@kky42/pievo-server 2.4.12 → 2.4.14

package/.output/server/_ssr/{router-C8iotXtk.mjs → router-BlLlhfJe.mjs}

@@ -1,15 +1,13 @@
 import { j as sql } from "../_libs/drizzle-orm+postgres.mjs";
-import { A as ensureServer, Dt as readJsonBody, Et as readByteBody, Qt as validPollWireId, Xt as validOptionalPollString, Zt as validPollCurrentRun, d as POLL_HTTP_BODY_FIELDS, l as MACHINE_BODY_CAP } from "./boot-BIxtZHU-.mjs";
+import { c as readByteBody, f as validOptionalPollString, l as readJsonBody, m as validPollWireId, o as ensureServer, p as validPollCurrentRun, r as POLL_HTTP_BODY_FIELDS, t as MACHINE_BODY_CAP } from "./boot-C472kLwY.mjs";
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { c as createFileRoute, i as HeadContent, l as createRootRoute, o as createRouter, r as Scripts } from "../_libs/@tanstack/react-router+[...].mjs";
-import { t as Route$12 } from "./invite._token-CPSvdDox.mjs";
-import { r as imageMime, t as Route$13 } from "./artifactKind-DXumOv7c.mjs";
-import { t as Route$14 } from "./loops._loopId_.runs._runId-DVtG0xYb.mjs";
-import { t as Route$15 } from "./routes-fiMzFtcP.mjs";
-import { t as Route$16 } from "./t._teamId-BYA4Dnjp.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/router-C8iotXtk.js
+import { r as imageMime, t as Route$12 } from "./artifactKind-DwDr8IYc.mjs";
+import { t as Route$13 } from "./loops._loopId_.runs._runId-Dk94Z0Jq.mjs";
+import { n as Route$14 } from "./routes-Cr-9yDEH.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/router-BlLlhfJe.js
 var import_jsx_runtime = require_jsx_runtime();
-var app_default = "/assets/app-D5Hy4BcS.css";
+var app_default = "/assets/app-DvHMhs7S.css";
 var Route$11 = createRootRoute({
 	head: () => ({
 		meta: [
@@ -169,7 +167,7 @@ var Route$10 = createFileRoute("/machine/report")({ server: { handlers: { POST:
 	const parsed = await readJsonBody(request, MACHINE_BODY_CAP);
 	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
 	const body = parsed.kind === "ok" && parsed.body && typeof parsed.body === "object" ? parsed.body : {};
-	const { getGateway } = await import("./boot-D8cj4uZj.mjs");
+	const { getGateway } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getGateway()).report(token, body);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -209,13 +207,13 @@ var Route$7 = createFileRoute("/api/machine/sync")({ server: { handlers: { POST:
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { SYNC_BODY_CAP, parseArtifactSyncBody } = await import("./artifacts-DOLHJHcd.mjs");
+	const { SYNC_BODY_CAP, parseArtifactSyncBody } = await import("./artifacts-Cd7Qx3Qp.mjs");
 	const parsed = await readJsonBody(request, SYNC_BODY_CAP);
 	if (parsed.kind === "too-large") return Response.json({ error: "sync body too large" }, { status: 413 });
 	if (parsed.kind === "invalid") return Response.json({ error: "invalid JSON" }, { status: 400 });
 	const body = parseArtifactSyncBody(parsed.body);
 	if (!body) return Response.json({ error: "invalid sync body" }, { status: 400 });
-	const { getArtifactSync } = await import("./boot-D8cj4uZj.mjs");
+	const { getArtifactSync } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getArtifactSync()).sync(token, body);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -225,7 +223,7 @@ var Route$6 = createFileRoute("/api/machine/status")({ server: { handlers: { GET
 	const limited = machineRouteLimit(request, token || void 0);
 	if (limited) return limited;
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { getGateway } = await import("./boot-D8cj4uZj.mjs");
+	const { getGateway } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getGateway()).status(token);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -267,7 +265,7 @@ var Route$5 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST:
 	if (parsed.kind !== "ok") return Response.json({ error: "invalid JSON body" }, { status: 400 });
 	const body = parsePollBody(parsed.body);
 	if (!body) return Response.json({ error: "unknown or invalid poll body fields" }, { status: 400 });
-	const { getGateway } = await import("./boot-D8cj4uZj.mjs");
+	const { getGateway } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getGateway()).pollV4Wait(token, gatewayPollRequest(body));
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -294,7 +292,7 @@ var Route$4 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST:
 	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
 	const body = parsed.kind === "ok" ? parseCliBody(parsed.body) : null;
 	if (!body) return Response.json({ error: "body must be exactly {argv:string[]}" }, { status: 400 });
-	const { getCliGateway } = await import("./boot-D8cj4uZj.mjs");
+	const { getCliGateway } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getCliGateway()).cli(token, body.argv);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -323,7 +321,7 @@ var Route$4 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST:
 var PROBE_TIMEOUT_MS = 5e3;
 var Route$3 = createFileRoute("/api/health/db")({ server: { handlers: { GET: async () => {
 	try {
-		const { db } = await import("./db-BphSJs66.mjs");
+		const { db } = await import("./db-BzvMQ2kx.mjs");
 		const ping = db.execute(sql`select 1`);
 		const timeout = new Promise((_, reject) => {
 			setTimeout(() => reject(/* @__PURE__ */ new Error(`db ping timed out after ${PROBE_TIMEOUT_MS}ms`)), PROBE_TIMEOUT_MS).unref?.();
@@ -342,8 +340,8 @@ var Route$3 = createFileRoute("/api/health/db")({ server: { handlers: { GET: asy
 	}
 } } } });
 var Route$2 = createFileRoute("/api/auth/$")({ server: { handlers: {
-	GET: async ({ request }) => (await import("./auth-LwPp_iim.mjs")).auth.handler(request),
-	POST: async ({ request }) => (await import("./auth-LwPp_iim.mjs")).auth.handler(request)
+	GET: async ({ request }) => (await import("./auth-0AamrwHo.mjs")).auth.handler(request),
+	POST: async ({ request }) => (await import("./auth-0AamrwHo.mjs")).auth.handler(request)
 } } });
 /**
 * `decodeURIComponent` that returns null on malformed percent-encoding instead
@@ -377,12 +375,12 @@ var Route$1 = createFileRoute("/api/machine/blob/$hash")({ server: { handlers: {
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
 	const hash = safeDecode(new URL(request.url).pathname.split("/").pop() ?? "");
 	if (hash === null) return Response.json({ error: "bad hash" }, { status: 400 });
-	const { BLOB_CAP } = await import("./artifacts-DOLHJHcd.mjs");
+	const { BLOB_CAP } = await import("./artifacts-Cd7Qx3Qp.mjs");
 	const body = await readByteBody(request, BLOB_CAP);
 	if (body.kind === "too-large") return Response.json({ error: "blob exceeds size cap" }, { status: 413 });
 	if (body.kind === "invalid") return Response.json({ error: "could not read blob body" }, { status: 400 });
 	const buf = Buffer.from(body.bytes.buffer, body.bytes.byteOffset, body.bytes.byteLength);
-	const { getArtifactSync } = await import("./boot-D8cj4uZj.mjs");
+	const { getArtifactSync } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.t);
 	const r = await (await getArtifactSync()).putBlob(token, hash, buf);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -399,8 +397,8 @@ var Route$1 = createFileRoute("/api/machine/blob/$hash")({ server: { handlers: {
 *    scripts - so an inline SVG can't run script against the session even if the
 *    URL is opened directly. Non-image inline requests fall back to attachment.
 *
-* Authed via the WEB SESSION (not a machine token) and scoped to the loop's team,
-* mirroring the server fns' `ownedLoop` gate. Path-safe: the relative path is
+* Authed via the web session (not a machine token) and scoped to the loop owner,
+* mirroring the server functions' `ownedLoop` gate. Path-safe: the relative path is
 * normalized + traversal-rejected before it ever reaches a blob, and blob keys
 * are content hashes, never the user path. Reads stream from the BlobStore
 * (local by default, R2 when configured); the route never writes.
@@ -417,11 +415,11 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 	const segments = after.slice(slash + 1).split("/").map((s) => safeDecode(s));
 	if (segments.some((s) => s === null)) return Response.json({ error: "bad path" }, { status: 400 });
 	const relPath = segments.join("/");
-	const loop = await (await import("./store-CFCp_ggC.mjs")).getLoop(loopId);
+	const loop = await (await import("./store-vDZ9INSa.mjs")).getLoop(loopId);
 	if (!loop) return Response.json({ error: "not found" }, { status: 404 });
-	const { requestScope, canAccessLoop } = await import("./auth-LwPp_iim.mjs");
-	if (!await canAccessLoop(loop.teamId, await requestScope())) return Response.json({ error: "not found" }, { status: 404 });
-	const { readLoopArtifactBytes } = await import("./artifactFiles-ChuJ4PzC.mjs");
+	const { requestScope, canAccessLoop } = await import("./auth-0AamrwHo.mjs");
+	if (!canAccessLoop(loop.userId, await requestScope())) return Response.json({ error: "not found" }, { status: 404 });
+	const { readLoopArtifactBytes } = await import("./artifactFiles-DO43wwXA.mjs");
 	const r = await readLoopArtifactBytes(loopId, relPath);
 	if (r.status !== 200 || !r.bytes) return Response.json({ error: "not found" }, { status: r.status });
 	const filename = (r.filename || "file").replace(/["\\\r\n]/g, "_");
@@ -447,31 +445,21 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 		}
 	});
 } } } });
-var IndexRoute = Route$15.update({
+var IndexRoute = Route$14.update({
 	id: "/",
 	path: "/",
 	getParentRoute: () => Route$11
 });
-var TTeamIdRoute = Route$16.update({
-	id: "/t/$teamId",
-	path: "/t/$teamId",
-	getParentRoute: () => Route$11
-});
 var MachineReportRoute = Route$10.update({
 	id: "/machine/report",
 	path: "/machine/report",
 	getParentRoute: () => Route$11
 });
-var LoopsLoopIdRoute = Route$13.update({
+var LoopsLoopIdRoute = Route$12.update({
 	id: "/loops/$loopId",
 	path: "/loops/$loopId",
 	getParentRoute: () => Route$11
 });
-var InviteTokenRoute = Route$12.update({
-	id: "/invite/$token",
-	path: "/invite/$token",
-	getParentRoute: () => Route$11
-});
 var ApiReadyRoute = Route$9.update({
 	id: "/api/ready",
 	path: "/api/ready",
@@ -512,7 +500,7 @@ var ApiAuthSplatRoute = Route$2.update({
 	path: "/api/auth/$",
 	getParentRoute: () => Route$11
 });
-var LoopsLoopIdRunsRunIdRoute = Route$14.update({
+var LoopsLoopIdRunsRunIdRoute = Route$13.update({
 	id: "/loops/$loopId_/runs/$runId",
 	path: "/loops/$loopId/runs/$runId",
 	getParentRoute: () => Route$11
@@ -532,10 +520,8 @@ var rootRouteChildren = {
 	IndexRoute,
 	ApiHealthRoute: ApiHealthRoute._addFileChildren(ApiHealthRouteChildren),
 	ApiReadyRoute,
-	InviteTokenRoute,
 	LoopsLoopIdRoute,
 	MachineReportRoute,
-	TTeamIdRoute,
 	ApiAuthSplatRoute,
 	ApiMachineCliRoute,
 	ApiMachinePollRoute,