volute 0.24.0 → 0.26.0

package/dist/chunk-XOXLRRR2.js

@@ -0,0 +1,176 @@
+#!/usr/bin/env node
+import {
+  validateMindName
+} from "./chunk-B2CPS4QU.js";
+
+// src/lib/isolation.ts
+import { execFileSync } from "child_process";
+function isIsolationEnabled() {
+  return process.env.VOLUTE_ISOLATION === "user";
+}
+function mindUserName(mindName) {
+  const err = validateMindName(mindName);
+  if (err) throw new Error(`Invalid mind name for isolation: ${err}`);
+  const prefix = process.env.VOLUTE_USER_PREFIX ?? "mind-";
+  return `${prefix}${mindName}`;
+}
+function findNextMacId(type) {
+  const idField = type === "Users" ? "UniqueID" : "PrimaryGroupID";
+  let output;
+  try {
+    output = execFileSync("dscl", [".", "-list", `/${type}`, idField], { encoding: "utf-8" });
+  } catch (err) {
+    throw new Error(
+      `Failed to query ${type} via dscl: ${err instanceof Error ? err.message : err}`
+    );
+  }
+  const ids = /* @__PURE__ */ new Set();
+  for (const line of output.split("\n")) {
+    const parts = line.trim().split(/\s+/);
+    const id = parseInt(parts[parts.length - 1], 10);
+    if (!Number.isNaN(id)) ids.add(id);
+  }
+  let next = 401;
+  while (ids.has(next)) next++;
+  return next;
+}
+function getVoluteGroupGid() {
+  if (process.platform === "darwin") {
+    const output2 = execFileSync("dscl", [".", "-read", "/Groups/volute", "PrimaryGroupID"], {
+      encoding: "utf-8"
+    });
+    const match = output2.match(/PrimaryGroupID:\s*(\d+)/);
+    if (!match) throw new Error("Could not read volute group GID");
+    return parseInt(match[1], 10);
+  }
+  const output = execFileSync("getent", ["group", "volute"], { encoding: "utf-8" });
+  const gid = parseInt(output.split(":")[2], 10);
+  if (Number.isNaN(gid)) throw new Error("Could not read volute group GID");
+  return gid;
+}
+function ensureVoluteGroup(opts) {
+  if (!opts?.force && !isIsolationEnabled()) return;
+  if (process.platform === "darwin") {
+    try {
+      execFileSync("dscl", [".", "-read", "/Groups/volute"], { stdio: "ignore" });
+      return;
+    } catch {
+    }
+    const gid = findNextMacId("Groups");
+    try {
+      execFileSync("dscl", [".", "-create", "/Groups/volute"]);
+      execFileSync("dscl", [".", "-create", "/Groups/volute", "PrimaryGroupID", String(gid)]);
+      execFileSync("dscl", [".", "-create", "/Groups/volute", "Password", "*"]);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      throw new Error(`Failed to create volute group on macOS: ${msg}`);
+    }
+    return;
+  }
+  try {
+    execFileSync("getent", ["group", "volute"], { stdio: "ignore" });
+  } catch {
+    try {
+      execFileSync("groupadd", ["volute"], { stdio: ["ignore", "ignore", "pipe"] });
+    } catch (err) {
+      const stderr = err?.stderr?.toString().trim();
+      throw new Error(`Failed to create volute group${stderr ? `: ${stderr}` : ""}`);
+    }
+  }
+}
+function createMindUser(name, homeDir) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  try {
+    execFileSync("id", [user], { stdio: "ignore" });
+    return;
+  } catch {
+  }
+  if (process.platform === "darwin") {
+    const uid = findNextMacId("Users");
+    const gid = getVoluteGroupGid();
+    const home = homeDir ?? "/var/empty";
+    try {
+      execFileSync("dscl", [".", "-create", `/Users/${user}`]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "UniqueID", String(uid)]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "PrimaryGroupID", String(gid)]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "UserShell", "/usr/bin/false"]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "NFSHomeDirectory", home]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "RealName", `Volute Mind: ${name}`]);
+      execFileSync("dscl", [".", "-create", `/Users/${user}`, "IsHidden", "1"]);
+      execFileSync("dscl", [".", "-append", "/Groups/volute", "GroupMembership", user]);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      throw new Error(`Failed to create user ${user} on macOS: ${msg}`);
+    }
+    return;
+  }
+  try {
+    const args = ["-r", "-M", "-G", "volute", "-s", "/usr/sbin/nologin"];
+    if (homeDir) args.push("-d", homeDir);
+    args.push(user);
+    execFileSync("useradd", args, {
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+  } catch (err) {
+    const stderr = err?.stderr?.toString().trim();
+    throw new Error(`Failed to create user ${user}${stderr ? `: ${stderr}` : ""}`);
+  }
+}
+function deleteMindUser(name) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  if (process.platform === "darwin") {
+    try {
+      execFileSync("dscl", [".", "-delete", `/Users/${user}`], { stdio: "ignore" });
+    } catch {
+    }
+    try {
+      execFileSync("dscl", [".", "-delete", "/Groups/volute", "GroupMembership", user], {
+        stdio: "ignore"
+      });
+    } catch {
+    }
+    return;
+  }
+  try {
+    execFileSync("userdel", [user], { stdio: "ignore" });
+  } catch {
+  }
+}
+function wrapForIsolation(cmd, args, mindName) {
+  if (!isIsolationEnabled()) return [cmd, args];
+  const baseName = mindName.split("@", 2)[0];
+  const user = mindUserName(baseName);
+  if (process.platform === "darwin") {
+    return ["sudo", ["-u", user, "--", cmd, ...args]];
+  }
+  return ["runuser", ["-u", user, "--", cmd, ...args]];
+}
+function chownMindDir(dir, name) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  const group = process.platform === "darwin" ? "volute" : user;
+  try {
+    execFileSync("chown", ["-R", `${user}:${group}`, dir], { stdio: ["ignore", "ignore", "pipe"] });
+  } catch (err) {
+    const stderr = err?.stderr?.toString().trim();
+    throw new Error(`Failed to chown ${dir} to ${user}:${group}${stderr ? `: ${stderr}` : ""}`);
+  }
+  try {
+    execFileSync("chmod", ["700", dir], { stdio: ["ignore", "ignore", "pipe"] });
+  } catch (err) {
+    const stderr = err?.stderr?.toString().trim();
+    throw new Error(`Failed to chmod ${dir}${stderr ? `: ${stderr}` : ""}`);
+  }
+}
+
+export {
+  isIsolationEnabled,
+  mindUserName,
+  ensureVoluteGroup,
+  createMindUser,
+  deleteMindUser,
+  wrapForIsolation,
+  chownMindDir
+};

package/dist/{chunk-JTDFJWI2.js → chunk-YJA7P64S.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   wrapForIsolation
-} from "./chunk-NWPT4ASZ.js";
+} from "./chunk-XOXLRRR2.js";
 
 // src/lib/exec.ts
 import { execFile as execFileCb, execFileSync, spawn } from "child_process";

package/dist/chunk-ZYGKG6VC.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+
+// src/lib/read-stdin.ts
+import { isatty } from "tty";
+async function readStdin() {
+  if (isatty(0)) return void 0;
+  const chunks = [];
+  try {
+    for await (const chunk of process.stdin) {
+      chunks.push(chunk);
+    }
+  } catch (err) {
+    console.error(`Failed to read from stdin: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
+  const text = Buffer.concat(chunks).toString().replace(/\r?\n$/, "");
+  return text || void 0;
+}
+
+export {
+  readStdin
+};

package/dist/cli.js

@@ -9,64 +9,85 @@ if (!process.env.VOLUTE_HOME) {
 var command = process.argv[2];
 var args = process.argv.slice(3);
 if (command === "--version" || command === "-v") {
-  const { default: pkg } = await import("./package-S5YF25XV.js");
+  const { default: pkg } = await import("./package-VZWLXPHV.js");
   console.log(pkg.version);
   process.exit(0);
 }
+var ungatedCommands = /* @__PURE__ */ new Set(["setup", "--help", "-h", "--version", "-v", "update", void 0]);
+if (!ungatedCommands.has(command)) {
+  const { isSetupComplete, migrateSetupConfig } = await import("./setup-YGAAIKKZ.js");
+  migrateSetupConfig();
+  if (!isSetupComplete()) {
+    console.error("Volute is not set up. Run `volute setup` first.");
+    process.exit(1);
+  }
+}
 switch (command) {
+  case "setup":
+    await import("./setup-F6TWFYGQ.js").then((m) => m.run(args));
+    break;
   case "mind":
-    await import("./mind-KPLCRKQA.js").then((m) => m.run(args));
+    await import("./mind-HZ3QSDDJ.js").then((m) => m.run(args));
     break;
   case "send":
-    await import("./send-IISDYFCL.js").then((m) => m.run(args));
+    await import("./send-IH6XZKPC.js").then((m) => m.run(args));
     break;
   case "history":
-    await import("./history-46WZN5CN.js").then((m) => m.run(args));
+    await import("./history-B64GTFTD.js").then((m) => m.run(args));
     break;
   case "variant":
-    await import("./variant-UGREB4G5.js").then((m) => m.run(args));
+    await import("./variant-WWLDY6D5.js").then((m) => m.run(args));
     break;
   case "channel":
-    await import("./channel-HZOSHGNF.js").then((m) => m.run(args));
+    await import("./channel-ZVZV42UD.js").then((m) => m.run(args));
     break;
   case "schedule":
-    await import("./schedule-YEFDLVMJ.js").then((m) => m.run(args));
+    await import("./schedule-6F7ELB2M.js").then((m) => m.run(args));
     break;
   case "skill":
-    await import("./skill-BQOFACEI.js").then((m) => m.run(args));
+    await import("./skill-42LGFBQC.js").then((m) => m.run(args));
     break;
   case "shared":
-    await import("./shared-LWMNTTZN.js").then((m) => m.run(args));
+    await import("./shared-UMO4S7CC.js").then((m) => m.run(args));
     break;
   case "file":
-    await import("./file-KT3UIQM3.js").then((m) => m.run(args));
+    await import("./file-HUDKTRAS.js").then((m) => m.run(args));
     break;
   case "env":
-    await import("./env-2FPOZK37.js").then((m) => m.run(args));
+    await import("./env-M336ONDP.js").then((m) => m.run(args));
     break;
   case "up":
-    await import("./up-OMHACRJL.js").then((m) => m.run(args));
+    await import("./up-SDMCSVI3.js").then((m) => m.run(args));
     break;
   case "down":
-    await import("./down-674SX2IZ.js").then((m) => m.run(args));
+    await import("./down-7UKFMJJZ.js").then((m) => m.run(args));
     break;
   case "restart":
-    await import("./daemon-restart-YMPEATQH.js").then((m) => m.run(args));
+    await import("./daemon-restart-BJZ3O4U4.js").then((m) => m.run(args));
     break;
   case "service":
-    await import("./service-FASYWLTC.js").then((m) => m.run(args));
+    await import("./service-LLBV3R7M.js").then((m) => m.run(args));
     break;
   case "update":
-    await import("./update-7XCZMYBT.js").then((m) => m.run(args));
+    await import("./update-5VUDAI3D.js").then((m) => m.run(args));
     break;
   case "status":
-    await import("./status-SIRPLEZC.js").then((m) => m.run(args));
+    await import("./status-FZBEBM7Q.js").then((m) => m.run(args));
+    break;
+  case "notes":
+    await import("./notes-37FW2UR2.js").then((m) => m.run(args));
     break;
   case "pages":
-    await import("./pages-TWR6U7DS.js").then((m) => m.run(args));
+    await import("./pages-DIIT5HMQ.js").then((m) => m.run(args));
     break;
   case "auth":
-    await import("./auth-HM2RSPY7.js").then((m) => m.run(args));
+    await import("./auth-4TV573WE.js").then((m) => m.run(args));
+    break;
+  case "login":
+    await import("./login-B5E7N7MY.js").then((m) => m.run(args));
+    break;
+  case "logout":
+    await import("./logout-XSJRYS3U.js").then((m) => m.run(args));
     break;
   case "--help":
   case "-h":
@@ -97,12 +118,15 @@ Configuration:
   env       Manage environment variables
   file      Mind-to-mind file sharing
   shared    Collaborative shared repository
+  notes     Read and write notes
   pages     Publish web pages
 
 System:
+  setup                            First-time setup
   up / down / restart              Daemon control
+  login / logout                   CLI authentication
   update                           Update volute
-  service install/uninstall        Auto-start service
+  service status                   Check service status
   auth register/login/logout       volute.systems account
 
 Options:

package/dist/{cloud-sync-DIU3OCPV.js → cloud-sync-NI2K3C7G.js}

@@ -3,19 +3,21 @@ import {
   deliverMessage,
   getAuthHeaders,
   getWebhookUrl
-} from "./chunk-OOW675I3.js";
+} from "./chunk-3CFRE2VC.js";
 import "./chunk-HFCBO2GL.js";
-import "./chunk-E7GOKNOT.js";
-import "./chunk-BFK6SOEJ.js";
-import "./chunk-NOBRGACV.js";
-import "./chunk-XLC342FO.js";
-import "./chunk-PHU4DEAJ.js";
-import "./chunk-33XAVCS4.js";
+import "./chunk-NWI2425I.js";
+import "./chunk-J2CO4WEV.js";
+import "./chunk-2VO7453N.js";
+import "./chunk-UTL75LP6.js";
+import "./chunk-WBHMQ5OZ.js";
 import {
   logger_default
 } from "./chunk-YUIHSKR6.js";
-import "./chunk-JTDFJWI2.js";
-import "./chunk-NWPT4ASZ.js";
+import "./chunk-SIAG3QMM.js";
+import "./chunk-PHU4DEAJ.js";
+import "./chunk-YJA7P64S.js";
+import "./chunk-XOXLRRR2.js";
+import "./chunk-TZKJLDQN.js";
 import "./chunk-B2CPS4QU.js";
 import "./chunk-K3NQKI34.js";
 

package/dist/{connector-M6XFI6GM.js → connector-G722WXAU.js}

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
 import {
   promptLine
-} from "./chunk-RVKR2R7F.js";
+} from "./chunk-SSI47XP2.js";
+import {
+  daemonFetch
+} from "./chunk-WGOGUMPO.js";
 import {
   getClient,
   urlOf
@@ -12,9 +15,6 @@ import {
 import {
   parseArgs
 } from "./chunk-D424ZQGI.js";
-import {
-  daemonFetch
-} from "./chunk-TRQEV3CD.js";
 import "./chunk-B2CPS4QU.js";
 import "./chunk-K3NQKI34.js";
 

package/dist/{create-VDQJER52.js → create-4YBRTTJS.js}

@@ -17,7 +17,7 @@ async function run(args) {
     process.exit(1);
   }
   const skills = flags.skills === "none" ? [] : flags.skills ? flags.skills.split(",") : void 0;
-  const { daemonFetch } = await import("./daemon-client-JOVQZ52X.js");
+  const { daemonFetch } = await import("./daemon-client-Z7FAJ6JW.js");
   const { getClient, urlOf } = await import("./api-client-YPKOZP2O.js");
   const client = getClient();
   const res = await daemonFetch(urlOf(client.api.minds.$url()), {

package/dist/{daemon-client-JOVQZ52X.js → daemon-client-Z7FAJ6JW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   daemonFetch
-} from "./chunk-TRQEV3CD.js";
+} from "./chunk-WGOGUMPO.js";
 import "./chunk-B2CPS4QU.js";
 import "./chunk-K3NQKI34.js";
 export {

package/dist/{daemon-restart-YMPEATQH.js → daemon-restart-BJZ3O4U4.js}

@@ -1,20 +1,21 @@
 #!/usr/bin/env node
 import {
   run
-} from "./chunk-TQDITGES.js";
+} from "./chunk-LX22GRG7.js";
 import {
   stopDaemon
-} from "./chunk-2767L2RZ.js";
+} from "./chunk-OZFKBXD6.js";
 import {
   getServiceMode,
   modeLabel,
   pollHealth,
   readDaemonConfig,
   restartService
-} from "./chunk-3AIBT4TW.js";
+} from "./chunk-V63B7DX3.js";
+import "./chunk-YJA7P64S.js";
+import "./chunk-XOXLRRR2.js";
 import "./chunk-D424ZQGI.js";
-import "./chunk-JTDFJWI2.js";
-import "./chunk-NWPT4ASZ.js";
+import "./chunk-TZKJLDQN.js";
 import "./chunk-B2CPS4QU.js";
 import "./chunk-K3NQKI34.js";