@kky42/pievo-server 2.4.12 → 2.4.14

package/.output/server/_ssr/{bun-sqlite-dialect-BW9W1_Ps-CHMDkKqA.mjs → bun-sqlite-dialect-BW9W1_Ps-DLIXocA0.mjs}

@@ -1,6 +1,6 @@
-import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-LwPp_iim.mjs";
+import { n as DefaultQueryCompiler, o as CompiledQuery, s as sql$1 } from "./auth-0AamrwHo.mjs";
 import { n as DEFAULT_MIGRATION_TABLE, t as DEFAULT_MIGRATION_LOCK_TABLE } from "./kysely-migration-tables-JkVUjPF_-bPAX9LR_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/bun-sqlite-dialect-BW9W1_Ps-CHMDkKqA.js
+//#region node_modules/.nitro/vite/services/ssr/assets/bun-sqlite-dialect-BW9W1_Ps-DLIXocA0.js
 var BunSqliteAdapter = class {
 	get supportsCreateIfNotExists() {
 		return true;

package/.output/server/_ssr/{d1-sqlite-dialect-BLC8LXE6-DYum6qky.mjs → d1-sqlite-dialect-BLC8LXE6-BoFMIPr_.mjs}

@@ -1,6 +1,6 @@
-import { a as SqliteQueryCompiler, i as SqliteAdapter } from "./auth-LwPp_iim.mjs";
+import { a as SqliteQueryCompiler, i as SqliteAdapter } from "./auth-0AamrwHo.mjs";
 import { n as DEFAULT_MIGRATION_TABLE, t as DEFAULT_MIGRATION_LOCK_TABLE } from "./kysely-migration-tables-JkVUjPF_-bPAX9LR_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/d1-sqlite-dialect-BLC8LXE6-DYum6qky.js
+//#region node_modules/.nitro/vite/services/ssr/assets/d1-sqlite-dialect-BLC8LXE6-BoFMIPr_.js
 var D1SqliteAdapter = class extends SqliteAdapter {};
 var D1SqliteDriver = class {
 	#config;

package/.output/server/_ssr/db-BzvMQ2kx.mjs

@@ -0,0 +1,2 @@
+import { N as db } from "./loopTags-CXx5UdGf.mjs";
+export { db };

package/.output/server/_ssr/{dist-bWqs5sTy.mjs → dist-ClzqkwxD.mjs}

@@ -1,5 +1,5 @@
-import { _ as logger, o as createAdapterFactory } from "./factory-pBwrjVTI.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/dist-bWqs5sTy.js
+import { _ as logger, o as createAdapterFactory } from "./factory-ixUjZqJn.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/dist-ClzqkwxD.js
 /**
 * Case-insensitive in-memory comparison helpers.
 * Used when evaluating where clauses in the memory adapter.

package/.output/server/_ssr/{factory-pBwrjVTI.mjs → factory-ixUjZqJn.mjs}

@@ -1,5 +1,5 @@
-import { B as getEnvVar, M as env, a as BetterAuthError } from "./boot-BIxtZHU-.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/factory-pBwrjVTI.js
+import { V as env, X as getEnvVar, a as BetterAuthError } from "./loopTags-CXx5UdGf.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/factory-ixUjZqJn.js
 var __defProp = Object.defineProperty;
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __exportAll = (all, no_symbols) => {

package/.output/server/_ssr/{kysely-adapter-DMf5pFTf.mjs → kysely-adapter-DkZbmKgV.mjs}

@@ -1,2 +1,2 @@
-import { r as kyselyAdapter, t as createKyselyAdapter } from "./auth-LwPp_iim.mjs";
+import { r as kyselyAdapter, t as createKyselyAdapter } from "./auth-0AamrwHo.mjs";
 export { createKyselyAdapter, kyselyAdapter };

package/.output/server/_ssr/logger-DDjsYB2X.mjs

@@ -0,0 +1,2 @@
+import { At as logger } from "./loopTags-CXx5UdGf.mjs";
+export { logger };

package/.output/server/_ssr/{loopApi-Im6JSK0p.mjs → loopApi-DT751TJA.mjs}

@@ -1,9 +1,10 @@
-import { $t as validateLoopEdit, A as ensureServer, Ft as requestRunCancel, G as getMachine, J as getRun, Kt as tryDeleteLoop, N as forceDeleteLoop, Pt as requestDeleteLoop, Q as hasRunningRun, Tt as pauseLoop$1, Ut as stopLoop$1, Vt as startLoop$1, W as getLoop, X as getTeamMember, Y as getTeam, _t as listTeamsForUser, dt as listMachines, ft as listMachinesForTeam, ht as listRunsBefore, qt as updateLoop, ut as listLoops$1, xt as machinePresence } from "./boot-BIxtZHU-.mjs";
-import { a as toRunSummaries, i as toLoopSummaries, r as toLoopDetail, t as sortLoopSummariesByRecentRun } from "./loopProjection-DIpGR6rp.mjs";
-import { canAccessLoop, requestScope } from "./auth-LwPp_iim.mjs";
+import { $ as getLoop, An as updateLoop, Ct as listLoops$1, Dn as stopLoop$1, En as startLoop$1, Et as listMachinesForUser, Ft as machinePresence, Ot as listRunsBefore, Tt as listMachines, Vt as pauseLoop$1, W as forceDeleteLoop, ct as hasRunningRun, dn as requestDeleteLoop, et as getMachine, fn as requestRunCancel, it as getRun, kn as tryDeleteLoop, wt as listLoopsForUser } from "./loopTags-CXx5UdGf.mjs";
+import { h as validateLoopEdit, o as ensureServer } from "./boot-C472kLwY.mjs";
+import { a as toRunSummaries, i as toLoopSummaries, r as toLoopDetail, t as sortLoopSummariesByRecentRun } from "./loopProjection-qaD2I48a.mjs";
+import { canAccessLoop, requestScope } from "./auth-0AamrwHo.mjs";
 import { n as createServerFn } from "./ssr.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-Im6JSK0p.js
+//#region node_modules/.nitro/vite/services/ssr/assets/loopApi-DT751TJA.js
 /**
 * Server functions backing the dashboard. They run server-side (createServerFn
 * → RPC) and call the IN-PROCESS scheduler + store directly — the scheduler
@@ -11,8 +12,8 @@ import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
 * The machine-facing poll, CLI, report, and artifact-sync endpoints are sibling
 * server routes in this same process, so one process owns the single scheduler.
 *
-* Reads and writes are scoped through requestScope/ownedLoop so users only see
-* teams and loops their current session is authorized to access.
+* Reads and writes are scoped through requestScope/ownedLoop so auth-mode users
+* can access only their own loops. Open mode intentionally shares all loops.
 */
 function backend() {
 	return ensureServer();
@@ -26,12 +27,8 @@ async function ownedLoop(id) {
 	const loop = await getLoop(id);
 	if (!loop) return void 0;
 	const scope = await requestScope();
-	if (!await canAccessLoop(loop.teamId, scope)) return void 0;
-	return {
-		loop,
-		enforce: scope.enforce,
-		teamId: scope.teamId
-	};
+	if (!canAccessLoop(loop.userId, scope)) return void 0;
+	return { loop };
 }
 var getAuthState_createServerFn_handler = createServerRpc({
 	id: "b8119d5fe6ca1ed9f609702aa2133b5ac5337030c0bdcf92dc7eba889d6bd2e6",
@@ -39,7 +36,7 @@ var getAuthState_createServerFn_handler = createServerRpc({
 	filename: "src/server/loopApi.ts"
 }, (opts) => getAuthState.__executeServer(opts));
 var getAuthState = createServerFn({ method: "GET" }).handler(getAuthState_createServerFn_handler, async () => {
-	const { authEnabled } = await import("./auth-LwPp_iim.mjs");
+	const { authEnabled } = await import("./auth-0AamrwHo.mjs");
 	return { enabled: authEnabled };
 });
 var getConfig_createServerFn_handler = createServerRpc({
@@ -56,57 +53,16 @@ var getConfig = createServerFn({ method: "GET" }).handler(getConfig_createServer
 		customCli: !!custom
 	};
 });
-var listMyTeams_createServerFn_handler = createServerRpc({
-	id: "0fe12e769203c42f432a927b9cbf13a967a0f9db567b61843598f734afb4f5c6",
-	name: "listMyTeams",
-	filename: "src/server/loopApi.ts"
-}, (opts) => listMyTeams.__executeServer(opts));
-var listMyTeams = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(listMyTeams_createServerFn_handler, async ({ data: teamId }) => {
-	await backend();
-	const { enforce, userId, teamId: active } = await requestScope(teamId);
-	if (!enforce || !userId) return {
-		teams: [],
-		activeTeamId: active
-	};
-	return {
-		teams: (await listTeamsForUser(userId)).map((t) => ({
-			id: t.id,
-			name: t.name
-		})),
-		activeTeamId: active
-	};
-});
-var canViewTeam_createServerFn_handler = createServerRpc({
-	id: "7cc22b3a0f6b1c4c73463c3401e981ad42caf6487b479b738ee5aeacb11710da",
-	name: "canViewTeam",
-	filename: "src/server/loopApi.ts"
-}, (opts) => canViewTeam.__executeServer(opts));
-var canViewTeam = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(canViewTeam_createServerFn_handler, async ({ data: teamId }) => {
-	await backend();
-	const scope = await requestScope(teamId);
-	if (!scope.enforce) return true;
-	if (!scope.userId) return false;
-	return scope.teamId === teamId;
-});
-var getDefaultTeam_createServerFn_handler = createServerRpc({
-	id: "dc0ec955d0d53a150a3e9a4673f98f3509cfb4bd411c512079ae4e94c561b70c",
-	name: "getDefaultTeam",
-	filename: "src/server/loopApi.ts"
-}, (opts) => getDefaultTeam.__executeServer(opts));
-var getDefaultTeam = createServerFn({ method: "GET" }).handler(getDefaultTeam_createServerFn_handler, async () => {
-	await backend();
-	return (await requestScope()).teamId;
-});
 var listLoops_createServerFn_handler = createServerRpc({
 	id: "23e290b2b7483ceea6fe669024c35b12c2c4ddd76649f6fab21c958ceda02940",
 	name: "listLoops",
 	filename: "src/server/loopApi.ts"
 }, (opts) => listLoops.__executeServer(opts));
-var listLoops = createServerFn({ method: "GET" }).validator((teamId) => teamId).handler(listLoops_createServerFn_handler, async ({ data: teamId }) => {
+var listLoops = createServerFn({ method: "GET" }).handler(listLoops_createServerFn_handler, async () => {
 	await backend();
-	const { enforce, userId, teamId: active } = await requestScope(teamId);
-	if (enforce && !userId) return [];
-	const [loopRows, machines] = await Promise.all([listLoops$1(enforce ? active : void 0), enforce ? listMachinesForTeam(active) : listMachines()]);
+	const scope = await requestScope();
+	if (scope.enforce && !scope.userId) return [];
+	const [loopRows, machines] = await Promise.all([scope.enforce ? listLoopsForUser(scope.userId) : listLoops$1(), scope.enforce ? listMachinesForUser(scope.userId) : listMachines()]);
 	return sortLoopSummariesByRecentRun(await toLoopSummaries(loopRows.sort((a, b) => a.createdAt < b.createdAt ? 1 : -1), machines));
 });
 var getLoopDetail_createServerFn_handler = createServerRpc({
@@ -118,17 +74,7 @@ var getLoopDetail = createServerFn({ method: "GET" }).validator((id) => id).hand
 	await backend();
 	const owned = await ownedLoop(id);
 	if (!owned) throw new Error("This loop does not exist, or you do not have access to it.");
-	const detail = await toLoopDetail(owned.loop);
-	if (owned.enforce) {
-		const team = await getTeam(owned.loop.teamId);
-		if (!team) throw new Error(`invariant: loop ${owned.loop.id} references missing team ${owned.loop.teamId}`);
-		detail.team = {
-			id: owned.loop.teamId,
-			name: team.name,
-			isActive: owned.loop.teamId === owned.teamId
-		};
-	}
-	return detail;
+	return toLoopDetail(owned.loop);
 });
 var loadOlderRuns_createServerFn_handler = createServerRpc({
 	id: "85fdf73d4fee43aed762f93c5d47d33200fbff39e2d082647dc921f610d32698",
@@ -149,7 +95,7 @@ var getArtifacts_createServerFn_handler = createServerRpc({
 var getArtifacts = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifacts_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return [];
-	const { listLoopArtifacts } = await import("./artifactFiles-ChuJ4PzC.mjs");
+	const { listLoopArtifacts } = await import("./artifactFiles-DO43wwXA.mjs");
 	return listLoopArtifacts(data.loopId);
 });
 var getArtifact_createServerFn_handler = createServerRpc({
@@ -160,7 +106,7 @@ var getArtifact_createServerFn_handler = createServerRpc({
 var getArtifact = createServerFn({ method: "GET" }).validator((d) => d).handler(getArtifact_createServerFn_handler, async ({ data }) => {
 	await backend();
 	if (!await ownedLoop(data.loopId)) return { error: "file not found" };
-	const { readLoopArtifact } = await import("./artifactFiles-ChuJ4PzC.mjs");
+	const { readLoopArtifact } = await import("./artifactFiles-DO43wwXA.mjs");
 	return readLoopArtifact(data.loopId, data.path);
 });
 var getRunDiff_createServerFn_handler = createServerRpc({
@@ -179,7 +125,7 @@ var getRunDiff = createServerFn({ method: "GET" }).validator((d) => d).handler(g
 		hasSnapshot: false,
 		files: []
 	};
-	const { computeRunDiff } = await import("./runDiff-BLdot9mi.mjs");
+	const { computeRunDiff } = await import("./boot-C472kLwY.mjs").then((n) => n.i).then((n) => n.i);
 	return computeRunDiff(data.runId);
 });
 var patchLoop_createServerFn_handler = createServerRpc({
@@ -260,18 +206,15 @@ var deleteLoop = createServerFn({ method: "POST" }).validator((id) => id).handle
 	if (!owned) return { error: "not found" };
 	const machine = await getMachine(owned.loop.machineId);
 	const unreachable = machinePresence(machine?.online, machine?.lastSeen) !== "online";
-	const actor = await requestScope();
-	const mayRetireAuthority = !owned.enforce || !!(actor.userId && owned.loop.teamId && (await getTeamMember(owned.loop.teamId, actor.userId))?.role === "owner");
 	if (!unreachable && await hasRunningRun(id) && machine?.daemonProtocol !== 4) return { error: "Daemon upgrade required to stop a running process" };
 	scheduler.removeLoop(id);
 	if (!await requestDeleteLoop(id)) return { error: "not found" };
-	if (unreachable && mayRetireAuthority) {
+	if (unreachable) {
 		if (!await forceDeleteLoop(id)) return { error: "delete failed; server data was not deleted" };
-		const { logger } = await import("./logger-EinA2J6y.mjs");
+		const { logger } = await import("./logger-DDjsYB2X.mjs");
 		logger.child({ mod: "loop-lifecycle" }).warn({
 			action: "unreachable-delete",
 			loopId: id,
-			actorUserId: actor.userId,
 			machineId: owned.loop.machineId
 		}, "unreachable-machine delete: retired execution authority and removed server data");
 		return {
@@ -320,22 +263,19 @@ var stopRun = createServerFn({ method: "POST" }).validator((id) => id).handler(s
 		waiting: result.phase === "running"
 	} : { error: "run not found" };
 });
-var mintClaim_createServerFn_handler = createServerRpc({
-	id: "4646f52fb09b83c9c9cef34836f3c9d03416423c879d9e5ceffcafd9a71ecba6",
-	name: "mintClaim",
+var mintConnectKey_createServerFn_handler = createServerRpc({
+	id: "ce43dcb9366e7c8f7338a6ad28e4290b75a5ee3b13d0d2c9cb585020008f12c6",
+	name: "mintConnectKey",
 	filename: "src/server/loopApi.ts"
-}, (opts) => mintClaim.__executeServer(opts));
-var mintClaim = createServerFn({ method: "POST" }).validator((teamId) => teamId).handler(mintClaim_createServerFn_handler, async ({ data: teamId }) => {
+}, (opts) => mintConnectKey.__executeServer(opts));
+var mintConnectKey = createServerFn({ method: "POST" }).handler(mintConnectKey_createServerFn_handler, async () => {
 	await backend();
-	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-CUz4LDLm.mjs");
-	const { userId, teamId: active } = await requestScope(teamId);
-	const owner = userId ?? "shared";
+	const scope = await requestScope();
+	if (scope.enforce && !scope.userId) return { error: "not signed in" };
+	const { mintDeviceToken, rememberConnectKey } = await import("./tokens-BHiCElYD.mjs");
 	const token = mintDeviceToken();
-	await rememberConnectKey(token, {
-		userId: owner,
-		teamId: active
-	});
+	await rememberConnectKey(token, { userId: scope.userId ?? "shared" });
 	return { token };
 });
 //#endregion
-export { canViewTeam_createServerFn_handler, deleteLoop_createServerFn_handler, getArtifact_createServerFn_handler, getArtifacts_createServerFn_handler, getAuthState_createServerFn_handler, getConfig_createServerFn_handler, getDefaultTeam_createServerFn_handler, getLoopDetail_createServerFn_handler, getRunDiff_createServerFn_handler, listLoops_createServerFn_handler, listMyTeams_createServerFn_handler, loadOlderRuns_createServerFn_handler, mintClaim_createServerFn_handler, patchLoop_createServerFn_handler, pauseLoop_createServerFn_handler, runLoop_createServerFn_handler, startLoop_createServerFn_handler, stopLoop_createServerFn_handler, stopRun_createServerFn_handler };
+export { deleteLoop_createServerFn_handler, getArtifact_createServerFn_handler, getArtifacts_createServerFn_handler, getAuthState_createServerFn_handler, getConfig_createServerFn_handler, getLoopDetail_createServerFn_handler, getRunDiff_createServerFn_handler, listLoops_createServerFn_handler, loadOlderRuns_createServerFn_handler, mintConnectKey_createServerFn_handler, patchLoop_createServerFn_handler, pauseLoop_createServerFn_handler, runLoop_createServerFn_handler, startLoop_createServerFn_handler, stopLoop_createServerFn_handler, stopRun_createServerFn_handler };

package/.output/server/_ssr/{loopProjection-DIpGR6rp.mjs → loopProjection-qaD2I48a.mjs}

@@ -1,5 +1,6 @@
-import { G as getMachine, Ht as statusDefinitionsFromLoop, Ot as recentLoopUsage, Q as hasRunningRun, Rt as scheduleFromLoop, T as daemonNeedsUpdate, Z as hasPendingRun, kt as reconciliationStatesForRuns, mt as listRuns, u as MIN_DAEMON_VERSION, xt as machinePresence, y as countRuns } from "./boot-BIxtZHU-.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loopProjection-DIpGR6rp.js
+import { D as countRuns, Dt as listRuns, Ft as machinePresence, Qt as recentLoopUsage, ct as hasRunningRun, et as getMachine, nn as reconciliationStatesForRuns, st as hasPendingRun } from "./loopTags-CXx5UdGf.mjs";
+import { a as daemonNeedsUpdate, d as statusDefinitionsFromLoop, n as MIN_DAEMON_VERSION, u as scheduleFromLoop } from "./boot-C472kLwY.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loopProjection-qaD2I48a.js
 var SUMMARY_RUNS = 18;
 var RECENT_USAGE_WINDOW_MS = 10080 * 60 * 1e3;
 /** Dashboard order: loops with runs first, most recent run first. The incoming
@@ -62,6 +63,7 @@ async function toLoopSummaryWithMachine(loop, machine) {
 	return {
 		id: loop.id,
 		name: loop.name,
+		tags: loop.tags,
 		schedule: scheduleFromLoop(loop),
 		workdir: loop.workdir,
 		agent: loop.agent,
@@ -97,6 +99,7 @@ function toLoopFull(loop) {
 	return {
 		id: loop.id,
 		name: loop.name,
+		tags: loop.tags,
 		schedule: scheduleFromLoop(loop),
 		workdir: loop.workdir,
 		agent: loop.agent,