loopable-cli 0.1.0

package/.output/server/_runtime.mjs

@@ -0,0 +1,35 @@
+import { createRequire } from "node:module";
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+//#endregion
+export { __toESM as i, __exportAll as n, __require as r, __commonJSMin as t };

package/.output/server/_ssr/access-zIl15o8y.mjs

@@ -0,0 +1,42 @@
+import { r as isLoopbackHost } from "./callback-CUINvl7M.mjs";
+//#region node_modules/.nitro/vite/services/ssr/assets/access-zIl15o8y.js
+var APP_ACCESS_COOKIE = "loopable_access";
+function bearer(request) {
+	const header = request.headers.get("authorization") ?? "";
+	return /^Bearer\s+(.+)$/i.exec(header)?.[1]?.trim() ?? "";
+}
+function cookieValue(header, name) {
+	if (!header) return null;
+	for (const part of header.split(";")) {
+		const [rawName, ...rest] = part.trim().split("=");
+		if (rawName === name) return decodeURIComponent(rest.join("="));
+	}
+	return null;
+}
+function readAppToken(request) {
+	const fromBearer = bearer(request);
+	if (fromBearer) return fromBearer;
+	const fromQuery = new URL(request.url).searchParams.get("token")?.trim();
+	if (fromQuery) return fromQuery;
+	return cookieValue(request.headers.get("cookie"), APP_ACCESS_COOKIE);
+}
+function appAccessCookie(token) {
+	const secure = process.env.LOOPABLE_BASE_URL?.startsWith("https:") ? "; Secure" : "";
+	return `${APP_ACCESS_COOKIE}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax${secure}`;
+}
+/**
+* Loopback stays open. Anything else needs LOOPABLE_APP_TOKEN, or the UI is
+* on the network with no door.
+*/
+function assertAppAccess(request) {
+	if (isLoopbackHost(new URL(request.url).hostname)) return;
+	const expected = process.env.LOOPABLE_APP_TOKEN;
+	if (!expected) throw new Error("Set LOOPABLE_APP_TOKEN before exposing Loopable off loopback.");
+	if (readAppToken(request) !== expected) throw new Error("This Loopable is not open to you.");
+}
+/** Runner pull and OAuth callbacks have their own tokens. */
+function isPublicApiPath(pathname) {
+	return pathname.startsWith("/api/runners/") || pathname.startsWith("/api/connectors/");
+}
+//#endregion
+export { readAppToken as a, isPublicApiPath as i, assertAppAccess as n, bearer as r, appAccessCookie as t };