var Route$3 = createFileRoute("/api/auth/$")({ server: { handlers: {
-	GET: async ({ request }) => (await import("./auth-CPCDf6Wr.mjs")).auth.handler(request),
-	POST: async ({ request }) => (await import("./auth-CPCDf6Wr.mjs")).auth.handler(request)
+var Route$2 = createFileRoute("/api/auth/$")({ server: { handlers: {
+	GET: async ({ request }) => (await import("./auth-C0zoZCGe.mjs")).auth.handler(request),
+	POST: async ({ request }) => (await import("./auth-C0zoZCGe.mjs")).auth.handler(request)
 } } });
-var REFERENCES = {
-	"connect.md": "# Connect a machine\n\nUse the **pievo-cli** command prefix supplied by the user; otherwise use `pievo`.\nA first-capture snippet supplies a **server-url** and one-time **connect-key**. Use\nboth verbatim.\n\nIf no custom command prefix was supplied, install the current CLI:\n\n```bash\nnpm install -g @kky42/pievo@latest\n```\n\nStart the daemon:\n\n```bash\n<pievo-cli> daemon start --server-url <server-url> --connect-key <connect-key>\n```\n\nThe command is idempotent: it reuses this machine's identity, starts one detached\ndaemon if needed, and waits for the server to see it online. It exits successfully\nwith `daemon online …` or `daemon already running …`. If it cannot connect, follow\nthe printed log path rather than guessing credentials or server settings.\n\nOnce connected, continue with `create.md` when the user wants a new loop. Existing\nconnections normally need no server URL or key on later `pievo` commands.\n",
-	"create.md": "# Create a loop\n\nA Pievo loop runs one server-stored prompt with one selected coding agent in a fixed\nworking directory. Use the **pievo-cli** prefix supplied by the user (default `pievo`).\nIf this machine is not connected, follow `connect.md` first.\n\n## 1 · Identify the prompt\n\nStart from concrete evidence in the current session:\n\n- If the user just completed or described a recurring task, turn that task into a\n  standalone prompt grounded in its real paths, commands, URLs, constraints, and\n  expected result.\n- If there is no task yet, inspect the project, propose a few useful scheduled prompts,\n  and let the user choose. Do not invent and create one silently.\n\nThe stored `prompt` is sent unchanged. Make it self-contained for a fresh coding-agent\nprocess, but do not add Pievo runtime instructions: the server appends the complete\nstatus definitions and required `pievo report` command.\n\n## 2 · Confirm schedule and outcomes\n\nBefore creating, propose any missing choices in one short message and get confirmation:\n\n- **Schedule:** use cron for wall-clock work or continuous for a fixed delay after the\n  prior run finishes. For cron, confirm the timezone and whether an occurrence while a\n  run is still open should `skip` or `queue-one` coalesced follow-up. Continuous never\n  overlaps.\n- **Statuses:** define what `keep`, `no-change`, and `block` mean for this task. All\n  three definitions are required and must be non-empty. `block` means owner attention\n  is required and pauses the loop.\n- **Artifacts:** if the user wants files visible in Pievo, list exact paths relative to\n  `workdir`. Use stable filenames. Globs, absolute paths, traversal, and directories\n  are not supported. Missing or unreadable files do not fail a run.\n\n## 3 · Author the canonical config\n\nCron example:\n\n```json\n{\n  \"name\": \"Daily dependency check\",\n  \"schedule\": {\n    \"mode\": \"cron\",\n    \"cron\": \"0 9 * * *\",\n    \"timezone\": \"America/Los_Angeles\",\n    \"overlap\": \"skip\"\n  },\n  \"workdir\": \"/absolute/path/to/project\",\n  \"agent\": \"claude-code\",\n  \"model\": null,\n  \"reasoningEffort\": null,\n  \"prompt\": \"Inspect the repository's open dependency updates. Verify each update against its exact diff and current checks, then write any safe action or reason to defer it to dependency-check.md.\",\n  \"statusDefinitions\": {\n    \"keep\": \"A verified action or useful finding was produced.\",\n    \"noChange\": \"The check completed and found no actionable change.\",\n    \"block\": \"Owner input or unavailable access prevents a safe decision.\"\n  },\n  \"artifacts\": [\"dependency-check.md\"],\n  \"enabled\": true\n}\n```\n\nContinuous schedule shape:\n\n```json\n{\n  \"mode\": \"continuous\",\n  \"delayMinutes\": 30\n}\n```\n\nRules:\n\n- Required: `name`, `schedule`, absolute `workdir`, `agent`, non-empty `prompt`, and\n  all three `statusDefinitions`.\n- `agent` is `claude-code` or `codex`.\n- `model` and `reasoningEffort` are optional strings. Omit them or use `null` to let\n  the selected coding-agent CLI use its default.\n- `artifacts` is optional and contains only exact workdir-relative file paths.\n- `enabled` is optional and defaults to `true`.\n- Cron and continuous are exclusive shapes. Do not mix their fields.\n\n## 4 · Validate, then create\n\nPreview the exact config first:\n\n```bash\n<pievo-cli> new --json '<config>' --dry-run\n```\n\nFix every rejection. Then create it:\n\n```bash\n<pievo-cli> new --json '<config>'\n```\n\nOn a first-capture flow, include the pasted claim so the web dialog resolves:\n\n```bash\n<pievo-cli> new --json '<config>' --connect-key <connect-key>\n```\n\nOn success, tell the user the loop name, schedule, working directory, selected agent,\nand whether any artifact files were configured.\n",
-	"update.md": "# Edit an existing loop\n\nUse the same **pievo-cli** prefix used to connect the machine (default `pievo`). The\nmachine's persisted device credential authorizes edits to loops bound to it.\n\nFind the loop and inspect its current editable envelope:\n\n```bash\n<pievo-cli> loops\n<pievo-cli> show <loop-id> --json\n```\n\nPatch only the requested fields with one JSON object. Preview before applying:\n\n```bash\n<pievo-cli> edit <loop-id> --json '<patch>' --dry-run\n<pievo-cli> edit <loop-id> --json '<patch>'\n```\n\nAccepted fields are:\n\n| field | value |\n|---|---|\n| `name` | non-empty string |\n| `schedule` | complete cron or continuous schedule object |\n| `workdir` | absolute working-directory path |\n| `agent` | `claude-code` or `codex` |\n| `model` | string or `null` for provider default |\n| `reasoningEffort` | string or `null` for provider default |\n| `prompt` | non-empty string, preserved as written |\n| `statusDefinitions` | complete `{keep,noChange,block}` object with non-empty strings |\n| `artifacts` | array of exact paths relative to `workdir` |\n| `enabled` | boolean |\n\nSchedule examples:\n\n```bash\n<pievo-cli> edit <loop-id> --json '{\"schedule\":{\"mode\":\"cron\",\"cron\":\"0 9 * * 1-5\",\"timezone\":\"Europe/London\",\"overlap\":\"queue-one\"}}'\n<pievo-cli> edit <loop-id> --json '{\"schedule\":{\"mode\":\"continuous\",\"delayMinutes\":15}}'\n```\n\nOther examples:\n\n```bash\n<pievo-cli> edit <loop-id> --json '{\"prompt\":\"Run the verified release check and summarize only actionable findings.\"}'\n<pievo-cli> edit <loop-id> --json '{\"statusDefinitions\":{\"keep\":\"A verified action was completed.\",\"noChange\":\"The check completed with nothing actionable.\",\"block\":\"Owner input is required.\"}}'\n<pievo-cli> edit <loop-id> --json '{\"artifacts\":[\"release-check.md\"]}'\n<pievo-cli> edit <loop-id> --json '{\"model\":null,\"reasoningEffort\":null}'\n```\n\nImportant constraints:\n\n- Replacing `schedule` requires one complete exclusive shape. Cron requires `cron`,\n  `timezone`, and `overlap`; continuous requires only `delayMinutes`.\n- Replacing `statusDefinitions` requires all three definitions.\n- Artifact entries are exact stable file paths, not globs. They must be relative to\n  `workdir` and cannot traverse outside it.\n- The server validates every field and rejects unknown keys without mutating the loop.\n- Pievo appends the runtime report contract to `prompt`; do not duplicate it in the\n  stored prompt.\n\nRun once is intentionally a Web action: use **Run once** on the loop detail page.\nFor Pause, Start, Stop, Delete, and history, use `<pievo-cli> --help` and the\nrelevant command's `--help` instead of treating lifecycle operations as\nprompt-authoring fields.\n"
-};
-var PREFIX$1 = "/api/skill/references/";
-/**
-* GET /api/skill/references/:file — serve one pievo skill reference file. Path-safe:
-* only an exact, single-segment name from the static REFERENCES map resolves; anything
-* else (nested paths, traversal, unknown names) is 404. The server only reads bytes it
-* shipped — no filesystem access, no user input reaches disk (zero-exec invariant holds).
-*/
-var Route$2 = createFileRoute("/api/skill/references/$")({ server: { handlers: { GET: ({ request }) => {
-	const pathname = new URL(request.url).pathname;
-	if (!pathname.startsWith(PREFIX$1)) return Response.json({ error: "not found" }, { status: 404 });
-	const name = pathname.slice(22);
-	const body = Object.prototype.hasOwnProperty.call(REFERENCES, name) ? REFERENCES[name] : void 0;
-	if (body === void 0) return Response.json({ error: "not found" }, { status: 404 });
-	return new Response(body, { headers: {
-		"content-type": "text/markdown; charset=utf-8",
-		"cache-control": "no-cache"
-	} });
-} } } });
 /**
 * `decodeURIComponent` that returns null on malformed percent-encoding instead
 * of throwing a URIError (which would escape a route handler as a 500). Shared
@@ -426,12 +385,12 @@ var Route$1 = createFileRoute("/api/machine/blob/$hash")({ server: { handlers: {
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
 	const hash = safeDecode(new URL(request.url).pathname.split("/").pop() ?? "");
 	if (hash === null) return Response.json({ error: "bad hash" }, { status: 400 });
-	const { BLOB_CAP } = await import("./artifacts-BhQvaGjF.mjs");
+	const { BLOB_CAP } = await import("./artifacts-BR3jj0NC.mjs");
 	const body = await readByteBody(request, BLOB_CAP);
 	if (body.kind === "too-large") return Response.json({ error: "blob exceeds size cap" }, { status: 413 });
 	if (body.kind === "invalid") return Response.json({ error: "could not read blob body" }, { status: 400 });
 	const buf = Buffer.from(body.bytes.buffer, body.bytes.byteOffset, body.bytes.byteLength);
-	const { getArtifactSync } = await import("./boot-COHf8Gv3.mjs");
+	const { getArtifactSync } = await import("./boot-CdOO4xOo.mjs");
 	const r = await (await getArtifactSync()).putBlob(token, hash, buf);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -466,11 +425,11 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 	const segments = after.slice(slash + 1).split("/").map((s) => safeDecode(s));
 	if (segments.some((s) => s === null)) return Response.json({ error: "bad path" }, { status: 400 });
 	const relPath = segments.join("/");
-	const loop = await (await import("./store-CirPHuib.mjs")).getLoop(loopId);
+	const loop = await (await import("./store-Cujtg2QE.mjs")).getLoop(loopId);
 	if (!loop) return Response.json({ error: "not found" }, { status: 404 });
-	const { requestScope, canAccessLoop } = await import("./auth-CPCDf6Wr.mjs");
+	const { requestScope, canAccessLoop } = await import("./auth-C0zoZCGe.mjs");
 	if (!await canAccessLoop(loop.teamId, await requestScope())) return Response.json({ error: "not found" }, { status: 404 });
-	const { readLoopArtifactBytes } = await import("./artifactFiles-CV3OXxRD.mjs");
+	const { readLoopArtifactBytes } = await import("./artifactFiles-DHBXTtZn.mjs");
 	const r = await readLoopArtifactBytes(loopId, relPath);
 	if (r.status !== 200 || !r.bytes) return Response.json({ error: "not found" }, { status: r.status });
 	const filename = (r.filename || "file").replace(/["\\\r\n]/g, "_");
@@ -496,100 +455,89 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 		}
 	});
 } } } });
-var IndexRoute = Route$17.update({
+var IndexRoute = Route$15.update({
 	id: "/",
 	path: "/",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var TTeamIdRoute = Route$18.update({
+var TTeamIdRoute = Route$16.update({
 	id: "/t/$teamId",
 	path: "/t/$teamId",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var MachineReportRoute = Route$12.update({
+var MachineReportRoute = Route$10.update({
 	id: "/machine/report",
 	path: "/machine/report",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var LoopsLoopIdRoute = Route$15.update({
+var LoopsLoopIdRoute = Route$13.update({
 	id: "/loops/$loopId",
 	path: "/loops/$loopId",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var InviteTokenRoute = Route$14.update({
+var InviteTokenRoute = Route$12.update({
 	id: "/invite/$token",
 	path: "/invite/$token",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiReadyRoute = Route$11.update({
+var ApiReadyRoute = Route$9.update({
 	id: "/api/ready",
 	path: "/api/ready",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiHealthRoute = Route$10.update({
+var ApiHealthRoute = Route$8.update({
 	id: "/api/health",
 	path: "/api/health",
-	getParentRoute: () => Route$13
-});
-var ApiBootstrapRoute = Route$9.update({
-	id: "/api/bootstrap",
-	path: "/api/bootstrap",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiMachineSyncRoute = Route$8.update({
+var ApiMachineSyncRoute = Route$7.update({
 	id: "/api/machine/sync",
 	path: "/api/machine/sync",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiMachineStatusRoute = Route$7.update({
+var ApiMachineStatusRoute = Route$6.update({
 	id: "/api/machine/status",
 	path: "/api/machine/status",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiMachinePollRoute = Route$6.update({
+var ApiMachinePollRoute = Route$5.update({
 	id: "/api/machine/poll",
 	path: "/api/machine/poll",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiMachineCliRoute = Route$5.update({
+var ApiMachineCliRoute = Route$4.update({
 	id: "/api/machine/cli",
 	path: "/api/machine/cli",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var ApiHealthDbRoute = Route$4.update({
+var ApiHealthDbRoute = Route$3.update({
 	id: "/db",
 	path: "/db",
 	getParentRoute: () => ApiHealthRoute
 });
-var ApiAuthSplatRoute = Route$3.update({
+var ApiAuthSplatRoute = Route$2.update({
 	id: "/api/auth/$",
 	path: "/api/auth/$",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
-var LoopsLoopIdRunsRunIdRoute = Route$16.update({
+var LoopsLoopIdRunsRunIdRoute = Route$14.update({
 	id: "/loops/$loopId_/runs/$runId",
 	path: "/loops/$loopId/runs/$runId",
-	getParentRoute: () => Route$13
-});
-var ApiSkillReferencesSplatRoute = Route$2.update({
-	id: "/api/skill/references/$",
-	path: "/api/skill/references/$",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
 var ApiMachineBlobHashRoute = Route$1.update({
 	id: "/api/machine/blob/$hash",
 	path: "/api/machine/blob/$hash",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
 var ApiArtifactLoopIdSplatRoute = Route.update({
 	id: "/api/artifact/$loopId/$",
 	path: "/api/artifact/$loopId/$",
-	getParentRoute: () => Route$13
+	getParentRoute: () => Route$11
 });
 var ApiHealthRouteChildren = { ApiHealthDbRoute };
 var rootRouteChildren = {
 	IndexRoute,
-	ApiBootstrapRoute,
 	ApiHealthRoute: ApiHealthRoute._addFileChildren(ApiHealthRouteChildren),
 	ApiReadyRoute,
 	InviteTokenRoute,
@@ -603,10 +551,9 @@ var rootRouteChildren = {
 	ApiMachineSyncRoute,
 	ApiArtifactLoopIdSplatRoute,
 	ApiMachineBlobHashRoute,
-	ApiSkillReferencesSplatRoute,
 	LoopsLoopIdRunsRunIdRoute
 };
-var routeTree = Route$13._addFileChildren(rootRouteChildren)._addFileTypes();
+var routeTree = Route$11._addFileChildren(rootRouteChildren)._addFileTypes();
 function getRouter() {
 	return createRouter({
 		routeTree,

package/.output/server/_ssr/{routes-DNCZrs8z.mjs → routes-BWLQNDn5.mjs}

@@ -1,7 +1,7 @@
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-import { r as LoadErrorCard } from "./actionUi-D15R8L7R.mjs";
+import { r as LoadErrorCard } from "./actionUi-DD7Cd7Le.mjs";
 import { f as useRouter } from "../_libs/@tanstack/react-router+[...].mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-DNCZrs8z.js
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-BWLQNDn5.js
 var import_jsx_runtime = require_jsx_runtime();
 /**
 * The home route. Under the auth gate it is now a THIN redirect to the explicit

package/.output/server/_ssr/{routes-ufPbrGHs.mjs → routes-Cz49hLy6.mjs}

@@ -1,9 +1,9 @@
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-import { D as useSession } from "./SocialLinks-BTjsnVOm.mjs";
-import { t as SignIn } from "./SignIn-DjSrg0nO.mjs";
-import { t as DashboardView } from "./DashboardView-D_hKsCsv.mjs";
-import { t as Route } from "./routes-CRHc9cLG.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-ufPbrGHs.js
+import { E as useSession } from "./SocialLinks-Bt7huqfS.mjs";
+import { t as SignIn } from "./SignIn-ffgDY0yf.mjs";
+import { t as DashboardView } from "./DashboardView-DqZLADCp.mjs";
+import { t as Route } from "./routes-DqIGr7p0.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-Cz49hLy6.js
 var import_jsx_runtime = require_jsx_runtime();
 /**
 * The home route. Under the auth gate it is now a THIN redirect to the explicit

package/.output/server/_ssr/{routes-CRHc9cLG.mjs → routes-DqIGr7p0.mjs}

@@ -1,9 +1,9 @@
 import { c as createFileRoute, p as redirect, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { d as getAuthState, i as authClient, p as getDefaultTeam } from "./SocialLinks-BTjsnVOm.mjs";
-import { n as fetchLiveData } from "./DashboardView-D_hKsCsv.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-CRHc9cLG.js
-var $$splitErrorComponentImporter = () => import("./routes-DNCZrs8z.mjs");
-var $$splitComponentImporter = () => import("./routes-ufPbrGHs.mjs");
+import { f as getDefaultTeam, i as authClient, u as getAuthState } from "./SocialLinks-Bt7huqfS.mjs";
+import { n as fetchLiveData } from "./DashboardView-DqZLADCp.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-DqIGr7p0.js
+var $$splitErrorComponentImporter = () => import("./routes-BWLQNDn5.mjs");
+var $$splitComponentImporter = () => import("./routes-Cz49hLy6.mjs");
 /**
 * The home route. Under the auth gate it is now a THIN redirect to the explicit
 * team URL (`/t/<lastUsed|personal>`) so the dashboard's team lives in the path

package/.output/server/_ssr/runDiff-Ba8Lg1vg.mjs

@@ -0,0 +1,2 @@
+import { _ as computeRunDiff } from "./boot-sNlIkoLe.mjs";
+export { computeRunDiff };