loopable-cli 0.1.0 → 0.2.1

package/.output/server/{_loopId-BsUL1SeL.mjs → _loopId-B0VG-eBC.mjs}

@@ -2,16 +2,16 @@ import { i as __toESM } from "./_runtime.mjs";
 import { U as require_jsx_runtime, W as require_react, i as TabsRoot, n as TabsPanel, r as TabsTab, t as TabsList$1 } from "./_libs/@base-ui/react+[...].mjs";
 import { f as Link, m as useRouter } from "./_libs/@tanstack/react-router+[...].mjs";
 import { t as cva } from "./_libs/class-variance-authority+clsx.mjs";
-import { a as connectorManifest } from "./_ssr/connections-qnw2GVlP.mjs";
-import { B as ArrowLeft, M as CircleAlert, S as Eye, f as Play } from "./_libs/lucide-react.mjs";
+import { o as connectorManifest } from "./_ssr/connections-Df-aDpfJ.mjs";
+import { B as ArrowLeft, M as CircleAlert, S as Eye, f as Play, l as RefreshCw } from "./_libs/lucide-react.mjs";
 import { n as toast } from "./_libs/sonner.mjs";
-import { C as Button$1, E as runLoopBacklog, L as Card, R as CardContent, S as Input$1, V as cn, b as Label, f as useLiveRefresh, k as runLoopNow, o as Route$10 } from "./_ssr/router-3WmpE5b_.mjs";
-import { t as Switch$1 } from "./_ssr/switch-ReNglgH6.mjs";
-import { n as AlertDescription, r as AlertTitle, t as Alert } from "./_ssr/alert-NEiOCTOl.mjs";
-import { n as TaskList } from "./_ssr/task-list-CUITIqkb.mjs";
-import { t as LoopForm } from "./_ssr/loop-form-DlObSewZ.mjs";
-import { n as issuesFor } from "./_ssr/gaps-RAFSXLZf.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/_loopId-BsUL1SeL.js
+import { B as Card, C as lookLoopNow, E as runLoopBacklog, S as Input$1, V as CardContent, W as cn, b as Label, f as useLiveRefresh, k as runLoopNow, o as Route$10, z as Button$1 } from "./_ssr/router-54IDWTVz.mjs";
+import { t as Switch$1 } from "./_ssr/switch-1pnd_bPJ.mjs";
+import { n as AlertDescription, r as AlertTitle, t as Alert } from "./_ssr/alert-DQvzE7bu.mjs";
+import { n as TaskList } from "./_ssr/task-list-_qgBS9LU.mjs";
+import { t as LoopForm } from "./_ssr/loop-form-FqSaXiHl.mjs";
+import { n as issuesFor } from "./_ssr/gaps-Cz76ZicM.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/_loopId-B0VG-eBC.js
 var import_react = /* @__PURE__ */ __toESM(require_react());
 var import_jsx_runtime = require_jsx_runtime();
 function Tabs$1({ className, orientation = "horizontal", ...props }) {
@@ -108,6 +108,29 @@ function LoopPage() {
 		]
 	});
 }
+function LookNowButton({ loopId }) {
+	const router = useRouter();
+	const [busy, setBusy] = (0, import_react.useState)(false);
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button$1, {
+		variant: "outline",
+		size: "sm",
+		disabled: busy,
+		onClick: async () => {
+			setBusy(true);
+			try {
+				const report = await lookLoopNow({ data: { id: loopId } });
+				await router.invalidate();
+				if (report.error) toast.error(report.error);
+				else toast.success("Looked");
+			} catch (error) {
+				toast.error(error instanceof Error ? error.message : String(error));
+			} finally {
+				setBusy(false);
+			}
+		},
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(RefreshCw, { className: busy ? "animate-spin" : void 0 }), busy ? "Looking..." : "Look now"]
+	});
+}
 function when(iso) {
 	return new Date(iso).toLocaleString();
 }
@@ -124,17 +147,23 @@ function Watching({ loop, poll }) {
 		children: [
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(CircleAlert, {}),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertTitle, { children: "The last look did not work" }),
-			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(AlertDescription, { children: poll.pollError })
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(AlertDescription, {
+				className: "flex flex-col items-start gap-3",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { children: poll.pollError }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LookNowButton, { loopId: loop.id })]
+			})
 		]
 	});
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Card, { children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CardContent, {
 		className: "flex flex-col gap-4 pt-6",
 		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-			className: "flex items-start gap-3 text-sm",
-			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Eye, { className: "mt-0.5 size-4 shrink-0 text-muted-foreground" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
-				className: "text-muted-foreground",
-				children: poll.polledAt ? `Watching. Last looked ${when(poll.polledAt)}.` : "Not looked yet. The dispatcher checks every couple of minutes; the first look records what is already waiting without running it."
-			})]
+			className: "flex flex-wrap items-start justify-between gap-3 text-sm",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex items-start gap-3",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Eye, { className: "mt-0.5 size-4 shrink-0 text-muted-foreground" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "text-muted-foreground",
+					children: poll.polledAt ? `Watching. Last looked ${when(poll.polledAt)}.` : "Not looked yet. The dispatcher checks every couple of minutes; the first look records what is already waiting without running it."
+				})]
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(LookNowButton, { loopId: loop.id })]
 		}), poll.backlog.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 			className: "flex flex-col gap-3 rounded-lg border p-4",
 			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {

package/.output/server/_ssr/{callback-CUINvl7M.mjs → access-DTttr563.mjs}

@@ -1,4 +1,4 @@
-//#region node_modules/.nitro/vite/services/ssr/assets/callback-CUINvl7M.js
+//#region node_modules/.nitro/vite/services/ssr/assets/access-DTttr563.js
 function configuredOrigin() {
 	return process.env.LOOPABLE_BASE_URL?.replace(/\/$/, "") || null;
 }
@@ -54,9 +54,43 @@ function registrableCallbackUrl(connectorId) {
 	if (hosted) return `${hosted}/api/connectors/${connectorId}/callback`;
 	return `http://127.0.0.1/api/connectors/${connectorId}/callback`;
 }
-/** Where runners and people should address this Loopable. May be a LAN IP. */
-function loopableOrigin() {
-	return configuredOrigin() ?? "http://127.0.0.1:4321";
+var APP_ACCESS_COOKIE = "loopable_access";
+function bearer(request) {
+	const header = request.headers.get("authorization") ?? "";
+	return /^Bearer\s+(.+)$/i.exec(header)?.[1]?.trim() ?? "";
+}
+function cookieValue(header, name) {
+	if (!header) return null;
+	for (const part of header.split(";")) {
+		const [rawName, ...rest] = part.trim().split("=");
+		if (rawName === name) return decodeURIComponent(rest.join("="));
+	}
+	return null;
+}
+function readAppToken(request) {
+	const fromBearer = bearer(request);
+	if (fromBearer) return fromBearer;
+	const fromQuery = new URL(request.url).searchParams.get("token")?.trim();
+	if (fromQuery) return fromQuery;
+	return cookieValue(request.headers.get("cookie"), APP_ACCESS_COOKIE);
+}
+function appAccessCookie(token) {
+	const secure = process.env.LOOPABLE_BASE_URL?.startsWith("https:") ? "; Secure" : "";
+	return `${APP_ACCESS_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax${secure}`;
+}
+/**
+* Loopback stays open. Anything else needs LOOPABLE_APP_TOKEN, or the UI is
+* on the network with no door.
+*/
+function assertAppAccess(request) {
+	if (isLoopbackHost(new URL(request.url).hostname)) return;
+	const expected = process.env.LOOPABLE_APP_TOKEN;
+	if (!expected) throw new Error("Set LOOPABLE_APP_TOKEN before exposing Loopable off loopback.");
+	if (readAppToken(request) !== expected) throw new Error("This Loopable is not open to you.");
+}
+/** Runner pull and OAuth callbacks have their own tokens. */
+function isPublicApiPath(pathname) {
+	return pathname.startsWith("/api/runners/") || pathname.startsWith("/api/connectors/");
 }
 //#endregion
-export { registrableCallbackUrl as a, loopableOrigin as i, callbackUrl as n, isLoopbackHost as r, appOrigin as t };
+export { callbackUrl as a, readAppToken as c, bearer as i, registrableCallbackUrl as l, appOrigin as n, isLoopbackHost as o, assertAppAccess as r, isPublicApiPath as s, appAccessCookie as t };

package/.output/server/_ssr/{agents-DAOZPgO2.mjs → agents-C7B6RJ6-.mjs}

@@ -1,8 +1,8 @@
 import { n as createServerFn } from "./ssr.mjs";
-import { a as setDefaultAgent, i as saveAgentSettings, r as listAgents, s as testAgent } from "./agents-Btql102J.mjs";
-import { c as listRunners, t as availableAgentIds } from "./runners-DtXs4Q8a.mjs";
+import { a as saveAgentSettings, c as testAgent, i as listAgents, o as setDefaultAgent } from "./agents-DG643yoJ.mjs";
+import { c as listRunners, t as availableAgentIds } from "./runners-D2UAdLyj.mjs";
 import { t as createServerRpc } from "./createServerRpc-DPDrnFdH.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/agents-DAOZPgO2.js
+//#region node_modules/.nitro/vite/services/ssr/assets/agents-C7B6RJ6-.js
 async function withRunners(agents) {
 	const runners = await listRunners();
 	const available = await availableAgentIds();

package/.output/server/_ssr/{agents-Btql102J.mjs → agents-DG643yoJ.mjs}

@@ -1,12 +1,12 @@
 import { f as eq } from "../_libs/drizzle-orm.mjs";
-import { n as agentSettings, r as appSettings, s as db } from "./client-CKkOfh-s.mjs";
-import { n as isHosted } from "./secrets-Hqti-niS.mjs";
+import { n as agentSettings, r as appSettings, s as db } from "./client-BtVRVhQ2.mjs";
+import { n as isHosted } from "./secrets-CRnpwGBh.mjs";
 import { accessSync, constants, createWriteStream, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { homedir, tmpdir } from "node:os";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
-//#region node_modules/.nitro/vite/services/ssr/assets/agents-Btql102J.js
+//#region node_modules/.nitro/vite/services/ssr/assets/agents-DG643yoJ.js
 function defineAgentManifest(manifest) {
 	return manifest;
 }
@@ -654,4 +654,4 @@ async function testAgent(agentId) {
 	};
 }
 //#endregion
-export { setDefaultAgent as a, saveAgentSettings as i, agentManifest as n, settingsFor as o, listAgents as r, testAgent as s, AGENT_MANIFESTS as t };
+export { saveAgentSettings as a, testAgent as c, listAgents as i, agentManifest as n, setDefaultAgent as o, agentRuntime as r, settingsFor as s, AGENT_MANIFESTS as t };

package/.output/server/_ssr/{alert-NEiOCTOl.mjs → alert-DQvzE7bu.mjs}

@@ -1,7 +1,7 @@
 import "../_runtime.mjs";
 import { U as require_jsx_runtime, W as require_react } from "../_libs/@base-ui/react+[...].mjs";
 import { t as cva } from "../_libs/class-variance-authority+clsx.mjs";
-import { V as cn } from "./router-3WmpE5b_.mjs";
+import { W as cn } from "./router-54IDWTVz.mjs";
 require_react();
 var import_jsx_runtime = require_jsx_runtime();
 var alertVariants = cva("group/alert relative grid w-full gap-0.5 rounded-lg border px-2.5 py-2 text-left text-sm has-data-[slot=alert-action]:relative has-data-[slot=alert-action]:pr-18 has-[>svg]:grid-cols-[auto_1fr] has-[>svg]:gap-x-2 *:[svg]:row-span-2 *:[svg]:translate-y-0.5 *:[svg]:text-current *:[svg:not([class*='size-'])]:size-4", {

package/.output/server/_ssr/{client-CKkOfh-s.mjs → client-BtVRVhQ2.mjs}

@@ -4,7 +4,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { join } from "node:path";
 import { homedir } from "node:os";
 import { createClient } from "@libsql/client";
-//#region node_modules/.nitro/vite/services/ssr/assets/client-CKkOfh-s.js
+//#region node_modules/.nitro/vite/services/ssr/assets/client-BtVRVhQ2.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -94,7 +94,7 @@ var authAttempts = sqliteTable("auth_attempts", {
 */
 var tasks = sqliteTable("tasks", {
 	id: text("id").primaryKey(),
-	loopId: text("loop_id").notNull().references(() => loops.id, { onDelete: "cascade" }),
+	loopId: text("loop_id").references(() => loops.id, { onDelete: "cascade" }),
 	connectorId: text("connector_id").notNull(),
 	state: text("state").$type().notNull().default("queued"),
 	/** What the task is about, resolved once so the record survives the source. */
@@ -109,6 +109,8 @@ var tasks = sqliteTable("tasks", {
 	* when the dispatcher fetches rather than when the task is queued.
 	*/
 	sourceTitle: text("source_title"),
+	/** Inbox test runs: the ask itself. Loop runs leave this null and read loops.prompt. */
+	prompt: text("prompt"),
 	/** Set when a run was asked to stop before writing anything. */
 	dryRun: integer("dry_run", { mode: "boolean" }).notNull().default(false),
 	agentId: text("agent_id"),

package/.output/server/_ssr/{connection-status-Bi5peUAk.mjs → connection-status-BZr3Y-IC.mjs}

@@ -1,6 +1,6 @@
 import { U as require_jsx_runtime } from "../_libs/@base-ui/react+[...].mjs";
-import { I as Badge } from "./router-3WmpE5b_.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/connection-status-Bi5peUAk.js
+import { R as Badge } from "./router-54IDWTVz.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/connection-status-BZr3Y-IC.js
 var import_jsx_runtime = require_jsx_runtime();
 var LABELS = {
 	connected: {