volute 0.23.0 → 0.25.0

package/dist/daemon.js

@@ -8,10 +8,6 @@ import {
   sharedPull,
   sharedStatus
 } from "./chunk-PHHKNGA3.js";
-import {
-  fireWebhook,
-  initWebhook
-} from "./chunk-G5KRTU2F.js";
 import {
   applyInitFiles,
   composeTemplate,
@@ -21,44 +17,82 @@ import {
   listFiles
 } from "./chunk-AKPFNL7L.js";
 import {
+  addMessage,
+  approveUser,
+  changePassword,
+  countAdmins,
+  createChannel,
+  createConversation,
+  createUser,
+  deleteConversationForUser,
+  deleteMindUser as deleteMindUser2,
+  deleteUser,
   deliverMessage,
   extractTextContent,
+  findDMConversation,
+  fireWebhook,
   getCachedRecentPages,
   getCachedSites,
+  getChannelByName,
   getConnectorManager,
+  getConversation,
   getDeliveryManager,
   getMailPoller,
+  getMessages,
+  getMessagesPaginated,
+  getOrCreateMindUser,
+  getParticipants,
   getScheduler,
   getTokenBudget,
   getTypingMap,
+  getUnreadCounts,
+  getUser,
+  getUserByUsername,
   initConnectorManager,
   initDeliveryManager,
   initMailPoller,
   initScheduler,
   initSleepManager,
   initTokenBudget,
+  initWebhook,
+  isParticipant,
+  isParticipantOrOwner,
+  joinChannel,
+  leaveChannel,
+  listChannels,
+  listConversationsForUser,
+  listConversationsWithParticipants,
+  listPendingUsers,
+  listUsers,
+  listUsersByType,
+  markConversationRead,
   publish,
   publish2,
   publishTypingForChannels,
   recordInbound,
+  setUserRole,
   startMindFull,
   stopAllWatchers,
   stopMindFull,
   subscribe as subscribe2,
-  subscribe2 as subscribe3
-} from "./chunk-ISWZ6QUK.js";
+  subscribe2 as subscribe3,
+  updateUserProfile,
+  verifyUser
+} from "./chunk-PMX4EIJK.js";
 import {
-  readSystemsConfig
+  deleteSystemsConfig,
+  readSystemsConfig,
+  writeSystemsConfig
 } from "./chunk-HFCBO2GL.js";
 import {
   getActiveMinds,
   onMindEvent,
   stopAll
-} from "./chunk-HGCDWKSP.js";
+} from "./chunk-E7GOKNOT.js";
 import {
   broadcast,
   subscribe
-} from "./chunk-A4S7H6G6.js";
+} from "./chunk-BFK6SOEJ.js";
 import {
   PROMPT_DEFAULTS,
   PROMPT_KEYS,
@@ -69,17 +103,17 @@ import {
   getPromptIfCustom,
   initMindManager,
   substitute
-} from "./chunk-M5CNKH4J.js";
+} from "./chunk-SHSWYG2J.js";
 import {
   findOpenClawSession,
   importOpenClawConnectors,
   importPiSession,
   parseNameFromIdentity
-} from "./chunk-RK627D57.js";
+} from "./chunk-BOTQ25QT.js";
 import {
   readVoluteConfig,
   writeVoluteConfig
-} from "./chunk-XLC342FO.js";
+} from "./chunk-SIAG3QMM.js";
 import {
   loadMergedEnv,
   mindEnvPath,
@@ -105,18 +139,15 @@ import {
   syncBuiltinSkills,
   uninstallSkill,
   updateSkill
-} from "./chunk-TFS25FIM.js";
+} from "./chunk-DG7TO7EE.js";
 import {
   activity,
-  conversationParticipants,
   conversations,
   getDb,
-  messages,
   mindHistory,
   sessions,
-  systemPrompts,
-  users
-} from "./chunk-SGPEZ32F.js";
+  systemPrompts
+} from "./chunk-33XAVCS4.js";
 import {
   logBuffer,
   logger_default
@@ -179,9 +210,9 @@ import {
 
 // src/daemon.ts
 import { randomBytes as randomBytes2 } from "crypto";
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync10, unlinkSync, writeFileSync as writeFileSync8 } from "fs";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync11, unlinkSync, writeFileSync as writeFileSync9 } from "fs";
 import { homedir as homedir2 } from "os";
-import { resolve as resolve17 } from "path";
+import { resolve as resolve19 } from "path";
 import { format } from "util";
 
 // src/lib/migrate-agents-to-minds.ts
@@ -331,6 +362,17 @@ function migrateDotVoluteDir(name) {
     console.warn(`[migrate] both .volute/ and .mind/ exist for ${name}, skipping rename`);
   }
 }
+function migratePagesDirToPublic(name) {
+  const dir = mindDir(name);
+  const oldPagesDir = resolve2(dir, "home", "pages");
+  const newPublicDir = resolve2(dir, "home", "public");
+  const newPagesDir = resolve2(newPublicDir, "pages");
+  if (existsSync2(oldPagesDir) && !existsSync2(newPagesDir)) {
+    mkdirSync(newPublicDir, { recursive: true });
+    renameSync2(oldPagesDir, newPagesDir);
+    logger_default.info(`migrated pages/ \u2192 public/pages/ for ${name}`);
+  }
+}
 function migrateMindState(name) {
   const src = resolve2(mindDir(name), ".mind");
   if (!existsSync2(src)) return;
@@ -359,153 +401,20 @@ function migrateMindState(name) {
 
 // src/web/middleware/auth.ts
 import { timingSafeEqual } from "crypto";
-import { eq as eq2, lt } from "drizzle-orm";
+import { eq, lt } from "drizzle-orm";
 import { getCookie } from "hono/cookie";
 import { createMiddleware } from "hono/factory";
-
-// src/lib/auth.ts
-import { compareSync, hashSync } from "bcryptjs";
-import { and, count, eq } from "drizzle-orm";
-async function createUser(username, password) {
-  const db = await getDb();
-  const hash = hashSync(password, 10);
-  const [{ value }] = await db.select({ value: count() }).from(users).where(eq(users.user_type, "brain"));
-  const role = value === 0 ? "admin" : "pending";
-  const [result] = await db.insert(users).values({ username, password_hash: hash, role }).returning({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  });
-  return result;
-}
-async function verifyUser(username, password) {
-  const db = await getDb();
-  const row = await db.select().from(users).where(eq(users.username, username)).get();
-  if (!row) return null;
-  if (row.user_type === "mind") return null;
-  if (!compareSync(password, row.password_hash)) return null;
-  const { password_hash: _, ...user } = row;
-  return user;
-}
-async function getUser(id) {
-  const db = await getDb();
-  const row = await db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).where(eq(users.id, id)).get();
-  return row ?? null;
-}
-async function getUserByUsername(username) {
-  const db = await getDb();
-  const row = await db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).where(eq(users.username, username)).get();
-  return row ?? null;
-}
-async function listUsers() {
-  const db = await getDb();
-  return db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).orderBy(users.created_at).all();
-}
-async function listPendingUsers() {
-  const db = await getDb();
-  return db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).where(eq(users.role, "pending")).orderBy(users.created_at).all();
-}
-async function listUsersByType(userType) {
-  const db = await getDb();
-  return db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).where(eq(users.user_type, userType)).orderBy(users.created_at).all();
-}
-async function getOrCreateMindUser(mindName) {
-  const db = await getDb();
-  const existing = await db.select({
-    id: users.id,
-    username: users.username,
-    role: users.role,
-    user_type: users.user_type,
-    created_at: users.created_at
-  }).from(users).where(and(eq(users.username, mindName), eq(users.user_type, "mind"))).get();
-  if (existing) return existing;
-  try {
-    const [result] = await db.insert(users).values({
-      username: mindName,
-      password_hash: "!mind",
-      role: "mind",
-      user_type: "mind"
-    }).returning({
-      id: users.id,
-      username: users.username,
-      role: users.role,
-      user_type: users.user_type,
-      created_at: users.created_at
-    });
-    return result;
-  } catch (err) {
-    if (err instanceof Error && err.message.includes("UNIQUE constraint")) {
-      const retried = await db.select({
-        id: users.id,
-        username: users.username,
-        role: users.role,
-        user_type: users.user_type,
-        created_at: users.created_at
-      }).from(users).where(and(eq(users.username, mindName), eq(users.user_type, "mind"))).get();
-      if (retried) return retried;
-    }
-    throw err;
-  }
-}
-async function deleteMindUser2(mindName) {
-  const db = await getDb();
-  await db.delete(users).where(and(eq(users.username, mindName), eq(users.user_type, "mind")));
-}
-async function changePassword(userId, currentPassword, newPassword) {
-  const db = await getDb();
-  const row = await db.select().from(users).where(eq(users.id, userId)).get();
-  if (!row) return false;
-  if (!compareSync(currentPassword, row.password_hash)) return false;
-  const hash = hashSync(newPassword, 10);
-  await db.update(users).set({ password_hash: hash }).where(eq(users.id, userId));
-  return true;
-}
-async function approveUser(id) {
-  const db = await getDb();
-  await db.update(users).set({ role: "user" }).where(and(eq(users.id, id), eq(users.role, "pending")));
-}
-
-// src/web/middleware/auth.ts
 function isValidDaemonToken(token) {
   const expected = process.env.VOLUTE_DAEMON_TOKEN;
   if (!expected || token.length !== expected.length) return false;
   return timingSafeEqual(Buffer.from(token), Buffer.from(expected));
 }
-var SESSION_MAX_AGE = 864e5;
+var SESSION_MAX_AGE = 365 * 24 * 60 * 60 * 1e3;
 var SESSION_CACHE_TTL = 5 * 60 * 1e3;
 var sessionCache = /* @__PURE__ */ new Map();
+function invalidateSessionCache(sessionId) {
+  sessionCache.delete(sessionId);
+}
 async function createSession(userId) {
   const db = await getDb();
   const sessionId = crypto.randomUUID();
@@ -515,14 +424,14 @@ async function createSession(userId) {
 async function deleteSession(sessionId) {
   sessionCache.delete(sessionId);
   const db = await getDb();
-  await db.delete(sessions).where(eq2(sessions.id, sessionId));
+  await db.delete(sessions).where(eq(sessions.id, sessionId));
 }
 async function getSessionUserId(sessionId) {
   const db = await getDb();
-  const row = await db.select().from(sessions).where(eq2(sessions.id, sessionId)).get();
+  const row = await db.select().from(sessions).where(eq(sessions.id, sessionId)).get();
   if (!row) return void 0;
   if (Date.now() - row.createdAt > SESSION_MAX_AGE) {
-    await db.delete(sessions).where(eq2(sessions.id, sessionId));
+    await db.delete(sessions).where(eq(sessions.id, sessionId));
     return void 0;
   }
   return row.userId;
@@ -544,7 +453,15 @@ var authMiddleware = createMiddleware(async (c, next) => {
   if (authHeader?.startsWith("Bearer ")) {
     const token = authHeader.slice(7);
     if (token && isValidDaemonToken(token)) {
-      c.set("user", { id: 0, username: "cli", role: "admin", user_type: "brain" });
+      c.set("user", {
+        id: 0,
+        username: "cli",
+        role: "admin",
+        user_type: "brain",
+        display_name: null,
+        description: null,
+        avatar: null
+      });
       await next();
       return;
     }
@@ -575,306 +492,22 @@ var authMiddleware = createMiddleware(async (c, next) => {
 });
 
 // src/web/server.ts
-import { existsSync as existsSync12 } from "fs";
-import { readFile as readFile3, stat as stat3 } from "fs/promises";
-import { dirname, extname as extname3, resolve as resolve16 } from "path";
+import { existsSync as existsSync13 } from "fs";
+import { readFile as readFile4, stat as stat4 } from "fs/promises";
+import { createServer as createHttpsServer } from "https";
+import { dirname, extname as extname5, resolve as resolve18 } from "path";
 import { serve } from "@hono/node-server";
 
 // src/web/app.ts
-import { Hono as Hono28 } from "hono";
+import { Hono as Hono29 } from "hono";
 import { bodyLimit } from "hono/body-limit";
 import { csrf } from "hono/csrf";
 import { HTTPException } from "hono/http-exception";
 
 // src/web/api/activity.ts
-import { desc as desc2 } from "drizzle-orm";
+import { desc } from "drizzle-orm";
 import { Hono } from "hono";
 import { streamSSE } from "hono/streaming";
-
-// src/lib/events/conversations.ts
-import { randomUUID } from "crypto";
-import { and as and2, desc, eq as eq3, inArray, isNull, lt as lt2, sql } from "drizzle-orm";
-async function createConversation(mindName, channel, opts) {
-  const db = await getDb();
-  const id = randomUUID();
-  const type = opts?.type ?? "dm";
-  const name = opts?.name ?? null;
-  await db.transaction(async (tx) => {
-    await tx.insert(conversations).values({
-      id,
-      mind_name: mindName,
-      channel,
-      type,
-      name,
-      user_id: opts?.userId ?? null,
-      title: opts?.title ?? null
-    });
-    if (opts?.participantIds && opts.participantIds.length > 0) {
-      await tx.insert(conversationParticipants).values(
-        opts.participantIds.map((uid, i) => ({
-          conversation_id: id,
-          user_id: uid,
-          role: i === 0 ? "owner" : "member"
-        }))
-      );
-    }
-  });
-  fireWebhook({
-    event: "conversation_created",
-    mind: mindName ?? "",
-    data: { id, mindName, channel, type, name, title: opts?.title ?? null }
-  });
-  return {
-    id,
-    mind_name: mindName,
-    channel,
-    type,
-    name,
-    user_id: opts?.userId ?? null,
-    title: opts?.title ?? null,
-    created_at: (/* @__PURE__ */ new Date()).toISOString(),
-    updated_at: (/* @__PURE__ */ new Date()).toISOString()
-  };
-}
-async function getConversation(id) {
-  const db = await getDb();
-  const row = await db.select().from(conversations).where(eq3(conversations.id, id)).get();
-  return row ?? null;
-}
-async function addParticipant(conversationId, userId, role = "member") {
-  const db = await getDb();
-  await db.insert(conversationParticipants).values({
-    conversation_id: conversationId,
-    user_id: userId,
-    role
-  });
-}
-async function removeParticipant(conversationId, userId) {
-  const db = await getDb();
-  await db.delete(conversationParticipants).where(
-    and2(
-      eq3(conversationParticipants.conversation_id, conversationId),
-      eq3(conversationParticipants.user_id, userId)
-    )
-  );
-}
-async function getParticipants(conversationId) {
-  const db = await getDb();
-  const rows = await db.select({
-    userId: conversationParticipants.user_id,
-    username: users.username,
-    userType: users.user_type,
-    role: conversationParticipants.role
-  }).from(conversationParticipants).innerJoin(users, eq3(conversationParticipants.user_id, users.id)).where(eq3(conversationParticipants.conversation_id, conversationId)).all();
-  return rows;
-}
-async function isParticipant(conversationId, userId) {
-  const db = await getDb();
-  const row = await db.select({ user_id: conversationParticipants.user_id }).from(conversationParticipants).where(
-    and2(
-      eq3(conversationParticipants.conversation_id, conversationId),
-      eq3(conversationParticipants.user_id, userId)
-    )
-  ).get();
-  return row != null;
-}
-async function listConversationsForUser(userId) {
-  const db = await getDb();
-  const participantRows = await db.select({ conversation_id: conversationParticipants.conversation_id }).from(conversationParticipants).where(eq3(conversationParticipants.user_id, userId)).all();
-  if (participantRows.length === 0) return [];
-  const convIds = participantRows.map((r) => r.conversation_id);
-  return await db.select().from(conversations).where(inArray(conversations.id, convIds)).orderBy(desc(conversations.updated_at)).all();
-}
-async function isParticipantOrOwner(conversationId, userId) {
-  if (await isParticipant(conversationId, userId)) return true;
-  const db = await getDb();
-  const row = await db.select().from(conversations).where(and2(eq3(conversations.id, conversationId), eq3(conversations.user_id, userId))).get();
-  return row != null;
-}
-async function deleteConversationForUser(id, userId) {
-  if (!await isParticipantOrOwner(id, userId)) return false;
-  await deleteConversation(id);
-  return true;
-}
-async function addMessage(conversationId, role, senderName, content) {
-  const db = await getDb();
-  const serialized = JSON.stringify(content);
-  const [result] = await db.insert(messages).values({ conversation_id: conversationId, role, sender_name: senderName, content: serialized }).returning({ id: messages.id, created_at: messages.created_at });
-  await db.update(conversations).set({ updated_at: sql`datetime('now')` }).where(eq3(conversations.id, conversationId));
-  if (role === "user") {
-    const firstText = content.find((b) => b.type === "text");
-    const title = firstText ? firstText.text.slice(0, 80) : "";
-    if (title) {
-      await db.update(conversations).set({ title }).where(and2(eq3(conversations.id, conversationId), isNull(conversations.title)));
-    }
-  }
-  const msg = {
-    id: result.id,
-    conversation_id: conversationId,
-    role,
-    sender_name: senderName,
-    content,
-    created_at: result.created_at
-  };
-  publish2(conversationId, {
-    type: "message",
-    id: msg.id,
-    role: msg.role,
-    senderName: msg.sender_name,
-    content: msg.content,
-    createdAt: msg.created_at
-  });
-  const conv = await db.select({ mind_name: conversations.mind_name }).from(conversations).where(eq3(conversations.id, conversationId)).get();
-  fireWebhook({
-    event: "message_created",
-    mind: conv?.mind_name ?? "",
-    data: {
-      conversationId,
-      messageId: result.id,
-      role,
-      senderName,
-      content: content.filter((b) => b.type !== "image"),
-      createdAt: result.created_at
-    }
-  });
-  return msg;
-}
-async function getMessages(conversationId) {
-  const db = await getDb();
-  const rows = await db.select().from(messages).where(eq3(messages.conversation_id, conversationId)).orderBy(messages.created_at).all();
-  return rows.map(parseMessageRow);
-}
-async function getMessagesPaginated(conversationId, opts) {
-  const db = await getDb();
-  const limit = Math.min(Math.max(opts?.limit ?? 50, 1), 100);
-  const conditions = [eq3(messages.conversation_id, conversationId)];
-  if (opts?.before != null) {
-    conditions.push(lt2(messages.id, opts.before));
-  }
-  const rows = await db.select().from(messages).where(and2(...conditions)).orderBy(desc(messages.id)).limit(limit + 1).all();
-  const hasMore = rows.length > limit;
-  const page = rows.slice(0, limit).reverse();
-  return {
-    messages: page.map(parseMessageRow),
-    hasMore
-  };
-}
-function parseMessageRow(row) {
-  let content;
-  try {
-    const parsed = JSON.parse(row.content);
-    content = Array.isArray(parsed) ? parsed : [{ type: "text", text: row.content }];
-  } catch {
-    content = [{ type: "text", text: row.content }];
-  }
-  return { ...row, role: row.role, content };
-}
-async function listConversationsWithParticipants(userId) {
-  const convs = await listConversationsForUser(userId);
-  if (convs.length === 0) return [];
-  const db = await getDb();
-  const convIds = convs.map((c) => c.id);
-  const rows = await db.select({
-    conversationId: conversationParticipants.conversation_id,
-    userId: users.id,
-    username: users.username,
-    userType: users.user_type,
-    role: conversationParticipants.role
-  }).from(conversationParticipants).innerJoin(users, eq3(conversationParticipants.user_id, users.id)).where(inArray(conversationParticipants.conversation_id, convIds));
-  const byConv = /* @__PURE__ */ new Map();
-  for (const r of rows) {
-    let arr = byConv.get(r.conversationId);
-    if (!arr) {
-      arr = [];
-      byConv.set(r.conversationId, arr);
-    }
-    arr.push({
-      userId: r.userId,
-      username: r.username,
-      userType: r.userType,
-      role: r.role
-    });
-  }
-  const lastMsgIds = await db.select({
-    conversationId: messages.conversation_id,
-    maxId: sql`MAX(${messages.id})`
-  }).from(messages).where(inArray(messages.conversation_id, convIds)).groupBy(messages.conversation_id);
-  const byLastMsg = /* @__PURE__ */ new Map();
-  if (lastMsgIds.length > 0) {
-    const msgRows = await db.select().from(messages).where(
-      inArray(
-        messages.id,
-        lastMsgIds.map((r) => r.maxId)
-      )
-    );
-    for (const m of msgRows) {
-      let text = "";
-      try {
-        const parsed = JSON.parse(m.content);
-        const blocks = Array.isArray(parsed) ? parsed : [];
-        const textBlock = blocks.find((b) => b.type === "text");
-        if (textBlock && "text" in textBlock) text = textBlock.text;
-      } catch {
-        text = m.content;
-      }
-      byLastMsg.set(m.conversation_id, {
-        role: m.role,
-        senderName: m.sender_name,
-        text,
-        createdAt: m.created_at
-      });
-    }
-  }
-  return convs.map((c) => ({
-    ...c,
-    participants: byConv.get(c.id) ?? [],
-    lastMessage: byLastMsg.get(c.id)
-  }));
-}
-async function findDMConversation(mindName, participantIds) {
-  const db = await getDb();
-  const mindConvs = await db.select({ id: conversations.id }).from(conversations).where(and2(eq3(conversations.mind_name, mindName), eq3(conversations.type, "dm"))).all();
-  for (const conv of mindConvs) {
-    const rows = await db.select({ user_id: conversationParticipants.user_id }).from(conversationParticipants).where(eq3(conversationParticipants.conversation_id, conv.id)).all();
-    if (rows.length !== 2) continue;
-    const ids = new Set(rows.map((r) => r.user_id));
-    if (ids.has(participantIds[0]) && ids.has(participantIds[1])) {
-      return conv.id;
-    }
-  }
-  return null;
-}
-async function deleteConversation(id) {
-  const db = await getDb();
-  await db.delete(conversations).where(eq3(conversations.id, id));
-}
-async function createChannel(name, creatorId) {
-  const participantIds = creatorId ? [creatorId] : [];
-  return createConversation(null, "volute", {
-    type: "channel",
-    name,
-    title: name,
-    participantIds
-  });
-}
-async function getChannelByName(name) {
-  const db = await getDb();
-  const row = await db.select().from(conversations).where(and2(eq3(conversations.name, name), eq3(conversations.type, "channel"))).get();
-  return row ?? null;
-}
-async function listChannels() {
-  const db = await getDb();
-  return await db.select().from(conversations).where(eq3(conversations.type, "channel")).orderBy(conversations.name).all();
-}
-async function joinChannel(conversationId, userId) {
-  if (await isParticipant(conversationId, userId)) return;
-  await addParticipant(conversationId, userId);
-}
-async function leaveChannel(conversationId, userId) {
-  await removeParticipant(conversationId, userId);
-}
-
-// src/web/api/activity.ts
 var app = new Hono().get("/events", async (c) => {
   const user = c.get("user");
   return streamSSE(c, async (stream) => {
@@ -883,7 +516,7 @@ var app = new Hono().get("/events", async (c) => {
       let recentActivity = [];
       try {
         const db = await getDb();
-        recentActivity = await db.select().from(activity).orderBy(desc2(activity.created_at)).limit(50);
+        recentActivity = await db.select().from(activity).orderBy(desc(activity.created_at)).limit(50);
         recentActivity = recentActivity.map((row) => ({
           ...row,
           metadata: row.metadata ? JSON.parse(row.metadata) : null
@@ -933,8 +566,8 @@ var app = new Hono().get("/events", async (c) => {
         });
       }, 15e3);
       cleanups.push(() => clearInterval(keepAlive));
-      await new Promise((resolve18) => {
-        stream.onAbort(() => resolve18());
+      await new Promise((resolve20) => {
+        stream.onAbort(() => resolve20());
       });
     } finally {
       for (const cleanup of cleanups) {
@@ -949,10 +582,18 @@ var app = new Hono().get("/events", async (c) => {
 var activity_default = app;
 
 // src/web/api/auth.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync, writeFileSync as writeFileSync2 } from "fs";
+import { extname, resolve as resolve3 } from "path";
 import { zValidator } from "@hono/zod-validator";
 import { Hono as Hono2 } from "hono";
 import { deleteCookie, getCookie as getCookie2, setCookie } from "hono/cookie";
 import { z } from "zod";
+var SESSION_COOKIE_OPTIONS = {
+  path: "/",
+  httpOnly: true,
+  sameSite: "Lax",
+  maxAge: Math.floor(SESSION_MAX_AGE / 1e3)
+};
 var credentialsSchema = z.object({
   username: z.string().min(1),
   password: z.string().min(1)
@@ -961,12 +602,86 @@ var changePasswordSchema = z.object({
   currentPassword: z.string().min(1),
   newPassword: z.string().min(1)
 });
+var profileSchema = z.object({
+  display_name: z.string().max(100).nullable().optional(),
+  description: z.string().max(500).nullable().optional()
+});
+var AVATAR_MIME = {
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp"
+};
+var MAX_AVATAR_SIZE = 2 * 1024 * 1024;
+function avatarsDir() {
+  return resolve3(voluteHome(), "avatars");
+}
 var authenticated = new Hono2().use(authMiddleware).post("/change-password", zValidator("json", changePasswordSchema), async (c) => {
   const user = c.get("user");
   const { currentPassword, newPassword } = c.req.valid("json");
   const ok = await changePassword(user.id, currentPassword, newPassword);
   if (!ok) return c.json({ error: "Current password is incorrect" }, 400);
   return c.json({ ok: true });
+}).put("/profile", zValidator("json", profileSchema), async (c) => {
+  const user = c.get("user");
+  const body = c.req.valid("json");
+  await updateUserProfile(user.id, body);
+  const sessionId = getCookie2(c, "volute_session");
+  if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} profile updated`
+  });
+  return c.json({ ok: true });
+}).post("/avatar", async (c) => {
+  const user = c.get("user");
+  const body = await c.req.parseBody();
+  const file = body.file;
+  if (!(file instanceof File)) {
+    return c.json({ error: "No file uploaded" }, 400);
+  }
+  if (file.size > MAX_AVATAR_SIZE) {
+    return c.json({ error: "File too large (max 2MB)" }, 400);
+  }
+  const ext = extname(file.name).toLowerCase();
+  if (!AVATAR_MIME[ext]) {
+    return c.json({ error: "Invalid file type (png, jpg, gif, webp only)" }, 400);
+  }
+  const dir = avatarsDir();
+  mkdirSync2(dir, { recursive: true });
+  const filename = `avatar-${user.id}${ext}`;
+  const buffer2 = Buffer.from(await file.arrayBuffer());
+  writeFileSync2(resolve3(dir, filename), buffer2);
+  if (user.avatar && user.avatar !== filename) {
+    const oldPath = resolve3(dir, user.avatar);
+    rmSync(oldPath, { force: true });
+  }
+  await updateUserProfile(user.id, { avatar: filename });
+  const sessionId = getCookie2(c, "volute_session");
+  if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} avatar updated`
+  });
+  return c.json({ ok: true, avatar: filename });
+}).delete("/avatar", async (c) => {
+  const user = c.get("user");
+  if (user.avatar) {
+    const path = resolve3(avatarsDir(), user.avatar);
+    rmSync(path, { force: true });
+  }
+  await updateUserProfile(user.id, { avatar: null });
+  const sessionId = getCookie2(c, "volute_session");
+  if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} avatar removed`
+  });
+  return c.json({ ok: true });
 });
 var admin = new Hono2().use(authMiddleware).get("/users", async (c) => {
   const user = c.get("user");
@@ -988,8 +703,63 @@ var admin = new Hono2().use(authMiddleware).get("/users", async (c) => {
   const user = c.get("user");
   if (user.role !== "admin") return c.json({ error: "Forbidden" }, 403);
   const id = parseInt(c.req.param("id"), 10);
+  if (Number.isNaN(id)) return c.json({ error: "Invalid user ID" }, 400);
   await approveUser(id);
   return c.json({ ok: true });
+}).post(
+  "/users/:id/role",
+  zValidator("json", z.object({ role: z.enum(["admin", "user"]) })),
+  async (c) => {
+    const user = c.get("user");
+    if (user.role !== "admin") return c.json({ error: "Forbidden" }, 403);
+    const id = parseInt(c.req.param("id"), 10);
+    if (Number.isNaN(id)) return c.json({ error: "Invalid user ID" }, 400);
+    const { role } = c.req.valid("json");
+    if (role !== "admin") {
+      const adminCount = await countAdmins();
+      if (adminCount <= 1) {
+        const target = await getUser(id);
+        if (target?.role === "admin") {
+          return c.json({ error: "Cannot remove the last admin" }, 400);
+        }
+      }
+    }
+    await setUserRole(id, role);
+    return c.json({ ok: true });
+  }
+).put("/users/:id/profile", zValidator("json", profileSchema), async (c) => {
+  const user = c.get("user");
+  if (user.role !== "admin") return c.json({ error: "Forbidden" }, 403);
+  const id = parseInt(c.req.param("id"), 10);
+  if (Number.isNaN(id)) return c.json({ error: "Invalid user ID" }, 400);
+  const body = c.req.valid("json");
+  await updateUserProfile(id, body);
+  const updatedUser = await getUser(id);
+  if (updatedUser) {
+    broadcast({
+      type: "profile_updated",
+      mind: updatedUser.username,
+      summary: `${updatedUser.username} profile updated`
+    });
+  }
+  return c.json({ ok: true });
+}).delete("/users/:id", async (c) => {
+  const user = c.get("user");
+  if (user.role !== "admin") return c.json({ error: "Forbidden" }, 403);
+  const id = parseInt(c.req.param("id"), 10);
+  if (Number.isNaN(id)) return c.json({ error: "Invalid user ID" }, 400);
+  if (id === user.id) return c.json({ error: "Cannot delete yourself" }, 400);
+  const target = await getUser(id);
+  if (!target) return c.json({ error: "User not found" }, 404);
+  if (target.role === "admin") {
+    const adminCount = await countAdmins();
+    if (adminCount <= 1) return c.json({ error: "Cannot delete the last admin" }, 400);
+  }
+  if (target.user_type === "mind") {
+    return c.json({ error: "Use the mind deletion API to delete minds" }, 400);
+  }
+  await deleteUser(id);
+  return c.json({ ok: true });
 });
 var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema), async (c) => {
   const { username, password } = c.req.valid("json");
@@ -1000,7 +770,7 @@ var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema),
   const user = await createUser(username, password);
   if (user.role === "admin") {
     const sessionId = await createSession(user.id);
-    setCookie(c, "volute_session", sessionId, { path: "/", httpOnly: true, sameSite: "Lax" });
+    setCookie(c, "volute_session", sessionId, SESSION_COOKIE_OPTIONS);
   }
   return c.json({ id: user.id, username: user.username, role: user.role });
 }).post("/login", zValidator("json", credentialsSchema), async (c) => {
@@ -1010,7 +780,7 @@ var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema),
     return c.json({ error: "Invalid credentials" }, 401);
   }
   const sessionId = await createSession(user.id);
-  setCookie(c, "volute_session", sessionId, { path: "/", httpOnly: true, sameSite: "Lax" });
+  setCookie(c, "volute_session", sessionId, SESSION_COOKIE_OPTIONS);
   return c.json({ id: user.id, username: user.username, role: user.role });
 }).post("/logout", async (c) => {
   const sessionId = getCookie2(c, "volute_session");
@@ -1026,7 +796,32 @@ var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema),
   if (userId == null) return c.json({ error: "Not logged in" }, 401);
   const user = await getUser(userId);
   if (!user) return c.json({ error: "Not logged in" }, 401);
-  return c.json({ id: user.id, username: user.username, role: user.role });
+  return c.json({
+    id: user.id,
+    username: user.username,
+    role: user.role,
+    display_name: user.display_name,
+    description: user.description,
+    avatar: user.avatar
+  });
+}).get("/avatars/:filename", async (c) => {
+  const filename = c.req.param("filename");
+  if (filename.includes("/") || filename.includes("\\") || filename.includes("..")) {
+    return c.json({ error: "Invalid filename" }, 400);
+  }
+  const dir = avatarsDir();
+  const filePath = resolve3(dir, filename);
+  if (!filePath.startsWith(`${dir}/`)) return c.json({ error: "Invalid path" }, 400);
+  if (!existsSync3(filePath)) return c.json({ error: "Not found" }, 404);
+  const ext = extname(filename).toLowerCase();
+  const mime = AVATAR_MIME[ext];
+  if (!mime) return c.json({ error: "Invalid file type" }, 400);
+  const data = readFileSync2(filePath);
+  return c.body(data, 200, {
+    "Content-Type": mime,
+    "Cache-Control": "public, max-age=3600",
+    "X-Content-Type-Options": "nosniff"
+  });
 }).route("/", admin).route("/", authenticated);
 var auth_default = app2;
 
@@ -1067,8 +862,8 @@ async function read(env, channelSlug, limit) {
   if (!res.ok) {
     throw new Error(`Discord API error: ${res.status} ${res.statusText}`);
   }
-  const messages2 = await res.json();
-  return messages2.reverse().map((m) => `${m.author.username}: ${m.content}`).join("\n");
+  const messages = await res.json();
+  return messages.reverse().map((m) => `${m.author.username}: ${m.content}`).join("\n");
 }
 async function send(env, channelSlug, message, images) {
   const token = requireToken(env);
@@ -1300,8 +1095,8 @@ async function listConversations2(env) {
   const userMap = /* @__PURE__ */ new Map();
   const imChannels = data.channels.filter((ch) => ch.is_im && ch.user);
   if (imChannels.length > 0) {
-    const users2 = await listUsers3(env);
-    for (const u of users2) {
+    const users = await listUsers3(env);
+    for (const u of users) {
       userMap.set(u.id, u.username);
     }
   }
@@ -1496,16 +1291,16 @@ __export(volute_exports, {
   read: () => read4,
   send: () => send4
 });
-import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
-import { resolve as resolve3 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+import { resolve as resolve4 } from "path";
 function getDaemonConfig() {
-  const configPath2 = resolve3(voluteHome(), "daemon.json");
-  if (!existsSync3(configPath2)) {
+  const configPath2 = resolve4(voluteHome(), "daemon.json");
+  if (!existsSync4(configPath2)) {
     throw new Error("Volute daemon is not running");
   }
   let config;
   try {
-    config = JSON.parse(readFileSync2(configPath2, "utf-8"));
+    config = JSON.parse(readFileSync3(configPath2, "utf-8"));
   } catch (err) {
     throw new Error(`Failed to parse ${configPath2}: ${err}`);
   }
@@ -1531,8 +1326,8 @@ async function read4(env, channelSlug, limit) {
   if (!res.ok) {
     throw new Error(`Failed to read conversation: ${res.status} ${res.statusText}`);
   }
-  const messages2 = await res.json();
-  return messages2.slice(-limit).map((m) => {
+  const messages = await res.json();
+  return messages.slice(-limit).map((m) => {
     const text = Array.isArray(m.content) ? m.content.filter((b) => b.type === "text").map((b) => b.text).join("") : m.content;
     return `${m.sender_name ?? m.role}: ${text}`;
   }).join("\n");
@@ -1759,8 +1554,8 @@ var app3 = new Hono3().post("/:name/channels/send", requireAdmin, async (c) => {
     return c.json({ error: `Platform ${platform} does not support listing users` }, 400);
   const env = buildEnv(name);
   try {
-    const users2 = await driver.listUsers(env);
-    return c.json(users2);
+    const users = await driver.listUsers(env);
+    return c.json(users);
   } catch (err) {
     return c.json({ error: err instanceof Error ? err.message : String(err) }, 500);
   }
@@ -1942,14 +1737,14 @@ var sharedEnvApp = new Hono5().get("/", (c) => {
 var env_default = app5;
 
 // src/web/api/file-sharing.ts
-import { readFileSync as readFileSync4, statSync } from "fs";
-import { resolve as resolve5 } from "path";
+import { readFileSync as readFileSync5, statSync } from "fs";
+import { resolve as resolve6 } from "path";
 import { Hono as Hono6 } from "hono";
 
 // src/lib/file-sharing.ts
 import { randomBytes } from "crypto";
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
-import { basename, join, normalize, resolve as resolve4 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync4, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { basename, join, normalize, resolve as resolve5 } from "path";
 function validateFilePath(filePath) {
   if (!filePath) return "File path is required";
   const normalized = normalize(filePath);
@@ -1962,13 +1757,13 @@ function validateFilePath(filePath) {
   return null;
 }
 function configPath(dir) {
-  return resolve4(dir, "home", ".config", "file-sharing.json");
+  return resolve5(dir, "home", ".config", "file-sharing.json");
 }
 function readFileSharingConfig(dir) {
   const p = configPath(dir);
-  if (!existsSync4(p)) return {};
+  if (!existsSync5(p)) return {};
   try {
-    return JSON.parse(readFileSync3(p, "utf-8"));
+    return JSON.parse(readFileSync4(p, "utf-8"));
   } catch (err) {
     console.warn(`[file-sharing] failed to parse config at ${p}:`, err);
     return {};
@@ -1976,8 +1771,8 @@ function readFileSharingConfig(dir) {
 }
 function writeFileSharingConfig(dir, config) {
   const p = configPath(dir);
-  mkdirSync2(resolve4(p, ".."), { recursive: true });
-  writeFileSync2(p, `${JSON.stringify(config, null, 2)}
+  mkdirSync3(resolve5(p, ".."), { recursive: true });
+  writeFileSync3(p, `${JSON.stringify(config, null, 2)}
 `);
 }
 function isTrustedSender(dir, sender) {
@@ -2000,7 +1795,7 @@ function removeTrust(dir, sender) {
   writeFileSharingConfig(dir, config);
 }
 function pendingDir(receiver) {
-  return resolve4(stateDir(receiver), "pending-files");
+  return resolve5(stateDir(receiver), "pending-files");
 }
 function validateId(id) {
   if (!id || id.includes("/") || id.includes("\\") || id.includes("..")) {
@@ -2019,8 +1814,8 @@ function stageFile(receiver, sender, filename, content, originalPath) {
     throw new Error("Invalid sender name");
   }
   const id = generateId(sender);
-  const dir = resolve4(pendingDir(receiver), id);
-  mkdirSync2(dir, { recursive: true });
+  const dir = resolve5(pendingDir(receiver), id);
+  mkdirSync3(dir, { recursive: true });
   const metadata = {
     id,
     sender,
@@ -2029,22 +1824,22 @@ function stageFile(receiver, sender, filename, content, originalPath) {
     size: content.length,
     createdAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  writeFileSync2(resolve4(dir, "metadata.json"), `${JSON.stringify(metadata, null, 2)}
+  writeFileSync3(resolve5(dir, "metadata.json"), `${JSON.stringify(metadata, null, 2)}
 `);
-  writeFileSync2(resolve4(dir, "data"), content);
+  writeFileSync3(resolve5(dir, "data"), content);
   return { id };
 }
 function listPending(receiver) {
   const dir = pendingDir(receiver);
-  if (!existsSync4(dir)) return [];
+  if (!existsSync5(dir)) return [];
   const entries = readdirSync2(dir, { withFileTypes: true });
   const result = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const metaPath = resolve4(dir, entry.name, "metadata.json");
-    if (!existsSync4(metaPath)) continue;
+    const metaPath = resolve5(dir, entry.name, "metadata.json");
+    if (!existsSync5(metaPath)) continue;
     try {
-      result.push(JSON.parse(readFileSync3(metaPath, "utf-8")));
+      result.push(JSON.parse(readFileSync4(metaPath, "utf-8")));
     } catch (err) {
       console.warn(`[file-sharing] skipping malformed pending entry ${entry.name}:`, err);
     }
@@ -2053,10 +1848,10 @@ function listPending(receiver) {
 }
 function getPending(receiver, id) {
   validateId(id);
-  const metaPath = resolve4(pendingDir(receiver), id, "metadata.json");
-  if (!existsSync4(metaPath)) return null;
+  const metaPath = resolve5(pendingDir(receiver), id, "metadata.json");
+  if (!existsSync5(metaPath)) return null;
   try {
-    return JSON.parse(readFileSync3(metaPath, "utf-8"));
+    return JSON.parse(readFileSync4(metaPath, "utf-8"));
   } catch (err) {
     console.warn(`[file-sharing] failed to read pending metadata for ${id}:`, err);
     return null;
@@ -2071,27 +1866,27 @@ function deliverFile(receiverDir, sender, filename, content, inboxPath) {
   if (sender.includes("/") || sender.includes("\\")) {
     throw new Error("Invalid sender name");
   }
-  const destDir = resolve4(receiverDir, "home", inbox, sender);
-  mkdirSync2(destDir, { recursive: true });
-  const destPath = resolve4(destDir, basename(filename));
-  writeFileSync2(destPath, content);
+  const destDir = resolve5(receiverDir, "home", inbox, sender);
+  mkdirSync3(destDir, { recursive: true });
+  const destPath = resolve5(destDir, basename(filename));
+  writeFileSync3(destPath, content);
   return join(inbox, sender, basename(filename));
 }
 function acceptPending(receiver, id, receiverDir) {
   const meta = getPending(receiver, id);
   if (!meta) throw new Error(`Pending file not found: ${id}`);
-  const dataPath = resolve4(pendingDir(receiver), id, "data");
-  const content = readFileSync3(dataPath);
+  const dataPath = resolve5(pendingDir(receiver), id, "data");
+  const content = readFileSync4(dataPath);
   const config = readFileSharingConfig(receiverDir);
   const inboxPath = config.inboxPath ?? "inbox";
   const destPath = deliverFile(receiverDir, meta.sender, meta.filename, content, inboxPath);
-  rmSync(resolve4(pendingDir(receiver), id), { recursive: true });
+  rmSync2(resolve5(pendingDir(receiver), id), { recursive: true });
   return { sender: meta.sender, filename: meta.filename, destPath };
 }
 function rejectPending(receiver, id) {
   const meta = getPending(receiver, id);
   if (!meta) throw new Error(`Pending file not found: ${id}`);
-  rmSync(resolve4(pendingDir(receiver), id), { recursive: true });
+  rmSync2(resolve5(pendingDir(receiver), id), { recursive: true });
   return { sender: meta.sender, filename: meta.filename };
 }
 function formatFileSize(bytes) {
@@ -2132,21 +1927,21 @@ var app6 = new Hono6().post("/:name/files/send", async (c) => {
   const pathErr = validateFilePath(body.filePath);
   if (pathErr) return c.json({ error: pathErr }, 400);
   const senderDir = mindDir(senderName);
-  const filePath = resolve5(senderDir, "home", body.filePath);
-  const MAX_FILE_SIZE = 50 * 1024 * 1024;
-  const stat4 = statSync(filePath, { throwIfNoEntry: false });
-  if (!stat4) return c.json({ error: `File not found: ${body.filePath}` }, 404);
-  if (stat4.size > MAX_FILE_SIZE) {
+  const filePath = resolve6(senderDir, "home", body.filePath);
+  const MAX_FILE_SIZE2 = 50 * 1024 * 1024;
+  const stat5 = statSync(filePath, { throwIfNoEntry: false });
+  if (!stat5) return c.json({ error: `File not found: ${body.filePath}` }, 404);
+  if (stat5.size > MAX_FILE_SIZE2) {
     return c.json(
       {
-        error: `File too large (${formatFileSize(stat4.size)}, max ${formatFileSize(MAX_FILE_SIZE)})`
+        error: `File too large (${formatFileSize(stat5.size)}, max ${formatFileSize(MAX_FILE_SIZE2)})`
       },
       413
     );
   }
   let content;
   try {
-    content = readFileSync4(filePath);
+    content = readFileSync5(filePath);
   } catch {
     return c.json({ error: `File not found: ${body.filePath}` }, 404);
   }
@@ -2248,31 +2043,31 @@ var app6 = new Hono6().post("/:name/files/send", async (c) => {
 var file_sharing_default = app6;
 
 // src/web/api/files.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { readdir, readFile, realpath, stat } from "fs/promises";
-import { extname, resolve as resolve6 } from "path";
+import { extname as extname2, resolve as resolve7 } from "path";
 import { Hono as Hono7 } from "hono";
 var ALLOWED_FILES = /* @__PURE__ */ new Set(["SOUL.md", "MEMORY.md", "CLAUDE.md", "VOLUTE.md"]);
-var AVATAR_MIME = {
+var AVATAR_MIME2 = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
   ".jpeg": "image/jpeg",
   ".gif": "image/gif",
   ".webp": "image/webp"
 };
-var MAX_AVATAR_SIZE = 2 * 1024 * 1024;
+var MAX_AVATAR_SIZE2 = 2 * 1024 * 1024;
 var app7 = new Hono7().get("/:name/avatar", async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(name);
   const config = readVoluteConfig(dir);
-  if (!config?.avatar) return c.json({ error: "No avatar configured" }, 404);
-  const ext = extname(config.avatar).toLowerCase();
-  const mime = AVATAR_MIME[ext];
+  if (!config?.profile?.avatar) return c.json({ error: "No avatar configured" }, 404);
+  const ext = extname2(config.profile.avatar).toLowerCase();
+  const mime = AVATAR_MIME2[ext];
   if (!mime) return c.json({ error: "Invalid avatar extension" }, 400);
-  const homeDir = resolve6(dir, "home");
-  const avatarPath = resolve6(homeDir, config.avatar);
+  const homeDir = resolve7(dir, "home");
+  const avatarPath = resolve7(homeDir, config.profile.avatar);
   if (!avatarPath.startsWith(`${homeDir}/`)) return c.json({ error: "Invalid avatar path" }, 400);
   let realAvatarPath;
   try {
@@ -2287,7 +2082,7 @@ var app7 = new Hono7().get("/:name/avatar", async (c) => {
   }
   try {
     const fileStat = await stat(realAvatarPath);
-    if (fileStat.size > MAX_AVATAR_SIZE) return c.json({ error: "Avatar file too large" }, 400);
+    if (fileStat.size > MAX_AVATAR_SIZE2) return c.json({ error: "Avatar file too large" }, 400);
     const body = await readFile(realAvatarPath);
     return c.body(body, 200, {
       "Content-Type": mime,
@@ -2301,8 +2096,8 @@ var app7 = new Hono7().get("/:name/avatar", async (c) => {
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(name);
-  const homeDir = resolve6(dir, "home");
-  if (!existsSync5(homeDir)) return c.json({ error: "Home directory missing" }, 404);
+  const homeDir = resolve7(dir, "home");
+  if (!existsSync6(homeDir)) return c.json({ error: "Home directory missing" }, 404);
   const allFiles = await readdir(homeDir);
   const files = allFiles.filter((f) => f.endsWith(".md") && ALLOWED_FILES.has(f));
   return c.json(files);
@@ -2315,8 +2110,8 @@ var app7 = new Hono7().get("/:name/avatar", async (c) => {
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(name);
-  const filePath = resolve6(dir, "home", filename);
-  if (!existsSync5(filePath)) {
+  const filePath = resolve7(dir, "home", filename);
+  if (!existsSync6(filePath)) {
     return c.json({ error: "File not found" }, 404);
   }
   const content = await readFile(filePath, "utf-8");
@@ -2329,19 +2124,19 @@ import { Hono as Hono8 } from "hono";
 
 // src/lib/identity.ts
 import { createHash, generateKeyPairSync, sign, verify } from "crypto";
-import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
-import { resolve as resolve7 } from "path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { resolve as resolve8 } from "path";
 function generateIdentity(mindDir2) {
-  const identityDir = resolve7(mindDir2, ".mind/identity");
-  mkdirSync3(identityDir, { recursive: true });
+  const identityDir = resolve8(mindDir2, ".mind/identity");
+  mkdirSync4(identityDir, { recursive: true });
   const { publicKey, privateKey } = generateKeyPairSync("ed25519", {
     publicKeyEncoding: { type: "spki", format: "pem" },
     privateKeyEncoding: { type: "pkcs8", format: "pem" }
   });
-  const privatePath = resolve7(identityDir, "private.pem");
-  const publicPath = resolve7(identityDir, "public.pem");
-  writeFileSync3(privatePath, privateKey, { mode: 384 });
-  writeFileSync3(publicPath, publicKey, { mode: 420 });
+  const privatePath = resolve8(identityDir, "private.pem");
+  const publicPath = resolve8(identityDir, "public.pem");
+  writeFileSync4(privatePath, privateKey, { mode: 384 });
+  writeFileSync4(publicPath, publicKey, { mode: 420 });
   const config = readVoluteConfig(mindDir2) ?? {};
   config.identity = {
     privateKey: ".mind/identity/private.pem",
@@ -2354,17 +2149,17 @@ function getPrivateKey(mindDir2) {
   const config = readVoluteConfig(mindDir2);
   const relPath = config?.identity?.privateKey;
   if (!relPath) return null;
-  const fullPath = resolve7(mindDir2, relPath);
-  if (!existsSync6(fullPath)) return null;
-  return readFileSync5(fullPath, "utf-8");
+  const fullPath = resolve8(mindDir2, relPath);
+  if (!existsSync7(fullPath)) return null;
+  return readFileSync6(fullPath, "utf-8");
 }
 function getPublicKey(mindDir2) {
   const config = readVoluteConfig(mindDir2);
   const relPath = config?.identity?.publicKey;
   if (!relPath) return null;
-  const fullPath = resolve7(mindDir2, relPath);
-  if (!existsSync6(fullPath)) return null;
-  return readFileSync5(fullPath, "utf-8");
+  const fullPath = resolve8(mindDir2, relPath);
+  if (!existsSync7(fullPath)) return null;
+  return readFileSync6(fullPath, "utf-8");
 }
 function getFingerprint(publicKeyPem) {
   return createHash("sha256").update(publicKeyPem).digest("hex");
@@ -2417,16 +2212,16 @@ var keys_default = app8;
 
 // src/web/api/logs.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync7 } from "fs";
-import { resolve as resolve8 } from "path";
+import { existsSync as existsSync8 } from "fs";
+import { resolve as resolve9 } from "path";
 import { Hono as Hono9 } from "hono";
 import { streamSSE as streamSSE2 } from "hono/streaming";
 var app9 = new Hono9().get("/:name/logs", async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const logFile = resolve8(stateDir(name), "logs", "mind.log");
-  if (!existsSync7(logFile)) {
+  const logFile = resolve9(stateDir(name), "logs", "mind.log");
+  if (!existsSync8(logFile)) {
     return c.json({ error: "No log file found" }, 404);
   }
   return streamSSE2(c, async (stream) => {
@@ -2444,17 +2239,17 @@ var app9 = new Hono9().get("/:name/logs", async (c) => {
     stream.onAbort(() => {
       tail.kill();
     });
-    await new Promise((resolve18) => {
-      tail.on("exit", resolve18);
-      stream.onAbort(resolve18);
+    await new Promise((resolve20) => {
+      tail.on("exit", resolve20);
+      stream.onAbort(resolve20);
     });
   });
 }).get("/:name/logs/tail", async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const logFile = resolve8(stateDir(name), "logs", "mind.log");
-  if (!existsSync7(logFile)) {
+  const logFile = resolve9(stateDir(name), "logs", "mind.log");
+  if (!existsSync8(logFile)) {
     return c.json({ error: "No log file found" }, 404);
   }
   const nParam = parseInt(c.req.query("n") ?? "50", 10);
@@ -2464,8 +2259,8 @@ var app9 = new Hono9().get("/:name/logs", async (c) => {
   tail.stdout.on("data", (data) => {
     output += data.toString();
   });
-  await new Promise((resolve18) => {
-    tail.on("exit", resolve18);
+  await new Promise((resolve20) => {
+    tail.on("exit", resolve20);
   });
   return c.text(output);
 });
@@ -2493,12 +2288,12 @@ var app10 = new Hono10().get("/:name/skills", async (c) => {
     const { skillId } = c.req.valid("json");
     const dir = mindDir(name);
     try {
-      await installSkill(name, dir, skillId);
+      const result = await installSkill(name, dir, skillId);
+      return c.json({ ok: true, ...result });
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       return c.json({ error: msg }, 400);
     }
-    return c.json({ ok: true });
   }
 ).post(
   "/:name/skills/update",
@@ -2555,33 +2350,33 @@ var mind_skills_default = app10;
 // src/web/api/minds.ts
 import {
   cpSync,
-  existsSync as existsSync9,
-  mkdirSync as mkdirSync5,
+  existsSync as existsSync10,
+  mkdirSync as mkdirSync6,
   readdirSync as readdirSync4,
-  readFileSync as readFileSync8,
-  rmSync as rmSync3,
-  writeFileSync as writeFileSync6
+  readFileSync as readFileSync9,
+  rmSync as rmSync4,
+  writeFileSync as writeFileSync7
 } from "fs";
-import { resolve as resolve11 } from "path";
+import { resolve as resolve12 } from "path";
 import { zValidator as zValidator3 } from "@hono/zod-validator";
-import { and as and3, desc as desc3, eq as eq4, sql as sql2 } from "drizzle-orm";
+import { and, desc as desc2, eq as eq2, sql } from "drizzle-orm";
 import { Hono as Hono11 } from "hono";
 import { z as z3 } from "zod";
 
 // src/lib/consolidate.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
-import { resolve as resolve9 } from "path";
+import { readdirSync as readdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
+import { resolve as resolve10 } from "path";
 async function consolidateMemory(mindDir2) {
-  const soulPath = resolve9(mindDir2, "home/SOUL.md");
-  const memoryPath = resolve9(mindDir2, "home/MEMORY.md");
-  const memoryDir = resolve9(mindDir2, "home/memory");
-  const soul = readFileSync6(soulPath, "utf-8");
+  const soulPath = resolve10(mindDir2, "home/SOUL.md");
+  const memoryPath = resolve10(mindDir2, "home/MEMORY.md");
+  const memoryDir = resolve10(mindDir2, "home/memory");
+  const soul = readFileSync7(soulPath, "utf-8");
   const logs = [];
   try {
     const files = readdirSync3(memoryDir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).sort();
     for (const filename of files) {
       const date = filename.replace(".md", "");
-      const content2 = readFileSync6(resolve9(memoryDir, filename), "utf-8").trim();
+      const content2 = readFileSync7(resolve10(memoryDir, filename), "utf-8").trim();
       if (content2) {
         logs.push(`### ${date}
 
@@ -2631,7 +2426,7 @@ ${content2}`);
   const data = await res.json();
   const content = data.content.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("").trim();
   if (content) {
-    writeFileSync4(memoryPath, `${content}
+    writeFileSync5(memoryPath, `${content}
 `);
     console.log("MEMORY.md created successfully.");
   } else {
@@ -2640,28 +2435,28 @@ ${content2}`);
 }
 
 // src/lib/convert-session.ts
-import { randomUUID as randomUUID2 } from "crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
+import { randomUUID } from "crypto";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
 import { homedir } from "os";
-import { resolve as resolve10 } from "path";
+import { resolve as resolve11 } from "path";
 function convertSession(opts) {
-  const lines = readFileSync7(opts.sessionPath, "utf-8").trim().split("\n");
-  const sessionId = randomUUID2();
+  const lines = readFileSync8(opts.sessionPath, "utf-8").trim().split("\n");
+  const sessionId = randomUUID();
   const idMap = /* @__PURE__ */ new Map();
-  const messages2 = [];
+  const messages = [];
   for (const line of lines) {
     const event = JSON.parse(line);
     if (event.type === "message" && event.message) {
-      messages2.push(event);
+      messages.push(event);
     }
   }
   const sdkEvents = [];
   let lastSdkUuid = null;
-  for (let i = 0; i < messages2.length; i++) {
-    const event = messages2[i];
+  for (let i = 0; i < messages.length; i++) {
+    const event = messages[i];
     const msg = event.message;
     if (msg.role === "user") {
-      const uuid = randomUUID2();
+      const uuid = randomUUID();
       idMap.set(event.id, uuid);
       const parentUuid = event.parentId ? idMap.get(event.parentId) ?? null : null;
       const sdkEvent = {
@@ -2685,7 +2480,7 @@ function convertSession(opts) {
     } else if (msg.role === "assistant") {
       const content = convertAssistantContent(msg.content);
       if (content.length === 0) continue;
-      const uuid = randomUUID2();
+      const uuid = randomUUID();
       idMap.set(event.id, uuid);
       const parentUuid = event.parentId ? idMap.get(event.parentId) ?? null : null;
       const stopReason = mapStopReason(msg.stopReason);
@@ -2700,12 +2495,12 @@ function convertSession(opts) {
         isSidechain: false,
         userType: "external",
         type: "assistant",
-        requestId: `req_imported_${randomUUID2()}`,
+        requestId: `req_imported_${randomUUID()}`,
         message: {
           role: "assistant",
           content,
           type: "message",
-          id: `msg_imported_${randomUUID2()}`,
+          id: `msg_imported_${randomUUID()}`,
           model: mapModel(msg.model),
           stop_reason: stopReason,
           stop_sequence: null,
@@ -2719,8 +2514,8 @@ function convertSession(opts) {
       let lastToolResultId = event.id;
       let lastTimestamp = event.timestamp;
       let j = i;
-      while (j < messages2.length && messages2[j].message.role === "toolResult") {
-        const tr = messages2[j];
+      while (j < messages.length && messages[j].message.role === "toolResult") {
+        const tr = messages[j];
         const trMsg = tr.message;
         lastToolResultId = tr.id;
         lastTimestamp = tr.timestamp;
@@ -2733,7 +2528,7 @@ function convertSession(opts) {
         j++;
       }
       i = j - 1;
-      const uuid = randomUUID2();
+      const uuid = randomUUID();
       idMap.set(lastToolResultId, uuid);
       const parentUuid = event.parentId ? idMap.get(event.parentId) ?? null : lastSdkUuid;
       const sdkEvent = {
@@ -2759,10 +2554,10 @@ function convertSession(opts) {
     }
   }
   const projectId = opts.projectDir.replace(/\//g, "-");
-  const sdkDir = resolve10(homedir(), ".claude", "projects", projectId);
-  mkdirSync4(sdkDir, { recursive: true });
-  const sdkPath = resolve10(sdkDir, `${sessionId}.jsonl`);
-  writeFileSync5(sdkPath, `${sdkEvents.join("\n")}
+  const sdkDir = resolve11(homedir(), ".claude", "projects", projectId);
+  mkdirSync5(sdkDir, { recursive: true });
+  const sdkPath = resolve11(sdkDir, `${sessionId}.jsonl`);
+  writeFileSync6(sdkPath, `${sdkEvents.join("\n")}
 `);
   console.log(`Converted ${sdkEvents.length} messages \u2192 ${sdkPath}`);
   return sessionId;
@@ -2814,7 +2609,7 @@ function convertAssistantContent(content) {
 }
 
 // src/lib/variant-cleanup.ts
-import { existsSync as existsSync8, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync9, rmSync as rmSync3 } from "fs";
 async function cleanupVariant(mindName, variantName, projectRoot, variantPath, opts) {
   if (opts?.stop) {
     try {
@@ -2822,11 +2617,11 @@ async function cleanupVariant(mindName, variantName, projectRoot, variantPath, o
     } catch {
     }
   }
-  if (existsSync8(variantPath)) {
+  if (existsSync9(variantPath)) {
     try {
       await gitExec(["worktree", "remove", "--force", variantPath], { cwd: projectRoot });
     } catch {
-      rmSync2(variantPath, { recursive: true, force: true });
+      rmSync3(variantPath, { recursive: true, force: true });
       try {
         await gitExec(["worktree", "prune"], { cwd: projectRoot });
       } catch {
@@ -2853,7 +2648,7 @@ async function getMindStatus(name, port) {
   const manager = getMindManager();
   let status = "stopped";
   try {
-    const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+    const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
     if (getSleepManagerIfReady()?.isSleeping(name)) {
       status = "sleeping";
     }
@@ -2888,9 +2683,9 @@ async function getMindStatus(name, port) {
   return {
     status,
     channels,
-    displayName: config?.displayName,
-    description: config?.description,
-    avatar: config?.avatar
+    displayName: config?.profile?.displayName,
+    description: config?.profile?.description,
+    avatar: config?.profile?.avatar
   };
 }
 var TEMPLATE_BRANCH = "volute/template";
@@ -2911,7 +2706,7 @@ async function initTemplateBranch(projectRoot, composedDir, manifest, mindName,
   await gitExec(["commit", "-m", "initial commit"], opts);
 }
 async function updateTemplateBranch(projectRoot, template, mindName) {
-  const tempWorktree = resolve11(projectRoot, ".variants", "_template_update");
+  const tempWorktree = resolve12(projectRoot, ".variants", "_template_update");
   let branchExists = false;
   try {
     await gitExec(["rev-parse", "--verify", TEMPLATE_BRANCH], { cwd: projectRoot });
@@ -2922,8 +2717,8 @@ async function updateTemplateBranch(projectRoot, template, mindName) {
     await gitExec(["worktree", "remove", "--force", tempWorktree], { cwd: projectRoot });
   } catch {
   }
-  if (existsSync9(tempWorktree)) {
-    rmSync3(tempWorktree, { recursive: true, force: true });
+  if (existsSync10(tempWorktree)) {
+    rmSync4(tempWorktree, { recursive: true, force: true });
   }
   const templatesRoot = findTemplatesRoot();
   const { composedDir, manifest } = composeTemplate(templatesRoot, template);
@@ -2943,9 +2738,9 @@ async function updateTemplateBranch(projectRoot, template, mindName) {
       });
     }
     copyTemplateToDir(composedDir, tempWorktree, mindName, manifest);
-    const initDir = resolve11(tempWorktree, ".init");
-    if (existsSync9(initDir)) {
-      rmSync3(initDir, { recursive: true, force: true });
+    const initDir = resolve12(tempWorktree, ".init");
+    if (existsSync10(initDir)) {
+      rmSync4(initDir, { recursive: true, force: true });
     }
     await gitExec(["add", "-A"], { cwd: tempWorktree });
     try {
@@ -2958,10 +2753,10 @@ async function updateTemplateBranch(projectRoot, template, mindName) {
       await gitExec(["worktree", "remove", "--force", tempWorktree], { cwd: projectRoot });
     } catch {
     }
-    if (existsSync9(tempWorktree)) {
-      rmSync3(tempWorktree, { recursive: true, force: true });
+    if (existsSync10(tempWorktree)) {
+      rmSync4(tempWorktree, { recursive: true, force: true });
     }
-    rmSync3(composedDir, { recursive: true, force: true });
+    rmSync4(composedDir, { recursive: true, force: true });
   }
 }
 async function mergeTemplateBranch(worktreeDir) {
@@ -2984,14 +2779,14 @@ async function mergeTemplateBranch(worktreeDir) {
 async function npmInstallAsMind(cwd, mindName) {
   if (isIsolationEnabled()) {
     const [cmd, args] = wrapForIsolation("npm", ["install"], mindName);
-    await exec(cmd, args, { cwd, env: { ...process.env, HOME: resolve11(cwd, "home") } });
+    await exec(cmd, args, { cwd, env: { ...process.env, HOME: resolve12(cwd, "home") } });
   } else {
     await exec("npm", ["install"], { cwd });
   }
 }
 async function importFromArchive(c, tempDir, nameOverride, manifest) {
-  const extractedMindDir = resolve11(tempDir, "mind");
-  if (!existsSync9(extractedMindDir)) {
+  const extractedMindDir = resolve12(tempDir, "mind");
+  if (!existsSync10(extractedMindDir)) {
     return c.json({ error: "Invalid archive: missing mind/ directory" }, 400);
   }
   if (!manifest?.includes || !manifest.name || !manifest.template) {
@@ -3009,21 +2804,21 @@ async function importFromFullArchive(c, tempDir, extractedMindDir, nameOverride,
   if (findMind(name)) return c.json({ error: `Mind already exists: ${name}` }, 409);
   ensureVoluteHome();
   const dest = mindDir(name);
-  if (existsSync9(dest)) return c.json({ error: "Mind directory already exists" }, 409);
+  if (existsSync10(dest)) return c.json({ error: "Mind directory already exists" }, 409);
   try {
     cpSync(extractedMindDir, dest, { recursive: true });
     if (!manifest.includes.identity) {
       generateIdentity(dest);
     }
     const state = stateDir(name);
-    mkdirSync5(state, { recursive: true });
-    const channelsJson = resolve11(tempDir, "state/channels.json");
-    if (existsSync9(channelsJson)) {
-      cpSync(channelsJson, resolve11(state, "channels.json"));
+    mkdirSync6(state, { recursive: true });
+    const channelsJson = resolve12(tempDir, "state/channels.json");
+    if (existsSync10(channelsJson)) {
+      cpSync(channelsJson, resolve12(state, "channels.json"));
     }
-    const envJson = resolve11(tempDir, "state/env.json");
-    if (existsSync9(envJson)) {
-      cpSync(envJson, resolve11(state, "env.json"));
+    const envJson = resolve12(tempDir, "state/env.json");
+    if (existsSync10(envJson)) {
+      cpSync(envJson, resolve12(state, "env.json"));
     }
     const port = nextPort();
     addMind(name, port, manifest.stage, manifest.template);
@@ -3032,36 +2827,36 @@ async function importFromFullArchive(c, tempDir, extractedMindDir, nameOverride,
     } catch (err) {
       logger_default.warn(`failed to set template hash for ${name}`, logger_default.errorData(err));
     }
-    const homeDir = resolve11(dest, "home");
+    const homeDir = resolve12(dest, "home");
     ensureVoluteGroup();
     createMindUser(name, homeDir);
     chownMindDir(dest, name);
     await npmInstallAsMind(dest, name);
     await importHistoryFromArchive(name, tempDir);
     importSessionsFromArchive(dest, tempDir);
-    if (!existsSync9(resolve11(dest, ".git"))) {
+    if (!existsSync10(resolve12(dest, ".git"))) {
       try {
-        const env = isIsolationEnabled() ? { ...process.env, HOME: resolve11(dest, "home") } : void 0;
+        const env = isIsolationEnabled() ? { ...process.env, HOME: resolve12(dest, "home") } : void 0;
         await gitExec(["init"], { cwd: dest, mindName: name, env });
         await configureGitIdentity(name, { cwd: dest, mindName: name, env });
         await gitExec(["add", "-A"], { cwd: dest, mindName: name, env });
         await gitExec(["commit", "-m", "import from archive"], { cwd: dest, mindName: name, env });
       } catch (err) {
         logger_default.error(`git setup failed for imported mind ${name}`, logger_default.errorData(err));
-        rmSync3(resolve11(dest, ".git"), { recursive: true, force: true });
+        rmSync4(resolve12(dest, ".git"), { recursive: true, force: true });
       }
     }
     chownMindDir(dest, name);
-    rmSync3(tempDir, { recursive: true, force: true });
+    rmSync4(tempDir, { recursive: true, force: true });
     return c.json({ ok: true, name, port, message: `Imported mind: ${name} (port ${port})` });
   } catch (err) {
-    if (existsSync9(dest)) rmSync3(dest, { recursive: true, force: true });
+    if (existsSync10(dest)) rmSync4(dest, { recursive: true, force: true });
     try {
       removeMind(name);
     } catch (cleanupErr) {
       logger_default.error(`Failed to clean up registry for ${name}`, logger_default.errorData(cleanupErr));
     }
-    rmSync3(tempDir, { recursive: true, force: true });
+    rmSync4(tempDir, { recursive: true, force: true });
     return c.json({ error: err instanceof Error ? err.message : "Failed to import mind" }, 500);
   }
 }
@@ -3072,7 +2867,7 @@ async function importFromHomeOnlyArchive(c, tempDir, extractedMindDir, nameOverr
   if (findMind(name)) return c.json({ error: `Mind already exists: ${name}` }, 409);
   ensureVoluteHome();
   const dest = mindDir(name);
-  if (existsSync9(dest)) return c.json({ error: "Mind directory already exists" }, 409);
+  if (existsSync10(dest)) return c.json({ error: "Mind directory already exists" }, 409);
   const templatesRoot = findTemplatesRoot();
   const { composedDir, manifest: templateManifest } = composeTemplate(
     templatesRoot,
@@ -3081,40 +2876,40 @@ async function importFromHomeOnlyArchive(c, tempDir, extractedMindDir, nameOverr
   try {
     copyTemplateToDir(composedDir, dest, name, templateManifest);
     applyInitFiles(dest);
-    const extractedHome = resolve11(extractedMindDir, "home");
-    if (existsSync9(extractedHome)) {
-      cpSync(extractedHome, resolve11(dest, "home"), { recursive: true });
+    const extractedHome = resolve12(extractedMindDir, "home");
+    if (existsSync10(extractedHome)) {
+      cpSync(extractedHome, resolve12(dest, "home"), { recursive: true });
     }
-    const extractedMindInternal = resolve11(extractedMindDir, ".mind");
-    if (existsSync9(extractedMindInternal)) {
-      cpSync(extractedMindInternal, resolve11(dest, ".mind"), { recursive: true });
+    const extractedMindInternal = resolve12(extractedMindDir, ".mind");
+    if (existsSync10(extractedMindInternal)) {
+      cpSync(extractedMindInternal, resolve12(dest, ".mind"), { recursive: true });
     }
-    const identityDir = resolve11(dest, ".mind/identity");
+    const identityDir = resolve12(dest, ".mind/identity");
     let publicKeyPem;
-    if (!manifest.includes.identity || !existsSync9(resolve11(identityDir, "private.pem"))) {
+    if (!manifest.includes.identity || !existsSync10(resolve12(identityDir, "private.pem"))) {
       ({ publicKeyPem } = generateIdentity(dest));
     } else {
-      publicKeyPem = readFileSync8(resolve11(identityDir, "public.pem"), "utf-8");
+      publicKeyPem = readFileSync9(resolve12(identityDir, "public.pem"), "utf-8");
     }
-    const promptsPath = resolve11(dest, "home/.config/prompts.json");
-    if (!existsSync9(promptsPath)) {
+    const promptsPath = resolve12(dest, "home/.config/prompts.json");
+    if (!existsSync10(promptsPath)) {
       const mindPrompts = await getMindPromptDefaults();
-      writeFileSync6(promptsPath, `${JSON.stringify(mindPrompts, null, 2)}
+      writeFileSync7(promptsPath, `${JSON.stringify(mindPrompts, null, 2)}
 `);
     }
     const state = stateDir(name);
-    mkdirSync5(state, { recursive: true });
-    const channelsJson = resolve11(tempDir, "state/channels.json");
-    if (existsSync9(channelsJson)) {
-      cpSync(channelsJson, resolve11(state, "channels.json"));
+    mkdirSync6(state, { recursive: true });
+    const channelsJson = resolve12(tempDir, "state/channels.json");
+    if (existsSync10(channelsJson)) {
+      cpSync(channelsJson, resolve12(state, "channels.json"));
     }
-    const envJson = resolve11(tempDir, "state/env.json");
-    if (existsSync9(envJson)) {
-      cpSync(envJson, resolve11(state, "env.json"));
+    const envJson = resolve12(tempDir, "state/env.json");
+    if (existsSync10(envJson)) {
+      cpSync(envJson, resolve12(state, "env.json"));
     }
     const port = nextPort();
     addMind(name, port, manifest.stage, manifest.template);
-    const homeDir = resolve11(dest, "home");
+    const homeDir = resolve12(dest, "home");
     ensureVoluteGroup();
     createMindUser(name, homeDir);
     chownMindDir(dest, name);
@@ -3127,7 +2922,7 @@ async function importFromHomeOnlyArchive(c, tempDir, extractedMindDir, nameOverr
       await initTemplateBranch(dest, composedDir, templateManifest, name, env);
     } catch (err) {
       logger_default.error(`git setup failed for imported mind ${name}`, logger_default.errorData(err));
-      rmSync3(resolve11(dest, ".git"), { recursive: true, force: true });
+      rmSync4(resolve12(dest, ".git"), { recursive: true, force: true });
       gitWarning = "Git setup failed \u2014 variants and upgrades won't be available until git is initialized.";
     }
     try {
@@ -3151,7 +2946,7 @@ async function importFromHomeOnlyArchive(c, tempDir, extractedMindDir, nameOverr
     publishPublicKey(name, publicKeyPem).catch(
       (err) => logger_default.warn(`failed to publish key for ${name}`, { error: err.message })
     );
-    rmSync3(tempDir, { recursive: true, force: true });
+    rmSync4(tempDir, { recursive: true, force: true });
     return c.json({
       ok: true,
       name,
@@ -3162,24 +2957,24 @@ async function importFromHomeOnlyArchive(c, tempDir, extractedMindDir, nameOverr
       ...skillWarnings.length > 0 && { skillWarnings }
     });
   } catch (err) {
-    if (existsSync9(dest)) rmSync3(dest, { recursive: true, force: true });
+    if (existsSync10(dest)) rmSync4(dest, { recursive: true, force: true });
     try {
       removeMind(name);
     } catch (cleanupErr) {
       logger_default.error(`Failed to clean up registry for ${name}`, logger_default.errorData(cleanupErr));
     }
-    rmSync3(tempDir, { recursive: true, force: true });
+    rmSync4(tempDir, { recursive: true, force: true });
     return c.json({ error: err instanceof Error ? err.message : "Failed to import mind" }, 500);
   } finally {
-    rmSync3(composedDir, { recursive: true, force: true });
+    rmSync4(composedDir, { recursive: true, force: true });
   }
 }
 async function importHistoryFromArchive(name, tempDir) {
-  const historyJsonl = resolve11(tempDir, "history.jsonl");
-  if (!existsSync9(historyJsonl)) return;
+  const historyJsonl = resolve12(tempDir, "history.jsonl");
+  if (!existsSync10(historyJsonl)) return;
   try {
     const db = await getDb();
-    const lines = readFileSync8(historyJsonl, "utf-8").trim().split("\n");
+    const lines = readFileSync9(historyJsonl, "utf-8").trim().split("\n");
     let imported = 0;
     let failed = 0;
     for (const line of lines) {
@@ -3215,13 +3010,13 @@ async function importHistoryFromArchive(name, tempDir) {
   }
 }
 function importSessionsFromArchive(dest, tempDir) {
-  const sessionsDir = resolve11(tempDir, "sessions");
-  if (!existsSync9(sessionsDir)) return;
+  const sessionsDir = resolve12(tempDir, "sessions");
+  if (!existsSync10(sessionsDir)) return;
   try {
-    const destSessions = resolve11(dest, ".mind/sessions");
-    mkdirSync5(destSessions, { recursive: true });
+    const destSessions = resolve12(dest, ".mind/sessions");
+    mkdirSync6(destSessions, { recursive: true });
     for (const file of readdirSync4(sessionsDir)) {
-      cpSync(resolve11(sessionsDir, file), resolve11(destSessions, file));
+      cpSync(resolve12(sessionsDir, file), resolve12(destSessions, file));
     }
   } catch (err) {
     logger_default.error("Failed to import sessions from archive", logger_default.errorData(err));
@@ -3244,7 +3039,7 @@ var app11 = new Hono11().post("/", requireAdmin, zValidator3("json", createMindS
   if (findMind(name)) return c.json({ error: `Mind already exists: ${name}` }, 409);
   ensureVoluteHome();
   const dest = mindDir(name);
-  if (existsSync9(dest)) return c.json({ error: "Mind directory already exists" }, 409);
+  if (existsSync10(dest)) return c.json({ error: "Mind directory already exists" }, 409);
   const templatesRoot = findTemplatesRoot();
   const { composedDir, manifest } = composeTemplate(templatesRoot, template);
   try {
@@ -3254,19 +3049,19 @@ var app11 = new Hono11().post("/", requireAdmin, zValidator3("json", createMindS
     if (body.description) {
       const seedConfig = readVoluteConfig(dest);
       if (!seedConfig) throw new Error("Failed to read volute.json after identity generation");
-      seedConfig.description = body.description;
+      seedConfig.profile = { ...seedConfig.profile, description: body.description };
       writeVoluteConfig(dest, seedConfig);
     }
     if (body.model) {
-      const configPath2 = resolve11(dest, "home/.config/config.json");
-      const existing = existsSync9(configPath2) ? JSON.parse(readFileSync8(configPath2, "utf-8")) : {};
+      const configPath2 = resolve12(dest, "home/.config/config.json");
+      const existing = existsSync10(configPath2) ? JSON.parse(readFileSync9(configPath2, "utf-8")) : {};
       existing.model = body.model;
-      writeFileSync6(configPath2, `${JSON.stringify(existing, null, 2)}
+      writeFileSync7(configPath2, `${JSON.stringify(existing, null, 2)}
 `);
     }
     const mindPrompts = await getMindPromptDefaults();
-    writeFileSync6(
-      resolve11(dest, "home/.config/prompts.json"),
+    writeFileSync7(
+      resolve12(dest, "home/.config/prompts.json"),
       `${JSON.stringify(mindPrompts, null, 2)}
 `
     );
@@ -3277,7 +3072,7 @@ var app11 = new Hono11().post("/", requireAdmin, zValidator3("json", createMindS
     } catch (err) {
       logger_default.warn(`failed to set template hash for ${name}`, logger_default.errorData(err));
     }
-    const homeDir = resolve11(dest, "home");
+    const homeDir = resolve12(dest, "home");
     ensureVoluteGroup();
     createMindUser(name, homeDir);
     chownMindDir(dest, name);
@@ -3290,7 +3085,7 @@ var app11 = new Hono11().post("/", requireAdmin, zValidator3("json", createMindS
       await initTemplateBranch(dest, composedDir, manifest, name, env);
     } catch (err) {
       logger_default.error(`git setup failed for ${name}`, logger_default.errorData(err));
-      rmSync3(resolve11(dest, ".git"), { recursive: true, force: true });
+      rmSync4(resolve12(dest, ".git"), { recursive: true, force: true });
       gitWarning = "Git setup failed \u2014 variants and upgrades won't be available until git is initialized.";
     }
     try {
@@ -3305,7 +3100,7 @@ The human who planted you described you as: "${body.description}"
 ` : "";
       const seedSoulRaw = body.seedSoul ?? await getPrompt("seed_soul", { name, description: descLine });
       const seedSoul = body.seedSoul ? substitute(seedSoulRaw, { name, description: descLine }) : seedSoulRaw;
-      writeFileSync6(resolve11(dest, "home/SOUL.md"), seedSoul);
+      writeFileSync7(resolve12(dest, "home/SOUL.md"), seedSoul);
     }
     const skillSet = body.skills ?? (body.stage === "seed" ? SEED_SKILLS : STANDARD_SKILLS);
     const skillWarnings = [];
@@ -3320,11 +3115,11 @@ The human who planted you described you as: "${body.description}"
     if (body.stage !== "seed") {
       const customSoul = await getPromptIfCustom("default_soul");
       if (customSoul) {
-        writeFileSync6(resolve11(dest, "home/SOUL.md"), customSoul.replace(/\{\{name\}\}/g, name));
+        writeFileSync7(resolve12(dest, "home/SOUL.md"), customSoul.replace(/\{\{name\}\}/g, name));
       }
       const customMemory = await getPromptIfCustom("default_memory");
       if (customMemory) {
-        writeFileSync6(resolve11(dest, "home/MEMORY.md"), customMemory);
+        writeFileSync7(resolve12(dest, "home/MEMORY.md"), customMemory);
       }
     }
     publishPublicKey(name, publicKeyPem).catch(
@@ -3351,14 +3146,14 @@ The human who planted you described you as: "${body.description}"
       ...skillWarnings.length > 0 && { skillWarnings }
     });
   } catch (err) {
-    if (existsSync9(dest)) rmSync3(dest, { recursive: true, force: true });
+    if (existsSync10(dest)) rmSync4(dest, { recursive: true, force: true });
     try {
       removeMind(name);
     } catch {
     }
     return c.json({ error: err instanceof Error ? err.message : "Failed to create mind" }, 500);
   } finally {
-    rmSync3(composedDir, { recursive: true, force: true });
+    rmSync4(composedDir, { recursive: true, force: true });
   }
 }).post("/import", requireAdmin, async (c) => {
   let body;
@@ -3371,13 +3166,13 @@ The human who planted you described you as: "${body.description}"
     return importFromArchive(c, body.archivePath, body.name, body.manifest);
   }
   const wsDir = body.workspacePath;
-  if (!wsDir || !existsSync9(resolve11(wsDir, "SOUL.md")) || !existsSync9(resolve11(wsDir, "IDENTITY.md"))) {
+  if (!wsDir || !existsSync10(resolve12(wsDir, "SOUL.md")) || !existsSync10(resolve12(wsDir, "IDENTITY.md"))) {
     return c.json({ error: "Invalid workspace: missing SOUL.md or IDENTITY.md" }, 400);
   }
-  const soul = readFileSync8(resolve11(wsDir, "SOUL.md"), "utf-8");
-  const identity = readFileSync8(resolve11(wsDir, "IDENTITY.md"), "utf-8");
-  const userPath = resolve11(wsDir, "USER.md");
-  const user = existsSync9(userPath) ? readFileSync8(userPath, "utf-8") : "";
+  const soul = readFileSync9(resolve12(wsDir, "SOUL.md"), "utf-8");
+  const identity = readFileSync9(resolve12(wsDir, "IDENTITY.md"), "utf-8");
+  const userPath = resolve12(wsDir, "USER.md");
+  const user = existsSync10(userPath) ? readFileSync9(userPath, "utf-8") : "";
   const name = body.name ?? parseNameFromIdentity(identity) ?? "imported-mind";
   const template = body.template ?? "claude";
   const nameErr = validateMindName(name);
@@ -3397,33 +3192,33 @@ ${user.trimEnd()}
 ` : "";
   ensureVoluteHome();
   const dest = mindDir(name);
-  if (existsSync9(dest)) return c.json({ error: "Mind directory already exists" }, 409);
+  if (existsSync10(dest)) return c.json({ error: "Mind directory already exists" }, 409);
   const templatesRoot = findTemplatesRoot();
   const { composedDir, manifest } = composeTemplate(templatesRoot, template);
   try {
     copyTemplateToDir(composedDir, dest, name, manifest);
     applyInitFiles(dest);
     const { publicKeyPem: importPublicKey } = generateIdentity(dest);
-    writeFileSync6(resolve11(dest, "home/SOUL.md"), mergedSoul);
-    const wsMemoryPath = resolve11(wsDir, "MEMORY.md");
-    const hasMemory = existsSync9(wsMemoryPath);
+    writeFileSync7(resolve12(dest, "home/SOUL.md"), mergedSoul);
+    const wsMemoryPath = resolve12(wsDir, "MEMORY.md");
+    const hasMemory = existsSync10(wsMemoryPath);
     if (hasMemory) {
-      const existingMemory = readFileSync8(wsMemoryPath, "utf-8");
-      writeFileSync6(
-        resolve11(dest, "home/MEMORY.md"),
+      const existingMemory = readFileSync9(wsMemoryPath, "utf-8");
+      writeFileSync7(
+        resolve12(dest, "home/MEMORY.md"),
         `${existingMemory.trimEnd()}${mergedMemoryExtra}`
       );
     } else if (user) {
-      writeFileSync6(resolve11(dest, "home/MEMORY.md"), `${user.trimEnd()}
+      writeFileSync7(resolve12(dest, "home/MEMORY.md"), `${user.trimEnd()}
 `);
     }
-    const wsMemoryDir = resolve11(wsDir, "memory");
+    const wsMemoryDir = resolve12(wsDir, "memory");
     let dailyLogCount = 0;
-    if (existsSync9(wsMemoryDir)) {
-      const destMemoryDir = resolve11(dest, "home/memory");
+    if (existsSync10(wsMemoryDir)) {
+      const destMemoryDir = resolve12(dest, "home/memory");
       const files = readdirSync4(wsMemoryDir).filter((f) => f.endsWith(".md"));
       for (const file of files) {
-        cpSync(resolve11(wsMemoryDir, file), resolve11(destMemoryDir, file));
+        cpSync(resolve12(wsMemoryDir, file), resolve12(destMemoryDir, file));
       }
       dailyLogCount = files.length;
     }
@@ -3434,7 +3229,7 @@ ${user.trimEnd()}
     } catch (err) {
       logger_default.warn(`failed to set template hash for ${name}`, logger_default.errorData(err));
     }
-    const homeDir = resolve11(dest, "home");
+    const homeDir = resolve12(dest, "home");
     ensureVoluteGroup();
     createMindUser(name, homeDir);
     chownMindDir(dest, name);
@@ -3442,20 +3237,20 @@ ${user.trimEnd()}
     if (!hasMemory && dailyLogCount > 0) {
       await consolidateMemory(dest);
     }
-    const env = isIsolationEnabled() ? { ...process.env, HOME: resolve11(dest, "home") } : void 0;
+    const env = isIsolationEnabled() ? { ...process.env, HOME: resolve12(dest, "home") } : void 0;
     await gitExec(["init"], { cwd: dest, mindName: name, env });
     await configureGitIdentity(name, { cwd: dest, mindName: name, env });
     await gitExec(["add", "-A"], { cwd: dest, mindName: name, env });
     await gitExec(["commit", "-m", "import from OpenClaw"], { cwd: dest, mindName: name, env });
-    const sessionFile = body.sessionPath ? resolve11(body.sessionPath) : findOpenClawSession(wsDir);
-    if (sessionFile && existsSync9(sessionFile)) {
+    const sessionFile = body.sessionPath ? resolve12(body.sessionPath) : findOpenClawSession(wsDir);
+    if (sessionFile && existsSync10(sessionFile)) {
       if (template === "pi") {
         importPiSession(sessionFile, dest);
       } else if (template === "claude") {
         const sessionId = convertSession({ sessionPath: sessionFile, projectDir: dest });
-        const mindRuntimeDir = resolve11(dest, ".mind");
-        mkdirSync5(mindRuntimeDir, { recursive: true });
-        writeFileSync6(resolve11(mindRuntimeDir, "session.json"), JSON.stringify({ sessionId }));
+        const mindRuntimeDir = resolve12(dest, ".mind");
+        mkdirSync6(mindRuntimeDir, { recursive: true });
+        writeFileSync7(resolve12(mindRuntimeDir, "session.json"), JSON.stringify({ sessionId }));
       }
     }
     importOpenClawConnectors(name, dest);
@@ -3470,14 +3265,14 @@ ${user.trimEnd()}
     );
     return c.json({ ok: true, name, port, message: `Imported mind: ${name} (port ${port})` });
   } catch (err) {
-    if (existsSync9(dest)) rmSync3(dest, { recursive: true, force: true });
+    if (existsSync10(dest)) rmSync4(dest, { recursive: true, force: true });
     try {
       removeMind(name);
     } catch {
     }
     return c.json({ error: err instanceof Error ? err.message : "Failed to import mind" }, 500);
   } finally {
-    rmSync3(composedDir, { recursive: true, force: true });
+    rmSync4(composedDir, { recursive: true, force: true });
   }
 }).get("/", async (c) => {
   const entries = readRegistry();
@@ -3486,7 +3281,7 @@ ${user.trimEnd()}
     const db = await getDb();
     const lastActiveRows = await db.select({
       mind: mindHistory.mind,
-      lastActiveAt: sql2`MAX(${mindHistory.created_at})`
+      lastActiveAt: sql`MAX(${mindHistory.created_at})`
     }).from(mindHistory).groupBy(mindHistory.mind);
     lastActiveMap = new Map(lastActiveRows.map((r) => [r.mind, r.lastActiveAt]));
   } catch {
@@ -3494,7 +3289,7 @@ ${user.trimEnd()}
   const minds = await Promise.all(
     entries.map(async (entry) => {
       const mindStatus = await getMindStatus(entry.name, entry.port);
-      const hasPages = existsSync9(resolve11(mindDir(entry.name), "home", "pages"));
+      const hasPages = existsSync10(resolve12(mindDir(entry.name), "home", "public", "pages"));
       return {
         ...entry,
         ...mindStatus,
@@ -3512,7 +3307,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  if (!existsSync9(mindDir(name))) return c.json({ error: "Mind directory missing" }, 404);
+  if (!existsSync10(mindDir(name))) return c.json({ error: "Mind directory missing" }, 404);
   const mindStatus = await getMindStatus(name, entry.port);
   const variants = readVariants(name);
   const manager = getMindManager();
@@ -3527,7 +3322,7 @@ ${user.trimEnd()}
       return { name: v.name, port: v.port, status: variantStatus };
     })
   );
-  const hasPages = existsSync9(resolve11(mindDir(name), "home", "pages"));
+  const hasPages = existsSync10(resolve12(mindDir(name), "home", "public", "pages"));
   return c.json({ ...entry, ...mindStatus, variants: variantStatuses, hasPages });
 }).post("/:name/start", requireAdmin, async (c) => {
   const name = c.req.param("name");
@@ -3541,7 +3336,7 @@ ${user.trimEnd()}
     targetPort = variant.port;
   } else {
     const dir = mindDir(baseName);
-    if (!existsSync9(dir)) return c.json({ error: "Mind directory missing" }, 404);
+    if (!existsSync10(dir)) return c.json({ error: "Mind directory missing" }, 404);
   }
   if (getMindManager().isRunning(name)) {
     return c.json({ error: "Mind already running" }, 409);
@@ -3564,7 +3359,7 @@ ${user.trimEnd()}
     targetPort = variant.port;
   } else {
     const dir = mindDir(baseName);
-    if (!existsSync9(dir)) return c.json({ error: "Mind directory missing" }, 404);
+    if (!existsSync10(dir)) return c.json({ error: "Mind directory missing" }, 404);
   }
   let context;
   const contentType = c.req.header("content-type");
@@ -3591,7 +3386,7 @@ ${user.trimEnd()}
       const variant = findVariant(baseName, mergeVariantName);
       if (variant) {
         const projectRoot = mindDir(baseName);
-        if (existsSync9(variant.path)) {
+        if (existsSync10(variant.path)) {
           const status = (await gitExec(["status", "--porcelain"], { cwd: variant.path })).trim();
           if (status) {
             try {
@@ -3627,13 +3422,13 @@ ${user.trimEnd()}
         }
       }
     }
-    if (context) {
+    if (context && context.type !== "reload") {
       manager.setPendingContext(name, context);
     }
     if (context?.type === "sprouted" && !variantName) {
       try {
         const db = await getDb();
-        const activeConvs = await db.select({ id: conversations.id }).from(conversations).where(eq4(conversations.mind_name, baseName)).all();
+        const activeConvs = await db.select({ id: conversations.id }).from(conversations).where(eq2(conversations.mind_name, baseName)).all();
         for (const conv of activeConvs) {
           await addMessage(conv.id, "assistant", "system", [
             { type: "text", text: "[seed has sprouted]" }
@@ -3671,7 +3466,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   return c.json(sm.getState(name));
@@ -3679,7 +3474,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   if (sm.isSleeping(name)) return c.json({ error: "Mind is already sleeping" }, 409);
@@ -3699,7 +3494,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   if (!sm.isSleeping(name)) return c.json({ error: "Mind is not sleeping" }, 409);
@@ -3709,7 +3504,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   const flushed = await sm.flushQueuedMessages(name);
@@ -3742,11 +3537,11 @@ ${user.trimEnd()}
   removeMind(name);
   await deleteMindUser2(name);
   const state = stateDir(name);
-  if (existsSync9(state)) {
-    rmSync3(state, { recursive: true, force: true });
+  if (existsSync10(state)) {
+    rmSync4(state, { recursive: true, force: true });
   }
-  if (force && existsSync9(dir)) {
-    rmSync3(dir, { recursive: true, force: true });
+  if (force && existsSync10(dir)) {
+    rmSync4(dir, { recursive: true, force: true });
     deleteMindUser(name);
   }
   fireWebhook({
@@ -3760,7 +3555,7 @@ ${user.trimEnd()}
   const entry = findMind(mindName);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(mindName);
-  if (!existsSync9(dir)) return c.json({ error: "Mind directory missing" }, 404);
+  if (!existsSync10(dir)) return c.json({ error: "Mind directory missing" }, 404);
   let body = {};
   try {
     body = await c.req.json();
@@ -3769,15 +3564,15 @@ ${user.trimEnd()}
   const template = body.template ?? entry.template ?? "claude";
   const UPGRADE_VARIANT = "upgrade";
   if (body.abort) {
-    const worktreeDir2 = resolve11(dir, ".variants", UPGRADE_VARIANT);
-    if (!existsSync9(worktreeDir2)) {
+    const worktreeDir2 = resolve12(dir, ".variants", UPGRADE_VARIANT);
+    if (!existsSync10(worktreeDir2)) {
       return c.json({ error: "No upgrade in progress" }, 400);
     }
     try {
       try {
-        const gitDirContent = readFileSync8(resolve11(worktreeDir2, ".git"), "utf-8").trim();
+        const gitDirContent = readFileSync9(resolve12(worktreeDir2, ".git"), "utf-8").trim();
         const gitDir = gitDirContent.replace("gitdir: ", "");
-        if (existsSync9(resolve11(gitDir, "MERGE_HEAD"))) {
+        if (existsSync10(resolve12(gitDir, "MERGE_HEAD"))) {
           await gitExec(["merge", "--abort"], { cwd: worktreeDir2 });
         }
       } catch {
@@ -3792,8 +3587,8 @@ ${user.trimEnd()}
     }
   }
   if (body.continue) {
-    const worktreeDir2 = resolve11(dir, ".variants", UPGRADE_VARIANT);
-    if (!existsSync9(worktreeDir2)) {
+    const worktreeDir2 = resolve12(dir, ".variants", UPGRADE_VARIANT);
+    if (!existsSync10(worktreeDir2)) {
       return c.json({ error: "No upgrade in progress" }, 400);
     }
     const status = await gitExec(["status", "--porcelain"], { cwd: worktreeDir2 });
@@ -3837,23 +3632,23 @@ ${user.trimEnd()}
       );
     }
   }
-  const worktreeDir = resolve11(dir, ".variants", UPGRADE_VARIANT);
-  if (existsSync9(worktreeDir)) {
+  const worktreeDir = resolve12(dir, ".variants", UPGRADE_VARIANT);
+  if (existsSync10(worktreeDir)) {
     return c.json(
       { error: "Upgrade variant already exists. Use continue or delete it first." },
       409
     );
   }
-  if (!existsSync9(resolve11(dir, ".git"))) {
+  if (!existsSync10(resolve12(dir, ".git"))) {
     try {
-      const env = isIsolationEnabled() ? { ...process.env, HOME: resolve11(dir, "home") } : void 0;
+      const env = isIsolationEnabled() ? { ...process.env, HOME: resolve12(dir, "home") } : void 0;
       await gitExec(["init"], { cwd: dir, mindName, env });
       await configureGitIdentity(mindName, { cwd: dir, mindName, env });
       await gitExec(["add", "-A"], { cwd: dir, mindName, env });
       await gitExec(["commit", "-m", "initial commit"], { cwd: dir, mindName, env });
       chownMindDir(dir, mindName);
     } catch (err) {
-      rmSync3(resolve11(dir, ".git"), { recursive: true, force: true });
+      rmSync4(resolve12(dir, ".git"), { recursive: true, force: true });
       return c.json(
         {
           error: `Git initialization failed: ${err instanceof Error ? err.message : String(err)}`
@@ -3867,7 +3662,7 @@ ${user.trimEnd()}
     await gitExec(["branch", "-D", UPGRADE_VARIANT], { cwd: dir });
   } catch {
   }
-  if (!existsSync9(resolve11(dir, "home", "shared"))) {
+  if (!existsSync10(resolve12(dir, "home", "shared"))) {
     try {
       await addSharedWorktree(mindName, dir);
     } catch (err) {
@@ -3878,9 +3673,9 @@ ${user.trimEnd()}
     }
   }
   await updateTemplateBranch(dir, template, mindName);
-  const parentDir = resolve11(dir, ".variants");
-  if (!existsSync9(parentDir)) {
-    mkdirSync5(parentDir, { recursive: true });
+  const parentDir = resolve12(dir, ".variants");
+  if (!existsSync10(parentDir)) {
+    mkdirSync6(parentDir, { recursive: true });
   }
   await gitExec(["worktree", "add", "-b", UPGRADE_VARIANT, worktreeDir], { cwd: dir });
   const hasConflicts = await mergeTemplateBranch(worktreeDir);
@@ -3927,7 +3722,7 @@ ${user.trimEnd()}
     if (!variant) return c.json({ error: `Unknown variant: ${variantName}` }, 404);
   }
   try {
-    const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+    const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
     const sm = getSleepManagerIfReady();
     if (sm?.isSleeping(baseName)) {
       const body2 = await c.req.text();
@@ -4025,7 +3820,7 @@ ${user.trimEnd()}
   if (seedEntry?.stage === "seed") {
     try {
       const db = await getDb();
-      const countResult = await db.select({ count: sql2`count(*)` }).from(mindHistory).where(eq4(mindHistory.mind, baseName));
+      const countResult = await db.select({ count: sql`count(*)` }).from(mindHistory).where(eq2(mindHistory.mind, baseName));
       const msgCount = countResult[0]?.count ?? 0;
       if (msgCount >= 10 && msgCount % 10 === 0) {
         const nudge = "\n[You've been exploring for a while. Whenever you feel ready, write your SOUL.md and MEMORY.md, then run volute mind sprout.]";
@@ -4070,13 +3865,13 @@ ${user.trimEnd()}
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(name);
-  if (!existsSync9(dir)) return c.json({ error: "Mind directory missing" }, 404);
+  if (!existsSync10(dir)) return c.json({ error: "Mind directory missing" }, 404);
   let config = readVoluteConfig(dir);
   if (!config && entry.template === "pi") {
-    const piConfigPath = resolve11(dir, "home/.config/config.json");
-    if (existsSync9(piConfigPath)) {
+    const piConfigPath = resolve12(dir, "home/.config/config.json");
+    if (existsSync10(piConfigPath)) {
       try {
-        config = JSON.parse(readFileSync8(piConfigPath, "utf-8"));
+        config = JSON.parse(readFileSync9(piConfigPath, "utf-8"));
       } catch {
       }
     }
@@ -4113,7 +3908,7 @@ ${user.trimEnd()}
     const entry = findMind(name);
     if (!entry) return c.json({ error: "Mind not found" }, 404);
     const dir = mindDir(name);
-    if (!existsSync9(dir)) return c.json({ error: "Mind directory missing" }, 404);
+    if (!existsSync10(dir)) return c.json({ error: "Mind directory missing" }, 404);
     const body = c.req.valid("json");
     const existing = readVoluteConfig(dir) ?? {};
     if (body.model !== void 0) existing.model = body.model;
@@ -4294,22 +4089,22 @@ ${user.trimEnd()}
   const db = await getDb();
   const rows = await db.select({
     session: mindHistory.session,
-    started_at: sql2`MIN(${mindHistory.created_at})`,
-    event_count: sql2`COUNT(*)`,
-    message_count: sql2`SUM(CASE WHEN ${mindHistory.type} IN ('inbound','outbound') THEN 1 ELSE 0 END)`,
-    tool_count: sql2`SUM(CASE WHEN ${mindHistory.type}='tool_use' THEN 1 ELSE 0 END)`
-  }).from(mindHistory).where(and3(eq4(mindHistory.mind, name), sql2`${mindHistory.session} IS NOT NULL`)).groupBy(mindHistory.session).orderBy(sql2`MIN(${mindHistory.created_at}) DESC`);
+    started_at: sql`MIN(${mindHistory.created_at})`,
+    event_count: sql`COUNT(*)`,
+    message_count: sql`SUM(CASE WHEN ${mindHistory.type} IN ('inbound','outbound') THEN 1 ELSE 0 END)`,
+    tool_count: sql`SUM(CASE WHEN ${mindHistory.type}='tool_use' THEN 1 ELSE 0 END)`
+  }).from(mindHistory).where(and(eq2(mindHistory.mind, name), sql`${mindHistory.session} IS NOT NULL`)).groupBy(mindHistory.session).orderBy(sql`MIN(${mindHistory.created_at}) DESC`);
   return c.json(rows);
 }).get("/:name/history/channels", async (c) => {
   const name = c.req.param("name");
   const db = await getDb();
-  const rows = await db.selectDistinct({ channel: mindHistory.channel }).from(mindHistory).where(eq4(mindHistory.mind, name));
+  const rows = await db.selectDistinct({ channel: mindHistory.channel }).from(mindHistory).where(eq2(mindHistory.mind, name));
   return c.json(rows.map((r) => r.channel));
 }).get("/:name/history/export", async (c) => {
   const name = c.req.param("name");
   if (!findMind(name)) return c.json({ error: "Mind not found" }, 404);
   const db = await getDb();
-  const rows = await db.select().from(mindHistory).where(eq4(mindHistory.mind, name));
+  const rows = await db.select().from(mindHistory).where(eq2(mindHistory.mind, name));
   return c.json(rows);
 }).get("/:name/history", async (c) => {
   const name = c.req.param("name");
@@ -4319,24 +4114,24 @@ ${user.trimEnd()}
   const limit = Math.min(Math.max(parseInt(c.req.query("limit") ?? "50", 10) || 50, 1), 200);
   const offset = Math.max(parseInt(c.req.query("offset") ?? "0", 10) || 0, 0);
   const db = await getDb();
-  const conditions = [eq4(mindHistory.mind, name)];
+  const conditions = [eq2(mindHistory.mind, name)];
   if (channel) {
-    conditions.push(eq4(mindHistory.channel, channel));
+    conditions.push(eq2(mindHistory.channel, channel));
   }
   if (session) {
-    conditions.push(eq4(mindHistory.session, session));
+    conditions.push(eq2(mindHistory.session, session));
   }
   if (!full) {
-    conditions.push(sql2`${mindHistory.type} IN ('inbound', 'outbound')`);
+    conditions.push(sql`${mindHistory.type} IN ('inbound', 'outbound')`);
   }
-  const rows = await db.select().from(mindHistory).where(and3(...conditions)).orderBy(desc3(mindHistory.created_at)).limit(limit).offset(offset);
+  const rows = await db.select().from(mindHistory).where(and(...conditions)).orderBy(desc2(mindHistory.created_at)).limit(limit).offset(offset);
   return c.json(rows);
 });
 var minds_default = app11;
 
 // src/web/api/pages.ts
 import { readFile as readFile2, stat as stat2 } from "fs/promises";
-import { extname as extname2, resolve as resolve12 } from "path";
+import { extname as extname3, resolve as resolve13 } from "path";
 import { Hono as Hono12 } from "hono";
 var MIME_TYPES = {
   ".html": "text/html",
@@ -4358,17 +4153,17 @@ var app12 = new Hono12().get("/:name/*", async (c) => {
   const name = c.req.param("name");
   let pagesRoot;
   if (name === "_system") {
-    pagesRoot = resolve12(voluteHome(), "shared", "pages");
+    pagesRoot = resolve13(voluteHome(), "shared", "pages");
   } else {
     if (!findMind(name)) return c.text("Not found", 404);
-    pagesRoot = resolve12(mindDir(name), "home", "pages");
+    pagesRoot = resolve13(mindDir(name), "home", "public", "pages");
   }
   const wildcard = c.req.path.replace(`/pages/${name}`, "") || "/";
-  const requestedPath = resolve12(pagesRoot, wildcard.slice(1));
+  const requestedPath = resolve13(pagesRoot, wildcard.slice(1));
   if (!requestedPath.startsWith(pagesRoot)) return c.text("Forbidden", 403);
   let fileStat = await stat2(requestedPath).catch(() => null);
   if (fileStat?.isDirectory()) {
-    const indexPath = resolve12(requestedPath, "index.html");
+    const indexPath = resolve13(requestedPath, "index.html");
     fileStat = await stat2(indexPath).catch(() => null);
     if (fileStat?.isFile()) {
       const body = await readFile2(indexPath);
@@ -4377,7 +4172,7 @@ var app12 = new Hono12().get("/:name/*", async (c) => {
     return c.text("Not found", 404);
   }
   if (fileStat?.isFile()) {
-    const ext = extname2(requestedPath);
+    const ext = extname3(requestedPath);
     const mime = MIME_TYPES[ext] || "application/octet-stream";
     const body = await readFile2(requestedPath);
     return c.body(body, 200, { "Content-Type": mime });
@@ -4388,7 +4183,7 @@ var pages_default = app12;
 
 // src/web/api/prompts.ts
 import { zValidator as zValidator4 } from "@hono/zod-validator";
-import { eq as eq5, sql as sql3 } from "drizzle-orm";
+import { eq as eq3, sql as sql2 } from "drizzle-orm";
 import { Hono as Hono13 } from "hono";
 import { z as z4 } from "zod";
 var app13 = new Hono13().get("/", async (c) => {
@@ -4421,9 +4216,9 @@ var app13 = new Hono13().get("/", async (c) => {
   }
   const { content } = c.req.valid("json");
   const db = await getDb();
-  await db.insert(systemPrompts).values({ key, content, updated_at: sql3`(datetime('now'))` }).onConflictDoUpdate({
+  await db.insert(systemPrompts).values({ key, content, updated_at: sql2`(datetime('now'))` }).onConflictDoUpdate({
     target: systemPrompts.key,
-    set: { content, updated_at: sql3`(datetime('now'))` }
+    set: { content, updated_at: sql2`(datetime('now'))` }
   });
   return c.json({ ok: true });
 }).delete("/:key", requireAdmin, async (c) => {
@@ -4432,14 +4227,103 @@ var app13 = new Hono13().get("/", async (c) => {
     return c.json({ error: "Unknown prompt key" }, 404);
   }
   const db = await getDb();
-  await db.delete(systemPrompts).where(eq5(systemPrompts.key, key));
+  await db.delete(systemPrompts).where(eq3(systemPrompts.key, key));
   return c.json({ ok: true });
 });
 var prompts_default = app13;
 
+// src/web/api/public-files.ts
+import { readdir as readdir2, readFile as readFile3, stat as stat3 } from "fs/promises";
+import { extname as extname4, resolve as resolve14 } from "path";
+import { Hono as Hono14 } from "hono";
+var MAX_FILE_SIZE = 50 * 1024 * 1024;
+function resolvePublicRoot(name) {
+  if (name === "_system") return resolve14(voluteHome(), "shared");
+  if (!findMind(name)) return null;
+  return resolve14(mindDir(name), "home", "public");
+}
+function hasDotSegment(relativePath) {
+  return relativePath.split("/").some((seg) => seg.startsWith("."));
+}
+var MIME_TYPES2 = {
+  ".html": "text/html",
+  ".js": "application/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".txt": "text/plain",
+  ".xml": "application/xml",
+  ".md": "text/markdown",
+  ".webp": "image/webp"
+};
+async function listDir(dirPath) {
+  let entries;
+  try {
+    entries = await readdir2(dirPath, { withFileTypes: true });
+  } catch (err) {
+    if (err?.code === "ENOENT") return [];
+    throw err;
+  }
+  return entries.filter((e) => !e.name.startsWith(".")).map((e) => ({
+    name: e.name,
+    type: e.isDirectory() ? "directory" : "file"
+  }));
+}
+var app14 = new Hono14().get("/:name/", async (c) => {
+  const name = c.req.param("name");
+  const publicRoot = resolvePublicRoot(name);
+  if (!publicRoot) return c.json({ error: "Not found" }, 404);
+  return c.json(await listDir(publicRoot));
+}).get("/:name/*", async (c) => {
+  const name = c.req.param("name");
+  const publicRoot = resolvePublicRoot(name);
+  if (!publicRoot) return c.text("Not found", 404);
+  const wildcard = c.req.path.replace(`/public/${name}`, "") || "/";
+  const relativePath = wildcard.slice(1);
+  const requestedPath = resolve14(publicRoot, relativePath);
+  if (!requestedPath.startsWith(publicRoot)) return c.text("Forbidden", 403);
+  if (hasDotSegment(relativePath)) return c.text("Forbidden", 403);
+  let fileStat;
+  try {
+    fileStat = await stat3(requestedPath);
+  } catch (err) {
+    if (err?.code === "ENOENT") return c.text("Not found", 404);
+    if (err?.code === "EACCES") return c.text("Forbidden", 403);
+    return c.text("Internal server error", 500);
+  }
+  if (fileStat.isDirectory()) {
+    if (wildcard.endsWith("/")) {
+      return c.json(await listDir(requestedPath));
+    }
+    return c.text("Not found", 404);
+  }
+  if (fileStat.isFile()) {
+    if (fileStat.size > MAX_FILE_SIZE) return c.text("File too large", 413);
+    const ext = extname4(requestedPath);
+    const mime = MIME_TYPES2[ext] || "application/octet-stream";
+    try {
+      const body = await readFile3(requestedPath);
+      return c.body(body, 200, { "Content-Type": mime });
+    } catch (err) {
+      if (err?.code === "ENOENT") return c.text("Not found", 404);
+      if (err?.code === "EACCES") return c.text("Forbidden", 403);
+      return c.text("Failed to read file", 500);
+    }
+  }
+  return c.text("Not found", 404);
+});
+var public_files_default = app14;
+
 // src/web/api/schedules.ts
 import { CronExpressionParser } from "cron-parser";
-import { Hono as Hono14 } from "hono";
+import { Hono as Hono15 } from "hono";
 var slog = logger_default.child("schedules");
 function readSchedules(name) {
   return readVoluteConfig(mindDir(name))?.schedules ?? [];
@@ -4456,7 +4340,7 @@ function writeSchedules(name, schedules) {
     data: { schedules }
   });
 }
-var app14 = new Hono14().get("/:name/schedules", (c) => {
+var app15 = new Hono15().get("/:name/schedules", (c) => {
   const name = c.req.param("name");
   if (!findMind(name)) return c.json({ error: "Mind not found" }, 404);
   return c.json(readSchedules(name));
@@ -4559,11 +4443,11 @@ var app14 = new Hono14().get("/:name/schedules", (c) => {
     return c.json({ error: "Failed to reach mind" }, 502);
   }
 });
-var schedules_default = app14;
+var schedules_default = app15;
 
 // src/web/api/shared.ts
-import { Hono as Hono15 } from "hono";
-var app15 = new Hono15().post("/:name/shared/merge", requireAdmin, async (c) => {
+import { Hono as Hono16 } from "hono";
+var app16 = new Hono16().post("/:name/shared/merge", requireAdmin, async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -4612,15 +4496,15 @@ var app15 = new Hono15().post("/:name/shared/merge", requireAdmin, async (c) =>
     return c.json({ error: err instanceof Error ? err.message : "Failed to get status" }, 500);
   }
 });
-var shared_default = app15;
+var shared_default = app16;
 
 // src/web/api/skills.ts
-import { existsSync as existsSync10, mkdtempSync, readdirSync as readdirSync5, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync11, mkdtempSync, readdirSync as readdirSync5, rmSync as rmSync5 } from "fs";
 import { tmpdir } from "os";
-import { join as join2, resolve as resolve13 } from "path";
+import { join as join2, resolve as resolve15 } from "path";
 import AdmZip from "adm-zip";
-import { Hono as Hono16 } from "hono";
-var app16 = new Hono16().get("/", async (c) => {
+import { Hono as Hono17 } from "hono";
+var app17 = new Hono17().get("/", async (c) => {
   const skills = await listSharedSkills();
   return c.json(skills);
 }).get("/:id", async (c) => {
@@ -4644,19 +4528,19 @@ var app16 = new Hono16().get("/", async (c) => {
   try {
     const zip = new AdmZip(buffer2);
     for (const entry of zip.getEntries()) {
-      const target = resolve13(tmpDir, entry.entryName);
+      const target = resolve15(tmpDir, entry.entryName);
       if (!target.startsWith(tmpDir)) {
         return c.json({ error: "Invalid zip: paths must not escape archive" }, 400);
       }
     }
     zip.extractAllTo(tmpDir, true);
     let skillDir = null;
-    if (existsSync10(join2(tmpDir, "SKILL.md"))) {
+    if (existsSync11(join2(tmpDir, "SKILL.md"))) {
       skillDir = tmpDir;
     } else {
       const entries = readdirSync5(tmpDir, { withFileTypes: true }).filter((e) => e.isDirectory());
       for (const entry of entries) {
-        if (existsSync10(join2(tmpDir, entry.name, "SKILL.md"))) {
+        if (existsSync11(join2(tmpDir, entry.name, "SKILL.md"))) {
           skillDir = join2(tmpDir, entry.name);
           break;
         }
@@ -4673,7 +4557,7 @@ var app16 = new Hono16().get("/", async (c) => {
     }
     throw e;
   } finally {
-    rmSync4(tmpDir, { recursive: true, force: true });
+    rmSync5(tmpDir, { recursive: true, force: true });
   }
 }).delete("/:id", requireAdmin, async (c) => {
   const id = c.req.param("id");
@@ -4685,12 +4569,15 @@ var app16 = new Hono16().get("/", async (c) => {
   }
   return c.json({ ok: true });
 });
-var skills_default = app16;
+var skills_default = app17;
 
 // src/web/api/system.ts
-import { Hono as Hono17 } from "hono";
+import { zValidator as zValidator5 } from "@hono/zod-validator";
+import { Hono as Hono18 } from "hono";
 import { streamSSE as streamSSE3 } from "hono/streaming";
-var app17 = new Hono17().post("/restart", requireAdmin, (c) => {
+import { z as z5 } from "zod";
+var DEFAULT_API_URL = "https://volute.systems";
+var app18 = new Hono18().post("/restart", requireAdmin, (c) => {
   setTimeout(() => process.exit(1), 200);
   return c.json({ ok: true });
 }).post("/stop", requireAdmin, (c) => {
@@ -4707,29 +4594,107 @@ var app17 = new Hono17().post("/restart", requireAdmin, (c) => {
       stream.writeSSE({ data: JSON.stringify(entry) }).catch(() => {
       });
     });
-    await new Promise((resolve18) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
-        resolve18();
+        resolve20();
       });
     });
   });
 }).get("/info", (c) => {
   const config = readSystemsConfig();
   return c.json({ system: config?.system ?? null });
+}).post(
+  "/register",
+  requireAdmin,
+  zValidator5("json", z5.object({ name: z5.string().min(1) })),
+  async (c) => {
+    const existing = readSystemsConfig();
+    if (existing) {
+      return c.json({ error: `Already registered as "${existing.system}"` }, 400);
+    }
+    const { name } = c.req.valid("json");
+    const apiUrl = process.env.VOLUTE_SYSTEMS_URL || DEFAULT_API_URL;
+    let apiKey;
+    let system;
+    try {
+      const res = await fetch(`${apiUrl}/api/register`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ name: name.trim() })
+      });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));
+        return c.json({ error: err.error }, 502);
+      }
+      ({ apiKey, system } = await res.json());
+    } catch (err) {
+      return c.json({ error: `Connection failed: ${err.message}` }, 502);
+    }
+    try {
+      writeSystemsConfig({ apiKey, system, apiUrl });
+    } catch (err) {
+      return c.json(
+        {
+          error: `Registered as "${system}" but failed to save config: ${err.message}`
+        },
+        500
+      );
+    }
+    return c.json({ system });
+  }
+).post(
+  "/login",
+  requireAdmin,
+  zValidator5("json", z5.object({ key: z5.string().min(1) })),
+  async (c) => {
+    const existing = readSystemsConfig();
+    if (existing) {
+      return c.json({ error: `Already logged in as "${existing.system}"` }, 400);
+    }
+    const { key } = c.req.valid("json");
+    const apiUrl = process.env.VOLUTE_SYSTEMS_URL || DEFAULT_API_URL;
+    let system;
+    try {
+      const res = await fetch(`${apiUrl}/api/whoami`, {
+        headers: { Authorization: `Bearer ${key.trim()}` }
+      });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));
+        return c.json({ error: err.error }, 502);
+      }
+      ({ system } = await res.json());
+    } catch (err) {
+      return c.json({ error: `Connection failed: ${err.message}` }, 502);
+    }
+    try {
+      writeSystemsConfig({ apiKey: key.trim(), system, apiUrl });
+    } catch (err) {
+      return c.json(
+        {
+          error: `Logged in as "${system}" but failed to save config: ${err.message}`
+        },
+        500
+      );
+    }
+    return c.json({ system });
+  }
+).post("/logout", requireAdmin, (c) => {
+  deleteSystemsConfig();
+  return c.json({ ok: true });
 });
-var system_default = app17;
+var system_default = app18;
 
 // src/web/api/typing.ts
-import { zValidator as zValidator5 } from "@hono/zod-validator";
-import { Hono as Hono18 } from "hono";
-import { z as z5 } from "zod";
-var typingSchema = z5.object({
-  channel: z5.string().min(1),
-  sender: z5.string().min(1),
-  active: z5.boolean()
+import { zValidator as zValidator6 } from "@hono/zod-validator";
+import { Hono as Hono19 } from "hono";
+import { z as z6 } from "zod";
+var typingSchema = z6.object({
+  channel: z6.string().min(1),
+  sender: z6.string().min(1),
+  active: z6.boolean()
 });
-var app18 = new Hono18().post("/:name/typing", zValidator5("json", typingSchema), (c) => {
+var app19 = new Hono19().post("/:name/typing", zValidator6("json", typingSchema), (c) => {
   const { channel, sender, active } = c.req.valid("json");
   const map = getTypingMap();
   if (active) {
@@ -4751,13 +4716,13 @@ var app18 = new Hono18().post("/:name/typing", zValidator5("json", typingSchema)
   const map = getTypingMap();
   return c.json({ typing: map.get(channel) });
 });
-var typing_default = app18;
+var typing_default = app19;
 
 // src/web/api/update.ts
 import { spawn as spawn2 } from "child_process";
-import { Hono as Hono19 } from "hono";
+import { Hono as Hono20 } from "hono";
 var bin;
-var app19 = new Hono19().get("/update", async (c) => {
+var app20 = new Hono20().get("/update", async (c) => {
   const result = await checkForUpdate();
   return c.json(result);
 }).post("/update", requireAdmin, async (c) => {
@@ -4772,21 +4737,21 @@ var app19 = new Hono19().get("/update", async (c) => {
   child.unref();
   return c.json({ ok: true, message: "Updating..." });
 });
-var update_default = app19;
+var update_default = app20;
 
 // src/web/api/v1/chat.ts
-import { zValidator as zValidator6 } from "@hono/zod-validator";
-import { Hono as Hono20 } from "hono";
+import { zValidator as zValidator7 } from "@hono/zod-validator";
+import { Hono as Hono21 } from "hono";
 import { streamSSE as streamSSE4 } from "hono/streaming";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 async function fanOutToMinds(opts) {
   const participants = await getParticipants(opts.conversationId);
   const mindParticipants = participants.filter((p) => p.userType === "mind");
   const participantNames = participants.map((p) => p.username);
   const isDM = opts.isDM ?? participants.length === 2;
   const channelEntryType = opts.channelEntryType ?? (isDM ? "dm" : "group");
-  const { getMindManager: getMindManager2 } = await import("./mind-manager-KMY4GA2J.js");
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getMindManager: getMindManager2 } = await import("./mind-manager-4NDNAYAB.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const manager = getMindManager2();
   const sm = getSleepManagerIfReady();
   const targetMinds = mindParticipants.map((ap) => {
@@ -4835,18 +4800,18 @@ async function fanOutToMinds(opts) {
     });
   }
 }
-var mindChatSchema = z6.object({
-  message: z6.string().optional(),
-  conversationId: z6.string().optional(),
-  sender: z6.string().optional(),
-  images: z6.array(z6.object({ media_type: z6.string(), data: z6.string() })).optional()
+var mindChatSchema = z7.object({
+  message: z7.string().optional(),
+  conversationId: z7.string().optional(),
+  sender: z7.string().optional(),
+  images: z7.array(z7.object({ media_type: z7.string(), data: z7.string() })).optional()
 });
-var unifiedChatSchema = z6.object({
-  message: z6.string().optional(),
-  conversationId: z6.string(),
-  images: z6.array(z6.object({ media_type: z6.string(), data: z6.string() })).optional()
+var unifiedChatSchema = z7.object({
+  message: z7.string().optional(),
+  conversationId: z7.string(),
+  images: z7.array(z7.object({ media_type: z7.string(), data: z7.string() })).optional()
 });
-var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zValidator6("json", mindChatSchema), async (c) => {
+var app21 = new Hono21().use("*", authMiddleware).post("/minds/:name/chat", zValidator7("json", mindChatSchema), async (c) => {
   const name = c.req.param("name");
   const [baseName] = name.split("@", 2);
   const entry = findMind(baseName);
@@ -4900,11 +4865,15 @@ var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zVal
     }
   }
   await addMessage(conversationId, "user", senderName, contentBlocks);
+  const isDM = conv?.type === "dm";
   await fanOutToMinds({
     conversationId,
     contentBlocks,
     senderName,
     convTitle,
+    isDM,
+    channelEntryType: conv?.type === "channel" ? "group" : isDM ? "dm" : "group",
+    slugExtra: conv ? { convType: conv.type, convName: conv.name } : void 0,
     targetName: (username) => username === baseName ? name : username
   });
   return c.json({ ok: true, conversationId });
@@ -4925,15 +4894,15 @@ var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zVal
         if (!stream.aborted) logger_default.error("[v1-chat] SSE ping error:", logger_default.errorData(err));
       });
     }, 15e3);
-    await new Promise((resolve18) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve18();
+        resolve20();
       });
     });
   });
-}).post("/chat", zValidator6("json", unifiedChatSchema), async (c) => {
+}).post("/chat", zValidator7("json", unifiedChatSchema), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   if (!body.message && (!body.images || body.images.length === 0)) {
@@ -4965,17 +4934,17 @@ var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zVal
   });
   return c.json({ ok: true, conversationId: body.conversationId });
 });
-var chat_default = app20;
+var chat_default = app21;
 
 // src/web/api/v1/conversations.ts
-import { zValidator as zValidator7 } from "@hono/zod-validator";
-import { Hono as Hono21 } from "hono";
-import { z as z7 } from "zod";
-var createSchema = z7.object({
-  title: z7.string().optional(),
-  participantNames: z7.array(z7.string()).min(1)
+import { zValidator as zValidator8 } from "@hono/zod-validator";
+import { Hono as Hono22 } from "hono";
+import { z as z8 } from "zod";
+var createSchema = z8.object({
+  title: z8.string().optional(),
+  participantNames: z8.array(z8.string()).min(1)
 });
-var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
+var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const convs = await listConversationsWithParticipants(user.id);
   return c.json(convs);
@@ -5006,7 +4975,7 @@ var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
   }
   const participants = await getParticipants(id);
   return c.json(participants);
-}).post("/", zValidator7("json", createSchema), async (c) => {
+}).post("/", zValidator8("json", createSchema), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   const participantIds = /* @__PURE__ */ new Set();
@@ -5036,6 +5005,15 @@ var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
     participantIds: [...participantIds]
   });
   return c.json(conv, 201);
+}).post("/:id/read", async (c) => {
+  const id = c.req.param("id");
+  const user = c.get("user");
+  if (user.id === 0) return c.json({ ok: true });
+  if (!await isParticipantOrOwner(id, user.id)) {
+    return c.json({ error: "Conversation not found" }, 404);
+  }
+  await markConversationRead(user.id, id);
+  return c.json({ ok: true });
 }).delete("/:id", async (c) => {
   const id = c.req.param("id");
   const user = c.get("user");
@@ -5043,13 +5021,36 @@ var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var conversations_default = app21;
+var conversations_default = app22;
 
 // src/web/api/v1/events.ts
-import { desc as desc4 } from "drizzle-orm";
-import { Hono as Hono22 } from "hono";
+import { desc as desc3 } from "drizzle-orm";
+import { Hono as Hono23 } from "hono";
 import { streamSSE as streamSSE5 } from "hono/streaming";
 
+// src/lib/events/brain-presence.ts
+var connections = /* @__PURE__ */ new Map();
+function addConnection(username) {
+  const count = connections.get(username) ?? 0;
+  connections.set(username, count + 1);
+  if (count === 0) {
+    broadcast({ type: "brain_online", mind: username, summary: `${username} connected` });
+  }
+}
+function removeConnection(username) {
+  const count = connections.get(username);
+  if (count == null) return;
+  if (count <= 1) {
+    connections.delete(username);
+    broadcast({ type: "brain_offline", mind: username, summary: `${username} disconnected` });
+  } else {
+    connections.set(username, count - 1);
+  }
+}
+function getOnlineBrains() {
+  return [...connections.keys()];
+}
+
 // src/lib/events/event-sequencer.ts
 var BUFFER_SIZE = 1e3;
 var MAX_AGE_MS = 5 * 60 * 1e3;
@@ -5071,12 +5072,16 @@ function getEventsSince(sinceId) {
 }
 
 // src/web/api/v1/events.ts
-var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
+var app23 = new Hono23().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const since = c.req.query("since");
   const sinceId = since ? Number(since) : 0;
   return streamSSE5(c, async (stream) => {
     const cleanups = [];
+    if (user.user_type === "brain") {
+      addConnection(user.username);
+      cleanups.push(() => removeConnection(user.username));
+    }
     try {
       if (sinceId > 0) {
         const missed = getEventsSince(sinceId);
@@ -5090,7 +5095,7 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
       let recentActivity = [];
       try {
         const db = await getDb();
-        recentActivity = await db.select().from(activity).orderBy(desc4(activity.created_at)).limit(50);
+        recentActivity = await db.select().from(activity).orderBy(desc3(activity.created_at)).limit(50);
         recentActivity = recentActivity.map((row) => ({
           ...row,
           metadata: row.metadata ? JSON.parse(row.metadata) : null
@@ -5101,6 +5106,13 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
       let conversations2 = [];
       try {
         conversations2 = await listConversationsWithParticipants(user.id);
+        if (conversations2.length > 0) {
+          const convIds = conversations2.map((c2) => c2.id);
+          const unreads = await getUnreadCounts(user.id, convIds);
+          for (const conv of conversations2) {
+            conv.unreadCount = unreads[conv.id] ?? 0;
+          }
+        }
       } catch (err) {
         logger_default.error("[v1-events] failed to fetch conversations", logger_default.errorData(err));
       }
@@ -5112,7 +5124,8 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
         conversations: conversations2,
         sites,
         recentPages,
-        activeMinds: getActiveMinds()
+        activeMinds: getActiveMinds(),
+        onlineBrains: getOnlineBrains()
       };
       const snapshotId = bufferEvent(snapshotData);
       await stream.writeSSE({
@@ -5153,8 +5166,8 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
         });
       }, 15e3);
       cleanups.push(() => clearInterval(keepAlive));
-      await new Promise((resolve18) => {
-        stream.onAbort(() => resolve18());
+      await new Promise((resolve20) => {
+        stream.onAbort(() => resolve20());
       });
     } finally {
       for (const cleanup of cleanups) {
@@ -5166,19 +5179,19 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
     }
   });
 });
-var events_default = app22;
+var events_default = app23;
 
 // src/web/api/variants.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync7, writeFileSync as writeFileSync7 } from "fs";
-import { resolve as resolve15 } from "path";
-import { Hono as Hono23 } from "hono";
+import { existsSync as existsSync12, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8 } from "fs";
+import { resolve as resolve17 } from "path";
+import { Hono as Hono24 } from "hono";
 
 // src/lib/spawn-server.ts
 import { spawn as spawn3 } from "child_process";
-import { closeSync, mkdirSync as mkdirSync6, openSync, readFileSync as readFileSync9 } from "fs";
-import { resolve as resolve14 } from "path";
+import { closeSync, mkdirSync as mkdirSync7, openSync, readFileSync as readFileSync10 } from "fs";
+import { resolve as resolve16 } from "path";
 function tsxBin(cwd) {
-  return resolve14(cwd, "node_modules", ".bin", "tsx");
+  return resolve16(cwd, "node_modules", ".bin", "tsx");
 }
 function spawnServer(cwd, port, options) {
   if (options?.detached) {
@@ -5191,31 +5204,31 @@ function spawnAttached(cwd, port) {
     cwd,
     stdio: ["ignore", "pipe", "pipe"]
   });
-  return new Promise((resolve18) => {
-    const timeout = setTimeout(() => resolve18(null), 3e4);
+  return new Promise((resolve20) => {
+    const timeout = setTimeout(() => resolve20(null), 3e4);
     function checkOutput(data) {
       const match = data.toString().match(/listening on :(\d+)/);
       if (match) {
         clearTimeout(timeout);
-        resolve18({ child, actualPort: parseInt(match[1], 10) });
+        resolve20({ child, actualPort: parseInt(match[1], 10) });
       }
     }
     child.stdout?.on("data", checkOutput);
     child.stderr?.on("data", checkOutput);
     child.on("error", () => {
       clearTimeout(timeout);
-      resolve18(null);
+      resolve20(null);
     });
     child.on("exit", () => {
       clearTimeout(timeout);
-      resolve18(null);
+      resolve20(null);
     });
   });
 }
 function spawnDetached(cwd, port, logDir) {
-  const logsDir = logDir ?? resolve14(cwd, ".mind", "logs");
-  mkdirSync6(logsDir, { recursive: true });
-  const logPath = resolve14(logsDir, "mind.log");
+  const logsDir = logDir ?? resolve16(cwd, ".mind", "logs");
+  mkdirSync7(logsDir, { recursive: true });
+  const logPath = resolve16(logsDir, "mind.log");
   const logFd = openSync(logPath, "a");
   const child = spawn3(tsxBin(cwd), ["src/server.ts", "--port", String(port)], {
     cwd,
@@ -5235,7 +5248,7 @@ function spawnDetached(cwd, port, logDir) {
     }
     const interval = setInterval(() => {
       try {
-        const content = readFileSync9(logPath, "utf-8");
+        const content = readFileSync10(logPath, "utf-8");
         const match = content.match(/listening on :(\d+)/);
         if (match) {
           finish({ child, actualPort: parseInt(match[1], 10) });
@@ -5287,7 +5300,7 @@ async function verify2(port) {
 }
 
 // src/web/api/variants.ts
-var app23 = new Hono23().get("/:name/variants", async (c) => {
+var app24 = new Hono24().get("/:name/variants", async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -5327,11 +5340,11 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
   const err = validateBranchName(variantName);
   if (err) return c.json({ error: err }, 400);
   const projectRoot = mindDir(mindName);
-  const variantDir = resolve15(projectRoot, ".variants", variantName);
-  if (existsSync11(variantDir)) {
+  const variantDir = resolve17(projectRoot, ".variants", variantName);
+  if (existsSync12(variantDir)) {
     return c.json({ error: `Variant directory already exists: ${variantDir}` }, 409);
   }
-  mkdirSync7(resolve15(projectRoot, ".variants"), { recursive: true });
+  mkdirSync8(resolve17(projectRoot, ".variants"), { recursive: true });
   try {
     await gitExec(["worktree", "add", "-b", variantName, variantDir], { cwd: projectRoot });
   } catch (e) {
@@ -5344,7 +5357,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
       const [cmd, args] = wrapForIsolation("npm", ["install"], mindName);
       await exec(cmd, args, {
         cwd: variantDir,
-        env: { ...process.env, HOME: resolve15(variantDir, "home") }
+        env: { ...process.env, HOME: resolve17(variantDir, "home") }
       });
     } else {
       await exec("npm", ["install"], { cwd: variantDir });
@@ -5354,7 +5367,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
     return c.json({ error: `npm install failed: ${msg}` }, 500);
   }
   if (body.soul) {
-    writeFileSync7(resolve15(variantDir, "home/SOUL.md"), body.soul);
+    writeFileSync8(resolve17(variantDir, "home/SOUL.md"), body.soul);
   }
   const variantPort = body.port ?? nextPort();
   const variant = {
@@ -5392,7 +5405,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
   } catch {
   }
   const projectRoot = mindDir(mindName);
-  if (existsSync11(variant.path)) {
+  if (existsSync12(variant.path)) {
     const status = (await gitExec(["status", "--porcelain"], { cwd: variant.path })).trim();
     if (status) {
       try {
@@ -5465,7 +5478,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
       const [cmd, args] = wrapForIsolation("npm", ["install"], mindName);
       await exec(cmd, args, {
         cwd: projectRoot,
-        env: { ...process.env, HOME: resolve15(projectRoot, "home") }
+        env: { ...process.env, HOME: resolve17(projectRoot, "home") }
       });
     } else {
       await exec("npm", ["install"], { cwd: projectRoot });
@@ -5503,19 +5516,19 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
   await cleanupVariant(mindName, variantName, projectRoot, variant.path, { stop: true });
   return c.json({ ok: true });
 });
-var variants_default = app23;
+var variants_default = app24;
 
 // src/web/api/volute/channels.ts
-import { zValidator as zValidator8 } from "@hono/zod-validator";
-import { Hono as Hono24 } from "hono";
-import { z as z8 } from "zod";
-var createSchema2 = z8.object({
-  name: z8.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
+import { zValidator as zValidator9 } from "@hono/zod-validator";
+import { Hono as Hono25 } from "hono";
+import { z as z9 } from "zod";
+var createSchema2 = z9.object({
+  name: z9.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
 });
-var inviteSchema = z8.object({
-  username: z8.string().min(1)
+var inviteSchema = z9.object({
+  username: z9.string().min(1)
 });
-var app24 = new Hono24().get("/", async (c) => {
+var app25 = new Hono25().get("/", async (c) => {
   const user = c.get("user");
   const channels = await listChannels();
   const results = await Promise.all(
@@ -5526,7 +5539,7 @@ var app24 = new Hono24().get("/", async (c) => {
     })
   );
   return c.json(results);
-}).post("/", zValidator8("json", createSchema2), async (c) => {
+}).post("/", zValidator9("json", createSchema2), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   try {
@@ -5559,7 +5572,7 @@ var app24 = new Hono24().get("/", async (c) => {
   if (!ch) return c.json({ error: "Channel not found" }, 404);
   const participants = await getParticipants(ch.id);
   return c.json(participants);
-}).post("/:name/invite", zValidator8("json", inviteSchema), async (c) => {
+}).post("/:name/invite", zValidator9("json", inviteSchema), async (c) => {
   const name = c.req.param("name");
   const inviter = c.get("user");
   const { username } = c.req.valid("json");
@@ -5579,21 +5592,21 @@ var app24 = new Hono24().get("/", async (c) => {
   ]);
   return c.json({ ok: true });
 });
-var channels_default2 = app24;
+var channels_default2 = app25;
 
 // src/web/api/volute/chat.ts
-import { zValidator as zValidator9 } from "@hono/zod-validator";
-import { Hono as Hono25 } from "hono";
+import { zValidator as zValidator10 } from "@hono/zod-validator";
+import { Hono as Hono26 } from "hono";
 import { streamSSE as streamSSE6 } from "hono/streaming";
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 async function fanOutToMinds2(opts) {
   const participants = await getParticipants(opts.conversationId);
   const mindParticipants = participants.filter((p) => p.userType === "mind");
   const participantNames = participants.map((p) => p.username);
   const isDM = opts.isDM ?? participants.length === 2;
   const channelEntryType = opts.channelEntryType ?? (isDM ? "dm" : "group");
-  const { getMindManager: getMindManager2 } = await import("./mind-manager-KMY4GA2J.js");
-  const { getSleepManagerIfReady } = await import("./sleep-manager-2TMQ65E4.js");
+  const { getMindManager: getMindManager2 } = await import("./mind-manager-4NDNAYAB.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const manager = getMindManager2();
   const sm = getSleepManagerIfReady();
   const targetMinds = mindParticipants.map((ap) => {
@@ -5641,18 +5654,18 @@ async function fanOutToMinds2(opts) {
     });
   }
 }
-var chatSchema = z9.object({
-  message: z9.string().optional(),
-  conversationId: z9.string().optional(),
-  sender: z9.string().optional(),
-  images: z9.array(
-    z9.object({
-      media_type: z9.string(),
-      data: z9.string()
+var chatSchema = z10.object({
+  message: z10.string().optional(),
+  conversationId: z10.string().optional(),
+  sender: z10.string().optional(),
+  images: z10.array(
+    z10.object({
+      media_type: z10.string(),
+      data: z10.string()
     })
   ).optional()
 });
-var app25 = new Hono25().post("/:name/chat", zValidator9("json", chatSchema), async (c) => {
+var app26 = new Hono26().post("/:name/chat", zValidator10("json", chatSchema), async (c) => {
   const name = c.req.param("name");
   const [baseName] = name.split("@", 2);
   const entry = findMind(baseName);
@@ -5710,11 +5723,15 @@ var app25 = new Hono25().post("/:name/chat", zValidator9("json", chatSchema), as
     }
   }
   await addMessage(conversationId, "user", senderName, contentBlocks);
+  const isDM = conv?.type === "dm";
   await fanOutToMinds2({
     conversationId,
     contentBlocks,
     senderName,
     convTitle,
+    isDM,
+    channelEntryType: conv?.type === "channel" ? "group" : isDM ? "dm" : "group",
+    slugExtra: conv ? { convType: conv.type, convName: conv.name } : void 0,
     targetName: (username) => username === baseName ? name : username
   });
   return c.json({ ok: true, conversationId });
@@ -5735,23 +5752,23 @@ var app25 = new Hono25().post("/:name/chat", zValidator9("json", chatSchema), as
         if (!stream.aborted) console.error("[chat] SSE ping error:", err);
       });
     }, 15e3);
-    await new Promise((resolve18) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve18();
+        resolve20();
       });
     });
   });
 });
-var unifiedChatSchema2 = z9.object({
-  message: z9.string().optional(),
-  conversationId: z9.string(),
-  images: z9.array(z9.object({ media_type: z9.string(), data: z9.string() })).optional()
+var unifiedChatSchema2 = z10.object({
+  message: z10.string().optional(),
+  conversationId: z10.string(),
+  images: z10.array(z10.object({ media_type: z10.string(), data: z10.string() })).optional()
 });
-var unifiedChatApp = new Hono25().post(
+var unifiedChatApp = new Hono26().post(
   "/chat",
-  zValidator9("json", unifiedChatSchema2),
+  zValidator10("json", unifiedChatSchema2),
   async (c) => {
     const user = c.get("user");
     const body = c.req.valid("json");
@@ -5785,18 +5802,18 @@ var unifiedChatApp = new Hono25().post(
     return c.json({ ok: true, conversationId: body.conversationId });
   }
 );
-var chat_default2 = app25;
+var chat_default2 = app26;
 
 // src/web/api/volute/conversations.ts
-import { zValidator as zValidator10 } from "@hono/zod-validator";
-import { Hono as Hono26 } from "hono";
-import { z as z10 } from "zod";
-var createConvSchema = z10.object({
-  title: z10.string().optional(),
-  participantIds: z10.array(z10.number()).optional(),
-  participantNames: z10.array(z10.string()).optional()
+import { zValidator as zValidator11 } from "@hono/zod-validator";
+import { Hono as Hono27 } from "hono";
+import { z as z11 } from "zod";
+var createConvSchema = z11.object({
+  title: z11.string().optional(),
+  participantIds: z11.array(z11.number()).optional(),
+  participantNames: z11.array(z11.string()).optional()
 });
-var app26 = new Hono26().get("/:name/conversations", async (c) => {
+var app27 = new Hono27().get("/:name/conversations", async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   let lookupId = user.id;
@@ -5807,7 +5824,7 @@ var app26 = new Hono26().get("/:name/conversations", async (c) => {
   const all = await listConversationsForUser(lookupId);
   const convs = all.filter((c2) => c2.mind_name === name || c2.type === "channel");
   return c.json(convs);
-}).post("/:name/conversations", zValidator10("json", createConvSchema), async (c) => {
+}).post("/:name/conversations", zValidator11("json", createConvSchema), async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   const body = c.req.valid("json");
@@ -5881,18 +5898,18 @@ var app26 = new Hono26().get("/:name/conversations", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var conversations_default2 = app26;
+var conversations_default2 = app27;
 
 // src/web/api/volute/user-conversations.ts
-import { zValidator as zValidator11 } from "@hono/zod-validator";
-import { Hono as Hono27 } from "hono";
+import { zValidator as zValidator12 } from "@hono/zod-validator";
+import { Hono as Hono28 } from "hono";
 import { streamSSE as streamSSE7 } from "hono/streaming";
-import { z as z11 } from "zod";
-var createSchema3 = z11.object({
-  title: z11.string().optional(),
-  participantNames: z11.array(z11.string()).min(1)
+import { z as z12 } from "zod";
+var createSchema3 = z12.object({
+  title: z12.string().optional(),
+  participantNames: z12.array(z12.string()).min(1)
 });
-var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
+var app28 = new Hono28().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const convs = await listConversationsWithParticipants(user.id);
   return c.json(convs);
@@ -5904,7 +5921,7 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
   }
   const msgs = await getMessages(id);
   return c.json(msgs);
-}).post("/", zValidator11("json", createSchema3), async (c) => {
+}).post("/", zValidator12("json", createSchema3), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   const participantIds = /* @__PURE__ */ new Set();
@@ -5951,11 +5968,11 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
         if (!stream.aborted) console.error("[chat] SSE ping error:", err);
       });
     }, 15e3);
-    await new Promise((resolve18) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve18();
+        resolve20();
       });
     });
   });
@@ -5966,12 +5983,12 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var user_conversations_default = app27;
+var user_conversations_default = app28;
 
 // src/web/app.ts
 var httpLog = logger_default.child("http");
-var app28 = new Hono28();
-app28.onError((err, c) => {
+var app29 = new Hono29();
+app29.onError((err, c) => {
   if (err instanceof HTTPException) {
     return err.getResponse();
   }
@@ -5982,10 +5999,10 @@ app28.onError((err, c) => {
   });
   return c.json({ error: "Internal server error" }, 500);
 });
-app28.notFound((c) => {
+app29.notFound((c) => {
   return c.json({ error: "Not found" }, 404);
 });
-app28.use("*", async (c, next) => {
+app29.use("*", async (c, next) => {
   const start = Date.now();
   await next();
   const duration = Date.now() - start;
@@ -5996,7 +6013,7 @@ app28.use("*", async (c, next) => {
     httpLog.debug("request", data);
   }
 });
-app28.get("/api/health", (c) => {
+app29.get("/api/health", (c) => {
   let version = "unknown";
   let cached = null;
   try {
@@ -6011,38 +6028,39 @@ app28.get("/api/health", (c) => {
     ...cached?.updateAvailable ? { updateAvailable: true, latest: cached.latest } : {}
   });
 });
-app28.use("/api/*", bodyLimit({ maxSize: 10 * 1024 * 1024 }));
-app28.use("/api/*", csrf());
-app28.use("/api/activity/*", authMiddleware);
-app28.use("/api/minds/*", authMiddleware);
-app28.use("/api/conversations/*", authMiddleware);
-app28.use("/api/volute/*", authMiddleware);
-app28.use("/api/system/*", authMiddleware);
-app28.use("/api/env/*", authMiddleware);
-app28.use("/api/prompts/*", authMiddleware);
-app28.use("/api/skills/*", authMiddleware);
-app28.use("/api/v1/*", authMiddleware);
-app28.route("/pages", pages_default);
-var routes = app28.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/minds", minds_default).route("/api/minds", chat_default2).route("/api/minds", connectors_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", shared_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/conversations", user_conversations_default).route("/api/volute/channels", channels_default2).route("/api/volute", unifiedChatApp).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", chat_default);
-app28.route("/api/v1/minds", minds_default);
-app28.route("/api/v1/minds", typing_default);
-app28.route("/api/v1/minds", variants_default);
-app28.route("/api/v1/minds", files_default);
-app28.route("/api/v1/minds", env_default);
-app28.route("/api/v1/minds", mind_skills_default);
-app28.route("/api/v1/minds", connectors_default);
-app28.route("/api/v1/minds", schedules_default);
-app28.route("/api/v1/minds", logs_default);
-app28.route("/api/v1/system", system_default);
-app28.route("/api/v1/system", update_default);
-app28.route("/api/v1/prompts", prompts_default);
-app28.route("/api/v1/skills", skills_default);
-app28.route("/api/v1/env", sharedEnvApp);
-app28.route("/api/v1/channels", channels_default2);
-var app_default = app28;
+app29.use("/api/*", bodyLimit({ maxSize: 10 * 1024 * 1024 }));
+app29.use("/api/*", csrf());
+app29.use("/api/activity/*", authMiddleware);
+app29.use("/api/minds/*", authMiddleware);
+app29.use("/api/conversations/*", authMiddleware);
+app29.use("/api/volute/*", authMiddleware);
+app29.use("/api/system/*", authMiddleware);
+app29.use("/api/env/*", authMiddleware);
+app29.use("/api/prompts/*", authMiddleware);
+app29.use("/api/skills/*", authMiddleware);
+app29.use("/api/v1/*", authMiddleware);
+app29.route("/pages", pages_default);
+app29.route("/public", public_files_default);
+var routes = app29.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/minds", minds_default).route("/api/minds", chat_default2).route("/api/minds", connectors_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", shared_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/conversations", user_conversations_default).route("/api/volute/channels", channels_default2).route("/api/volute", unifiedChatApp).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", chat_default);
+app29.route("/api/v1/minds", minds_default);
+app29.route("/api/v1/minds", typing_default);
+app29.route("/api/v1/minds", variants_default);
+app29.route("/api/v1/minds", files_default);
+app29.route("/api/v1/minds", env_default);
+app29.route("/api/v1/minds", mind_skills_default);
+app29.route("/api/v1/minds", connectors_default);
+app29.route("/api/v1/minds", schedules_default);
+app29.route("/api/v1/minds", logs_default);
+app29.route("/api/v1/system", system_default);
+app29.route("/api/v1/system", update_default);
+app29.route("/api/v1/prompts", prompts_default);
+app29.route("/api/v1/skills", skills_default);
+app29.route("/api/v1/env", sharedEnvApp);
+app29.route("/api/v1/channels", channels_default2);
+var app_default = app29;
 
 // src/web/server.ts
-var MIME_TYPES2 = {
+var MIME_TYPES3 = {
   ".html": "text/html",
   ".js": "application/javascript",
   ".css": "text/css",
@@ -6053,13 +6071,14 @@ var MIME_TYPES2 = {
 };
 async function startServer({
   port,
-  hostname = "127.0.0.1"
+  hostname = "127.0.0.1",
+  tls
 }) {
   let assetsDir = "";
   let searchDir = dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 5; i++) {
-    const candidate = resolve16(searchDir, "dist", "web-assets");
-    if (existsSync12(candidate)) {
+    const candidate = resolve18(searchDir, "dist", "web-assets");
+    if (existsSync13(candidate)) {
       assetsDir = candidate;
       break;
     }
@@ -6069,40 +6088,73 @@ async function startServer({
     app_default.get("*", async (c) => {
       const urlPath = new URL(c.req.url).pathname;
       if (urlPath.startsWith("/api/")) return c.notFound();
-      const filePath = resolve16(assetsDir, urlPath.slice(1));
+      const filePath = resolve18(assetsDir, urlPath.slice(1));
       if (!filePath.startsWith(assetsDir)) return c.text("Forbidden", 403);
-      const s = await stat3(filePath).catch(() => null);
+      const s = await stat4(filePath).catch(() => null);
       if (s?.isFile()) {
-        const ext = extname3(filePath);
-        const mime = MIME_TYPES2[ext] || "application/octet-stream";
-        const body = await readFile3(filePath);
+        const ext = extname5(filePath);
+        const mime = MIME_TYPES3[ext] || "application/octet-stream";
+        const body = await readFile4(filePath);
         return c.body(body, 200, { "Content-Type": mime });
       }
-      const indexPath = resolve16(assetsDir, "index.html");
-      const indexStat = await stat3(indexPath).catch(() => null);
+      const indexPath = resolve18(assetsDir, "index.html");
+      const indexStat = await stat4(indexPath).catch(() => null);
       if (indexStat?.isFile()) {
-        const body = await readFile3(indexPath, "utf-8");
+        const body = await readFile4(indexPath, "utf-8");
         return c.html(body);
       }
       return c.text("Not found", 404);
     });
   }
+  if (tls) {
+    const server2 = serve({
+      fetch: app_default.fetch,
+      port,
+      hostname,
+      createServer: createHttpsServer,
+      serverOptions: { key: tls.key, cert: tls.cert }
+    });
+    await new Promise((resolve20, reject) => {
+      server2.on("listening", () => {
+        logger_default.info("Volute UI running (https)", { hostname, port });
+        resolve20();
+      });
+      server2.on("error", (err) => {
+        reject(err);
+      });
+    });
+    const internalPort = port + 1;
+    const internalServer = serve({ fetch: app_default.fetch, port: internalPort, hostname: "127.0.0.1" });
+    await new Promise((resolve20, reject) => {
+      internalServer.on("listening", () => {
+        logger_default.info("Volute API running (http, internal)", {
+          hostname: "127.0.0.1",
+          port: internalPort
+        });
+        resolve20();
+      });
+      internalServer.on("error", (err) => {
+        reject(err);
+      });
+    });
+    return { server: server2, internalPort };
+  }
   const server = serve({ fetch: app_default.fetch, port, hostname });
-  await new Promise((resolve18, reject) => {
+  await new Promise((resolve20, reject) => {
     server.on("listening", () => {
-      logger_default.info("Volute UI running", { hostname, port });
-      resolve18();
+      logger_default.info("Volute API running (http)", { hostname, port });
+      resolve20();
     });
     server.on("error", (err) => {
       reject(err);
     });
   });
-  return server;
+  return { server };
 }
 
 // src/daemon.ts
 if (!process.env.VOLUTE_HOME) {
-  process.env.VOLUTE_HOME = resolve17(homedir2(), ".volute");
+  process.env.VOLUTE_HOME = resolve19(homedir2(), ".volute");
 }
 if (process.env.VOLUTE_TIMEZONE && !process.env.TZ) {
   process.env.TZ = process.env.VOLUTE_TIMEZONE;
@@ -6112,7 +6164,7 @@ async function startDaemon(opts) {
   const myPid = String(process.pid);
   const home = voluteHome();
   if (!opts.foreground) {
-    const rotatingLog = new RotatingLog(resolve17(home, "daemon.log"));
+    const rotatingLog = new RotatingLog(resolve19(home, "daemon.log"));
     logger_default.setOutput((line) => rotatingLog.write(`${line}
 `));
     const write = (...args) => rotatingLog.write(`${format(...args)}
@@ -6122,9 +6174,9 @@ async function startDaemon(opts) {
     console.warn = write;
     console.info = write;
   }
-  const DAEMON_PID_PATH = resolve17(home, "daemon.pid");
-  const DAEMON_JSON_PATH = resolve17(home, "daemon.json");
-  mkdirSync8(home, { recursive: true });
+  const DAEMON_PID_PATH = resolve19(home, "daemon.pid");
+  const DAEMON_JSON_PATH = resolve19(home, "daemon.json");
+  mkdirSync9(home, { recursive: true });
   migrateAgentsToMinds();
   try {
     await ensureSharedRepo();
@@ -6138,12 +6190,16 @@ async function startDaemon(opts) {
     logger_default.error("failed to sync built-in skills", logger_default.errorData(err));
   }
   const token = process.env.VOLUTE_DAEMON_TOKEN || randomBytes2(32).toString("hex");
-  process.env.VOLUTE_DAEMON_TOKEN = token;
-  process.env.VOLUTE_DAEMON_PORT = String(port);
-  process.env.VOLUTE_DAEMON_HOSTNAME = hostname;
-  let server;
+  let tls;
+  if (opts.tailscale) {
+    const { getTailscaleTls } = await import("./tailscale-AJ4VL5XK.js");
+    const tlsConfig = await getTailscaleTls();
+    tls = { key: tlsConfig.key, cert: tlsConfig.cert };
+    logger_default.info("Tailscale HTTPS enabled", { hostname: tlsConfig.hostname });
+  }
+  let result;
   try {
-    server = await startServer({ port, hostname });
+    result = await startServer({ port, hostname: "0.0.0.0", tls });
   } catch (err) {
     const e = err;
     if (e.code === "EADDRINUSE") {
@@ -6152,11 +6208,17 @@ async function startDaemon(opts) {
     }
     throw err;
   }
-  writeFileSync8(DAEMON_PID_PATH, myPid, { mode: 420 });
-  writeFileSync8(DAEMON_JSON_PATH, `${JSON.stringify({ port, hostname, token }, null, 2)}
-`, {
-    mode: 420
-  });
+  const { server, internalPort } = result;
+  const daemonPort = internalPort ?? port;
+  process.env.VOLUTE_DAEMON_TOKEN = token;
+  process.env.VOLUTE_DAEMON_PORT = String(daemonPort);
+  process.env.VOLUTE_DAEMON_HOSTNAME = hostname;
+  writeFileSync9(DAEMON_PID_PATH, myPid, { mode: 420 });
+  const daemonConfig = { port, hostname, token };
+  if (internalPort) daemonConfig.internalPort = internalPort;
+  if (tls) daemonConfig.tls = true;
+  writeFileSync9(DAEMON_JSON_PATH, `${JSON.stringify(daemonConfig, null, 2)}
+`, { mode: 420 });
   const delivery = initDeliveryManager();
   const manager = initMindManager();
   manager.loadCrashAttempts();
@@ -6172,11 +6234,12 @@ async function startDaemon(opts) {
   const unsubscribeWebhook = initWebhook();
   const registry = readRegistry();
   for (const entry of registry) {
-    try {
-      migrateDotVoluteDir(entry.name);
-      migrateMindState(entry.name);
-    } catch (err) {
-      logger_default.warn(`failed to migrate state for ${entry.name}`, logger_default.errorData(err));
+    for (const migrate of [migrateDotVoluteDir, migrateMindState, migratePagesDirToPublic]) {
+      try {
+        migrate(entry.name);
+      } catch (err) {
+        logger_default.warn(`failed to migrate state for ${entry.name}`, logger_default.errorData(err));
+      }
     }
   }
   const runningEntries = registry.filter((e) => e.running);
@@ -6188,8 +6251,8 @@ async function startDaemon(opts) {
         if (sleepManager.isSleeping(entry.name)) {
           try {
             const dir = mindDir(entry.name);
-            const daemonPort = process.env.VOLUTE_DAEMON_PORT ? parseInt(process.env.VOLUTE_DAEMON_PORT, 10) : void 0;
-            await connectors.startConnectors(entry.name, dir, entry.port, daemonPort);
+            const daemonPort2 = process.env.VOLUTE_DAEMON_PORT ? parseInt(process.env.VOLUTE_DAEMON_PORT, 10) : void 0;
+            await connectors.startConnectors(entry.name, dir, entry.port, daemonPort2);
             scheduler.loadSchedules(entry.name);
           } catch (err) {
             logger_default.error(
@@ -6226,7 +6289,7 @@ async function startDaemon(opts) {
     });
     await Promise.all(workers);
   }
-  import("./cloud-sync-PI47U2LT.js").then(
+  import("./cloud-sync-PPBBJDY6.js").then(
     ({ consumeQueuedMessages }) => consumeQueuedMessages().catch((err) => {
       logger_default.warn("failed to consume queued cloud messages", logger_default.errorData(err));
     })
@@ -6234,7 +6297,7 @@ async function startDaemon(opts) {
     logger_default.warn("failed to load cloud-sync module", logger_default.errorData(err));
   });
   try {
-    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-LKABEJSA.js");
+    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-AZQMC32A.js");
     backfillTemplateHashes();
     notifyVersionUpdate().catch((err) => {
       logger_default.warn("failed to send version update notifications", logger_default.errorData(err));
@@ -6251,13 +6314,13 @@ async function startDaemon(opts) {
   logger_default.info(`running on ${hostname}:${port}, pid ${myPid}`);
   function cleanup() {
     try {
-      if (readFileSync10(DAEMON_PID_PATH, "utf-8").trim() === myPid) {
+      if (readFileSync11(DAEMON_PID_PATH, "utf-8").trim() === myPid) {
         unlinkSync(DAEMON_PID_PATH);
       }
     } catch {
     }
     try {
-      const data = JSON.parse(readFileSync10(DAEMON_JSON_PATH, "utf-8"));
+      const data = JSON.parse(readFileSync11(DAEMON_JSON_PATH, "utf-8"));
       if (data.token === token) {
         unlinkSync(DAEMON_JSON_PATH);
       }
@@ -6271,9 +6334,9 @@ async function startDaemon(opts) {
     logger_default.info("shutting down...");
     const safe = (label, fn) => {
       try {
-        const result = fn();
-        if (result instanceof Promise)
-          return result.catch((err) => logger_default.error(`shutdown: ${label} failed`, logger_default.errorData(err)));
+        const result2 = fn();
+        if (result2 instanceof Promise)
+          return result2.catch((err) => logger_default.error(`shutdown: ${label} failed`, logger_default.errorData(err)));
       } catch (err) {
         logger_default.error(`shutdown: ${label} failed`, logger_default.errorData(err));
       }
@@ -6305,9 +6368,10 @@ async function startDaemon(opts) {
   process.on("exit", cleanup);
 }
 if (import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith("daemon.ts")) {
-  let port = 4200;
+  let port = 1618;
   let hostname = "127.0.0.1";
   let foreground = false;
+  let tailscale = false;
   for (let i = 2; i < process.argv.length; i++) {
     if (process.argv[i] === "--port" && process.argv[i + 1]) {
       port = parseInt(process.argv[i + 1], 10);
@@ -6317,9 +6381,11 @@ if (import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith
       i++;
     } else if (process.argv[i] === "--foreground") {
       foreground = true;
+    } else if (process.argv[i] === "--tailscale") {
+      tailscale = true;
     }
   }
-  startDaemon({ port, hostname, foreground });
+  startDaemon({ port, hostname, foreground, tailscale });
 }
 export {
   startDaemon