piclaw 0.0.20 → 0.0.21

package/.output/server/_chunks/app.mjs

@@ -1,6 +1,5 @@
 import { a as getDevice, c as parseCookies, d as touchDevice, n as COOKIE_NAME, o as makeSetCookie } from "./auth.mjs";
-import "../_libs/@aws-sdk/client-bedrock-runtime+[...].mjs";
-import { a as defineHandler, d as toEventHandler, n as HTTPError, o as defineLazyEventHandler, p as NodeResponse, s as defineMiddleware, t as H3Core, u as proxyRequest } from "../_libs/h3+rou3+srvx.mjs";
+import { a as defineHandler, f as toEventHandler, m as NodeResponse, n as HTTPError, o as defineLazyEventHandler, s as defineMiddleware, t as H3Core, u as proxyRequest } from "../_libs/h3+rou3+srvx.mjs";
 import { t as HookableCore } from "../_libs/hookable.mjs";
 import { n as server_default } from "./server.mjs";
 import "../_libs/@mariozechner/pi-agent-core+[...].mjs";
@@ -80,142 +79,142 @@ var public_assets_data_default = {
 	"/icon-192.png": {
 		"type": "image/png",
 		"etag": "\"1ed8-HRm0wMoc1YcKORc1dxMZZIs4XqM\"",
-		"mtime": "2026-03-05T02:52:54.672Z",
+		"mtime": "2026-03-05T20:48:22.901Z",
 		"size": 7896,
 		"path": "../public/icon-192.png"
 	},
 	"/icon-512.png": {
 		"type": "image/png",
 		"etag": "\"61b1-w2AVse8SydUKs9vEM9tKbfXakcc\"",
-		"mtime": "2026-03-05T02:52:54.673Z",
+		"mtime": "2026-03-05T20:48:22.901Z",
 		"size": 25009,
 		"path": "../public/icon-512.png"
 	},
 	"/icon.svg": {
 		"type": "image/svg+xml",
 		"etag": "\"41a-ki4Lp5uMw3sCqMRSciVIHajM4ps\"",
-		"mtime": "2026-03-05T02:52:54.672Z",
+		"mtime": "2026-03-05T20:48:22.901Z",
 		"size": 1050,
 		"path": "../public/icon.svg"
 	},
 	"/index.html": {
 		"type": "text/html; charset=utf-8",
-		"etag": "\"408-eqMSW0pVwiG2Bys6h+lQtGKNgQw\"",
-		"mtime": "2026-03-05T02:52:54.604Z",
-		"size": 1032,
+		"etag": "\"593-i9ceRAzAQpumHWT433QoPzP7trM\"",
+		"mtime": "2026-03-05T20:48:22.862Z",
+		"size": 1427,
 		"path": "../public/index.html"
 	},
-	"/manifest.json": {
-		"type": "application/json",
-		"etag": "\"21c-+ajOSgCwd9Z+fs01GNQu1MQTwuk\"",
-		"mtime": "2026-03-05T02:52:54.673Z",
-		"size": 540,
-		"path": "../public/manifest.json"
-	},
 	"/reset.html": {
 		"type": "text/html; charset=utf-8",
 		"etag": "\"e8f-ShXrVZaJ0i30oN0foalVLUdrgYk\"",
-		"mtime": "2026-03-05T02:52:54.673Z",
+		"mtime": "2026-03-05T20:48:22.901Z",
 		"size": 3727,
 		"path": "../public/reset.html"
 	},
 	"/sw.js": {
 		"type": "text/javascript; charset=utf-8",
 		"etag": "\"765-FHQ7M5HcgHxyZi8sVv0/baOJWD8\"",
-		"mtime": "2026-03-05T02:52:54.673Z",
+		"mtime": "2026-03-05T20:48:22.901Z",
 		"size": 1893,
 		"path": "../public/sw.js"
 	},
+	"/manifest.json": {
+		"type": "application/json",
+		"etag": "\"21c-+ajOSgCwd9Z+fs01GNQu1MQTwuk\"",
+		"mtime": "2026-03-05T20:48:22.901Z",
+		"size": 540,
+		"path": "../public/manifest.json"
+	},
 	"/assets/GeistPixel-Square-CwnHaJd_.woff2": {
 		"type": "font/woff2",
 		"etag": "\"6fc8-Nl3X3tuURsyt3ex8iF9PBK3Fymk\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.861Z",
 		"size": 28616,
 		"path": "../public/assets/GeistPixel-Square-CwnHaJd_.woff2"
 	},
-	"/assets/defult-DtwgaiMA.js": {
+	"/assets/defult-D5RLDUrI.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"5be-VHiDtG2AKvxCa5X355tD9/GdaU4\"",
-		"mtime": "2026-03-05T02:52:54.600Z",
-		"size": 1470,
-		"path": "../public/assets/defult-DtwgaiMA.js"
+		"etag": "\"5cd-wWLpazRnh6aEcrSXaekPu0e3LRk\"",
+		"mtime": "2026-03-05T20:48:22.860Z",
+		"size": 1485,
+		"path": "../public/assets/defult-D5RLDUrI.js"
 	},
 	"/assets/geist-cyrillic-wght-normal-CHSlOQsW.woff2": {
 		"type": "font/woff2",
 		"etag": "\"3964-jfUkxTfHRj1cpO33jEsDk2lkrvM\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.861Z",
 		"size": 14692,
 		"path": "../public/assets/geist-cyrillic-wght-normal-CHSlOQsW.woff2"
 	},
 	"/assets/geist-latin-ext-wght-normal-DMtmJ5ZE.woff2": {
 		"type": "font/woff2",
 		"etag": "\"3bcc-oSFlPnDlb7fAcQTPv6sqm6NgXXU\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.861Z",
 		"size": 15308,
 		"path": "../public/assets/geist-latin-ext-wght-normal-DMtmJ5ZE.woff2"
 	},
 	"/assets/geist-latin-wght-normal-Dm3htQBi.woff2": {
 		"type": "font/woff2",
 		"etag": "\"6ef0-pZqr0k2V92t+lxQ/ogxqTIOgDGM\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.862Z",
 		"size": 28400,
 		"path": "../public/assets/geist-latin-wght-normal-Dm3htQBi.woff2"
 	},
 	"/assets/geist-mono-cyrillic-wght-normal-BZdD_g9V.woff2": {
 		"type": "font/woff2",
 		"etag": "\"3148-fDEowP3hdBu549ke2NSllgnKwFo\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.862Z",
 		"size": 12616,
 		"path": "../public/assets/geist-mono-cyrillic-wght-normal-BZdD_g9V.woff2"
 	},
 	"/assets/geist-mono-latin-ext-wght-normal-b6lpi8_2.woff2": {
 		"type": "font/woff2",
 		"etag": "\"32f4-mFhyUXRKosFvmVg6XWwBAV3kvk4\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.862Z",
 		"size": 13044,
 		"path": "../public/assets/geist-mono-latin-ext-wght-normal-b6lpi8_2.woff2"
 	},
 	"/assets/geist-mono-latin-wght-normal-Cjtb1TV-.woff2": {
 		"type": "font/woff2",
 		"etag": "\"7a88-DQWpi033XojA2ZmNMyp8i2zZURE\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
+		"mtime": "2026-03-05T20:48:22.862Z",
 		"size": 31368,
 		"path": "../public/assets/geist-mono-latin-wght-normal-Cjtb1TV-.woff2"
 	},
-	"/assets/index-B5n0eraW.css": {
+	"/assets/index-K43slwjJ.css": {
 		"type": "text/css; charset=utf-8",
-		"etag": "\"12465-3MgOvNY2DsyslSP6qkQS0cIuUpM\"",
-		"mtime": "2026-03-05T02:52:54.603Z",
-		"size": 74853,
-		"path": "../public/assets/index-B5n0eraW.css"
+		"etag": "\"135fb-zTkqASNX7Pvm3wLJmP2ooi8MCkY\"",
+		"mtime": "2026-03-05T20:48:22.862Z",
+		"size": 79355,
+		"path": "../public/assets/index-K43slwjJ.css"
 	},
 	"/assets/md4x-CNLJ57xO.wasm": {
 		"type": "application/wasm",
 		"etag": "\"41116-fXWw13Hb4mtmx1zqWY937G5o04w\"",
-		"mtime": "2026-03-05T02:52:54.604Z",
+		"mtime": "2026-03-05T20:48:22.862Z",
 		"size": 266518,
 		"path": "../public/assets/md4x-CNLJ57xO.wasm"
 	},
 	"/assets/md4x-CyfQToGJ.js": {
 		"type": "text/javascript; charset=utf-8",
 		"etag": "\"38-QLTgoA+K9j0djblpu5tawfdfO5c\"",
-		"mtime": "2026-03-05T02:52:54.602Z",
+		"mtime": "2026-03-05T20:48:22.861Z",
 		"size": 56,
 		"path": "../public/assets/md4x-CyfQToGJ.js"
 	},
-	"/assets/index-DUbn6fuj.js": {
+	"/assets/dist-BH_oa-kv.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"12dd6d-troVxib1c/e+Rdvryy/8DkrkY/k\"",
-		"mtime": "2026-03-05T02:52:54.599Z",
-		"size": 1236333,
-		"path": "../public/assets/index-DUbn6fuj.js"
+		"etag": "\"16e8b9-eKD68lKcWgL2KIjd7XYrwbTvOJE\"",
+		"mtime": "2026-03-05T20:48:22.861Z",
+		"size": 1501369,
+		"path": "../public/assets/dist-BH_oa-kv.js"
 	},
-	"/assets/dist-D-Hc5HbQ.js": {
+	"/assets/index-7JvURuHy.js": {
 		"type": "text/javascript; charset=utf-8",
-		"etag": "\"16e8b9-vg8QzTs62M2gmAM27AHvtjw9p/4\"",
-		"mtime": "2026-03-05T02:52:54.602Z",
-		"size": 1501369,
-		"path": "../public/assets/dist-D-Hc5HbQ.js"
+		"etag": "\"1314ab-rlVhnCt0436TgqLGRpssRR5GONo\"",
+		"mtime": "2026-03-05T20:48:22.859Z",
+		"size": 1250475,
+		"path": "../public/assets/index-7JvURuHy.js"
 	}
 };
 function readAsset(id) {
@@ -290,7 +289,13 @@ var PUBLIC_PREFIXES = ["/api/auth/"];
 var device_auth_default = defineMiddleware(async (event, next) => {
 	const pathname = event.url.pathname;
 	if (!pathname.startsWith("/api/")) return next();
-	const deviceId = parseCookies(event.req.headers.get("cookie") || "")[COOKIE_NAME];
+	const cookies = parseCookies(event.req.headers.get("cookie") || "");
+	const deviceId = cookies[COOKIE_NAME];
+	const appSecret = process.env.PICLAW_APP_SECRET;
+	if (appSecret && cookies["piclaw_app_token"] === appSecret) {
+		if (deviceId) event.context.deviceId = deviceId;
+		return next();
+	}
 	if (PUBLIC_PREFIXES.some((p) => pathname.startsWith(p))) return next();
 	if (!deviceId) throw new HTTPError("Device not registered", { status: 401 });
 	const device = await getDevice(deviceId);
@@ -353,7 +358,7 @@ var _lazy_zxmisQ = defineLazyEventHandler(() => import("../_routes/api/chats.mjs
 var _lazy_FCzSbE = defineLazyEventHandler(() => import("../_routes/api/config.mjs"));
 var _lazy_g8U0Ne = defineLazyEventHandler(() => import("../_routes/api/config2.mjs"));
 var _lazy_WwSK4s = defineLazyEventHandler(() => import("../_routes/api/device_events.mjs"));
-var _lazy_WbrfDt = defineLazyEventHandler(() => import("../_libs/_108.mjs"));
+var _lazy_WbrfDt = defineLazyEventHandler(() => import("../_libs/_94.mjs"));
 var _lazy_Cc2xrp = defineLazyEventHandler(() => import("../_routes/api/files/delete.mjs"));
 var _lazy_S352Hh = defineLazyEventHandler(() => import("../_routes/api/files/groups.mjs"));
 var _lazy_h04WvL = defineLazyEventHandler(() => import("../_routes/api/files.mjs"));
@@ -396,6 +401,9 @@ var _lazy_BroS7q = defineLazyEventHandler(() => import("../_routes/api/resources
 var _lazy_IdxSZC = defineLazyEventHandler(() => import("../_routes/api/resources/kill.mjs"));
 var _lazy_r6Q53x = defineLazyEventHandler(() => import("../_routes/api/resources/ports.mjs"));
 var _lazy_kp8jE9 = defineLazyEventHandler(() => import("../_routes/api/resources/processes.mjs"));
+var _lazy_6yvNQ3 = defineLazyEventHandler(() => import("../_id_.delete.mjs"));
+var _lazy_Os3TTN = defineLazyEventHandler(() => import("../_routes/api/sandbox.mjs"));
+var _lazy_9Excp1 = defineLazyEventHandler(() => import("../_routes/api/sandbox2.mjs"));
 var _lazy_Cf90g9 = defineLazyEventHandler(() => import("../_routes/api/send.mjs"));
 var _lazy_f46SiX = defineLazyEventHandler(() => import("../_routes/api/status.mjs"));
 var _lazy_fUZGDL = defineLazyEventHandler(() => import("../_routes/api/stop.mjs"));
@@ -407,7 +415,7 @@ var _lazy_a4eaQ4 = defineLazyEventHandler(() => import("../_routes/api/tasks.mjs
 var _lazy_y4X9HC = defineLazyEventHandler(() => import("../_routes/api/tasks2.mjs"));
 var _lazy_s4mtPg = defineLazyEventHandler(() => import("../_routes/api/telegram/setup.mjs"));
 var _lazy_lqAhEC = defineLazyEventHandler(() => import("../_routes/api/telegram/status.mjs"));
-var _lazy_hwedry = defineLazyEventHandler(() => import("../_id_.delete.mjs"));
+var _lazy_hwedry = defineLazyEventHandler(() => import("../_id_2.delete.mjs"));
 var _lazy_jKIB9c = defineLazyEventHandler(() => import("../_id_2.patch.mjs"));
 var _lazy_SNxV59 = defineLazyEventHandler(() => import("../_routes/api/terminal/[id]/input.mjs"));
 var _lazy_2wGwm5 = defineLazyEventHandler(() => import("../_routes/api/terminal/[id]/nudge.mjs"));
@@ -419,7 +427,7 @@ var _lazy_GBBzFJ = defineLazyEventHandler(() => import("../_routes/api/tunnel/pa
 var _lazy_ikDCsl = defineLazyEventHandler(() => import("../_routes/api/tunnel/setup.mjs"));
 var _lazy_PyoJFH = defineLazyEventHandler(() => import("../_routes/api/tunnel/status.mjs"));
 var _lazy_sfQTMO = defineLazyEventHandler(() => import("../_...path_.get.mjs"));
-var _lazy_lIU8fq = defineLazyEventHandler(() => import("./renderer-template.mjs"));
+var _lazy_2jdFi6 = defineLazyEventHandler(() => import("./renderer-template.mjs"));
 const findRoute = /* @__PURE__ */ (() => {
 	const $0 = {
 		route: "/api/auth/approve",
@@ -628,112 +636,124 @@ const findRoute = /* @__PURE__ */ (() => {
 		method: "get",
 		handler: _lazy_kp8jE9
 	}, $52 = {
+		route: "/api/sandbox",
+		method: "get",
+		handler: _lazy_Os3TTN
+	}, $53 = {
+		route: "/api/sandbox",
+		method: "post",
+		handler: _lazy_9Excp1
+	}, $54 = {
 		route: "/api/send",
 		method: "post",
 		handler: _lazy_Cf90g9
-	}, $53 = {
+	}, $55 = {
 		route: "/api/status",
 		method: "get",
 		handler: _lazy_f46SiX
-	}, $54 = {
+	}, $56 = {
 		route: "/api/stop",
 		method: "post",
 		handler: _lazy_fUZGDL
-	}, $55 = {
+	}, $57 = {
 		route: "/api/store/plugins",
 		method: "get",
 		handler: _lazy_nBHtiI
-	}, $56 = {
+	}, $58 = {
 		route: "/api/store/skills",
 		method: "get",
 		handler: _lazy_qwcxy0
-	}, $57 = {
+	}, $59 = {
 		route: "/api/stream",
 		method: "get",
 		handler: _lazy_BCmuoq
-	}, $58 = {
+	}, $60 = {
 		route: "/api/tasks",
 		method: "get",
 		handler: _lazy_a4eaQ4
-	}, $59 = {
+	}, $61 = {
 		route: "/api/tasks",
 		method: "post",
 		handler: _lazy_y4X9HC
-	}, $60 = {
+	}, $62 = {
 		route: "/api/telegram/setup",
 		method: "post",
 		handler: _lazy_s4mtPg
-	}, $61 = {
+	}, $63 = {
 		route: "/api/telegram/status",
 		method: "get",
 		handler: _lazy_lqAhEC
-	}, $62 = {
+	}, $64 = {
 		route: "/api/terminal",
 		method: "get",
 		handler: _lazy_thB4Sz
-	}, $63 = {
+	}, $65 = {
 		route: "/api/terminal",
 		method: "post",
 		handler: _lazy_vnbFXO
-	}, $64 = {
+	}, $66 = {
 		route: "/api/tunnel/password",
 		method: "get",
 		handler: _lazy_GBBzFJ
-	}, $65 = {
+	}, $67 = {
 		route: "/api/tunnel/setup",
 		method: "post",
 		handler: _lazy_ikDCsl
-	}, $66 = {
+	}, $68 = {
 		route: "/api/tunnel/status",
 		method: "get",
 		handler: _lazy_PyoJFH
-	}, $67 = {
+	}, $69 = {
 		route: "/api/chats/:jid",
 		method: "delete",
 		handler: _lazy_XlgjaQ
-	}, $68 = {
+	}, $70 = {
 		route: "/api/groups/:jid",
 		method: "delete",
 		handler: _lazy_EWoGjx
-	}, $69 = {
+	}, $71 = {
 		route: "/api/groups/:jid",
 		method: "patch",
 		handler: _lazy_RpSu7h
-	}, $70 = {
+	}, $72 = {
+		route: "/api/sandbox/:id",
+		method: "delete",
+		handler: _lazy_6yvNQ3
+	}, $73 = {
 		route: "/api/tasks/:id",
 		method: "patch",
 		handler: _lazy_E6g8OK
-	}, $71 = {
+	}, $74 = {
 		route: "/api/terminal/:id",
 		method: "delete",
 		handler: _lazy_hwedry
-	}, $72 = {
+	}, $75 = {
 		route: "/api/terminal/:id",
 		method: "patch",
 		handler: _lazy_jKIB9c
-	}, $73 = {
+	}, $76 = {
 		route: "/api/terminal/:id/input",
 		method: "post",
 		handler: _lazy_SNxV59
-	}, $74 = {
+	}, $77 = {
 		route: "/api/terminal/:id/nudge",
 		method: "post",
 		handler: _lazy_2wGwm5
-	}, $75 = {
+	}, $78 = {
 		route: "/api/terminal/:id/resize",
 		method: "post",
 		handler: _lazy_EST4ov
-	}, $76 = {
+	}, $79 = {
 		route: "/api/terminal/:id/stream",
 		method: "get",
 		handler: _lazy_K7Xq0B
-	}, $77 = {
+	}, $80 = {
 		route: "/api/uploads/**:path",
 		method: "get",
 		handler: _lazy_sfQTMO
-	}, $78 = {
+	}, $81 = {
 		route: "/**",
-		handler: _lazy_lIU8fq
+		handler: _lazy_2jdFi6
 	};
 	return (m, p) => {
 		if (p.charCodeAt(p.length - 1) === 47) p = p.slice(0, -1) || "/";
@@ -875,46 +895,50 @@ const findRoute = /* @__PURE__ */ (() => {
 		if (p === "/api/resources/processes") {
 			if (m === "GET") return { data: $51 };
 		}
+		if (p === "/api/sandbox") {
+			if (m === "GET") return { data: $52 };
+			if (m === "POST") return { data: $53 };
+		}
 		if (p === "/api/send") {
-			if (m === "POST") return { data: $52 };
+			if (m === "POST") return { data: $54 };
 		}
 		if (p === "/api/status") {
-			if (m === "GET") return { data: $53 };
+			if (m === "GET") return { data: $55 };
 		}
 		if (p === "/api/stop") {
-			if (m === "POST") return { data: $54 };
+			if (m === "POST") return { data: $56 };
 		}
 		if (p === "/api/store/plugins") {
-			if (m === "GET") return { data: $55 };
+			if (m === "GET") return { data: $57 };
 		}
 		if (p === "/api/store/skills") {
-			if (m === "GET") return { data: $56 };
+			if (m === "GET") return { data: $58 };
 		}
 		if (p === "/api/stream") {
-			if (m === "GET") return { data: $57 };
+			if (m === "GET") return { data: $59 };
 		}
 		if (p === "/api/tasks") {
-			if (m === "GET") return { data: $58 };
-			if (m === "POST") return { data: $59 };
+			if (m === "GET") return { data: $60 };
+			if (m === "POST") return { data: $61 };
 		}
 		if (p === "/api/telegram/setup") {
-			if (m === "POST") return { data: $60 };
+			if (m === "POST") return { data: $62 };
 		}
 		if (p === "/api/telegram/status") {
-			if (m === "GET") return { data: $61 };
+			if (m === "GET") return { data: $63 };
 		}
 		if (p === "/api/terminal") {
-			if (m === "GET") return { data: $62 };
-			if (m === "POST") return { data: $63 };
+			if (m === "GET") return { data: $64 };
+			if (m === "POST") return { data: $65 };
 		}
 		if (p === "/api/tunnel/password") {
-			if (m === "GET") return { data: $64 };
+			if (m === "GET") return { data: $66 };
 		}
 		if (p === "/api/tunnel/setup") {
-			if (m === "POST") return { data: $65 };
+			if (m === "POST") return { data: $67 };
 		}
 		if (p === "/api/tunnel/status") {
-			if (m === "GET") return { data: $66 };
+			if (m === "GET") return { data: $68 };
 		}
 		let s = p.split("/"), l = s.length - 1;
 		if (s[1] === "api") {
@@ -922,7 +946,7 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (l === 3 || l === 2) {
 					if (m === "DELETE") {
 						if (l >= 3) return {
-							data: $67,
+							data: $69,
 							params: { "jid": s[3] }
 						};
 					}
@@ -932,23 +956,33 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (l === 3 || l === 2) {
 					if (m === "DELETE") {
 						if (l >= 3) return {
-							data: $68,
+							data: $70,
 							params: { "jid": s[3] }
 						};
 					}
 					if (m === "PATCH") {
 						if (l >= 3) return {
-							data: $69,
+							data: $71,
 							params: { "jid": s[3] }
 						};
 					}
 				}
 			}
+			if (s[2] === "sandbox") {
+				if (l === 3 || l === 2) {
+					if (m === "DELETE") {
+						if (l >= 3) return {
+							data: $72,
+							params: { "id": s[3] }
+						};
+					}
+				}
+			}
 			if (s[2] === "tasks") {
 				if (l === 3 || l === 2) {
 					if (m === "PATCH") {
 						if (l >= 3) return {
-							data: $70,
+							data: $73,
 							params: { "id": s[3] }
 						};
 					}
@@ -958,13 +992,13 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (l === 3 || l === 2) {
 					if (m === "DELETE") {
 						if (l >= 3) return {
-							data: $71,
+							data: $74,
 							params: { "id": s[3] }
 						};
 					}
 					if (m === "PATCH") {
 						if (l >= 3) return {
-							data: $72,
+							data: $75,
 							params: { "id": s[3] }
 						};
 					}
@@ -972,7 +1006,7 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (s[4] === "input") {
 					if (l === 4) {
 						if (m === "POST") return {
-							data: $73,
+							data: $76,
 							params: { "id": s[3] }
 						};
 					}
@@ -980,7 +1014,7 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (s[4] === "nudge") {
 					if (l === 4) {
 						if (m === "POST") return {
-							data: $74,
+							data: $77,
 							params: { "id": s[3] }
 						};
 					}
@@ -988,7 +1022,7 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (s[4] === "resize") {
 					if (l === 4) {
 						if (m === "POST") return {
-							data: $75,
+							data: $78,
 							params: { "id": s[3] }
 						};
 					}
@@ -996,7 +1030,7 @@ const findRoute = /* @__PURE__ */ (() => {
 				if (s[4] === "stream") {
 					if (l === 4) {
 						if (m === "GET") return {
-							data: $76,
+							data: $79,
 							params: { "id": s[3] }
 						};
 					}
@@ -1005,14 +1039,14 @@ const findRoute = /* @__PURE__ */ (() => {
 			if (s[2] === "uploads") {
 				if (m === "GET") {
 					if (l >= 2) return {
-						data: $77,
+						data: $80,
 						params: { "path": s.slice(3).join("/") }
 					};
 				}
 			}
 		}
 		return {
-			data: $78,
+			data: $81,
 			params: { "_": s.slice(1).join("/") }
 		};
 	};

package/.output/server/_chunks/config.mjs

@@ -50,6 +50,10 @@ var CONFIG_DEFS = {
 		env: "BRAVE_API_KEY",
 		default: void 0
 	},
+	sandbox: {
+		env: "SANDBOX",
+		default: void 0
+	},
 	timezone: {
 		env: "TZ",
 		default: Intl.DateTimeFormat().resolvedOptions().timeZone

package/.output/server/_chunks/dummy.mjs

@@ -1,4 +1,4 @@
-import { a as __require } from "../_runtime.mjs";
+import { i as __require } from "../_runtime.mjs";
 import path from "node:path";
 import { execFile } from "node:child_process";
 /**

package/.output/server/_chunks/logger.mjs

@@ -111,7 +111,7 @@ var levelToNotificationType = {
 var _deviceBus;
 function notifyLog(level, tag, message) {
 	if (!_deviceBus) {
-		import("../_libs/_102.mjs").then((m) => {
+		import("../_libs/_88.mjs").then((m) => {
 			_deviceBus = m.deviceBus;
 			_deviceBus.notify({
 				title: `[${tag}] ${message}`.slice(0, 120),

package/.output/server/_chunks/notes.mjs

@@ -24,10 +24,8 @@ function writeNote(ref, content) {
 	fs.mkdirSync(path.dirname(filePath), { recursive: true });
 	fs.writeFileSync(filePath, content);
 }
-/** Delete a note. Returns true if it existed. Virtual session notes cannot be deleted. */
+/** Delete a note. Returns true if it existed. */
 function deleteNote(ref) {
-	const { category } = parseRef(ref);
-	if (category === VIRTUAL_CATEGORY) return false;
 	const filePath = resolveNotePath(ref);
 	if (!fs.existsSync(filePath)) return false;
 	fs.unlinkSync(filePath);

package/.output/server/_chunks/renderer-template.mjs

@@ -1,5 +1,5 @@
 import { r as HTTPResponse } from "../_libs/h3+rou3+srvx.mjs";
-const rendererTemplate = () => new HTTPResponse("<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta\n      name=\"viewport\"\n      content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover, interactive-widget=resizes-content\"\n    />\n    <title>PiClaw</title>\n    <meta name=\"theme-color\" content=\"#0a0e14\" />\n    <meta name=\"apple-mobile-web-app-capable\" content=\"yes\" />\n    <meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black-translucent\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"icon\" type=\"image/svg+xml\" href=\"/icon.svg\" />\n    <link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/icon-192.png\" />\n    <link rel=\"apple-touch-icon\" href=\"/icon-192.png\" />\n    <link rel=\"manifest\" href=\"/manifest.json\" />\n  </head>\n  <body style=\"background-color: #0a0e14\">\n    <div id=\"app\"></div>\n    <script type=\"module\" src=\"/src/app/index.ts\"><\/script>\n  </body>\n</html>\n", { headers: { "content-type": "text/html; charset=utf-8" } });
+const rendererTemplate = () => new HTTPResponse("<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta\n      name=\"viewport\"\n      content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no, viewport-fit=cover, interactive-widget=resizes-content\"\n    />\n    <title>PiClaw</title>\n    <meta name=\"theme-color\" content=\"#0a0e14\" />\n    <meta name=\"apple-mobile-web-app-capable\" content=\"yes\" />\n    <meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black-translucent\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"icon\" type=\"image/svg+xml\" href=\"/icon.svg\" />\n    <link rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/icon-192.png\" />\n    <link rel=\"apple-touch-icon\" href=\"/icon-192.png\" />\n    <link rel=\"manifest\" href=\"/manifest.json\" />\n  </head>\n  <body style=\"background-color: #0a0e14\">\n    <div id=\"app\"></div>\n    <script>\n      // Electrobun app-window: persist appToken as cookie for auth bypass\n      var t = new URLSearchParams(location.search).get(\"appToken\");\n      if (t) {\n        var prev = document.cookie.match(/piclaw_app_token=([^;]*)/)?.[1];\n        document.cookie = \"piclaw_app_token=\" + t + \";path=/;SameSite=Lax\";\n        if (prev && prev !== t) location.reload();\n      }\n    <\/script>\n    <script type=\"module\" src=\"/src/app/index.ts\"><\/script>\n  </body>\n</html>\n", { headers: { "content-type": "text/html; charset=utf-8" } });
 function renderIndexHTML(event) {
 	return rendererTemplate(event.req);
 }