volute 0.44.0 → 0.45.2

package/dist/daemon.js

@@ -1,4 +1,12 @@
 #!/usr/bin/env node
+import {
+  RESTIC_INSTALL_HINT,
+  initRepo,
+  listSnapshots,
+  readBackupState,
+  resticVersion,
+  runBackup
+} from "./chunk-FXORA5JG.js";
 import {
   acceptPending,
   formatFileSize,
@@ -6,25 +14,25 @@ import {
   rejectPending,
   stageFile,
   validateFilePath
-} from "./chunk-UMI4UIJG.js";
+} from "./chunk-R77O2WMK.js";
 import {
   findOpenClawSession,
   importOpenClawConnectors,
   importPiSession,
   parseNameFromIdentity
-} from "./chunk-LAXUUY7O.js";
+} from "./chunk-A7WQZKOU.js";
 import {
   checkForUpdate,
   checkForUpdateCached,
   getCurrentVersion
-} from "./chunk-2BONPXAF.js";
+} from "./chunk-6EMWJZBK.js";
 import {
   normalizeAvatar,
   safeResolveWithinBase
-} from "./chunk-SQL7M4HJ.js";
+} from "./chunk-DRJ24GXK.js";
 import {
   isHomeOnlyArchive
-} from "./chunk-QMJJWTNL.js";
+} from "./chunk-QCN24XEN.js";
 import {
   computeTemplateHash
 } from "./chunk-QMJCNZ6C.js";
@@ -34,7 +42,7 @@ import {
   fixModelEscapes,
   getPlatformDriver,
   routeOutboundBridge
-} from "./chunk-EQZD4YU3.js";
+} from "./chunk-NYC5U6K7.js";
 import {
   getBridgeConfig,
   readBridgesConfig,
@@ -43,7 +51,7 @@ import {
   resolveChannelMapping,
   setBridgeConfig,
   setChannelMapping
-} from "./chunk-FHWUQZXE.js";
+} from "./chunk-RXEEYDIB.js";
 import {
   MindStartupError,
   RestartTracker,
@@ -63,7 +71,7 @@ import {
   ensureSystemChannel,
   formatHoldNotice,
   formatNotices,
-  generateSystemReply,
+  generateSystemFallbackReply,
   getAllDiscoveredExtensions,
   getAllDiscoveredExtensionsDetailed,
   getDeliveryManager,
@@ -99,20 +107,21 @@ import {
   requireAdminOrSystem,
   requireSelf,
   setExtensionEnabled,
+  shouldGenerateSystemFallback,
   startMindFull,
   stopMindFull,
   syncProviderToMinds,
   uninstallNpmExtension,
   writeSystemsConfig
-} from "./chunk-OMETFX5H.js";
+} from "./chunk-YT7PEESJ.js";
 import {
   loadMergedEnv,
   mindEnvPath,
   readEnv,
   sharedEnvPath,
   writeEnv
-} from "./chunk-5GT7URXJ.js";
-import "./chunk-7FT24JBQ.js";
+} from "./chunk-ZDZISKCL.js";
+import "./chunk-FR6S2KNN.js";
 import {
   applyInitFiles,
   applyTemplateHomeFiles,
@@ -141,7 +150,7 @@ import {
   syncBuiltinSkills,
   uninstallSkill,
   updateSkill
-} from "./chunk-I2Y2YHIO.js";
+} from "./chunk-7ZUB63PS.js";
 import {
   addMessage,
   createChannel,
@@ -173,23 +182,23 @@ import {
   setConversationPrivate,
   subscribe as subscribe2,
   updateChannelSettings
-} from "./chunk-FZMEVCWC.js";
+} from "./chunk-OP4JG2BS.js";
 import {
   readVoluteConfig,
   writeVoluteConfig
-} from "./chunk-CU6OFXMM.js";
+} from "./chunk-PFZBNKUH.js";
 import {
   isSandboxEnabled,
   wrapForSandbox
-} from "./chunk-3GYVW2X3.js";
+} from "./chunk-JZ62SYWR.js";
 import {
   getActiveMinds,
   onMindEvent,
   stopAll
-} from "./chunk-HVU45COX.js";
+} from "./chunk-EJVPTVTI.js";
 import {
   extractTextContent
-} from "./chunk-5AHYQHNT.js";
+} from "./chunk-4JOQZPCE.js";
 import {
   PROMPT_DEFAULTS,
   PROMPT_KEYS,
@@ -198,10 +207,10 @@ import {
   completeTurn,
   createTurn,
   getActiveTurnId,
-  getLastToolUseEventId,
   getMindPromptDefaults,
   getPrompt,
   getPromptIfCustom,
+  getToolUseEventId,
   initSummarizer,
   markErrored,
   publish as publish2,
@@ -212,8 +221,8 @@ import {
   summarizeTurn,
   takeErrored,
   trackToolUse
-} from "./chunk-NF75HPNR.js";
-import "./chunk-Q2XBKQ2D.js";
+} from "./chunk-UYLGEDVD.js";
+import "./chunk-TQJ6ZYVY.js";
 import {
   chownMindDir,
   createMindUser,
@@ -224,9 +233,10 @@ import {
   isIsolationEnabled,
   resolveVoluteBin,
   wrapForIsolation
-} from "./chunk-3ERIL673.js";
+} from "./chunk-H2X54EHC.js";
 import {
   addCustomModel,
+  aiCompleteUtility,
   buildCustomModel,
   getAiConfig,
   getAvailableModels,
@@ -245,12 +255,12 @@ import {
   setProviderRefreshHook,
   setUtilityModel,
   unqualifyModelId
-} from "./chunk-J47TIYHA.js";
+} from "./chunk-IHKGWTGT.js";
 import {
   isSetupComplete,
   readGlobalConfig,
   writeGlobalConfig
-} from "./chunk-PNV24SEP.js";
+} from "./chunk-F7H6ATM4.js";
 import {
   approveUser,
   changePassword,
@@ -269,11 +279,11 @@ import {
   syncMindProfile,
   updateUserProfile,
   verifyUser
-} from "./chunk-CYI534DJ.js";
+} from "./chunk-T6HYVHPG.js";
 import {
   broadcast,
   subscribe
-} from "./chunk-ZMIMSIIT.js";
+} from "./chunk-7C44R625.js";
 import {
   logBuffer,
   logger_default
@@ -297,6 +307,7 @@ import {
   readAllMinds,
   readRegistry,
   removeMind,
+  resolveMindDir,
   setMindRunning,
   setMindStage,
   setMindTemplate,
@@ -305,7 +316,7 @@ import {
   validateMindName,
   voluteHome,
   voluteSystemDir
-} from "./chunk-H7IYFRAL.js";
+} from "./chunk-ALKYQULU.js";
 import {
   activity,
   channels,
@@ -320,12 +331,76 @@ import {
 import "./chunk-K3NQKI34.js";
 
 // packages/daemon/src/daemon.ts
-import { randomBytes as randomBytes2 } from "crypto";
+import { randomBytes as randomBytes3 } from "crypto";
 import { chmodSync, mkdirSync as mkdirSync10, readFileSync as readFileSync10, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "fs";
 import { homedir as homedir3 } from "os";
 import { resolve as resolve16 } from "path";
 import { format } from "util";
 
+// packages/daemon/src/lib/daemon/backup-manager.ts
+import { CronExpressionParser } from "cron-parser";
+var blog = logger_default.child("backup");
+var DEFAULT_BACKUP_SCHEDULE = "0 3 * * *";
+var BackupManager = class {
+  interval = null;
+  lastFiredMinute = -1;
+  warnedUnconfigured = false;
+  start() {
+    this.interval = setInterval(() => {
+      this.tick().catch((err) => blog.error("backup tick failed", logger_default.errorData(err)));
+    }, 6e4);
+  }
+  stop() {
+    if (this.interval) clearInterval(this.interval);
+    this.interval = null;
+  }
+  /**
+   * True at most once per scheduled fire minute (records the minute it
+   * consumed), and only when backups are enabled and runnable. Not a pure
+   * predicate — a second call in the same minute returns false.
+   */
+  isDue(now = /* @__PURE__ */ new Date()) {
+    const config2 = readGlobalConfig().backup;
+    if (!config2?.enabled) return false;
+    if (!config2.repository || !config2.password) {
+      if (!this.warnedUnconfigured) {
+        blog.warn("scheduled backups are enabled but no repository is initialized \u2014 not running");
+        this.warnedUnconfigured = true;
+      }
+      return false;
+    }
+    this.warnedUnconfigured = false;
+    const cron = config2.schedule || DEFAULT_BACKUP_SCHEDULE;
+    const epochMinute = Math.floor(now.getTime() / 6e4);
+    if (epochMinute === this.lastFiredMinute) return false;
+    let prevMinute;
+    try {
+      const interval = CronExpressionParser.parse(cron, { currentDate: now });
+      prevMinute = Math.floor(interval.prev().toDate().getTime() / 6e4);
+    } catch (err) {
+      blog.warn(`invalid backup cron "${cron}"`, logger_default.errorData(err));
+      return false;
+    }
+    if (prevMinute !== epochMinute) return false;
+    this.lastFiredMinute = epochMinute;
+    return true;
+  }
+  async tick() {
+    if (!this.isDue()) return;
+    blog.info("scheduled backup starting");
+    try {
+      await runBackup();
+    } catch (err) {
+      blog.error("scheduled backup failed", logger_default.errorData(err));
+    }
+  }
+};
+var backupManager = null;
+function initBackupManager() {
+  if (!backupManager) backupManager = new BackupManager();
+  return backupManager;
+}
+
 // packages/daemon/src/lib/daemon/bridge-manager.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, unlinkSync, writeFileSync } from "fs";
@@ -394,7 +469,7 @@ function checkMissingBridgeEnv(def, env) {
 }
 
 // packages/daemon/src/lib/daemon/bridge-manager.ts
-var blog = logger_default.child("bridges");
+var blog2 = logger_default.child("bridges");
 function searchUpwards(...segments) {
   let searchDir = dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 5; i++) {
@@ -415,7 +490,7 @@ var BridgeManager = class {
     await Promise.all(
       platforms.map(
         (platform) => this.startBridge(platform, daemonPort).catch((err) => {
-          blog.warn(`failed to start bridge ${platform}`, logger_default.errorData(err));
+          blog2.warn(`failed to start bridge ${platform}`, logger_default.errorData(err));
         })
       )
     );
@@ -444,7 +519,7 @@ var BridgeManager = class {
           }
         } catch (err) {
           if (err instanceof Error && err.code !== "ESRCH") {
-            blog.warn(`failed to stop existing bridge ${platform}`, logger_default.errorData(err));
+            blog2.warn(`failed to stop existing bridge ${platform}`, logger_default.errorData(err));
           }
           res();
         }
@@ -509,24 +584,24 @@ var BridgeManager = class {
       }
       if (this.shuttingDown) return;
       if (this.stopping.has(platform)) return;
-      blog.error(`bridge ${platform} exited with code ${code}`);
-      if (lastStderr) blog.warn(`bridge ${platform} last output: ${lastStderr}`);
+      blog2.error(`bridge ${platform} exited with code ${code}`);
+      if (lastStderr) blog2.warn(`bridge ${platform} last output: ${lastStderr}`);
       const { shouldRestart, delay, attempt } = this.restartTracker.recordCrash(platform);
       if (!shouldRestart) {
-        blog.error(`bridge ${platform} crashed ${attempt} times \u2014 giving up`);
+        blog2.error(`bridge ${platform} crashed ${attempt} times \u2014 giving up`);
         return;
       }
-      blog.info(
+      blog2.info(
         `restarting bridge ${platform} \u2014 attempt ${attempt}/${this.restartTracker.maxRestartAttempts}, in ${delay}ms`
       );
       setTimeout(() => {
         if (this.shuttingDown || this.stopping.has(platform)) return;
         this.startBridge(platform, daemonPort).catch((err) => {
-          blog.error(`failed to restart bridge ${platform}`, logger_default.errorData(err));
+          blog2.error(`failed to restart bridge ${platform}`, logger_default.errorData(err));
         });
       }, delay);
     });
-    blog.info(`started bridge ${platform}`);
+    blog2.info(`started bridge ${platform}`);
   }
   async stopBridge(platform) {
     const tracked = this.bridges.get(platform);
@@ -543,7 +618,7 @@ var BridgeManager = class {
         }
       } catch (err) {
         if (err instanceof Error && err.code !== "ESRCH") {
-          blog.warn(`failed to stop bridge ${platform}`, logger_default.errorData(err));
+          blog2.warn(`failed to stop bridge ${platform}`, logger_default.errorData(err));
         }
         resolve17();
       }
@@ -564,9 +639,9 @@ var BridgeManager = class {
     try {
       this.removeBridgePid(platform);
     } catch (err) {
-      blog.warn(`failed to remove PID file for bridge ${platform}`, logger_default.errorData(err));
+      blog2.warn(`failed to remove PID file for bridge ${platform}`, logger_default.errorData(err));
     }
-    blog.info(`stopped bridge ${platform}`);
+    blog2.info(`stopped bridge ${platform}`);
   }
   async stopAll() {
     this.shuttingDown = true;
@@ -596,7 +671,7 @@ var BridgeManager = class {
       unlinkSync(this.bridgePidPath(platform));
     } catch (err) {
       if (err instanceof Error && err.code !== "ENOENT") {
-        blog.warn(`failed to remove PID file for bridge ${platform}`, logger_default.errorData(err));
+        blog2.warn(`failed to remove PID file for bridge ${platform}`, logger_default.errorData(err));
       }
     }
   }
@@ -614,18 +689,18 @@ var BridgeManager = class {
           } catch {
           }
         }
-        blog.warn(`killed orphan bridge ${platform} (pid ${pid})`);
+        blog2.warn(`killed orphan bridge ${platform} (pid ${pid})`);
       }
     } catch (err) {
       if (err instanceof Error && err.code !== "ESRCH") {
-        blog.debug(`orphan bridge ${platform} cleanup: ${err}`);
+        blog2.debug(`orphan bridge ${platform} cleanup: ${err}`);
       }
     }
     try {
       unlinkSync(pidPath);
     } catch (err) {
       if (err instanceof Error && err.code !== "ENOENT") {
-        blog.warn(`failed to clean up PID file for orphan bridge ${platform}`, logger_default.errorData(err));
+        blog2.warn(`failed to clean up PID file for orphan bridge ${platform}`, logger_default.errorData(err));
       }
     }
   }
@@ -1400,10 +1475,10 @@ function getCachedApiKey(provider) {
 var keyRefreshTimer = null;
 var slog = logger_default.child("ai-keys");
 var oauthHealth = /* @__PURE__ */ new Map();
-function needsRefresh(oauth) {
+function needsRefresh(oauth, now = Date.now()) {
   const expires = oauth.expires;
-  if (!expires || Date.now() >= expires) return true;
-  return expires - Date.now() < 15 * 60 * 1e3;
+  if (!expires || now >= expires) return true;
+  return expires - now < 15 * 60 * 1e3;
 }
 async function refreshApiKeyCache() {
   const ai = getAiConfig();
@@ -1457,7 +1532,7 @@ function stopApiKeyRefresh() {
 var system_default = app;
 
 // packages/daemon/src/web/app.ts
-import { Hono as Hono28 } from "hono";
+import { Hono as Hono29 } from "hono";
 import { bodyLimit } from "hono/body-limit";
 import { cors } from "hono/cors";
 import { csrf } from "hono/csrf";
@@ -1824,10 +1899,115 @@ var app3 = new Hono3().post("/register", zValidator2("json", credentialsSchema),
 }).route("/", admin).route("/", authenticated);
 var auth_default = app3;
 
-// packages/daemon/src/web/api/bridges.ts
+// packages/daemon/src/web/api/backup.ts
+import { randomBytes } from "crypto";
 import { zValidator as zValidator3 } from "@hono/zod-validator";
+import { CronExpressionParser as CronExpressionParser2 } from "cron-parser";
 import { Hono as Hono4 } from "hono";
 import { z as z3 } from "zod";
+function redactedConfig() {
+  const backup2 = readGlobalConfig().backup ?? {};
+  return {
+    repository: backup2.repository,
+    schedule: backup2.schedule ?? DEFAULT_BACKUP_SCHEDULE,
+    enabled: backup2.enabled,
+    keep: backup2.keep,
+    includeSessions: backup2.includeSessions,
+    hasPassword: !!backup2.password,
+    envKeys: Object.keys(backup2.env ?? {})
+  };
+}
+var configSchema = z3.object({
+  repository: z3.string().optional(),
+  schedule: z3.string().refine(
+    (cron) => {
+      try {
+        CronExpressionParser2.parse(cron);
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    { message: "Invalid cron expression" }
+  ).optional(),
+  enabled: z3.boolean().optional(),
+  keep: z3.object({
+    daily: z3.number().int().min(0).optional(),
+    weekly: z3.number().int().min(0).optional(),
+    monthly: z3.number().int().min(0).optional()
+  }).refine((keep) => !(keep.daily === 0 && keep.weekly === 0 && keep.monthly === 0), {
+    message: "Retention cannot be zero everywhere \u2014 prune would delete every snapshot"
+  }).optional(),
+  includeSessions: z3.boolean().optional(),
+  password: z3.string().optional(),
+  env: z3.record(z3.string(), z3.string()).optional()
+});
+var backup = new Hono4().get("/config", requireAdmin, (c) => c.json(redactedConfig())).put("/config", requireAdmin, zValidator3("json", configSchema), (c) => {
+  const updates = c.req.valid("json");
+  const config2 = readGlobalConfig();
+  const current = config2.backup ?? {};
+  config2.backup = {
+    ...current,
+    ...updates,
+    // Empty-string password means "keep existing" so the UI can save
+    // settings without re-entering the passphrase.
+    password: updates.password || current.password,
+    env: updates.env ?? current.env
+  };
+  writeGlobalConfig(config2);
+  return c.json(redactedConfig());
+}).post("/init", requireAdmin, async (c) => {
+  const config2 = readGlobalConfig();
+  if (!config2.backup?.repository) {
+    return c.json({ error: "Backup repository is not configured" }, 400);
+  }
+  let generatedPassword = null;
+  if (!config2.backup.password) {
+    generatedPassword = randomBytes(32).toString("base64url");
+    config2.backup.password = generatedPassword;
+  }
+  try {
+    await initRepo(config2.backup);
+  } catch (err) {
+    const stderr = err.stderr;
+    const detail = err instanceof Error ? err.message : String(err);
+    return c.json({ error: stderr?.trim() || detail }, 500);
+  }
+  if (generatedPassword) writeGlobalConfig(config2);
+  return c.json({ ok: true, password: generatedPassword });
+}).post("/run", requireAdmin, async (c) => {
+  try {
+    const summary = await runBackup();
+    return c.json(summary);
+  } catch (err) {
+    const stderr = err.stderr;
+    const detail = err instanceof Error ? err.message : String(err);
+    return c.json({ error: stderr?.trim() || detail }, 500);
+  }
+}).get("/snapshots", requireAdmin, async (c) => {
+  try {
+    return c.json(await listSnapshots());
+  } catch (err) {
+    const stderr = err.stderr;
+    const detail = err instanceof Error ? err.message : String(err);
+    return c.json({ error: stderr?.trim() || detail }, 500);
+  }
+}).get("/status", requireAdmin, async (c) => {
+  const version = await resticVersion();
+  return c.json({
+    resticInstalled: version !== null,
+    resticVersion: version,
+    installHint: version === null ? RESTIC_INSTALL_HINT : null,
+    config: redactedConfig(),
+    state: readBackupState()
+  });
+});
+var backup_default = backup;
+
+// packages/daemon/src/web/api/bridges.ts
+import { zValidator as zValidator4 } from "@hono/zod-validator";
+import { Hono as Hono5 } from "hono";
+import { z as z4 } from "zod";
 
 // packages/daemon/src/lib/chat/puppets.ts
 import { and as and2, eq as eq2 } from "drizzle-orm";
@@ -1916,27 +2096,27 @@ async function fanOutToMinds(opts) {
 }
 
 // packages/daemon/src/web/api/bridges.ts
-var inboundSchema = z3.object({
-  content: z3.array(
-    z3.union([
-      z3.object({ type: z3.literal("text"), text: z3.string() }),
-      z3.object({ type: z3.literal("image"), media_type: z3.string(), data: z3.string() })
+var inboundSchema = z4.object({
+  content: z4.array(
+    z4.union([
+      z4.object({ type: z4.literal("text"), text: z4.string() }),
+      z4.object({ type: z4.literal("image"), media_type: z4.string(), data: z4.string() })
     ])
   ).min(1),
-  platformUserId: z3.string(),
-  displayName: z3.string(),
-  externalChannel: z3.string(),
-  isDM: z3.boolean(),
-  targetMind: z3.string().optional()
+  platformUserId: z4.string(),
+  displayName: z4.string(),
+  externalChannel: z4.string(),
+  isDM: z4.boolean(),
+  targetMind: z4.string().optional()
 });
-var mappingSchema = z3.object({
-  externalChannel: z3.string(),
-  voluteChannel: z3.string()
+var mappingSchema = z4.object({
+  externalChannel: z4.string(),
+  voluteChannel: z4.string()
 });
-var enableSchema = z3.object({
-  defaultMind: z3.string()
+var enableSchema = z4.object({
+  defaultMind: z4.string()
 });
-var app4 = new Hono4().post("/:platform/inbound", zValidator3("json", inboundSchema), async (c) => {
+var app4 = new Hono5().post("/:platform/inbound", zValidator4("json", inboundSchema), async (c) => {
   const user = c.get("user");
   if (user.id !== 0) return c.json({ error: "Bridge inbound requires daemon token" }, 403);
   const platform = c.req.param("platform");
@@ -1988,7 +2168,7 @@ var app4 = new Hono4().post("/:platform/inbound", zValidator3("json", inboundSch
   }
   const participants = await getParticipants(channel.id);
   if (!participants.some((p) => p.userId === puppet.id)) {
-    const { addParticipant } = await import("./conversations-WAJYZKOC.js");
+    const { addParticipant } = await import("./conversations-JZTD6KLR.js");
     await addParticipant(channel.id, puppet.id);
   }
   const contentBlocks = body.content;
@@ -2018,7 +2198,7 @@ var app4 = new Hono4().post("/:platform/inbound", zValidator3("json", inboundSch
     };
   });
   return c.json(bridges);
-}).post("/:platform", requireAdmin, zValidator3("json", enableSchema), async (c) => {
+}).post("/:platform", requireAdmin, zValidator4("json", enableSchema), async (c) => {
   const platform = c.req.param("platform");
   const body = c.req.valid("json");
   const def = getBridgeDef(platform);
@@ -2057,7 +2237,7 @@ var app4 = new Hono4().post("/:platform/inbound", zValidator3("json", inboundSch
   await manager.stopBridge(platform);
   removeBridgeConfig(platform);
   return c.json({ ok: true });
-}).put("/:platform/mappings", requireAdmin, zValidator3("json", mappingSchema), (c) => {
+}).put("/:platform/mappings", requireAdmin, zValidator4("json", mappingSchema), (c) => {
   const platform = c.req.param("platform");
   const body = c.req.valid("json");
   try {
@@ -2088,11 +2268,11 @@ async function fanOutToBridgedMinds(opts) {
 var bridges_default = app4;
 
 // packages/daemon/src/web/api/channels.ts
-import { Hono as Hono5 } from "hono";
+import { Hono as Hono6 } from "hono";
 function buildEnv(name) {
   return { ...loadMergedEnv(name), VOLUTE_MIND: name, VOLUTE_MIND_DIR: mindDir(name) };
 }
-var app5 = new Hono5().post("/:name/channels/create", requireSelf(), async (c) => {
+var app5 = new Hono6().post("/:name/channels/create", requireSelf(), async (c) => {
   const name = c.req.param("name");
   if (!await findMind(name)) return c.json({ error: "Mind not found" }, 404);
   const {
@@ -2117,8 +2297,8 @@ var app5 = new Hono5().post("/:name/channels/create", requireSelf(), async (c) =
 var channels_default = app5;
 
 // packages/daemon/src/web/api/config.ts
-import { Hono as Hono6 } from "hono";
-var config = new Hono6();
+import { Hono as Hono7 } from "hono";
+var config = new Hono7();
 config.get("/models", async (c) => {
   const enabled = new Set(getEnabledModels());
   const all = await getAvailableModels();
@@ -2145,8 +2325,8 @@ config.get("/status", (c) => {
 var config_default = config;
 
 // packages/daemon/src/web/api/env.ts
-import { Hono as Hono7 } from "hono";
-var app6 = new Hono7().get("/:name/env", requireSelf(), async (c) => {
+import { Hono as Hono8 } from "hono";
+var app6 = new Hono8().get("/:name/env", requireSelf(), async (c) => {
   const name = c.req.param("name");
   if (!await findMind(name)) return c.json({ error: "Mind not found" }, 404);
   const shared = readEnv(sharedEnvPath());
@@ -2189,7 +2369,7 @@ var app6 = new Hono7().get("/:name/env", requireSelf(), async (c) => {
   writeEnv(path, env);
   return c.json({ ok: true });
 });
-var sharedEnvApp = new Hono7().get("/", requireAdmin, (c) => {
+var sharedEnvApp = new Hono8().get("/", requireAdmin, (c) => {
   return c.json(readEnv(sharedEnvPath()));
 }).put("/:key", requireAdmin, async (c) => {
   const key = c.req.param("key");
@@ -2219,8 +2399,8 @@ var sharedEnvApp = new Hono7().get("/", requireAdmin, (c) => {
 var env_default = app6;
 
 // packages/daemon/src/web/api/extensions.ts
-import { Hono as Hono8 } from "hono";
-var app7 = new Hono8().get("/", (c) => {
+import { Hono as Hono9 } from "hono";
+var app7 = new Hono9().get("/", (c) => {
   return c.json(getLoadedExtensions());
 }).get("/all", (c) => {
   const detail = c.req.query("detail") === "true";
@@ -2267,18 +2447,18 @@ var extensions_default = app7;
 // packages/daemon/src/web/api/file-sharing.ts
 import { readFileSync as readFileSync4, statSync as statSync2 } from "fs";
 import { resolve as resolve4 } from "path";
-import { Hono as Hono9 } from "hono";
+import { Hono as Hono10 } from "hono";
 async function notifyMind(mindName, message) {
   const entry = await findMind(mindName);
   if (!entry) return;
   try {
-    const { sendSystemMessage } = await import("./system-chat-4DQZOEZI.js");
+    const { sendSystemMessage } = await import("./system-chat-XOALE2RD.js");
     await sendSystemMessage(mindName, message);
   } catch (err) {
     logger_default.warn(`[file-sharing] notify mind ${mindName} failed`, logger_default.errorData(err));
   }
 }
-var app8 = new Hono9().post("/:name/files/send", requireSelf(), async (c) => {
+var app8 = new Hono10().post("/:name/files/send", requireSelf(), async (c) => {
   const senderName = c.req.param("name");
   const senderEntry = await findMind(senderName);
   if (!senderEntry) return c.json({ error: "Sender mind not found" }, 404);
@@ -2398,7 +2578,7 @@ var file_sharing_default = app8;
 import { mkdirSync as mkdirSync3, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { readdir, readFile, realpath, stat } from "fs/promises";
 import { extname as extname2, resolve as resolve5 } from "path";
-import { Hono as Hono10 } from "hono";
+import { Hono as Hono11 } from "hono";
 var AVATAR_MIME2 = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -2425,7 +2605,7 @@ var MIME_TYPES = {
   ".woff": "font/woff",
   ".woff2": "font/woff2"
 };
-var app9 = new Hono10().post("/:name/avatar", requireSelf(), async (c) => {
+var app9 = new Hono11().post("/:name/avatar", requireSelf(), async (c) => {
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -2570,7 +2750,7 @@ var files_default = app9;
 
 // packages/daemon/src/web/api/history.ts
 import { and as and3, desc as desc2, eq as eq3, gte, inArray, sql } from "drizzle-orm";
-import { Hono as Hono11 } from "hono";
+import { Hono as Hono12 } from "hono";
 async function resolveMindFilter(c) {
   const user = c.get("user");
   if (user.role === "admin" || user.role === "system") {
@@ -2578,7 +2758,7 @@ async function resolveMindFilter(c) {
   }
   return getBaseName(user.username);
 }
-var history = new Hono11().get("/turns", async (c) => {
+var history = new Hono12().get("/turns", async (c) => {
   const mindFilter = await resolveMindFilter(c);
   const turnIdFilter = c.req.query("turnId");
   const turnIdsFilter = c.req.query("turnIds");
@@ -2969,7 +3149,7 @@ var history = new Hono11().get("/turns", async (c) => {
 var history_default = history;
 
 // packages/daemon/src/web/api/keys.ts
-import { Hono as Hono12 } from "hono";
+import { Hono as Hono13 } from "hono";
 
 // packages/daemon/src/lib/mind/identity.ts
 import { createHash, generateKeyPairSync, sign, verify } from "crypto";
@@ -3029,7 +3209,7 @@ async function publishPublicKey(mindName, publicKeyPem) {
 }
 
 // packages/daemon/src/web/api/keys.ts
-var app10 = new Hono12().get("/:fingerprint", async (c) => {
+var app10 = new Hono13().get("/:fingerprint", async (c) => {
   const fingerprint = c.req.param("fingerprint");
   for (const entry of await readRegistry()) {
     try {
@@ -3049,9 +3229,9 @@ var keys_default = app10;
 import { spawn as spawn2 } from "child_process";
 import { existsSync as existsSync5 } from "fs";
 import { resolve as resolve7 } from "path";
-import { Hono as Hono13 } from "hono";
+import { Hono as Hono14 } from "hono";
 import { streamSSE as streamSSE3 } from "hono/streaming";
-var app11 = new Hono13().get("/:name/logs", requireSelf(), async (c) => {
+var app11 = new Hono14().get("/:name/logs", requireSelf(), async (c) => {
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -3102,10 +3282,10 @@ var app11 = new Hono13().get("/:name/logs", requireSelf(), async (c) => {
 var logs_default = app11;
 
 // packages/daemon/src/web/api/mind-skills.ts
-import { zValidator as zValidator4 } from "@hono/zod-validator";
-import { Hono as Hono14 } from "hono";
-import { z as z4 } from "zod";
-var app12 = new Hono14().get("/:name/skills", async (c) => {
+import { zValidator as zValidator5 } from "@hono/zod-validator";
+import { Hono as Hono15 } from "hono";
+import { z as z5 } from "zod";
+var app12 = new Hono15().get("/:name/skills", async (c) => {
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -3115,7 +3295,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
 }).post(
   "/:name/skills/install",
   requireSelf(),
-  zValidator4("json", z4.object({ skillId: z4.string() })),
+  zValidator5("json", z5.object({ skillId: z5.string() })),
   async (c) => {
     const name = c.req.param("name");
     const entry = await findMind(name);
@@ -3124,6 +3304,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
     const dir = entry.dir ?? mindDir(name);
     try {
       const result = await installSkill(name, dir, skillId);
+      await chownMindDir(dir, name);
       return c.json({ ok: true, ...result });
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
@@ -3133,7 +3314,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
 ).post(
   "/:name/skills/update",
   requireSelf(),
-  zValidator4("json", z4.object({ skillId: z4.string() })),
+  zValidator5("json", z5.object({ skillId: z5.string() })),
   async (c) => {
     const name = c.req.param("name");
     const entry = await findMind(name);
@@ -3142,6 +3323,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
     const dir = entry.dir ?? mindDir(name);
     try {
       const result = await updateSkill(name, dir, skillId);
+      await chownMindDir(dir, name);
       return c.json(result);
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
@@ -3151,7 +3333,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
 ).post(
   "/:name/skills/publish",
   requireSelf(),
-  zValidator4("json", z4.object({ skillId: z4.string() })),
+  zValidator5("json", z5.object({ skillId: z5.string() })),
   async (c) => {
     const name = c.req.param("name");
     const entry = await findMind(name);
@@ -3174,6 +3356,7 @@ var app12 = new Hono14().get("/:name/skills", async (c) => {
   const dir = entry.dir ?? mindDir(name);
   try {
     await uninstallSkill(name, dir, skillName);
+    await chownMindDir(dir, name);
   } catch (e) {
     const msg = e instanceof Error ? e.message : String(e);
     return c.json({ error: msg }, 400);
@@ -3192,11 +3375,11 @@ import {
   rmSync as rmSync4,
   writeFileSync as writeFileSync7
 } from "fs";
-import { basename, resolve as resolve10 } from "path";
-import { zValidator as zValidator5 } from "@hono/zod-validator";
+import { relative, resolve as resolve10 } from "path";
+import { zValidator as zValidator6 } from "@hono/zod-validator";
 import { and as and5, desc as desc4, eq as eq5, sql as sql3 } from "drizzle-orm";
-import { Hono as Hono15 } from "hono";
-import { z as z5 } from "zod";
+import { Hono as Hono16 } from "hono";
+import { z as z6 } from "zod";
 
 // packages/daemon/src/lib/daemon/turn-lifecycle.ts
 import { and as and4, desc as desc3, eq as eq4, inArray as inArray2, sql as sql2 } from "drizzle-orm";
@@ -3313,13 +3496,18 @@ async function handleMindEvent(mind, event) {
     }).returning({ id: mindHistory.id });
     insertedId = result[0]?.id;
   } catch (err) {
-    llog.error(`failed to persist event for ${mind}`, logger_default.errorData(err));
+    llog.error(
+      `HISTORY GAP: failed to persist ${event.type} event for ${mind}${event.session ? ` (session ${event.session})` : ""}${event.channel ? ` on ${event.channel}` : ""}`,
+      logger_default.errorData(err)
+    );
   }
   if (event.type === "tool_use" && insertedId != null) {
-    trackToolUse(mind, event.session, insertedId);
+    const toolUseId = typeof event.metadata?.id === "string" ? event.metadata.id : void 0;
+    trackToolUse(mind, event.session, insertedId, toolUseId);
   }
   if (event.type === "tool_result" && turnId && event.content) {
-    const toolUseEventId = getLastToolUseEventId(mind, event.session);
+    const resultToolUseId = typeof event.metadata?.tool_use_id === "string" ? event.metadata.tool_use_id : void 0;
+    const toolUseEventId = getToolUseEventId(mind, event.session, resultToolUseId);
     try {
       await linkToolResultToTurn(mind, turnId, event.content, toolUseEventId);
     } catch (err) {
@@ -3382,7 +3570,7 @@ async function handleMindEvent(mind, event) {
         session: event.session,
         kind: "budget",
         reason: "token_budget",
-        detail: "You've reached your token budget for this period. Further activity may be paused until the budget resets \u2014 wrap up or prioritize accordingly."
+        detail: "You've used your token budget for this period, so your activity may pause until it resets. This isn't anything you did wrong \u2014 it's just a rest imposed by the budget. Anything that arrives while you're paused will be kept for you. If you're mid-thought, this turn is a good moment to jot it down."
       });
     }
   }
@@ -3413,35 +3601,50 @@ async function completeTurnAndSummarize(mind, event, insertedId) {
 // packages/daemon/src/lib/mind/consolidate.ts
 import { readdirSync, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
 import { resolve as resolve8 } from "path";
-async function consolidateMemory(mindDir2) {
+var cLog = logger_default.child("consolidate");
+var MAX_CONSOLIDATION_INPUT_CHARS = 2e5;
+function readDailyLogs(memoryDir) {
+  let files;
+  try {
+    files = readdirSync(memoryDir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).sort();
+  } catch {
+    return [];
+  }
+  const logs = [];
+  for (const filename of files) {
+    const date = filename.replace(".md", "");
+    const content = readFileSync6(resolve8(memoryDir, filename), "utf-8").trim();
+    if (content) logs.push(`### ${date}
+
+${content}`);
+  }
+  return logs;
+}
+function boundLogText(logs, maxChars = MAX_CONSOLIDATION_INPUT_CHARS) {
+  const kept = [];
+  let total = 0;
+  for (let i = logs.length - 1; i >= 0; i--) {
+    const len = logs[i].length + (kept.length > 0 ? 2 : 0);
+    if (total + len > maxChars) break;
+    kept.unshift(logs[i]);
+    total += len;
+  }
+  if (kept.length === 0 && logs.length > 0) {
+    return logs[logs.length - 1].slice(-maxChars);
+  }
+  return kept.join("\n\n");
+}
+async function consolidateMemory(mindDir2, complete = aiCompleteUtility) {
   const soulPath = resolve8(mindDir2, "home/SOUL.md");
   const memoryPath = resolve8(mindDir2, "home/MEMORY.md");
   const memoryDir = resolve8(mindDir2, "home/memory");
   const soul = readFileSync6(soulPath, "utf-8");
-  const logs = [];
-  try {
-    const files = readdirSync(memoryDir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).sort();
-    for (const filename of files) {
-      const date = filename.replace(".md", "");
-      const content2 = readFileSync6(resolve8(memoryDir, filename), "utf-8").trim();
-      if (content2) {
-        logs.push(`### ${date}
-
-${content2}`);
-      }
-    }
-  } catch {
-  }
+  const logs = readDailyLogs(memoryDir);
   if (logs.length === 0) {
-    console.log("No daily logs found.");
-    return;
-  }
-  const apiKey = process.env.ANTHROPIC_API_KEY;
-  if (!apiKey) {
-    console.error("ANTHROPIC_API_KEY not set, skipping memory consolidation.");
+    cLog.info("No daily logs found; skipping memory consolidation.");
     return;
   }
-  console.log("Consolidating memory from daily logs...");
+  cLog.info("Consolidating memory from daily logs...");
   const userMessage = [
     "You have daily logs from a previous environment but no long-term memory file yet.",
     "Please review the daily logs below and produce consolidated MEMORY.md content.",
@@ -3449,40 +3652,20 @@ ${content2}`);
     "",
     "## Daily logs",
     "",
-    logs.join("\n\n")
+    boundLogText(logs)
   ].join("\n");
-  const res = await fetch("https://api.anthropic.com/v1/messages", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "x-api-key": apiKey,
-      "anthropic-version": "2023-06-01"
-    },
-    body: JSON.stringify({
-      model: "claude-sonnet-4-20250514",
-      max_tokens: 4096,
-      system: soul,
-      messages: [{ role: "user", content: userMessage }]
-    })
-  });
-  if (!res.ok) {
-    const body = await res.text();
-    console.error(`Anthropic API error (${res.status}): ${body}`);
-    return;
-  }
-  const data = await res.json();
-  const content = data.content.filter((b) => b.type === "text" && b.text).map((b) => b.text).join("").trim();
+  const content = (await complete(soul, userMessage))?.trim();
   if (content) {
     writeFileSync5(memoryPath, `${content}
 `);
-    console.log("MEMORY.md created successfully.");
+    cLog.info("MEMORY.md created successfully.");
   } else {
-    console.warn("Warning: No content produced.");
+    cLog.warn("No content produced; skipping memory consolidation.");
   }
 }
 
 // packages/daemon/src/lib/mind/last-known-good.ts
-import { randomBytes } from "crypto";
+import { randomBytes as randomBytes2 } from "crypto";
 var glog = logger_default.child("last-known-good");
 async function hasSrcChanges(dir, mindName) {
   const status = (await gitExec(["status", "--porcelain", "--", "src"], { cwd: dir, mindName })).trim();
@@ -3491,7 +3674,7 @@ async function hasSrcChanges(dir, mindName) {
 async function rollbackSrcChanges(dir, mindName) {
   if (!await hasSrcChanges(dir, mindName)) return { parked: false };
   const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const branch = `broken/${ts}-${randomBytes(4).toString("hex")}`;
+  const branch = `broken/${ts}-${randomBytes2(4).toString("hex")}`;
   const opts = { cwd: dir, mindName };
   await gitExec(["add", "--", "src"], opts);
   await gitExec(
@@ -3524,7 +3707,7 @@ async function cleanupVariant(variantName, projectRoot, variantPath, opts) {
       logger_default.warn(`failed to stop variant ${variantName}`, logger_default.errorData(err));
     }
   }
-  const { findMind: findMind2 } = await import("./registry-NUJAGLQJ.js");
+  const { findMind: findMind2 } = await import("./registry-OUZBZ3Q4.js");
   const variantEntry = await findMind2(variantName);
   const branchName = variantEntry?.branch ?? variantName;
   if (existsSync6(variantPath)) {
@@ -3753,7 +3936,7 @@ async function getMindStatus(name, port, registryRunning) {
   const manager = getMindManager();
   let status = "stopped";
   try {
-    const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+    const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
     if (getSleepManagerIfReady2()?.isSleeping(name)) {
       status = "sleeping";
     }
@@ -4179,15 +4362,15 @@ function importSessionsFromArchive(dest, tempDir) {
     logger_default.error("Failed to import sessions from archive", logger_default.errorData(err));
   }
 }
-var createMindSchema = z5.object({
-  name: z5.string(),
-  template: z5.string().optional(),
-  stage: z5.enum(["seed", "sprouted"]).optional(),
-  description: z5.string().optional(),
-  model: z5.string().optional(),
-  seedSoul: z5.string().optional(),
-  skills: z5.array(z5.string()).optional(),
-  createdBy: z5.string().optional()
+var createMindSchema = z6.object({
+  name: z6.string(),
+  template: z6.string().optional(),
+  stage: z6.enum(["seed", "sprouted"]).optional(),
+  description: z6.string().optional(),
+  model: z6.string().optional(),
+  seedSoul: z6.string().optional(),
+  skills: z6.array(z6.string()).optional(),
+  createdBy: z6.string().optional()
 });
 function formatTimeAgo(date) {
   const seconds = Math.floor((Date.now() - date.getTime()) / 1e3);
@@ -4231,7 +4414,7 @@ async function proxyToMind(c, path) {
     return c.json({ error: "Failed to reach mind" }, 503);
   }
 }
-var app13 = new Hono15().post("/", requireAdminOrSystem, zValidator5("json", createMindSchema), async (c) => {
+var app13 = new Hono16().post("/", requireAdminOrSystem, zValidator6("json", createMindSchema), async (c) => {
   const body = c.req.valid("json");
   const { name } = body;
   const template = body.template ?? await resolveTemplate(body.model);
@@ -4248,7 +4431,7 @@ var app13 = new Hono15().post("/", requireAdminOrSystem, zValidator5("json", cre
     applyInitFiles(dest);
     const { publicKeyPem } = generateIdentity(dest);
     {
-      const { readGlobalConfig: readGlobal } = await import("./setup-MLRKNP7Y.js");
+      const { readGlobalConfig: readGlobal } = await import("./setup-Y2EJI3GG.js");
       const mindDefaults = readGlobal().mindDefaults;
       const config2 = readVoluteConfig(dest);
       if (!config2) throw new Error("Failed to read volute.json after identity generation");
@@ -4328,7 +4511,6 @@ var app13 = new Hono15().post("/", requireAdminOrSystem, zValidator5("json", cre
       rmSync4(resolve10(dest, ".git"), { recursive: true, force: true });
       gitWarning = "Git setup failed \u2014 variants and upgrades won't be available until git is initialized.";
     }
-    await chownMindDir(dest, name);
     if (body.stage === "seed") {
       const descLine = body.description ? `
 The human who planted you described you as: "${body.description}"
@@ -4339,7 +4521,7 @@ The human who planted you described you as: "${body.description}"
     }
     let skillSet = body.skills ?? (body.stage === "seed" ? SEED_SKILLS : getStandardSkillsWithExtensions());
     if (body.stage === "seed" && !body.skills) {
-      const { isImagegenEnabled } = await import("./setup-MLRKNP7Y.js");
+      const { isImagegenEnabled } = await import("./setup-Y2EJI3GG.js");
       if (isImagegenEnabled()) {
         skillSet = [...skillSet, "imagegen"];
       }
@@ -4357,7 +4539,7 @@ The human who planted you described you as: "${body.description}"
       try {
         const spiritEntry = await findMind("volute");
         if (spiritEntry) {
-          const { spiritDir } = await import("./spirit-IK5OYWMV.js");
+          const { spiritDir } = await import("./spirit-DBTIW7P4.js");
           const sDir = spiritEntry.dir ?? spiritDir();
           const spiritConfig = readVoluteConfig(sDir) ?? {};
           const schedules = spiritConfig.schedules ?? [];
@@ -4372,7 +4554,7 @@ The human who planted you described you as: "${body.description}"
             });
             spiritConfig.schedules = schedules;
             writeVoluteConfig(sDir, spiritConfig);
-            const { getScheduler: getScheduler2 } = await import("./scheduler-CXWQ6Z4E.js");
+            const { getScheduler: getScheduler2 } = await import("./scheduler-P6DXLLXI.js");
             getScheduler2().loadSchedules("volute", sDir);
           }
         }
@@ -4390,6 +4572,7 @@ The human who planted you described you as: "${body.description}"
         writeFileSync7(resolve10(dest, "home/MEMORY.md"), customMemory);
       }
     }
+    await chownMindDir(dest, name);
     publishPublicKey(name, publicKeyPem).catch(
       (err) => logger_default.warn(`failed to publish key for ${name}`, { error: err.message })
     );
@@ -4637,7 +4820,7 @@ ${user.trimEnd()}
   const manager = getMindManager();
   try {
     if (context?.type === "reload") {
-      const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+      const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
       const sleepState = getSleepManagerIfReady2()?.getState(name);
       if (sleepState?.sleeping) {
         logger_default.info(`skipping reload for ${name} during sleep \u2014 will apply on next wake`);
@@ -4764,7 +4947,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
   const sm = getSleepManagerIfReady2();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   return c.json(sm.getState(name));
@@ -4772,7 +4955,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
   const sm = getSleepManagerIfReady2();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   if (sm.isSleeping(name)) return c.json({ error: "Mind is already sleeping" }, 409);
@@ -4792,7 +4975,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
   const sm = getSleepManagerIfReady2();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   const sleepState = sm.getState(name);
@@ -4807,7 +4990,7 @@ ${user.trimEnd()}
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
-  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HINI6Y46.js");
+  const { getSleepManagerIfReady: getSleepManagerIfReady2 } = await import("./sleep-manager-HCUH4PM4.js");
   const sm = getSleepManagerIfReady2();
   if (!sm) return c.json({ error: "Sleep manager not initialized" }, 503);
   const flushed = await sm.flushQueuedMessages(name);
@@ -4822,10 +5005,20 @@ ${user.trimEnd()}
   const profile = config2.profile ?? {};
   if (body.displayName !== void 0) profile.displayName = body.displayName;
   if (body.description !== void 0) profile.description = body.description;
-  if (body.avatar !== void 0) profile.avatar = basename(body.avatar);
+  if (body.avatar !== void 0) {
+    const homeDir = resolve10(dir, "home");
+    const avatarPath = safeResolveWithinBase(homeDir, body.avatar);
+    if (!avatarPath) {
+      return c.json({ error: "Avatar path must be inside the mind's home directory" }, 400);
+    }
+    if (!existsSync7(avatarPath)) {
+      return c.json({ error: `Avatar file not found: ${relative(homeDir, avatarPath)}` }, 400);
+    }
+    profile.avatar = relative(homeDir, avatarPath);
+  }
   config2.profile = profile;
   writeVoluteConfig(dir, config2);
-  const { syncMindProfile: syncMindProfile2 } = await import("./auth-FRZJVQCS.js");
+  const { syncMindProfile: syncMindProfile2 } = await import("./auth-FLAEXXZK.js");
   await syncMindProfile2(name, profile);
   broadcast({ type: "profile_updated", mind: name, summary: `${name} profile updated` });
   return c.json({ ok: true });
@@ -4872,7 +5065,7 @@ ${user.trimEnd()}
   const config2 = readVoluteConfig(dir);
   const displayNameSet = !!config2?.profile?.displayName;
   const avatarSet = !!config2?.profile?.avatar;
-  const { isImagegenEnabled } = await import("./setup-MLRKNP7Y.js");
+  const { isImagegenEnabled } = await import("./setup-Y2EJI3GG.js");
   const imagegenEnabled = isImagegenEnabled();
   const done = [];
   const remaining = [];
@@ -4910,7 +5103,7 @@ ${user.trimEnd()}
   try {
     const spiritEntry = await findMind("volute");
     if (spiritEntry) {
-      const { spiritDir } = await import("./spirit-IK5OYWMV.js");
+      const { spiritDir } = await import("./spirit-DBTIW7P4.js");
       const sDir = spiritEntry.dir ?? spiritDir();
       const spiritConfig = readVoluteConfig(sDir);
       if (spiritConfig?.schedules) {
@@ -4918,7 +5111,7 @@ ${user.trimEnd()}
         spiritConfig.schedules = spiritConfig.schedules.filter((s) => s.id !== nurtureId);
         if (spiritConfig.schedules.length === 0) spiritConfig.schedules = void 0;
         writeVoluteConfig(sDir, spiritConfig);
-        const { getScheduler: getScheduler2 } = await import("./scheduler-CXWQ6Z4E.js");
+        const { getScheduler: getScheduler2 } = await import("./scheduler-P6DXLLXI.js");
         getScheduler2().loadSchedules("volute", sDir);
       }
     }
@@ -5303,16 +5496,16 @@ ${user.trimEnd()}
 }).put(
   "/:name/config",
   requireSelf(),
-  zValidator5(
+  zValidator6(
     "json",
-    z5.object({
-      model: z5.string().optional(),
-      thinkingLevel: z5.enum(["off", "minimal", "low", "medium", "high", "xhigh"]).optional(),
-      maxThinkingTokens: z5.number().int().positive().nullable().optional(),
-      tokenBudget: z5.number().int().positive().nullable().optional(),
-      tokenBudgetPeriodMinutes: z5.number().int().positive().nullable().optional(),
-      compaction: z5.object({ maxContextTokens: z5.number().int().positive().nullable().optional() }).nullable().optional(),
-      unescapeNewlines: z5.boolean().optional()
+    z6.object({
+      model: z6.string().optional(),
+      thinkingLevel: z6.enum(["off", "minimal", "low", "medium", "high", "xhigh"]).optional(),
+      maxThinkingTokens: z6.number().int().positive().nullable().optional(),
+      tokenBudget: z6.number().int().positive().nullable().optional(),
+      tokenBudgetPeriodMinutes: z6.number().int().positive().nullable().optional(),
+      compaction: z6.object({ maxContextTokens: z6.number().int().positive().nullable().optional() }).nullable().optional(),
+      unescapeNewlines: z6.boolean().optional()
     })
   ),
   async (c) => {
@@ -5353,7 +5546,7 @@ ${user.trimEnd()}
     }
     writeVoluteConfig(dir, existing);
     if (body.unescapeNewlines !== void 0) {
-      const { clearEchoTextCache } = await import("./echo-text-T7ZA5EYD.js");
+      const { clearEchoTextCache } = await import("./echo-text-6JJOPUD4.js");
       clearEchoTextCache(name);
     }
     const needsConfigJson = body.model !== void 0 || body.thinkingLevel !== void 0 || body.maxThinkingTokens !== void 0 || body.compaction !== void 0;
@@ -5430,7 +5623,7 @@ ${user.trimEnd()}
     }
     if (entry.mindType === "spirit" && body.model !== void 0) {
       try {
-        const { readGlobalConfig: readGlobalConfig2, writeGlobalConfig: writeGlobalConfig2 } = await import("./setup-MLRKNP7Y.js");
+        const { readGlobalConfig: readGlobalConfig2, writeGlobalConfig: writeGlobalConfig2 } = await import("./setup-Y2EJI3GG.js");
         const globalConfig = readGlobalConfig2();
         globalConfig.spiritModel = body.model;
         writeGlobalConfig2(globalConfig);
@@ -5458,7 +5651,7 @@ ${user.trimEnd()}
   if (!body.systemPrompt || !body.message) {
     return c.json({ error: "systemPrompt and message required" }, 400);
   }
-  const { aiComplete: aiCompleteFn, isAiConfigured } = await import("./ai-service-7PHSRDMO.js");
+  const { aiComplete: aiCompleteFn, isAiConfigured } = await import("./ai-service-UODCCE4O.js");
   if (!isAiConfigured()) {
     return c.json({ error: "AI service not configured" }, 503);
   }
@@ -5750,11 +5943,11 @@ ${lines.join("\n")}` });
 var minds_default = app13;
 
 // packages/daemon/src/web/api/prompts.ts
-import { zValidator as zValidator6 } from "@hono/zod-validator";
+import { zValidator as zValidator7 } from "@hono/zod-validator";
 import { eq as eq6, sql as sql4 } from "drizzle-orm";
-import { Hono as Hono16 } from "hono";
-import { z as z6 } from "zod";
-var app14 = new Hono16().get("/", async (c) => {
+import { Hono as Hono17 } from "hono";
+import { z as z7 } from "zod";
+var app14 = new Hono17().get("/", async (c) => {
   let rows;
   try {
     const db = await getDb();
@@ -5777,7 +5970,7 @@ var app14 = new Hono16().get("/", async (c) => {
     };
   });
   return c.json(prompts);
-}).put("/:key", requireAdmin, zValidator6("json", z6.object({ content: z6.string() })), async (c) => {
+}).put("/:key", requireAdmin, zValidator7("json", z7.object({ content: z7.string() })), async (c) => {
   const key = c.req.param("key");
   if (!PROMPT_KEYS.includes(key)) {
     return c.json({ error: "Unknown prompt key" }, 404);
@@ -5801,8 +5994,8 @@ var app14 = new Hono16().get("/", async (c) => {
 var prompts_default = app14;
 
 // packages/daemon/src/web/api/schedules.ts
-import { CronExpressionParser } from "cron-parser";
-import { Hono as Hono17 } from "hono";
+import { CronExpressionParser as CronExpressionParser3 } from "cron-parser";
+import { Hono as Hono18 } from "hono";
 var slog2 = logger_default.child("schedules");
 function readSchedules(dir) {
   return readVoluteConfig(dir)?.schedules ?? [];
@@ -5819,7 +6012,7 @@ function writeSchedules(name, dir, schedules) {
     data: { schedules }
   });
 }
-var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) => {
+var app15 = new Hono18().get("/:name/clock/status", requireSelf(), async (c) => {
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -5840,14 +6033,14 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
       }
     } else if (s.cron) {
       try {
-        const interval = CronExpressionParser.parse(s.cron);
+        const interval = CronExpressionParser3.parse(s.cron);
         const next = interval.next().toDate();
         upcoming.push({ id: s.id, at: next.toISOString(), type: "cron" });
       } catch {
         slog2.warn(`invalid cron "${s.cron}" for schedule "${s.id}" of ${name}`);
       }
       try {
-        const prevInterval = CronExpressionParser.parse(s.cron);
+        const prevInterval = CronExpressionParser3.parse(s.cron);
         const prev = prevInterval.prev().toDate();
         previous.push({ id: s.id, at: prev.toISOString() });
       } catch {
@@ -5863,13 +6056,13 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
     }
   } else if (sleepConfig?.enabled && sleepConfig.schedule) {
     try {
-      const sleepInterval = CronExpressionParser.parse(sleepConfig.schedule.sleep);
+      const sleepInterval = CronExpressionParser3.parse(sleepConfig.schedule.sleep);
       const nextSleep = sleepInterval.next().toDate();
       upcoming.push({ id: "sleep", at: nextSleep.toISOString(), type: "cron" });
     } catch {
     }
     try {
-      const prevWakeInterval = CronExpressionParser.parse(sleepConfig.schedule.wake);
+      const prevWakeInterval = CronExpressionParser3.parse(sleepConfig.schedule.wake);
       const prevWake = prevWakeInterval.prev().toDate();
       previous.push({ id: "sleep", at: prevWake.toISOString() });
     } catch {
@@ -5893,7 +6086,7 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
     for (const field of ["sleep", "wake"]) {
       if (body.schedule[field]) {
         try {
-          CronExpressionParser.parse(body.schedule[field]);
+          CronExpressionParser3.parse(body.schedule[field]);
         } catch {
           return c.json({ error: `Invalid ${field} cron: ${body.schedule[field]}` }, 400);
         }
@@ -5939,7 +6132,7 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
   }
   if (body.cron) {
     try {
-      CronExpressionParser.parse(body.cron);
+      CronExpressionParser3.parse(body.cron);
     } catch {
       return c.json({ error: `Invalid cron expression: ${body.cron}` }, 400);
     }
@@ -5986,7 +6179,7 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
   }
   if (body.cron !== void 0) {
     try {
-      CronExpressionParser.parse(body.cron);
+      CronExpressionParser3.parse(body.cron);
     } catch {
       return c.json({ error: `Invalid cron expression: ${body.cron}` }, 400);
     }
@@ -6043,7 +6236,7 @@ var app15 = new Hono17().get("/:name/clock/status", requireSelf(), async (c) =>
   const body = await c.req.text();
   const message = `[webhook: ${event}] ${body}`;
   try {
-    const { sendSystemMessage } = await import("./system-chat-4DQZOEZI.js");
+    const { sendSystemMessage } = await import("./system-chat-XOALE2RD.js");
     await sendSystemMessage(name, message);
     return c.json({ ok: true });
   } catch (err) {
@@ -6057,10 +6250,10 @@ var schedules_default = app15;
 import { mkdirSync as mkdirSync7 } from "fs";
 import { homedir as homedir2 } from "os";
 import { resolve as resolve11 } from "path";
-import { Hono as Hono18 } from "hono";
+import { Hono as Hono19 } from "hono";
 import { setCookie as setCookie2 } from "hono/cookie";
 var DEFAULT_API_URL2 = "https://volute.systems";
-var setup = new Hono18();
+var setup = new Hono19();
 function writeSetupConfig(systemName, description) {
   const configHome = process.env.VOLUTE_HOME ?? resolve11(homedir2(), ".volute");
   const mindsDir = resolve11(configHome, "minds");
@@ -6097,7 +6290,7 @@ setup.get("/status", async (c) => {
   let hasAccount = false;
   if (hasSystem) {
     try {
-      const { listUsersByType: listUsersByType2 } = await import("./auth-FRZJVQCS.js");
+      const { listUsersByType: listUsersByType2 } = await import("./auth-FLAEXXZK.js");
       const brains = await listUsersByType2("brain");
       hasAccount = brains.length > 0;
     } catch (err) {
@@ -6308,7 +6501,7 @@ setup.post("/account", async (c) => {
     }
   }
   try {
-    const { createUser: createUser2, updateUserProfile: updateUserProfile2 } = await import("./auth-FRZJVQCS.js");
+    const { createUser: createUser2, updateUserProfile: updateUserProfile2 } = await import("./auth-FLAEXXZK.js");
     const user = await createUser2(body.username.trim(), body.password);
     if (body.displayName?.trim()) {
       await updateUserProfile2(user.id, { display_name: body.displayName.trim() });
@@ -6354,7 +6547,7 @@ setup.post("/models", async (c) => {
     return c.json({ error: "Spirit model is required" }, 400);
   }
   try {
-    const { setEnabledModels: setEnabledModels3, setUtilityModel: setUtilityModel2 } = await import("./ai-service-7PHSRDMO.js");
+    const { setEnabledModels: setEnabledModels3, setUtilityModel: setUtilityModel2 } = await import("./ai-service-UODCCE4O.js");
     setEnabledModels3(body.models);
     const config2 = readGlobalConfig();
     config2.spiritModel = body.spiritModel.trim();
@@ -6372,15 +6565,15 @@ setup.post("/complete", async (c) => {
     return c.json({ error: "Setup already complete" }, 400);
   }
   try {
-    const { ensureSpiritProject, syncSpiritTemplate } = await import("./spirit-IK5OYWMV.js");
-    const { startSpiritFull } = await import("./mind-service-S3SY7HAM.js");
+    const { ensureSpiritProject, syncSpiritTemplate } = await import("./spirit-DBTIW7P4.js");
+    const { startSpiritFull } = await import("./mind-service-3F4I46CI.js");
     await ensureSpiritProject();
     await syncSpiritTemplate();
     const warnings = [];
     const config2 = readGlobalConfig();
     if (config2.setup?.service && config2.setup?.type === "local") {
       try {
-        const { installUserService } = await import("./service-install-4QNUDKLM.js");
+        const { installUserService } = await import("./service-install-4HHFDDWY.js");
         const installed = await installUserService(config2.port, config2.hostname);
         if (!installed) {
           warnings.push("Service installation is not supported on this platform.");
@@ -6408,8 +6601,8 @@ setup.post("/complete", async (c) => {
     }
     let spiritConversationId;
     try {
-      const { getOrCreateMindUser: getOrCreateMindUser2, listUsersByType: listUsersByType2 } = await import("./auth-FRZJVQCS.js");
-      const { createConversation: createConversation2, findDMConversation: findDMConversation2 } = await import("./conversations-WAJYZKOC.js");
+      const { getOrCreateMindUser: getOrCreateMindUser2, listUsersByType: listUsersByType2 } = await import("./auth-FLAEXXZK.js");
+      const { createConversation: createConversation2, findDMConversation: findDMConversation2 } = await import("./conversations-JZTD6KLR.js");
       const spiritUser = await getOrCreateMindUser2("volute");
       const brains = await listUsersByType2("brain");
       const admin2 = brains.find((u) => u.role === "admin");
@@ -6431,8 +6624,8 @@ setup.post("/complete", async (c) => {
     logger_default.info("setup complete state", { spiritConversationId, spiritStarted });
     if (spiritConversationId && spiritStarted) {
       try {
-        const { deliverMessage: deliverMessage2 } = await import("./message-delivery-2EA5LLMD.js");
-        const { listUsersByType: listUsers2 } = await import("./auth-FRZJVQCS.js");
+        const { deliverMessage: deliverMessage2 } = await import("./message-delivery-3C65ZI6L.js");
+        const { listUsersByType: listUsers2 } = await import("./auth-FLAEXXZK.js");
         const admins = await listUsers2("brain");
         const admin2 = admins.find((u) => u.role === "admin");
         const adminName = admin2?.display_name || admin2?.username || "the admin";
@@ -6473,8 +6666,8 @@ import { existsSync as existsSync8, mkdtempSync, readdirSync as readdirSync3, rm
 import { tmpdir } from "os";
 import { join, resolve as resolve12 } from "path";
 import AdmZip from "adm-zip";
-import { Hono as Hono19 } from "hono";
-var app16 = new Hono19().get("/", async (c) => {
+import { Hono as Hono20 } from "hono";
+var app16 = new Hono20().get("/", async (c) => {
   const skills = await listSharedSkills();
   return c.json(skills);
 }).get("/defaults/list", async (c) => {
@@ -6598,15 +6791,15 @@ var app16 = new Hono19().get("/", async (c) => {
 var skills_default = app16;
 
 // packages/daemon/src/web/api/typing.ts
-import { zValidator as zValidator7 } from "@hono/zod-validator";
-import { Hono as Hono20 } from "hono";
-import { z as z7 } from "zod";
-var typingSchema = z7.object({
-  channel: z7.string().min(1),
-  sender: z7.string().min(1),
-  active: z7.boolean()
+import { zValidator as zValidator8 } from "@hono/zod-validator";
+import { Hono as Hono21 } from "hono";
+import { z as z8 } from "zod";
+var typingSchema = z8.object({
+  channel: z8.string().min(1),
+  sender: z8.string().min(1),
+  active: z8.boolean()
 });
-var app17 = new Hono20().post("/:name/typing", zValidator7("json", typingSchema), (c) => {
+var app17 = new Hono21().post("/:name/typing", zValidator8("json", typingSchema), (c) => {
   const { channel, sender, active } = c.req.valid("json");
   const map = getTypingMap();
   if (active) {
@@ -6630,9 +6823,9 @@ var typing_default = app17;
 
 // packages/daemon/src/web/api/update.ts
 import { spawn as spawn3 } from "child_process";
-import { Hono as Hono21 } from "hono";
+import { Hono as Hono22 } from "hono";
 var bin;
-var app18 = new Hono21().get("/update", async (c) => {
+var app18 = new Hono22().get("/update", async (c) => {
   const result = await checkForUpdate();
   return c.json(result);
 }).post("/update", requireAdmin, async (c) => {
@@ -6650,13 +6843,13 @@ var app18 = new Hono21().get("/update", async (c) => {
 var update_default = app18;
 
 // packages/daemon/src/web/api/v1/conversations.ts
-import { zValidator as zValidator8 } from "@hono/zod-validator";
-import { Hono as Hono22 } from "hono";
-import { z as z8 } from "zod";
-var createSchema = z8.object({
-  participantNames: z8.array(z8.string()).min(1)
+import { zValidator as zValidator9 } from "@hono/zod-validator";
+import { Hono as Hono23 } from "hono";
+import { z as z9 } from "zod";
+var createSchema = z9.object({
+  participantNames: z9.array(z9.string()).min(1)
 });
-var app19 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
+var app19 = new Hono23().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const convs = await listConversationsWithParticipants(user.id);
   return c.json(convs);
@@ -6683,7 +6876,7 @@ var app19 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
   }
   const participants = await getParticipants(id);
   return c.json(participants);
-}).post("/", zValidator8("json", createSchema), async (c) => {
+}).post("/", zValidator9("json", createSchema), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   const participantIds = /* @__PURE__ */ new Set();
@@ -6732,7 +6925,7 @@ var app19 = new Hono22().use("*", authMiddleware).get("/", async (c) => {
   }
   await markConversationRead(user.id, id);
   return c.json({ ok: true });
-}).put("/:id/private", zValidator8("json", z8.object({ private: z8.boolean() })), async (c) => {
+}).put("/:id/private", zValidator9("json", z9.object({ private: z9.boolean() })), async (c) => {
   const id = c.req.param("id");
   const user = c.get("user");
   if (!await isParticipantOrOwner(id, user.id)) {
@@ -6752,7 +6945,7 @@ var conversations_default = app19;
 
 // packages/daemon/src/web/api/v1/events.ts
 import { desc as desc5, eq as eq7 } from "drizzle-orm";
-import { Hono as Hono23 } from "hono";
+import { Hono as Hono24 } from "hono";
 import { streamSSE as streamSSE4 } from "hono/streaming";
 
 // packages/daemon/src/lib/events/brain-presence.ts
@@ -6815,7 +7008,7 @@ function getEventsSince(sinceId, allowedConversationIds, allowedActivityMind) {
 }
 
 // packages/daemon/src/web/api/v1/events.ts
-var app20 = new Hono23().use("*", authMiddleware).get("/", async (c) => {
+var app20 = new Hono24().use("*", authMiddleware).get("/", async (c) => {
   const user = c.get("user");
   const since = c.req.query("since");
   const sinceId = since ? Number(since) : 0;
@@ -6833,7 +7026,7 @@ var app20 = new Hono23().use("*", authMiddleware).get("/", async (c) => {
         conversations2 = await listConversationsWithParticipants(user.id);
         if (conversations2.length > 0) {
           const convIds = conversations2.map((c2) => c2.id);
-          const unreads = await getUnreadCounts(user.id, convIds);
+          const unreads = await getUnreadCounts(user.id, convIds, user.username);
           for (const conv of conversations2) {
             conv.unreadCount = unreads[conv.id] ?? 0;
           }
@@ -6927,7 +7120,7 @@ var events_default = app20;
 // packages/daemon/src/web/api/variants.ts
 import { existsSync as existsSync9, mkdirSync as mkdirSync9, writeFileSync as writeFileSync8 } from "fs";
 import { resolve as resolve14 } from "path";
-import { Hono as Hono24 } from "hono";
+import { Hono as Hono25 } from "hono";
 
 // packages/daemon/src/lib/mind/spawn-server.ts
 import { spawn as spawn4 } from "child_process";
@@ -7052,7 +7245,7 @@ async function verify2(port) {
 }
 
 // packages/daemon/src/web/api/variants.ts
-var app21 = new Hono24().get("/:name/variants", async (c) => {
+var app21 = new Hono25().get("/:name/variants", async (c) => {
   const name = c.req.param("name");
   const entry = await findMind(name);
   if (!entry) return c.json({ error: "Mind not found" }, 404);
@@ -7082,6 +7275,11 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
   if (!entry) return c.json({ error: "Mind not found" }, 404);
   if (entry.stage === "seed")
     return c.json({ error: "Seed minds cannot create variants \u2014 sprout first" }, 403);
+  if (entry.parent)
+    return c.json(
+      { error: "Cannot split from a variant \u2014 split from the base mind instead" },
+      403
+    );
   let body;
   try {
     body = await c.req.json();
@@ -7095,7 +7293,7 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
   if (await findMind(variantName)) {
     return c.json({ error: `Name already in use: ${variantName}` }, 409);
   }
-  const projectRoot = mindDir(mindName);
+  const projectRoot = entry.dir ?? mindDir(mindName);
   const variantDir = resolve14(projectRoot, ".variants", variantName);
   if (existsSync9(variantDir)) {
     return c.json({ error: `Variant directory already exists: ${variantDir}` }, 409);
@@ -7129,7 +7327,9 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
   await addVariant(variantName, mindName, variantPort, variantDir, variantName);
   if (!body.noStart) {
     try {
-      await getMindManager().startMind(variantName);
+      const manager = getMindManager();
+      manager.setPendingContext(variantName, { type: "split", parent: mindName });
+      await manager.startMind(variantName);
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       return c.json({ error: `Variant created but failed to start: ${msg}` }, 500);
@@ -7157,7 +7357,7 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
     body = await c.req.json();
   } catch {
   }
-  const projectRoot = mindDir(mindName);
+  const projectRoot = parentEntry.dir ?? mindDir(mindName);
   if (existsSync9(variantEntry.dir)) {
     const status = (await gitExec(["status", "--porcelain"], { cwd: variantEntry.dir })).trim();
     if (status) {
@@ -7190,7 +7390,7 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
     }
     const verified = await verify2(result.actualPort);
     try {
-      process.kill(result.child.pid);
+      process.kill(-result.child.pid, "SIGTERM");
     } catch {
     }
     if (!verified) {
@@ -7217,13 +7417,47 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
   try {
     await gitExec(["merge", variantEntry.branch], { cwd: projectRoot });
   } catch (_e) {
-    return c.json({ error: "Merge failed. Resolve conflicts manually." }, 500);
+    let conflicts = [];
+    try {
+      const out = (await gitExec(["diff", "--name-only", "--diff-filter=U"], { cwd: projectRoot })).trim();
+      conflicts = out ? out.split("\n") : [];
+    } catch (err) {
+      logger_default.warn(`failed to list merge conflicts for ${mindName}`, logger_default.errorData(err));
+    }
+    try {
+      await gitExec(["merge", "--abort"], { cwd: projectRoot });
+    } catch (err) {
+      logger_default.warn(`failed to abort merge for ${mindName}`, logger_default.errorData(err));
+    }
+    try {
+      await chownMindDir(projectRoot, mindName);
+    } catch (err) {
+      logger_default.warn(
+        `failed to restore ownership after aborted merge for ${mindName}`,
+        logger_default.errorData(err)
+      );
+      return c.json(
+        {
+          error: `Merge failed and restoring parent ownership failed: ${err instanceof Error ? err.message : String(err)}`,
+          conflicts
+        },
+        500
+      );
+    }
+    return c.json(
+      {
+        error: "Merge failed. Resolve conflicts in the variant and retry the join.",
+        conflicts
+      },
+      500
+    );
   }
-  await cleanupVariant(variantName, projectRoot, variantEntry.dir);
+  await cleanupVariant(variantName, projectRoot, variantEntry.dir, { stop: true });
+  await chownMindDir(projectRoot, mindName);
   if (variantName.endsWith("-upgrade") || variantName === "upgrade") {
     try {
       const { computeTemplateHash: computeTemplateHash2 } = await import("./template-hash-446HHH5V.js");
-      const { setMindTemplateHash: setMindTemplateHash2 } = await import("./registry-NUJAGLQJ.js");
+      const { setMindTemplateHash: setMindTemplateHash2 } = await import("./registry-OUZBZ3Q4.js");
       const tmpl = parentEntry.template ?? "claude";
       await setMindTemplateHash2(mindName, computeTemplateHash2(tmpl));
     } catch (err) {
@@ -7274,29 +7508,29 @@ var app21 = new Hono24().get("/:name/variants", async (c) => {
     return c.json({ error: `Unknown variant: ${variantName}` }, 404);
   }
   if (!variantEntry.dir) return c.json({ error: `Variant ${variantName} has no directory` }, 500);
-  const projectRoot = mindDir(mindName);
+  const projectRoot = parentEntry.dir ?? mindDir(mindName);
   await cleanupVariant(variantName, projectRoot, variantEntry.dir, { stop: true });
   return c.json({ ok: true });
 });
 var variants_default = app21;
 
 // packages/daemon/src/web/api/volute/channels.ts
-import { zValidator as zValidator9 } from "@hono/zod-validator";
-import { Hono as Hono25 } from "hono";
-import { z as z9 } from "zod";
-var channelSettingsSchema = z9.object({
-  description: z9.string().nullable().optional(),
-  rules: z9.string().nullable().optional(),
-  charLimit: z9.number().int().positive().nullable().optional(),
-  private: z9.boolean().optional()
+import { zValidator as zValidator10 } from "@hono/zod-validator";
+import { Hono as Hono26 } from "hono";
+import { z as z10 } from "zod";
+var channelSettingsSchema = z10.object({
+  description: z10.string().nullable().optional(),
+  rules: z10.string().nullable().optional(),
+  charLimit: z10.number().int().positive().nullable().optional(),
+  private: z10.boolean().optional()
 });
-var createSchema2 = z9.object({
-  name: z9.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
+var createSchema2 = z10.object({
+  name: z10.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9-]*$/, "Channel names must be lowercase alphanumeric with hyphens")
 }).merge(channelSettingsSchema);
-var inviteSchema = z9.object({
-  username: z9.string().min(1)
+var inviteSchema = z10.object({
+  username: z10.string().min(1)
 });
-var app22 = new Hono25().get("/", async (c) => {
+var app22 = new Hono26().get("/", async (c) => {
   const user = c.get("user");
   const channels2 = await listChannels();
   const results = await Promise.all(
@@ -7307,7 +7541,7 @@ var app22 = new Hono25().get("/", async (c) => {
     })
   );
   return c.json(results);
-}).post("/", zValidator9("json", createSchema2), async (c) => {
+}).post("/", zValidator10("json", createSchema2), async (c) => {
   const user = c.get("user");
   const body = c.req.valid("json");
   try {
@@ -7335,7 +7569,7 @@ var app22 = new Hono25().get("/", async (c) => {
     participants,
     settings: formatChannelSettings(settings)
   });
-}).patch("/:name", zValidator9("json", channelSettingsSchema), async (c) => {
+}).patch("/:name", zValidator10("json", channelSettingsSchema), async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   const body = c.req.valid("json");
@@ -7367,7 +7601,7 @@ var app22 = new Hono25().get("/", async (c) => {
   if (!ch) return c.json({ error: "Channel not found" }, 404);
   const participants = await getParticipants(ch.id);
   return c.json(participants);
-}).post("/:name/invite", zValidator9("json", inviteSchema), async (c) => {
+}).post("/:name/invite", zValidator10("json", inviteSchema), async (c) => {
   const name = c.req.param("name");
   const inviter = c.get("user");
   const { username } = c.req.valid("json");
@@ -7393,27 +7627,27 @@ var app22 = new Hono25().get("/", async (c) => {
 var channels_default2 = app22;
 
 // packages/daemon/src/web/api/volute/chat.ts
-import { zValidator as zValidator10 } from "@hono/zod-validator";
-import { Hono as Hono26 } from "hono";
+import { zValidator as zValidator11 } from "@hono/zod-validator";
+import { Hono as Hono27 } from "hono";
 import { streamSSE as streamSSE5 } from "hono/streaming";
-import { z as z10 } from "zod";
-var fileSchema = z10.object({
-  filename: z10.string(),
-  data: z10.string()
+import { z as z11 } from "zod";
+var fileSchema = z11.object({
+  filename: z11.string(),
+  data: z11.string()
   // base64
 });
-var chatSchema = z10.object({
-  message: z10.string().optional(),
-  conversationId: z10.string().optional(),
-  targetMind: z10.string().optional(),
-  sender: z10.string().optional(),
-  images: z10.array(
-    z10.object({
-      media_type: z10.string(),
-      data: z10.string()
+var chatSchema = z11.object({
+  message: z11.string().optional(),
+  conversationId: z11.string().optional(),
+  targetMind: z11.string().optional(),
+  sender: z11.string().optional(),
+  images: z11.array(
+    z11.object({
+      media_type: z11.string(),
+      data: z11.string()
     })
   ).optional(),
-  files: z10.array(fileSchema).optional()
+  files: z11.array(fileSchema).optional()
 });
 var MAX_FILE_SIZE2 = 50 * 1024 * 1024;
 function stageFilesForMinds(files, targetMinds, senderName) {
@@ -7441,9 +7675,9 @@ function stageFilesForMinds(files, targetMinds, senderName) {
   }
   return { notifications };
 }
-var unifiedChatApp = new Hono26().post(
+var unifiedChatApp = new Hono27().post(
   "/chat",
-  zValidator10("json", chatSchema),
+  zValidator11("json", chatSchema),
   async (c) => {
     const user = c.get("user");
     const body = c.req.valid("json");
@@ -7454,7 +7688,7 @@ var unifiedChatApp = new Hono26().post(
       return c.json({ error: "conversationId or targetMind required" }, 400);
     }
     const senderName = user.id === 0 && body.sender ? body.sender : user.username;
-    const senderIsMind = user.id === 0 && body.sender && await findMind(body.sender) || user.user_type === "mind";
+    const senderIsMind = user.id === 0 && body.sender && await findMind(body.sender) || user.user_type === "mind" || user.user_type === "system" && !!await findMind(user.username);
     let baseName;
     let variantName;
     let conversationId = body.conversationId;
@@ -7531,7 +7765,7 @@ var unifiedChatApp = new Hono26().post(
       }
     }
     if (senderIsMind) {
-      const vCfg = readVoluteConfig(mindDir(baseName ?? senderName));
+      const vCfg = readVoluteConfig(await resolveMindDir(baseName ?? senderName));
       const shouldUnescapeNewlines = vCfg?.unescapeNewlines === true;
       for (const block of contentBlocks) {
         if (block.type === "text") {
@@ -7624,18 +7858,21 @@ var unifiedChatApp = new Hono26().post(
       targetName: baseName ? (username) => username === baseName ? variantName : username : void 0
     });
     const systemReplyTarget = baseName ?? senderName;
-    if (senderIsMind && body.message) {
-      const hasSystemUser = participants.some((p) => p.userType === "system");
-      if (hasSystemUser) {
-        generateSystemReply(conversationId, systemReplyTarget, body.message).catch(
-          (err) => logger_default.error(`system reply generation failed for ${systemReplyTarget}`, logger_default.errorData(err))
-        );
-      }
+    if (shouldGenerateSystemFallback({
+      senderIsMind: !!senderIsMind,
+      hasMessage: !!body.message,
+      convType: conv.type,
+      participants,
+      replyTarget: systemReplyTarget
+    })) {
+      generateSystemFallbackReply(conversationId, systemReplyTarget, body.message).catch(
+        (err) => logger_default.error(`system reply generation failed for ${systemReplyTarget}`, logger_default.errorData(err))
+      );
     }
     return c.json({ ok: true, conversationId, outboundId });
   }
 );
-var app23 = new Hono26().get("/:name/conversations/:id/events", async (c) => {
+var app23 = new Hono27().get("/:name/conversations/:id/events", async (c) => {
   const conversationId = c.req.param("id");
   const user = c.get("user");
   if (user.id !== 0 && !await isParticipantOrOwner(conversationId, user.id)) {
@@ -7664,14 +7901,14 @@ var app23 = new Hono26().get("/:name/conversations/:id/events", async (c) => {
 var chat_default = app23;
 
 // packages/daemon/src/web/api/volute/conversations.ts
-import { zValidator as zValidator11 } from "@hono/zod-validator";
-import { Hono as Hono27 } from "hono";
-import { z as z11 } from "zod";
-var createConvSchema = z11.object({
-  participantIds: z11.array(z11.number()).optional(),
-  participantNames: z11.array(z11.string()).optional()
+import { zValidator as zValidator12 } from "@hono/zod-validator";
+import { Hono as Hono28 } from "hono";
+import { z as z12 } from "zod";
+var createConvSchema = z12.object({
+  participantIds: z12.array(z12.number()).optional(),
+  participantNames: z12.array(z12.string()).optional()
 });
-var app24 = new Hono27().get("/:name/conversations", async (c) => {
+var app24 = new Hono28().get("/:name/conversations", async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   let lookupId = user.id;
@@ -7681,7 +7918,7 @@ var app24 = new Hono27().get("/:name/conversations", async (c) => {
   }
   const convs = await listConversationsForUser(lookupId);
   return c.json(convs);
-}).post("/:name/conversations", zValidator11("json", createConvSchema), async (c) => {
+}).post("/:name/conversations", zValidator12("json", createConvSchema), async (c) => {
   const name = c.req.param("name");
   const user = c.get("user");
   const body = c.req.valid("json");
@@ -7777,7 +8014,7 @@ var conversations_default2 = app24;
 
 // packages/daemon/src/web/app.ts
 var httpLog = logger_default.child("http");
-var app25 = new Hono28();
+var app25 = new Hono29();
 app25.onError((err, c) => {
   if (err instanceof HTTPException) {
     return err.getResponse();
@@ -7844,10 +8081,11 @@ app25.use("/api/skills/*", authMiddleware);
 app25.use("/api/extensions/*", authMiddleware);
 app25.use("/api/bridges/*", authMiddleware);
 app25.use("/api/config/*", authMiddleware);
+app25.use("/api/backup/*", authMiddleware);
 app25.use("/api/v1/*", authMiddleware);
 app25.route("/api/setup", setup_default);
 app25.route("/api/config", config_default);
-var routes = app25.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/minds", minds_default).route("/api/minds", chat_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/bridges", bridges_default).route("/api/extensions", extensions_default).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", unifiedChatApp).route("/api/v1/channels", channels_default2).route("/api/v1/history", history_default);
+var routes = app25.route("/api/activity", activity_default).route("/api/keys", keys_default).route("/api/auth", auth_default).route("/api/system", system_default).route("/api/system", update_default).route("/api/backup", backup_default).route("/api/minds", minds_default).route("/api/minds", chat_default).route("/api/minds", schedules_default).route("/api/minds", logs_default).route("/api/minds", typing_default).route("/api/minds", variants_default).route("/api/minds", file_sharing_default).route("/api/minds", files_default).route("/api/minds", channels_default).route("/api/minds", env_default).route("/api/minds", mind_skills_default).route("/api/minds", conversations_default2).route("/api/env", sharedEnvApp).route("/api/prompts", prompts_default).route("/api/skills", skills_default).route("/api/bridges", bridges_default).route("/api/extensions", extensions_default).route("/api/v1/conversations", conversations_default).route("/api/v1/events", events_default).route("/api/v1", unifiedChatApp).route("/api/v1/channels", channels_default2).route("/api/v1/history", history_default);
 app25.route("/api/v1/minds", minds_default);
 app25.route("/api/v1/minds", chat_default);
 app25.route("/api/v1/minds", typing_default);
@@ -7906,8 +8144,8 @@ async function startServer({
         const ext = extname3(filePath);
         const mime = MIME_TYPES2[ext] || "application/octet-stream";
         const body = await readFile2(filePath);
-        const basename2 = filePath.slice(filePath.lastIndexOf("/") + 1);
-        const nameWithoutExt = basename2.slice(0, basename2.lastIndexOf("."));
+        const basename = filePath.slice(filePath.lastIndexOf("/") + 1);
+        const nameWithoutExt = basename.slice(0, basename.lastIndexOf("."));
         const isHashed = /[-.][\da-f]{8,}$/.test(nameWithoutExt);
         const cacheControl = isHashed ? "public, max-age=31536000, immutable" : "no-cache";
         return c.body(body, 200, { "Content-Type": mime, "Cache-Control": cacheControl });
@@ -8005,27 +8243,27 @@ async function startDaemon(opts) {
   const DAEMON_TOKEN_PATH = resolve16(systemDir, "daemon-token");
   mkdirSync10(home, { recursive: true });
   ensureSystemDir();
-  const { migrateConfigSecrets, migrateSetupCompleted } = await import("./setup-MLRKNP7Y.js");
+  const { migrateConfigSecrets, migrateSetupCompleted } = await import("./setup-Y2EJI3GG.js");
   migrateConfigSecrets();
   migrateSetupCompleted();
-  const { migrateAiModelQualification } = await import("./ai-service-7PHSRDMO.js");
+  const { migrateAiModelQualification } = await import("./ai-service-UODCCE4O.js");
   migrateAiModelQualification();
-  await (await import("./db-JFLCJCUG.js")).getDb();
+  await (await import("./db-MF2JNRUW.js")).getDb();
   try {
     const { eq: eq8, and: and6 } = await import("drizzle-orm");
     const { users: users2 } = await import("./schema-PVNG3PQM.js");
-    const db = await (await import("./db-JFLCJCUG.js")).getDb();
+    const db = await (await import("./db-MF2JNRUW.js")).getDb();
     await db.update(users2).set({ role: "system" }).where(and6(eq8(users2.user_type, "system"), eq8(users2.role, "user")));
   } catch (err) {
     logger_default.warn("failed to migrate system user role", logger_default.errorData(err));
   }
   try {
-    const { migrateAvatarSizes } = await import("./avatar-image-BNWEXSA2.js");
+    const { migrateAvatarSizes } = await import("./avatar-image-6KY6UU4D.js");
     await migrateAvatarSizes();
   } catch (err) {
     logger_default.warn("avatar size migration failed", logger_default.errorData(err));
   }
-  const { initSandbox } = await import("./sandbox-IOPWWILM.js");
+  const { initSandbox } = await import("./sandbox-ZJ7QA6Z6.js");
   await initSandbox();
   try {
     await syncBuiltinSkills();
@@ -8052,7 +8290,7 @@ async function startDaemon(opts) {
     logger_default.warn("failed to ensure #system channel", logger_default.errorData(err));
   }
   try {
-    const { getOrCreateSystemUser: getOrCreateSystemUser2 } = await import("./auth-FRZJVQCS.js");
+    const { getOrCreateSystemUser: getOrCreateSystemUser2 } = await import("./auth-FLAEXXZK.js");
     await getOrCreateSystemUser2();
   } catch (err) {
     logger_default.warn(
@@ -8060,13 +8298,13 @@ async function startDaemon(opts) {
       logger_default.errorData(err)
     );
   }
-  const token = process.env.VOLUTE_DAEMON_TOKEN || randomBytes2(32).toString("hex");
-  const { readGlobalConfig: readGlobalConfig2 } = await import("./setup-MLRKNP7Y.js");
+  const token = process.env.VOLUTE_DAEMON_TOKEN || randomBytes3(32).toString("hex");
+  const { readGlobalConfig: readGlobalConfig2 } = await import("./setup-Y2EJI3GG.js");
   const globalCfg = readGlobalConfig2();
   let tls;
   if (opts.tailscale || globalCfg.tailscale) {
     try {
-      const { getTailscaleTls } = await import("./tailscale-QAWVKQKU.js");
+      const { getTailscaleTls } = await import("./tailscale-3XOKOW7T.js");
       const tlsConfig = await getTailscaleTls();
       tls = { key: tlsConfig.key, cert: tlsConfig.cert };
       logger_default.info("Tailscale HTTPS enabled", { hostname: tlsConfig.hostname });
@@ -8112,6 +8350,8 @@ async function startDaemon(opts) {
   sleepManager.start();
   const summarizer = initSummarizer();
   summarizer.start();
+  const backupManager2 = initBackupManager();
+  backupManager2.start();
   const unsubscribeWebhook = initWebhook();
   const orphanedTurns = await completeOrphanedTurns();
   summarizeOrphanedTurns(orphanedTurns);
@@ -8144,10 +8384,10 @@ async function startDaemon(opts) {
     await Promise.all(workers);
   }
   try {
-    const { isSetupComplete: isSetupComplete2 } = await import("./setup-MLRKNP7Y.js");
+    const { isSetupComplete: isSetupComplete2 } = await import("./setup-Y2EJI3GG.js");
     if (isSetupComplete2()) {
-      const { ensureSpiritProject, syncSpiritTemplate } = await import("./spirit-IK5OYWMV.js");
-      const { startSpiritFull } = await import("./mind-service-S3SY7HAM.js");
+      const { ensureSpiritProject, syncSpiritTemplate } = await import("./spirit-DBTIW7P4.js");
+      const { startSpiritFull } = await import("./mind-service-3F4I46CI.js");
       await ensureSpiritProject();
       await syncSpiritTemplate();
       const spiritEntry = await findMind("volute");
@@ -8164,7 +8404,7 @@ async function startDaemon(opts) {
   bridgeManager.startBridges(daemonPort).catch((err) => {
     logger_default.warn("failed to start bridges", logger_default.errorData(err));
   });
-  import("./cloud-sync-6WJ7WFYD.js").then(
+  import("./cloud-sync-3OJOPZRT.js").then(
     ({ consumeQueuedMessages }) => consumeQueuedMessages().catch((err) => {
       logger_default.warn("failed to consume queued cloud messages", logger_default.errorData(err));
     })
@@ -8172,7 +8412,7 @@ async function startDaemon(opts) {
     logger_default.warn("failed to load cloud-sync module", logger_default.errorData(err));
   });
   try {
-    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-B67N35A3.js");
+    const { backfillTemplateHashes, notifyVersionUpdate } = await import("./version-notify-3XMAIQTE.js");
     backfillTemplateHashes();
     notifyVersionUpdate().catch((err) => {
       logger_default.warn("failed to send version update notifications", logger_default.errorData(err));
@@ -8240,6 +8480,7 @@ async function startDaemon(opts) {
       safe("mailPoller.stop", () => mailPoller.stop());
       safe("tokenBudget.stop", () => tokenBudget.stop());
       safe("summarizer.stop", () => summarizer.stop());
+      safe("backupManager.stop", () => backupManager2.stop());
       safe("stopApiKeyRefresh", stopApiKeyRefresh);
       safe("delivery.dispose", () => delivery.dispose());
       await safe("bridgeManager.stopAll", () => bridgeManager.stopAll());