volute 0.24.0 → 0.25.0

package/dist/daemon.js

@@ -78,9 +78,11 @@ import {
   subscribe2 as subscribe3,
   updateUserProfile,
   verifyUser
-} from "./chunk-OOW675I3.js";
+} from "./chunk-PMX4EIJK.js";
 import {
-  readSystemsConfig
+  deleteSystemsConfig,
+  readSystemsConfig,
+  writeSystemsConfig
 } from "./chunk-HFCBO2GL.js";
 import {
   getActiveMinds,
@@ -101,17 +103,17 @@ import {
   getPromptIfCustom,
   initMindManager,
   substitute
-} from "./chunk-NOBRGACV.js";
+} from "./chunk-SHSWYG2J.js";
 import {
   findOpenClawSession,
   importOpenClawConnectors,
   importPiSession,
   parseNameFromIdentity
-} from "./chunk-4TJ72QQ3.js";
+} from "./chunk-BOTQ25QT.js";
 import {
   readVoluteConfig,
   writeVoluteConfig
-} from "./chunk-XLC342FO.js";
+} from "./chunk-SIAG3QMM.js";
 import {
   loadMergedEnv,
   mindEnvPath,
@@ -137,7 +139,7 @@ import {
   syncBuiltinSkills,
   uninstallSkill,
   updateSkill
-} from "./chunk-P3W36ZGD.js";
+} from "./chunk-DG7TO7EE.js";
 import {
   activity,
   conversations,
@@ -210,7 +212,7 @@ import {
 import { randomBytes as randomBytes2 } from "crypto";
 import { mkdirSync as mkdirSync9, readFileSync as readFileSync11, unlinkSync, writeFileSync as writeFileSync9 } from "fs";
 import { homedir as homedir2 } from "os";
-import { resolve as resolve18 } from "path";
+import { resolve as resolve19 } from "path";
 import { format } from "util";
 
 // src/lib/migrate-agents-to-minds.ts
@@ -360,6 +362,17 @@ function migrateDotVoluteDir(name) {
     console.warn(`[migrate] both .volute/ and .mind/ exist for ${name}, skipping rename`);
   }
 }
+function migratePagesDirToPublic(name) {
+  const dir = mindDir(name);
+  const oldPagesDir = resolve2(dir, "home", "pages");
+  const newPublicDir = resolve2(dir, "home", "public");
+  const newPagesDir = resolve2(newPublicDir, "pages");
+  if (existsSync2(oldPagesDir) && !existsSync2(newPagesDir)) {
+    mkdirSync(newPublicDir, { recursive: true });
+    renameSync2(oldPagesDir, newPagesDir);
+    logger_default.info(`migrated pages/ \u2192 public/pages/ for ${name}`);
+  }
+}
 function migrateMindState(name) {
   const src = resolve2(mindDir(name), ".mind");
   if (!existsSync2(src)) return;
@@ -396,7 +409,7 @@ function isValidDaemonToken(token) {
   if (!expected || token.length !== expected.length) return false;
   return timingSafeEqual(Buffer.from(token), Buffer.from(expected));
 }
-var SESSION_MAX_AGE = 864e5;
+var SESSION_MAX_AGE = 365 * 24 * 60 * 60 * 1e3;
 var SESSION_CACHE_TTL = 5 * 60 * 1e3;
 var sessionCache = /* @__PURE__ */ new Map();
 function invalidateSessionCache(sessionId) {
@@ -480,13 +493,13 @@ var authMiddleware = createMiddleware(async (c, next) => {
 
 // src/web/server.ts
 import { existsSync as existsSync13 } from "fs";
-import { readFile as readFile3, stat as stat3 } from "fs/promises";
+import { readFile as readFile4, stat as stat4 } from "fs/promises";
 import { createServer as createHttpsServer } from "https";
-import { dirname, extname as extname4, resolve as resolve17 } from "path";
+import { dirname, extname as extname5, resolve as resolve18 } from "path";
 import { serve } from "@hono/node-server";
 
 // src/web/app.ts
-import { Hono as Hono28 } from "hono";
+import { Hono as Hono29 } from "hono";
 import { bodyLimit } from "hono/body-limit";
 import { csrf } from "hono/csrf";
 import { HTTPException } from "hono/http-exception";
@@ -553,8 +566,8 @@ var app = new Hono().get("/events", async (c) => {
         });
       }, 15e3);
       cleanups.push(() => clearInterval(keepAlive));
-      await new Promise((resolve19) => {
-        stream.onAbort(() => resolve19());
+      await new Promise((resolve20) => {
+        stream.onAbort(() => resolve20());
       });
     } finally {
       for (const cleanup of cleanups) {
@@ -575,6 +588,12 @@ import { zValidator } from "@hono/zod-validator";
 import { Hono as Hono2 } from "hono";
 import { deleteCookie, getCookie as getCookie2, setCookie } from "hono/cookie";
 import { z } from "zod";
+var SESSION_COOKIE_OPTIONS = {
+  path: "/",
+  httpOnly: true,
+  sameSite: "Lax",
+  maxAge: Math.floor(SESSION_MAX_AGE / 1e3)
+};
 var credentialsSchema = z.object({
   username: z.string().min(1),
   password: z.string().min(1)
@@ -610,6 +629,11 @@ var authenticated = new Hono2().use(authMiddleware).post("/change-password", zVa
   await updateUserProfile(user.id, body);
   const sessionId = getCookie2(c, "volute_session");
   if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} profile updated`
+  });
   return c.json({ ok: true });
 }).post("/avatar", async (c) => {
   const user = c.get("user");
@@ -637,6 +661,11 @@ var authenticated = new Hono2().use(authMiddleware).post("/change-password", zVa
   await updateUserProfile(user.id, { avatar: filename });
   const sessionId = getCookie2(c, "volute_session");
   if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} avatar updated`
+  });
   return c.json({ ok: true, avatar: filename });
 }).delete("/avatar", async (c) => {
   const user = c.get("user");
@@ -647,6 +676,11 @@ var authenticated = new Hono2().use(authMiddleware).post("/change-password", zVa
   await updateUserProfile(user.id, { avatar: null });
   const sessionId = getCookie2(c, "volute_session");
   if (sessionId) invalidateSessionCache(sessionId);
+  broadcast({
+    type: "profile_updated",
+    mind: user.username,
+    summary: `${user.username} avatar removed`
+  });
   return c.json({ ok: true });
 });
 var admin = new Hono2().use(authMiddleware).get("/users", async (c) => {
@@ -700,6 +734,14 @@ var admin = new Hono2().use(authMiddleware).get("/users", async (c) => {
   if (Number.isNaN(id)) return c.json({ error: "Invalid user ID" }, 400);
   const body = c.req.valid("json");
   await updateUserProfile(id, body);
+  const updatedUser = await getUser(id);
+  if (updatedUser) {
+    broadcast({
+      type: "profile_updated",
+      mind: updatedUser.username,
+      summary: `${updatedUser.username} profile updated`
+    });
+  }
   return c.json({ ok: true });
 }).delete("/users/:id", async (c) => {
   const user = c.get("user");
@@ -728,7 +770,7 @@ var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema),
   const user = await createUser(username, password);
   if (user.role === "admin") {
     const sessionId = await createSession(user.id);
-    setCookie(c, "volute_session", sessionId, { path: "/", httpOnly: true, sameSite: "Lax" });
+    setCookie(c, "volute_session", sessionId, SESSION_COOKIE_OPTIONS);
   }
   return c.json({ id: user.id, username: user.username, role: user.role });
 }).post("/login", zValidator("json", credentialsSchema), async (c) => {
@@ -738,7 +780,7 @@ var app2 = new Hono2().post("/register", zValidator("json", credentialsSchema),
     return c.json({ error: "Invalid credentials" }, 401);
   }
   const sessionId = await createSession(user.id);
-  setCookie(c, "volute_session", sessionId, { path: "/", httpOnly: true, sameSite: "Lax" });
+  setCookie(c, "volute_session", sessionId, SESSION_COOKIE_OPTIONS);
   return c.json({ id: user.id, username: user.username, role: user.role });
 }).post("/logout", async (c) => {
   const sessionId = getCookie2(c, "volute_session");
@@ -1886,13 +1928,13 @@ var app6 = new Hono6().post("/:name/files/send", async (c) => {
   if (pathErr) return c.json({ error: pathErr }, 400);
   const senderDir = mindDir(senderName);
   const filePath = resolve6(senderDir, "home", body.filePath);
-  const MAX_FILE_SIZE = 50 * 1024 * 1024;
-  const stat4 = statSync(filePath, { throwIfNoEntry: false });
-  if (!stat4) return c.json({ error: `File not found: ${body.filePath}` }, 404);
-  if (stat4.size > MAX_FILE_SIZE) {
+  const MAX_FILE_SIZE2 = 50 * 1024 * 1024;
+  const stat5 = statSync(filePath, { throwIfNoEntry: false });
+  if (!stat5) return c.json({ error: `File not found: ${body.filePath}` }, 404);
+  if (stat5.size > MAX_FILE_SIZE2) {
     return c.json(
       {
-        error: `File too large (${formatFileSize(stat4.size)}, max ${formatFileSize(MAX_FILE_SIZE)})`
+        error: `File too large (${formatFileSize(stat5.size)}, max ${formatFileSize(MAX_FILE_SIZE2)})`
       },
       413
     );
@@ -2020,12 +2062,12 @@ var app7 = new Hono7().get("/:name/avatar", async (c) => {
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   const dir = mindDir(name);
   const config = readVoluteConfig(dir);
-  if (!config?.avatar) return c.json({ error: "No avatar configured" }, 404);
-  const ext = extname2(config.avatar).toLowerCase();
+  if (!config?.profile?.avatar) return c.json({ error: "No avatar configured" }, 404);
+  const ext = extname2(config.profile.avatar).toLowerCase();
   const mime = AVATAR_MIME2[ext];
   if (!mime) return c.json({ error: "Invalid avatar extension" }, 400);
   const homeDir = resolve7(dir, "home");
-  const avatarPath = resolve7(homeDir, config.avatar);
+  const avatarPath = resolve7(homeDir, config.profile.avatar);
   if (!avatarPath.startsWith(`${homeDir}/`)) return c.json({ error: "Invalid avatar path" }, 400);
   let realAvatarPath;
   try {
@@ -2197,9 +2239,9 @@ var app9 = new Hono9().get("/:name/logs", async (c) => {
     stream.onAbort(() => {
       tail.kill();
     });
-    await new Promise((resolve19) => {
-      tail.on("exit", resolve19);
-      stream.onAbort(resolve19);
+    await new Promise((resolve20) => {
+      tail.on("exit", resolve20);
+      stream.onAbort(resolve20);
     });
   });
 }).get("/:name/logs/tail", async (c) => {
@@ -2217,8 +2259,8 @@ var app9 = new Hono9().get("/:name/logs", async (c) => {
   tail.stdout.on("data", (data) => {
     output += data.toString();
   });
-  await new Promise((resolve19) => {
-    tail.on("exit", resolve19);
+  await new Promise((resolve20) => {
+    tail.on("exit", resolve20);
   });
   return c.text(output);
 });
@@ -2246,12 +2288,12 @@ var app10 = new Hono10().get("/:name/skills", async (c) => {
     const { skillId } = c.req.valid("json");
     const dir = mindDir(name);
     try {
-      await installSkill(name, dir, skillId);
+      const result = await installSkill(name, dir, skillId);
+      return c.json({ ok: true, ...result });
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       return c.json({ error: msg }, 400);
     }
-    return c.json({ ok: true });
   }
 ).post(
   "/:name/skills/update",
@@ -2606,7 +2648,7 @@ async function getMindStatus(name, port) {
   const manager = getMindManager();
   let status = "stopped";
   try {
-    const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+    const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
     if (getSleepManagerIfReady()?.isSleeping(name)) {
       status = "sleeping";
     }
@@ -2641,9 +2683,9 @@ async function getMindStatus(name, port) {
   return {
     status,
     channels,
-    displayName: config?.displayName,
-    description: config?.description,
-    avatar: config?.avatar
+    displayName: config?.profile?.displayName,
+    description: config?.profile?.description,
+    avatar: config?.profile?.avatar
   };
 }
 var TEMPLATE_BRANCH = "volute/template";
@@ -3007,7 +3049,7 @@ var app11 = new Hono11().post("/", requireAdmin, zValidator3("json", createMindS
     if (body.description) {
       const seedConfig = readVoluteConfig(dest);
       if (!seedConfig) throw new Error("Failed to read volute.json after identity generation");
-      seedConfig.description = body.description;
+      seedConfig.profile = { ...seedConfig.profile, description: body.description };
       writeVoluteConfig(dest, seedConfig);
     }
     if (body.model) {
@@ -3247,7 +3289,7 @@ ${user.trimEnd()}
   const minds = await Promise.all(
     entries.map(async (entry) => {
       const mindStatus = await getMindStatus(entry.name, entry.port);
-      const hasPages = existsSync10(resolve12(mindDir(entry.name), "home", "pages"));
+      const hasPages = existsSync10(resolve12(mindDir(entry.name), "home", "public", "pages"));
       return {
         ...entry,
         ...mindStatus,
@@ -3280,7 +3322,7 @@ ${user.trimEnd()}
       return { name: v.name, port: v.port, status: variantStatus };
     })
   );
-  const hasPages = existsSync10(resolve12(mindDir(name), "home", "pages"));
+  const hasPages = existsSync10(resolve12(mindDir(name), "home", "public", "pages"));
   return c.json({ ...entry, ...mindStatus, variants: variantStatuses, hasPages });
 }).post("/:name/start", requireAdmin, async (c) => {
   const name = c.req.param("name");
@@ -3380,7 +3422,7 @@ ${user.trimEnd()}
         }
       }
     }
-    if (context) {
+    if (context && context.type !== "reload") {
       manager.setPendingContext(name, context);
     }
     if (context?.type === "sprouted" && !variantName) {
@@ -3424,7 +3466,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   return c.json(sm.getState(name));
@@ -3432,7 +3474,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   if (sm.isSleeping(name)) return c.json({ error: "Mind is already sleeping" }, 409);
@@ -3452,7 +3494,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   if (!sm.isSleeping(name)) return c.json({ error: "Mind is not sleeping" }, 409);
@@ -3462,7 +3504,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const sm = getSleepManagerIfReady();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   const flushed = await sm.flushQueuedMessages(name);
@@ -3680,7 +3722,7 @@ ${user.trimEnd()}
     if (!variant) return c.json({ error: `Unknown variant: ${variantName}` }, 404);
   }
   try {
-    const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+    const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
     const sm = getSleepManagerIfReady();
     if (sm?.isSleeping(baseName)) {
       const body2 = await c.req.text();
@@ -4114,7 +4156,7 @@ var app12 = new Hono12().get("/:name/*", async (c) => {
     pagesRoot = resolve13(voluteHome(), "shared", "pages");
   } else {
     if (!findMind(name)) return c.text("Not found", 404);
-    pagesRoot = resolve13(mindDir(name), "home", "pages");
+    pagesRoot = resolve13(mindDir(name), "home", "public", "pages");
   }
   const wildcard = c.req.path.replace(`/pages/${name}`, "") || "/";
   const requestedPath = resolve13(pagesRoot, wildcard.slice(1));
@@ -4190,9 +4232,98 @@ var app13 = new Hono13().get("/", async (c) => {
 });
 var prompts_default = app13;
 
+// src/web/api/public-files.ts
+import { readdir as readdir2, readFile as readFile3, stat as stat3 } from "fs/promises";
+import { extname as extname4, resolve as resolve14 } from "path";
+import { Hono as Hono14 } from "hono";
+var MAX_FILE_SIZE = 50 * 1024 * 1024;
+function resolvePublicRoot(name) {
+  if (name === "_system") return resolve14(voluteHome(), "shared");
+  if (!findMind(name)) return null;
+  return resolve14(mindDir(name), "home", "public");
+}
+function hasDotSegment(relativePath) {
+  return relativePath.split("/").some((seg) => seg.startsWith("."));
+}
+var MIME_TYPES2 = {
+  ".html": "text/html",
+  ".js": "application/javascript",
+  ".css": "text/css",
+  ".json": "application/json",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".txt": "text/plain",
+  ".xml": "application/xml",
+  ".md": "text/markdown",
+  ".webp": "image/webp"
+};
+async function listDir(dirPath) {
+  let entries;
+  try {
+    entries = await readdir2(dirPath, { withFileTypes: true });
+  } catch (err) {
+    if (err?.code === "ENOENT") return [];
+    throw err;
+  }
+  return entries.filter((e) => !e.name.startsWith(".")).map((e) => ({
+    name: e.name,
+    type: e.isDirectory() ? "directory" : "file"
+  }));
+}
+var app14 = new Hono14().get("/:name/", async (c) => {
+  const name = c.req.param("name");
+  const publicRoot = resolvePublicRoot(name);
+  if (!publicRoot) return c.json({ error: "Not found" }, 404);
+  return c.json(await listDir(publicRoot));
+}).get("/:name/*", async (c) => {
+  const name = c.req.param("name");
+  const publicRoot = resolvePublicRoot(name);
+  if (!publicRoot) return c.text("Not found", 404);
+  const wildcard = c.req.path.replace(`/public/${name}`, "") || "/";
+  const relativePath = wildcard.slice(1);
+  const requestedPath = resolve14(publicRoot, relativePath);
+  if (!requestedPath.startsWith(publicRoot)) return c.text("Forbidden", 403);
+  if (hasDotSegment(relativePath)) return c.text("Forbidden", 403);
+  let fileStat;
+  try {
+    fileStat = await stat3(requestedPath);
+  } catch (err) {
+    if (err?.code === "ENOENT") return c.text("Not found", 404);
+    if (err?.code === "EACCES") return c.text("Forbidden", 403);
+    return c.text("Internal server error", 500);
+  }
+  if (fileStat.isDirectory()) {
+    if (wildcard.endsWith("/")) {
+      return c.json(await listDir(requestedPath));
+    }
+    return c.text("Not found", 404);
+  }
+  if (fileStat.isFile()) {
+    if (fileStat.size > MAX_FILE_SIZE) return c.text("File too large", 413);
+    const ext = extname4(requestedPath);
+    const mime = MIME_TYPES2[ext] || "application/octet-stream";
+    try {
+      const body = await readFile3(requestedPath);
+      return c.body(body, 200, { "Content-Type": mime });
+    } catch (err) {
+      if (err?.code === "ENOENT") return c.text("Not found", 404);
+      if (err?.code === "EACCES") return c.text("Forbidden", 403);
+      return c.text("Failed to read file", 500);
+    }
+  }
+  return c.text("Not found", 404);
+});
+var public_files_default = app14;
+
 // src/web/api/schedules.ts
 import { CronExpressionParser } from "cron-parser";
-import { Hono as Hono14 } from "hono";
+import { Hono as Hono15 } from "hono";
 var slog = logger_default.child("schedules");
 function readSchedules(name) {
   return readVoluteConfig(mindDir(name))?.schedules ?? [];
@@ -4209,7 +4340,7 @@ function writeSchedules(name, schedules) {
     data: { schedules }
   });
 }
-var app14 = new Hono14().get("/:name/schedules", (c) => {
+var app15 = new Hono15().get("/:name/schedules", (c) => {
   const name = c.req.param("name");
   if (!findMind(name)) return c.json({ error: "Mind not found" }, 404);
   return c.json(readSchedules(name));
@@ -4312,11 +4443,11 @@ var app14 = new Hono14().get("/:name/schedules", (c) => {
     return c.json({ error: "Failed to reach mind" }, 502);
   }
 });
-var schedules_default = app14;
+var schedules_default = app15;
 
 // src/web/api/shared.ts
-import { Hono as Hono15 } from "hono";
-var app15 = new Hono15().post("/:name/shared/merge", requireAdmin, async (c) => {
+import { Hono as Hono16 } from "hono";
+var app16 = new Hono16().post("/:name/shared/merge", requireAdmin, async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -4365,15 +4496,15 @@ var app15 = new Hono15().post("/:name/shared/merge", requireAdmin, async (c) =>
     return c.json({ error: err instanceof Error ? err.message : "Failed to get status" }, 500);
   }
 });
-var shared_default = app15;
+var shared_default = app16;
 
 // src/web/api/skills.ts
 import { existsSync as existsSync11, mkdtempSync, readdirSync as readdirSync5, rmSync as rmSync5 } from "fs";
 import { tmpdir } from "os";
-import { join as join2, resolve as resolve14 } from "path";
+import { join as join2, resolve as resolve15 } from "path";
 import AdmZip from "adm-zip";
-import { Hono as Hono16 } from "hono";
-var app16 = new Hono16().get("/", async (c) => {
+import { Hono as Hono17 } from "hono";
+var app17 = new Hono17().get("/", async (c) => {
   const skills = await listSharedSkills();
   return c.json(skills);
 }).get("/:id", async (c) => {
@@ -4397,7 +4528,7 @@ var app16 = new Hono16().get("/", async (c) => {
   try {
     const zip = new AdmZip(buffer2);
     for (const entry of zip.getEntries()) {
-      const target = resolve14(tmpDir, entry.entryName);
+      const target = resolve15(tmpDir, entry.entryName);
       if (!target.startsWith(tmpDir)) {
         return c.json({ error: "Invalid zip: paths must not escape archive" }, 400);
       }
@@ -4438,12 +4569,15 @@ var app16 = new Hono16().get("/", async (c) => {
   }
   return c.json({ ok: true });
 });
-var skills_default = app16;
+var skills_default = app17;
 
 // src/web/api/system.ts
-import { Hono as Hono17 } from "hono";
+import { zValidator as zValidator5 } from "@hono/zod-validator";
+import { Hono as Hono18 } from "hono";
 import { streamSSE as streamSSE3 } from "hono/streaming";
-var app17 = new Hono17().post("/restart", requireAdmin, (c) => {
+import { z as z5 } from "zod";
+var DEFAULT_API_URL = "https://volute.systems";
+var app18 = new Hono18().post("/restart", requireAdmin, (c) => {
   setTimeout(() => process.exit(1), 200);
   return c.json({ ok: true });
 }).post("/stop", requireAdmin, (c) => {
@@ -4460,29 +4594,107 @@ var app17 = new Hono17().post("/restart", requireAdmin, (c) => {
       stream.writeSSE({ data: JSON.stringify(entry) }).catch(() => {
       });
     });
-    await new Promise((resolve19) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
-        resolve19();
+        resolve20();
       });
     });
   });
 }).get("/info", (c) => {
   const config = readSystemsConfig();
   return c.json({ system: config?.system ?? null });
+}).post(
+  "/register",
+  requireAdmin,
+  zValidator5("json", z5.object({ name: z5.string().min(1) })),
+  async (c) => {
+    const existing = readSystemsConfig();
+    if (existing) {
+      return c.json({ error: `Already registered as "${existing.system}"` }, 400);
+    }
+    const { name } = c.req.valid("json");
+    const apiUrl = process.env.VOLUTE_SYSTEMS_URL || DEFAULT_API_URL;
+    let apiKey;
+    let system;
+    try {
+      const res = await fetch(`${apiUrl}/api/register`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ name: name.trim() })
+      });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));
+        return c.json({ error: err.error }, 502);
+      }
+      ({ apiKey, system } = await res.json());
+    } catch (err) {
+      return c.json({ error: `Connection failed: ${err.message}` }, 502);
+    }
+    try {
+      writeSystemsConfig({ apiKey, system, apiUrl });
+    } catch (err) {
+      return c.json(
+        {
+          error: `Registered as "${system}" but failed to save config: ${err.message}`
+        },
+        500
+      );
+    }
+    return c.json({ system });
+  }
+).post(
+  "/login",
+  requireAdmin,
+  zValidator5("json", z5.object({ key: z5.string().min(1) })),
+  async (c) => {
+    const existing = readSystemsConfig();
+    if (existing) {
+      return c.json({ error: `Already logged in as "${existing.system}"` }, 400);
+    }
+    const { key } = c.req.valid("json");
+    const apiUrl = process.env.VOLUTE_SYSTEMS_URL || DEFAULT_API_URL;
+    let system;
+    try {
+      const res = await fetch(`${apiUrl}/api/whoami`, {
+        headers: { Authorization: `Bearer ${key.trim()}` }
+      });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));
+        return c.json({ error: err.error }, 502);
+      }
+      ({ system } = await res.json());
+    } catch (err) {
+      return c.json({ error: `Connection failed: ${err.message}` }, 502);
+    }
+    try {
+      writeSystemsConfig({ apiKey: key.trim(), system, apiUrl });
+    } catch (err) {
+      return c.json(
+        {
+          error: `Logged in as "${system}" but failed to save config: ${err.message}`
+        },
+        500
+      );
+    }
+    return c.json({ system });
+  }
+).post("/logout", requireAdmin, (c) => {
+  deleteSystemsConfig();
+  return c.json({ ok: true });
 });
-var system_default = app17;
+var system_default = app18;
 
 // src/web/api/typing.ts
-import { zValidator as zValidator5 } from "@hono/zod-validator";
-import { Hono as Hono18 } from "hono";
-import { z as z5 } from "zod";
-var typingSchema = z5.object({
-  channel: z5.string().min(1),
-  sender: z5.string().min(1),
-  active: z5.boolean()
+import { zValidator as zValidator6 } from "@hono/zod-validator";
+import { Hono as Hono19 } from "hono";
+import { z as z6 } from "zod";
+var typingSchema = z6.object({
+  channel: z6.string().min(1),
+  sender: z6.string().min(1),
+  active: z6.boolean()
 });
-var app18 = new Hono18().post("/:name/typing", zValidator5("json", typingSchema), (c) => {
+var app19 = new Hono19().post("/:name/typing", zValidator6("json", typingSchema), (c) => {
   const { channel, sender, active } = c.req.valid("json");
   const map = getTypingMap();
   if (active) {
@@ -4504,13 +4716,13 @@ var app18 = new Hono18().post("/:name/typing", zValidator5("json", typingSchema)
   const map = getTypingMap();
   return c.json({ typing: map.get(channel) });
 });
-var typing_default = app18;
+var typing_default = app19;
 
 // src/web/api/update.ts
 import { spawn as spawn2 } from "child_process";
-import { Hono as Hono19 } from "hono";
+import { Hono as Hono20 } from "hono";
 var bin;
-var app19 = new Hono19().get("/update", async (c) => {
+var app20 = new Hono20().get("/update", async (c) => {
   const result = await checkForUpdate();
   return c.json(result);
 }).post("/update", requireAdmin, async (c) => {
@@ -4525,21 +4737,21 @@ var app19 = new Hono19().get("/update", async (c) => {
   child.unref();
   return c.json({ ok: true, message: "Updating..." });
 });
-var update_default = app19;
+var update_default = app20;
 
 // src/web/api/v1/chat.ts
-import { zValidator as zValidator6 } from "@hono/zod-validator";
-import { Hono as Hono20 } from "hono";
+import { zValidator as zValidator7 } from "@hono/zod-validator";
+import { Hono as Hono21 } from "hono";
 import { streamSSE as streamSSE4 } from "hono/streaming";
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 async function fanOutToMinds(opts) {
   const participants = await getParticipants(opts.conversationId);
   const mindParticipants = participants.filter((p) => p.userType === "mind");
   const participantNames = participants.map((p) => p.username);
   const isDM = opts.isDM ?? participants.length === 2;
   const channelEntryType = opts.channelEntryType ?? (isDM ? "dm" : "group");
-  const { getMindManager: getMindManager2 } = await import("./mind-manager-ZNRIYEK3.js");
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getMindManager: getMindManager2 } = await import("./mind-manager-4NDNAYAB.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const manager = getMindManager2();
   const sm = getSleepManagerIfReady();
   const targetMinds = mindParticipants.map((ap) => {
@@ -4588,18 +4800,18 @@ async function fanOutToMinds(opts) {
     });
   }
 }
-var mindChatSchema = z6.object({
-  message: z6.string().optional(),
-  conversationId: z6.string().optional(),
-  sender: z6.string().optional(),
-  images: z6.array(z6.object({ media_type: z6.string(), data: z6.string() })).optional()
+var mindChatSchema = z7.object({
+  message: z7.string().optional(),
+  conversationId: z7.string().optional(),
+  sender: z7.string().optional(),
+  images: z7.array(z7.object({ media_type: z7.string(), data: z7.string() })).optional()
 });
-var unifiedChatSchema = z6.object({
-  message: z6.string().optional(),
-  conversationId: z6.string(),
-  images: z6.array(z6.object({ media_type: z6.string(), data: z6.string() })).optional()
+var unifiedChatSchema = z7.object({
+  message: z7.string().optional(),
+  conversationId: z7.string(),
+  images: z7.array(z7.object({ media_type: z7.string(), data: z7.string() })).optional()
 });
-var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zValidator6("json", mindChatSchema), async (c) => {
+var app21 = new Hono21().use("*", authMiddleware).post("/minds/:name/chat", zValidator7("json", mindChatSchema), async (c) => {
   const name = c.req.param("name");
   const [baseName] = name.split("@", 2);
   const entry = findMind(baseName);
@@ -4682,15 +4894,15 @@ var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zVal
         if (!stream.aborted) logger_default.error("[v1-chat] SSE ping error:", logger_default.errorData(err));
       });
     }, 15e3);
-    await new Promise((resolve19) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve19();
+        resolve20();
       });
     });
   });
-}).post("/chat", zValidator6("json", unifiedChatSchema), async (c) => {
+}).post("/chat", zValidator7("json", unifiedChatSchema), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   if (!body.message && (!body.images || body.images.length === 0)) {
@@ -4722,17 +4934,17 @@ var app20 = new Hono20().use("*", authMiddleware).post("/minds/:name/chat", zVal
   });
   return c.json({ ok: true, conversationId: body.conversationId });
 });
-var chat_default = app20;
+var chat_default = app21;
 
 // src/web/api/v1/conversations.ts
-import { zValidator as zValidator7 } from "@hono/zod-validator";
-import { Hono as Hono21 } from "hono";
-import { z as z7 } from "zod";
-var createSchema = z7.object({
-  title: z7.string().optional(),
-  participantNames: z7.array(z7.string()).min(1)
+import { zValidator as zValidator8 } from "@hono/zod-validator";
+import { Hono as Hono22 } from "hono";
+import { z as z8 } from "zod";
+var createSchema = z8.object({
+  title: z8.string().optional(),
+  participantNames: z8.array(z8.string()).min(1)
 });
-var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
+var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const convs = await listConversationsWithParticipants(user.id);
   return c.json(convs);
@@ -4763,7 +4975,7 @@ var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
   }
   const participants = await getParticipants(id);
   return c.json(participants);
-}).post("/", zValidator7("json", createSchema), async (c) => {
+}).post("/", zValidator8("json", createSchema), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   const participantIds = /* @__PURE__ */ new Set();
@@ -4809,11 +5021,11 @@ var app21 = new Hono21().use("*", authMiddleware).get("/", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var conversations_default = app21;
+var conversations_default = app22;
 
 // src/web/api/v1/events.ts
 import { desc as desc3 } from "drizzle-orm";
-import { Hono as Hono22 } from "hono";
+import { Hono as Hono23 } from "hono";
 import { streamSSE as streamSSE5 } from "hono/streaming";
 
 // src/lib/events/brain-presence.ts
@@ -4860,7 +5072,7 @@ function getEventsSince(sinceId) {
 }
 
 // src/web/api/v1/events.ts
-var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
+var app23 = new Hono23().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const since = c.req.query("since");
   const sinceId = since ? Number(since) : 0;
@@ -4954,8 +5166,8 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
         });
       }, 15e3);
       cleanups.push(() => clearInterval(keepAlive));
-      await new Promise((resolve19) => {
-        stream.onAbort(() => resolve19());
+      await new Promise((resolve20) => {
+        stream.onAbort(() => resolve20());
       });
     } finally {
       for (const cleanup of cleanups) {
@@ -4967,19 +5179,19 @@ var app22 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
     }
   });
 });
-var events_default = app22;
+var events_default = app23;
 
 // src/web/api/variants.ts
 import { existsSync as existsSync12, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8 } from "fs";
-import { resolve as resolve16 } from "path";
-import { Hono as Hono23 } from "hono";
+import { resolve as resolve17 } from "path";
+import { Hono as Hono24 } from "hono";
 
 // src/lib/spawn-server.ts
 import { spawn as spawn3 } from "child_process";
 import { closeSync, mkdirSync as mkdirSync7, openSync, readFileSync as readFileSync10 } from "fs";
-import { resolve as resolve15 } from "path";
+import { resolve as resolve16 } from "path";
 function tsxBin(cwd) {
-  return resolve15(cwd, "node_modules", ".bin", "tsx");
+  return resolve16(cwd, "node_modules", ".bin", "tsx");
 }
 function spawnServer(cwd, port, options) {
   if (options?.detached) {
@@ -4992,31 +5204,31 @@ function spawnAttached(cwd, port) {
     cwd,
     stdio: ["ignore", "pipe", "pipe"]
   });
-  return new Promise((resolve19) => {
-    const timeout = setTimeout(() => resolve19(null), 3e4);
+  return new Promise((resolve20) => {
+    const timeout = setTimeout(() => resolve20(null), 3e4);
     function checkOutput(data) {
       const match = data.toString().match(/listening on :(\d+)/);
       if (match) {
         clearTimeout(timeout);
-        resolve19({ child, actualPort: parseInt(match[1], 10) });
+        resolve20({ child, actualPort: parseInt(match[1], 10) });
       }
     }
     child.stdout?.on("data", checkOutput);
     child.stderr?.on("data", checkOutput);
     child.on("error", () => {
       clearTimeout(timeout);
-      resolve19(null);
+      resolve20(null);
     });
     child.on("exit", () => {
       clearTimeout(timeout);
-      resolve19(null);
+      resolve20(null);
     });
   });
 }
 function spawnDetached(cwd, port, logDir) {
-  const logsDir = logDir ?? resolve15(cwd, ".mind", "logs");
+  const logsDir = logDir ?? resolve16(cwd, ".mind", "logs");
   mkdirSync7(logsDir, { recursive: true });
-  const logPath = resolve15(logsDir, "mind.log");
+  const logPath = resolve16(logsDir, "mind.log");
   const logFd = openSync(logPath, "a");
   const child = spawn3(tsxBin(cwd), ["src/server.ts", "--port", String(port)], {
     cwd,
@@ -5088,7 +5300,7 @@ async function verify2(port) {
 }
 
 // src/web/api/variants.ts
-var app23 = new Hono23().get("/:name/variants", async (c) => {
+var app24 = new Hono24().get("/:name/variants", async (c) => {
   const name = c.req.param("name");
   const entry = findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -5128,11 +5340,11 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
   const err = validateBranchName(variantName);
   if (err) return c.json({ error: err }, 400);
   const projectRoot = mindDir(mindName);
-  const variantDir = resolve16(projectRoot, ".variants", variantName);
+  const variantDir = resolve17(projectRoot, ".variants", variantName);
   if (existsSync12(variantDir)) {
     return c.json({ error: `Variant directory already exists: ${variantDir}` }, 409);
   }
-  mkdirSync8(resolve16(projectRoot, ".variants"), { recursive: true });
+  mkdirSync8(resolve17(projectRoot, ".variants"), { recursive: true });
   try {
     await gitExec(["worktree", "add", "-b", variantName, variantDir], { cwd: projectRoot });
   } catch (e) {
@@ -5145,7 +5357,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
       const [cmd, args] = wrapForIsolation("npm", ["install"], mindName);
       await exec(cmd, args, {
         cwd: variantDir,
-        env: { ...process.env, HOME: resolve16(variantDir, "home") }
+        env: { ...process.env, HOME: resolve17(variantDir, "home") }
       });
     } else {
       await exec("npm", ["install"], { cwd: variantDir });
@@ -5155,7 +5367,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
     return c.json({ error: `npm install failed: ${msg}` }, 500);
   }
   if (body.soul) {
-    writeFileSync8(resolve16(variantDir, "home/SOUL.md"), body.soul);
+    writeFileSync8(resolve17(variantDir, "home/SOUL.md"), body.soul);
   }
   const variantPort = body.port ?? nextPort();
   const variant = {
@@ -5266,7 +5478,7 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
       const [cmd, args] = wrapForIsolation("npm", ["install"], mindName);
       await exec(cmd, args, {
         cwd: projectRoot,
-        env: { ...process.env, HOME: resolve16(projectRoot, "home") }
+        env: { ...process.env, HOME: resolve17(projectRoot, "home") }
       });
     } else {
       await exec("npm", ["install"], { cwd: projectRoot });
@@ -5304,19 +5516,19 @@ var app23 = new Hono23().get("/:name/variants", async (c) => {
   await cleanupVariant(mindName, variantName, projectRoot, variant.path, { stop: true });
   return c.json({ ok: true });
 });
-var variants_default = app23;
+var variants_default = app24;
 
 // src/web/api/volute/channels.ts
-import { zValidator as zValidator8 } from "@hono/zod-validator";
-import { Hono as Hono24 } from "hono";
-import { z as z8 } from "zod";
-var createSchema2 = z8.object({
-  name: z8.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
+import { zValidator as zValidator9 } from "@hono/zod-validator";
+import { Hono as Hono25 } from "hono";
+import { z as z9 } from "zod";
+var createSchema2 = z9.object({
+  name: z9.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
 });
-var inviteSchema = z8.object({
-  username: z8.string().min(1)
+var inviteSchema = z9.object({
+  username: z9.string().min(1)
 });
-var app24 = new Hono24().get("/", async (c) => {
+var app25 = new Hono25().get("/", async (c) => {
   const user = c.get("user");
   const channels = await listChannels();
   const results = await Promise.all(
@@ -5327,7 +5539,7 @@ var app24 = new Hono24().get("/", async (c) => {
     })
   );
   return c.json(results);
-}).post("/", zValidator8("json", createSchema2), async (c) => {
+}).post("/", zValidator9("json", createSchema2), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   try {
@@ -5360,7 +5572,7 @@ var app24 = new Hono24().get("/", async (c) => {
   if (!ch) return c.json({ error: "Channel not found" }, 404);
   const participants = await getParticipants(ch.id);
   return c.json(participants);
-}).post("/:name/invite", zValidator8("json", inviteSchema), async (c) => {
+}).post("/:name/invite", zValidator9("json", inviteSchema), async (c) => {
   const name = c.req.param("name");
   const inviter = c.get("user");
   const { username } = c.req.valid("json");
@@ -5380,21 +5592,21 @@ var app24 = new Hono24().get("/", async (c) => {
   ]);
   return c.json({ ok: true });
 });
-var channels_default2 = app24;
+var channels_default2 = app25;
 
 // src/web/api/volute/chat.ts
-import { zValidator as zValidator9 } from "@hono/zod-validator";
-import { Hono as Hono25 } from "hono";
+import { zValidator as zValidator10 } from "@hono/zod-validator";
+import { Hono as Hono26 } from "hono";
 import { streamSSE as streamSSE6 } from "hono/streaming";
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 async function fanOutToMinds2(opts) {
   const participants = await getParticipants(opts.conversationId);
   const mindParticipants = participants.filter((p) => p.userType === "mind");
   const participantNames = participants.map((p) => p.username);
   const isDM = opts.isDM ?? participants.length === 2;
   const channelEntryType = opts.channelEntryType ?? (isDM ? "dm" : "group");
-  const { getMindManager: getMindManager2 } = await import("./mind-manager-ZNRIYEK3.js");
-  const { getSleepManagerIfReady } = await import("./sleep-manager-XXSWQQLE.js");
+  const { getMindManager: getMindManager2 } = await import("./mind-manager-4NDNAYAB.js");
+  const { getSleepManagerIfReady } = await import("./sleep-manager-RKTFZPD3.js");
   const manager = getMindManager2();
   const sm = getSleepManagerIfReady();
   const targetMinds = mindParticipants.map((ap) => {
@@ -5442,18 +5654,18 @@ async function fanOutToMinds2(opts) {
     });
   }
 }
-var chatSchema = z9.object({
-  message: z9.string().optional(),
-  conversationId: z9.string().optional(),
-  sender: z9.string().optional(),
-  images: z9.array(
-    z9.object({
-      media_type: z9.string(),
-      data: z9.string()
+var chatSchema = z10.object({
+  message: z10.string().optional(),
+  conversationId: z10.string().optional(),
+  sender: z10.string().optional(),
+  images: z10.array(
+    z10.object({
+      media_type: z10.string(),
+      data: z10.string()
     })
   ).optional()
 });
-var app25 = new Hono25().post("/:name/chat", zValidator9("json", chatSchema), async (c) => {
+var app26 = new Hono26().post("/:name/chat", zValidator10("json", chatSchema), async (c) => {
   const name = c.req.param("name");
   const [baseName] = name.split("@", 2);
   const entry = findMind(baseName);
@@ -5540,23 +5752,23 @@ var app25 = new Hono25().post("/:name/chat", zValidator9("json", chatSchema), as
         if (!stream.aborted) console.error("[chat] SSE ping error:", err);
       });
     }, 15e3);
-    await new Promise((resolve19) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve19();
+        resolve20();
       });
     });
   });
 });
-var unifiedChatSchema2 = z9.object({
-  message: z9.string().optional(),
-  conversationId: z9.string(),
-  images: z9.array(z9.object({ media_type: z9.string(), data: z9.string() })).optional()
+var unifiedChatSchema2 = z10.object({
+  message: z10.string().optional(),
+  conversationId: z10.string(),
+  images: z10.array(z10.object({ media_type: z10.string(), data: z10.string() })).optional()
 });
-var unifiedChatApp = new Hono25().post(
+var unifiedChatApp = new Hono26().post(
   "/chat",
-  zValidator9("json", unifiedChatSchema2),
+  zValidator10("json", unifiedChatSchema2),
   async (c) => {
     const user = c.get("user");
     const body = c.req.valid("json");
@@ -5590,18 +5802,18 @@ var unifiedChatApp = new Hono25().post(
     return c.json({ ok: true, conversationId: body.conversationId });
   }
 );
-var chat_default2 = app25;
+var chat_default2 = app26;
 
 // src/web/api/volute/conversations.ts
-import { zValidator as zValidator10 } from "@hono/zod-validator";
-import { Hono as Hono26 } from "hono";
-import { z as z10 } from "zod";
-var createConvSchema = z10.object({
-  title: z10.string().optional(),
-  participantIds: z10.array(z10.number()).optional(),
-  participantNames: z10.array(z10.string()).optional()
+import { zValidator as zValidator11 } from "@hono/zod-validator";
+import { Hono as Hono27 } from "hono";
+import { z as z11 } from "zod";
+var createConvSchema = z11.object({
+  title: z11.string().optional(),
+  participantIds: z11.array(z11.number()).optional(),
+  participantNames: z11.array(z11.string()).optional()
 });
-var app26 = new Hono26().get("/:name/conversations", async (c) => {
+var app27 = new Hono27().get("/:name/conversations", async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   let lookupId = user.id;
@@ -5612,7 +5824,7 @@ var app26 = new Hono26().get("/:name/conversations", async (c) => {
   const all = await listConversationsForUser(lookupId);
   const convs = all.filter((c2) => c2.mind_name === name || c2.type === "channel");
   return c.json(convs);
-}).post("/:name/conversations", zValidator10("json", createConvSchema), async (c) => {
+}).post("/:name/conversations", zValidator11("json", createConvSchema), async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   const body = c.req.valid("json");
@@ -5686,18 +5898,18 @@ var app26 = new Hono26().get("/:name/conversations", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var conversations_default2 = app26;
+var conversations_default2 = app27;
 
 // src/web/api/volute/user-conversations.ts
-import { zValidator as zValidator11 } from "@hono/zod-validator";
-import { Hono as Hono27 } from "hono";
+import { zValidator as zValidator12 } from "@hono/zod-validator";
+import { Hono as Hono28 } from "hono";
 import { streamSSE as streamSSE7 } from "hono/streaming";
-import { z as z11 } from "zod";
-var createSchema3 = z11.object({
-  title: z11.string().optional(),
-  participantNames: z11.array(z11.string()).min(1)
+import { z as z12 } from "zod";
+var createSchema3 = z12.object({
+  title: z12.string().optional(),
+  participantNames: z12.array(z12.string()).min(1)
 });
-var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
+var app28 = new Hono28().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const convs = await listConversationsWithParticipants(user.id);
   return c.json(convs);
@@ -5709,7 +5921,7 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
   }
   const msgs = await getMessages(id);
   return c.json(msgs);
-}).post("/", zValidator11("json", createSchema3), async (c) => {
+}).post("/", zValidator12("json", createSchema3), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   const participantIds = /* @__PURE__ */ new Set();
@@ -5756,11 +5968,11 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
         if (!stream.aborted) console.error("[chat] SSE ping error:", err);
       });
     }, 15e3);
-    await new Promise((resolve19) => {
+    await new Promise((resolve20) => {
       stream.onAbort(() => {
         unsubscribe();
         clearInterval(keepAlive);
-        resolve19();
+        resolve20();
       });
     });
   });
@@ -5771,12 +5983,12 @@ var app27 = new Hono27().use("*", authMiddleware).get("/", async (c) => {
   if (!deleted) return c.json({ error: "Conversation not found" }, 404);
   return c.json({ ok: true });
 });
-var user_conversations_default = app27;
+var user_conversations_default = app28;
 
 // src/web/app.ts
 var httpLog = logger_default.child("http");
-var app28 = new Hono28();
-app28.onError((err, c) => {
+var app29 = new Hono29();
+app29.onError((err, c) => {
   if (err instanceof HTTPException) {
     return err.getResponse();
   }
@@ -5787,10 +5999,10 @@ app28.onError((err, c) => {
   });
   return c.json({ error: "Internal server error" }, 500);
 });
-app28.notFound((c) => {
+app29.notFound((c) => {
   return c.json({ error: "Not found" }, 404);
 });
-app28.use("*", async (c, next) => {
+app29.use("*", async (c, next) => {
   const start = Date.now();
   await next();
   const duration = Date.now() - start;
@@ -5801,7 +6013,7 @@ app28.use("*", async (c, next) => {
     httpLog.debug("request", data);
   }
 });
-app28.get("/api/health", (c) => {
+app29.get("/api/health", (c) => {
   let version = "unknown";
   let cached = null;
   try {
@@ -5816,38 +6028,39 @@ app28.get("/api/health", (c) => {
     ...cached?.updateAvailable ? { updateAvailable: true, latest: cached.latest } : {}
   });
 });
-app28.use("/api/*", bodyLimit({ maxSize: 10 * 1024 * 1024 }));
-app28.use("/api/*", csrf());
-app28.use("/api/activity/*", authMiddleware);
-app28.use("/api/minds/*", authMiddleware);
-app28.use("/api/conversations/*", authMiddleware);
-app28.use("/api/volute/*", authMiddleware);
-app28.use("/api/system/*", authMiddleware);
-app28.use("/api/env/*", authMiddleware);
-app28.use("/api/prompts/*", authMiddleware);
-app28.use("/api/skills/*", authMiddleware);
-app28.use("/api/v1/*", authMiddleware);
-app28.route("/pages", pages_default);
-var routes = app28.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/minds", minds_default).route("/api/minds", chat_default2).route("/api/minds", connectors_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", shared_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/conversations", user_conversations_default).route("/api/volute/channels", channels_default2).route("/api/volute", unifiedChatApp).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", chat_default);
-app28.route("/api/v1/minds", minds_default);
-app28.route("/api/v1/minds", typing_default);
-app28.route("/api/v1/minds", variants_default);
-app28.route("/api/v1/minds", files_default);
-app28.route("/api/v1/minds", env_default);
-app28.route("/api/v1/minds", mind_skills_default);
-app28.route("/api/v1/minds", connectors_default);
-app28.route("/api/v1/minds", schedules_default);
-app28.route("/api/v1/minds", logs_default);
-app28.route("/api/v1/system", system_default);
-app28.route("/api/v1/system", update_default);
-app28.route("/api/v1/prompts", prompts_default);
-app28.route("/api/v1/skills", skills_default);
-app28.route("/api/v1/env", sharedEnvApp);
-app28.route("/api/v1/channels", channels_default2);
-var app_default = app28;
+app29.use("/api/*", bodyLimit({ maxSize: 10 * 1024 * 1024 }));
+app29.use("/api/*", csrf());
+app29.use("/api/activity/*", authMiddleware);
+app29.use("/api/minds/*", authMiddleware);
+app29.use("/api/conversations/*", authMiddleware);
+app29.use("/api/volute/*", authMiddleware);
+app29.use("/api/system/*", authMiddleware);
+app29.use("/api/env/*", authMiddleware);
+app29.use("/api/prompts/*", authMiddleware);
+app29.use("/api/skills/*", authMiddleware);
+app29.use("/api/v1/*", authMiddleware);
+app29.route("/pages", pages_default);
+app29.route("/public", public_files_default);
+var routes = app29.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/minds", minds_default).route("/api/minds", chat_default2).route("/api/minds", connectors_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", shared_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/conversations", user_conversations_default).route("/api/volute/channels", channels_default2).route("/api/volute", unifiedChatApp).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", chat_default);
+app29.route("/api/v1/minds", minds_default);
+app29.route("/api/v1/minds", typing_default);
+app29.route("/api/v1/minds", variants_default);
+app29.route("/api/v1/minds", files_default);
+app29.route("/api/v1/minds", env_default);
+app29.route("/api/v1/minds", mind_skills_default);
+app29.route("/api/v1/minds", connectors_default);
+app29.route("/api/v1/minds", schedules_default);
+app29.route("/api/v1/minds", logs_default);
+app29.route("/api/v1/system", system_default);
+app29.route("/api/v1/system", update_default);
+app29.route("/api/v1/prompts", prompts_default);
+app29.route("/api/v1/skills", skills_default);
+app29.route("/api/v1/env", sharedEnvApp);
+app29.route("/api/v1/channels", channels_default2);
+var app_default = app29;
 
 // src/web/server.ts
-var MIME_TYPES2 = {
+var MIME_TYPES3 = {
   ".html": "text/html",
   ".js": "application/javascript",
   ".css": "text/css",
@@ -5864,7 +6077,7 @@ async function startServer({
   let assetsDir = "";
   let searchDir = dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 5; i++) {
-    const candidate = resolve17(searchDir, "dist", "web-assets");
+    const candidate = resolve18(searchDir, "dist", "web-assets");
     if (existsSync13(candidate)) {
       assetsDir = candidate;
       break;
@@ -5875,19 +6088,19 @@ async function startServer({
     app_default.get("*", async (c) => {
       const urlPath = new URL(c.req.url).pathname;
       if (urlPath.startsWith("/api/")) return c.notFound();
-      const filePath = resolve17(assetsDir, urlPath.slice(1));
+      const filePath = resolve18(assetsDir, urlPath.slice(1));
       if (!filePath.startsWith(assetsDir)) return c.text("Forbidden", 403);
-      const s = await stat3(filePath).catch(() => null);
+      const s = await stat4(filePath).catch(() => null);
       if (s?.isFile()) {
-        const ext = extname4(filePath);
-        const mime = MIME_TYPES2[ext] || "application/octet-stream";
-        const body = await readFile3(filePath);
+        const ext = extname5(filePath);
+        const mime = MIME_TYPES3[ext] || "application/octet-stream";
+        const body = await readFile4(filePath);
         return c.body(body, 200, { "Content-Type": mime });
       }
-      const indexPath = resolve17(assetsDir, "index.html");
-      const indexStat = await stat3(indexPath).catch(() => null);
+      const indexPath = resolve18(assetsDir, "index.html");
+      const indexStat = await stat4(indexPath).catch(() => null);
       if (indexStat?.isFile()) {
-        const body = await readFile3(indexPath, "utf-8");
+        const body = await readFile4(indexPath, "utf-8");
         return c.html(body);
       }
       return c.text("Not found", 404);
@@ -5901,10 +6114,10 @@ async function startServer({
       createServer: createHttpsServer,
       serverOptions: { key: tls.key, cert: tls.cert }
     });
-    await new Promise((resolve19, reject) => {
+    await new Promise((resolve20, reject) => {
       server2.on("listening", () => {
         logger_default.info("Volute UI running (https)", { hostname, port });
-        resolve19();
+        resolve20();
       });
       server2.on("error", (err) => {
         reject(err);
@@ -5912,13 +6125,13 @@ async function startServer({
     });
     const internalPort = port + 1;
     const internalServer = serve({ fetch: app_default.fetch, port: internalPort, hostname: "127.0.0.1" });
-    await new Promise((resolve19, reject) => {
+    await new Promise((resolve20, reject) => {
       internalServer.on("listening", () => {
         logger_default.info("Volute API running (http, internal)", {
           hostname: "127.0.0.1",
           port: internalPort
         });
-        resolve19();
+        resolve20();
       });
       internalServer.on("error", (err) => {
         reject(err);
@@ -5927,10 +6140,10 @@ async function startServer({
     return { server: server2, internalPort };
   }
   const server = serve({ fetch: app_default.fetch, port, hostname });
-  await new Promise((resolve19, reject) => {
+  await new Promise((resolve20, reject) => {
     server.on("listening", () => {
       logger_default.info("Volute API running (http)", { hostname, port });
-      resolve19();
+      resolve20();
     });
     server.on("error", (err) => {
       reject(err);
@@ -5941,7 +6154,7 @@ async function startServer({
 
 // src/daemon.ts
 if (!process.env.VOLUTE_HOME) {
-  process.env.VOLUTE_HOME = resolve18(homedir2(), ".volute");
+  process.env.VOLUTE_HOME = resolve19(homedir2(), ".volute");
 }
 if (process.env.VOLUTE_TIMEZONE && !process.env.TZ) {
   process.env.TZ = process.env.VOLUTE_TIMEZONE;
@@ -5951,7 +6164,7 @@ async function startDaemon(opts) {
   const myPid = String(process.pid);
   const home = voluteHome();
   if (!opts.foreground) {
-    const rotatingLog = new RotatingLog(resolve18(home, "daemon.log"));
+    const rotatingLog = new RotatingLog(resolve19(home, "daemon.log"));
     logger_default.setOutput((line) => rotatingLog.write(`${line}
 `));
     const write = (...args) => rotatingLog.write(`${format(...args)}
@@ -5961,8 +6174,8 @@ async function startDaemon(opts) {
     console.warn = write;
     console.info = write;
   }
-  const DAEMON_PID_PATH = resolve18(home, "daemon.pid");
-  const DAEMON_JSON_PATH = resolve18(home, "daemon.json");
+  const DAEMON_PID_PATH = resolve19(home, "daemon.pid");
+  const DAEMON_JSON_PATH = resolve19(home, "daemon.json");
   mkdirSync9(home, { recursive: true });
   migrateAgentsToMinds();
   try {
@@ -6021,11 +6234,12 @@ async function startDaemon(opts) {
   const unsubscribeWebhook = initWebhook();
   const registry = readRegistry();
   for (const entry of registry) {
-    try {
-      migrateDotVoluteDir(entry.name);
-      migrateMindState(entry.name);
-    } catch (err) {
-      logger_default.warn(`failed to migrate state for ${entry.name}`, logger_default.errorData(err));
+    for (const migrate of [migrateDotVoluteDir, migrateMindState, migratePagesDirToPublic]) {
+      try {
+        migrate(entry.name);
+      } catch (err) {
+        logger_default.warn(`failed to migrate state for ${entry.name}`, logger_default.errorData(err));
+      }
     }
   }
   const runningEntries = registry.filter((e) => e.running);
@@ -6075,7 +6289,7 @@ async function startDaemon(opts) {
     });
     await Promise.all(workers);
   }
-  import("./cloud-sync-DIU3OCPV.js").then(
+  import("./cloud-sync-PPBBJDY6.js").then(
     ({ consumeQueuedMessages }) => consumeQueuedMessages().catch((err) => {
       logger_default.warn("failed to consume queued cloud messages", logger_default.errorData(err));
     })
@@ -6083,7 +6297,7 @@ async function startDaemon(opts) {
     logger_default.warn("failed to load cloud-sync module", logger_default.errorData(err));
   });
   try {
-    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-SZ75QRGO.js");
+    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-AZQMC32A.js");
     backfillTemplateHashes();
     notifyVersionUpdate().catch((err) => {
       logger_default.warn("failed to send version update notifications", logger_default.errorData(err));