volute 0.43.0 → 0.44.0

package/dist/{chunk-ONM2AZFL.js → chunk-PNV24SEP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   voluteSystemDir
-} from "./chunk-YAMO2U3N.js";
+} from "./chunk-H7IYFRAL.js";
 
 // packages/daemon/src/lib/config/setup.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-ATEX3ZPG.js → chunk-Q2XBKQ2D.js}

@@ -2,10 +2,10 @@
 import {
   exec,
   execInherit
-} from "./chunk-PGPLCJPK.js";
+} from "./chunk-3ERIL673.js";
 import {
   voluteSystemDir
-} from "./chunk-YAMO2U3N.js";
+} from "./chunk-H7IYFRAL.js";
 
 // packages/daemon/src/lib/config/service-mode.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-GZJFC76M.js → chunk-QMJJWTNL.js}

@@ -2,7 +2,7 @@
 import {
   mindDir,
   stateDir
-} from "./chunk-YAMO2U3N.js";
+} from "./chunk-H7IYFRAL.js";
 
 // packages/daemon/src/lib/mind/archive.ts
 import { execFileSync } from "child_process";

package/dist/chunk-SQL7M4HJ.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import {
+  readVoluteConfig
+} from "./chunk-CU6OFXMM.js";
+import {
+  logger_default
+} from "./chunk-T2TP6ZC6.js";
+import {
+  mindDir,
+  readAllMinds,
+  voluteHome
+} from "./chunk-H7IYFRAL.js";
+
+// packages/daemon/src/lib/util/avatar-image.ts
+import { readdir, readFile, writeFile } from "fs/promises";
+import { resolve as resolve2 } from "path";
+
+// packages/daemon/src/lib/util/paths.ts
+import { resolve, sep } from "path";
+var PathTraversalError = class extends Error {
+  constructor(base, userPath) {
+    super(`Path "${userPath}" escapes base directory "${base}"`);
+    this.name = "PathTraversalError";
+  }
+};
+function resolveWithinBase(base, userPath) {
+  const resolvedBase = resolve(base);
+  const target = resolve(resolvedBase, userPath);
+  if (target !== resolvedBase && !target.startsWith(resolvedBase + sep)) {
+    throw new PathTraversalError(base, userPath);
+  }
+  return target;
+}
+function safeResolveWithinBase(base, userPath) {
+  try {
+    return resolveWithinBase(base, userPath);
+  } catch {
+    return null;
+  }
+}
+
+// packages/daemon/src/lib/util/avatar-image.ts
+var alog = logger_default.child("avatar-image");
+var AVATAR_DIM = 256;
+async function loadSharp() {
+  try {
+    const mod = await import("sharp");
+    return mod.default ?? mod;
+  } catch (err) {
+    const code = err.code;
+    if (code === "MODULE_NOT_FOUND" || code === "ERR_MODULE_NOT_FOUND") {
+      alog.debug("sharp not available, keeping original avatars");
+    } else {
+      alog.warn("sharp import failed, keeping original avatars", logger_default.errorData(err));
+    }
+    return null;
+  }
+}
+async function normalizeAvatar(buffer) {
+  const sharp = await loadSharp();
+  if (!sharp) return null;
+  try {
+    const out = await sharp(buffer, { animated: true }).resize(AVATAR_DIM, AVATAR_DIM, { fit: "cover", withoutEnlargement: true }).webp({ quality: 85 }).toBuffer();
+    return { buffer: out, ext: ".webp", mime: "image/webp" };
+  } catch (err) {
+    alog.warn("avatar normalize failed, keeping original", logger_default.errorData(err));
+    return null;
+  }
+}
+async function downscaleFile(sharp, filePath) {
+  const data = await readFile(filePath);
+  const image = sharp(data, { animated: true });
+  const meta = await image.metadata();
+  if (!meta.format || (meta.width ?? 0) <= AVATAR_DIM && (meta.height ?? 0) <= AVATAR_DIM) {
+    return false;
+  }
+  const out = await image.resize(AVATAR_DIM, AVATAR_DIM, { fit: "cover" }).toFormat(meta.format).toBuffer();
+  await writeFile(filePath, out);
+  return true;
+}
+async function migrateAvatarSizes() {
+  const sharp = await loadSharp();
+  if (!sharp) return;
+  const userAvatarsDir = resolve2(voluteHome(), "avatars");
+  let userAvatars = [];
+  try {
+    userAvatars = (await readdir(userAvatarsDir)).map((f) => resolve2(userAvatarsDir, f));
+  } catch {
+  }
+  const mindAvatars = [];
+  try {
+    for (const mind of await readAllMinds()) {
+      const dir = mind.dir ?? mindDir(mind.name);
+      const avatar = readVoluteConfig(dir)?.profile?.avatar;
+      if (!avatar) continue;
+      const path = safeResolveWithinBase(resolve2(dir, "home"), avatar);
+      if (path) mindAvatars.push(path);
+    }
+  } catch (err) {
+    alog.warn("failed to enumerate mind avatars for migration", logger_default.errorData(err));
+  }
+  for (const filePath of [...userAvatars, ...mindAvatars]) {
+    try {
+      if (await downscaleFile(sharp, filePath)) {
+        alog.info(`downscaled oversized avatar ${filePath}`);
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") {
+        alog.warn(`failed to downscale avatar ${filePath}`, logger_default.errorData(err));
+      }
+    }
+  }
+}
+
+export {
+  safeResolveWithinBase,
+  AVATAR_DIM,
+  normalizeAvatar,
+  migrateAvatarSizes
+};

package/dist/{chunk-2HIVYZDB.js → chunk-UMI4UIJG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   stateDir
-} from "./chunk-YAMO2U3N.js";
+} from "./chunk-H7IYFRAL.js";
 
 // packages/daemon/src/lib/chat/file-sharing.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-7G2EEYXX.js → chunk-ZMIMSIIT.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-T2TP6ZC6.js";
 import {
   getDb
-} from "./chunk-YAMO2U3N.js";
+} from "./chunk-H7IYFRAL.js";
 import {
   activity
-} from "./chunk-L3IV23ZG.js";
+} from "./chunk-ZV7MFISX.js";
 
 // packages/daemon/src/lib/events/activity-events.ts
 var subscribers = /* @__PURE__ */ new Set();

package/dist/{chunk-L3IV23ZG.js → chunk-ZV7MFISX.js}

@@ -258,6 +258,8 @@ var mindNotices = sqliteTable(
   {
     id: integer("id").primaryKey({ autoIncrement: true }),
     mind: text("mind").notNull(),
+    // Mind-level notices (not tied to a session, e.g. extension notifications)
+    // use the sentinel session = "" so any session's drain picks them up.
     session: text("session").notNull(),
     kind: text("kind").$type().notNull(),
     reason: text("reason").$type().notNull(),

package/dist/cli.js

@@ -10,7 +10,7 @@ if (!process.env.VOLUTE_HOME) {
 var command = process.argv[2];
 var args = process.argv.slice(3);
 if (command === "--version" || command === "-v") {
-  const { default: pkg } = await import("./package-ZOI2KAYC.js");
+  const { default: pkg } = await import("./package-5B4XDTJH.js");
   console.log(pkg.version);
   process.exit(0);
 }
@@ -31,7 +31,7 @@ var ungatedCommands = /* @__PURE__ */ new Set([
   void 0
 ]);
 if (!ungatedCommands.has(command)) {
-  const { isSetupComplete } = await import("./setup-25MMJ3J4.js");
+  const { isSetupComplete } = await import("./setup-MLRKNP7Y.js");
   if (!isSetupComplete()) {
     console.error("Volute is not set up. Run `volute setup` first.");
     process.exit(1);
@@ -39,16 +39,16 @@ if (!ungatedCommands.has(command)) {
 }
 switch (command) {
   case "setup":
-    await import("./setup-354PDHUF.js").then((m) => m.run(args));
+    await import("./setup-5GCO3CUB.js").then((m) => m.run(args));
     break;
   case "mind":
-    await import("./mind-QEWCR7FA.js").then((m) => m.run(args));
+    await import("./mind-MI7Z6KM2.js").then((m) => m.run(args));
     break;
   case "seed":
-    await import("./seed-cmd-GJFENEJH.js").then((m) => m.run(args));
+    await import("./seed-cmd-7XPKDQUC.js").then((m) => m.run(args));
     break;
   case "chat":
-    await import("./chat-SDSX5TVV.js").then((m) => m.run(args));
+    await import("./chat-I4EDDIQC.js").then((m) => m.run(args));
     break;
   case "variant":
     await import("./variant-HHDTW74J.js").then((m) => m.run(args));
@@ -66,19 +66,19 @@ switch (command) {
     await import("./config-TJLYUV3U.js").then((m) => m.run(args));
     break;
   case "up":
-    await import("./up-7RSBEKW6.js").then((m) => m.run(args));
+    await import("./up-FLCDR2UB.js").then((m) => m.run(args));
     break;
   case "down":
-    await import("./down-RRNYIGCU.js").then((m) => m.run(args));
+    await import("./down-XCAZXWLB.js").then((m) => m.run(args));
     break;
   case "restart":
-    await import("./daemon-restart-5GVZ5V3X.js").then((m) => m.run(args));
+    await import("./daemon-restart-OUJVINXV.js").then((m) => m.run(args));
     break;
   case "update":
-    await import("./update-EJ7Q77ZX.js").then((m) => m.run(args));
+    await import("./update-7TYVH5FM.js").then((m) => m.run(args));
     break;
   case "status":
-    await import("./status-WTU2WHXY.js").then((m) => m.run(args));
+    await import("./status-E5DQNCAO.js").then((m) => m.run(args));
     break;
   case "extension":
     await import("./extension-SEID47SR.js").then((m) => m.run(args));
@@ -87,17 +87,17 @@ switch (command) {
     await import("./systems-VNB5WKSS.js").then((m) => m.run(args));
     break;
   case "login":
-    await import("./login-KJSN4JDA.js").then((m) => m.run(args));
+    await import("./login-LM4NF4ZB.js").then((m) => m.run(args));
     break;
   case "logout":
-    await import("./logout-TMJGUQV2.js").then((m) => m.run(args));
+    await import("./logout-CTJVIZGA.js").then((m) => m.run(args));
     break;
   case "service":
-    await import("./service-4EVZKGSA.js").then((m) => m.run(args));
+    await import("./service-AQVPUANO.js").then((m) => m.run(args));
     break;
   case "--help":
   case "-h":
-  case void 0:
+  case void 0: {
     console.log(`volute \u2014 create and manage AI minds
 
 Common:
@@ -132,12 +132,36 @@ System:
   extension list/install/uninstall Manage extensions
   login / logout                   CLI authentication
   update                           Update volute
-  systems register/login/logout    volute.systems account
-
-Extensions:
-  notes write/list/read/...        Manage notes
-  pages publish/list/pull/log      Manage pages
-
+  systems register/login/logout    volute.systems account`);
+    try {
+      const { resolveDaemonUrl, getAuthToken } = await import("./daemon-client-IYR4KCPU.js");
+      const token = getAuthToken();
+      const headers = {};
+      if (token) headers.Authorization = `Bearer ${token}`;
+      const res = await fetch(`${resolveDaemonUrl()}/api/extensions/commands`, {
+        headers,
+        signal: AbortSignal.timeout(1500)
+      });
+      if (res.ok) {
+        const extCommands = await res.json();
+        const entries = Object.entries(extCommands).filter(
+          ([, ext]) => Object.keys(ext.commands).length > 0
+        );
+        if (entries.length > 0) {
+          const rows = entries.map(([id, ext]) => {
+            const subs = Object.keys(ext.commands).join("/");
+            return { left: `  ${id} ${subs}`, id };
+          });
+          const width = Math.max(...rows.map((r) => r.left.length));
+          console.log("\nExtensions:");
+          for (const r of rows) {
+            console.log(`${r.left.padEnd(width + 2)} Manage ${r.id}`);
+          }
+        }
+      }
+    } catch {
+    }
+    console.log(`
 Options:
   --version, -v                    Show version number
   --help, -h                       Show this help message
@@ -147,6 +171,7 @@ Run 'volute <command> --help' for details.
 Mind-scoped commands (chat, clock, skill)
 use --mind <name> or VOLUTE_MIND env var to identify the mind.`);
     break;
+  }
   default: {
     let isExtensionCommand = false;
     try {
@@ -264,7 +289,7 @@ Run 'volute --help' for usage.`);
   }
 }
 if (command !== "update") {
-  import("./update-check-ACYYNKTW.js").then((m) => m.checkForUpdate()).then((result) => {
+  import("./update-check-VSCSJ7KX.js").then((m) => m.checkForUpdate()).then((result) => {
     if (result.updateAvailable) {
       console.error(`
   Update available: ${result.current} \u2192 ${result.latest}`);

package/dist/{cloud-sync-FRYNWKCR.js → cloud-sync-6WJ7WFYD.js}

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   deliverMessage
-} from "./chunk-PF2AB7VJ.js";
-import "./chunk-XDTKJNW5.js";
-import "./chunk-65OLHBCL.js";
+} from "./chunk-OMETFX5H.js";
+import "./chunk-5GT7URXJ.js";
+import "./chunk-7FT24JBQ.js";
 import "./chunk-QLWG3C2Z.js";
-import "./chunk-FSSUANZJ.js";
+import "./chunk-I2Y2YHIO.js";
 import {
   getAuthHeaders,
   getWebhookUrl
-} from "./chunk-K4EHBHPE.js";
+} from "./chunk-FZMEVCWC.js";
 import "./chunk-CU6OFXMM.js";
-import "./chunk-C6ESRQZ7.js";
-import "./chunk-M3PGGSBH.js";
-import "./chunk-SPLPKBES.js";
-import "./chunk-3WLWKOGM.js";
-import "./chunk-PGPLCJPK.js";
-import "./chunk-YSV3VJQK.js";
-import "./chunk-ONM2AZFL.js";
-import "./chunk-EFL5UOY4.js";
-import "./chunk-7G2EEYXX.js";
+import "./chunk-3GYVW2X3.js";
+import "./chunk-HVU45COX.js";
+import "./chunk-5AHYQHNT.js";
+import "./chunk-NF75HPNR.js";
+import "./chunk-3ERIL673.js";
+import "./chunk-J47TIYHA.js";
+import "./chunk-PNV24SEP.js";
+import "./chunk-CYI534DJ.js";
+import "./chunk-ZMIMSIIT.js";
 import {
   logger_default
 } from "./chunk-T2TP6ZC6.js";
-import "./chunk-YAMO2U3N.js";
-import "./chunk-L3IV23ZG.js";
+import "./chunk-H7IYFRAL.js";
+import "./chunk-ZV7MFISX.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/daemon/src/lib/cloud-sync.ts

package/dist/{conversations-67WWW25C.js → conversations-WAJYZKOC.js}

@@ -29,11 +29,11 @@ import {
   removeParticipant,
   setConversationPrivate,
   updateChannelSettings
-} from "./chunk-K4EHBHPE.js";
-import "./chunk-7G2EEYXX.js";
+} from "./chunk-FZMEVCWC.js";
+import "./chunk-ZMIMSIIT.js";
 import "./chunk-T2TP6ZC6.js";
-import "./chunk-YAMO2U3N.js";
-import "./chunk-L3IV23ZG.js";
+import "./chunk-H7IYFRAL.js";
+import "./chunk-ZV7MFISX.js";
 import "./chunk-K3NQKI34.js";
 export {
   addMessage,

package/dist/{create-7W3LV3J7.js → create-YZIV5OJC.js}

@@ -21,7 +21,7 @@ var cmd = command({
     const name = args.name;
     let template = flags.template;
     if (!template) {
-      const { resolveTemplate } = await import("./ai-service-FBCCEYF5.js");
+      const { resolveTemplate } = await import("./ai-service-7PHSRDMO.js");
       template = await resolveTemplate();
     }
     const skills = flags.skills === "none" ? [] : flags.skills ? flags.skills.split(",") : void 0;

package/dist/{daemon-restart-5GVZ5V3X.js → daemon-restart-OUJVINXV.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   stopDaemon
-} from "./chunk-O3DXAR44.js";
+} from "./chunk-IEWZ7VD7.js";
 import {
   run
-} from "./chunk-ZO7IQJKO.js";
+} from "./chunk-7KWANSLX.js";
 import {
   command
 } from "./chunk-TXSA4Q3V.js";
@@ -15,11 +15,11 @@ import {
   pollHealth,
   readDaemonConfig,
   restartService
-} from "./chunk-ATEX3ZPG.js";
-import "./chunk-PGPLCJPK.js";
-import "./chunk-ONM2AZFL.js";
-import "./chunk-YAMO2U3N.js";
-import "./chunk-L3IV23ZG.js";
+} from "./chunk-Q2XBKQ2D.js";
+import "./chunk-3ERIL673.js";
+import "./chunk-PNV24SEP.js";
+import "./chunk-H7IYFRAL.js";
+import "./chunk-ZV7MFISX.js";
 import "./chunk-K3NQKI34.js";
 
 // src/commands/daemon-restart.ts