volute 0.41.0 → 0.42.0

package/dist/{chunk-U7UASV36.js → chunk-WR7CSHQ4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   readGlobalConfig
-} from "./chunk-N64Q7FMP.js";
+} from "./chunk-KZAL7HEQ.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
@@ -10,10 +10,22 @@ import {
 import { execFileSync } from "child_process";
 var slog = logger_default.child("sandbox");
 var sandboxManager = null;
+var SandboxUnavailableError = class extends Error {
+  constructor(reason, cause) {
+    super(
+      `${reason} \u2014 refusing to run unsandboxed. Fix the sandbox runtime, or set VOLUTE_SANDBOX_OPTIONAL=1 to allow running without isolation.`,
+      cause ? { cause } : void 0
+    );
+    this.name = "SandboxUnavailableError";
+  }
+};
 function isSandboxEnabled() {
   if (process.env.VOLUTE_SANDBOX === "0") return false;
   return readGlobalConfig().setup?.isolation === "sandbox";
 }
+function isSandboxOptional() {
+  return process.env.VOLUTE_SANDBOX_OPTIONAL === "1";
+}
 function findRipgrep() {
   if (process.env.VOLUTE_RIPGREP_PATH) {
     try {
@@ -48,10 +60,7 @@ async function initSandbox() {
       if (process.platform === "darwin") {
         slog.warn(`sandbox dependency issues (non-fatal on macOS): ${errors.join(", ")}`);
       } else {
-        slog.error(
-          `sandbox dependencies missing \u2014 minds will run without sandbox isolation: ${errors.join(", ")}`
-        );
-        return;
+        throw new SandboxUnavailableError(`sandbox dependencies missing: ${errors.join(", ")}`);
       }
     }
     const config = {
@@ -65,10 +74,24 @@ async function initSandbox() {
     await SandboxManager.initialize(config);
     sandboxManager = SandboxManager;
   } catch (err) {
-    slog.error(
-      "sandbox runtime not available \u2014 minds will run without sandbox isolation",
-      logger_default.errorData(err)
-    );
+    if (err instanceof SandboxUnavailableError) {
+      if (isSandboxOptional()) {
+        slog.error(
+          "sandbox unavailable but VOLUTE_SANDBOX_OPTIONAL=1 \u2014 minds will run WITHOUT isolation",
+          logger_default.errorData(err)
+        );
+        return;
+      }
+      throw err;
+    }
+    if (isSandboxOptional()) {
+      slog.error(
+        "sandbox runtime not available but VOLUTE_SANDBOX_OPTIONAL=1 \u2014 minds will run WITHOUT isolation",
+        logger_default.errorData(err)
+      );
+      return;
+    }
+    throw new SandboxUnavailableError("sandbox runtime not available", err);
   }
 }
 async function buildSandboxReadConfig(_mindName, mindDir) {
@@ -92,7 +115,12 @@ function shellEscape(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
 async function wrapForSandbox(cmd, args, mindDir, mindName, allowWrite) {
-  if (!sandboxManager) return [cmd, args];
+  if (!sandboxManager) {
+    if (isSandboxEnabled() && !isSandboxOptional()) {
+      throw new SandboxUnavailableError(`cannot sandbox mind ${mindName}`);
+    }
+    return [cmd, args];
+  }
   const { denyRead, allowRead } = await buildSandboxReadConfig(mindName, mindDir);
   const customConfig = {
     filesystem: {
@@ -107,6 +135,9 @@ async function wrapForSandbox(cmd, args, mindDir, mindName, allowWrite) {
     const wrapped = await sandboxManager.wrapWithSandbox(shellCmd, void 0, customConfig);
     return ["bash", ["-c", wrapped]];
   } catch (err) {
+    if (isSandboxEnabled() && !isSandboxOptional()) {
+      throw new SandboxUnavailableError(`failed to sandbox mind ${mindName}`, err);
+    }
     slog.error(
       `failed to sandbox mind ${mindName} \u2014 running without isolation`,
       logger_default.errorData(err)
@@ -116,7 +147,9 @@ async function wrapForSandbox(cmd, args, mindDir, mindName, allowWrite) {
 }
 
 export {
+  SandboxUnavailableError,
   isSandboxEnabled,
+  isSandboxOptional,
   initSandbox,
   buildSandboxReadConfig,
   shellEscape,

package/dist/{chunk-2R4JIZCB.js → chunk-YLTIEEVL.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   subscribe
-} from "./chunk-2RQIIKFC.js";
+} from "./chunk-K547QOCM.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
 import {
   getDb
-} from "./chunk-VDODEQSJ.js";
+} from "./chunk-IUZ3EV2D.js";
 import {
   channels,
   conversationParticipants,

package/dist/cli.js

@@ -10,7 +10,7 @@ if (!process.env.VOLUTE_HOME) {
 var command = process.argv[2];
 var args = process.argv.slice(3);
 if (command === "--version" || command === "-v") {
-  const { default: pkg } = await import("./package-2X7UNSTQ.js");
+  const { default: pkg } = await import("./package-UWH5IM76.js");
   console.log(pkg.version);
   process.exit(0);
 }
@@ -31,7 +31,7 @@ var ungatedCommands = /* @__PURE__ */ new Set([
   void 0
 ]);
 if (!ungatedCommands.has(command)) {
-  const { isSetupComplete } = await import("./setup-3434PQ5Q.js");
+  const { isSetupComplete } = await import("./setup-IYOUPCIK.js");
   if (!isSetupComplete()) {
     console.error("Volute is not set up. Run `volute setup` first.");
     process.exit(1);
@@ -39,61 +39,61 @@ if (!ungatedCommands.has(command)) {
 }
 switch (command) {
   case "setup":
-    await import("./setup-47NBOCZL.js").then((m) => m.run(args));
+    await import("./setup-VARJ7N6Z.js").then((m) => m.run(args));
     break;
   case "mind":
-    await import("./mind-XIKEPJNS.js").then((m) => m.run(args));
+    await import("./mind-VXV6ZYZY.js").then((m) => m.run(args));
     break;
   case "seed":
-    await import("./seed-cmd-YTQYWCZF.js").then((m) => m.run(args));
+    await import("./seed-cmd-7KJS4LCA.js").then((m) => m.run(args));
     break;
   case "chat":
-    await import("./chat-FO722GU2.js").then((m) => m.run(args));
+    await import("./chat-7DOENBY2.js").then((m) => m.run(args));
     break;
   case "variant":
     await import("./variant-HHDTW74J.js").then((m) => m.run(args));
     break;
   case "clock":
-    await import("./clock-BMLJ2TR6.js").then((m) => m.run(args));
+    await import("./clock-HP2TGMG5.js").then((m) => m.run(args));
     break;
   case "skill":
-    await import("./skill-ICN6Y2ZF.js").then((m) => m.run(args));
+    await import("./skill-E43BI34Y.js").then((m) => m.run(args));
     break;
   case "env":
-    await import("./env-IQ6Q2333.js").then((m) => m.run(args));
+    await import("./env-XX2MBZCZ.js").then((m) => m.run(args));
     break;
   case "config":
-    await import("./config-QB7W3Z7P.js").then((m) => m.run(args));
+    await import("./config-W7MS3PWY.js").then((m) => m.run(args));
     break;
   case "up":
-    await import("./up-VGVPOB6J.js").then((m) => m.run(args));
+    await import("./up-POJX6S5Y.js").then((m) => m.run(args));
     break;
   case "down":
-    await import("./down-JVHNXOFU.js").then((m) => m.run(args));
+    await import("./down-DS6WCT34.js").then((m) => m.run(args));
     break;
   case "restart":
-    await import("./daemon-restart-W47YDE5E.js").then((m) => m.run(args));
+    await import("./daemon-restart-RAKGR56L.js").then((m) => m.run(args));
     break;
   case "update":
-    await import("./update-3ANTQO54.js").then((m) => m.run(args));
+    await import("./update-OPR4KU4M.js").then((m) => m.run(args));
     break;
   case "status":
-    await import("./status-VMOZUIZ2.js").then((m) => m.run(args));
+    await import("./status-ECZHHSY5.js").then((m) => m.run(args));
     break;
   case "extension":
-    await import("./extension-LZYHBNLV.js").then((m) => m.run(args));
+    await import("./extension-BCFYXI7A.js").then((m) => m.run(args));
     break;
   case "systems":
-    await import("./systems-Y2WZV2K4.js").then((m) => m.run(args));
+    await import("./systems-5MA57Q7G.js").then((m) => m.run(args));
     break;
   case "login":
-    await import("./login-WY3DADVB.js").then((m) => m.run(args));
+    await import("./login-PHMTLNUF.js").then((m) => m.run(args));
     break;
   case "logout":
-    await import("./logout-TFZHWNVL.js").then((m) => m.run(args));
+    await import("./logout-BP3R3CAA.js").then((m) => m.run(args));
     break;
   case "service":
-    await import("./service-AY5TGWJX.js").then((m) => m.run(args));
+    await import("./service-Q5OVY5AK.js").then((m) => m.run(args));
     break;
   case "--help":
   case "-h":
@@ -150,7 +150,7 @@ use --mind <name> or VOLUTE_MIND env var to identify the mind.`);
   default: {
     let isExtensionCommand = false;
     try {
-      const { daemonFetch } = await import("./daemon-client-2MIPKY3E.js");
+      const { daemonFetch } = await import("./daemon-client-EWDPOOHC.js");
       const res = await daemonFetch("/api/extensions/commands");
       if (res.ok) {
         const extCommands = await res.json();
@@ -264,7 +264,7 @@ Run 'volute --help' for usage.`);
   }
 }
 if (command !== "update") {
-  import("./update-check-4O6DKUOF.js").then((m) => m.checkForUpdate()).then((result) => {
+  import("./update-check-OG27AL4Z.js").then((m) => m.checkForUpdate()).then((result) => {
     if (result.updateAvailable) {
       console.error(`
   Update available: ${result.current} \u2192 ${result.latest}`);

package/dist/{clock-BMLJ2TR6.js → clock-HP2TGMG5.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-BTY4WNFE.js";
 import {
   daemonFetch
-} from "./chunk-ZX7EAV5J.js";
+} from "./chunk-IFNSAOA4.js";
 import {
   getClient,
   urlOf
@@ -274,11 +274,11 @@ var cmd = subcommands({
     },
     sleep: {
       description: "Put a mind to sleep",
-      run: (args) => import("./mind-sleep-ZL5ZXFTM.js").then((m) => m.run(args))
+      run: (args) => import("./mind-sleep-4NXV4J4U.js").then((m) => m.run(args))
     },
     wake: {
       description: "Wake a sleeping mind",
-      run: (args) => import("./mind-wake-HK5ORGUK.js").then((m) => m.run(args))
+      run: (args) => import("./mind-wake-TNB54DBR.js").then((m) => m.run(args))
     }
   },
   footer: "Use --mind <name> or VOLUTE_MIND to identify the mind."

package/dist/{cloud-sync-GV6O2HN2.js → cloud-sync-3OPHFOYQ.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   deliverMessage
-} from "./chunk-W5Z2H3LU.js";
-import "./chunk-6ZAT5PYV.js";
-import "./chunk-YN6ISG7A.js";
-import "./chunk-WSRGS4XP.js";
-import "./chunk-JIGVTFIR.js";
+} from "./chunk-52NMCDBS.js";
+import "./chunk-BLOAJLGI.js";
+import "./chunk-VSUZE2PD.js";
+import "./chunk-QLWG3C2Z.js";
+import "./chunk-JLX3GC7T.js";
 import {
   getAuthHeaders,
   getWebhookUrl
-} from "./chunk-2R4JIZCB.js";
+} from "./chunk-YLTIEEVL.js";
 import "./chunk-CU6OFXMM.js";
-import "./chunk-U7UASV36.js";
-import "./chunk-PP5CGT2P.js";
-import "./chunk-GMFCSXWB.js";
-import "./chunk-YATR5BXD.js";
-import "./chunk-Y2XLASFJ.js";
-import "./chunk-4ED2DBNC.js";
-import "./chunk-VK2YD7VJ.js";
-import "./chunk-N64Q7FMP.js";
-import "./chunk-6TPRURK5.js";
-import "./chunk-2RQIIKFC.js";
+import "./chunk-WR7CSHQ4.js";
+import "./chunk-VBKRZCR7.js";
+import "./chunk-62ICA2FF.js";
+import "./chunk-TKOWXAHG.js";
+import "./chunk-GN52E2DP.js";
+import "./chunk-TFBQESH7.js";
+import "./chunk-4ZSUUBG5.js";
+import "./chunk-KZAL7HEQ.js";
+import "./chunk-5QG36RV7.js";
+import "./chunk-K547QOCM.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
-import "./chunk-VDODEQSJ.js";
+import "./chunk-IUZ3EV2D.js";
 import "./chunk-MHFAWJCC.js";
 import "./chunk-K3NQKI34.js";
 

package/dist/{config-QB7W3Z7P.js → config-W7MS3PWY.js}

@@ -7,7 +7,7 @@ import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/config.ts
 async function listModels() {
-  const { daemonFetch } = await import("./daemon-client-2MIPKY3E.js");
+  const { daemonFetch } = await import("./daemon-client-EWDPOOHC.js");
   const res = await daemonFetch("/api/config/models");
   if (!res.ok) {
     console.error(`Failed to fetch models (HTTP ${res.status})`);
@@ -24,7 +24,7 @@ async function listModels() {
   }
 }
 async function listProviders() {
-  const { daemonFetch } = await import("./daemon-client-2MIPKY3E.js");
+  const { daemonFetch } = await import("./daemon-client-EWDPOOHC.js");
   const res = await daemonFetch("/api/config/providers");
   if (!res.ok) {
     console.error(`Failed to fetch providers (HTTP ${res.status})`);
@@ -41,7 +41,7 @@ async function listProviders() {
   }
 }
 async function showStatus() {
-  const { daemonFetch } = await import("./daemon-client-2MIPKY3E.js");
+  const { daemonFetch } = await import("./daemon-client-EWDPOOHC.js");
   const res = await daemonFetch("/api/config/status");
   if (!res.ok) {
     console.error(`Failed to fetch config (HTTP ${res.status})`);

package/dist/{conversations-KW7IYESK.js → conversations-FSZCUUYO.js}

@@ -29,10 +29,10 @@ import {
   removeParticipant,
   setConversationPrivate,
   updateChannelSettings
-} from "./chunk-2R4JIZCB.js";
-import "./chunk-2RQIIKFC.js";
+} from "./chunk-YLTIEEVL.js";
+import "./chunk-K547QOCM.js";
 import "./chunk-T2TP6ZC6.js";
-import "./chunk-VDODEQSJ.js";
+import "./chunk-IUZ3EV2D.js";
 import "./chunk-MHFAWJCC.js";
 import "./chunk-K3NQKI34.js";
 export {

package/dist/{create-C3BBFYV7.js → create-CJ2SR4EU.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-BTY4WNFE.js";
 import {
   daemonFetch
-} from "./chunk-ZX7EAV5J.js";
+} from "./chunk-IFNSAOA4.js";
 import {
   command
 } from "./chunk-TXSA4Q3V.js";

package/dist/{create-CTPXWFTL.js → create-YNBZWD34.js}

@@ -21,11 +21,11 @@ var cmd = command({
     const name = args.name;
     let template = flags.template;
     if (!template) {
-      const { resolveTemplate } = await import("./ai-service-ZHEPFC3U.js");
+      const { resolveTemplate } = await import("./ai-service-3GBOJGUA.js");
       template = await resolveTemplate();
     }
     const skills = flags.skills === "none" ? [] : flags.skills ? flags.skills.split(",") : void 0;
-    const { daemonFetch } = await import("./daemon-client-2MIPKY3E.js");
+    const { daemonFetch } = await import("./daemon-client-EWDPOOHC.js");
     const { getClient, urlOf } = await import("./api-client-LC5YRA32.js");
     const client = getClient();
     const res = await daemonFetch(urlOf(client.api.minds.$url()), {

package/dist/{daemon-client-2MIPKY3E.js → daemon-client-EWDPOOHC.js}

@@ -1,11 +1,13 @@
 #!/usr/bin/env node
 import {
+  daemonDispatcher,
   daemonFetch,
   readSessionFile,
   resolveDaemonUrl
-} from "./chunk-ZX7EAV5J.js";
+} from "./chunk-IFNSAOA4.js";
 import "./chunk-K3NQKI34.js";
 export {
+  daemonDispatcher,
   daemonFetch,
   readSessionFile,
   resolveDaemonUrl

package/dist/{daemon-restart-W47YDE5E.js → daemon-restart-RAKGR56L.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   stopDaemon
-} from "./chunk-V67XMNGP.js";
+} from "./chunk-G777ME4L.js";
 import {
   run
-} from "./chunk-FU5YDH6Q.js";
+} from "./chunk-RKBYFLOR.js";
 import {
   command
 } from "./chunk-TXSA4Q3V.js";
@@ -15,11 +15,11 @@ import {
   pollHealth,
   readDaemonConfig,
   restartService
-} from "./chunk-2I7OKOYV.js";
-import "./chunk-Y2XLASFJ.js";
-import "./chunk-4ED2DBNC.js";
-import "./chunk-N64Q7FMP.js";
-import "./chunk-VDODEQSJ.js";
+} from "./chunk-CGPESELY.js";
+import "./chunk-GN52E2DP.js";
+import "./chunk-TFBQESH7.js";
+import "./chunk-KZAL7HEQ.js";
+import "./chunk-IUZ3EV2D.js";
 import "./chunk-MHFAWJCC.js";
 import "./chunk-K3NQKI34.js";