@kky42/pievo-server 2.4.12 → 2.4.13

package/.output/server/_ssr/{loopApi-Im6JSK0p.mjs → loopApi-C4nN0msL.mjs}

@@ -1,9 +1,9 @@
-import { $t as validateLoopEdit, A as ensureServer, Ft as requestRunCancel, G as getMachine, J as getRun, Kt as tryDeleteLoop, N as forceDeleteLoop, Pt as requestDeleteLoop, Q as hasRunningRun, Tt as pauseLoop$1, Ut as stopLoop$1, Vt as startLoop$1, W as getLoop, X as getTeamMember, Y as getTeam, _t as listTeamsForUser, dt as listMachines, ft as listMachinesForTeam, ht as listRunsBefore, qt as updateLoop, ut as listLoops$1, xt as machinePresence } from "./boot-BIxtZHU-.mjs";
-import { a as toRunSummaries, i as toLoopSummaries, r as toLoopDetail, t as sortLoopSummariesByRecentRun } from "./loopProjection-DIpGR6rp.mjs";
-import { canAccessLoop, requestScope } from "./auth-LwPp_iim.mjs";
+import { $ as listLoopsForUser, B as getRun, E as forceDeleteLoop, Et as stopLoop$1, H as hasRunningRun, I as getLoop, L as getMachine, Ot as tryDeleteLoop, Pt as validateLoopEdit, Q as listLoops$1, ct as machinePresence, et as listMachines, ft as pauseLoop$1, kt as updateLoop, rt as listRunsBefore, tt as listMachinesForUser, vt as requestDeleteLoop, w as ensureServer, wt as startLoop$1, yt as requestRunCancel } from "./boot-U-CFI65B.mjs";
+import { a as toRunSummaries, i as toLoopSummaries, r as toLoopDetail, t as sortLoopSummariesByRecentRun } from "./loopProjection-DMSNHux6.mjs";
+import { canAccessLoop, requestScope } from "./auth-BV0MxVdo.mjs";
 import { n as createServerFn } from "./ssr.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-Im6JSK0p.js
+//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-C4nN0msL.js
 /**
 * Server functions backing the dashboard. They run server-side (createServerFn
 * → RPC) and call the IN-PROCESS scheduler + store directly — the scheduler
@@ -11,8 +11,8 @@ import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
 * The machine-facing poll, CLI, report, and artifact-sync endpoints are sibling
 * server routes in this same process, so one process owns the single scheduler.
 *
-* Reads and writes are scoped through requestScope/ownedLoop so users only see
-* teams and loops their current session is authorized to access.
+* Reads and writes are scoped through requestScope/ownedLoop so auth-mode users
+* can access only their own loops. Open mode intentionally shares all loops.
 */
 function backend() {
 	return ensureServer();
@@ -26,12 +26,8 @@ async function ownedLoop(id) {
 	const loop = await getLoop(id);
 	if (!loop) return void 0;
 	const scope = await requestScope();
-	if (!await canAccessLoop(loop.teamId, scope)) return void 0;
-	return {
-		loop,
-		enforce: scope.enforce,
-		teamId: scope.teamId
-	};
+	if (!canAccessLoop(loop.userId, scope)) return void 0;
+	return { loop };
 }
 var getAuthState_createServerFn_handler = createServerRpc({
 	id: "b8119d5fe6ca1ed9f609702aa2133b5ac5337030c0bdcf92dc7eba889d6bd2e6",
@@ -39,7 +35,7 @@ var getAuthState_createServerFn_handler = createServerRpc({
 	filename: "src/server/loopApi.ts"
 }, (opts) => getAuthState.__executeServer(opts));
 var getAuthState = createServerFn({ method: "GET" }).handler(getAuthState_createServerFn_handler, async () => {
-	const { authEnabled } = await import("./auth-LwPp_iim.mjs");
+	const { authEnabled } = await import("./auth-BV0MxVdo.mjs");
 	return { enabled: authEnabled };
 });
 var getConfig_createServerFn_handler = createServerRpc({
@@ -56,57 +52,16 @@ var getConfig = createServerFn({ method: "GET" }).handler(getConfig_createServer
 		customCli: !!custom
 	};
 });
-var listMyTeams_createServerFn_handler = createServerRpc({
-	id: "0fe12e769203c42f432a927b9cbf13a967a0f9db567b61843598f734afb4f5c6",
-	name: "listMyTeams",
-	filename: "src/server/loopApi.ts"
-}, (opts) => listMyTeams.__executeServer(opts));
-var listMyTeams = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(listMyTeams_createServerFn_handler, async ({ data: teamId }) => {
-	await backend();
-	const { enforce, userId, teamId: active } = await requestScope(teamId);
-	if (!enforce || !userId) return {
-		teams: [],
-		activeTeamId: active
-	};
-	return {
-		teams: (await listTeamsForUser(userId)).map((t) => ({
-			id: t.id,
-			name: t.name
-		})),
-		activeTeamId: active
-	};
-});
-var canViewTeam_createServerFn_handler = createServerRpc({
-	id: "7cc22b3a0f6b1c4c73463c3401e981ad42caf6487b479b738ee5aeacb11710da",
-	name: "canViewTeam",
-	filename: "src/server/loopApi.ts"
-}, (opts) => canViewTeam.__executeServer(opts));
-var canViewTeam = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(canViewTeam_createServerFn_handler, async ({ data: teamId }) => {
-	await backend();
-	const scope = await requestScope(teamId);
-	if (!scope.enforce) return true;
-	if (!scope.userId) return false;
-	return scope.teamId === teamId;
-});
-var getDefaultTeam_createServerFn_handler = createServerRpc({
-	id: "dc0ec955d0d53a150a3e9a4673f98f3509cfb4bd411c512079ae4e94c561b70c",
-	name: "getDefaultTeam",
-	filename: "src/server/loopApi.ts"
-}, (opts) => getDefaultTeam.__executeServer(opts));
-var getDefaultTeam = createServerFn({ method: "GET" }).handler(getDefaultTeam_createServerFn_handler, async () => {
-	await backend();
-	return (await requestScope()).teamId;
-});
 var listLoops_createServerFn_handler = createServerRpc({
 	id: "23e290b2b7483ceea6fe669024c35b12c2c4ddd76649f6fab21c958ceda02940",
 	name: "listLoops",
 	filename: "src/server/loopApi.ts"
 }, (opts) => listLoops.__executeServer(opts));
-var listLoops = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(listLoops_createServerFn_handler, async ({ data: teamId }) => {
+var listLoops = createServerFn({ method: "GET" }).handler(listLoops_createServerFn_handler, async () => {
 	await backend();
-	const { enforce, userId, teamId: active } = await requestScope(teamId);
-	if (enforce && !userId) return [];
-	const [loopRows, machines] = await Promise.all([listLoops$1(enforce ? active : void 0), enforce ? listMachinesForTeam(active) : listMachines()]);
+	const scope = await requestScope();
+	if (scope.enforce && !scope.userId) return [];
+	const [loopRows, machines] = await Promise.all([scope.enforce ? listLoopsForUser(scope.userId) : listLoops$1(), scope.enforce ? listMachinesForUser(scope.userId) : listMachines()]);
 	return sortLoopSummariesByRecentRun(await toLoopSummaries(loopRows.sort((a, b) => a.createdAt < b.createdAt ? 1 : -1), machines));
 });
 var getLoopDetail_createServerFn_handler = createServerRpc({
@@ -118,17 +73,7 @@ var getLoopDetail = createServerFn({ method: "GET" }).validator((id) => id).hand
 	await backend();
 	const owned = await ownedLoop(id);
 	if (!owned) throw new Error("This loop does not exist, or you do not have access to it.");
-	const detail = await toLoopDetail(owned.loop);
-	if (owned.enforce) {
-		const team = await getTeam(owned.loop.teamId);
-		if (!team) throw new Error(`invariant: loop ${owned.loop.id} references missing team ${owned.loop.teamId}`);
-		detail.team = {
-			id: owned.loop.teamId,
-			name: team.name,
-			isActive: owned.loop.teamId === owned.teamId
-		};
-	}
-	return detail;
+	return toLoopDetail(owned.loop);
 });
 var loadOlderRuns_createServerFn_handler = createServerRpc({
 	id: "85fdf73d4fee43aed762f93c5d47d33200fbff39e2d082647dc921f610d32698",
@@ -149,7 +94,7 @@ var getArtifacts_createServerFn_handler = createServerRpc({
 var getArtifacts = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifacts_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return [];
-	const { listLoopArtifacts } = await import("./artifactFiles-ChuJ4PzC.mjs");
+	const { listLoopArtifacts } = await import("./artifactFiles-BvVmixrs.mjs");
 	return listLoopArtifacts(data.loopId);
 });
 var getArtifact_createServerFn_handler = createServerRpc({
@@ -160,7 +105,7 @@ var getArtifact_createServerFn_handler = createServerRpc({
 var getArtifact = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifact_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return { error: "file not found" };
-	const { readLoopArtifact } = await import("./artifactFiles-ChuJ4PzC.mjs");
+	const { readLoopArtifact } = await import("./artifactFiles-BvVmixrs.mjs");
 	return readLoopArtifact(data.loopId, data.path);
 });
 var getRunDiff_createServerFn_handler = createServerRpc({
@@ -179,7 +124,7 @@ var getRunDiff = createServerFn({ method: "GET" }).validator((d) => d).handler(g
 		hasSnapshot: false,
 		files: []
 	};
-	const { computeRunDiff } = await import("./runDiff-BLdot9mi.mjs");
+	const { computeRunDiff } = await import("./runDiff-D7CxAgYL.mjs");
 	return computeRunDiff(data.runId);
 });
 var patchLoop_createServerFn_handler = createServerRpc({
@@ -260,18 +205,15 @@ var deleteLoop = createServerFn({ method: "POST" }).validator((id) => id).handle
 	if (!owned) return { error: "not found" };
 	const machine = await getMachine(owned.loop.machineId);
 	const unreachable = machinePresence(machine?.online, machine?.lastSeen) !== "online";
-	const actor = await requestScope();
-	const mayRetireAuthority = !owned.enforce || !!(actor.userId && owned.loop.teamId && (await getTeamMember(owned.loop.teamId, actor.userId))?.role === "owner");
 	if (!unreachable && await hasRunningRun(id) && machine?.daemonProtocol !== 4) return { error: "Daemon upgrade required to stop a running process" };
 	scheduler.removeLoop(id);
 	if (!await requestDeleteLoop(id)) return { error: "not found" };
-	if (unreachable && mayRetireAuthority) {
+	if (unreachable) {
 		if (!await forceDeleteLoop(id)) return { error: "delete failed; server data was not deleted" };
-		const { logger } = await import("./logger-EinA2J6y.mjs");
+		const { logger } = await import("./logger-CwiKSMp6.mjs");
 		logger.child({ mod: "loop-lifecycle" }).warn({
 			action: "unreachable-delete",
 			loopId: id,
-			actorUserId: actor.userId,
 			machineId: owned.loop.machineId
 		}, "unreachable-machine delete: retired execution authority and removed server data");
 		return {
@@ -320,22 +262,19 @@ var stopRun = createServerFn({ method: "POST" }).validator((id) => id).handler(s
 		waiting: result.phase === "running"
 	} : { error: "run not found" };
 });
-var mintClaim_createServerFn_handler = createServerRpc({
-	id: "4646f52fb09b83c9c9cef34836f3c9d03416423c879d9e5ceffcafd9a71ecba6",
-	name: "mintClaim",
+var mintConnectKey_createServerFn_handler = createServerRpc({
+	id: "ce43dcb9366e7c8f7338a6ad28e4290b75a5ee3b13d0d2c9cb585020008f12c6",
+	name: "mintConnectKey",
 	filename: "src/server/loopApi.ts"
-}, (opts) => mintClaim.__executeServer(opts));
-var mintClaim = createServerFn({ method: "POST" }).validator((teamId) => teamId).handler(mintClaim_createServerFn_handler, async ({ data: teamId }) => {
+}, (opts) => mintConnectKey.__executeServer(opts));
+var mintConnectKey = createServerFn({ method: "POST" }).handler(mintConnectKey_createServerFn_handler, async () => {
 	await backend();
-	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-CUz4LDLm.mjs");
-	const { userId, teamId: active } = await requestScope(teamId);
-	const owner = userId ?? "shared";
+	const scope = await requestScope();
+	if (scope.enforce && !scope.userId) return { error: "not signed in" };
+	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-DzUv7CCp.mjs");
 	const token = mintDeviceToken();
-	await rememberConnectKey(token, {
-		userId: owner,
-		teamId: active
-	});
+	await rememberConnectKey(token, { userId: scope.userId ?? "shared" });
 	return { token };
 });
 //#endregion
-export { canViewTeam_createServerFn_handler, deleteLoop_createServerFn_handler, getArtifact_createServerFn_handler, getArtifacts_createServerFn_handler, getAuthState_createServerFn_handler, getConfig_createServerFn_handler, getDefaultTeam_createServerFn_handler, getLoopDetail_createServerFn_handler, getRunDiff_createServerFn_handler, listLoops_createServerFn_handler, listMyTeams_createServerFn_handler, loadOlderRuns_createServerFn_handler, mintClaim_createServerFn_handler, patchLoop_createServerFn_handler, pauseLoop_createServerFn_handler, runLoop_createServerFn_handler, startLoop_createServerFn_handler, stopLoop_createServerFn_handler, stopRun_createServerFn_handler };
+export { deleteLoop_createServerFn_handler, getArtifact_createServerFn_handler, getArtifacts_createServerFn_handler, getAuthState_createServerFn_handler, getConfig_createServerFn_handler, getLoopDetail_createServerFn_handler, getRunDiff_createServerFn_handler, listLoops_createServerFn_handler, loadOlderRuns_createServerFn_handler, mintConnectKey_createServerFn_handler, patchLoop_createServerFn_handler, pauseLoop_createServerFn_handler, runLoop_createServerFn_handler, startLoop_createServerFn_handler, stopLoop_createServerFn_handler, stopRun_createServerFn_handler };

package/.output/server/_ssr/{loopProjection-DIpGR6rp.mjs → loopProjection-DMSNHux6.mjs}

@@ -1,5 +1,5 @@
-import { G as getMachine, Ht as statusDefinitionsFromLoop, Ot as recentLoopUsage, Q as hasRunningRun, Rt as scheduleFromLoop, T as daemonNeedsUpdate, Z as hasPendingRun, kt as reconciliationStatesForRuns, mt as listRuns, u as MIN_DAEMON_VERSION, xt as machinePresence, y as countRuns } from "./boot-BIxtZHU-.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loopProjection-DIpGR6rp.js
+import { H as hasRunningRun, L as getMachine, St as scheduleFromLoop, Tt as statusDefinitionsFromLoop, V as hasPendingRun, _ as countRuns, ct as machinePresence, gt as reconciliationStatesForRuns, ht as recentLoopUsage, nt as listRuns, u as MIN_DAEMON_VERSION, x as daemonNeedsUpdate } from "./boot-U-CFI65B.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loopProjection-DMSNHux6.js
 var SUMMARY_RUNS = 18;
 var RECENT_USAGE_WINDOW_MS = 10080 * 60 * 1e3;
 /** Dashboard order: loops with runs first, most recent run first. The incoming

package/.output/server/_ssr/{loops._loopId-B5iPseDG.mjs → loops._loopId-Q4pRYPip.mjs}

@@ -1,18 +1,15 @@
 import { o as __toESM } from "../_runtime.mjs";
-import { s as CODING_AGENTS } from "./boot-BIxtZHU-.mjs";
+import { s as CODING_AGENTS } from "./boot-U-CFI65B.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { d as useNavigate, u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
-import { C as startLoop, E as useSession, _ as loadOlderRuns, b as pauseLoop, c as getArtifact, l as getArtifacts, p as getLoopDetail, s as deleteLoop, w as stopLoop, x as runLoop, y as patchLoop } from "./SocialLinks-DVCLmql0.mjs";
-import { E as tsShort, S as runPulseStyle, T as selectCls, _ as inputCls, a as btn, b as rel, c as btnQuiet, d as dotLabel, g as humanBytes, m as fmt, n as Loading, o as btnDanger, p as dur, r as Pill, s as btnPrimary, t as ErrorBanner, u as dotColor, v as labelCls, w as sectionHeadCls } from "./ui-DGz-q9MT.mjs";
-import { t as setActiveTeamCookie } from "./teamCookie-B7hLOIie.mjs";
-import { t as SignIn } from "./SignIn-BhoZIOUp.mjs";
-import { i as useFlash, n as FlashLine, r as LoadErrorCard, t as ConfirmBar } from "./actionUi-Cf6DuEC2.mjs";
-import { n as daemonStopSupport, r as deriveLoopLifecycle, t as DAEMON_UPGRADE_REQUIRED } from "./lifecycleUi-DauKavgx.mjs";
-import { l as mergeRuns, n as MachinesModal, o as Timeline, t as LoopOverview } from "./MachinesModal-BhRw7oOx.mjs";
-import { n as artifactKind, t as Route } from "./artifactKind-DXumOv7c.mjs";
+import { E as stopLoop, O as useSession, S as runLoop, T as startLoop, b as patchLoop, c as deleteLoop, d as getArtifacts, i as OpenModeWarning, l as deriveLoopLifecycle, m as getLoopDetail, s as daemonStopSupport, t as DAEMON_UPGRADE_REQUIRED, u as getArtifact, v as loadOlderRuns, x as pauseLoop } from "./auth-client-RTpMpT4L.mjs";
+import { C as rel, D as sectionHeadCls, O as selectCls, T as runPulseStyle, _ as fmt, a as Loading, b as inputCls, c as btn, d as btnQuiet, g as dur, i as LoadErrorCard, j as useFlash, k as tsShort, l as btnDanger, m as dotLabel, n as ErrorBanner, p as dotColor, r as FlashLine, t as ConfirmBar, u as btnPrimary, x as labelCls, y as humanBytes } from "./actionUi-C_WswNb1.mjs";
+import { a as Timeline, c as mergeRuns, n as MachinesModal, t as LoopOverview } from "./MachinesModal-DBIP648Z.mjs";
+import { n as artifactKind, t as Route } from "./artifactKind-DRCbYHZU.mjs";
+import { t as SignIn } from "./SignIn-Bp3uWaCQ.mjs";
 import { t as purify } from "../_libs/dompurify.mjs";
 import { t as g } from "../_libs/marked.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-B5iPseDG.js
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-Q4pRYPip.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /** Download URL for one artifact. Each path segment is encoded independently so
@@ -790,7 +787,6 @@ function LoopDetailView({ id }) {
 	const canStop = !deleting && !!summary.running && stopSupport.supported;
 	const online = detail.machine.online;
 	const asleep = detail.machine.presence === "asleep";
-	const crossTeam = detail.team && !detail.team.isActive ? detail.team : null;
 	if (editing) return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Shell, {
 		back,
 		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(EditHead, {
@@ -854,24 +850,10 @@ function LoopDetailView({ id }) {
 							loopId: id,
 							runId: run.id
 						}
-					}),
-					extraPill: crossTeam ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Pill, {
-						tone: "outline",
-						children: crossTeam.name
-					}) : void 0
+					})
 				}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 					className: "mt-5 border-t border-hairline pt-4",
 					children: [
-						crossTeam && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(TeamBanner, {
-							team: crossTeam,
-							onSwitch: () => {
-								setActiveTeamCookie(crossTeam.id);
-								navigate({
-									to: "/t/$teamId",
-									params: { teamId: crossTeam.id }
-								});
-							}
-						}),
 						detail.machine.needsUpdate && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(MachineBanner, {
 							tone: "warn",
 							text: `Daemon update required · server requires v${detail.machine.requiredDaemonVersion}; machine reports ${detail.machine.daemonVersion ? `v${detail.machine.daemonVersion}` : "an unknown version"}.`,
@@ -1070,20 +1052,6 @@ function Config({ label, children }) {
 		children
 	})] });
 }
-function TeamBanner({ team, onSwitch }) {
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-		className: "mb-2.5 flex flex-wrap items-center gap-3 rounded-control border border-hairline bg-raised px-4 py-2.5 text-meta text-secondary",
-		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", { children: [
-			"Viewing a loop in ",
-			team.name,
-			" - not your active team."
-		] }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
-			onClick: onSwitch,
-			className: "ml-auto font-medium text-interactive underline",
-			children: "Switch to this team"
-		})]
-	});
-}
 function MachineBanner({ text, action, onAction, tone }) {
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		className: `mb-2.5 flex flex-wrap items-center gap-3 rounded-control border px-4 py-2.5 text-meta ${tone === "warn" ? "border-warn/40 bg-warn/10" : "border-hairline bg-raised"}`,
@@ -1198,16 +1166,22 @@ function RunsSection({ loopId, summary, runs, older, onMore, onPickRun }) {
 * data + self-poll (ssr:false so the session cookie rides along with its fetches,
 * like the dashboard loader). Run rows link on to `/loops/$loopId/runs/$runId`.
 *
-* Auth-gated exactly like the dashboard (`/`): the loader checks getAuthState +
-* the session so a logged-out/expired DEEP LINK shows the sign-in CTA instead of
-* a raw `loop not found` error from the ownership-blocked data fetch.
+* Auth-gated exactly like the dashboard (`/`): Better Auth's session hook keeps a
+* logged-out or expired deep link from mounting the ownership-scoped data view.
 */
 function LoopDetailPage() {
 	const { loopId } = Route.useParams();
 	const { auth } = Route.useLoaderData() ?? { auth: { enabled: false } };
 	const { data: session, isPending } = useSession();
-	if (auth?.enabled && !isPending && !session) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}` });
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LoopDetailView, { id: loopId });
+	if (auth.enabled && isPending) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
+		className: "mx-auto max-w-[1360px] px-8 pt-10",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Loading, {})
+	});
+	if (auth.enabled && !session) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}` });
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [!auth.enabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+		className: "mx-auto max-w-[1360px] px-8 pt-6",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, {})
+	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LoopDetailView, { id: loopId })] });
 }
 //#endregion
 export { LoopDetailPage as component };

package/.output/server/_ssr/{loops._loopId_.runs._runId-DVtG0xYb.mjs → loops._loopId_.runs._runId-DNXVmCt5.mjs}

@@ -1,7 +1,7 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { i as authClient, u as getAuthState } from "./SocialLinks-DVCLmql0.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-DVtG0xYb.js
-var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-BA-P6sGA.mjs");
+import { f as getAuthState } from "./auth-client-RTpMpT4L.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-DNXVmCt5.js
+var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-ty3AhkOi.mjs");
 /**
 * Run detail PAGE — `/loops/$loopId/runs/$runId`. A standalone page (the trailing
 * `_` on the `$loopId` segment opts it out of the loop page's component so the run
@@ -9,19 +9,12 @@ var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-BA-P6s
 * modal or an inline panel. It resolves the run from the loop's detail payload
 * (reusing getLoopDetail) and the existing artifact diff.
 *
-* Auth-gated like the dashboard (`/`) so a logged-out/expired DEEP LINK shows the
-* sign-in CTA instead of a raw `loop not found` error from the blocked fetch.
+* Auth-gated like the dashboard (`/`) so Better Auth's session hook keeps a
+* logged-out or expired deep link from mounting the run view.
 */
 var Route = createFileRoute("/loops/$loopId_/runs/$runId")({
 	ssr: false,
-	loader: async () => {
-		const auth = await getAuthState();
-		if (auth.enabled) {
-			const { data: session } = await authClient.getSession();
-			if (!session) return { auth };
-		}
-		return { auth };
-	},
+	loader: async () => ({ auth: await getAuthState() }),
 	component: lazyRouteComponent($$splitComponentImporter, "component")
 });
 //#endregion

package/.output/server/_ssr/{loops._loopId_.runs._runId-BA-P6sGA.mjs → loops._loopId_.runs._runId-ty3AhkOi.mjs}

@@ -1,12 +1,11 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
-import { E as useSession, T as stopRun, _ as loadOlderRuns, m as getRunDiff, p as getLoopDetail } from "./SocialLinks-DVCLmql0.mjs";
-import { S as runPulseStyle, a as btn, g as humanBytes, h as fnum, i as StatusPill, m as fmt, n as Loading, o as btnDanger, p as dur, r as Pill, w as sectionHeadCls } from "./ui-DGz-q9MT.mjs";
-import { t as SignIn } from "./SignIn-BhoZIOUp.mjs";
-import { r as LoadErrorCard } from "./actionUi-Cf6DuEC2.mjs";
-import { t as Route } from "./loops._loopId_.runs._runId-DVtG0xYb.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-BA-P6sGA.js
+import { D as stopRun, O as useSession, h as getRunDiff, i as OpenModeWarning, m as getLoopDetail, v as loadOlderRuns } from "./auth-client-RTpMpT4L.mjs";
+import { D as sectionHeadCls, T as runPulseStyle, _ as fmt, a as Loading, c as btn, g as dur, i as LoadErrorCard, l as btnDanger, o as Pill, s as StatusPill, v as fnum, y as humanBytes } from "./actionUi-C_WswNb1.mjs";
+import { t as SignIn } from "./SignIn-Bp3uWaCQ.mjs";
+import { t as Route } from "./loops._loopId_.runs._runId-DNXVmCt5.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-ty3AhkOi.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**
@@ -596,30 +595,39 @@ function RunDetailView({ loopId, runId }) {
 * modal or an inline panel. It resolves the run from the loop's detail payload
 * (reusing getLoopDetail) and the existing artifact diff.
 *
-* Auth-gated like the dashboard (`/`) so a logged-out/expired DEEP LINK shows the
-* sign-in CTA instead of a raw `loop not found` error from the blocked fetch.
+* Auth-gated like the dashboard (`/`) so Better Auth's session hook keeps a
+* logged-out or expired deep link from mounting the run view.
 */
 function RunDetailPage() {
 	const { loopId, runId } = Route.useParams();
 	const { auth } = Route.useLoaderData() ?? { auth: { enabled: false } };
 	const { data: session, isPending } = useSession();
+	if (auth.enabled && isPending) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
+		className: "mx-auto max-w-[1360px] px-8 pt-10",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Loading, {})
+	});
+	if (auth.enabled && !session) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}/runs/${runId}` });
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("main", {
-		className: "mx-auto max-w-[1360px] px-8 pb-24 pt-10",
-		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-			className: "mb-5",
-			children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link, {
-				to: "/loops/$loopId",
-				params: { loopId },
-				className: "inline-flex items-center gap-1.5 text-label font-medium text-secondary transition-colors hover:text-display",
-				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-					"aria-hidden": true,
-					children: "←"
-				}), " Back to loop"]
+		className: "mx-auto max-w-[1360px] px-8 pb-24 pt-6",
+		children: [
+			!auth.enabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, { className: "mb-6" }),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+				className: "mb-5",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link, {
+					to: "/loops/$loopId",
+					params: { loopId },
+					className: "inline-flex items-center gap-1.5 text-label font-medium text-secondary transition-colors hover:text-display",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+						"aria-hidden": true,
+						children: "←"
+					}), " Back to loop"]
+				})
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(RunDetailView, {
+				loopId,
+				runId
 			})
-		}), auth?.enabled && !isPending && !session ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}/runs/${runId}` }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RunDetailView, {
-			loopId,
-			runId
-		})]
+		]
 	});
 }
 //#endregion