@kky42/pievo-server 2.4.14 → 3.0.0

package/.output/server/_ssr/{routes-Cr-9yDEH.mjs → routes-DnE7XDe_.mjs}

@@ -1,10 +1,10 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime, s as TooltipProvider } from "../_libs/@base-ui/react+[...].mjs";
-import { c as createFileRoute, d as useNavigate, f as useRouter, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { O as useSession, _ as listLoops, a as PievoLogo, f as getAuthState, i as OpenModeWarning, n as GITHUB_URL, p as getConfig, r as GitHubIcon, v as loadOlderRuns, w as signOut, y as mintConnectKey } from "./auth-client-lSMb_Idt.mjs";
-import { f as btnSm, y as focusRing } from "./actionUi-5HOCZnom.mjs";
-import { c as mergeRuns, i as ModalHead, n as MachinesModal, o as daemonConnectCommand, r as Modal, s as listMachines, t as LoopOverview } from "./MachinesModal-BaEtzycr.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-Cr-9yDEH.js
+import { c as createFileRoute, d as useNavigate, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
+import { c as getConfig, f as listLoops, m as mintConnectKey, p as loadOlderRuns } from "./lifecycleUi-BsbUsi5K.mjs";
+import { f as btnSm, y as focusRing } from "./actionUi-DE-Pb2tv.mjs";
+import { c as listMachines, i as ModalHead, l as mergeRuns, n as MachinesModal, o as connectServerUrl, r as Modal, s as daemonConnectCommand, t as LoopOverview } from "./MachinesModal-CmVMec6B.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-DnE7XDe_.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 function LoopCard({ loop, onOpen, onPickRun }) {
@@ -81,7 +81,7 @@ function ComposeModal({ open, onClose }) {
 	const [error, setError] = (0, import_react.useState)(null);
 	const [configError, setConfigError] = (0, import_react.useState)(false);
 	const origin = typeof window !== "undefined" ? window.location.origin : "";
-	const command = token && config ? daemonConnectCommand(origin, token, config.pievoCli, config.customCli) : "";
+	const command = token && config ? daemonConnectCommand(connectServerUrl(origin, config.publicUrl), token, config.pievoCli, config.customCli) : "";
 	(0, import_react.useEffect)(() => {
 		if (!open) return;
 		setToken(null);
@@ -99,9 +99,7 @@ function ComposeModal({ open, onClose }) {
 			if (active) setConfigError(true);
 		});
 		mintConnectKey().then((result) => {
-			if (!active) return;
-			if ("token" in result) setToken(result.token);
-			else setError(result.error);
+			if (active) setToken(result.token);
 		}).catch(() => {
 			if (active) setError("could not mint a connect key");
 		});
@@ -206,6 +204,85 @@ function Step({ number, title, continued = false, children }) {
 		})]
 	});
 }
+/**
+* Shared Pievo mark geometry: eight durable steps form a cycle and the
+* interactive-blue runner marks the next scheduled pass.
+*
+* Variants are props on one geometry (styles in app.css):
+* - `plate`    - dark tile behind the steps (favicon / app-icon contexts);
+*                without it the steps inherit currentColor (inline contexts).
+* - `trail`    - two fading steps behind the runner, so a static rendering
+*                still reads as motion (print / social cards).
+* - `animated` - the runner advances around the cycle; reduced-motion users
+*                see the canonical static first frame.
+*/
+var RING = [
+	[9, 9],
+	[37, 9],
+	[65, 9],
+	[65, 37],
+	[65, 65],
+	[37, 65],
+	[9, 65],
+	[9, 37]
+];
+function RingLogo({ size = 24, plate = false, trail = false, animated = false }) {
+	const cellClass = (i) => {
+		const parts = ["ring-cell", `rc${i}`];
+		if (i === 0) parts.push("ring-runner");
+		else if (trail && i === 7) parts.push("ring-trail-1");
+		else if (trail && i === 6) parts.push("ring-trail-2");
+		return parts.join(" ");
+	};
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("svg", {
+		width: size,
+		height: size,
+		viewBox: "0 0 96 96",
+		role: "img",
+		"aria-label": "Pievo",
+		className: [
+			"ring-logo",
+			plate && "ring-logo-plate",
+			animated && "ring-logo-animated"
+		].filter(Boolean).join(" "),
+		children: [plate && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("rect", {
+			width: "96",
+			height: "96",
+			rx: "15",
+			fill: "#0b0b0b"
+		}), RING.map(([x, y], i) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("rect", {
+			x,
+			y,
+			width: 22,
+			height: 22,
+			rx: 6,
+			className: cellClass(i)
+		}, i))]
+	});
+}
+/**
+* Pievo's primary product mark: one scheduled pass moving around a durable ring.
+* It reuses the same geometry as the favicon and README asset; animation is a
+* progressive enhancement and parks on the canonical first frame when reduced
+* motion is requested.
+*/
+function PievoLogo({ size = 56 }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RingLogo, {
+		size,
+		plate: true,
+		animated: true
+	});
+}
+var GITHUB_URL = "https://github.com/kky42/pievo";
+function GitHubIcon({ className }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+		viewBox: "0 0 24 24",
+		fill: "currentColor",
+		"aria-hidden": true,
+		className,
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.58.11.79-.25.79-.55 0-.27-.01-1.17-.02-2.12-3.2.7-3.88-1.36-3.88-1.36-.52-1.33-1.28-1.68-1.28-1.68-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.19 1.76 1.19 1.03 1.75 2.69 1.25 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.24-1.28-5.24-5.68 0-1.26.45-2.28 1.19-3.09-.12-.29-.52-1.46.11-3.05 0 0 .97-.31 3.18 1.18a11.1 11.1 0 0 1 5.8 0c2.2-1.49 3.17-1.18 3.17-1.18.63 1.59.23 2.76.11 3.05.74.81 1.19 1.83 1.19 3.09 0 4.41-2.69 5.38-5.25 5.67.41.35.77 1.05.77 2.12 0 1.53-.01 2.76-.01 3.14 0 .3.2.66.8.55A11.51 11.51 0 0 0 23.5 12C23.5 5.65 18.35.5 12 .5z" })
+	});
+}
 function loopFilterKey(filter) {
 	return filter.kind === "tag" ? `tag:${filter.tag}` : filter.kind;
 }
@@ -260,8 +337,6 @@ function filterLoops(loops, filter) {
 		case "tag": return loops.filter((loop) => loop.tags.includes(filter.tag));
 	}
 }
-/** Loops and machines change between polls. Authorization is derived server-side
-* from the current session; clients do not send tenant identifiers. */
 async function fetchLiveData() {
 	const [loops, machines] = await Promise.all([listLoops(), listMachines()]);
 	return {
@@ -269,27 +344,14 @@ async function fetchLiveData() {
 		machines
 	};
 }
-function DashboardView({ initial, mode }) {
+function DashboardView({ initial }) {
 	const [live, setLive] = (0, import_react.useState)(null);
 	const { loops, machines } = live ?? initial;
 	const online = machines.filter((m) => m.online).length;
 	const navigate = useNavigate();
-	const router = useRouter();
-	const { data: session } = useSession();
-	const [signingOut, setSigningOut] = (0, import_react.useState)(false);
 	const [composeOpen, setComposeOpen] = (0, import_react.useState)(false);
 	const [machinesOpen, setMachinesOpen] = (0, import_react.useState)(false);
 	const [filter, setFilter] = (0, import_react.useState)({ kind: "all" });
-	async function logout() {
-		setSigningOut(true);
-		try {
-			await signOut();
-			await navigate({ to: "/" });
-			await router.invalidate();
-		} finally {
-			setSigningOut(false);
-		}
-	}
 	const refetch = (0, import_react.useCallback)(async () => {
 		try {
 			setLive(await fetchLiveData());
@@ -340,7 +402,7 @@ function DashboardView({ initial, mode }) {
 							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PievoLogo, { size: 30 })
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-							className: `shrink-0 text-[18px] font-semibold tracking-[-0.015em] text-display ${mode === "auth" ? "hidden sm:inline" : ""}`,
+							className: "shrink-0 text-[18px] font-semibold tracking-[-0.015em] text-display",
 							children: "Pievo"
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "flex-1" }),
@@ -353,19 +415,6 @@ function DashboardView({ initial, mode }) {
 							className: `${headerIconBtn} hidden sm:inline-flex`,
 							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(GitHubIcon, { className: "size-[17px]" })
 						}),
-						mode === "auth" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-							className: "flex shrink-0 items-center gap-2",
-							children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-								className: "hidden max-w-48 truncate text-label text-secondary md:inline",
-								title: session?.user.email ?? session?.user.name ?? "Account",
-								children: session?.user.email ?? session?.user.name ?? "Account"
-							}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
-								onClick: () => void logout(),
-								disabled: signingOut,
-								className: headerBtn,
-								children: signingOut ? "Signing out…" : "Sign out"
-							})]
-						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("button", {
 							onClick: () => setMachinesOpen(true),
 							"aria-label": `${online} ${online === 1 ? "machine" : "machines"} online`,
@@ -398,7 +447,6 @@ function DashboardView({ initial, mode }) {
 			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("main", {
 				className: "mx-auto max-w-[1180px] px-8 pb-24",
 				children: [
-					mode === "open" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, { className: "mt-6" }),
 					/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", {
 						className: "pb-2 pt-14 text-center",
 						children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("h1", {
@@ -472,18 +520,11 @@ function DashboardView({ initial, mode }) {
 }
 var headerBtn = "inline-flex shrink-0 cursor-pointer items-center rounded-full px-3 py-1.5 text-meta font-medium text-secondary transition-colors hover:bg-raised hover:text-display";
 var headerIconBtn = "shrink-0 cursor-pointer items-center rounded-full p-1.5 text-secondary transition-colors hover:bg-raised hover:text-display";
-var $$splitErrorComponentImporter = () => import("./routes-DRBS4Zi4.mjs");
-var $$splitComponentImporter = () => import("./routes-DTBltabU.mjs");
-/** The dashboard route. Auth mode shows sign-in before loading owner-scoped data;
-* open mode renders the server's shared administrative workspace. */
+var $$splitErrorComponentImporter = () => import("./routes-ngpX7h8D.mjs");
+var $$splitComponentImporter = () => import("./routes-BSVBANI3.mjs");
 var Route = createFileRoute("/")({
 	ssr: false,
-	loader: async () => {
-		return {
-			auth: await getAuthState(),
-			initial: await fetchLiveData()
-		};
-	},
+	loader: () => fetchLiveData(),
 	component: lazyRouteComponent($$splitComponentImporter, "component"),
 	errorComponent: lazyRouteComponent($$splitErrorComponentImporter, "errorComponent")
 });

package/.output/server/_ssr/{routes-DRBS4Zi4.mjs → routes-ngpX7h8D.mjs}

@@ -1,10 +1,8 @@
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { f as useRouter } from "../_libs/@tanstack/react-router+[...].mjs";
-import { i as LoadErrorCard } from "./actionUi-5HOCZnom.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-DRBS4Zi4.js
+import { i as LoadErrorCard } from "./actionUi-DE-Pb2tv.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-ngpX7h8D.js
 var import_jsx_runtime = require_jsx_runtime();
-/** The dashboard route. Auth mode shows sign-in before loading owner-scoped data;
-* open mode renders the server's shared administrative workspace. */
 /** First-load failure screen — a calm retry instead of the router's default
 *  error dump. Only the initial loader can land here; the in-page poll is
 *  fetch-then-set and keeps stale data on a transient blip. */

package/.output/server/_ssr/ssr.mjs

@@ -1,5 +1,4 @@
 import { r as __exportAll } from "../_runtime.mjs";
-import { i as __exportAll$1 } from "./factory-ixUjZqJn.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { a as RouterProvider, n as defineHandlerCallback, t as renderRouterToStream } from "../_libs/@tanstack/react-router+[...].mjs";
 import { PassThrough, Readable } from "node:stream";
@@ -11,7 +10,7 @@ var ssr_exports = /* @__PURE__ */ __exportAll({
 	i: () => getServerFnById,
 	n: () => createServerFn,
 	r: () => TSS_SERVER_FUNCTION,
-	t: () => server_exports
+	t: () => createMiddleware
 });
 require_react();
 var import_jsx_runtime = require_jsx_runtime();
@@ -597,9 +596,6 @@ function getH3Event() {
 	if (!event) throw new Error(`No StartEvent found in AsyncLocalStorage. Make sure you are using the function within the server runtime.`);
 	return event.h3Event;
 }
-function getRequest() {
-	return getH3Event().req;
-}
 function getResponse() {
 	return getH3Event().res;
 }
@@ -3418,7 +3414,7 @@ var defaultSerovalPlugins = [
 * the dev styles URL for route-scoped CSS collection.
 */
 async function getStartManifest(matchedRoutes) {
-	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-DxLIQ0cc.mjs");
+	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-DnwAupbZ.mjs");
 	const startManifest = tsrStartManifest();
 	let routes = startManifest.routes;
 	routes[rootRouteId];
@@ -3440,87 +3436,83 @@ async function getStartManifest(matchedRoutes) {
 var manifest = {
 	"08565e35f6a3dd06ef25401de0343976c47f7ae319d3baed6320b56dd3718311": {
 		functionName: "runLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"08c28b892712a1b491b120b74c7dcb81761988d31ccea60216d1807b73c1182c": {
 		functionName: "getRunDiff_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"169566e7637a22599b4eb32ee3775574e99677406922bbef7482a102036c33dd": {
 		functionName: "machineStatus_createServerFn_handler",
-		importer: () => import("./machineFns-BSrIgn3f.mjs")
+		importer: () => import("./machineFns-CniGcY8s.mjs")
 	},
 	"23e290b2b7483ceea6fe669024c35b12c2c4ddd76649f6fab21c958ceda02940": {
 		functionName: "listLoops_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"27d7eba0b6a2257949392fdd56057275a5c5366484ae01faf3b5897a225ecd83": {
 		functionName: "finalizeMachine_createServerFn_handler",
-		importer: () => import("./machineFns-BSrIgn3f.mjs")
+		importer: () => import("./machineFns-CniGcY8s.mjs")
 	},
 	"5660ea82ea5ff2549e0ce2f8f070c54f3e9e24fee84d547601ef5d6ef49a4016": {
 		functionName: "startLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"5e0d6b55f5629faac2f55a68661eeb82668b2be752192b16264ffb5cd1e6fabe": {
 		functionName: "deleteLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"6850ba403da9dec5aff45794eb52636ca540ddec2d9e59f5c75ccbb852bfeacb": {
 		functionName: "stopRun_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"85fdf73d4fee43aed762f93c5d47d33200fbff39e2d082647dc921f610d32698": {
 		functionName: "loadOlderRuns_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"95b7483b333d7649e70c848319417e83c2af6a0327bbcda2d0e331f626dffe05": {
 		functionName: "pauseLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"9befe6b8d67ccbbd7aa9b538bde2a161a9894761c8936761a9503fda1a88c0fc": {
 		functionName: "patchLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"a6384dc7154d9930422d29396f5de64b3ac69c62ad3824bc4a22d745fc07b293": {
 		functionName: "deleteMachine_createServerFn_handler",
-		importer: () => import("./machineFns-BSrIgn3f.mjs")
+		importer: () => import("./machineFns-CniGcY8s.mjs")
 	},
 	"aa46310016bb8a58b273a648ffd498c87f1f450d12827e30110a3b83ba6a27d9": {
 		functionName: "listMachines_createServerFn_handler",
-		importer: () => import("./machineFns-BSrIgn3f.mjs")
+		importer: () => import("./machineFns-CniGcY8s.mjs")
 	},
 	"b050455aacc84dd2a2c9a45517826ad10f91d8f1545e87cc7015784cc7116a97": {
 		functionName: "getLoopDetail_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"b18bbec3d06dfc77714e1e527dfb9172fd7575a64a6c0d6e73ba6dc658dccf0d": {
 		functionName: "getArtifacts_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
-	},
-	"b8119d5fe6ca1ed9f609702aa2133b5ac5337030c0bdcf92dc7eba889d6bd2e6": {
-		functionName: "getAuthState_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"cbb6a1b09b309459bbba3dc3851ae85fc468658b3cda77e22b6c6f3e28b65af4": {
 		functionName: "getConfig_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"ce43dcb9366e7c8f7338a6ad28e4290b75a5ee3b13d0d2c9cb585020008f12c6": {
 		functionName: "mintConnectKey_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"e233a461e4526dec3cc4cbaa891a7c3621d5967ce7f32b4fb17e9fb645857b9a": {
 		functionName: "stopLoop_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"ed10d5fe79208e5e0e4e18e4a17b18d7f7db4dd16204c00c3ac90c4644668841": {
 		functionName: "getArtifact_createServerFn_handler",
-		importer: () => import("./loopApi-DT751TJA.mjs")
+		importer: () => import("./loopApi-Bez1rHV0.mjs")
 	},
 	"ed679b4e1e05e903a5d4ba4a70d9b9d883991ab22ed59b4d2d69078941818415": {
 		functionName: "createMachine_createServerFn_handler",
-		importer: () => import("./machineFns-BSrIgn3f.mjs")
+		importer: () => import("./machineFns-CniGcY8s.mjs")
 	}
 };
 async function getServerFnById(id, access) {
@@ -5352,8 +5344,8 @@ var getBaseManifest = getProdBaseManifest;
 var createEarlyHintsForRequest = createEarlyHintsCollector;
 async function loadEntries() {
 	const [routerEntry, startEntry, pluginAdapters] = await Promise.all([
-		import("./router-BlLlhfJe.mjs"),
-		import("./start-4ifArtKx.mjs"),
+		import("./router-BFIH2UAE.mjs"),
+		import("./start-B5_9Z5W-.mjs"),
 		import("./empty-plugin-adapters-DKUlnwwl.mjs")
 	]);
 	return {
@@ -5729,7 +5721,6 @@ async function handleServerRoutes({ getRouter, request, url, executeRouter, cont
 	}
 	return normalizeSsrResponse(response);
 }
-var server_exports = /* @__PURE__ */ __exportAll$1({ getRequest: () => getRequest });
 var fetch$1 = createStartHandler(defaultStreamHandler);
 function createServerEntry(entry) {
 	return { async fetch(...args) {
@@ -5738,4 +5729,4 @@ function createServerEntry(entry) {
 }
 var server_default = createServerEntry({ fetch: fetch$1 });
 //#endregion
-export { ssr_exports as i, createServerFn as n, getServerFnById as r, TSS_SERVER_FUNCTION as t };
+export { ssr_exports as a, getServerFnById as i, createMiddleware as n, createServerFn as r, TSS_SERVER_FUNCTION as t };

package/.output/server/_ssr/start-B5_9Z5W-.mjs

@@ -0,0 +1,35 @@
+import { n as createMiddleware } from "./ssr.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/start-B5_9Z5W-.js
+function dedupeSerializationAdapters(deduped, serializationAdapters) {
+	for (let i = 0, len = serializationAdapters.length; i < len; i++) {
+		const current = serializationAdapters[i];
+		if (!deduped.has(current)) {
+			deduped.add(current);
+			if (current.extends) dedupeSerializationAdapters(deduped, current.extends);
+		}
+	}
+}
+var createStart = (getOptions) => {
+	return {
+		getOptions: async () => {
+			const options = await getOptions();
+			if (options.serializationAdapters) {
+				const deduped = /* @__PURE__ */ new Set();
+				dedupeSerializationAdapters(deduped, options.serializationAdapters);
+				options.serializationAdapters = Array.from(deduped);
+			}
+			return options;
+		},
+		createMiddleware
+	};
+};
+/** Rejects requests from outside this machine, the LAN, and the tailnet. */
+var networkAccess = createMiddleware().server(async ({ request, next }) => {
+	const { isTrustedPeer } = await import("./networkAccess-CIlK3ION.mjs");
+	const peer = request.ip;
+	if (!isTrustedPeer(peer)) return new Response("Pievo only accepts connections from this machine, the local network, or Tailscale.", { status: 403 });
+	return next();
+});
+var startInstance = createStart(() => ({ requestMiddleware: [networkAccess] }));
+//#endregion
+export { startInstance };

package/.output/server/{_tanstack-start-manifest_v-DxLIQ0cc.mjs → _tanstack-start-manifest_v-DnwAupbZ.mjs}

@@ -1,4 +1,4 @@
-//#region node_modules/.nitro/vite/services/ssr/assets/_tanstack-start-manifest_v-DxLIQ0cc.js
+//#region node_modules/.nitro/vite/services/ssr/assets/_tanstack-start-manifest_v-DnwAupbZ.js
 var tsrStartManifest = () => ({ routes: {
 	__root__: {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/__root.tsx",
@@ -8,7 +8,6 @@ var tsrStartManifest = () => ({ routes: {
 			"/api/ready",
 			"/loops/$loopId",
 			"/machine/report",
-			"/api/auth/$",
 			"/api/machine/cli",
 			"/api/machine/poll",
 			"/api/machine/status",
@@ -18,34 +17,30 @@ var tsrStartManifest = () => ({ routes: {
 			"/loops/$loopId_/runs/$runId"
 		],
 		preloads: [
-			"/assets/index-CRX2pu0W.js",
-			"/assets/actionUi-5PtES4q0.js",
-			"/assets/preload-helper-sAZOZb3G.js"
+			"/assets/index-Di_wpAtL.js",
+			"/assets/actionUi-BZrLpgHT.js",
+			"/assets/preload-helper-hRTYB_ju.js"
 		],
 		scripts: [{ attrs: {
 			type: "module",
 			async: !0,
-			src: "/assets/index-CRX2pu0W.js"
+			src: "/assets/index-Di_wpAtL.js"
 		} }]
 	},
 	"/": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/index.tsx",
 		children: void 0,
-		preloads: [
-			"/assets/routes-Dm_3J2aV.js",
-			"/assets/routes-DxF_s3cD.js",
-			"/assets/SignIn-CIFwnZtF.js"
-		]
+		preloads: ["/assets/routes-BIOJZsig.js", "/assets/routes-K8D5uBiV.js"]
 	},
 	"/loops/$loopId": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/loops.$loopId.tsx",
 		children: void 0,
-		preloads: ["/assets/loops._loopId-BsuV-Rmf.js", "/assets/SignIn-CIFwnZtF.js"]
+		preloads: ["/assets/loops._loopId-X3ClNPMY.js"]
 	},
 	"/loops/$loopId_/runs/$runId": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/loops.$loopId_.runs.$runId.tsx",
 		children: void 0,
-		preloads: ["/assets/loops._loopId_.runs._runId-DpK_fzmZ.js", "/assets/SignIn-CIFwnZtF.js"]
+		preloads: ["/assets/loops._loopId_.runs._runId-ByU2BSyF.js"]
 	}
 } });
 //#endregion

package/.output/server/drizzle/0000_baseline.sql

@@ -18,17 +18,14 @@ CREATE TABLE "blobs" (
 --> statement-breakpoint
 CREATE TABLE "connect_keys" (
 	"machine_id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"minted_at" text NOT NULL
 );
 --> statement-breakpoint
 CREATE TABLE "loops" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"machine_id" text NOT NULL,
 	"name" text NOT NULL,
+	"tags" text[] DEFAULT ARRAY[]::text[] NOT NULL,
 	"prompt" text NOT NULL,
 	"status_keep" text NOT NULL,
 	"status_no_change" text NOT NULL,
@@ -51,15 +48,15 @@ CREATE TABLE "loops" (
 	"last_run_index" integer DEFAULT 0 NOT NULL,
 	"created_at" text NOT NULL,
 	"updated_at" text NOT NULL,
-	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "loops_agent_check" CHECK ("loops"."agent" IN ('claude-code', 'codex', 'pi')),
+	CONSTRAINT "loops_tags_count_check" CHECK (cardinality("loops"."tags") <= 4),
+	CONSTRAINT "loops_tags_reserved_check" CHECK (NOT ("loops"."tags" && ARRAY['all loops', 'active', 'paused', 'blocked']::text[])),
 	CONSTRAINT "loops_schedule_mode_check" CHECK ("loops"."schedule_mode" IN ('cron', 'continuous')),
 	CONSTRAINT "loops_cron_overlap_check" CHECK ("loops"."cron_overlap" IN ('skip', 'queue-one'))
 );
 --> statement-breakpoint
 CREATE TABLE "machines" (
 	"id" text PRIMARY KEY NOT NULL,
-	"user_id" text NOT NULL,
-	"team_id" text NOT NULL,
 	"name" text NOT NULL,
 	"hostname" text,
 	"platform" text,
@@ -125,40 +122,12 @@ CREATE TABLE "runs" (
 	"cancel_requested_at" timestamp with time zone,
 	"heartbeat_at" text,
 	"report_incident" jsonb,
-	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex')),
+	CONSTRAINT "runs_agent_check" CHECK ("runs"."agent" IS NULL OR "runs"."agent" IN ('claude-code', 'codex', 'pi')),
 	CONSTRAINT "runs_phase_check" CHECK ("runs"."phase" IN ('pending', 'running', 'done', 'error', 'canceled')),
 	CONSTRAINT "runs_requested_by_check" CHECK ("runs"."requested_by" IN ('owner', 'system')),
 	CONSTRAINT "runs_status_check" CHECK ("runs"."status" IS NULL OR "runs"."status" IN ('keep', 'no-change', 'block'))
 );
 --> statement-breakpoint
-CREATE TABLE "team_invites" (
-	"token" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"invited_by_user_id" text NOT NULL,
-	"expires_at" text NOT NULL,
-	"redeemed_at" text,
-	"redeemed_by_user_id" text,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_invites_role_check" CHECK ("team_invites"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "team_members" (
-	"id" text PRIMARY KEY NOT NULL,
-	"team_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"role" text DEFAULT 'member' NOT NULL,
-	"created_at" text NOT NULL,
-	CONSTRAINT "team_members_role_check" CHECK ("team_members"."role" IN ('owner', 'member'))
-);
---> statement-breakpoint
-CREATE TABLE "teams" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"owner_user_id" text,
-	"created_at" text NOT NULL
-);
---> statement-breakpoint
 CREATE TABLE "terminal_report_incidents" (
 	"id" text PRIMARY KEY NOT NULL,
 	"run_id" text NOT NULL,
@@ -170,65 +139,11 @@ CREATE TABLE "terminal_report_incidents" (
 	CONSTRAINT "terminal_report_incidents_disposition_check" CHECK ("terminal_report_incidents"."disposition" IN ('run-error', 'telemetry-rejected'))
 );
 --> statement-breakpoint
-CREATE TABLE "account" (
-	"id" text PRIMARY KEY NOT NULL,
-	"account_id" text NOT NULL,
-	"provider_id" text NOT NULL,
-	"user_id" text NOT NULL,
-	"access_token" text,
-	"refresh_token" text,
-	"id_token" text,
-	"access_token_expires_at" timestamp,
-	"refresh_token_expires_at" timestamp,
-	"scope" text,
-	"password" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL
-);
---> statement-breakpoint
-CREATE TABLE "session" (
-	"id" text PRIMARY KEY NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"token" text NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp NOT NULL,
-	"ip_address" text,
-	"user_agent" text,
-	"user_id" text NOT NULL,
-	CONSTRAINT "session_token_unique" UNIQUE("token")
-);
---> statement-breakpoint
-CREATE TABLE "user" (
-	"id" text PRIMARY KEY NOT NULL,
-	"name" text NOT NULL,
-	"email" text NOT NULL,
-	"email_verified" boolean DEFAULT false NOT NULL,
-	"image" text,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL,
-	CONSTRAINT "user_email_unique" UNIQUE("email")
-);
---> statement-breakpoint
-CREATE TABLE "verification" (
-	"id" text PRIMARY KEY NOT NULL,
-	"identifier" text NOT NULL,
-	"value" text NOT NULL,
-	"expires_at" timestamp NOT NULL,
-	"created_at" timestamp DEFAULT now() NOT NULL,
-	"updated_at" timestamp DEFAULT now() NOT NULL
-);
---> statement-breakpoint
-ALTER TABLE "account" ADD CONSTRAINT "account_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "session" ADD CONSTRAINT "session_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "public"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 CREATE INDEX "artifact_files_loop_idx" ON "artifact_files" USING btree ("loop_id");--> statement-breakpoint
 CREATE UNIQUE INDEX "artifact_files_loop_path_idx" ON "artifact_files" USING btree ("loop_id","path");--> statement-breakpoint
 CREATE INDEX "artifact_files_hash_idx" ON "artifact_files" USING btree ("hash");--> statement-breakpoint
-CREATE INDEX "loops_user_idx" ON "loops" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "loops_team_idx" ON "loops" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "loops_machine_idx" ON "loops" USING btree ("machine_id");--> statement-breakpoint
 CREATE INDEX "delete_requested_loops" ON "loops" USING btree ("delete_requested_at") WHERE "loops"."delete_requested_at" IS NOT NULL;--> statement-breakpoint
-CREATE INDEX "machines_user_idx" ON "machines" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "machines_team_idx" ON "machines" USING btree ("team_id");--> statement-breakpoint
 CREATE INDEX "run_leases_run_idx" ON "run_leases" USING btree ("run_id");--> statement-breakpoint
 CREATE INDEX "run_leases_loop_idx" ON "run_leases" USING btree ("loop_id");--> statement-breakpoint
 CREATE INDEX "report_receipts_created" ON "run_report_receipts" USING btree ("created_at");--> statement-breakpoint
@@ -241,11 +156,5 @@ CREATE UNIQUE INDEX "runs_loop_run_index_idx" ON "runs" USING btree ("loop_id","
 CREATE INDEX "runs_loop_terminal_history_idx" ON "runs" USING btree ("loop_id","run_index") WHERE "runs"."run_index" IS NOT NULL AND "runs"."phase" IN ('done', 'error', 'canceled');--> statement-breakpoint
 CREATE UNIQUE INDEX "runs_loop_pending_idx" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'pending';--> statement-breakpoint
 CREATE UNIQUE INDEX "one_running_run_per_loop" ON "runs" USING btree ("loop_id") WHERE "runs"."phase" = 'running';--> statement-breakpoint
-CREATE INDEX "team_invites_team_idx" ON "team_invites" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_team_idx" ON "team_members" USING btree ("team_id");--> statement-breakpoint
-CREATE INDEX "team_members_user_idx" ON "team_members" USING btree ("user_id");--> statement-breakpoint
 CREATE INDEX "terminal_report_incidents_report_id" ON "terminal_report_incidents" USING btree ("report_id");--> statement-breakpoint
-CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");--> statement-breakpoint
-CREATE INDEX "account_userId_idx" ON "account" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "session_userId_idx" ON "session" USING btree ("user_id");--> statement-breakpoint
-CREATE INDEX "verification_identifier_idx" ON "verification" USING btree ("identifier");
+CREATE INDEX "terminal_report_incidents_created" ON "terminal_report_incidents" USING btree ("created_at");