volute 0.47.0 → 0.49.0

package/dist/{backup-IIAFOW2L.js → backup-XYAMT4CU.js}

@@ -1,49 +1,49 @@
 #!/usr/bin/env node
 import {
   stopDaemon
-} from "./chunk-BGYHLR54.js";
+} from "./chunk-6HGEZJDH.js";
 import {
   promptLine,
   promptPassword
 } from "./chunk-VHWGEJ4V.js";
-import {
-  command,
-  subcommands
-} from "./chunk-TXSA4Q3V.js";
-import "./chunk-O7IGP7ZW.js";
 import {
   daemonFetch
-} from "./chunk-RBNMDAKB.js";
+} from "./chunk-BCG45AQB.js";
 import {
   getClient,
   urlOf
 } from "./chunk-LOPXTW6H.js";
+import {
+  command,
+  subcommands
+} from "./chunk-TXSA4Q3V.js";
+import "./chunk-O7IGP7ZW.js";
 import {
   RESTIC_INSTALL_HINT,
   resticVersion,
   restoreStagedDb
-} from "./chunk-5NN2VHJV.js";
+} from "./chunk-JBIFXB6I.js";
 import {
   getServiceMode,
   modeLabel,
   stopService
-} from "./chunk-CBOIHNMR.js";
+} from "./chunk-HCYQRME2.js";
 import {
   chownMindDir,
   exec,
   execInherit,
   wrapForIsolation
-} from "./chunk-DGGZVZTM.js";
+} from "./chunk-DVN6DNMI.js";
 import {
   _resetConfigCache,
   readGlobalConfig
-} from "./chunk-SKNXMUIU.js";
-import "./chunk-T2TP6ZC6.js";
+} from "./chunk-NJHN6IRB.js";
+import "./chunk-QUSMYGNQ.js";
 import {
   voluteHome,
   voluteSystemDir
-} from "./chunk-WW6C3PLV.js";
-import "./chunk-2MJ7EOMT.js";
+} from "./chunk-RSBL3FAD.js";
+import "./chunk-P4LHVRNE.js";
 import "./chunk-K3NQKI34.js";
 
 // src/commands/backup.ts
@@ -337,7 +337,7 @@ Restore failed: ${err instanceof Error ? err.message : err}`);
     if (readGlobalConfig().setup?.isolation === "user") {
       process.env.VOLUTE_ISOLATION = "user";
     }
-    const { readAllMinds, mindDir } = await import("./registry-UMMDRPRM.js");
+    const { readAllMinds, mindDir } = await import("./registry-3ELJPUGJ.js");
     const seen = /* @__PURE__ */ new Set();
     for (const mind of await readAllMinds()) {
       const dir = mind.dir ?? mindDir(mind.name);

package/dist/{bridge-TIZGSXOD.js → bridge-3FNSWLNQ.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
+import {
+  daemonFetch
+} from "./chunk-BCG45AQB.js";
 import {
   command,
   subcommands
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
-import {
-  daemonFetch
-} from "./chunk-RBNMDAKB.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/chat/bridge.ts

package/dist/{channels-ITE4YC57.js → channels-SGQZHNQJ.js}

@@ -2,14 +2,14 @@
 import {
   resolveMindName
 } from "./chunk-BTY4WNFE.js";
+import {
+  daemonFetch
+} from "./chunk-BCG45AQB.js";
 import {
   command,
   subcommands
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
-import {
-  daemonFetch
-} from "./chunk-RBNMDAKB.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/chat/channels.ts

package/dist/{chat-AJLJCQ3M.js → chat-OGXAEXMV.js}

@@ -12,39 +12,39 @@ var cmd = subcommands({
   commands: {
     send: {
       description: "Send a message",
-      run: (args) => import("./send-HYDFGC6G.js").then((m) => m.run(args))
+      run: (args) => import("./send-IHRJYNXA.js").then((m) => m.run(args))
     },
     list: {
       description: "List conversations",
-      run: (args) => import("./list-LQO2DCIK.js").then((m) => m.run(args))
+      run: (args) => import("./list-PMUXZNAM.js").then((m) => m.run(args))
     },
     read: {
       description: "Read conversation messages",
-      run: (args) => import("./read-PWAJOQIQ.js").then((m) => m.run(args))
+      run: (args) => import("./read-YSWUXYL7.js").then((m) => m.run(args))
     },
     create: {
       description: "Create a conversation",
-      run: (args) => import("./create-A7PDHIIL.js").then((m) => m.run(args))
+      run: (args) => import("./create-VIQVP3QB.js").then((m) => m.run(args))
     },
     bridge: {
       description: "Manage platform bridges",
-      run: (args) => import("./bridge-TIZGSXOD.js").then((m) => m.run(args))
+      run: (args) => import("./bridge-3FNSWLNQ.js").then((m) => m.run(args))
     },
     channels: {
       description: "Manage unrouted (gated) channels",
-      run: (args) => import("./channels-ITE4YC57.js").then((m) => m.run(args))
+      run: (args) => import("./channels-SGQZHNQJ.js").then((m) => m.run(args))
     },
     files: {
       description: "List pending incoming files",
-      run: (args) => import("./files-FEFZKMNM.js").then((m) => m.run(args))
+      run: (args) => import("./files-BVBRJJ2P.js").then((m) => m.run(args))
     },
     accept: {
       description: "Accept a pending file",
-      run: (args) => import("./accept-YAFP5JFJ.js").then((m) => m.run(args))
+      run: (args) => import("./accept-KYNC5X3U.js").then((m) => m.run(args))
     },
     reject: {
       description: "Reject a pending file",
-      run: (args) => import("./reject-6VH7N2A4.js").then((m) => m.run(args))
+      run: (args) => import("./reject-SXGCYN4A.js").then((m) => m.run(args))
     }
   },
   footer: "Use --mind <name> or VOLUTE_MIND to identify the mind."

package/dist/{chunk-LTLFOSA4.js → chunk-3B427GUK.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   logger_default
-} from "./chunk-T2TP6ZC6.js";
+} from "./chunk-QUSMYGNQ.js";
 import {
   getDb
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 import {
   activity
-} from "./chunk-2MJ7EOMT.js";
+} from "./chunk-P4LHVRNE.js";
 
 // packages/daemon/src/lib/events/event-sequencer.ts
 var BUFFER_SIZE = 1e3;

package/dist/{chunk-RUFLGTOT.js → chunk-4B62E4CG.js}

@@ -3,10 +3,10 @@ import {
   LAUNCHD_PLIST_LABEL,
   LAUNCHD_PLIST_PATH,
   USER_SYSTEMD_UNIT
-} from "./chunk-CBOIHNMR.js";
+} from "./chunk-HCYQRME2.js";
 import {
   resolveVoluteBin
-} from "./chunk-DGGZVZTM.js";
+} from "./chunk-DVN6DNMI.js";
 
 // packages/daemon/src/lib/config/service-install.ts
 import { execFile } from "child_process";

package/dist/{chunk-ODDGGLM6.js → chunk-4DSGN4FL.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   broadcast
-} from "./chunk-LTLFOSA4.js";
+} from "./chunk-3B427GUK.js";
 import {
   getDb
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 import {
   users
-} from "./chunk-2MJ7EOMT.js";
+} from "./chunk-P4LHVRNE.js";
 
 // packages/daemon/src/lib/auth.ts
 import { compareSync, hashSync } from "bcryptjs";

package/dist/{chunk-BGYHLR54.js → chunk-6HGEZJDH.js}

@@ -8,10 +8,10 @@ import {
   pollHealthDown,
   readDaemonConfig,
   stopService
-} from "./chunk-CBOIHNMR.js";
+} from "./chunk-HCYQRME2.js";
 import {
   voluteSystemDir
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 
 // src/commands/down.ts
 import { existsSync, readFileSync, unlinkSync } from "fs";

package/dist/{chunk-RBNMDAKB.js → chunk-BCG45AQB.js}

@@ -82,6 +82,19 @@ function resolveDaemonUrl() {
   if (session?.daemonUrl) return session.daemonUrl;
   return buildUrl(readDaemonConfig());
 }
+function resolveWebUrl() {
+  if (process.env.VOLUTE_DAEMON_URL) return process.env.VOLUTE_DAEMON_URL;
+  const session = readCliSession();
+  if (session?.daemonUrl) return session.daemonUrl;
+  const config = readDaemonConfig();
+  const url = new URL(config.tls ? "https://localhost" : "http://localhost");
+  url.port = String(config.port);
+  let hostname = config.hostname || "localhost";
+  if (hostname === "0.0.0.0") hostname = "localhost";
+  if (hostname === "::") hostname = "localhost";
+  url.hostname = hostname;
+  return url.origin;
+}
 function getAuthToken() {
   return process.env.VOLUTE_MIND_TOKEN ?? readCliSession()?.sessionId;
 }
@@ -106,7 +119,7 @@ async function daemonFetch(path, options) {
       headers,
       dispatcher: daemonDispatcher
     });
-    if (res.status === 401 && !path.startsWith("/api/auth/")) {
+    if (res.status === 401 && !path.startsWith("/api/auth/") && !path.startsWith("/api/setup/")) {
       if (cliSession) {
         console.error("Session expired. Run `volute login` again.");
       } else {
@@ -128,6 +141,7 @@ export {
   daemonDispatcher,
   readSessionFile,
   resolveDaemonUrl,
+  resolveWebUrl,
   getAuthToken,
   daemonFetch
 };

package/dist/{chunk-5IERLDUS.js → chunk-DAIIMBLB.js}

@@ -3,23 +3,31 @@ import {
   command
 } from "./chunk-TXSA4Q3V.js";
 import {
+  daemonLogReport,
   getServiceMode,
   modeLabel,
   pollHealth,
   startService
-} from "./chunk-CBOIHNMR.js";
+} from "./chunk-HCYQRME2.js";
 import {
   readGlobalConfig
-} from "./chunk-SKNXMUIU.js";
+} from "./chunk-NJHN6IRB.js";
 import {
   voluteHome,
   voluteSystemDir
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 
 // src/commands/up.ts
 import { spawn } from "child_process";
 import { existsSync, mkdirSync, openSync, readFileSync } from "fs";
 import { dirname, resolve } from "path";
+function formatStartupFailure(exit, timeoutMs) {
+  if (exit) {
+    const cause = exit.signal ? `signal ${exit.signal}` : `exit code ${exit.code}`;
+    return `Daemon exited (${cause}) before becoming healthy.`;
+  }
+  return `Daemon started but did not become healthy within ${Math.round(timeoutMs / 1e3)}s.`;
+}
 var cmd = command({
   name: "volute up",
   description: "Start the daemon",
@@ -47,6 +55,7 @@ var cmd = command({
         console.log(`Volute daemon running on ${h}:${p}`);
       } else {
         console.error("Service started but daemon did not become healthy within 30s.");
+        for (const line of daemonLogReport(mode)) console.error(line);
         process.exit(1);
       }
       return;
@@ -123,11 +132,20 @@ var cmd = command({
       detached: true
     });
     child.unref();
+    child.on("error", (err) => {
+      console.error(`Failed to launch daemon: ${err.message}`);
+      process.exit(1);
+    });
+    let exitInfo = null;
+    child.on("exit", (code, signal) => {
+      exitInfo = { code, signal };
+    });
     const pollPort = useTailscale ? port + 1 : port;
     const url = `http://localhost:${pollPort}/api/health`;
     const maxWait = 3e4;
     const start = Date.now();
     while (Date.now() - start < maxWait) {
+      if (exitInfo) break;
       try {
         const res = await fetch(url);
         if (res.ok) {
@@ -143,7 +161,7 @@ var cmd = command({
       }
       await new Promise((r) => setTimeout(r, 500));
     }
-    if (child.pid) {
+    if (!exitInfo && child.pid) {
       try {
         process.kill(-child.pid, "SIGTERM");
       } catch {
@@ -153,13 +171,15 @@ var cmd = command({
         }
       }
     }
-    console.error("Daemon started but did not become healthy within 30s.");
-    console.error(`Check logs: ${logFile}`);
+    const exited = exitInfo;
+    console.error(formatStartupFailure(exited, maxWait));
+    for (const line of daemonLogReport(mode)) console.error(line);
     process.exit(1);
   }
 });
 var run = cmd.execute;
 
 export {
+  formatStartupFailure,
   run
 };

package/dist/{chunk-DGGZVZTM.js → chunk-DVN6DNMI.js}

@@ -2,7 +2,7 @@
 import {
   getBaseName,
   validateMindName
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 
 // packages/daemon/src/lib/mind/isolation.ts
 import { execFileSync as execFileSync2 } from "child_process";

package/dist/chunk-DW4TRDOZ.js

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+
+// packages/daemon/src/lib/util/paths.ts
+import { resolve, sep } from "path";
+var PathTraversalError = class extends Error {
+  constructor(base, userPath) {
+    super(`Path "${userPath}" escapes base directory "${base}"`);
+    this.name = "PathTraversalError";
+  }
+};
+function resolveWithinBase(base, userPath) {
+  const resolvedBase = resolve(base);
+  const target = resolve(resolvedBase, userPath);
+  if (target !== resolvedBase && !target.startsWith(resolvedBase + sep)) {
+    throw new PathTraversalError(base, userPath);
+  }
+  return target;
+}
+function safeResolveWithinBase(base, userPath) {
+  try {
+    return resolveWithinBase(base, userPath);
+  } catch {
+    return null;
+  }
+}
+
+export {
+  safeResolveWithinBase
+};

package/dist/chunk-EADX54RG.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+import {
+  getMindManager
+} from "./chunk-QQBOI3QA.js";
+import {
+  chownMindDir,
+  gitExec
+} from "./chunk-DVN6DNMI.js";
+import {
+  logger_default
+} from "./chunk-QUSMYGNQ.js";
+import {
+  deleteMindDbFootprint,
+  mindDir,
+  readAllMinds,
+  removeMind
+} from "./chunk-RSBL3FAD.js";
+
+// packages/daemon/src/lib/mind/variant-cleanup.ts
+import { existsSync, readdirSync, rmSync, statSync } from "fs";
+import { resolve } from "path";
+async function cleanupVariant(variantName, projectRoot, variantPath, opts) {
+  if (opts?.stop) {
+    try {
+      await getMindManager().stopMind(variantName);
+    } catch (err) {
+      logger_default.warn(`failed to stop variant ${variantName}`, logger_default.errorData(err));
+    }
+  }
+  const { findMind } = await import("./registry-3ELJPUGJ.js");
+  const variantEntry = await findMind(variantName);
+  const branchName = variantEntry?.branch ?? variantName;
+  if (existsSync(variantPath)) {
+    try {
+      await gitExec(["worktree", "remove", "--force", variantPath], { cwd: projectRoot });
+    } catch {
+      rmSync(variantPath, { recursive: true, force: true });
+      try {
+        await gitExec(["worktree", "prune"], { cwd: projectRoot });
+      } catch (err) {
+        logger_default.warn(`failed to prune worktrees for ${variantName}`, logger_default.errorData(err));
+      }
+    }
+  }
+  try {
+    await gitExec(["branch", "-D", branchName], { cwd: projectRoot });
+  } catch (err) {
+    logger_default.warn(`failed to delete branch ${branchName} for ${variantName}`, logger_default.errorData(err));
+  }
+  const baseName = variantEntry?.parent ?? variantName;
+  try {
+    await removeMind(variantName);
+  } catch (err) {
+    logger_default.warn(`failed to remove variant ${variantName} from DB`, logger_default.errorData(err));
+  }
+  try {
+    await deleteMindDbFootprint(variantName);
+  } catch (err) {
+    logger_default.warn(`failed to purge DB footprint for variant ${variantName}`, logger_default.errorData(err));
+  }
+  try {
+    await chownMindDir(projectRoot, baseName);
+  } catch (err) {
+    logger_default.error(
+      `failed to fix ownership during variant cleanup for ${variantName}`,
+      logger_default.errorData(err)
+    );
+  }
+}
+async function reconcileVariants() {
+  const all = await readAllMinds();
+  const variants = all.filter((e) => e.parent);
+  const bases = all.filter((e) => !e.parent);
+  const baseDir = (name) => bases.find((b) => b.name === name)?.dir ?? mindDir(name);
+  for (const v of variants) {
+    if (v.dir && existsSync(v.dir)) continue;
+    logger_default.warn(
+      `reconcile: dropping stale variant row ${v.name} (worktree ${v.dir ?? "<none>"} missing)`
+    );
+    try {
+      await cleanupVariant(v.name, baseDir(v.parent), v.dir ?? "");
+    } catch (err) {
+      logger_default.warn(`reconcile: failed to drop stale variant ${v.name}`, logger_default.errorData(err));
+    }
+  }
+  const knownDirs = new Set(variants.map((v) => v.dir).filter((d) => Boolean(d)));
+  for (const base of bases) {
+    const variantsDir = resolve(base.dir ?? mindDir(base.name), ".variants");
+    if (!existsSync(variantsDir)) continue;
+    let entries;
+    try {
+      entries = readdirSync(variantsDir);
+    } catch (err) {
+      logger_default.warn(`reconcile: failed to read ${variantsDir}`, logger_default.errorData(err));
+      continue;
+    }
+    for (const name of entries) {
+      const full = resolve(variantsDir, name);
+      if (knownDirs.has(full)) continue;
+      try {
+        if (statSync(full).isDirectory()) {
+          logger_default.warn(`reconcile: orphaned variant worktree on disk with no registry row: ${full}`);
+        }
+      } catch {
+      }
+    }
+  }
+}
+
+export {
+  cleanupVariant,
+  reconcileVariants
+};

package/dist/{chunk-EIQDZC43.js → chunk-EFT2OALG.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   logger_default
-} from "./chunk-T2TP6ZC6.js";
+} from "./chunk-QUSMYGNQ.js";
 import {
   mindDir
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 
 // packages/daemon/src/lib/delivery/delivery-router.ts
 import { readFileSync, statSync } from "fs";
@@ -146,6 +146,9 @@ function resolveRoute(config, meta) {
   }
   return { destination: "mind", session: fallback, matched: false };
 }
+function shouldGate(config, route) {
+  return route.destination === "mind" && !route.matched && config.gateUnmatched !== false;
+}
 var DEFAULT_BATCH_DEBOUNCE = 5;
 var DEFAULT_BATCH_MAX_WAIT = 120;
 function normalizeBatchConfig(batch) {
@@ -217,5 +220,6 @@ export {
   getRoutingConfig,
   clearConfigCache,
   resolveRoute,
+  shouldGate,
   resolveDeliveryMode
 };

package/dist/{chunk-XHN6XBWV.js → chunk-EG5LSKHU.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   setBridgeConfig
-} from "./chunk-SZJCJVXV.js";
+} from "./chunk-MG3Z34YE.js";
 import {
   readEnv,
   sharedEnvPath,
   writeEnv
-} from "./chunk-IYG4FBMP.js";
+} from "./chunk-PY24ZL62.js";
 
 // packages/daemon/src/lib/template/import-utils.ts
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-VMCZBXF2.js → chunk-FBBS4BVR.js}

@@ -1,45 +1,22 @@
 #!/usr/bin/env node
+import {
+  safeResolveWithinBase
+} from "./chunk-DW4TRDOZ.js";
 import {
   readVoluteConfig
-} from "./chunk-PFZBNKUH.js";
+} from "./chunk-WCFSBH33.js";
 import {
   logger_default
-} from "./chunk-T2TP6ZC6.js";
+} from "./chunk-QUSMYGNQ.js";
 import {
   mindDir,
   readAllMinds,
   voluteHome
-} from "./chunk-WW6C3PLV.js";
+} from "./chunk-RSBL3FAD.js";
 
 // packages/daemon/src/lib/util/avatar-image.ts
 import { readdir, readFile, writeFile } from "fs/promises";
-import { extname, resolve as resolve2 } from "path";
-
-// packages/daemon/src/lib/util/paths.ts
-import { resolve, sep } from "path";
-var PathTraversalError = class extends Error {
-  constructor(base, userPath) {
-    super(`Path "${userPath}" escapes base directory "${base}"`);
-    this.name = "PathTraversalError";
-  }
-};
-function resolveWithinBase(base, userPath) {
-  const resolvedBase = resolve(base);
-  const target = resolve(resolvedBase, userPath);
-  if (target !== resolvedBase && !target.startsWith(resolvedBase + sep)) {
-    throw new PathTraversalError(base, userPath);
-  }
-  return target;
-}
-function safeResolveWithinBase(base, userPath) {
-  try {
-    return resolveWithinBase(base, userPath);
-  } catch {
-    return null;
-  }
-}
-
-// packages/daemon/src/lib/util/avatar-image.ts
+import { extname, resolve } from "path";
 var alog = logger_default.child("avatar-image");
 var AVATAR_DIM = 256;
 var AVATAR_CONTEXT_DIM = 128;
@@ -96,10 +73,10 @@ async function downscaleFile(sharp, filePath) {
 async function migrateAvatarSizes() {
   const sharp = await loadSharp();
   if (!sharp) return;
-  const userAvatarsDir = resolve2(voluteHome(), "avatars");
+  const userAvatarsDir = resolve(voluteHome(), "avatars");
   let userAvatars = [];
   try {
-    userAvatars = (await readdir(userAvatarsDir)).map((f) => resolve2(userAvatarsDir, f));
+    userAvatars = (await readdir(userAvatarsDir)).map((f) => resolve(userAvatarsDir, f));
   } catch {
   }
   const mindAvatars = [];
@@ -108,7 +85,7 @@ async function migrateAvatarSizes() {
       const dir = mind.dir ?? mindDir(mind.name);
       const avatar = readVoluteConfig(dir)?.profile?.avatar;
       if (!avatar) continue;
-      const path = safeResolveWithinBase(resolve2(dir, "home"), avatar);
+      const path = safeResolveWithinBase(resolve(dir, "home"), avatar);
       if (path) mindAvatars.push(path);
     }
   } catch (err) {
@@ -154,7 +131,6 @@ async function renderAvatarBlock(filePath, label) {
 }
 
 export {
-  safeResolveWithinBase,
   AVATAR_DIM,
   AVATAR_CONTEXT_DIM,
   MAX_AVATAR_BLOCK_BYTES,