@kky42/pievo-server 2.4.14 → 4.1.0

package/.output/server/_ssr/router-BhHsTGqu.mjs

@@ -0,0 +1,355 @@
+import { d as validOptionalPollString, f as validPollCurrentRun, l as readByteBody, n as POLL_HTTP_BODY_FIELDS, p as validPollWireId, s as ensureServer, u as readJsonBody } from "./boot-DmpKtb0A.mjs";
+import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { c as createFileRoute, i as HeadContent, l as createRootRoute, o as createRouter, r as Scripts } from "../_libs/@tanstack/react-router+[...].mjs";
+import { r as imageMime, t as Route$9 } from "./artifactKind-a2oxT2wQ.mjs";
+import { t as Route$10 } from "./loops._loopId_.runs._runId-Dr6E-FA5.mjs";
+import { n as Route$11 } from "./routes-CL2Kef-Q.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/router-BhHsTGqu.js
+var import_jsx_runtime = require_jsx_runtime();
+var app_default = "/assets/app-x1CeeY7N.css";
+var Route$8 = createRootRoute({
+	head: () => ({
+		meta: [
+			{ charSet: "utf-8" },
+			{
+				name: "viewport",
+				content: "width=device-width, initial-scale=1"
+			},
+			{ title: "Pievo" }
+		],
+		links: [{
+			rel: "stylesheet",
+			href: app_default
+		}, {
+			rel: "icon",
+			type: "image/svg+xml",
+			href: "/favicon.svg"
+		}]
+	}),
+	shellComponent: RootDocument
+});
+function RootDocument({ children }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("html", {
+		lang: "en",
+		suppressHydrationWarning: true,
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("head", { children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(HeadContent, {}) }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("body", {
+			className: "dot-grid-subtle bg-paper font-sans text-primary antialiased",
+			suppressHydrationWarning: true,
+			children: [children, /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Scripts, {})]
+		})]
+	});
+}
+async function machineJsonRoute(request, options) {
+	const auth = request.headers.get("authorization") ?? "";
+	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
+	if (!token) return Response.json({ error: options.missingCredential }, { status: 401 });
+	const parsed = await readJsonBody(request, options.maxBytes ?? 2097152);
+	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
+	if (parsed.kind !== "ok") {
+		if (options.invalidBody === void 0) return Response.json({ error: options.invalidJsonError ?? "invalid JSON body" }, { status: 400 });
+		return options.handle(token, options.invalidBody);
+	}
+	const body = options.parseBody(parsed.body);
+	if (body === null) return Response.json({ error: options.invalidBodyError ?? "invalid request body" }, { status: 400 });
+	return options.handle(token, body);
+}
+var Route$7 = createFileRoute("/machine/report")({ server: { handlers: { POST: async ({ request }) => {
+	return machineJsonRoute(request, {
+		missingCredential: "missing token",
+		invalidBody: {},
+		parseBody: (value) => value && typeof value === "object" ? value : {},
+		handle: async (token, body) => {
+			const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+			const r = await (await getGateway()).report(token, body);
+			return Response.json(r.body, { status: r.status });
+		}
+	});
+} } } });
+/**
+* Deep readiness for process launchers. Unlike /api/health, this waits for the
+* one-time backend boot (migrations, blob-store selection, and scheduler start).
+* The per-launch nonce lets a launcher reject a different process already bound
+* to the requested port.
+*/
+async function readyResponse(ensure = ensureServer, env = process.env) {
+	await ensure();
+	return Response.json({
+		ok: true,
+		nonce: env.PIEVO_SERVER_LAUNCH_NONCE ?? null
+	});
+}
+var Route$6 = createFileRoute("/api/ready")({ server: { handlers: { GET: () => readyResponse() } } });
+var Route$5 = createFileRoute("/api/health")({ server: { handlers: { GET: async () => Response.json({ ok: true }) } } });
+var Route$4 = createFileRoute("/api/machine/status")({ server: { handlers: { GET: async ({ request }) => {
+	const auth = request.headers.get("authorization") ?? "";
+	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
+	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
+	const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+	const r = await (await getGateway()).status(token);
+	return Response.json(r.body, { status: r.status });
+} } } });
+/** Reject non-object bodies, additions, coercible types, over-cap strings, and
+* NUL-bearing text before the gateway is loaded or any state can mutate. */
+function parsePollBody(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
+	if (Object.keys(value).some((key) => !POLL_HTTP_BODY_FIELDS.has(key))) return null;
+	const body = value;
+	if (!validOptionalPollString(body.host, 524288) || !validOptionalPollString(body.platform, 524288) || !validOptionalPollString(body.arch, 524288) || !validOptionalPollString(body.version, 64)) return null;
+	if (body.protocolVersion !== void 0 && (typeof body.protocolVersion !== "number" || !Number.isInteger(body.protocolVersion))) return null;
+	if (body.currentRuns !== void 0 && (!Array.isArray(body.currentRuns) || body.currentRuns.some((run) => !validPollCurrentRun(run)))) return null;
+	if (body.daemonInstanceId !== void 0 && !validPollWireId(body.daemonInstanceId)) return null;
+	if (body.recoveryComplete !== void 0 && typeof body.recoveryComplete !== "boolean") return null;
+	return body;
+}
+function gatewayPollRequest(body) {
+	return {
+		protocolVersion: body.protocolVersion,
+		currentRuns: body.currentRuns,
+		daemonInstanceId: body.daemonInstanceId,
+		recoveryComplete: body.recoveryComplete,
+		info: {
+			host: body.host,
+			platform: body.platform,
+			arch: body.arch,
+			version: body.version
+		}
+	};
+}
+var Route$3 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST: async ({ request }) => {
+	return machineJsonRoute(request, {
+		missingCredential: "missing device token",
+		invalidBodyError: "unknown or invalid poll body fields",
+		invalidJsonError: "invalid JSON body",
+		parseBody: parsePollBody,
+		handle: async (token, body) => {
+			const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+			const r = await (await getGateway()).pollV4Wait(token, gatewayPollRequest(body));
+			return Response.json(r.body, { status: r.status });
+		}
+	});
+} } } });
+function parseCliBody(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
+	const body = value;
+	if (Object.keys(body).length !== 1 || !Object.prototype.hasOwnProperty.call(body, "argv")) return null;
+	if (!Array.isArray(body.argv) || body.argv.some((entry) => typeof entry !== "string")) return null;
+	return { argv: body.argv };
+}
+/**
+* POST /api/machine/cli — the ONE unified CLI dispatch (Bearer credential + `{argv}`).
+* `CliGateway.cli()` branches by credential type: a `dk_` device token takes owner
+* commands; an `rk_` run credential is rejected. The 4 MB body cap fits
+* `file set` carrying a 2 MB artifact as base64 (4/3 expansion) plus argv framing.
+*/
+var CLI_BODY_CAP = 4 * 1024 * 1024;
+var Route$2 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST: async ({ request }) => {
+	return machineJsonRoute(request, {
+		missingCredential: "missing credential",
+		maxBytes: CLI_BODY_CAP,
+		invalidJsonError: "body must be exactly {argv:string[]}",
+		invalidBodyError: "body must be exactly {argv:string[]}",
+		parseBody: parseCliBody,
+		handle: async (token, body) => {
+			const { getCliGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+			const r = await (await getCliGateway()).cli(token, body.argv);
+			return Response.json(r.body, { status: r.status });
+		}
+	});
+} } } });
+/**
+* `decodeURIComponent` that returns null on malformed percent-encoding instead
+* of throwing a URIError (which would escape a route handler as a 500). Shared
+* by the routes that decode path segments; the policy is uniform — ANY
+* malformed segment is the caller's clean 400, never silently kept raw.
+*/
+function safeDecode(s) {
+	try {
+		return decodeURIComponent(s);
+	} catch {
+		return null;
+	}
+}
+/**
+* GET|PUT /api/machine/run-files/:name — loop-file transfer for one run (Bearer
+* RUN token). GET returns the version the run starts from, with its sha256 in
+* `x-pievo-sha256`; PUT stores a version the run produced (the daemon sends the
+* expected sha256 in the same header). A PUT never changes the loop: only the
+* terminal report applies stored versions, under the loop lock.
+*
+* Not rate limited: a live run token is required and every body is bounded by
+* the per-file loop-file limit.
+*/
+function bearer(request) {
+	const auth = request.headers.get("authorization") ?? "";
+	return auth.startsWith("Bearer ") ? auth.slice(7) : "";
+}
+function fileName(request) {
+	return safeDecode(new URL(request.url).pathname.split("/").pop() ?? "");
+}
+var Route$1 = createFileRoute("/api/machine/run-files/$name")({ server: { handlers: {
+	GET: async ({ request }) => {
+		const token = bearer(request);
+		if (!token) return Response.json({ error: "missing run token" }, { status: 401 });
+		const name = fileName(request);
+		if (name === null) return Response.json({ error: "bad file name" }, { status: 400 });
+		const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+		const r = await (await getGateway()).readRunFile(token, name);
+		if (r.status !== 200 || !r.bytes || !r.hash) return Response.json(r.body, { status: r.status });
+		return new Response(new Uint8Array(r.bytes), {
+			status: 200,
+			headers: {
+				"content-type": "application/octet-stream",
+				"content-length": String(r.bytes.length),
+				"x-pievo-sha256": r.hash,
+				"cache-control": "private, no-store"
+			}
+		});
+	},
+	PUT: async ({ request }) => {
+		const token = bearer(request);
+		if (!token) return Response.json({ error: "missing run token" }, { status: 401 });
+		const name = fileName(request);
+		if (name === null) return Response.json({ error: "bad file name" }, { status: 400 });
+		const { LOOP_FILE_BYTE_CAP } = await import("./boot-DmpKtb0A.mjs").then((n) => n.M).then((n) => n.Vt);
+		const body = await readByteBody(request, LOOP_FILE_BYTE_CAP);
+		if (body.kind === "too-large") return Response.json({ error: "file exceeds the loop-file size limit" }, { status: 413 });
+		if (body.kind === "invalid") return Response.json({ error: "could not read file body" }, { status: 400 });
+		const bytes = Buffer.from(body.bytes.buffer, body.bytes.byteOffset, body.bytes.byteLength);
+		const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+		const r = await (await getGateway()).storeRunFile(token, name, bytes, request.headers.get("x-pievo-sha256"));
+		return Response.json(r.body, { status: r.status });
+	}
+} } });
+/**
+* GET /api/artifact/:loopId/:path - stream one of a loop's file blobs.
+* Two dispositions:
+*  - default: `attachment` (the download affordance for binary/oversize files;
+*    text is shown inline via getArtifact).
+*  - `?view=inline`: for a KNOWN image type only (the `imageMime` allowlist),
+*    served `inline` with the real image content-type so an <img> can render it.
+*    Hardened against a direct navigation turning the byte stream into a scripted
+*    document on the app origin: `X-Content-Type-Options: nosniff` pins the type
+*    and `Content-Security-Policy: sandbox` loads it in an opaque origin with no
+*    scripts - so an inline SVG can't run script against the session even if the
+*    URL is opened directly. Non-image inline requests fall back to attachment.
+*
+* Served to dashboard callers like the server functions. The path is matched
+* exactly against a loop's stored file rows, and blob keys are content hashes,
+* never the user path. Reads stream from the local BlobStore; the route never writes.
+*/
+var PREFIX = "/api/artifact/";
+var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { GET: async ({ request }) => {
+	const pathname = new URL(request.url).pathname;
+	if (!pathname.startsWith(PREFIX)) return Response.json({ error: "not found" }, { status: 404 });
+	const after = pathname.slice(14);
+	const slash = after.indexOf("/");
+	if (slash < 0) return Response.json({ error: "missing path" }, { status: 400 });
+	const loopId = safeDecode(after.slice(0, slash));
+	if (loopId === null) return Response.json({ error: "bad loop id" }, { status: 400 });
+	const segments = after.slice(slash + 1).split("/").map((s) => safeDecode(s));
+	if (segments.some((s) => s === null)) return Response.json({ error: "bad path" }, { status: 400 });
+	const relPath = segments.join("/");
+	if (!await (await import("./boot-DmpKtb0A.mjs").then((n) => n.M).then((n) => n.Dt)).getLoop(loopId)) return Response.json({ error: "not found" }, { status: 404 });
+	const { readLoopArtifactBytes } = await import("./artifactFiles-B0NPRDOR.mjs");
+	const r = await readLoopArtifactBytes(loopId, relPath);
+	if (r.status !== 200 || !r.bytes) return Response.json({ error: "not found" }, { status: r.status });
+	const filename = (r.filename || "file").replace(/["\\\r\n]/g, "_");
+	const mime = new URL(request.url).searchParams.get("view") === "inline" ? imageMime(relPath) : null;
+	if (mime) return new Response(new Uint8Array(r.bytes), {
+		status: 200,
+		headers: {
+			"content-type": mime,
+			"content-length": String(r.bytes.length),
+			"content-disposition": `inline; filename="${filename}"`,
+			"x-content-type-options": "nosniff",
+			"content-security-policy": "sandbox",
+			"cache-control": "private, no-store"
+		}
+	});
+	return new Response(new Uint8Array(r.bytes), {
+		status: 200,
+		headers: {
+			"content-type": r.binary ? "application/octet-stream" : "text/plain; charset=utf-8",
+			"content-length": String(r.bytes.length),
+			"content-disposition": `attachment; filename="${filename}"`,
+			"cache-control": "private, no-store"
+		}
+	});
+} } } });
+var IndexRoute = Route$11.update({
+	id: "/",
+	path: "/",
+	getParentRoute: () => Route$8
+});
+var MachineReportRoute = Route$7.update({
+	id: "/machine/report",
+	path: "/machine/report",
+	getParentRoute: () => Route$8
+});
+var LoopsLoopIdRoute = Route$9.update({
+	id: "/loops/$loopId",
+	path: "/loops/$loopId",
+	getParentRoute: () => Route$8
+});
+var ApiReadyRoute = Route$6.update({
+	id: "/api/ready",
+	path: "/api/ready",
+	getParentRoute: () => Route$8
+});
+var ApiHealthRoute = Route$5.update({
+	id: "/api/health",
+	path: "/api/health",
+	getParentRoute: () => Route$8
+});
+var ApiMachineStatusRoute = Route$4.update({
+	id: "/api/machine/status",
+	path: "/api/machine/status",
+	getParentRoute: () => Route$8
+});
+var ApiMachinePollRoute = Route$3.update({
+	id: "/api/machine/poll",
+	path: "/api/machine/poll",
+	getParentRoute: () => Route$8
+});
+var ApiMachineCliRoute = Route$2.update({
+	id: "/api/machine/cli",
+	path: "/api/machine/cli",
+	getParentRoute: () => Route$8
+});
+var LoopsLoopIdRunsRunIdRoute = Route$10.update({
+	id: "/loops/$loopId_/runs/$runId",
+	path: "/loops/$loopId/runs/$runId",
+	getParentRoute: () => Route$8
+});
+var ApiMachineRunFilesNameRoute = Route$1.update({
+	id: "/api/machine/run-files/$name",
+	path: "/api/machine/run-files/$name",
+	getParentRoute: () => Route$8
+});
+var rootRouteChildren = {
+	IndexRoute,
+	ApiHealthRoute,
+	ApiReadyRoute,
+	LoopsLoopIdRoute,
+	MachineReportRoute,
+	ApiMachineCliRoute,
+	ApiMachinePollRoute,
+	ApiMachineStatusRoute,
+	ApiArtifactLoopIdSplatRoute: Route.update({
+		id: "/api/artifact/$loopId/$",
+		path: "/api/artifact/$loopId/$",
+		getParentRoute: () => Route$8
+	}),
+	ApiMachineRunFilesNameRoute,
+	LoopsLoopIdRunsRunIdRoute
+};
+var routeTree = Route$8._addFileChildren(rootRouteChildren)._addFileTypes();
+function getRouter() {
+	return createRouter({
+		routeTree,
+		scrollRestoration: true,
+		defaultPreload: "intent"
+	});
+}
+//#endregion
+export { getRouter };

package/.output/server/_ssr/routes-CCallyCT.mjs

@@ -0,0 +1,12 @@
+import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
+import { n as Route, t as DashboardView } from "./routes-CL2Kef-Q.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-CCallyCT.js
+var import_jsx_runtime = require_jsx_runtime();
+/** First-load failure screen — a calm retry instead of the router's default
+*  error dump. Only the initial loader can land here; the in-page poll is
+*  fetch-then-set and keeps stale data on a transient blip. */
+function Home() {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(DashboardView, { initial: Route.useLoaderData() });
+}
+//#endregion
+export { Home as component };

package/.output/server/_ssr/{routes-Cr-9yDEH.mjs → routes-CL2Kef-Q.mjs}

@@ -1,10 +1,10 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime, s as TooltipProvider } from "../_libs/@base-ui/react+[...].mjs";
-import { c as createFileRoute, d as useNavigate, f as useRouter, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { O as useSession, _ as listLoops, a as PievoLogo, f as getAuthState, i as OpenModeWarning, n as GITHUB_URL, p as getConfig, r as GitHubIcon, v as loadOlderRuns, w as signOut, y as mintConnectKey } from "./auth-client-lSMb_Idt.mjs";
-import { f as btnSm, y as focusRing } from "./actionUi-5HOCZnom.mjs";
-import { c as mergeRuns, i as ModalHead, n as MachinesModal, o as daemonConnectCommand, r as Modal, s as listMachines, t as LoopOverview } from "./MachinesModal-BaEtzycr.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-Cr-9yDEH.js
+import { c as createFileRoute, d as useNavigate, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
+import { c as getConfig, f as listLoops, m as mintConnectKey, p as loadOlderRuns } from "./lifecycleUi-DEjM8Etm.mjs";
+import { f as btnSm, y as focusRing } from "./actionUi-DE-Pb2tv.mjs";
+import { c as listMachines, i as ModalHead, l as mergeRuns, n as MachinesModal, o as connectServerUrl, r as Modal, s as daemonConnectCommand, t as LoopOverview } from "./MachinesModal-CLBZxZkq.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-CL2Kef-Q.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 function LoopCard({ loop, onOpen, onPickRun }) {
@@ -81,7 +81,7 @@ function ComposeModal({ open, onClose }) {
 	const [error, setError] = (0, import_react.useState)(null);
 	const [configError, setConfigError] = (0, import_react.useState)(false);
 	const origin = typeof window !== "undefined" ? window.location.origin : "";
-	const command = token && config ? daemonConnectCommand(origin, token, config.pievoCli, config.customCli) : "";
+	const command = token && config ? daemonConnectCommand(connectServerUrl(origin, config.publicUrl), token, config.pievoCli, config.customCli) : "";
 	(0, import_react.useEffect)(() => {
 		if (!open) return;
 		setToken(null);
@@ -99,9 +99,7 @@ function ComposeModal({ open, onClose }) {
 			if (active) setConfigError(true);
 		});
 		mintConnectKey().then((result) => {
-			if (!active) return;
-			if ("token" in result) setToken(result.token);
-			else setError(result.error);
+			if (active) setToken(result.token);
 		}).catch(() => {
 			if (active) setError("could not mint a connect key");
 		});
@@ -206,6 +204,85 @@ function Step({ number, title, continued = false, children }) {
 		})]
 	});
 }
+/**
+* Shared Pievo mark geometry: eight durable steps form a cycle and the
+* interactive-blue runner marks the next scheduled pass.
+*
+* Variants are props on one geometry (styles in app.css):
+* - `plate`    - dark tile behind the steps (favicon / app-icon contexts);
+*                without it the steps inherit currentColor (inline contexts).
+* - `trail`    - two fading steps behind the runner, so a static rendering
+*                still reads as motion (print / social cards).
+* - `animated` - the runner advances around the cycle; reduced-motion users
+*                see the canonical static first frame.
+*/
+var RING = [
+	[9, 9],
+	[37, 9],
+	[65, 9],
+	[65, 37],
+	[65, 65],
+	[37, 65],
+	[9, 65],
+	[9, 37]
+];
+function RingLogo({ size = 24, plate = false, trail = false, animated = false }) {
+	const cellClass = (i) => {
+		const parts = ["ring-cell", `rc${i}`];
+		if (i === 0) parts.push("ring-runner");
+		else if (trail && i === 7) parts.push("ring-trail-1");
+		else if (trail && i === 6) parts.push("ring-trail-2");
+		return parts.join(" ");
+	};
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("svg", {
+		width: size,
+		height: size,
+		viewBox: "0 0 96 96",
+		role: "img",
+		"aria-label": "Pievo",
+		className: [
+			"ring-logo",
+			plate && "ring-logo-plate",
+			animated && "ring-logo-animated"
+		].filter(Boolean).join(" "),
+		children: [plate && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("rect", {
+			width: "96",
+			height: "96",
+			rx: "15",
+			fill: "#0b0b0b"
+		}), RING.map(([x, y], i) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("rect", {
+			x,
+			y,
+			width: 22,
+			height: 22,
+			rx: 6,
+			className: cellClass(i)
+		}, i))]
+	});
+}
+/**
+* Pievo's primary product mark: one scheduled pass moving around a durable ring.
+* It reuses the same geometry as the favicon and README asset; animation is a
+* progressive enhancement and parks on the canonical first frame when reduced
+* motion is requested.
+*/
+function PievoLogo({ size = 56 }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(RingLogo, {
+		size,
+		plate: true,
+		animated: true
+	});
+}
+var GITHUB_URL = "https://github.com/kky42/pievo";
+function GitHubIcon({ className }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+		viewBox: "0 0 24 24",
+		fill: "currentColor",
+		"aria-hidden": true,
+		className,
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M12 .5C5.65.5.5 5.65.5 12c0 5.08 3.29 9.39 7.86 10.91.58.11.79-.25.79-.55 0-.27-.01-1.17-.02-2.12-3.2.7-3.88-1.36-3.88-1.36-.52-1.33-1.28-1.68-1.28-1.68-1.04-.71.08-.7.08-.7 1.15.08 1.76 1.19 1.76 1.19 1.03 1.75 2.69 1.25 3.34.95.1-.74.4-1.25.72-1.54-2.55-.29-5.24-1.28-5.24-5.68 0-1.26.45-2.28 1.19-3.09-.12-.29-.52-1.46.11-3.05 0 0 .97-.31 3.18 1.18a11.1 11.1 0 0 1 5.8 0c2.2-1.49 3.17-1.18 3.17-1.18.63 1.59.23 2.76.11 3.05.74.81 1.19 1.83 1.19 3.09 0 4.41-2.69 5.38-5.25 5.67.41.35.77 1.05.77 2.12 0 1.53-.01 2.76-.01 3.14 0 .3.2.66.8.55A11.51 11.51 0 0 0 23.5 12C23.5 5.65 18.35.5 12 .5z" })
+	});
+}
 function loopFilterKey(filter) {
 	return filter.kind === "tag" ? `tag:${filter.tag}` : filter.kind;
 }
@@ -260,8 +337,6 @@ function filterLoops(loops, filter) {
 		case "tag": return loops.filter((loop) => loop.tags.includes(filter.tag));
 	}
 }
-/** Loops and machines change between polls. Authorization is derived server-side
-* from the current session; clients do not send tenant identifiers. */
 async function fetchLiveData() {
 	const [loops, machines] = await Promise.all([listLoops(), listMachines()]);
 	return {
@@ -269,27 +344,14 @@ async function fetchLiveData() {
 		machines
 	};
 }
-function DashboardView({ initial, mode }) {
+function DashboardView({ initial }) {
 	const [live, setLive] = (0, import_react.useState)(null);
 	const { loops, machines } = live ?? initial;
 	const online = machines.filter((m) => m.online).length;
 	const navigate = useNavigate();
-	const router = useRouter();
-	const { data: session } = useSession();
-	const [signingOut, setSigningOut] = (0, import_react.useState)(false);
 	const [composeOpen, setComposeOpen] = (0, import_react.useState)(false);
 	const [machinesOpen, setMachinesOpen] = (0, import_react.useState)(false);
 	const [filter, setFilter] = (0, import_react.useState)({ kind: "all" });
-	async function logout() {
-		setSigningOut(true);
-		try {
-			await signOut();
-			await navigate({ to: "/" });
-			await router.invalidate();
-		} finally {
-			setSigningOut(false);
-		}
-	}
 	const refetch = (0, import_react.useCallback)(async () => {
 		try {
 			setLive(await fetchLiveData());
@@ -340,7 +402,7 @@ function DashboardView({ initial, mode }) {
 							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PievoLogo, { size: 30 })
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-							className: `shrink-0 text-[18px] font-semibold tracking-[-0.015em] text-display ${mode === "auth" ? "hidden sm:inline" : ""}`,
+							className: "shrink-0 text-[18px] font-semibold tracking-[-0.015em] text-display",
 							children: "Pievo"
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "flex-1" }),
@@ -353,19 +415,6 @@ function DashboardView({ initial, mode }) {
 							className: `${headerIconBtn} hidden sm:inline-flex`,
 							children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(GitHubIcon, { className: "size-[17px]" })
 						}),
-						mode === "auth" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-							className: "flex shrink-0 items-center gap-2",
-							children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
-								className: "hidden max-w-48 truncate text-label text-secondary md:inline",
-								title: session?.user.email ?? session?.user.name ?? "Account",
-								children: session?.user.email ?? session?.user.name ?? "Account"
-							}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
-								onClick: () => void logout(),
-								disabled: signingOut,
-								className: headerBtn,
-								children: signingOut ? "Signing out…" : "Sign out"
-							})]
-						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("button", {
 							onClick: () => setMachinesOpen(true),
 							"aria-label": `${online} ${online === 1 ? "machine" : "machines"} online`,
@@ -398,7 +447,6 @@ function DashboardView({ initial, mode }) {
 			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("main", {
 				className: "mx-auto max-w-[1180px] px-8 pb-24",
 				children: [
-					mode === "open" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(OpenModeWarning, { className: "mt-6" }),
 					/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", {
 						className: "pb-2 pt-14 text-center",
 						children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("h1", {
@@ -472,18 +520,11 @@ function DashboardView({ initial, mode }) {
 }
 var headerBtn = "inline-flex shrink-0 cursor-pointer items-center rounded-full px-3 py-1.5 text-meta font-medium text-secondary transition-colors hover:bg-raised hover:text-display";
 var headerIconBtn = "shrink-0 cursor-pointer items-center rounded-full p-1.5 text-secondary transition-colors hover:bg-raised hover:text-display";
-var $$splitErrorComponentImporter = () => import("./routes-DRBS4Zi4.mjs");
-var $$splitComponentImporter = () => import("./routes-DTBltabU.mjs");
-/** The dashboard route. Auth mode shows sign-in before loading owner-scoped data;
-* open mode renders the server's shared administrative workspace. */
+var $$splitErrorComponentImporter = () => import("./routes-ngpX7h8D.mjs");
+var $$splitComponentImporter = () => import("./routes-CCallyCT.mjs");
 var Route = createFileRoute("/")({
 	ssr: false,
-	loader: async () => {
-		return {
-			auth: await getAuthState(),
-			initial: await fetchLiveData()
-		};
-	},
+	loader: () => fetchLiveData(),
 	component: lazyRouteComponent($$splitComponentImporter, "component"),
 	errorComponent: lazyRouteComponent($$splitErrorComponentImporter, "errorComponent")
 });

package/.output/server/_ssr/{routes-DRBS4Zi4.mjs → routes-ngpX7h8D.mjs}

@@ -1,10 +1,8 @@
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { f as useRouter } from "../_libs/@tanstack/react-router+[...].mjs";
-import { i as LoadErrorCard } from "./actionUi-5HOCZnom.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-DRBS4Zi4.js
+import { i as LoadErrorCard } from "./actionUi-DE-Pb2tv.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-ngpX7h8D.js
 var import_jsx_runtime = require_jsx_runtime();
-/** The dashboard route. Auth mode shows sign-in before loading owner-scoped data;
-* open mode renders the server's shared administrative workspace. */
 /** First-load failure screen — a calm retry instead of the router's default
 *  error dump. Only the initial loader can land here; the in-page poll is
 *  fetch-then-set and keeps stale data on a transient blip. */