@kky42/pievo-server 2.4.14 → 4.1.0

package/.output/server/_ssr/{MachinesModal-BaEtzycr.mjs → MachinesModal-CLBZxZkq.mjs}

@@ -1,26 +1,21 @@
 import { o as __toESM } from "../_runtime.mjs";
-import { Ft as machinePresence, pt as isOutdated } from "./loopTags-CXx5UdGf.mjs";
+import { E as isOutdated, F as machinePresence } from "./boot-DmpKtb0A.mjs";
 import { a as DialogClose, c as TooltipPopup, d as TooltipTrigger, f as TooltipRoot, g as require_react, h as require_jsx_runtime, i as DialogPopup, l as TooltipPositioner, n as DialogRoot, o as DialogBackdrop, r as DialogPortal, t as DialogTitle, u as TooltipPortal } from "../_libs/@base-ui/react+[...].mjs";
-import { n as createServerFn } from "./ssr.mjs";
-import { g as lifecyclePresentation, o as createSsrRpc, p as getConfig, s as daemonStopSupport } from "./auth-client-lSMb_Idt.mjs";
-import { C as lastRunOf, D as scheduleText, N as useHydrated, O as sectionHeadCls, S as labelCls, T as runPulseAnim, _ as fmt, c as btn, g as dur, h as dotOpacity, j as until, l as btnDanger, m as dotLabel, n as ErrorBanner, o as Pill, p as dotColor, t as ConfirmBar, u as btnPrimary, v as fnum, w as rel, x as inputCls } from "./actionUi-5HOCZnom.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/MachinesModal-BaEtzycr.js
+import { r as createServerFn } from "./ssr.mjs";
+import { c as getConfig, d as lifecyclePresentation, n as createSsrRpc, r as daemonStopSupport } from "./lifecycleUi-DEjM8Etm.mjs";
+import { C as lastRunOf, D as scheduleText, N as useHydrated, O as sectionHeadCls, S as labelCls, T as runPulseAnim, _ as fmt, c as btn, g as dur, h as dotOpacity, j as until, l as btnDanger, m as dotLabel, n as ErrorBanner, o as Pill, p as dotColor, t as ConfirmBar, u as btnPrimary, v as fnum, w as rel, x as inputCls } from "./actionUi-DE-Pb2tv.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/MachinesModal-CLBZxZkq.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**
-* Machine-management server functions. In auth mode, the signed-in user is the
-* sole human authorization boundary. Open mode intentionally shares all machine
-* administration, including reconnect tokens.
+* Machine-management server functions. Pievo is single-user: anyone who can
+* reach the dashboard administers every machine, including reconnect tokens.
 */
-/** Missing and out-of-scope machines both resolve to undefined. */
 var listMachines = createServerFn({ method: "GET" }).handler(createSsrRpc("aa46310016bb8a58b273a648ffd498c87f1f450d12827e30110a3b83ba6a27d9"));
 var createMachine = createServerFn({ method: "POST" }).handler(createSsrRpc("ed679b4e1e05e903a5d4ba4a70d9b9d883991ab22ed59b4d2d69078941818415"));
 var machineStatus = createServerFn({ method: "GET" }).validator((id) => id).handler(createSsrRpc("169566e7637a22599b4eb32ee3775574e99677406922bbef7482a102036c33dd"));
 var finalizeMachine = createServerFn({ method: "POST" }).validator((data) => data).handler(createSsrRpc("27d7eba0b6a2257949392fdd56057275a5c5366484ae01faf3b5897a225ecd83"));
-/**
-* Delete server-owned machine data without touching local project files. The
-* store rechecks ownership under the deletion lock in auth mode.
-*/
+/** Delete server-owned machine data without touching local project files. */
 var deleteMachine = createServerFn({ method: "POST" }).validator((id) => id).handler(createSsrRpc("a6384dc7154d9930422d29396f5de64b3ac69c62ad3824bc4a22d745fc07b293"));
 /** Merge two chronological (oldest-first) run lists, dedup by id (the first
 *  occurrence wins, so pass the fresher list first), re-sorted by ts ascending.
@@ -345,12 +340,24 @@ function daemonConnectCommand(origin, token, cli, customCli) {
 	const start = `${cli} daemon connect --server-url ${origin} --connect-key ${token}`;
 	return customCli ? start : `npm install -g @kky42/pievo@latest && ${start}`;
 }
+/** The server URL other devices should use. A dashboard opened on the server
+* itself sees a loopback origin, which no other device can reach, so prefer the
+* launcher-published network URL there. */
+function connectServerUrl(origin, publicUrl) {
+	if (!publicUrl) return origin;
+	try {
+		const host = new URL(origin).hostname;
+		return host === "localhost" || host === "[::1]" || host.startsWith("127.") ? publicUrl : origin;
+	} catch {
+		return publicUrl;
+	}
+}
 function daemonUpgradeCommand(cli, customCli) {
 	const restart = `${cli} daemon restart`;
 	return customCli ? restart : `npm install -g @kky42/pievo@latest && ${restart}`;
 }
-function connectCmd(token, cli, customCli) {
-	return daemonConnectCommand(typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:3000", token, cli, customCli);
+function connectCmd(token, config) {
+	return daemonConnectCommand(connectServerUrl(typeof window !== "undefined" ? window.location.origin : "http://127.0.0.1:3000", config.publicUrl), token, config.pievoCli, config.customCli);
 }
 function CopyButton({ text }) {
 	const [done, setDone] = (0, import_react.useState)(false);
@@ -364,6 +371,19 @@ function CopyButton({ text }) {
 		children: done ? "Copied ✓" : "Copy"
 	});
 }
+function UpgradeCommand({ cliConfig, configErr }) {
+	const command = cliConfig ? daemonUpgradeCommand(cliConfig.pievoCli, cliConfig.customCli) : null;
+	return command ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "flex items-start gap-2",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", {
+			className: "flex-1 overflow-x-auto whitespace-pre-wrap break-all rounded-control bg-display p-3 font-mono text-caption leading-relaxed text-paper",
+			children: command
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: command })]
+	}) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+		className: "text-label text-secondary",
+		children: configErr ? "Could not load the upgrade command. Close and try again." : "Loading upgrade command…"
+	});
+}
 function machineOrder(a, b) {
 	return a.name.localeCompare(b.name, void 0, {
 		numeric: true,
@@ -442,10 +462,6 @@ function MachinesModal({ open, onClose }) {
 		setDelErr(null);
 		try {
 			const r = await createMachine();
-			if ("error" in r) {
-				setDelErr(r.error);
-				return;
-			}
 			setStatus(null);
 			setName("");
 			setPending(r);
@@ -499,8 +515,8 @@ function MachinesModal({ open, onClose }) {
 					className: "mt-2 flex items-start gap-2",
 					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", {
 						className: "flex-1 overflow-x-auto whitespace-pre-wrap break-all rounded-control bg-display p-4 font-mono text-label leading-relaxed text-paper",
-						children: connectCmd(pending.token, cliConfig.pievoCli, cliConfig.customCli)
-					}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: connectCmd(pending.token, cliConfig.pievoCli, cliConfig.customCli) })]
+						children: connectCmd(pending.token, cliConfig)
+					}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: connectCmd(pending.token, cliConfig) })]
 				}) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 					className: "mt-2 text-body text-secondary",
 					children: configErr ? "Could not load the connection command. Close and try again." : "Loading connection command…"
@@ -619,7 +635,7 @@ function MachinesModal({ open, onClose }) {
 							}),
 							confirmDelete === m.id && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ConfirmBar, {
 								prompt: `Delete ${m.name} and ${m.loopCount} loop${m.loopCount === 1 ? "" : "s"}?`,
-								note: `This permanently deletes the machine, ${m.loopCount} loop${m.loopCount === 1 ? "" : "s"}, and their server history and artifact metadata. Local project files are not deleted, but an unreachable local agent may continue running.`,
+								note: `This permanently deletes the machine, ${m.loopCount} loop${m.loopCount === 1 ? "" : "s"}, and their server history, memory, and artifacts. Local project files are not deleted, but an unreachable local agent may continue running.`,
 								cta: "Delete machine",
 								danger: true,
 								busy: deleting,
@@ -638,10 +654,6 @@ function MachinesModal({ open, onClose }) {
 								className: "text-label text-accent",
 								children: "Daemon upgrade required to stop a running process"
 							}),
-							!m.online && !m.token && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-								className: "text-label text-secondary",
-								children: "Reconnect command available from the machine owner's account."
-							}),
 							!m.online && m.token && !cliConfig && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 								className: "text-label text-secondary",
 								children: configErr ? "Could not load the reconnect command. Close and try again." : "Loading reconnect command…"
@@ -653,8 +665,8 @@ function MachinesModal({ open, onClose }) {
 								className: "mt-2 flex items-start gap-2",
 								children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", {
 									className: "flex-1 overflow-x-auto whitespace-pre-wrap break-all rounded-control bg-display p-3 font-mono text-caption leading-relaxed text-paper",
-									children: connectCmd(m.token, cliConfig.pievoCli, cliConfig.customCli)
-								}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: connectCmd(m.token, cliConfig.pievoCli, cliConfig.customCli) })]
+									children: connectCmd(m.token, cliConfig)
+								}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: connectCmd(m.token, cliConfig) })]
 							})] }),
 							m.needsUpdate && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 								className: "flex flex-col gap-1.5 rounded-control border border-warn/40 bg-warn/10 p-3",
@@ -672,15 +684,9 @@ function MachinesModal({ open, onClose }) {
 											m.requiredDaemonVersion
 										]
 									}),
-									cliConfig ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-										className: "flex items-start gap-2",
-										children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", {
-											className: "flex-1 overflow-x-auto whitespace-pre-wrap break-all rounded-control bg-display p-3 font-mono text-caption leading-relaxed text-paper",
-											children: daemonUpgradeCommand(cliConfig.pievoCli, cliConfig.customCli)
-										}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: daemonUpgradeCommand(cliConfig.pievoCli, cliConfig.customCli) })]
-									}) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-										className: "text-label text-secondary",
-										children: configErr ? "Could not load the upgrade command. Close and try again." : "Loading upgrade command…"
+									/* @__PURE__ */ (0, import_jsx_runtime.jsx)(UpgradeCommand, {
+										cliConfig,
+										configErr
 									})
 								]
 							}),
@@ -695,15 +701,9 @@ function MachinesModal({ open, onClose }) {
 										m.latestDaemonVersion,
 										")"
 									]
-								}), cliConfig ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-									className: "flex items-start gap-2",
-									children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("pre", {
-										className: "flex-1 overflow-x-auto whitespace-pre-wrap break-all rounded-control bg-display p-3 font-mono text-caption leading-relaxed text-paper",
-										children: daemonUpgradeCommand(cliConfig.pievoCli, cliConfig.customCli)
-									}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(CopyButton, { text: daemonUpgradeCommand(cliConfig.pievoCli, cliConfig.customCli) })]
-								}) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-									className: "text-label text-secondary",
-									children: configErr ? "Could not load the upgrade command. Close and try again." : "Loading upgrade command…"
+								}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(UpgradeCommand, {
+									cliConfig,
+									configErr
 								})]
 							})
 						]
@@ -723,4 +723,4 @@ function MachinesModal({ open, onClose }) {
 	});
 }
 //#endregion
-export { Timeline as a, mergeRuns as c, ModalHead as i, MachinesModal as n, daemonConnectCommand as o, Modal as r, listMachines as s, LoopOverview as t };
+export { Timeline as a, listMachines as c, ModalHead as i, mergeRuns as l, MachinesModal as n, connectServerUrl as o, Modal as r, daemonConnectCommand as s, LoopOverview as t };

package/.output/server/_ssr/MarkdownView-D1J7ImYF.mjs

@@ -0,0 +1,70 @@
+import { o as __toESM } from "../_runtime.mjs";
+import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { t as purify } from "../_libs/dompurify.mjs";
+import { t as g } from "../_libs/marked.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/MarkdownView-D1J7ImYF.js
+var import_react = /* @__PURE__ */ __toESM(require_react());
+var import_jsx_runtime = require_jsx_runtime();
+/**
+* Shared markdown → sanitized HTML pipeline: marked (GFM) → DOMPurify (an
+* allowlisted prose subset, NO script/handlers). ONE sanitizer config for every
+* loop-file markdown surface so the allowlist cannot drift between viewers.
+* Render the output under
+* the `.artifact-markdown` styles.
+*/
+var MD_SANITIZE = {
+	ALLOWED_TAGS: [
+		"h1",
+		"h2",
+		"h3",
+		"h4",
+		"h5",
+		"h6",
+		"p",
+		"br",
+		"hr",
+		"strong",
+		"b",
+		"em",
+		"i",
+		"del",
+		"s",
+		"code",
+		"pre",
+		"blockquote",
+		"ul",
+		"ol",
+		"li",
+		"a",
+		"span",
+		"table",
+		"thead",
+		"tbody",
+		"tr",
+		"th",
+		"td",
+		"img"
+	],
+	ALLOWED_ATTR: [
+		"href",
+		"title",
+		"target",
+		"rel",
+		"src",
+		"alt"
+	]
+};
+function renderMarkdown(content) {
+	return purify.sanitize(g.parse(content, {
+		async: false,
+		gfm: true
+	}), MD_SANITIZE);
+}
+function MarkdownView({ content }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+		className: "artifact-markdown px-5 py-4",
+		dangerouslySetInnerHTML: { __html: (0, import_react.useMemo)(() => renderMarkdown(content), [content]) }
+	});
+}
+//#endregion
+export { MarkdownView as t };

package/.output/server/_ssr/{actionUi-5HOCZnom.mjs → actionUi-DE-Pb2tv.mjs}

@@ -1,6 +1,6 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/actionUi-5HOCZnom.js
+//#region node_modules/.nitro/vite/services/ssr/assets/actionUi-DE-Pb2tv.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 var fmt = (t) => t ? new Date(t).toLocaleString() : "—";
@@ -169,7 +169,6 @@ var btn = `${btnBase} border border-wire bg-surface text-primary hover:bg-raised
 var btnPrimary = `${btnBase} border border-display bg-display text-paper hover:opacity-85`;
 var btnDanger = `${btnBase} border border-transparent bg-rubik-red text-white hover:opacity-85`;
 var btnSm = `inline-flex shrink-0 cursor-pointer items-center gap-1 rounded-full border border-wire bg-surface px-3 py-1 text-label font-medium text-primary transition-colors duration-150 hover:bg-raised disabled:cursor-default disabled:opacity-40 ${focusRing}`;
-`${focusRing}`;
 var btnQuiet = "inline-flex cursor-pointer items-center gap-1.5 border-none bg-transparent p-0 text-meta font-medium text-secondary transition-colors hover:text-display";
 var sectionHeadCls = "text-label font-semibold text-secondary";
 var labelCls = "mb-1.5 mt-3 block text-label font-medium text-secondary";

package/.output/server/_ssr/artifactFiles-B0NPRDOR.mjs

@@ -0,0 +1,52 @@
+import { D as listArtifacts, b as getArtifactFile, c as getLoopFiles } from "./boot-DmpKtb0A.mjs";
+import { n as toArtifactSummary } from "./loopProjection-DdFivf7-.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/artifactFiles-B0NPRDOR.js
+/**
+* Server-side reads over a loop's current files (MEMORY.md + artifacts). Pure helpers
+* (no request/session context) so they're shared by the lazy server fns
+* (`getArtifacts` / `getArtifact` in loopApi) AND the download route, and are
+* directly unit-testable against an injected blob store.
+*
+* The bytes live in the gateway's local BlobStore; here we only read them — never write — so the feature is strictly read-only and
+* the server's zero-exec invariant holds (it decodes text, never interprets it).
+*/
+async function listLoopArtifacts(loopId) {
+	return (await listArtifacts(loopId)).map(toArtifactSummary);
+}
+/**
+* One file's content for inline display: decoded text for a text file, or a
+* binary/oversize marker (the UI then offers the download route). Returns an
+* error marker for an unknown/tombstoned name or a row whose blob bytes are
+* absent — never throws.
+*/
+async function readLoopArtifact(loopId, rawPath) {
+	const row = await getArtifactFile(loopId, rawPath);
+	if (!row || row.deleted) return { error: "file not found" };
+	if (row.binary || row.oversize) return {
+		binary: true,
+		size: row.size ?? null,
+		oversize: row.oversize
+	};
+	if (!row.hash) return { error: "file has no stored version" };
+	const bytes = await (await getLoopFiles()).readBlob(row.hash);
+	if (!bytes) return { error: "file not found" };
+	return { text: bytes.toString("utf8") };
+}
+/**
+* Resolve a loop file name to its stored bytes for the download route. Names are
+* matched exactly against stored rows; tombstoned/absent → 404. The bytes stream straight from the BlobStore.
+*/
+async function readLoopArtifactBytes(loopId, rawPath) {
+	const row = await getArtifactFile(loopId, rawPath);
+	if (!row || row.deleted || !row.hash) return { status: 404 };
+	const bytes = await (await getLoopFiles()).readBlob(row.hash);
+	if (!bytes) return { status: 404 };
+	return {
+		status: 200,
+		bytes,
+		binary: row.binary,
+		filename: rawPath
+	};
+}
+//#endregion
+export { listLoopArtifacts, readLoopArtifact, readLoopArtifactBytes };

package/.output/server/_ssr/{artifactKind-DwDr8IYc.mjs → artifactKind-a2oxT2wQ.mjs}

@@ -1,19 +1,13 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { f as getAuthState } from "./auth-client-lSMb_Idt.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/artifactKind-DwDr8IYc.js
-var $$splitComponentImporter = () => import("./loops._loopId-CXgw2Rz1.mjs");
+//#region node_modules/.nitro/vite/services/ssr/assets/artifactKind-a2oxT2wQ.js
+var $$splitComponentImporter = () => import("./loops._loopId-DVCvGSEc.mjs");
 /**
 * Loop detail page — `/loops/$loopId`: a loop header and action toolbar, the
-* exact artifact Files panel, and the runs timeline. The view owns its own
-* data + self-poll (ssr:false so the session cookie rides along with its fetches,
-* like the dashboard loader). Run rows link on to `/loops/$loopId/runs/$runId`.
-*
-* Auth-gated exactly like the dashboard (`/`): Better Auth's session hook keeps a
-* logged-out or expired deep link from mounting the ownership-scoped data view.
+* loop Files panel, and the runs timeline. The view owns its own data + self-poll.
+* Run rows link on to `/loops/$loopId/runs/$runId`.
 */
 var Route = createFileRoute("/loops/$loopId")({
 	ssr: false,
-	loader: async () => ({ auth: await getAuthState() }),
 	component: lazyRouteComponent($$splitComponentImporter, "component")
 });
 /** Extension → MIME for the image types we serve inline. This is an ALLOWLIST: