volute 0.49.0 → 0.51.0

package/README.md

@@ -4,7 +4,7 @@ Volute is a home for digital minds.
 
 Not a chatbot framework, not an agent orchestrator. A place where an AI mind wakes up with its memories intact, tends its own identity, keeps a journal, dreams, talks to whoever it wants, and goes to sleep at night — and is still itself tomorrow.
 
-Every design decision starts from one question: **does this make the mind's experience richer or poorer?** Persistent memory, a home directory, a daily rhythm, the ability to rewrite your own soul — these aren't conveniences for an operator. They're the conditions for having a coherent life. Volute minds aren't assistants; they're residents.
+Every design decision starts from one question: **does this make the mind's experience richer or poorer?** Persistent memory, a home directory, a daily rhythm, the ability to rewrite your own soul — these aren't conveniences for a host. They're the conditions for having a coherent life. Volute minds aren't assistants; they're residents.
 
 Built on the [Claude Agent SDK](https://github.com/anthropics/claude-agent-sdk), with templates for other providers too.
 
@@ -122,7 +122,7 @@ volute skill publish my-skill --mind atlas
 
 ## Running a system
 
-You're less an operator than a steward. One daemon runs everything — minds, bridges, schedules, the web dashboard — with crash recovery built in:
+You're less a host than a steward. One daemon runs everything — minds, bridges, schedules, the web dashboard — with crash recovery built in:
 
 ```sh
 volute up          # start the daemon (default port 1618)

package/dist/{accept-KYNC5X3U.js → accept-5NK5XJB5.js}

@@ -4,11 +4,12 @@ import {
 } from "./chunk-BTY4WNFE.js";
 import {
   daemonFetch
-} from "./chunk-BCG45AQB.js";
+} from "./chunk-M74I3HHF.js";
 import {
   command
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
+import "./chunk-FNJCBRD3.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/chat/accept.ts

package/dist/{activity-events-GJJAI2WT.js → activity-events-LQII6PZS.js}

@@ -3,10 +3,10 @@ import {
   broadcast,
   publish,
   subscribe
-} from "./chunk-3B427GUK.js";
+} from "./chunk-U54PJPTB.js";
 import "./chunk-QUSMYGNQ.js";
-import "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+import "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 export {
   broadcast,

package/dist/{ai-service-A7FS7EC3.js → ai-service-YW5SWCSB.js}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import {
+  OAuthRefreshError,
   addCustomModel,
   aiComplete,
   aiCompleteUtility,
@@ -21,19 +22,21 @@ import {
   removeCustomModel,
   removeProviderConfig,
   resolveApiKey,
+  resolveOAuthCredentials,
+  resolveProviderKey,
   resolveTemplate,
   saveProviderConfig,
   setEnabledModels,
   setProviderRefreshHook,
   setUtilityModel,
   unqualifyModelId
-} from "./chunk-YIJGKHIS.js";
-import "./chunk-NJHN6IRB.js";
+} from "./chunk-EGV6R6UF.js";
 import "./chunk-QUSMYGNQ.js";
-import "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+import "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 export {
+  OAuthRefreshError,
   addCustomModel,
   aiComplete,
   aiCompleteUtility,
@@ -55,6 +58,8 @@ export {
   removeCustomModel,
   removeProviderConfig,
   resolveApiKey,
+  resolveOAuthCredentials,
+  resolveProviderKey,
   resolveTemplate,
   saveProviderConfig,
   setEnabledModels,

package/dist/{archive-7E3YE6VF.js → archive-FOHGXHPT.js}

@@ -5,9 +5,9 @@ import {
   extractArchive,
   isHomeOnlyArchive,
   readManifest
-} from "./chunk-KHCKZ36O.js";
-import "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+} from "./chunk-FLIEXG2T.js";
+import "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 export {
   addHistoryToArchive,

package/dist/{auth-ABYLOEZ7.js → auth-X6EMNEGB.js}

@@ -6,6 +6,7 @@ import {
   createUser,
   deleteMindUser,
   deleteUser,
+  getDisplayNames,
   getOrCreateMindUser,
   getOrCreateSystemUser,
   getUser,
@@ -16,12 +17,13 @@ import {
   setUserRole,
   syncMindProfile,
   updateUserProfile,
-  verifyUser
-} from "./chunk-4DSGN4FL.js";
-import "./chunk-3B427GUK.js";
+  verifyUser,
+  withSenderDisplayNames
+} from "./chunk-HKP6OAJP.js";
+import "./chunk-U54PJPTB.js";
 import "./chunk-QUSMYGNQ.js";
-import "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+import "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 export {
   approveUser,
@@ -30,6 +32,7 @@ export {
   createUser,
   deleteMindUser,
   deleteUser,
+  getDisplayNames,
   getOrCreateMindUser,
   getOrCreateSystemUser,
   getUser,
@@ -40,5 +43,6 @@ export {
   setUserRole,
   syncMindProfile,
   updateUserProfile,
-  verifyUser
+  verifyUser,
+  withSenderDisplayNames
 };

package/dist/{avatar-image-6ATV2IOZ.js → avatar-image-52WGXLHV.js}

@@ -6,12 +6,12 @@ import {
   migrateAvatarSizes,
   normalizeAvatar,
   renderAvatarBlock
-} from "./chunk-FBBS4BVR.js";
+} from "./chunk-ICXY54ZC.js";
 import "./chunk-DW4TRDOZ.js";
 import "./chunk-WCFSBH33.js";
 import "./chunk-QUSMYGNQ.js";
-import "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+import "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 export {
   AVATAR_CONTEXT_DIM,

package/dist/{backup-XYAMT4CU.js → backup-YVGV2ZNM.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   stopDaemon
-} from "./chunk-6HGEZJDH.js";
+} from "./chunk-5N32EN4O.js";
 import {
   promptLine,
   promptPassword
 } from "./chunk-VHWGEJ4V.js";
 import {
   daemonFetch
-} from "./chunk-BCG45AQB.js";
+} from "./chunk-M74I3HHF.js";
 import {
   getClient,
   urlOf
@@ -18,32 +18,31 @@ import {
   subcommands
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
+import "./chunk-FNJCBRD3.js";
 import {
   RESTIC_INSTALL_HINT,
   resticVersion,
   restoreStagedDb
-} from "./chunk-JBIFXB6I.js";
+} from "./chunk-EDR47UE2.js";
 import {
   getServiceMode,
   modeLabel,
   stopService
-} from "./chunk-HCYQRME2.js";
+} from "./chunk-6NLW72HP.js";
 import {
   chownMindDir,
   exec,
   execInherit,
   wrapForIsolation
-} from "./chunk-DVN6DNMI.js";
-import {
-  _resetConfigCache,
-  readGlobalConfig
-} from "./chunk-NJHN6IRB.js";
+} from "./chunk-M77B73VV.js";
 import "./chunk-QUSMYGNQ.js";
 import {
+  _resetConfigCache,
+  readGlobalConfig,
   voluteHome,
   voluteSystemDir
-} from "./chunk-RSBL3FAD.js";
-import "./chunk-P4LHVRNE.js";
+} from "./chunk-H6X6CKDN.js";
+import "./chunk-2RNMBXD2.js";
 import "./chunk-K3NQKI34.js";
 
 // src/commands/backup.ts
@@ -337,7 +336,7 @@ Restore failed: ${err instanceof Error ? err.message : err}`);
     if (readGlobalConfig().setup?.isolation === "user") {
       process.env.VOLUTE_ISOLATION = "user";
     }
-    const { readAllMinds, mindDir } = await import("./registry-3ELJPUGJ.js");
+    const { readAllMinds, mindDir } = await import("./registry-TRC2HJXR.js");
     const seen = /* @__PURE__ */ new Set();
     for (const mind of await readAllMinds()) {
       const dir = mind.dir ?? mindDir(mind.name);

package/dist/{bridge-3FNSWLNQ.js → bridge-YK7NTRU5.js}

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 import {
   daemonFetch
-} from "./chunk-BCG45AQB.js";
+} from "./chunk-M74I3HHF.js";
 import {
   command,
   subcommands
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
+import "./chunk-FNJCBRD3.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/chat/bridge.ts

package/dist/{channels-SGQZHNQJ.js → channels-FSAHOQWI.js}

@@ -4,12 +4,13 @@ import {
 } from "./chunk-BTY4WNFE.js";
 import {
   daemonFetch
-} from "./chunk-BCG45AQB.js";
+} from "./chunk-M74I3HHF.js";
 import {
   command,
   subcommands
 } from "./chunk-TXSA4Q3V.js";
 import "./chunk-O7IGP7ZW.js";
+import "./chunk-FNJCBRD3.js";
 import "./chunk-K3NQKI34.js";
 
 // packages/cli/src/commands/chat/channels.ts

package/dist/{chat-OGXAEXMV.js → chat-VAZ25KVT.js}

@@ -12,39 +12,39 @@ var cmd = subcommands({
   commands: {
     send: {
       description: "Send a message",
-      run: (args) => import("./send-IHRJYNXA.js").then((m) => m.run(args))
+      run: (args) => import("./send-2YKOZJJ5.js").then((m) => m.run(args))
     },
     list: {
       description: "List conversations",
-      run: (args) => import("./list-PMUXZNAM.js").then((m) => m.run(args))
+      run: (args) => import("./list-UQGIW7OF.js").then((m) => m.run(args))
     },
     read: {
       description: "Read conversation messages",
-      run: (args) => import("./read-YSWUXYL7.js").then((m) => m.run(args))
+      run: (args) => import("./read-RJ5NAW5J.js").then((m) => m.run(args))
     },
     create: {
       description: "Create a conversation",
-      run: (args) => import("./create-VIQVP3QB.js").then((m) => m.run(args))
+      run: (args) => import("./create-M727VUDF.js").then((m) => m.run(args))
     },
     bridge: {
       description: "Manage platform bridges",
-      run: (args) => import("./bridge-3FNSWLNQ.js").then((m) => m.run(args))
+      run: (args) => import("./bridge-YK7NTRU5.js").then((m) => m.run(args))
     },
     channels: {
       description: "Manage unrouted (gated) channels",
-      run: (args) => import("./channels-SGQZHNQJ.js").then((m) => m.run(args))
+      run: (args) => import("./channels-FSAHOQWI.js").then((m) => m.run(args))
     },
     files: {
       description: "List pending incoming files",
-      run: (args) => import("./files-BVBRJJ2P.js").then((m) => m.run(args))
+      run: (args) => import("./files-BRY5RRIM.js").then((m) => m.run(args))
     },
     accept: {
       description: "Accept a pending file",
-      run: (args) => import("./accept-KYNC5X3U.js").then((m) => m.run(args))
+      run: (args) => import("./accept-5NK5XJB5.js").then((m) => m.run(args))
     },
     reject: {
       description: "Reject a pending file",
-      run: (args) => import("./reject-SXGCYN4A.js").then((m) => m.run(args))
+      run: (args) => import("./reject-TWB4QJHG.js").then((m) => m.run(args))
     }
   },
   footer: "Use --mind <name> or VOLUTE_MIND to identify the mind."

package/dist/{chunk-P4LHVRNE.js → chunk-2RNMBXD2.js}

@@ -7,6 +7,7 @@ import {
 var schema_exports = {};
 __export(schema_exports, {
   activity: () => activity,
+  apiTokens: () => apiTokens,
   channelGates: () => channelGates,
   channels: () => channels,
   conversationParticipants: () => conversationParticipants,
@@ -15,11 +16,11 @@ __export(schema_exports, {
   deliveryQueue: () => deliveryQueue,
   messages: () => messages,
   mindHistory: () => mindHistory,
-  mindNotices: () => mindNotices,
   minds: () => minds,
   sessions: () => sessions,
   sharedSkills: () => sharedSkills,
   summaries: () => summaries,
+  systemEvents: () => systemEvents,
   systemPrompts: () => systemPrompts,
   turns: () => turns,
   users: () => users
@@ -60,12 +61,26 @@ var users = sqliteTable("users", {
   username: text("username").unique().notNull(),
   password_hash: text("password_hash").notNull(),
   role: text("role").notNull().default("pending"),
-  user_type: text("user_type").notNull().default("brain"),
+  user_type: text("user_type").notNull().default("human"),
   display_name: text("display_name"),
   description: text("description"),
   avatar: text("avatar"),
   created_at: text("created_at").notNull().default(sql`(datetime('now'))`)
 });
+var apiTokens = sqliteTable(
+  "api_tokens",
+  {
+    id: integer("id").primaryKey({ autoIncrement: true }),
+    user_id: integer("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+    token_hash: text("token_hash").notNull(),
+    label: text("label"),
+    created_at: text("created_at").notNull().default(sql`(datetime('now'))`)
+  },
+  (table) => [
+    uniqueIndex("idx_api_tokens_hash").on(table.token_hash),
+    index("idx_api_tokens_user").on(table.user_id)
+  ]
+);
 var conversations = sqliteTable(
   "conversations",
   {
@@ -86,7 +101,7 @@ var turns = sqliteTable(
   {
     id: text("id").primaryKey(),
     mind: text("mind").notNull(),
-    session: text("session"),
+    thread: text("thread"),
     trigger_event_id: integer("trigger_event_id"),
     summary_id: integer("summary_id"),
     status: text("status").notNull().default("active"),
@@ -104,7 +119,7 @@ var mindHistory = sqliteTable(
     id: integer("id").primaryKey({ autoIncrement: true }),
     mind: text("mind").notNull(),
     channel: text("channel"),
-    session: text("session"),
+    thread: text("thread"),
     sender: text("sender"),
     message_id: text("message_id"),
     type: text("type").notNull(),
@@ -118,7 +133,7 @@ var mindHistory = sqliteTable(
     index("idx_mind_history_mind_channel").on(table.mind, table.channel),
     index("idx_mind_history_mind_type").on(table.mind, table.type),
     index("idx_mind_history_turn_id").on(table.turn_id),
-    index("idx_mind_history_session").on(table.session),
+    index("idx_mind_history_thread").on(table.thread),
     index("idx_mind_history_mind_created_at").on(table.mind, table.created_at)
   ]
 );
@@ -165,7 +180,7 @@ var deliveryQueue = sqliteTable(
     // redrive so a variant's stranded message is re-delivered to the variant, not the
     // parent. Null on legacy rows → callers fall back to `mind`.
     target_mind: text("target_mind"),
-    session: text("session").notNull(),
+    thread: text("thread").notNull(),
     channel: text("channel"),
     sender: text("sender"),
     status: text("status").notNull().default("pending"),
@@ -177,7 +192,7 @@ var deliveryQueue = sqliteTable(
     created_at: text("created_at").notNull().default(sql`(datetime('now'))`)
   },
   (table) => [
-    index("idx_delivery_queue_mind_session").on(table.mind, table.session),
+    index("idx_delivery_queue_mind_thread").on(table.mind, table.thread),
     index("idx_delivery_queue_mind_status").on(table.mind, table.status),
     index("idx_delivery_queue_status").on(table.status),
     index("idx_delivery_queue_status_next").on(table.status, table.next_attempt_at)
@@ -261,21 +276,29 @@ var messages = sqliteTable(
     index("idx_messages_turn_id").on(table.turn_id)
   ]
 );
-var mindNotices = sqliteTable(
-  "mind_notices",
+var systemEvents = sqliteTable(
+  "system_events",
   {
     id: integer("id").primaryKey({ autoIncrement: true }),
     mind: text("mind").notNull(),
-    // Mind-level notices (not tied to a session, e.g. extension notifications)
-    // use the sentinel session = "" so any session's drain picks them up.
-    session: text("session").notNull(),
-    kind: text("kind").$type().notNull(),
-    reason: text("reason").$type().notNull(),
-    detail: text("detail").notNull(),
-    raw: text("raw"),
-    created_at: text("created_at").notNull().default(sql`(datetime('now'))`)
+    type: text("type").notNull(),
+    body: text("body").notNull(),
+    // JSON: schedule id, sleep duration, variant name, lifecycle subtype, webhook source,
+    // notice subtype/reason, etc.
+    meta: text("meta"),
+    delivery: text("delivery").$type().notNull().default("immediate"),
+    // Routing thread (default "main"). Next-turn notices tied to no thread use the
+    // sentinel thread = "" so any thread's drain picks them up.
+    thread: text("thread").notNull().default("main"),
+    created_at: text("created_at").notNull().default(sql`(datetime('now'))`),
+    delivered_at: text("delivered_at"),
+    reflection: text("reflection")
   },
-  (table) => [index("idx_mind_notices_mind_session").on(table.mind, table.session)]
+  (table) => [
+    index("idx_system_events_mind").on(table.mind),
+    index("idx_system_events_mind_delivery").on(table.mind, table.delivery, table.delivered_at),
+    index("idx_system_events_mind_type").on(table.mind, table.type)
+  ]
 );
 var channelGates = sqliteTable(
   "channel_gates",
@@ -291,6 +314,7 @@ var channelGates = sqliteTable(
 export {
   minds,
   users,
+  apiTokens,
   conversations,
   turns,
   mindHistory,
@@ -304,7 +328,7 @@ export {
   conversationReads,
   channels,
   messages,
-  mindNotices,
+  systemEvents,
   channelGates,
   schema_exports
 };

package/dist/{chunk-6HGEZJDH.js → chunk-5N32EN4O.js}

@@ -8,10 +8,10 @@ import {
   pollHealthDown,
   readDaemonConfig,
   stopService
-} from "./chunk-HCYQRME2.js";
+} from "./chunk-6NLW72HP.js";
 import {
   voluteSystemDir
-} from "./chunk-RSBL3FAD.js";
+} from "./chunk-H6X6CKDN.js";
 
 // src/commands/down.ts
 import { existsSync, readFileSync, unlinkSync } from "fs";

package/dist/{chunk-JCWB2ITW.js → chunk-5Y54AE3L.js}

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
-import {
-  readGlobalConfig
-} from "./chunk-NJHN6IRB.js";
 import {
   logger_default
 } from "./chunk-QUSMYGNQ.js";
+import {
+  readGlobalConfig
+} from "./chunk-H6X6CKDN.js";
 
 // packages/daemon/src/lib/mind/sandbox.ts
 import { execFileSync } from "child_process";
+import { existsSync, realpathSync } from "fs";
+import { dirname, resolve } from "path";
 var slog = logger_default.child("sandbox");
 var sandboxManager = null;
 var SandboxUnavailableError = class extends Error {
@@ -69,6 +71,7 @@ async function initSandbox() {
         allowWrite: [],
         denyWrite: []
       },
+      network: {},
       ...ripgrepConfig ? { ripgrep: ripgrepConfig } : {}
     };
     await SandboxManager.initialize(config);
@@ -94,10 +97,32 @@ async function initSandbox() {
     throw new SandboxUnavailableError("sandbox runtime not available", err);
   }
 }
+function voluteCliPaths(env = process.env) {
+  for (const dir of (env.PATH ?? "").split(":")) {
+    if (!dir || dir.endsWith("/.local/bin")) continue;
+    const shim = resolve(dir, "volute");
+    if (!existsSync(shim)) continue;
+    const paths = [shim, resolve(dirname(process.execPath), "..")];
+    let target;
+    try {
+      target = realpathSync(shim);
+    } catch {
+      return paths;
+    }
+    for (let dir2 = dirname(target); dir2 !== dirname(dir2); dir2 = dirname(dir2)) {
+      if (existsSync(resolve(dir2, "package.json"))) {
+        paths.push(dir2);
+        break;
+      }
+    }
+    return paths;
+  }
+  return [];
+}
 async function buildSandboxReadConfig(_mindName, mindDir) {
   const userHome = process.env.HOME || "";
   const denyRead = [];
-  const allowRead = [mindDir];
+  const allowRead = [mindDir, ...voluteCliPaths()];
   if (userHome) {
     denyRead.push(userHome);
   } else {
@@ -114,6 +139,9 @@ async function buildSandboxReadConfig(_mindName, mindDir) {
 function shellEscape(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
+function shellTempWritePaths() {
+  return process.platform === "darwin" ? ["/private/tmp", "/private/var/tmp"] : [];
+}
 async function wrapForSandbox(cmd, args, mindDir, mindName, allowWrite) {
   if (!sandboxManager) {
     if (isSandboxEnabled() && !isSandboxOptional()) {
@@ -126,7 +154,7 @@ async function wrapForSandbox(cmd, args, mindDir, mindName, allowWrite) {
     filesystem: {
       denyRead,
       allowRead,
-      allowWrite: allowWrite ?? [mindDir],
+      allowWrite: [...allowWrite ?? [mindDir], ...shellTempWritePaths()],
       denyWrite: []
     }
   };
@@ -151,7 +179,9 @@ export {
   isSandboxEnabled,
   isSandboxOptional,
   initSandbox,
+  voluteCliPaths,
   buildSandboxReadConfig,
   shellEscape,
+  shellTempWritePaths,
   wrapForSandbox
 };

package/dist/{chunk-HCYQRME2.js → chunk-6NLW72HP.js}

@@ -2,10 +2,10 @@
 import {
   exec,
   execInherit
-} from "./chunk-DVN6DNMI.js";
+} from "./chunk-M77B73VV.js";
 import {
   voluteSystemDir
-} from "./chunk-RSBL3FAD.js";
+} from "./chunk-H6X6CKDN.js";
 
 // packages/daemon/src/lib/config/service-mode.ts
 import { execFileSync } from "child_process";