volute 0.24.0 → 0.25.0

package/dist/api.d.ts

@@ -522,6 +522,113 @@ declare const routes: hono_hono_base.HonoBase<hono_types.BlankEnv, hono_types.Bl
             status: hono_utils_http_status.ContentfulStatusCode;
         };
     };
+} & {
+    "/register": {
+        $post: {
+            input: {
+                json: {
+                    name: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 400;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 502;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 500;
+        } | {
+            input: {
+                json: {
+                    name: string;
+                };
+            };
+            output: {
+                system: string;
+            };
+            outputFormat: "json";
+            status: hono_utils_http_status.ContentfulStatusCode;
+        };
+    };
+} & {
+    "/login": {
+        $post: {
+            input: {
+                json: {
+                    key: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 400;
+        } | {
+            input: {
+                json: {
+                    key: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 502;
+        } | {
+            input: {
+                json: {
+                    key: string;
+                };
+            };
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 500;
+        } | {
+            input: {
+                json: {
+                    key: string;
+                };
+            };
+            output: {
+                system: string;
+            };
+            outputFormat: "json";
+            status: hono_utils_http_status.ContentfulStatusCode;
+        };
+    };
+} & {
+    "/logout": {
+        $post: {
+            input: {};
+            output: {
+                ok: true;
+            };
+            outputFormat: "json";
+            status: hono_utils_http_status.ContentfulStatusCode;
+        };
+    };
 }, "/api/system"> | hono_types.MergeSchemaPath<{
     "/update": {
         $get: {
@@ -3218,10 +3325,12 @@ declare const routes: hono_hono_base.HonoBase<hono_types.BlankEnv, hono_types.Bl
                 };
             };
             output: {
-                error: string;
+                installNotes: string | null;
+                npmInstalled: string[];
+                ok: true;
             };
             outputFormat: "json";
-            status: 400;
+            status: hono_utils_http_status.ContentfulStatusCode;
         } | {
             input: {
                 json: {
@@ -3233,10 +3342,10 @@ declare const routes: hono_hono_base.HonoBase<hono_types.BlankEnv, hono_types.Bl
                 };
             };
             output: {
-                ok: true;
+                error: string;
             };
             outputFormat: "json";
-            status: hono_utils_http_status.ContentfulStatusCode;
+            status: 400;
         };
     };
 } & {

package/dist/{chunk-4TJ72QQ3.js → chunk-BOTQ25QT.js}

@@ -2,7 +2,7 @@
 import {
   readVoluteConfig,
   writeVoluteConfig
-} from "./chunk-XLC342FO.js";
+} from "./chunk-SIAG3QMM.js";
 import {
   mindEnvPath,
   readEnv,

package/dist/{chunk-P3W36ZGD.js → chunk-DG7TO7EE.js}

@@ -41,13 +41,15 @@ function sharedSkillsDir() {
 }
 function parseSkillMd(content) {
   const match = content.match(/^---\n([\s\S]*?)\n---/);
-  if (!match) return { name: "", description: "" };
+  if (!match) return { name: "", description: "", npmDependencies: [] };
   const frontmatter = match[1];
   const nameMatch = frontmatter.match(/^name:\s*(.+)$/m);
   const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
+  const depsMatch = frontmatter.match(/^\s*npm-dependencies:\s*(.+)$/m);
   return {
     name: nameMatch?.[1].trim() ?? "",
-    description: descMatch?.[1].trim() ?? ""
+    description: descMatch?.[1].trim() ?? "",
+    npmDependencies: depsMatch ? depsMatch[1].trim().split(/[\s,]+/).filter(Boolean) : []
   };
 }
 async function listSharedSkills() {
@@ -127,7 +129,32 @@ async function installSkill(_mindName, dir, skillId) {
   if (existsSync(destDir)) throw new Error(`Skill already installed: ${skillId}`);
   mkdirSync(destDir, { recursive: true });
   cpSync(sourceDir, destDir, { recursive: true });
+  const npmInstalled = [];
+  const skillMdPath = join(sourceDir, "SKILL.md");
+  if (existsSync(skillMdPath)) {
+    const { npmDependencies } = parseSkillMd(readFileSync(skillMdPath, "utf-8"));
+    if (npmDependencies.length > 0) {
+      try {
+        await exec("npm", ["install", ...npmDependencies], { cwd: dir });
+        npmInstalled.push(...npmDependencies);
+      } catch (e) {
+        rmSync(destDir, { recursive: true });
+        const msg = e instanceof Error ? e.message : String(e);
+        throw new Error(
+          `Failed to install npm dependencies (${npmDependencies.join(", ")}): ${msg}`
+        );
+      }
+    }
+  }
+  let installNotes = null;
+  const installMdPath = join(destDir, "references", "INSTALL.md");
+  if (existsSync(installMdPath)) {
+    installNotes = readFileSync(installMdPath, "utf-8");
+  }
   await gitExec(["add", join("home", ".claude", "skills", skillId)], { cwd: dir });
+  if (npmInstalled.length > 0) {
+    await gitExec(["add", "package.json", "package-lock.json"], { cwd: dir });
+  }
   await gitExec(["commit", "-m", `Install shared skill: ${skillId}`], { cwd: dir });
   const commitHash = (await gitExec(["rev-parse", "HEAD"], { cwd: dir })).trim();
   const upstream = {
@@ -141,6 +168,7 @@ async function installSkill(_mindName, dir, skillId) {
     cwd: dir
   });
   await gitExec(["commit", "--amend", "--no-edit"], { cwd: dir });
+  return { installNotes, npmInstalled };
 }
 async function uninstallSkill(_mindName, dir, skillId) {
   validateSkillId(skillId);

package/dist/{chunk-OOW675I3.js → chunk-PMX4EIJK.js}

@@ -6,6 +6,7 @@ import {
   markIdle
 } from "./chunk-E7GOKNOT.js";
 import {
+  broadcast,
   publish,
   subscribe
 } from "./chunk-BFK6SOEJ.js";
@@ -17,10 +18,10 @@ import {
   getPrompt,
   loadJsonMap,
   saveJsonMap
-} from "./chunk-NOBRGACV.js";
+} from "./chunk-SHSWYG2J.js";
 import {
   readVoluteConfig
-} from "./chunk-XLC342FO.js";
+} from "./chunk-SIAG3QMM.js";
 import {
   loadMergedEnv
 } from "./chunk-PHU4DEAJ.js";
@@ -185,12 +186,16 @@ async function updateUserProfile(userId, profile) {
 }
 async function syncMindProfile(mindName, config) {
   const user = await getOrCreateMindUser(mindName);
-  const db = await getDb();
-  await db.update(users).set({
+  const newProfile = {
     display_name: config.displayName ?? null,
     description: config.description ?? null,
     avatar: config.avatar ?? null
-  }).where(eq(users.id, user.id));
+  };
+  const changed = user.display_name !== newProfile.display_name || user.description !== newProfile.description || user.avatar !== newProfile.avatar;
+  if (!changed) return;
+  const db = await getDb();
+  await db.update(users).set(newProfile).where(eq(users.id, user.id));
+  broadcast({ type: "profile_updated", mind: mindName, summary: `${mindName} profile updated` });
 }
 
 // src/lib/pages-watcher.ts
@@ -231,16 +236,16 @@ function startPagesWatcher(mindName, pagesDir) {
 }
 function startWatcher(mindName) {
   if (watchers.has(mindName)) return;
-  const pagesDir = resolve(mindDir(mindName), "home", "pages");
+  const pagesDir = resolve(mindDir(mindName), "home", "public", "pages");
   if (existsSync(pagesDir)) {
     startPagesWatcher(mindName, pagesDir);
     return;
   }
   if (homeWatchers.has(mindName)) return;
-  const homeDir = resolve(mindDir(mindName), "home");
-  if (!existsSync(homeDir)) return;
+  const publicDir = resolve(mindDir(mindName), "home", "public");
+  if (!existsSync(publicDir)) return;
   try {
-    const hw = watch(homeDir, (_eventType, filename) => {
+    const hw = watch(publicDir, (_eventType, filename) => {
       if (filename !== "pages") return;
       if (!existsSync(pagesDir)) return;
       hw.close();
@@ -337,7 +342,7 @@ function buildSites() {
   }
   const entries = readRegistry();
   for (const entry of [...entries].sort((a, b) => a.name.localeCompare(b.name))) {
-    const pagesDir = resolve(mindDir(entry.name), "home", "pages");
+    const pagesDir = resolve(mindDir(entry.name), "home", "public", "pages");
     if (!existsSync(pagesDir)) continue;
     const mindPages = scanPagesDir(pagesDir, `/pages/${entry.name}`);
     if (mindPages.length > 0) {
@@ -350,7 +355,7 @@ function buildRecentPages() {
   const entries = readRegistry();
   const pages = [];
   for (const entry of entries) {
-    const pagesDir = resolve(mindDir(entry.name), "home", "pages");
+    const pagesDir = resolve(mindDir(entry.name), "home", "public", "pages");
     if (!existsSync(pagesDir)) continue;
     let items;
     try {
@@ -774,7 +779,7 @@ function publish2(mind, event) {
 }
 
 // src/lib/delivery/delivery-manager.ts
-import { readFile } from "fs/promises";
+import { readFile, realpath } from "fs/promises";
 import { extname, resolve as resolve5 } from "path";
 import { and as and3, eq as eq3, sql as sql2 } from "drizzle-orm";
 
@@ -1990,8 +1995,26 @@ var DeliveryManager = class {
         if (p.userType === "mind") {
           const dir = mindDir(p.username);
           const config = readVoluteConfig(dir);
-          if (!config?.avatar) continue;
-          filePath = resolve5(dir, "home", config.avatar);
+          if (!config?.profile?.avatar) continue;
+          filePath = resolve5(dir, "home", config.profile.avatar);
+          const homeDir = resolve5(dir, "home");
+          if (!filePath.startsWith(`${homeDir}/`)) {
+            dlog2.warn(`avatar path for ${p.username} escapes home directory, skipping`);
+            continue;
+          }
+          try {
+            const realHome = await realpath(homeDir);
+            const realAvatar = await realpath(filePath);
+            if (!realAvatar.startsWith(`${realHome}/`)) {
+              dlog2.warn(
+                `avatar symlink for ${p.username} resolves outside home directory, skipping`
+              );
+              continue;
+            }
+          } catch (err) {
+            if (err.code === "ENOENT") continue;
+            throw err;
+          }
         } else {
           filePath = resolve5(voluteHome(), "avatars", p.avatar);
         }
@@ -2702,11 +2725,7 @@ async function startMindFull(name) {
   );
   const config = readVoluteConfig(dir);
   if (config) {
-    syncMindProfile(baseName, {
-      displayName: config.displayName,
-      description: config.description,
-      avatar: config.avatar
-    }).catch(
+    syncMindProfile(baseName, config.profile ?? {}).catch(
       (err) => logger_default.error(`failed to sync profile for ${baseName}`, logger_default.errorData(err))
     );
   }
@@ -3028,7 +3047,7 @@ var SleepManager = class {
       const db = await getDb();
       const rows = await db.select().from(deliveryQueue).where(and4(eq4(deliveryQueue.mind, name), eq4(deliveryQueue.status, "sleep-queued"))).all();
       if (rows.length === 0) return 0;
-      const { deliverMessage: deliverMessage2 } = await import("./message-delivery-S7BCNV6Y.js");
+      const { deliverMessage: deliverMessage2 } = await import("./message-delivery-XMGV3FUM.js");
       const delivered = [];
       for (const row of rows) {
         try {

package/dist/{chunk-NOBRGACV.js → chunk-SHSWYG2J.js}

@@ -548,7 +548,7 @@ var MindManager = class {
       if (this.shuttingDown || this.stopping.has(name)) return;
       mlog.error(`mind ${name} exited with code ${code}`);
       try {
-        const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+        const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
         if (getSleepManagerIfReady()?.isSleeping(name)) {
           mlog.info(`${name} is sleeping \u2014 skipping crash recovery`);
           return;

package/dist/{chunk-XLC342FO.js → chunk-SIAG3QMM.js}

@@ -14,7 +14,20 @@ function readJson(path) {
 }
 function readVoluteConfig(mindDir) {
   const path = resolve(mindDir, "home/.config/volute.json");
-  return readJson(path);
+  const config = readJson(path);
+  if (!config) return null;
+  const legacy = config;
+  if (!config.profile && ("displayName" in config || "description" in config || "avatar" in config)) {
+    config.profile = {
+      displayName: legacy.displayName,
+      description: legacy.description,
+      avatar: legacy.avatar
+    };
+    delete legacy.displayName;
+    delete legacy.description;
+    delete legacy.avatar;
+  }
+  return config;
 }
 function writeVoluteConfig(mindDir, config) {
   const path = resolve(mindDir, "home/.config/volute.json");

package/dist/cli.js

@@ -9,13 +9,13 @@ if (!process.env.VOLUTE_HOME) {
 var command = process.argv[2];
 var args = process.argv.slice(3);
 if (command === "--version" || command === "-v") {
-  const { default: pkg } = await import("./package-S5YF25XV.js");
+  const { default: pkg } = await import("./package-3HF5MXU2.js");
   console.log(pkg.version);
   process.exit(0);
 }
 switch (command) {
   case "mind":
-    await import("./mind-KPLCRKQA.js").then((m) => m.run(args));
+    await import("./mind-YVWAHL2A.js").then((m) => m.run(args));
     break;
   case "send":
     await import("./send-IISDYFCL.js").then((m) => m.run(args));
@@ -33,7 +33,7 @@ switch (command) {
     await import("./schedule-YEFDLVMJ.js").then((m) => m.run(args));
     break;
   case "skill":
-    await import("./skill-BQOFACEI.js").then((m) => m.run(args));
+    await import("./skill-T3EMR6IR.js").then((m) => m.run(args));
     break;
   case "shared":
     await import("./shared-LWMNTTZN.js").then((m) => m.run(args));
@@ -45,13 +45,13 @@ switch (command) {
     await import("./env-2FPOZK37.js").then((m) => m.run(args));
     break;
   case "up":
-    await import("./up-OMHACRJL.js").then((m) => m.run(args));
+    await import("./up-CJ26KQLN.js").then((m) => m.run(args));
     break;
   case "down":
     await import("./down-674SX2IZ.js").then((m) => m.run(args));
     break;
   case "restart":
-    await import("./daemon-restart-YMPEATQH.js").then((m) => m.run(args));
+    await import("./daemon-restart-FDNOZEAD.js").then((m) => m.run(args));
     break;
   case "service":
     await import("./service-FASYWLTC.js").then((m) => m.run(args));
@@ -63,7 +63,7 @@ switch (command) {
     await import("./status-SIRPLEZC.js").then((m) => m.run(args));
     break;
   case "pages":
-    await import("./pages-TWR6U7DS.js").then((m) => m.run(args));
+    await import("./pages-Y6DRWUOJ.js").then((m) => m.run(args));
     break;
   case "auth":
     await import("./auth-HM2RSPY7.js").then((m) => m.run(args));

package/dist/{cloud-sync-DIU3OCPV.js → cloud-sync-PPBBJDY6.js}

@@ -3,12 +3,12 @@ import {
   deliverMessage,
   getAuthHeaders,
   getWebhookUrl
-} from "./chunk-OOW675I3.js";
+} from "./chunk-PMX4EIJK.js";
 import "./chunk-HFCBO2GL.js";
 import "./chunk-E7GOKNOT.js";
 import "./chunk-BFK6SOEJ.js";
-import "./chunk-NOBRGACV.js";
-import "./chunk-XLC342FO.js";
+import "./chunk-SHSWYG2J.js";
+import "./chunk-SIAG3QMM.js";
 import "./chunk-PHU4DEAJ.js";
 import "./chunk-33XAVCS4.js";
 import {

package/dist/{daemon-restart-YMPEATQH.js → daemon-restart-FDNOZEAD.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   run
-} from "./chunk-TQDITGES.js";
+} from "./chunk-ZSH4G2P5.js";
 import {
   stopDaemon
 } from "./chunk-2767L2RZ.js";