@kky42/pievo-server 3.0.0 → 4.1.0

package/.output/server/_ssr/{router-BFIH2UAE.mjs → router-BhHsTGqu.mjs}

@@ -1,13 +1,13 @@
-import { c as ensureServer, d as readJsonBody, f as validOptionalPollString, m as validPollWireId, p as validPollCurrentRun, r as POLL_HTTP_BODY_FIELDS, t as MACHINE_BODY_CAP, u as readByteBody } from "./boot-CYRi-wez.mjs";
+import { d as validOptionalPollString, f as validPollCurrentRun, l as readByteBody, n as POLL_HTTP_BODY_FIELDS, p as validPollWireId, s as ensureServer, u as readJsonBody } from "./boot-DmpKtb0A.mjs";
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
 import { c as createFileRoute, i as HeadContent, l as createRootRoute, o as createRouter, r as Scripts } from "../_libs/@tanstack/react-router+[...].mjs";
-import { r as imageMime, t as Route$10 } from "./artifactKind-DqpmtxDU.mjs";
-import { t as Route$11 } from "./loops._loopId_.runs._runId-BFP9oMrp.mjs";
-import { n as Route$12 } from "./routes-DnE7XDe_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/router-BFIH2UAE.js
+import { r as imageMime, t as Route$9 } from "./artifactKind-a2oxT2wQ.mjs";
+import { t as Route$10 } from "./loops._loopId_.runs._runId-Dr6E-FA5.mjs";
+import { n as Route$11 } from "./routes-CL2Kef-Q.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/router-BhHsTGqu.js
 var import_jsx_runtime = require_jsx_runtime();
-var app_default = "/assets/app-DXLuQNb9.css";
-var Route$9 = createRootRoute({
+var app_default = "/assets/app-x1CeeY7N.css";
+var Route$8 = createRootRoute({
 	head: () => ({
 		meta: [
 			{ charSet: "utf-8" },
@@ -43,7 +43,7 @@ async function machineJsonRoute(request, options) {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	if (!token) return Response.json({ error: options.missingCredential }, { status: 401 });
-	const parsed = await readJsonBody(request, MACHINE_BODY_CAP);
+	const parsed = await readJsonBody(request, options.maxBytes ?? 2097152);
 	if (parsed.kind === "too-large") return Response.json({ error: "body too large" }, { status: 413 });
 	if (parsed.kind !== "ok") {
 		if (options.invalidBody === void 0) return Response.json({ error: options.invalidJsonError ?? "invalid JSON body" }, { status: 400 });
@@ -53,13 +53,13 @@ async function machineJsonRoute(request, options) {
 	if (body === null) return Response.json({ error: options.invalidBodyError ?? "invalid request body" }, { status: 400 });
 	return options.handle(token, body);
 }
-var Route$8 = createFileRoute("/machine/report")({ server: { handlers: { POST: async ({ request }) => {
+var Route$7 = createFileRoute("/machine/report")({ server: { handlers: { POST: async ({ request }) => {
 	return machineJsonRoute(request, {
 		missingCredential: "missing token",
 		invalidBody: {},
 		parseBody: (value) => value && typeof value === "object" ? value : {},
 		handle: async (token, body) => {
-			const { getGateway } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
+			const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
 			const r = await (await getGateway()).report(token, body);
 			return Response.json(r.body, { status: r.status });
 		}
@@ -78,38 +78,13 @@ async function readyResponse(ensure = ensureServer, env = process.env) {
 		nonce: env.PIEVO_SERVER_LAUNCH_NONCE ?? null
 	});
 }
-var Route$7 = createFileRoute("/api/ready")({ server: { handlers: { GET: () => readyResponse() } } });
-var Route$6 = createFileRoute("/api/health")({ server: { handlers: { GET: async () => Response.json({ ok: true }) } } });
-/**
-* POST /api/machine/sync — exact artifact sync (Bearer DEVICE token). The daemon
-* posts the complete configured-path manifest after a run; the server reconciles
-* artifact_files and replies with needHashes for raw blob PUTs.
-* The manifest route retains its dedicated 32 MB JSON-body limit.
-*
-* This byte-ingress route is deliberately NOT rate limited (same rationale as the
-* blob PUT): it requires a valid registered device token (unknown ⇒ 401) and is
-* already bounded by the exact-path/hash handshake and 32MB sync-body cap, so a
-* limiter would only throttle a legitimate large sync.
-*/
-var Route$5 = createFileRoute("/api/machine/sync")({ server: { handlers: { POST: async ({ request }) => {
-	const auth = request.headers.get("authorization") ?? "";
-	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
-	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { SYNC_BODY_CAP, parseArtifactSyncBody } = await import("./boot-CYRi-wez.mjs").then((n) => n.N).then((n) => n.v);
-	const parsed = await readJsonBody(request, SYNC_BODY_CAP);
-	if (parsed.kind === "too-large") return Response.json({ error: "sync body too large" }, { status: 413 });
-	if (parsed.kind === "invalid") return Response.json({ error: "invalid JSON" }, { status: 400 });
-	const body = parseArtifactSyncBody(parsed.body);
-	if (!body) return Response.json({ error: "invalid sync body" }, { status: 400 });
-	const { getArtifactSync } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
-	const r = await (await getArtifactSync()).sync(token, body);
-	return Response.json(r.body, { status: r.status });
-} } } });
+var Route$6 = createFileRoute("/api/ready")({ server: { handlers: { GET: () => readyResponse() } } });
+var Route$5 = createFileRoute("/api/health")({ server: { handlers: { GET: async () => Response.json({ ok: true }) } } });
 var Route$4 = createFileRoute("/api/machine/status")({ server: { handlers: { GET: async ({ request }) => {
 	const auth = request.headers.get("authorization") ?? "";
 	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
 	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const { getGateway } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
+	const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
 	const r = await (await getGateway()).status(token);
 	return Response.json(r.body, { status: r.status });
 } } } });
@@ -147,7 +122,7 @@ var Route$3 = createFileRoute("/api/machine/poll")({ server: { handlers: { POST:
 		invalidJsonError: "invalid JSON body",
 		parseBody: parsePollBody,
 		handle: async (token, body) => {
-			const { getGateway } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
+			const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
 			const r = await (await getGateway()).pollV4Wait(token, gatewayPollRequest(body));
 			return Response.json(r.body, { status: r.status });
 		}
@@ -163,17 +138,19 @@ function parseCliBody(value) {
 /**
 * POST /api/machine/cli — the ONE unified CLI dispatch (Bearer credential + `{argv}`).
 * `CliGateway.cli()` branches by credential type: a `dk_` device token takes owner
-* commands, while an `rk_` run credential can only report its run. Uses the standard
-* 2MB machine JSON body cap.
+* commands; an `rk_` run credential is rejected. The 4 MB body cap fits
+* `file set` carrying a 2 MB artifact as base64 (4/3 expansion) plus argv framing.
 */
+var CLI_BODY_CAP = 4 * 1024 * 1024;
 var Route$2 = createFileRoute("/api/machine/cli")({ server: { handlers: { POST: async ({ request }) => {
 	return machineJsonRoute(request, {
 		missingCredential: "missing credential",
+		maxBytes: CLI_BODY_CAP,
 		invalidJsonError: "body must be exactly {argv:string[]}",
 		invalidBodyError: "body must be exactly {argv:string[]}",
 		parseBody: parseCliBody,
 		handle: async (token, body) => {
-			const { getCliGateway } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
+			const { getCliGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
 			const r = await (await getCliGateway()).cli(token, body.argv);
 			return Response.json(r.body, { status: r.status });
 		}
@@ -193,36 +170,59 @@ function safeDecode(s) {
 	}
 }
 /**
-* PUT /api/machine/blob/:hash — upload one content-addressed blob's raw bytes
-* (Bearer DEVICE token). The server recomputes sha256(body) and rejects a
-* mismatch before storing in the byte store. The hash is read from the URL (the daemon PUTs
-* exactly the hashes the sync handshake returned in needHashes).
+* GET|PUT /api/machine/run-files/:name — loop-file transfer for one run (Bearer
+* RUN token). GET returns the version the run starts from, with its sha256 in
+* `x-pievo-sha256`; PUT stores a version the run produced (the daemon sends the
+* expected sha256 in the same header). A PUT never changes the loop: only the
+* terminal report applies stored versions, under the loop lock.
 *
-* This byte-ingress route is deliberately NOT rate limited: it requires a valid
-* registered device token (unknown ⇒ 401, not an unauthenticated surface) and is
-* already bounded by the sync hash-handshake (the server only accepts hashes it
-* asked THIS machine for) plus the per-file 10MB byte cap. A
-* large first sync bursts many concurrent PUTs on one token, so any limiter would
-* only throttle legitimate uploads without adding real protection.
+* Not rate limited: a live run token is required and every body is bounded by
+* the per-file loop-file limit.
 */
-var Route$1 = createFileRoute("/api/machine/blob/$hash")({ server: { handlers: { PUT: async ({ request }) => {
+function bearer(request) {
 	const auth = request.headers.get("authorization") ?? "";
-	const token = auth.startsWith("Bearer ") ? auth.slice(7) : "";
-	if (!token) return Response.json({ error: "missing device token" }, { status: 401 });
-	const hash = safeDecode(new URL(request.url).pathname.split("/").pop() ?? "");
-	if (hash === null) return Response.json({ error: "bad hash" }, { status: 400 });
-	const { BLOB_CAP } = await import("./boot-CYRi-wez.mjs").then((n) => n.N).then((n) => n.v);
-	const body = await readByteBody(request, BLOB_CAP);
-	if (body.kind === "too-large") return Response.json({ error: "blob exceeds size cap" }, { status: 413 });
-	if (body.kind === "invalid") return Response.json({ error: "could not read blob body" }, { status: 400 });
-	const buf = Buffer.from(body.bytes.buffer, body.bytes.byteOffset, body.bytes.byteLength);
-	const { getArtifactSync } = await import("./boot-CYRi-wez.mjs").then((n) => n.i).then((n) => n.t);
-	const r = await (await getArtifactSync()).putBlob(token, hash, buf);
-	return Response.json(r.body, { status: r.status });
-} } } });
+	return auth.startsWith("Bearer ") ? auth.slice(7) : "";
+}
+function fileName(request) {
+	return safeDecode(new URL(request.url).pathname.split("/").pop() ?? "");
+}
+var Route$1 = createFileRoute("/api/machine/run-files/$name")({ server: { handlers: {
+	GET: async ({ request }) => {
+		const token = bearer(request);
+		if (!token) return Response.json({ error: "missing run token" }, { status: 401 });
+		const name = fileName(request);
+		if (name === null) return Response.json({ error: "bad file name" }, { status: 400 });
+		const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+		const r = await (await getGateway()).readRunFile(token, name);
+		if (r.status !== 200 || !r.bytes || !r.hash) return Response.json(r.body, { status: r.status });
+		return new Response(new Uint8Array(r.bytes), {
+			status: 200,
+			headers: {
+				"content-type": "application/octet-stream",
+				"content-length": String(r.bytes.length),
+				"x-pievo-sha256": r.hash,
+				"cache-control": "private, no-store"
+			}
+		});
+	},
+	PUT: async ({ request }) => {
+		const token = bearer(request);
+		if (!token) return Response.json({ error: "missing run token" }, { status: 401 });
+		const name = fileName(request);
+		if (name === null) return Response.json({ error: "bad file name" }, { status: 400 });
+		const { LOOP_FILE_BYTE_CAP } = await import("./boot-DmpKtb0A.mjs").then((n) => n.M).then((n) => n.Vt);
+		const body = await readByteBody(request, LOOP_FILE_BYTE_CAP);
+		if (body.kind === "too-large") return Response.json({ error: "file exceeds the loop-file size limit" }, { status: 413 });
+		if (body.kind === "invalid") return Response.json({ error: "could not read file body" }, { status: 400 });
+		const bytes = Buffer.from(body.bytes.buffer, body.bytes.byteOffset, body.bytes.byteLength);
+		const { getGateway } = await import("./boot-DmpKtb0A.mjs").then((n) => n.r).then((n) => n.t);
+		const r = await (await getGateway()).storeRunFile(token, name, bytes, request.headers.get("x-pievo-sha256"));
+		return Response.json(r.body, { status: r.status });
+	}
+} } });
 /**
-* GET /api/artifact/:loopId/:path - stream one of a loop's live-synced artifact
-* blobs. Two dispositions:
+* GET /api/artifact/:loopId/:path - stream one of a loop's file blobs.
+* Two dispositions:
 *  - default: `attachment` (the download affordance for binary/oversize files;
 *    text is shown inline via getArtifact).
 *  - `?view=inline`: for a KNOWN image type only (the `imageMime` allowlist),
@@ -233,10 +233,9 @@ var Route$1 = createFileRoute("/api/machine/blob/$hash")({ server: { handlers: {
 *    scripts - so an inline SVG can't run script against the session even if the
 *    URL is opened directly. Non-image inline requests fall back to attachment.
 *
-* Served to dashboard callers like the server functions. Path-safe: the relative path is
-* normalized + traversal-rejected before it ever reaches a blob, and blob keys
-* are content hashes, never the user path. Reads stream from the local
-* BlobStore; the route never writes.
+* Served to dashboard callers like the server functions. The path is matched
+* exactly against a loop's stored file rows, and blob keys are content hashes,
+* never the user path. Reads stream from the local BlobStore; the route never writes.
 */
 var PREFIX = "/api/artifact/";
 var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { GET: async ({ request }) => {
@@ -250,8 +249,8 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 	const segments = after.slice(slash + 1).split("/").map((s) => safeDecode(s));
 	if (segments.some((s) => s === null)) return Response.json({ error: "bad path" }, { status: 400 });
 	const relPath = segments.join("/");
-	if (!await (await import("./boot-CYRi-wez.mjs").then((n) => n.N).then((n) => n.It)).getLoop(loopId)) return Response.json({ error: "not found" }, { status: 404 });
-	const { readLoopArtifactBytes } = await import("./artifactFiles-Di1xDKvX.mjs");
+	if (!await (await import("./boot-DmpKtb0A.mjs").then((n) => n.M).then((n) => n.Dt)).getLoop(loopId)) return Response.json({ error: "not found" }, { status: 404 });
+	const { readLoopArtifactBytes } = await import("./artifactFiles-B0NPRDOR.mjs");
 	const r = await readLoopArtifactBytes(loopId, relPath);
 	if (r.status !== 200 || !r.bytes) return Response.json({ error: "not found" }, { status: r.status });
 	const filename = (r.filename || "file").replace(/["\\\r\n]/g, "_");
@@ -277,60 +276,55 @@ var Route = createFileRoute("/api/artifact/$loopId/$")({ server: { handlers: { G
 		}
 	});
 } } } });
-var IndexRoute = Route$12.update({
+var IndexRoute = Route$11.update({
 	id: "/",
 	path: "/",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var MachineReportRoute = Route$8.update({
+var MachineReportRoute = Route$7.update({
 	id: "/machine/report",
 	path: "/machine/report",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var LoopsLoopIdRoute = Route$10.update({
+var LoopsLoopIdRoute = Route$9.update({
 	id: "/loops/$loopId",
 	path: "/loops/$loopId",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var ApiReadyRoute = Route$7.update({
+var ApiReadyRoute = Route$6.update({
 	id: "/api/ready",
 	path: "/api/ready",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var ApiHealthRoute = Route$6.update({
+var ApiHealthRoute = Route$5.update({
 	id: "/api/health",
 	path: "/api/health",
-	getParentRoute: () => Route$9
-});
-var ApiMachineSyncRoute = Route$5.update({
-	id: "/api/machine/sync",
-	path: "/api/machine/sync",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
 var ApiMachineStatusRoute = Route$4.update({
 	id: "/api/machine/status",
 	path: "/api/machine/status",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
 var ApiMachinePollRoute = Route$3.update({
 	id: "/api/machine/poll",
 	path: "/api/machine/poll",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
 var ApiMachineCliRoute = Route$2.update({
 	id: "/api/machine/cli",
 	path: "/api/machine/cli",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var LoopsLoopIdRunsRunIdRoute = Route$11.update({
+var LoopsLoopIdRunsRunIdRoute = Route$10.update({
 	id: "/loops/$loopId_/runs/$runId",
 	path: "/loops/$loopId/runs/$runId",
-	getParentRoute: () => Route$9
+	getParentRoute: () => Route$8
 });
-var ApiMachineBlobHashRoute = Route$1.update({
-	id: "/api/machine/blob/$hash",
-	path: "/api/machine/blob/$hash",
-	getParentRoute: () => Route$9
+var ApiMachineRunFilesNameRoute = Route$1.update({
+	id: "/api/machine/run-files/$name",
+	path: "/api/machine/run-files/$name",
+	getParentRoute: () => Route$8
 });
 var rootRouteChildren = {
 	IndexRoute,
@@ -341,16 +335,15 @@ var rootRouteChildren = {
 	ApiMachineCliRoute,
 	ApiMachinePollRoute,
 	ApiMachineStatusRoute,
-	ApiMachineSyncRoute,
 	ApiArtifactLoopIdSplatRoute: Route.update({
 		id: "/api/artifact/$loopId/$",
 		path: "/api/artifact/$loopId/$",
-		getParentRoute: () => Route$9
+		getParentRoute: () => Route$8
 	}),
-	ApiMachineBlobHashRoute,
+	ApiMachineRunFilesNameRoute,
 	LoopsLoopIdRunsRunIdRoute
 };
-var routeTree = Route$9._addFileChildren(rootRouteChildren)._addFileTypes();
+var routeTree = Route$8._addFileChildren(rootRouteChildren)._addFileTypes();
 function getRouter() {
 	return createRouter({
 		routeTree,

package/.output/server/_ssr/{routes-BSVBANI3.mjs → routes-CCallyCT.mjs}

@@ -1,6 +1,6 @@
 import { h as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-import { n as Route, t as DashboardView } from "./routes-DnE7XDe_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-BSVBANI3.js
+import { n as Route, t as DashboardView } from "./routes-CL2Kef-Q.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-CCallyCT.js
 var import_jsx_runtime = require_jsx_runtime();
 /** First-load failure screen — a calm retry instead of the router's default
 *  error dump. Only the initial loader can land here; the in-page poll is

package/.output/server/_ssr/{routes-DnE7XDe_.mjs → routes-CL2Kef-Q.mjs}

@@ -1,10 +1,10 @@
 import { o as __toESM } from "../_runtime.mjs";
 import { g as require_react, h as require_jsx_runtime, s as TooltipProvider } from "../_libs/@base-ui/react+[...].mjs";
 import { c as createFileRoute, d as useNavigate, s as lazyRouteComponent } from "../_libs/@tanstack/react-router+[...].mjs";
-import { c as getConfig, f as listLoops, m as mintConnectKey, p as loadOlderRuns } from "./lifecycleUi-BsbUsi5K.mjs";
+import { c as getConfig, f as listLoops, m as mintConnectKey, p as loadOlderRuns } from "./lifecycleUi-DEjM8Etm.mjs";
 import { f as btnSm, y as focusRing } from "./actionUi-DE-Pb2tv.mjs";
-import { c as listMachines, i as ModalHead, l as mergeRuns, n as MachinesModal, o as connectServerUrl, r as Modal, s as daemonConnectCommand, t as LoopOverview } from "./MachinesModal-CmVMec6B.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/routes-DnE7XDe_.js
+import { c as listMachines, i as ModalHead, l as mergeRuns, n as MachinesModal, o as connectServerUrl, r as Modal, s as daemonConnectCommand, t as LoopOverview } from "./MachinesModal-CLBZxZkq.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/routes-CL2Kef-Q.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 function LoopCard({ loop, onOpen, onPickRun }) {
@@ -521,7 +521,7 @@ function DashboardView({ initial }) {
 var headerBtn = "inline-flex shrink-0 cursor-pointer items-center rounded-full px-3 py-1.5 text-meta font-medium text-secondary transition-colors hover:bg-raised hover:text-display";
 var headerIconBtn = "shrink-0 cursor-pointer items-center rounded-full p-1.5 text-secondary transition-colors hover:bg-raised hover:text-display";
 var $$splitErrorComponentImporter = () => import("./routes-ngpX7h8D.mjs");
-var $$splitComponentImporter = () => import("./routes-BSVBANI3.mjs");
+var $$splitComponentImporter = () => import("./routes-CCallyCT.mjs");
 var Route = createFileRoute("/")({
 	ssr: false,
 	loader: () => fetchLiveData(),

package/.output/server/_ssr/ssr.mjs

@@ -3414,7 +3414,7 @@ var defaultSerovalPlugins = [
 * the dev styles URL for route-scoped CSS collection.
 */
 async function getStartManifest(matchedRoutes) {
-	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-DnwAupbZ.mjs");
+	const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-BPiJ4yWT.mjs");
 	const startManifest = tsrStartManifest();
 	let routes = startManifest.routes;
 	routes[rootRouteId];
@@ -3436,83 +3436,83 @@ async function getStartManifest(matchedRoutes) {
 var manifest = {
 	"08565e35f6a3dd06ef25401de0343976c47f7ae319d3baed6320b56dd3718311": {
 		functionName: "runLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"08c28b892712a1b491b120b74c7dcb81761988d31ccea60216d1807b73c1182c": {
 		functionName: "getRunDiff_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"169566e7637a22599b4eb32ee3775574e99677406922bbef7482a102036c33dd": {
 		functionName: "machineStatus_createServerFn_handler",
-		importer: () => import("./machineFns-CniGcY8s.mjs")
+		importer: () => import("./machineFns-DLRHgDdS.mjs")
 	},
 	"23e290b2b7483ceea6fe669024c35b12c2c4ddd76649f6fab21c958ceda02940": {
 		functionName: "listLoops_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"27d7eba0b6a2257949392fdd56057275a5c5366484ae01faf3b5897a225ecd83": {
 		functionName: "finalizeMachine_createServerFn_handler",
-		importer: () => import("./machineFns-CniGcY8s.mjs")
+		importer: () => import("./machineFns-DLRHgDdS.mjs")
 	},
 	"5660ea82ea5ff2549e0ce2f8f070c54f3e9e24fee84d547601ef5d6ef49a4016": {
 		functionName: "startLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"5e0d6b55f5629faac2f55a68661eeb82668b2be752192b16264ffb5cd1e6fabe": {
 		functionName: "deleteLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"6850ba403da9dec5aff45794eb52636ca540ddec2d9e59f5c75ccbb852bfeacb": {
 		functionName: "stopRun_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"85fdf73d4fee43aed762f93c5d47d33200fbff39e2d082647dc921f610d32698": {
 		functionName: "loadOlderRuns_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"95b7483b333d7649e70c848319417e83c2af6a0327bbcda2d0e331f626dffe05": {
 		functionName: "pauseLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"9befe6b8d67ccbbd7aa9b538bde2a161a9894761c8936761a9503fda1a88c0fc": {
 		functionName: "patchLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"a6384dc7154d9930422d29396f5de64b3ac69c62ad3824bc4a22d745fc07b293": {
 		functionName: "deleteMachine_createServerFn_handler",
-		importer: () => import("./machineFns-CniGcY8s.mjs")
+		importer: () => import("./machineFns-DLRHgDdS.mjs")
 	},
 	"aa46310016bb8a58b273a648ffd498c87f1f450d12827e30110a3b83ba6a27d9": {
 		functionName: "listMachines_createServerFn_handler",
-		importer: () => import("./machineFns-CniGcY8s.mjs")
+		importer: () => import("./machineFns-DLRHgDdS.mjs")
 	},
 	"b050455aacc84dd2a2c9a45517826ad10f91d8f1545e87cc7015784cc7116a97": {
 		functionName: "getLoopDetail_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"b18bbec3d06dfc77714e1e527dfb9172fd7575a64a6c0d6e73ba6dc658dccf0d": {
 		functionName: "getArtifacts_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"cbb6a1b09b309459bbba3dc3851ae85fc468658b3cda77e22b6c6f3e28b65af4": {
 		functionName: "getConfig_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"ce43dcb9366e7c8f7338a6ad28e4290b75a5ee3b13d0d2c9cb585020008f12c6": {
 		functionName: "mintConnectKey_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"e233a461e4526dec3cc4cbaa891a7c3621d5967ce7f32b4fb17e9fb645857b9a": {
 		functionName: "stopLoop_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"ed10d5fe79208e5e0e4e18e4a17b18d7f7db4dd16204c00c3ac90c4644668841": {
 		functionName: "getArtifact_createServerFn_handler",
-		importer: () => import("./loopApi-Bez1rHV0.mjs")
+		importer: () => import("./loopApi-DK1lQPrx.mjs")
 	},
 	"ed679b4e1e05e903a5d4ba4a70d9b9d883991ab22ed59b4d2d69078941818415": {
 		functionName: "createMachine_createServerFn_handler",
-		importer: () => import("./machineFns-CniGcY8s.mjs")
+		importer: () => import("./machineFns-DLRHgDdS.mjs")
 	}
 };
 async function getServerFnById(id, access) {
@@ -5344,7 +5344,7 @@ var getBaseManifest = getProdBaseManifest;
 var createEarlyHintsForRequest = createEarlyHintsCollector;
 async function loadEntries() {
 	const [routerEntry, startEntry, pluginAdapters] = await Promise.all([
-		import("./router-BFIH2UAE.mjs"),
+		import("./router-BhHsTGqu.mjs"),
 		import("./start-B5_9Z5W-.mjs"),
 		import("./empty-plugin-adapters-DKUlnwwl.mjs")
 	]);

package/.output/server/{_tanstack-start-manifest_v-DnwAupbZ.mjs → _tanstack-start-manifest_v-BPiJ4yWT.mjs}

@@ -1,4 +1,4 @@
-//#region node_modules/.nitro/vite/services/ssr/assets/_tanstack-start-manifest_v-DnwAupbZ.js
+//#region node_modules/.nitro/vite/services/ssr/assets/_tanstack-start-manifest_v-BPiJ4yWT.js
 var tsrStartManifest = () => ({ routes: {
 	__root__: {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/__root.tsx",
@@ -11,36 +11,35 @@ var tsrStartManifest = () => ({ routes: {
 			"/api/machine/cli",
 			"/api/machine/poll",
 			"/api/machine/status",
-			"/api/machine/sync",
 			"/api/artifact/$loopId/$",
-			"/api/machine/blob/$hash",
+			"/api/machine/run-files/$name",
 			"/loops/$loopId_/runs/$runId"
 		],
 		preloads: [
-			"/assets/index-Di_wpAtL.js",
+			"/assets/index-D0FIKiiW.js",
 			"/assets/actionUi-BZrLpgHT.js",
-			"/assets/preload-helper-hRTYB_ju.js"
+			"/assets/preload-helper-BSxGu4d0.js"
 		],
 		scripts: [{ attrs: {
 			type: "module",
 			async: !0,
-			src: "/assets/index-Di_wpAtL.js"
+			src: "/assets/index-D0FIKiiW.js"
 		} }]
 	},
 	"/": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/index.tsx",
 		children: void 0,
-		preloads: ["/assets/routes-BIOJZsig.js", "/assets/routes-K8D5uBiV.js"]
+		preloads: ["/assets/routes-BIOJZsig.js", "/assets/routes-m4Z90DTR.js"]
 	},
 	"/loops/$loopId": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/loops.$loopId.tsx",
 		children: void 0,
-		preloads: ["/assets/loops._loopId-X3ClNPMY.js"]
+		preloads: ["/assets/loops._loopId-DTkIz4C0.js", "/assets/MarkdownView-BuFKr9Jg.js"]
 	},
 	"/loops/$loopId_/runs/$runId": {
 		filePath: "/home/runner/work/pievo/pievo/packages/server/src/routes/loops.$loopId_.runs.$runId.tsx",
 		children: void 0,
-		preloads: ["/assets/loops._loopId_.runs._runId-ByU2BSyF.js"]
+		preloads: ["/assets/loops._loopId_.runs._runId-CsV2Ih4Z.js", "/assets/MarkdownView-BuFKr9Jg.js"]
 	}
 } });
 //#endregion

package/.output/server/drizzle/0001_loop_files.sql

@@ -0,0 +1,9 @@
+-- Loop files replace workdir-relative artifact sync (protocol v5).
+-- DATA LOSS (intentional): previously synced workdir artifacts, their per-run
+-- snapshots, and every loop's configured artifact paths are dropped. Old paths
+-- are not valid loop file names; orphaned blob bytes are reclaimed by the next
+-- storage-maintenance pass. Run history and loop configuration are otherwise kept.
+DELETE FROM "artifact_files";--> statement-breakpoint
+DELETE FROM "run_snapshots";--> statement-breakpoint
+UPDATE "loops" SET "artifacts" = '[]'::jsonb;--> statement-breakpoint
+ALTER TABLE "runs" ADD COLUMN "file_notices" jsonb;

package/.output/server/drizzle/meta/_journal.json

@@ -8,6 +8,13 @@
       "when": 1792651729223,
       "tag": "0000_baseline",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1792900000000,
+      "tag": "0001_loop_files",
+      "breakpoints": true
     }
   ]
-}
+}