volute 0.42.1 → 0.43.1

package/dist/{chunk-QPTQKGGF.js → chunk-57LBQ7JX.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-T2TP6ZC6.js";
 import {
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/bridges/bridges.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";

package/dist/{chunk-K547QOCM.js → chunk-7G2EEYXX.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-T2TP6ZC6.js";
 import {
   getDb
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 import {
   activity
-} from "./chunk-MHFAWJCC.js";
+} from "./chunk-L3IV23ZG.js";
 
 // packages/daemon/src/lib/events/activity-events.ts
 var subscribers = /* @__PURE__ */ new Set();

package/dist/{chunk-E7XWFDZL.js → chunk-AD46AYZQ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/update-check.ts
 import { execFile as execFileCb, execFileSync } from "child_process";

package/dist/{chunk-P6DPB33N.js → chunk-ATEX3ZPG.js}

@@ -2,10 +2,10 @@
 import {
   exec,
   execInherit
-} from "./chunk-GN52E2DP.js";
+} from "./chunk-PGPLCJPK.js";
 import {
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/config/service-mode.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-WR7CSHQ4.js → chunk-C6ESRQZ7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   readGlobalConfig
-} from "./chunk-KZAL7HEQ.js";
+} from "./chunk-ONM2AZFL.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";

package/dist/{chunk-JU5GWO77.js → chunk-DE4EKQFH.js}

@@ -7,14 +7,14 @@ import {
   modeLabel,
   pollHealth,
   startService
-} from "./chunk-P6DPB33N.js";
+} from "./chunk-ATEX3ZPG.js";
 import {
   readGlobalConfig
-} from "./chunk-KZAL7HEQ.js";
+} from "./chunk-ONM2AZFL.js";
 import {
   voluteHome,
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // src/commands/up.ts
 import { spawn } from "child_process";

package/dist/{chunk-JPDN6ZRJ.js → chunk-DMUPZQWP.js}

@@ -2,14 +2,14 @@
 import {
   findBridgeForChannel,
   getBridgeConfig
-} from "./chunk-QPTQKGGF.js";
+} from "./chunk-57LBQ7JX.js";
 import {
   recordOutbound
-} from "./chunk-6G7R2LPI.js";
+} from "./chunk-4SVONUTC.js";
 import {
   readEnv,
   sharedEnvPath
-} from "./chunk-BLOAJLGI.js";
+} from "./chunk-XDTKJNW5.js";
 import {
   addMessage,
   findDMConversation,
@@ -17,21 +17,21 @@ import {
   getChannelName,
   getConversation,
   getParticipants
-} from "./chunk-YLTIEEVL.js";
+} from "./chunk-K4EHBHPE.js";
 import {
   readVoluteConfig
 } from "./chunk-CU6OFXMM.js";
 import {
   publish
-} from "./chunk-BWZHX46O.js";
+} from "./chunk-Y6O35D7K.js";
 import {
   daemonConfigPath,
   readDaemonToken
-} from "./chunk-P6DPB33N.js";
+} from "./chunk-ATEX3ZPG.js";
 import {
   getOrCreateMindUser,
   getUserByUsername
-} from "./chunk-5QG36RV7.js";
+} from "./chunk-EFL5UOY4.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
@@ -40,7 +40,7 @@ import {
 } from "./chunk-LGNUFVMR.js";
 import {
   mindDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 import {
   __export
 } from "./chunk-K3NQKI34.js";

package/dist/{chunk-BR6KFHVT.js → chunk-EE7SZJON.js}

@@ -3,10 +3,10 @@ import {
   LAUNCHD_PLIST_LABEL,
   LAUNCHD_PLIST_PATH,
   USER_SYSTEMD_UNIT
-} from "./chunk-P6DPB33N.js";
+} from "./chunk-ATEX3ZPG.js";
 import {
   resolveVoluteBin
-} from "./chunk-GN52E2DP.js";
+} from "./chunk-PGPLCJPK.js";
 
 // packages/daemon/src/lib/config/service-install.ts
 import { execFile } from "child_process";

package/dist/{chunk-5QG36RV7.js → chunk-EFL5UOY4.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   broadcast
-} from "./chunk-K547QOCM.js";
+} from "./chunk-7G2EEYXX.js";
 import {
   getDb
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 import {
   users
-} from "./chunk-MHFAWJCC.js";
+} from "./chunk-L3IV23ZG.js";
 
 // packages/daemon/src/lib/auth.ts
 import { compareSync, hashSync } from "bcryptjs";

package/dist/{chunk-OEJFZHZZ.js → chunk-GZJFC76M.js}

@@ -2,7 +2,7 @@
 import {
   mindDir,
   stateDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/mind/archive.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-KUJVCDWT.js → chunk-JVK6QQIC.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   setBridgeConfig
-} from "./chunk-QPTQKGGF.js";
+} from "./chunk-57LBQ7JX.js";
 import {
   readEnv,
   sharedEnvPath,
   writeEnv
-} from "./chunk-BLOAJLGI.js";
+} from "./chunk-XDTKJNW5.js";
 
 // packages/daemon/src/lib/template/import-utils.ts
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-YLTIEEVL.js → chunk-K4EHBHPE.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   subscribe
-} from "./chunk-K547QOCM.js";
+} from "./chunk-7G2EEYXX.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
 import {
   getDb
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 import {
   channels,
   conversationParticipants,
@@ -15,7 +15,7 @@ import {
   conversations,
   messages,
   users
-} from "./chunk-MHFAWJCC.js";
+} from "./chunk-L3IV23ZG.js";
 
 // packages/daemon/src/lib/events/conversations.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-M3T3Y6FT.js → chunk-KINGVQSR.js}

@@ -2,11 +2,11 @@
 import {
   exec,
   gitExec
-} from "./chunk-GN52E2DP.js";
+} from "./chunk-PGPLCJPK.js";
 import {
   readGlobalConfig,
   writeGlobalConfig
-} from "./chunk-KZAL7HEQ.js";
+} from "./chunk-ONM2AZFL.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
@@ -15,10 +15,10 @@ import {
   mindDir,
   readRegistry,
   voluteHome
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 import {
   sharedSkills
-} from "./chunk-MHFAWJCC.js";
+} from "./chunk-L3IV23ZG.js";
 
 // packages/daemon/src/lib/skills.ts
 import { createHash } from "crypto";
@@ -46,7 +46,7 @@ async function initDefaultSkills() {
   const config = readGlobalConfig();
   let extensionSkills = [];
   try {
-    const { getExtensionStandardSkills } = await import("./extensions-X6MKBJLB.js");
+    const { getExtensionStandardSkills } = await import("./extensions-PQPZT6LS.js");
     extensionSkills = getExtensionStandardSkills();
   } catch (err) {
     logger_default.warn("failed to load extension standard skills during init", logger_default.errorData(err));

package/dist/{chunk-MHFAWJCC.js → chunk-L3IV23ZG.js}

@@ -150,18 +150,29 @@ var deliveryQueue = sqliteTable(
   "delivery_queue",
   {
     id: integer("id").primaryKey({ autoIncrement: true }),
+    // Keying/cleanup/dedup key: always the base (parent) name, so an insert under a
+    // variant name and the id-scoped cleanup share a key.
     mind: text("mind").notNull(),
+    // Original delivery target — may be a variant name. Used to resolve the port on
+    // redrive so a variant's stranded message is re-delivered to the variant, not the
+    // parent. Null on legacy rows → callers fall back to `mind`.
+    target_mind: text("target_mind"),
     session: text("session").notNull(),
     channel: text("channel"),
     sender: text("sender"),
     status: text("status").notNull().default("pending"),
     payload: text("payload").notNull(),
+    // Redrive bookkeeping: how many delivery attempts have been made, and the
+    // earliest time the row is eligible for a retry (null = deliver ASAP).
+    attempts: integer("attempts").notNull().default(0),
+    next_attempt_at: text("next_attempt_at"),
     created_at: text("created_at").notNull().default(sql`(datetime('now'))`)
   },
   (table) => [
     index("idx_delivery_queue_mind_session").on(table.mind, table.session),
     index("idx_delivery_queue_mind_status").on(table.mind, table.status),
-    index("idx_delivery_queue_status").on(table.status)
+    index("idx_delivery_queue_status").on(table.status),
+    index("idx_delivery_queue_status_next").on(table.status, table.next_attempt_at)
   ]
 );
 var activity = sqliteTable(

package/dist/{chunk-VBKRZCR7.js → chunk-M3PGGSBH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   publish
-} from "./chunk-K547QOCM.js";
+} from "./chunk-7G2EEYXX.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";

package/dist/{chunk-NSGIVS5T.js → chunk-O3DXAR44.js}

@@ -8,10 +8,10 @@ import {
   pollHealthDown,
   readDaemonConfig,
   stopService
-} from "./chunk-P6DPB33N.js";
+} from "./chunk-ATEX3ZPG.js";
 import {
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // src/commands/down.ts
 import { existsSync, readFileSync, unlinkSync } from "fs";

package/dist/{chunk-KZAL7HEQ.js → chunk-ONM2AZFL.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/config/setup.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";

package/dist/chunk-PGPLCJPK.js

@@ -0,0 +1,272 @@
+#!/usr/bin/env node
+import {
+  getBaseName,
+  validateMindName
+} from "./chunk-YAMO2U3N.js";
+
+// packages/daemon/src/lib/mind/isolation.ts
+import { execFileSync as execFileSync2 } from "child_process";
+import { existsSync, readdirSync, statSync } from "fs";
+import { resolve } from "path";
+
+// packages/daemon/src/lib/util/exec.ts
+import { execFile as execFileCb, execFileSync, spawn } from "child_process";
+async function exec(cmd, args, options) {
+  const [wrappedCmd, wrappedArgs] = options?.mindName ? await wrapForIsolation(cmd, args, options.mindName) : [cmd, args];
+  return new Promise((resolve2, reject) => {
+    execFileCb(
+      wrappedCmd,
+      wrappedArgs,
+      { cwd: options?.cwd, env: options?.env },
+      (err, stdout, stderr) => {
+        if (err) {
+          err.stderr = stderr;
+          err.stdout = stdout;
+          reject(err);
+        } else {
+          resolve2(stdout);
+        }
+      }
+    );
+  });
+}
+function gitExec(args, options) {
+  const fullArgs = process.env.VOLUTE_ISOLATION === "user" ? ["-c", "safe.directory=*", ...args] : args;
+  return exec("git", fullArgs, options);
+}
+function resolveVoluteBin() {
+  try {
+    return execFileSync("which", ["volute"], { encoding: "utf-8" }).trim();
+  } catch {
+    throw new Error("Could not find volute binary on PATH");
+  }
+}
+async function execInherit(cmd, args, options) {
+  const [wrappedCmd, wrappedArgs] = options?.mindName ? await wrapForIsolation(cmd, args, options.mindName) : [cmd, args];
+  return new Promise((resolve2, reject) => {
+    const child = spawn(wrappedCmd, wrappedArgs, {
+      cwd: options?.cwd,
+      env: options?.env,
+      stdio: "inherit"
+    });
+    child.on("error", reject);
+    child.on("close", (code) => {
+      if (code === 0) resolve2();
+      else reject(new Error(`${cmd} ${args.join(" ")} exited with code ${code}`));
+    });
+  });
+}
+
+// packages/daemon/src/lib/mind/isolation.ts
+function isIsolationEnabled() {
+  return process.env.VOLUTE_ISOLATION === "user";
+}
+function mindUserName(mindName) {
+  const err = validateMindName(mindName);
+  if (err && mindName !== "volute") {
+    throw new Error(`Invalid mind name for isolation: ${err}`);
+  }
+  const prefix = process.env.VOLUTE_USER_PREFIX ?? "mind-";
+  return `${prefix}${mindName}`;
+}
+function findNextMacId(type) {
+  const idField = type === "Users" ? "UniqueID" : "PrimaryGroupID";
+  let output;
+  try {
+    output = execFileSync2("dscl", [".", "-list", `/${type}`, idField], { encoding: "utf-8" });
+  } catch (err) {
+    throw new Error(
+      `Failed to query ${type} via dscl: ${err instanceof Error ? err.message : err}`
+    );
+  }
+  const ids = /* @__PURE__ */ new Set();
+  for (const line of output.split("\n")) {
+    const parts = line.trim().split(/\s+/);
+    const id = parseInt(parts[parts.length - 1], 10);
+    if (!Number.isNaN(id)) ids.add(id);
+  }
+  let next = 401;
+  while (ids.has(next)) next++;
+  return next;
+}
+function getVoluteGroupGid() {
+  if (process.platform === "darwin") {
+    const output2 = execFileSync2("dscl", [".", "-read", "/Groups/volute", "PrimaryGroupID"], {
+      encoding: "utf-8"
+    });
+    const match = output2.match(/PrimaryGroupID:\s*(\d+)/);
+    if (!match) throw new Error("Could not read volute group GID");
+    return parseInt(match[1], 10);
+  }
+  const output = execFileSync2("getent", ["group", "volute"], { encoding: "utf-8" });
+  const gid = parseInt(output.split(":")[2], 10);
+  if (Number.isNaN(gid)) throw new Error("Could not read volute group GID");
+  return gid;
+}
+function ensureVoluteGroup(opts) {
+  if (!opts?.force && !isIsolationEnabled()) return;
+  if (process.platform === "darwin") {
+    try {
+      execFileSync2("dscl", [".", "-read", "/Groups/volute"], { stdio: "ignore" });
+      return;
+    } catch {
+    }
+    const gid = findNextMacId("Groups");
+    try {
+      execFileSync2("dscl", [".", "-create", "/Groups/volute"]);
+      execFileSync2("dscl", [".", "-create", "/Groups/volute", "PrimaryGroupID", String(gid)]);
+      execFileSync2("dscl", [".", "-create", "/Groups/volute", "Password", "*"]);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      throw new Error(`Failed to create volute group on macOS: ${msg}`);
+    }
+    return;
+  }
+  try {
+    execFileSync2("getent", ["group", "volute"], { stdio: "ignore" });
+  } catch {
+    try {
+      execFileSync2("groupadd", ["volute"], { stdio: ["ignore", "ignore", "pipe"] });
+    } catch (err) {
+      const stderr = err?.stderr?.toString().trim();
+      throw new Error(`Failed to create volute group${stderr ? `: ${stderr}` : ""}`);
+    }
+  }
+}
+function createMindUser(name, homeDir) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  try {
+    execFileSync2("id", [user], { stdio: "ignore" });
+    return;
+  } catch {
+  }
+  if (process.platform === "darwin") {
+    const uid = findNextMacId("Users");
+    const gid = getVoluteGroupGid();
+    const home = homeDir ?? "/var/empty";
+    try {
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "UniqueID", String(uid)]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "PrimaryGroupID", String(gid)]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "UserShell", "/usr/bin/false"]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "NFSHomeDirectory", home]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "RealName", `Volute Mind: ${name}`]);
+      execFileSync2("dscl", [".", "-create", `/Users/${user}`, "IsHidden", "1"]);
+      execFileSync2("dscl", [".", "-append", "/Groups/volute", "GroupMembership", user]);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      throw new Error(`Failed to create user ${user} on macOS: ${msg}`);
+    }
+    return;
+  }
+  try {
+    const args = ["-r", "-M", "-G", "volute", "-s", "/usr/sbin/nologin"];
+    if (homeDir) args.push("-d", homeDir);
+    args.push(user);
+    execFileSync2("useradd", args, {
+      stdio: ["ignore", "ignore", "pipe"]
+    });
+  } catch (err) {
+    const stderr = err?.stderr?.toString().trim();
+    throw new Error(`Failed to create user ${user}${stderr ? `: ${stderr}` : ""}`);
+  }
+}
+function deleteMindUser(name) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  if (process.platform === "darwin") {
+    try {
+      execFileSync2("dscl", [".", "-delete", `/Users/${user}`], { stdio: "ignore" });
+    } catch {
+    }
+    try {
+      execFileSync2("dscl", [".", "-delete", "/Groups/volute", "GroupMembership", user], {
+        stdio: "ignore"
+      });
+    } catch {
+    }
+    return;
+  }
+  try {
+    execFileSync2("userdel", [user], { stdio: "ignore" });
+  } catch {
+  }
+}
+async function wrapForIsolation(cmd, args, mindName) {
+  if (!isIsolationEnabled()) return [cmd, args];
+  const baseName = await getBaseName(mindName);
+  const user = mindUserName(baseName);
+  if (process.platform === "darwin") {
+    return ["sudo", ["-u", user, "--", cmd, ...args]];
+  }
+  return ["runuser", ["-u", user, "--", cmd, ...args]];
+}
+async function userUid(user) {
+  try {
+    const uid = parseInt((await exec("id", ["-u", user])).trim(), 10);
+    return Number.isNaN(uid) ? null : uid;
+  } catch {
+    return null;
+  }
+}
+function ownedBy(path, uid) {
+  try {
+    return statSync(path).uid === uid;
+  } catch {
+    return false;
+  }
+}
+async function chownTargets(dir, user) {
+  const nodeModules = resolve(dir, "node_modules");
+  const home = resolve(dir, "home");
+  if (existsSync(nodeModules) && existsSync(home)) {
+    const uid = await userUid(user);
+    if (uid !== null && ownedBy(nodeModules, uid)) {
+      return readdirSync(dir).filter((entry) => entry !== "node_modules").map((entry) => resolve(dir, entry));
+    }
+  }
+  return [dir];
+}
+async function chownMindDir(dir, name) {
+  if (!isIsolationEnabled()) return;
+  const user = mindUserName(name);
+  const group = process.platform === "darwin" ? "volute" : user;
+  for (const target of await chownTargets(dir, user)) {
+    try {
+      await exec("chown", ["-R", `${user}:${group}`, target]);
+    } catch (err) {
+      const stderr = String(err?.stderr ?? "").trim();
+      throw new Error(
+        `Failed to chown ${target} to ${user}:${group}${stderr ? `: ${stderr}` : ""}`
+      );
+    }
+  }
+  try {
+    await exec("chown", [`${user}:${group}`, dir]);
+  } catch (err) {
+    const stderr = String(err?.stderr ?? "").trim();
+    throw new Error(`Failed to chown ${dir} to ${user}:${group}${stderr ? `: ${stderr}` : ""}`);
+  }
+  try {
+    await exec("chmod", ["700", dir]);
+  } catch (err) {
+    const stderr = String(err?.stderr ?? "").trim();
+    throw new Error(`Failed to chmod ${dir}${stderr ? `: ${stderr}` : ""}`);
+  }
+}
+
+export {
+  isIsolationEnabled,
+  mindUserName,
+  ensureVoluteGroup,
+  createMindUser,
+  deleteMindUser,
+  wrapForIsolation,
+  chownTargets,
+  chownMindDir,
+  exec,
+  gitExec,
+  resolveVoluteBin,
+  execInherit
+};

package/dist/{chunk-43K5UWF7.js → chunk-QQ2MVQU3.js}

@@ -10,21 +10,22 @@ import {
   getSharedSkill,
   installSkill,
   mindSkillsDir
-} from "./chunk-M3T3Y6FT.js";
+} from "./chunk-KINGVQSR.js";
 import {
   readVoluteConfig,
   writeVoluteConfig
 } from "./chunk-CU6OFXMM.js";
 import {
   exec
-} from "./chunk-GN52E2DP.js";
+} from "./chunk-PGPLCJPK.js";
 import {
   qualifyModelId,
-  resolveTemplate
-} from "./chunk-4ZSUUBG5.js";
+  resolveTemplate,
+  unqualifyModelId
+} from "./chunk-YSV3VJQK.js";
 import {
   readGlobalConfig
-} from "./chunk-KZAL7HEQ.js";
+} from "./chunk-ONM2AZFL.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
@@ -33,7 +34,7 @@ import {
   findMind,
   nextPort,
   voluteSystemDir
-} from "./chunk-IUZ3EV2D.js";
+} from "./chunk-YAMO2U3N.js";
 
 // packages/daemon/src/lib/mind/spirit.ts
 import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -99,7 +100,7 @@ async function ensureSpiritProject() {
     writeFileSync(routesPath, `${JSON.stringify(routesContent, null, 2)}
 `);
     if (spiritModel) {
-      const modelForConfig = template === "pi" ? qualifyModelId(spiritModel) : spiritModel;
+      const modelForConfig = template === "pi" ? qualifyModelId(spiritModel) : unqualifyModelId(spiritModel);
       const configPath = resolve(dir, "home/.config/config.json");
       const mindConfig = existsSync(configPath) ? JSON.parse(readFileSync(configPath, "utf-8")) : {};
       mindConfig.model = modelForConfig;
@@ -129,10 +130,10 @@ async function ensureSpiritProject() {
     } catch (err) {
       slog.warn("failed to add tending schedule to spirit config", logger_default.errorData(err));
     }
-    const { createMindUser, chownMindDir, ensureVoluteGroup } = await import("./isolation-F7ABZMDA.js");
+    const { createMindUser, chownMindDir, ensureVoluteGroup } = await import("./isolation-5AYEY55P.js");
     ensureVoluteGroup();
     createMindUser("volute", resolve(dir, "home"));
-    chownMindDir(dir, "volute");
+    await chownMindDir(dir, "volute");
     const port = await nextPort();
     await addSpirit("volute", port, template, dir);
     slog.info("spirit project created");
@@ -163,8 +164,8 @@ async function syncSpiritTemplate() {
       cpSync(newPkg, resolve(dir, "package.json"));
       await exec("npm", ["install"], { cwd: dir, env: npmEnv() });
     }
-    const db = await (await import("./db-ZJJJYJBU.js")).getDb();
-    const { minds } = await import("./schema-HHYJDG7B.js");
+    const db = await (await import("./db-CZV62BOQ.js")).getDb();
+    const { minds } = await import("./schema-LRUTFOER.js");
     const { eq } = await import("drizzle-orm");
     await db.update(minds).set({ template: expectedTemplate }).where(eq(minds.name, "volute"));
   }
@@ -190,7 +191,7 @@ async function syncSpiritTemplate() {
   writeFileSync(resolve(dir, "home/SOUL.md"), getSpiritSoul(systemName, config.description));
   const spiritModel = config.spiritModel;
   if (spiritModel) {
-    const modelForConfig = template === "pi" ? qualifyModelId(spiritModel) : spiritModel;
+    const modelForConfig = template === "pi" ? qualifyModelId(spiritModel) : unqualifyModelId(spiritModel);
     const mindConfigPath = resolve(dir, "home/.config/config.json");
     const mindConfig = existsSync(mindConfigPath) ? JSON.parse(readFileSync(mindConfigPath, "utf-8")) : {};
     if (mindConfig.model !== modelForConfig) {