@kky42/pievo-server 2.4.14 → 4.1.0

package/.output/server/_ssr/{loops._loopId-CXgw2Rz1.mjs → loops._loopId-DVCvGSEc.mjs}

@@ -1,19 +1,17 @@
 import { o as __toESM } from "../_runtime.mjs";
-import { Nn as validateLoopTags, s as CODING_AGENTS } from "./loopTags-CXx5UdGf.mjs";
+import { J as validateLoopTags, h as CODING_AGENTS } from "./boot-DmpKtb0A.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { d as useNavigate, u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
-import { E as stopLoop, O as useSession, S as runLoop, T as startLoop, b as patchLoop, c as deleteLoop, d as getArtifacts, i as OpenModeWarning, l as deriveLoopLifecycle, m as getLoopDetail, s as daemonStopSupport, t as DAEMON_UPGRADE_REQUIRED, u as getArtifact, v as loadOlderRuns, x as pauseLoop } from "./auth-client-lSMb_Idt.mjs";
-import { A as tsShort, E as runPulseStyle, M as useFlash, O as sectionHeadCls, S as labelCls, _ as fmt, a as Loading, b as humanBytes, c as btn, d as btnQuiet, g as dur, i as LoadErrorCard, k as selectCls, l as btnDanger, m as dotLabel, n as ErrorBanner, p as dotColor, r as FlashLine, t as ConfirmBar, u as btnPrimary, w as rel, x as inputCls, y as focusRing } from "./actionUi-5HOCZnom.mjs";
-import { a as Timeline, c as mergeRuns, n as MachinesModal, t as LoopOverview } from "./MachinesModal-BaEtzycr.mjs";
-import { n as artifactKind, t as Route } from "./artifactKind-DwDr8IYc.mjs";
-import { t as SignIn } from "./SignIn-sHQaBQJC.mjs";
-import { t as purify } from "../_libs/dompurify.mjs";
-import { t as g } from "../_libs/marked.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-CXgw2Rz1.js
+import { _ as runLoop, a as deriveLoopLifecycle, g as pauseLoop, h as patchLoop, i as deleteLoop, l as getLoopDetail, o as getArtifact, p as loadOlderRuns, r as daemonStopSupport, s as getArtifacts, t as DAEMON_UPGRADE_REQUIRED, v as startLoop, y as stopLoop } from "./lifecycleUi-DEjM8Etm.mjs";
+import { A as tsShort, E as runPulseStyle, M as useFlash, O as sectionHeadCls, S as labelCls, _ as fmt, a as Loading, b as humanBytes, c as btn, d as btnQuiet, g as dur, i as LoadErrorCard, k as selectCls, l as btnDanger, m as dotLabel, n as ErrorBanner, p as dotColor, r as FlashLine, t as ConfirmBar, u as btnPrimary, w as rel, x as inputCls, y as focusRing } from "./actionUi-DE-Pb2tv.mjs";
+import { a as Timeline, l as mergeRuns, n as MachinesModal, t as LoopOverview } from "./MachinesModal-CLBZxZkq.mjs";
+import { n as artifactKind, t as Route } from "./artifactKind-a2oxT2wQ.mjs";
+import { t as MarkdownView } from "./MarkdownView-D1J7ImYF.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId-DVCvGSEc.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
-/** Download URL for one artifact. Each path segment is encoded independently so
-* nested artifact paths continue to match the catch-all route. */
+/** Download URL for one loop file. Each path segment is encoded independently so
+* the name continues to match the catch-all route. */
 function downloadHref(loopId, path) {
 	const encodedPath = path.split("/").map(encodeURIComponent).join("/");
 	return `/api/artifact/${encodeURIComponent(loopId)}/${encodedPath}`;
@@ -22,67 +20,6 @@ function inlineHref(loopId, path) {
 	return `${downloadHref(loopId, path)}?view=inline`;
 }
 /**
-* Shared markdown → sanitized HTML pipeline: marked (GFM) → DOMPurify (an
-* allowlisted prose subset, NO script/handlers). ONE sanitizer config for every
-* artifact markdown surface so the allowlist cannot drift between viewers.
-* Render the output under
-* the `.artifact-markdown` styles.
-*/
-var MD_SANITIZE = {
-	ALLOWED_TAGS: [
-		"h1",
-		"h2",
-		"h3",
-		"h4",
-		"h5",
-		"h6",
-		"p",
-		"br",
-		"hr",
-		"strong",
-		"b",
-		"em",
-		"i",
-		"del",
-		"s",
-		"code",
-		"pre",
-		"blockquote",
-		"ul",
-		"ol",
-		"li",
-		"a",
-		"span",
-		"table",
-		"thead",
-		"tbody",
-		"tr",
-		"th",
-		"td",
-		"img"
-	],
-	ALLOWED_ATTR: [
-		"href",
-		"title",
-		"target",
-		"rel",
-		"src",
-		"alt"
-	]
-};
-function renderMarkdown(content) {
-	return purify.sanitize(g.parse(content, {
-		async: false,
-		gfm: true
-	}), MD_SANITIZE);
-}
-function MarkdownView({ content }) {
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-		className: "artifact-markdown px-5 py-4",
-		dangerouslySetInnerHTML: { __html: (0, import_react.useMemo)(() => renderMarkdown(content), [content]) }
-	});
-}
-/**
 * Shared pieces of the artifact content viewer. The Files panel uses this one
 * dispatch so binary/oversize copy and type-appropriate rendering cannot drift.
 *
@@ -97,8 +34,8 @@ function MarkdownView({ content }) {
 *             rides as an image, which does not execute embedded scripts).
 *  - markdown → the shared markdown pipeline (Preview) with a raw Source toggle.
 *  - text   → monospace source.
-* Everything keeps a Download fallback; an oversize (metadata-only) artifact has
-* no synced bytes to render, so it says so rather than showing an empty pane.
+* Everything keeps a Download fallback; a legacy oversize/binary entry has no
+* renderable bytes, so it says so rather than showing an empty pane.
 */
 function ViewerHead({ path, meta, action }) {
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
@@ -277,7 +214,6 @@ function ArtifactBody({ loopId, file }) {
 		kind
 	}, file.path);
 }
-var basename = (path) => path.split("/").pop() || path;
 function LoopFilesPanel({ loopId, configuredPaths, running }) {
 	const [artifacts, setArtifacts] = (0, import_react.useState)(null);
 	const [selected, setSelected] = (0, import_react.useState)(null);
@@ -310,14 +246,19 @@ function LoopFilesPanel({ loopId, configuredPaths, running }) {
 			className: "mb-2.5 flex items-end justify-between gap-3 border-b border-hairline pb-1.5",
 			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("h2", {
 				className: "text-label font-semibold text-secondary",
-				children: ["Artifacts", artifacts ? ` (${files.length})` : ""]
+				children: ["Files", artifacts ? ` (${files.length})` : ""]
 			}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
 				className: "text-caption font-medium text-disabled",
-				children: ["Configured exact paths: ", configuredPaths.length]
+				children: [
+					"MEMORY.md + ",
+					configuredPaths.length,
+					" artifact",
+					configuredPaths.length === 1 ? "" : "s"
+				]
 			})]
 		}), files.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 			className: "rounded-card border border-hairline bg-surface px-5 py-10 text-center text-body text-disabled shadow-card",
-			children: artifacts == null ? "Loading…" : configuredPaths.length ? "No configured artifact has been collected yet." : "No artifact paths configured."
+			children: artifacts == null ? "Loading…" : "No loop file has been written yet. Runs create MEMORY.md and any configured artifacts."
 		}) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 			className: "grid h-[min(600px,68vh)] grid-cols-1 overflow-hidden rounded-card border border-hairline bg-surface shadow-card sm:grid-cols-[210px_1fr]",
 			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("nav", {
@@ -330,17 +271,10 @@ function LoopFilesPanel({ loopId, configuredPaths, running }) {
 							type: "button",
 							onClick: () => setSelected(file.path),
 							className: `flex w-full items-center border-l-2 px-3 py-2 text-left transition-colors ${activeRow ? "border-display bg-raised" : "border-transparent hover:bg-raised/60"}`,
-							children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
-								className: "min-w-0 flex-1",
-								children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-									className: `block truncate font-mono text-label ${activeRow ? "text-display" : "text-primary"}`,
-									title: file.path,
-									children: basename(file.path)
-								}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-									className: "block truncate font-mono text-micro text-disabled",
-									title: file.path,
-									children: file.path
-								})]
+							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+								className: `block min-w-0 flex-1 truncate font-mono text-label ${activeRow ? "text-display" : "text-primary"}`,
+								title: file.path,
+								children: file.path
 							})
 						}) }, file.path);
 					})
@@ -349,7 +283,7 @@ function LoopFilesPanel({ loopId, configuredPaths, running }) {
 				className: "min-w-0 overflow-y-auto",
 				children: active && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(ViewerHead, {
 					path: active.path,
-					meta: [active.size != null ? humanBytes(active.size) : "", `collected ${fmt(active.updatedAt)}`].filter(Boolean).join(" · ")
+					meta: [active.size != null ? humanBytes(active.size) : "", `updated ${fmt(active.updatedAt)}`].filter(Boolean).join(" · ")
 				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ArtifactBody, {
 					loopId,
 					file: active
@@ -529,7 +463,7 @@ var LoopForm = (0, import_react.forwardRef)(function LoopForm({ initial }, ref)
 				noChange: form.noChange,
 				block: form.block
 			},
-			artifacts: form.artifacts.split(/\r?\n/).filter((path) => path.length > 0)
+			artifacts: form.artifacts.split(/\r?\n/).filter((name) => name.length > 0)
 		};
 	} }));
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
@@ -757,10 +691,10 @@ var LoopForm = (0, import_react.forwardRef)(function LoopForm({ initial }, ref)
 				}),
 				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Section, {
 					title: "Artifacts",
-					hint: "Optional exact paths relative to the working directory. One path per line; globs are not supported."
+					hint: "Optional .md or .html file names (up to 4, 2 MB each) that runs update and the dashboard renders. One name per line. Every loop also has MEMORY.md."
 				}),
 				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(TextArea, {
-					label: "Artifact paths",
+					label: "Artifact files",
 					value: form.artifacts,
 					onChange: (value) => set("artifacts", value),
 					rows: 6,
@@ -1034,7 +968,7 @@ function LoopDetailView({ id }) {
 							className: "mt-3",
 							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(ConfirmBar, {
 								prompt: "Stop this loop and delete its server data?",
-								note: "This stops the loop and deletes server history and collected artifacts. Files in the working directory are not deleted. If the machine is unreachable, its local process may continue running.",
+								note: "This stops the loop and deletes server history, the loop memory, and artifacts. Files in the working directory are not deleted. If the machine is unreachable, its local process may continue running.",
 								cta: "Delete",
 								danger: true,
 								busy,
@@ -1145,13 +1079,13 @@ function LoopDetailView({ id }) {
 							})
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Config, {
-							label: "Artifact paths",
+							label: "Artifacts",
 							children: loop.artifacts.length ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", {
 								className: "space-y-1",
-								children: loop.artifacts.map((path) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", {
+								children: loop.artifacts.map((name) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", {
 									className: "break-all font-mono",
-									children: path
-								}) }, path))
+									children: name
+								}) }, name))
 							}) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
 								className: "text-disabled",
 								children: "None"
@@ -1206,7 +1140,7 @@ function EditHead({ name, onBack }) {
 		}),
 		/* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
 			className: "mt-1.5 text-meta text-secondary",
-			children: "Edit tags, schedule, execution settings, prompt, status definitions, and exact artifact paths."
+			children: "Edit tags, schedule, execution settings, prompt, status definitions, and artifact files."
 		})
 	] });
 }
@@ -1286,26 +1220,12 @@ function RunsSection({ loopId, summary, runs, older, onMore, onPickRun }) {
 }
 /**
 * Loop detail page — `/loops/$loopId`: a loop header and action toolbar, the
-* exact artifact Files panel, and the runs timeline. The view owns its own
-* data + self-poll (ssr:false so the session cookie rides along with its fetches,
-* like the dashboard loader). Run rows link on to `/loops/$loopId/runs/$runId`.
-*
-* Auth-gated exactly like the dashboard (`/`): Better Auth's session hook keeps a
-* logged-out or expired deep link from mounting the ownership-scoped data view.
+* loop Files panel, and the runs timeline. The view owns its own data + self-poll.
+* Run rows link on to `/loops/$loopId/runs/$runId`.
 */
 function LoopDetailPage() {
 	const { loopId } = Route.useParams();
-	const { auth } = Route.useLoaderData() ?? { auth: { enabled: false } };
-	const { data: session, isPending } = useSession();
-	if (auth.enabled && isPending) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
-		className: "mx-auto max-w-[1360px] px-8 pt-10",
-		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Loading, {})
-	});
-	if (auth.enabled && !session) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}` });
-	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_jsx_runtime.Fragment, { children: [!auth.enabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-		className: "mx-auto max-w-[1360px] px-8 pt-6",
-		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, {})
-	}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LoopDetailView, { id: loopId })] });
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LoopDetailView, { id: loopId });
 }
 //#endregion
 export { LoopDetailPage as component };

package/.output/server/_ssr/{loops._loopId_.runs._runId-SASSqOfy.mjs → loops._loopId_.runs._runId-BXbTfLlC.mjs}

@@ -1,11 +1,11 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { u as Link } from "../_libs/@tanstack/react-router+[...].mjs";
-import { D as stopRun, O as useSession, h as getRunDiff, i as OpenModeWarning, m as getLoopDetail, v as loadOlderRuns } from "./auth-client-lSMb_Idt.mjs";
-import { E as runPulseStyle, O as sectionHeadCls, _ as fmt, a as Loading, b as humanBytes, c as btn, g as dur, i as LoadErrorCard, l as btnDanger, o as Pill, s as StatusPill, v as fnum } from "./actionUi-5HOCZnom.mjs";
-import { t as SignIn } from "./SignIn-sHQaBQJC.mjs";
-import { t as Route } from "./loops._loopId_.runs._runId-Dk94Z0Jq.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-SASSqOfy.js
+import { b as stopRun, l as getLoopDetail, p as loadOlderRuns, u as getRunDiff } from "./lifecycleUi-DEjM8Etm.mjs";
+import { E as runPulseStyle, O as sectionHeadCls, _ as fmt, a as Loading, b as humanBytes, c as btn, g as dur, i as LoadErrorCard, l as btnDanger, o as Pill, s as StatusPill, v as fnum } from "./actionUi-DE-Pb2tv.mjs";
+import { t as MarkdownView } from "./MarkdownView-D1J7ImYF.mjs";
+import { t as Route } from "./loops._loopId_.runs._runId-Dr6E-FA5.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-BXbTfLlC.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 /**
@@ -463,8 +463,8 @@ function RunDetailView({ loopId, runId }) {
 				type: "button",
 				onClick: onStop,
 				className: btnDanger,
-				disabled: run.phase === "running" && detail.machine.daemonProtocol !== 4,
-				title: run.phase === "running" && detail.machine.daemonProtocol !== 4 ? "Daemon upgrade required to stop a running process. Run `npm install -g @kky42/pievo@latest`, then `pievo daemon restart`." : void 0,
+				disabled: run.phase === "running" && detail.machine.daemonProtocol !== 5,
+				title: run.phase === "running" && detail.machine.daemonProtocol !== 5 ? "Daemon upgrade required to stop a running process. Run `npm install -g @kky42/pievo@latest`, then `pievo daemon restart`." : void 0,
 				children: "Stop run"
 			})]
 		})]
@@ -528,15 +528,25 @@ function RunDetailView({ loopId, runId }) {
 						]
 					})
 				}),
+				run.fileNotices && run.fileNotices.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Card, {
+					label: "Loop files not kept",
+					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("ul", {
+						className: "list-disc space-y-1.5 pl-5 text-body text-primary",
+						children: run.fileNotices.map((notice) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("li", {
+							className: "break-words",
+							children: notice
+						}, notice))
+					})
+				}),
 				run.message && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Card, {
 					label: "Report",
 					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-						className: "whitespace-pre-wrap break-words rounded-control border border-hairline bg-raised px-4 py-3.5 text-body leading-relaxed text-primary",
-						children: run.message
+						className: "break-words rounded-control border border-hairline bg-raised text-body leading-relaxed text-primary",
+						children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(MarkdownView, { content: run.message })
 					})
 				}),
 				/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Changes, { run }),
-				run.finalText && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Card, {
+				run.finalText && !run.message && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Card, {
 					label: "Final output",
 					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 						className: "whitespace-pre-wrap break-words text-body text-primary",
@@ -593,41 +603,27 @@ function RunDetailView({ loopId, runId }) {
 * `_` on the `$loopId` segment opts it out of the loop page's component so the run
 * gets its own full surface, deep-linkable + browser-back friendly) rather than a
 * modal or an inline panel. It resolves the run from the loop's detail payload
-* (reusing getLoopDetail) and the existing artifact diff.
-*
-* Auth-gated like the dashboard (`/`) so Better Auth's session hook keeps a
-* logged-out or expired deep link from mounting the run view.
+* (reusing getLoopDetail) and the existing loop-file diff.
 */
 function RunDetailPage() {
 	const { loopId, runId } = Route.useParams();
-	const { auth } = Route.useLoaderData() ?? { auth: { enabled: false } };
-	const { data: session, isPending } = useSession();
-	if (auth.enabled && isPending) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
-		className: "mx-auto max-w-[1360px] px-8 pt-10",
-		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Loading, {})
-	});
-	if (auth.enabled && !session) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SignIn, { callbackURL: `/loops/${loopId}/runs/${runId}` });
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("main", {
 		className: "mx-auto max-w-[1360px] px-8 pb-24 pt-6",
-		children: [
-			!auth.enabled && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, { className: "mb-6" }),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-				className: "mb-5",
-				children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link, {
-					to: "/loops/$loopId",
-					params: { loopId },
-					className: "inline-flex items-center gap-1.5 text-label font-medium text-secondary transition-colors hover:text-display",
-					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-						"aria-hidden": true,
-						children: "←"
-					}), " Back to loop"]
-				})
-			}),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(RunDetailView, {
-				loopId,
-				runId
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+			className: "mb-5",
+			children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link, {
+				to: "/loops/$loopId",
+				params: { loopId },
+				className: "inline-flex items-center gap-1.5 text-label font-medium text-secondary transition-colors hover:text-display",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+					"aria-hidden": true,
+					children: "←"
+				}), " Back to loop"]
 			})
-		]
+		}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RunDetailView, {
+			loopId,
+			runId
+		})]
 	});
 }
 //#endregion

package/.output/server/_ssr/{loops._loopId_.runs._runId-Dk94Z0Jq.mjs → loops._loopId_.runs._runId-Dr6E-FA5.mjs}

@@ -1,20 +1,15 @@
 import { c as createFileRoute, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { f as getAuthState } from "./auth-client-lSMb_Idt.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-Dk94Z0Jq.js
-var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-SASSqOfy.mjs");
+//#region node_modules/.nitro/vite/services/ssr/assets/loops._loopId_.runs._runId-Dr6E-FA5.js
+var $$splitComponentImporter = () => import("./loops._loopId_.runs._runId-BXbTfLlC.mjs");
 /**
 * Run detail PAGE — `/loops/$loopId/runs/$runId`. A standalone page (the trailing
 * `_` on the `$loopId` segment opts it out of the loop page's component so the run
 * gets its own full surface, deep-linkable + browser-back friendly) rather than a
 * modal or an inline panel. It resolves the run from the loop's detail payload
-* (reusing getLoopDetail) and the existing artifact diff.
-*
-* Auth-gated like the dashboard (`/`) so Better Auth's session hook keeps a
-* logged-out or expired deep link from mounting the run view.
+* (reusing getLoopDetail) and the existing loop-file diff.
 */
 var Route = createFileRoute("/loops/$loopId_/runs/$runId")({
 	ssr: false,
-	loader: async () => ({ auth: await getAuthState() }),
 	component: lazyRouteComponent($$splitComponentImporter, "component")
 });
 //#endregion

package/.output/server/_ssr/{machineFns-BSrIgn3f.mjs → machineFns-DLRHgDdS.mjs}

@@ -1,17 +1,7 @@
-import { Et as listMachinesForUser, G as forceDeleteMachine, Lt as mintDeviceToken, Nt as loopsForMachine, Pt as machineIdFromToken, Sn as sha256, Tt as listMachines$1, et as getMachine, j as createMachine$1, jn as updateMachine } from "./loopTags-CXx5UdGf.mjs";
-import { a as daemonNeedsUpdate, n as MIN_DAEMON_VERSION, o as ensureServer } from "./boot-C472kLwY.mjs";
-import { requestScope } from "./auth-0AamrwHo.mjs";
-import { n as createServerFn } from "./ssr.mjs";
+import { H as sha256, I as mintDeviceToken, N as loopsForMachine, P as machineIdFromToken, S as getMachine, _ as createMachine$1, k as listMachines$1, o as daemonNeedsUpdate, q as updateMachine, s as ensureServer, t as MIN_DAEMON_VERSION, y as forceDeleteMachine } from "./boot-DmpKtb0A.mjs";
+import { r as createServerFn } from "./ssr.mjs";
 import { t as createServerRpc } from "./createServerRpc-BD8Xn_0_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/machineFns-BSrIgn3f.js
-/** Open mode sees every machine; auth mode sees only the signed-in owner's rows. */
-function machineInScope(machine, scope) {
-	return !scope.enforce || !!scope.userId && machine.userId === scope.userId;
-}
-/** A device token fully impersonates its machine, so auth mode keeps it owner-only. */
-function tokenVisibleTo(machine, scope) {
-	return machineInScope(machine, scope);
-}
+//#region node_modules/.nitro/vite/services/ssr/assets/machineFns-DLRHgDdS.js
 /**
 * Latest published @kky42/pievo version — a cached, fail-silent lookup of the
 * npm dist-tag `latest`, so the web can tell a user their daemon is outdated and
@@ -93,21 +83,10 @@ var LatestDaemonVersion = class {
 };
 var latestDaemonVersion = new LatestDaemonVersion();
 /**
-* Machine-management server functions. In auth mode, the signed-in user is the
-* sole human authorization boundary. Open mode intentionally shares all machine
-* administration, including reconnect tokens.
+* Machine-management server functions. Pievo is single-user: anyone who can
+* reach the dashboard administers every machine, including reconnect tokens.
 */
-/** Missing and out-of-scope machines both resolve to undefined. */
-async function scopedMachine(id) {
-	const scope = await requestScope();
-	if (scope.enforce && !scope.userId) return { scope };
-	const candidate = await getMachine(id);
-	return {
-		scope,
-		machine: candidate && machineInScope(candidate, scope) ? candidate : void 0
-	};
-}
-async function toSummary(machine, scope) {
+async function toSummary(machine) {
 	return {
 		id: machine.id,
 		name: machine.name,
@@ -121,7 +100,7 @@ async function toSummary(machine, scope) {
 		latestDaemonVersion: latestDaemonVersion.get(),
 		needsUpdate: daemonNeedsUpdate(machine.daemonVersion),
 		requiredDaemonVersion: MIN_DAEMON_VERSION,
-		token: tokenVisibleTo(machine, scope) ? machine.token ?? null : null,
+		token: machine.token ?? null,
 		loopCount: (await loopsForMachine(machine.id)).length
 	};
 }
@@ -132,10 +111,8 @@ var listMachines_createServerFn_handler = createServerRpc({
 }, (opts) => listMachines.__executeServer(opts));
 var listMachines = createServerFn({ method: "GET" }).handler(listMachines_createServerFn_handler, async () => {
 	await ensureServer();
-	const scope = await requestScope();
-	if (scope.enforce && !scope.userId) return [];
-	const machines = scope.enforce ? await listMachinesForUser(scope.userId) : await listMachines$1();
-	return Promise.all(machines.filter((machine) => machine.name.trim()).map((machine) => toSummary(machine, scope)));
+	const machines = await listMachines$1();
+	return Promise.all(machines.filter((machine) => machine.name.trim()).map(toSummary));
 });
 var createMachine_createServerFn_handler = createServerRpc({
 	id: "ed679b4e1e05e903a5d4ba4a70d9b9d883991ab22ed59b4d2d69078941818415",
@@ -144,13 +121,10 @@ var createMachine_createServerFn_handler = createServerRpc({
 }, (opts) => createMachine.__executeServer(opts));
 var createMachine = createServerFn({ method: "POST" }).handler(createMachine_createServerFn_handler, async () => {
 	await ensureServer();
-	const scope = await requestScope();
-	if (scope.enforce && !scope.userId) return { error: "not signed in" };
 	const token = mintDeviceToken();
 	const id = machineIdFromToken(token);
 	await createMachine$1({
 		id,
-		userId: scope.userId ?? "shared",
 		name: "",
 		tokenHash: sha256(token),
 		token,
@@ -168,8 +142,8 @@ var machineStatus_createServerFn_handler = createServerRpc({
 }, (opts) => machineStatus.__executeServer(opts));
 var machineStatus = createServerFn({ method: "GET" }).validator((id) => id).handler(machineStatus_createServerFn_handler, async ({ data: id }) => {
 	await ensureServer();
-	const { scope, machine } = await scopedMachine(id);
-	return machine ? toSummary(machine, scope) : null;
+	const machine = await getMachine(id);
+	return machine ? toSummary(machine) : null;
 });
 var finalizeMachine_createServerFn_handler = createServerRpc({
 	id: "27d7eba0b6a2257949392fdd56057275a5c5366484ae01faf3b5897a225ecd83",
@@ -180,8 +154,6 @@ var finalizeMachine = createServerFn({ method: "POST" }).validator((data) => dat
 	await ensureServer();
 	const name = data.name?.trim();
 	if (!name) return { ok: false };
-	const { machine } = await scopedMachine(data.id);
-	if (!machine) return { ok: false };
 	return { ok: !!await updateMachine(data.id, { name }) };
 });
 var deleteMachine_createServerFn_handler = createServerRpc({
@@ -191,17 +163,8 @@ var deleteMachine_createServerFn_handler = createServerRpc({
 }, (opts) => deleteMachine.__executeServer(opts));
 var deleteMachine = createServerFn({ method: "POST" }).validator((id) => id).handler(deleteMachine_createServerFn_handler, async ({ data: id }) => {
 	const { scheduler } = await ensureServer();
-	const { scope, machine } = await scopedMachine(id);
-	if (scope.enforce && !scope.userId) return {
-		ok: false,
-		error: "unauthorized"
-	};
-	if (!machine) return {
-		ok: false,
-		error: "machine not found"
-	};
-	const deleted = scope.enforce ? await forceDeleteMachine(id, scope.userId) : await forceDeleteMachine(id);
-	if (deleted.state === "forbidden" || deleted.state === "not-found") return {
+	const deleted = await forceDeleteMachine(id);
+	if (deleted.state === "not-found") return {
 		ok: false,
 		error: "machine not found"
 	};

package/.output/server/_ssr/networkAccess-CIlK3ION.mjs

@@ -0,0 +1,30 @@
+import { isIP } from "node:net";
+//#region node_modules/.nitro/vite/services/ssr/assets/networkAccess-CIlK3ION.js
+/**
+* Pievo has no login, so the network is the access boundary: only this
+* machine, private LAN ranges, and Tailscale peers may reach any route.
+* Anyone who passes this check can run prompts on every connected machine.
+* Requests proxied by `tailscale serve` arrive from loopback.
+*
+* IPv4: loopback 127/8, RFC 1918 (10/8, 172.16/12, 192.168/16), link-local
+* 169.254/16, and CGNAT 100.64/10 (Tailscale addresses). IPv6: loopback,
+* link-local fe80::/10, and unique-local fc00::/7 (includes Tailscale's
+* fd7a:115c:a1e0::/48). IPv4-mapped IPv6 is checked as IPv4.
+*/
+function isTrustedPeer(address) {
+	if (!address) return false;
+	const ip = address.toLowerCase().replace(/^::ffff:(?=\d+\.\d+\.\d+\.\d+$)/, "").split("%")[0];
+	const family = isIP(ip);
+	if (family === 4) {
+		const [a, b] = ip.split(".").map(Number);
+		return a === 127 || a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254 || a === 100 && b >= 64 && b <= 127;
+	}
+	if (family === 6) {
+		if (ip === "::1") return true;
+		const first = parseInt(ip.split(":")[0] || "0", 16);
+		return (first & 65472) === 65152 || (first & 65024) === 64512;
+	}
+	return false;
+}
+//#endregion
+export { isTrustedPeer };