@turmind/halo 0.1.9

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 turmind
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,143 @@
+# Halo
+
+[![npm](https://img.shields.io/npm/v/@turmind/halo?color=cb3837&logo=npm)](https://www.npmjs.com/package/@turmind/halo)
+[![license](https://img.shields.io/npm/l/@turmind/halo?color=blue)](LICENSE)
+[![node](https://img.shields.io/badge/node-%3E%3D22-43853d?logo=node.js&logoColor=white)](https://nodejs.org)
+
+[English](README.md) | [中文](README.zh-CN.md)
+
+**A multi-agent collaborative workspace you drive through natural language.** Describe what you want built; a primary agent decomposes the work, spawns sub-agents, and delivers it — while you watch, redirect, or take over at any point. Everything lives as files in a workspace you can read, edit, fork, and share.
+
+![Halo workspace — file explorer, code canvas, and chat in one tab](assets/workspace.jpg)
+
+## Highlights
+
+**🧬 It improves itself.** Halo learns from its own conversations. Run `/note` (or let pre-compact fire) and an internal evolution agent analyzes the session, drafts an improvement to its own prompt files, dry-runs it in a sandbox, and a scoring agent grades the result. You approve in the **Evolution** tab → the change merges back into the workspace. The agent literally refines its own instructions, with you as the reviewer.
+
+![Agents panel — global agents plus the internal Apply / Evolution / Score agents that power self-evolution](assets/agents.jpg)
+
+**🌐 One workspace, every channel.** Start a task in the browser, check progress from WeChat on your phone, give follow-up instructions over Telegram or Slack. Every channel connects to the *same* workspace and session — the workspace is the collaboration anchor, not the chat window.
+
+**🧠 Provider-agnostic models.** A single `ModelRuntime` interface drives 10 model providers, configured per-agent. Run Claude on Bedrock for the heavy lifting and a cheaper local-region model for routine sub-tasks — no code changes.
+
+**👁 Transparent orchestration.** Every agent's reasoning, tool call, and file change is visible in real time. Interrupts are graceful (conversation repair, not a hard abort), and sub-agents auto-report when done. You stay in the loop instead of running and praying.
+
+**🖥 IDE-like admin UI.** Chat + Monaco editor + file explorer + terminal (xterm.js), all in one browser tab. No switching between "talking to the AI" and "looking at the code."
+
+**📁 The workspace is a portable unit.** Agent configs, skills, session history, and project docs are all just files under `.halo/` — no hidden memory, no opaque state. Because the whole agent lives in one directory, the unit you share is the *entire workspace*, not a single skill: copy `.halo/` (or `git clone` it) and the recipient gets a complete, runnable agent — persona, every skill, and config — that starts working on arrival. This is also what makes self-evolution possible: the evolution agent rewrites real files in the workspace, dry-runs them, and merges on approval.
+
+**🔒 Permission isolation.** Three access levels (`full` / `workspace` / `readonly`) enforced by a bubblewrap sandbox. Hand someone a `readonly` entry point and they can use your agents without write access to your files. (Filesystem isolation only — see [Status & Limitations](#status--limitations).)
+
+## Quick Start
+
+Published on npm as [`@turmind/halo`](https://www.npmjs.com/package/@turmind/halo) — one binary, all subcommands:
+
+```bash
+npm install -g @turmind/halo
+halo setup            # interactive: password / port / model keys / optional skills
+halo server start     # launch on :9527 (default)
+```
+
+Then open **http://localhost:9527**.
+
+- **Upgrade**: `halo upgrade && halo server restart`. The server's startup check refreshes bundled docs / agents / skills automatically when the on-disk template version is behind.
+- **Docker / CI**: `halo setup --non-interactive` and supply credentials via the `HALO_PASSWORD` env var.
+- **From source**: `pnpm install && pnpm build`.
+
+| Prerequisite | Version |
+|---|---|
+| Node.js | >= 22 |
+| pnpm (source builds only) | >= 9 |
+| AWS credentials | Bedrock access, default region `us-east-1` |
+
+## Models
+
+Configured per-agent through one provider-agnostic runtime. AWS Bedrock Claude is the primary target; the rest are first-class.
+
+| Provider | Notes |
+|---|---|
+| **AWS Bedrock Claude** | Primary — Bedrock Invoke API |
+| AWS Bedrock Mantle | OpenAI GPT-class models via Bedrock |
+| Anthropic | Direct API |
+| OpenAI | Direct / any OpenAI-compatible endpoint |
+| DeepSeek | |
+| Kimi (Moonshot AI) | |
+| MiniMax | |
+| Qwen (Aliyun) | |
+| Hunyuan (Tencent) | |
+| Doubao (Volcengine) | |
+
+![Settings — all model providers, configurable per agent](assets/models.jpg)
+
+## Channels
+
+Every channel shares the same workspace and session state. Onboarding guides live under [`.halo/docs/guide/channels/`](.halo/docs/guide/channels/).
+
+| Channel | Transport | Notes |
+|---|---|---|
+| **Admin** | WebSocket | Full-featured browser UI |
+| **Web** | HTTP + SSE | Token-authenticated API, independently deployable |
+| **CLI / TUI** | local | Standalone terminal client, embedded agent loop (no server required) |
+| **Telegram** | Bot API | Long polling |
+| **Slack** | Socket Mode | No public webhook required |
+| **Feishu / Lark** | Long-connect | `appId` + `appSecret` |
+| **WeChat** | QR bind | Scan to bind, mobile access |
+| **ACP adapter** | stdio JSON-RPC | Bridges ACP clients (Claude Code, etc.) onto the Web channel |
+
+<p align="center">
+  <img src="assets/wechat-phone.jpg" alt="Halo in WeChat" width="270" />
+  &nbsp;&nbsp;
+  <img src="assets/telegram-phone.jpg" alt="Halo in Telegram" width="270" />
+</p>
+<p align="center"><sub>Same workspace, driven from WeChat and Telegram on a phone.</sub></p>
+
+## More Capabilities
+
+- **Multi-agent collaboration** — root agent decomposes tasks and spawns sub-agents; hierarchical sessions with async parent-child coordination.
+- **Workspace tools** — `file_read` / `file_write` / `file_edit`, sandboxed `shell_exec`, `grep` / `glob`, `web_fetch`, `view_image`, plus session tools (`start_session`, `query_session`, `interrupt_session`, …) for multi-agent control.
+- **Skills system** — Markdown-based skill definitions injected into agent prompts on demand; workspace-scoped or global, extensible without code changes.
+- **Cron tasks** — scheduled agent runs (recurring or one-shot) that fan output out to bound channel accounts.
+- **Halo City** — a read-only pixel **city block** that visualizes a server's runtime: each workspace is a building, each session an animal citizen at a desk, click anyone to inspect their live session log. Pure client-side canvas, zero model tokens. Lives at [`halo-city/`](halo-city/) — see [design notes](.halo/docs/design/halo-city.md).
+
+![Halo City — a pixel city block visualizing the server runtime](assets/halo-city.jpg)
+
+![Skills panel — global and workspace skills, extensible without code changes](assets/skills.jpg)
+
+![Halo CLI / TUI](assets/cli.jpg)
+
+## Tech Stack
+
+- **Monorepo**: pnpm workspace (`packages/core`, `server`, `admin`, `cli`)
+- **Backend**: Hono + WebSocket, single Node.js process on port 9527
+- **Frontend**: Next.js 15 static export, served directly by Hono
+- **Agent**: custom orchestration loop, provider-agnostic `ModelRuntime` interface
+- **Storage**: SQLite + Drizzle ORM — no external services to stand up
+- **Runtime**: Node.js 22+, ESM, TypeScript strict
+
+## Docs
+
+- [`.halo/INDEX.md`](.halo/INDEX.md) — project overview + doc index
+- [`.halo/docs/requirements/overview.md`](.halo/docs/requirements/overview.md) — product concept
+- [`.halo/docs/design/architecture.md`](.halo/docs/design/architecture.md) — backend architecture
+- [`.halo/docs/design/evolution.md`](.halo/docs/design/evolution.md) — self-evolution design
+- [`.halo/docs/dev/deploy.md`](.halo/docs/dev/deploy.md) — deployment (systemd / Nginx)
+- [`.halo/docs/dev/env.md`](.halo/docs/dev/env.md) — env vars, build commands
+- [`CLAUDE.md`](CLAUDE.md) — development instructions for Claude Code
+
+## Status & Limitations
+
+Halo is young and single-maintainer. It runs, but treat it as an early-stage project, not a hardened product:
+
+- **Sandbox isolates the filesystem, not the network.** The bubblewrap sandbox covers access levels and filesystem reach (host paths, `~/.aws`/`~/.ssh` masked), but does **not** isolate the network — code running inside it can still make outbound connections. The threat model is accidental damage and path escape by a trusted agent, **not** containment of a deliberately malicious skill exfiltrating data. Network isolation is on the roadmap.
+- **No automated test suite yet.** Correctness rests on review and manual verification. Targeted tests for the externally-fixed contracts (session-file format, WS protocol) are planned over broad unit coverage.
+- **Single maintainer, minimal external validation.** Expect rough edges; APIs and on-disk formats may still change between versions.
+
+If you hit something broken or surprising, please open an issue — early feedback is genuinely useful right now.
+
+## Roadmap
+
+See [`.halo/docs/plans/roadmap.md`](.halo/docs/plans/roadmap.md) for what's coming next.
+
+## License
+
+MIT

package/admin-out/404.html

@@ -0,0 +1 @@
+<!DOCTYPE html><!--IBP_mwBDf_cPwZSZZGpi8--><html lang="en" class="dark"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/e4af272ccee01ff0-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/8fce4e1a54dac12a.css" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-8bd7ef88a6527feb.js"/><script src="/_next/static/chunks/fb4ec4d6-3fa44f69484f91b9.js" async=""></script><script src="/_next/static/chunks/635-3dd0043ed0520b9d.js" async=""></script><script src="/_next/static/chunks/main-app-483b436873410ddc.js" async=""></script><script src="/_next/static/chunks/298-d6b224b569da4de0.js" async=""></script><script src="/_next/static/chunks/app/layout-58f773336e6fce61.js" async=""></script><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><title>404: This page could not be found.</title><title>Halo - Multi-Agent Workspace</title><meta name="description" content="Multi-agent collaboration workspace for complex project delivery"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="16x16"/><link rel="icon" href="/icon.svg?3a6863548daca964" type="image/svg+xml" sizes="any"/><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body class="__variable_f367f3 font-sans antialiased"><div hidden=""><!--$--><!--/$--></div><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding:0 23px 0 0;font-size:24px;font-weight:500;vertical-align:top;line-height:49px">404</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:49px;margin:0">This page could not be found.</h2></div></div></div><!--$--><!--/$--><script src="/_next/static/chunks/webpack-8bd7ef88a6527feb.js" id="_R_" async=""></script><script>(self.__next_f=self.__next_f||[]).push([0])</script><script>self.__next_f.push([1,"1:\"$Sreact.fragment\"\n2:I[26967,[\"298\",\"static/chunks/298-d6b224b569da4de0.js\",\"177\",\"static/chunks/app/layout-58f773336e6fce61.js\"],\"AppI18nProvider\"]\n3:I[66048,[],\"\"]\n4:I[29926,[],\"\"]\n5:I[11789,[],\"OutletBoundary\"]\n7:I[21528,[],\"AsyncMetadataOutlet\"]\n9:I[11789,[],\"ViewportBoundary\"]\nb:I[11789,[],\"MetadataBoundary\"]\nc:\"$Sreact.suspense\"\ne:I[79836,[],\"\"]\n:HL[\"/_next/static/media/e4af272ccee01ff0-s.p.woff2\",\"font\",{\"crossOrigin\":\"\",\"type\":\"font/woff2\"}]\n:HL[\"/_next/static/css/8fce4e1a54dac12a.css\",\"style\"]\n"])</script><script>self.__next_f.push([1,"0:{\"P\":null,\"b\":\"IBP_mwBDf-cPwZSZZGpi8\",\"p\":\"\",\"c\":[\"\",\"_not-found\"],\"i\":false,\"f\":[[[\"\",{\"children\":[\"/_not-found\",{\"children\":[\"__PAGE__\",{}]}]},\"$undefined\",\"$undefined\",true],[\"\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"link\",\"0\",{\"rel\":\"stylesheet\",\"href\":\"/_next/static/css/8fce4e1a54dac12a.css\",\"precedence\":\"next\",\"crossOrigin\":\"$undefined\",\"nonce\":\"$undefined\"}]],[\"$\",\"html\",null,{\"lang\":\"en\",\"className\":\"dark\",\"suppressHydrationWarning\":true,\"children\":[\"$\",\"body\",null,{\"className\":\"__variable_f367f3 font-sans antialiased\",\"children\":[\"$\",\"$L2\",null,{\"children\":[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]}]}]}]]}],{\"children\":[\"/_not-found\",[\"$\",\"$1\",\"c\",{\"children\":[null,[\"$\",\"$L3\",null,{\"parallelRouterKey\":\"children\",\"error\":\"$undefined\",\"errorStyles\":\"$undefined\",\"errorScripts\":\"$undefined\",\"template\":[\"$\",\"$L4\",null,{}],\"templateStyles\":\"$undefined\",\"templateScripts\":\"$undefined\",\"notFound\":\"$undefined\",\"forbidden\":\"$undefined\",\"unauthorized\":\"$undefined\"}]]}],{\"children\":[\"__PAGE__\",[\"$\",\"$1\",\"c\",{\"children\":[[[\"$\",\"title\",null,{\"children\":\"404: This page could not be found.\"}],[\"$\",\"div\",null,{\"style\":{\"fontFamily\":\"system-ui,\\\"Segoe UI\\\",Roboto,Helvetica,Arial,sans-serif,\\\"Apple Color Emoji\\\",\\\"Segoe UI Emoji\\\"\",\"height\":\"100vh\",\"textAlign\":\"center\",\"display\":\"flex\",\"flexDirection\":\"column\",\"alignItems\":\"center\",\"justifyContent\":\"center\"},\"children\":[\"$\",\"div\",null,{\"children\":[[\"$\",\"style\",null,{\"dangerouslySetInnerHTML\":{\"__html\":\"body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}\"}}],[\"$\",\"h1\",null,{\"className\":\"next-error-h1\",\"style\":{\"display\":\"inline-block\",\"margin\":\"0 20px 0 0\",\"padding\":\"0 23px 0 0\",\"fontSize\":24,\"fontWeight\":500,\"verticalAlign\":\"top\",\"lineHeight\":\"49px\"},\"children\":404}],[\"$\",\"div\",null,{\"style\":{\"display\":\"inline-block\"},\"children\":[\"$\",\"h2\",null,{\"style\":{\"fontSize\":14,\"fontWeight\":400,\"lineHeight\":\"49px\",\"margin\":0},\"children\":\"This page could not be found.\"}]}]]}]}]],null,[\"$\",\"$L5\",null,{\"children\":[\"$L6\",[\"$\",\"$L7\",null,{\"promise\":\"$@8\"}]]}]]}],{},null,false]},null,false]},null,false],[\"$\",\"$1\",\"h\",{\"children\":[[\"$\",\"meta\",null,{\"name\":\"robots\",\"content\":\"noindex\"}],[[\"$\",\"$L9\",null,{\"children\":\"$La\"}],[\"$\",\"meta\",null,{\"name\":\"next-size-adjust\",\"content\":\"\"}]],[\"$\",\"$Lb\",null,{\"children\":[\"$\",\"div\",null,{\"hidden\":true,\"children\":[\"$\",\"$c\",null,{\"fallback\":null,\"children\":\"$Ld\"}]}]}]]}],false]],\"m\":\"$undefined\",\"G\":[\"$e\",[]],\"s\":false,\"S\":true}\n"])</script><script>self.__next_f.push([1,"a:[[\"$\",\"meta\",\"0\",{\"charSet\":\"utf-8\"}],[\"$\",\"meta\",\"1\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}]]\n6:null\n"])</script><script>self.__next_f.push([1,"f:I[89592,[],\"IconMark\"]\n8:{\"metadata\":[[\"$\",\"title\",\"0\",{\"children\":\"Halo - Multi-Agent Workspace\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"Multi-agent collaboration workspace for complex project delivery\"}],[\"$\",\"link\",\"2\",{\"rel\":\"icon\",\"href\":\"/favicon.ico\",\"type\":\"image/x-icon\",\"sizes\":\"16x16\"}],[\"$\",\"link\",\"3\",{\"rel\":\"icon\",\"href\":\"/icon.svg?3a6863548daca964\",\"type\":\"image/svg+xml\",\"sizes\":\"any\"}],[\"$\",\"$Lf\",\"4\",{}]],\"error\":null,\"digest\":\"$undefined\"}\n"])</script><script>self.__next_f.push([1,"d:\"$8:metadata\"\n"])</script></body></html>

package/admin-out/_next/static/IBP_mwBDf-cPwZSZZGpi8/_buildManifest.js

@@ -0,0 +1 @@
+self.__BUILD_MANIFEST=function(e,r,s,t){return{__rewrites:{afterFiles:[{has:s,source:"/api/:path*",destination:s},{has:s,source:"/ws",destination:s}],beforeFiles:[],fallback:[]},__routerFilterStatic:{numItems:4,errorRate:1e-4,numBits:77,numHashes:14,bitArray:[1,0,1,0,e,r,e,r,e,r,e,r,e,r,r,r,r,r,e,e,r,r,r,e,r,r,e,e,e,e,e,e,e,r,r,r,e,r,r,e,e,e,e,r,e,r,e,e,r,e,r,e,r,e,e,e,e,r,r,e,r,r,r,e,e,e,r,r,r,r,r,e,e,e,e,e,r]},__routerFilterDynamic:{numItems:e,errorRate:1e-4,numBits:e,numHashes:null,bitArray:[]},"/_error":["static/chunks/pages/_error-f3696a8f3d67d150.js"],sortedPages:["/_app","/_error"]}}(0,1,void 0,1e-4),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

package/admin-out/_next/static/IBP_mwBDf-cPwZSZZGpi8/_ssgManifest.js

@@ -0,0 +1 @@
+self.__SSG_MANIFEST=new Set([]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()