@turmind/halo 1.0.1 → 1.0.3

package/dist/index.js

@@ -479,6 +479,17 @@ function modelsRegistry() {
     _modelsRegistryCache = loadModelsRegistry();
   return _modelsRegistryCache;
 }
+function getSystemConfig() {
+  let mtimeMs = 0;
+  try {
+    mtimeMs = fs3.statSync(SYSTEM_CONFIG_PATH).mtimeMs;
+  } catch {
+  }
+  if (!_systemConfigCache || _systemConfigCache.mtimeMs !== mtimeMs) {
+    _systemConfigCache = { mtimeMs, data: loadYamlFile(SYSTEM_CONFIG_PATH) };
+  }
+  return _systemConfigCache.data;
+}
 function getSettings() {
   let mtimeMs = 0;
   try {
@@ -514,7 +525,7 @@ function settingsValue(dotPath) {
   return v == null ? void 0 : typeof v === "string" ? v : String(v);
 }
 function configValue(dotPath) {
-  return readYamlValue(_systemConfig, dotPath);
+  return readYamlValue(getSystemConfig(), dotPath);
 }
 function envInt(key, fallback) {
   const v = process.env[key];
@@ -711,7 +722,7 @@ function modelSupportsAudio(modelId, override) {
 function getModelsRegistry() {
   return modelsRegistry();
 }
-var HALO_HOME2, HALO_GLOBAL_DIR, HALO_SECRETS_DIR, _modelsRegistryCache, _systemConfig, SETTINGS_PATH, _settingsCache, _schemaDefaultsCache, ENV_PATTERN, _wsSettingsCache, config, HIDDEN_DIRS_DEFAULT, HIDDEN_FILES_DEFAULT;
+var HALO_HOME2, HALO_GLOBAL_DIR, HALO_SECRETS_DIR, _modelsRegistryCache, SYSTEM_CONFIG_PATH, _systemConfigCache, SETTINGS_PATH, _settingsCache, _schemaDefaultsCache, ENV_PATTERN, _wsSettingsCache, config, HIDDEN_DIRS_DEFAULT, HIDDEN_FILES_DEFAULT;
 var init_config = __esm({
   "packages/server/dist/config.js"() {
     "use strict";
@@ -720,7 +731,8 @@ var init_config = __esm({
     HALO_GLOBAL_DIR = path3.join(HALO_HOME2, "global");
     HALO_SECRETS_DIR = path3.join(HALO_HOME2, "secrets");
     _modelsRegistryCache = null;
-    _systemConfig = loadYamlFile(path3.join(HALO_SECRETS_DIR, "config.yaml"));
+    SYSTEM_CONFIG_PATH = path3.join(HALO_SECRETS_DIR, "config.yaml");
+    _systemConfigCache = null;
     SETTINGS_PATH = path3.join(HALO_SECRETS_DIR, "settings.yaml");
     _settingsCache = null;
     _schemaDefaultsCache = null;
@@ -2206,7 +2218,7 @@ var init_init = __esm({
       path6.resolve(__dirname, "..", "bundled-docs"),
       path6.resolve(__dirname, "..", "..", "..", ".halo", "docs")
     ];
-    TEMPLATE_VERSION = 47;
+    TEMPLATE_VERSION = 49;
     VERSION_FILE = ".template-version";
     SKIP_NAMES = /* @__PURE__ */ new Set([".DS_Store", "schema.sql", "__pycache__", ".pytest_cache"]);
     BUILTIN_AGENT_IDS = /* @__PURE__ */ new Set([
@@ -4126,7 +4138,7 @@ function applyEvent(state, event) {
       break;
     case "tool_call": {
       const inputStr = formatToolInput(event.toolInput);
-      const entry = { name: event.toolName ?? "", input: inputStr };
+      const entry = { name: event.toolName ?? "", input: inputStr, toolUseId: event.toolUseId };
       const msg = {
         id: genId(),
         type: "tool_call",
@@ -6276,7 +6288,8 @@ var init_mantle_agent = __esm({
         };
         if (this.config.thinking?.enabled && this.config.thinking.effort) {
           const e = this.config.thinking.effort;
-          body.reasoning = { effort: e === "low" || e === "medium" || e === "high" ? e : "high" };
+          const valid = ["low", "medium", "high", "xhigh", "max"];
+          body.reasoning = { effort: valid.includes(e) ? e : "high" };
         }
         const payload = JSON.stringify(body);
         const response = this.config.apiKey ? await fetch(url, {
@@ -6934,6 +6947,16 @@ function buildBwrapArgs(opts) {
         args.push("--bind", dir, dir);
     }
   }
+  for (const rel of WORKSPACE_HIDDEN_DIRS) {
+    const dir = path15.join(opts.workspaceRoot, rel);
+    if (existsSync(dir))
+      args.push("--tmpfs", dir);
+  }
+  for (const rel of WORKSPACE_HIDDEN_FILES) {
+    const file = path15.join(opts.workspaceRoot, rel);
+    if (existsSync(file))
+      args.push("--ro-bind", "/dev/null", file);
+  }
   args.push("--proc", "/proc");
   args.push("--dev", "/dev");
   args.push("--clearenv");
@@ -6968,6 +6991,9 @@ function assertPathAllowed(filePath, opts, write = false) {
   const resolved = realpathBounded(filePath);
   const wsRoot = realpathBounded(opts.workspaceRoot);
   if (resolved === wsRoot || resolved.startsWith(wsRoot + "/")) {
+    if (isHiddenWorkspacePath(resolved, wsRoot)) {
+      throw new Error(`Access denied: "${filePath}" is outside the allowed sandbox paths`);
+    }
     if (write && opts.accessLevel === "readonly") {
       throw new Error(`Access denied: readonly session cannot write to "${filePath}"`);
     }
@@ -6990,6 +7016,18 @@ function isHiddenGlobalPath(resolved) {
   }
   return false;
 }
+function isHiddenWorkspacePath(resolved, wsRoot) {
+  for (const rel of WORKSPACE_HIDDEN_FILES) {
+    if (resolved === path15.join(wsRoot, rel))
+      return true;
+  }
+  for (const rel of WORKSPACE_HIDDEN_DIRS) {
+    const dir = path15.join(wsRoot, rel);
+    if (resolved === dir || resolved.startsWith(dir + "/"))
+      return true;
+  }
+  return false;
+}
 function buildExecScriptArgs(workspaceRoot, command) {
   return ["bash", "-c", `cd "$1" && shift && ${command}`, "bash", workspaceRoot];
 }
@@ -7193,7 +7231,7 @@ async function sandboxReaddir(dirPath, opts) {
     return { name: isDir ? name.slice(0, -1) : name, isDirectory: isDir };
   });
 }
-var execAsync, execFileAsync, HOME, HALO_HOME3, GLOBAL_DIR, KILL_GRACE_MS, _bwrapAvailable, DEFAULT_HIDDEN_DIRS, DEFAULT_HIDDEN_FILES, _hiddenDirs, _hiddenFiles, _writableDirs;
+var execAsync, execFileAsync, HOME, HALO_HOME3, GLOBAL_DIR, KILL_GRACE_MS, _bwrapAvailable, DEFAULT_HIDDEN_DIRS, DEFAULT_HIDDEN_FILES, WORKSPACE_HIDDEN_DIRS, WORKSPACE_HIDDEN_FILES, _hiddenDirs, _hiddenFiles, _writableDirs;
 var init_sandbox = __esm({
   "packages/server/dist/tools/sandbox.js"() {
     "use strict";
@@ -7236,6 +7274,8 @@ var init_sandbox = __esm({
       "~/.halo/global/cron.db-wal",
       "~/.halo/global/cron.db-shm"
     ];
+    WORKSPACE_HIDDEN_DIRS = [".halo/sessions", ".halo/logs", ".halo/evo"];
+    WORKSPACE_HIDDEN_FILES = [".halo/halo.db", ".halo/halo.db-wal", ".halo/halo.db-shm"];
     _hiddenDirs = DEFAULT_HIDDEN_DIRS;
     _hiddenFiles = DEFAULT_HIDDEN_FILES;
     _writableDirs = [];
@@ -8703,8 +8743,15 @@ var init_i18n = __esm({
       "cmd.unknown": { zh: "\u672A\u77E5\u547D\u4EE4: {cmd}\n\u53D1 /help \u67E5\u770B\u53EF\u7528\u547D\u4EE4", en: "Unknown command: {cmd}\nSend /help to see available commands" },
       // ── Channel handler messages ──
       "handler.workspace_missing": { zh: "\u26A0\uFE0F \u8FD9\u4E2A bot \u7ED1\u5B9A\u7684 workspace \u5DF2\u4E0D\u5B58\u5728\uFF1A\n{path}\n\n\u8BF7\u5230 web \u7AEF\u7684 Channels \u8BBE\u7F6E\u91CC\u66F4\u65B0\u7ED1\u5B9A\u76EE\u5F55\u3002", en: "\u26A0\uFE0F The workspace bound to this bot no longer exists:\n{path}\n\nPlease update the binding in web Channels settings." },
-      "handler.compacting": { zh: "\u23F3 \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u8BF7\u7A0D\u540E\u518D\u53D1\u6D88\u606F\uFF08\u901A\u5E38 30 \u79D2\u5185\u5B8C\u6210\uFF09", en: "\u23F3 Compacting context, please wait (usually under 30s)" },
+      // Both hints must read as "received, will be answered" — the message IS
+      // queued (sendUserMessage queues compacting/busy sessions). Telling the user
+      // to re-send would make them duplicate a message that was never lost.
+      "handler.compacting": { zh: "\u23F3 \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u6D88\u606F\u5DF2\u6536\u5230\uFF0C\u6574\u7406\u5B8C\u6210\u540E\u7ACB\u5373\u5904\u7406\uFF08\u901A\u5E38 30 \u79D2\u5185\uFF09", en: "\u23F3 Compacting context \u2014 got your message, will process as soon as it finishes (usually under 30s)" },
       "handler.queued": { zh: "\u{1F504} \u521A\u624D\u90A3\u6761\u8FD8\u5728\u5904\u7406\u4E2D\uFF0C\u6D88\u606F\u5DF2\u6392\u961F\uFF0C\u8BF7\u7A0D\u5019", en: "\u{1F504} Previous message still processing, queued" },
+      // Outbound media upload failed — tells the user why no attachment showed up.
+      // Plain text (no backticks): slack/feishu render markdown differently, and the
+      // filename is already delimited by the surrounding punctuation.
+      "handler.upload_failed": { zh: "\u26A0\uFE0F \u6587\u4EF6\u4E0A\u4F20\u5931\u8D25\uFF1A{name} \u2014 {error}", en: "\u26A0\uFE0F Failed to upload {name}: {error}" },
       "handler.workspace_gone": { zh: "\u26A0\uFE0F workspace \u4E0D\u5B58\u5728\uFF0C\u8BF7\u5230 web \u7AEF\u66F4\u65B0\u7ED1\u5B9A", en: "\u26A0\uFE0F Workspace does not exist, please update binding in web" },
       "handler.not_allowed": { zh: "\u26A0\uFE0F \u4F60\u4E0D\u5728\u8FD9\u4E2A bot \u7684\u5141\u8BB8\u5217\u8868\u4E2D", en: "\u26A0\uFE0F You are not in this bot's allowed list" },
       "handler.start_greeting": { zh: "\u{1F44B} Halo bot \u5DF2\u5C31\u7EEA\u3002\u76F4\u63A5\u53D1\u6D88\u606F\u5F00\u59CB\u5BF9\u8BDD\u3002\u53D1 /help \u67E5\u770B\u53EF\u7528\u547D\u4EE4\u3002", en: "\u{1F44B} Halo bot ready. Send a message to start. /help for commands." },
@@ -9765,12 +9812,12 @@ var init_session_manager = __esm({
             if (loopStatus === "warn") {
               this.emitEvent(session.id, { type: "system", text: `\u26A0\uFE0F Tool "${event.toolName}" called repeatedly with identical input. Consider a different approach.` });
             }
-            this.emitEvent(session.id, { type: "tool_call", toolName: event.toolName, toolInput: event.toolInput, agentName, agentId, taskId });
+            this.emitEvent(session.id, { type: "tool_call", toolName: event.toolName, toolUseId: event.toolUseId, toolInput: event.toolInput, agentName, agentId, taskId });
             break;
           }
           case "tool_result": {
             const resultStr = event.toolResultFull ?? event.toolResult ?? "";
-            this.emitEvent(session.id, { type: "tool_result", toolName: event.toolName, toolResult: resultStr, durationMs: event.durationMs, agentName, agentId, taskId });
+            this.emitEvent(session.id, { type: "tool_result", toolName: event.toolName, toolUseId: event.toolUseId, toolResult: resultStr, durationMs: event.durationMs, agentName, agentId, taskId });
             break;
           }
           case "usage": {
@@ -10136,6 +10183,7 @@ ${q.text}` : q.text).join("\n\n");
           this.emitEvent(sessionId, {
             type: "tool_result",
             toolName: tc.name,
+            toolUseId: tc.toolUseId,
             toolResult: "[interrupted by user]",
             agentName: session?.agentName,
             agentId: session?.agentId,
@@ -10469,9 +10517,11 @@ ${cleaned}` : cleaned;
         const overThreshold = session.lastContextTokens > session.contextConfig.maxTokens * session.contextConfig.compressAt;
         if (!overThreshold)
           return;
+        if (this.compactCut(session.agent.messages) === 0)
+          return;
+        const taskId = session.parentId ? session.id : void 0;
         try {
           session.isCompacting = true;
-          const taskId = session.parentId ? session.id : void 0;
           const preflightText = `Compacting context (${Math.round(session.lastContextTokens / 1e3)}K tokens)\u2026`;
           this.emitEvent(session.id, { type: "system", text: preflightText, taskId });
           const result = await this.selfCompactSession(session.id);
@@ -10482,9 +10532,12 @@ ${cleaned}` : cleaned;
 ${result.summary}`, agentName: "user", report: true, taskId });
             this.emitEvent(session.id, { type: "compacted", totalTokens: result.estimatedTokens, taskId });
             console.debug(`[SessionManager] Auto-compact ${session.id}: ${result.olderCount} messages compacted`);
+          } else {
+            this.emitEvent(session.id, { type: "system", text: "Compaction skipped \u2014 no summary produced", taskId });
           }
         } catch (err) {
           console.debug(`[SessionManager] Auto-compact ${session.id} failed: ${err instanceof Error ? err.message : String(err)}`);
+          this.emitEvent(session.id, { type: "system", text: "Compaction failed \u2014 context unchanged", taskId });
         } finally {
           session.isCompacting = false;
         }
@@ -10576,19 +10629,25 @@ ${result.summary}`, agentName: "user", report: true, taskId });
         }
       }
       /**
-       * Self-compact: let the current agent summarize its own conversation.
-       * The agent already has full context cached, so this is fast and lossless.
-       * Returns the summary text, or null if compaction was not needed/failed.
+       * Compute the compaction cut point: messages[0..cut) get summarized,
+       * messages[cut..] are kept. Returns 0 when there is nothing to compact
+       * (too few messages) — the "compaction is feasible" predicate.
+       *
+       * Single source of truth shared by selfCompactSession AND the
+       * pre-preflight feasibility gates in maybeAutoCompact / compactSession:
+       * gate and actual compact must run the same computation on the same
+       * `session.agent.messages` reference or they drift ("gate said yes,
+       * compact said no" re-creates the orphan-preflight bug).
+       *
+       * Note the tail loop only ever moves `cut` UP (a tail of user tool_result
+       * messages extends the summarized region — they're protocol continuations
+       * of an assistant turn, not standalone turns), so cut === 0 is exactly
+       * the `messages.length <= keepCount` case.
        */
-      async selfCompactSession(sessionId, signal) {
-        const session = this.sessions.get(sessionId);
-        if (!session)
-          return null;
-        const messages2 = session.agent.messages;
+      compactCut(messages2) {
         const keepCount = config.compact.keep_messages;
         if (messages2.length <= keepCount)
-          return null;
-        session.compactedThisTurn = true;
+          return 0;
         let cut = Math.max(0, messages2.length - keepCount);
         while (cut < messages2.length) {
           const m = messages2[cut];
@@ -10599,8 +10658,22 @@ ${result.summary}`, agentName: "user", report: true, taskId });
           }
           break;
         }
+        return cut;
+      }
+      /**
+       * Self-compact: let the current agent summarize its own conversation.
+       * The agent already has full context cached, so this is fast and lossless.
+       * Returns the summary text, or null if compaction was not needed/failed.
+       */
+      async selfCompactSession(sessionId, signal) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+          return null;
+        const messages2 = session.agent.messages;
+        const cut = this.compactCut(messages2);
         if (cut === 0)
           return null;
+        session.compactedThisTurn = true;
         const olderCount = cut;
         const compactInstruction = [
           "Summarize the conversation so far into a concise summary that preserves:",
@@ -10684,9 +10757,8 @@ ${summaryText}` }]
           return "running";
         if (session.isCompacting)
           return "already";
-        const keepCount = config.compact.keep_messages;
         const rawCount = session.agent.messages.length;
-        if (rawCount <= keepCount)
+        if (this.compactCut(session.agent.messages) === 0)
           return "nothing";
         const ac = await this.beginCompact(sessionId);
         if (!ac)
@@ -10698,8 +10770,10 @@ ${summaryText}` }]
         this.emitEvent(sessionId, { type: "system", text: preflightText, taskId });
         try {
           const result = await this.selfCompactSession(sessionId, ac.signal);
-          if (!result)
+          if (!result) {
+            this.emitEvent(sessionId, { type: "system", text: "Compaction skipped \u2014 no summary produced", taskId });
             return "nothing";
+          }
           session.lastContextTokens = result.estimatedTokens;
           const noticeText = `Context compacted: ${result.olderCount} older messages summarized`;
           this.emitEvent(sessionId, { type: "system", text: noticeText, taskId });
@@ -10715,6 +10789,7 @@ ${result.summary}`, agentName: "user", report: true, taskId });
             this.emitEvent(sessionId, { type: "system", text: "Compact cancelled" });
             return "nothing";
           }
+          this.emitEvent(sessionId, { type: "system", text: "Compaction failed \u2014 context unchanged", taskId });
           throw err;
         } finally {
           this.endCompact(sessionId);
@@ -13572,8 +13647,8 @@ function applyPathPick(value, ref, pick) {
   const before = value.slice(0, markerStart);
   const kind = ref.kind === "scope" ? "scope" : ref.kind === "image" ? "image" : pick.isImage ? "image" : "file";
   const needsQuote = pick.insertPath.includes(" ");
-  const path64 = pick.isDir ? needsQuote ? `"${pick.insertPath}/` : `${pick.insertPath}/` : needsQuote ? `"${pick.insertPath}" ` : `${pick.insertPath} `;
-  return `${before}@${kind} ${path64}`;
+  const path63 = pick.isDir ? needsQuote ? `"${pick.insertPath}/` : `${pick.insertPath}/` : needsQuote ? `"${pick.insertPath}" ` : `${pick.insertPath} `;
+  return `${before}@${kind} ${path63}`;
 }
 var IMAGE_EXTS2;
 var init_path_suggest_engine = __esm({
@@ -15093,12 +15168,12 @@ None yet.
         }
         console.log(`[Workspace] Initialized workspace: ${this.projectRoot}`);
       }
-      async readFile(path64) {
-        const fullPath = this.validatePath(path64);
+      async readFile(path63) {
+        const fullPath = this.validatePath(path63);
         return readFile(fullPath, "utf-8");
       }
-      async writeFile(path64, content) {
-        const fullPath = this.validatePath(path64);
+      async writeFile(path63, content) {
+        const fullPath = this.validatePath(path63);
         const dir = resolve(fullPath, "..");
         await mkdir(dir, { recursive: true });
         await writeFile(fullPath, content, "utf-8");
@@ -15118,26 +15193,26 @@ None yet.
         }
         return results;
       }
-      async fileExists(path64) {
+      async fileExists(path63) {
         try {
-          const fullPath = this.validatePath(path64);
+          const fullPath = this.validatePath(path63);
           await access(fullPath);
           return true;
         } catch {
           return false;
         }
       }
-      validatePath(path64) {
-        const fullPath = isAbsolute(path64) ? resolve(path64) : resolve(this.projectRoot, path64);
+      validatePath(path63) {
+        const fullPath = isAbsolute(path63) ? resolve(path63) : resolve(this.projectRoot, path63);
         const root = resolve(this.projectRoot);
         if (fullPath !== root && !fullPath.startsWith(root + sep)) {
-          throw new WorkspaceError(`Path "${path64}" is outside the workspace directory "${this.projectRoot}"`);
+          throw new WorkspaceError(`Path "${path63}" is outside the workspace directory "${this.projectRoot}"`);
         }
         try {
           const real = realpathSync2(fullPath);
           const realRoot = realpathSync2(root);
           if (real !== realRoot && !real.startsWith(realRoot + sep)) {
-            throw new WorkspaceError(`Path "${path64}" is outside the workspace directory "${this.projectRoot}"`);
+            throw new WorkspaceError(`Path "${path63}" is outside the workspace directory "${this.projectRoot}"`);
           }
         } catch (err) {
           if (err instanceof WorkspaceError)
@@ -15250,10 +15325,10 @@ var init_git_manager = __esm({
           throw new GitManagerError(`Failed to commit: ${message2}`);
         }
       }
-      async getDiff(path64) {
+      async getDiff(path63) {
         try {
-          if (path64) {
-            return await this.git.diff(["HEAD", "--", path64]);
+          if (path63) {
+            return await this.git.diff(["HEAD", "--", path63]);
           }
           return await this.git.diff(["HEAD"]);
         } catch {
@@ -15342,12 +15417,12 @@ var init_git_manager = __esm({
             const code = parts[0];
             const status = code[0];
             const isRenameOrCopy = status === "R" || status === "C";
-            const path64 = isRenameOrCopy ? parts[2] : parts[1];
-            if (!path64 || seen.has(path64))
+            const path63 = isRenameOrCopy ? parts[2] : parts[1];
+            if (!path63 || seen.has(path63))
               continue;
-            seen.add(path64);
+            seen.add(path63);
             files.push({
-              path: path64,
+              path: path63,
               status,
               from: isRenameOrCopy ? parts[1] : void 0
             });
@@ -15495,9 +15570,9 @@ var init_git_manager = __esm({
        *  empty for an added file or the root commit) and `modified` is the version
        *  at `commit` (empty for a deletion). The working-tree/staged path above is
        *  left entirely untouched (commit === undefined preserves existing behavior). */
-      async getFileDiff(path64, staged, from, commit) {
+      async getFileDiff(path63, staged, from, commit) {
         if (commit) {
-          const parentPath = from || path64;
+          const parentPath = from || path63;
           let original2 = "";
           try {
             original2 = await this.git.show([`${commit}^:${parentPath}`]);
@@ -15506,13 +15581,13 @@ var init_git_manager = __esm({
           }
           let modified2 = "";
           try {
-            modified2 = await this.git.show([`${commit}:${path64}`]);
+            modified2 = await this.git.show([`${commit}:${path63}`]);
           } catch {
             modified2 = "";
           }
           return { original: original2, modified: modified2 };
         }
-        const headPath = from || path64;
+        const headPath = from || path63;
         let original = "";
         try {
           original = await this.git.show([`HEAD:${headPath}`]);
@@ -15522,13 +15597,13 @@ var init_git_manager = __esm({
         let modified = "";
         if (staged) {
           try {
-            modified = await this.git.show([`:${path64}`]);
+            modified = await this.git.show([`:${path63}`]);
           } catch {
             modified = "";
           }
         } else {
           try {
-            modified = await this.workspace.readFile(path64);
+            modified = await this.workspace.readFile(path63);
           } catch {
             modified = "";
           }
@@ -15559,6 +15634,24 @@ function isInTempDir(filePath) {
   const tmp = tempDir();
   return resolved === tmp || resolved.startsWith(tmp + path32.sep);
 }
+function extractMediaPaths(text5) {
+  const mediaPaths = [];
+  const stripped = text5.replace(MEDIA_MARKER_RE, (_m, p) => {
+    if (p)
+      mediaPaths.push(p);
+    return "";
+  });
+  return { text: stripped, mediaPaths };
+}
+function extractMediaMessage(text5) {
+  const { text: stripped, mediaPaths } = extractMediaPaths(text5);
+  return { text: stripped.replace(/\n{3,}/g, "\n\n").trim(), mediaPaths };
+}
+function isMediaPathAllowed(filePath, workspacePath) {
+  const resolved = path32.resolve(filePath);
+  const ws = path32.resolve(workspacePath);
+  return resolved === ws || resolved.startsWith(ws + path32.sep) || isInTempDir(resolved);
+}
 function classifyMedia(filePath) {
   const ext = path32.extname(filePath).toLowerCase();
   if (IMAGE_EXTS3.has(ext))
@@ -15569,10 +15662,11 @@ function classifyMedia(filePath) {
     return "voice";
   return "other";
 }
-var IMAGE_EXTS3, VIDEO_EXTS, VOICE_EXTS;
+var MEDIA_MARKER_RE, IMAGE_EXTS3, VIDEO_EXTS, VOICE_EXTS;
 var init_media = __esm({
   "packages/server/dist/channels/shared/media.js"() {
     "use strict";
+    MEDIA_MARKER_RE = /^MEDIA:\s*(\S.*?)\s*$/gm;
     IMAGE_EXTS3 = /* @__PURE__ */ new Set([".jpg", ".jpeg", ".png", ".gif", ".webp", ".bmp"]);
     VIDEO_EXTS = /* @__PURE__ */ new Set([".mp4", ".mov", ".m4v", ".webm", ".avi"]);
     VOICE_EXTS = /* @__PURE__ */ new Set([".ogg", ".oga", ".opus"]);
@@ -16484,12 +16578,20 @@ function createGitRoutes() {
     const git = new GitManager(new Workspace(projectPath));
     return { git, projectPath };
   }
+  async function getGitForRead(projectId) {
+    const res = await getGit(projectId);
+    if ("error" in res)
+      return res;
+    if (!await res.git.isRepoRoot())
+      return { notRepo: true };
+    return res;
+  }
   app2.get("/git/status", async (c) => {
     try {
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
-      if (!await res.git.isRepoRoot())
+      if ("notRepo" in res)
         return c.json({ isRepo: false });
       const status = await res.git.getStatus();
       return c.json({ isRepo: true, ...status });
@@ -16501,9 +16603,11 @@ function createGitRoutes() {
   });
   app2.get("/git/ignored", async (c) => {
     try {
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
+      if ("notRepo" in res)
+        return c.json({ isRepo: false, ignored: [] });
       const ignored = await res.git.getIgnoredPaths();
       return c.json({ ignored });
     } catch (err) {
@@ -16518,11 +16622,13 @@ function createGitRoutes() {
       const staged = c.req.query("staged") === "1";
       const from = c.req.query("from") || void 0;
       const commit = c.req.query("commit") || void 0;
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
       if (!filePath)
         return c.json({ error: "path is required" }, 400);
+      if ("notRepo" in res)
+        return c.json({ path: filePath, original: "", modified: "" });
       if (!validatePath(filePath, res.projectPath)) {
         return c.json({ error: "Path traversal not allowed" }, 403);
       }
@@ -16536,9 +16642,11 @@ function createGitRoutes() {
   });
   app2.get("/git/log", async (c) => {
     try {
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
+      if ("notRepo" in res)
+        return c.json({ commits: [] });
       const limitRaw = Number(c.req.query("limit"));
       const limit = Number.isFinite(limitRaw) && limitRaw > 0 ? Math.min(limitRaw, 2e3) : 50;
       const commits = await res.git.getLog(limit);
@@ -16552,11 +16660,13 @@ function createGitRoutes() {
   app2.get("/git/commit-files", async (c) => {
     try {
       const hash = c.req.query("hash");
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
       if (!hash)
         return c.json({ error: "hash is required" }, 400);
+      if ("notRepo" in res)
+        return c.json({ files: [] });
       const files = await res.git.getCommitFiles(hash);
       return c.json({ files });
     } catch (err) {
@@ -16665,9 +16775,11 @@ function createGitRoutes() {
   });
   app2.get("/git/remotes", async (c) => {
     try {
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
+      if ("notRepo" in res)
+        return c.json({ remotes: [] });
       const remotes = await res.git.getRemotes();
       return c.json({ remotes });
     } catch (err) {
@@ -16790,9 +16902,11 @@ function createGitRoutes() {
   });
   app2.get("/git/remote/protocol", async (c) => {
     try {
-      const res = await getGit(c.req.query("projectId"));
+      const res = await getGitForRead(c.req.query("projectId"));
       if ("error" in res)
         return c.json({ error: res.error }, res.status);
+      if ("notRepo" in res)
+        return c.json({ url: "", protocol: "other" });
       return c.json(getRemoteProtocol(res.projectPath));
     } catch (err) {
       const errorMessage = err instanceof Error ? err.message : String(err);
@@ -17655,8 +17769,8 @@ function detectOrphans(tree, declared) {
       if (!block || typeof block !== "object")
         continue;
       for (const k of Object.keys(block)) {
-        const path64 = `${namespaceId}.${kindWord}.${k}`;
-        if (!declaredMap.has(path64)) {
+        const path63 = `${namespaceId}.${kindWord}.${k}`;
+        if (!declaredMap.has(path63)) {
           out.push({ namespaceId, kind: kindWord === "params" ? "param" : "secret", key: k });
         }
       }
@@ -20074,10 +20188,10 @@ function sendWsNotification(event, state, turnId, ctx) {
       sendJson(ctx.ws, { type: "agent:done", agentName, taskId });
       break;
     case "tool_call":
-      sendJson(ctx.ws, { type: "agent:tool_call", tool: event.toolName, input: event.toolInput, agentName, taskId, turnId });
+      sendJson(ctx.ws, { type: "agent:tool_call", tool: event.toolName, toolUseId: event.toolUseId, input: event.toolInput, agentName, taskId, turnId });
       break;
     case "tool_result":
-      sendJson(ctx.ws, { type: "agent:tool_result", result: event.toolResult, agentName, taskId, durationMs: event.durationMs });
+      sendJson(ctx.ws, { type: "agent:tool_result", result: event.toolResult, toolUseId: event.toolUseId, agentName, taskId, durationMs: event.durationMs });
       break;
     case "followup_start":
     case "queued_message":
@@ -20457,6 +20571,17 @@ function setupWebSocketHandler(deps) {
       });
     };
   }
+  function reclaimIfAbandoned(client) {
+    if (!client.unsubscribeEvents)
+      return;
+    const closed = client.ws.readyState === client.ws.CLOSED;
+    if (!closed && Date.now() - client.lastClientPingAt <= CLIENT_SILENCE_LIMIT_MS)
+      return;
+    client.unsubscribeEvents();
+    client.unsubscribeEvents = null;
+    console.debug(`[WS] Released listener for ${closed ? "closed" : "abandoned"} connection session=${client.sessionId}`);
+    sendJson(client.ws, { type: "listener:released", sessionId: client.sessionId });
+  }
   wss2.on("connection", (ws) => {
     const fileWatcher = new WorkspaceWatcher();
     const gitDirWatcher = new GitDirWatcher();
@@ -20471,7 +20596,8 @@ function setupWebSocketHandler(deps) {
       gitDirWatcher,
       terminalManager,
       backgroundSaves: /* @__PURE__ */ new Map(),
-      unsubscribeEvents: null
+      unsubscribeEvents: null,
+      lastClientPingAt: Date.now()
     };
     fileWatcher.setCallback((evt) => {
       sendJson(ws, { type: "file:changed", path: evt.path, action: evt.action });
@@ -20486,6 +20612,7 @@ function setupWebSocketHandler(deps) {
       missedPongs = 0;
     });
     const keepaliveTimer = setInterval(() => {
+      reclaimIfAbandoned(client);
       if (missedPongs >= 2) {
         ws.terminate();
         return;
@@ -20499,6 +20626,7 @@ function setupWebSocketHandler(deps) {
     sendJson(ws, { type: "state:snapshot", snapshot: { activePlan: null, agents: [], recentMessages: [], maxContextTokens: config.model.maxContextTokens } });
     let messageQueue = Promise.resolve();
     ws.on("message", (raw) => {
+      client.lastClientPingAt = Date.now();
       let msg;
       try {
         const text5 = typeof raw === "string" ? raw : raw.toString("utf-8");
@@ -20676,7 +20804,7 @@ function setupWebSocketHandler(deps) {
         client2.unsubscribeEvents = sm.registerEventListener(client2.sessionId, createEventListener(client2));
         const ctxConfig = await sm.getContextConfig(client2.sessionId);
         sendJson(ws, { type: "state:snapshot", snapshot: { activePlan: null, agents: [], recentMessages: [], sessionId: client2.sessionId, maxContextTokens: ctxConfig.maxTokens, agentId } });
-      } else if (client2.sessionId !== msg.sessionId) {
+      } else if (client2.sessionId !== msg.sessionId || !client2.unsubscribeEvents) {
         client2.unsubscribeEvents?.();
         client2.sessionId = msg.sessionId;
         client2.unsubscribeEvents = sm.registerEventListener(client2.sessionId, createEventListener(client2));
@@ -20800,7 +20928,7 @@ ${msg.message}` : markers.join("\n");
       if (client2.sessionId && client2.sessionId !== msg.sessionId) {
         saveSession(client2);
       }
-      if (client2.sessionId && client2.sessionManager) {
+      if (client2.sessionId) {
         client2.unsubscribeEvents?.();
         client2.unsubscribeEvents = null;
         client2.sessionId = null;
@@ -20819,7 +20947,8 @@ ${msg.message}` : markers.join("\n");
         client2.projectId = detached.projectId;
         const state2 = getState(client2);
         const ctxConfig = await client2.sessionManager.getContextConfig(client2.sessionId);
-        const messages3 = state2 ? [...createSaveSnapshot(state2)] : [];
+        const running = client2.sessionManager.isSessionRunning(client2.sessionId);
+        const messages3 = state2 ? running ? [...state2.messageLog] : [...createSaveSnapshot(state2)] : [];
         const detachedSession = client2.sessionManager.getSessionById(client2.sessionId);
         sendJson(ws, { type: "state:snapshot", snapshot: { activePlan: null, agents: [], recentMessages: messages3, sessionId: msg.sessionId, maxContextTokens: ctxConfig.maxTokens, agentId: detachedSession?.agentId } });
         if (state2 && state2.contextTokens > 0) {
@@ -20832,16 +20961,21 @@ ${msg.message}` : markers.join("\n");
         }
         detached.unsubscribe();
         client2.unsubscribeEvents = client2.sessionManager.registerEventListener(client2.sessionId, createEventListener(client2));
-        if (state2 && client2.sessionManager.isSessionRunning(client2.sessionId)) {
+        if (state2 && running) {
           console.debug(`[WS] Session still running \u2014 synthesizing in-progress state`);
-          sendJson(ws, { type: "chat:followup", agentName: state2.streamingAgent || "default" });
-          if (state2.streamBuffer) {
-            sendJson(ws, { type: "chat:stream", text: state2.streamBuffer, agentName: state2.streamingAgent || "default" });
-          }
-          for (const tc of state2.turnToolCalls) {
-            sendJson(ws, { type: "agent:tool_call", tool: tc.name, input: tc.input, agentName: "default" });
-            if (tc.output) {
-              sendJson(ws, { type: "agent:tool_result", result: tc.output, agentName: "default", durationMs: tc.durationMs });
+          const agentName = detachedSession?.agentName ?? (state2.streamingAgent || "default");
+          sendJson(ws, { type: "chat:followup", agentName, replay: true });
+          for (const block of state2.turnContentBlocks) {
+            if (block.type === "thinking") {
+              sendJson(ws, { type: "chat:thinking", text: block.text, agentName, turnId: block.turnId, replay: true });
+            } else if (block.type === "text") {
+              sendJson(ws, { type: "chat:stream", text: block.text, agentName, turnId: block.turnId, replay: true });
+            } else {
+              const tc = block.toolCall;
+              sendJson(ws, { type: "agent:tool_call", tool: tc.name, toolUseId: tc.toolUseId, input: tc.input, agentName, turnId: block.turnId, replay: true });
+              if (tc.output) {
+                sendJson(ws, { type: "agent:tool_result", result: tc.output, toolUseId: tc.toolUseId, agentName, durationMs: tc.durationMs, replay: true });
+              }
             }
           }
         }
@@ -20903,7 +21037,7 @@ ${msg.message}` : markers.join("\n");
   });
   console.log("[WS] WebSocket handler initialized");
 }
-var detachedSessions;
+var CLIENT_SILENCE_LIMIT_MS, detachedSessions;
 var init_handler = __esm({
   "packages/server/dist/ws/handler.js"() {
     "use strict";
@@ -20916,6 +21050,7 @@ var init_handler = __esm({
     init_terminal_manager();
     init_commands2();
     init_goal_mode();
+    CLIENT_SILENCE_LIMIT_MS = 3 * 6e4;
     detachedSessions = /* @__PURE__ */ new Map();
   }
 });
@@ -21070,7 +21205,9 @@ function listAllCronTargets() {
   }
   return out;
 }
-async function dispatchToTargets(text5, targets) {
+async function dispatchToTargets(rawText, targets, workspacePath) {
+  const { text: strippedText, mediaPaths } = extractMediaMessage(rawText);
+  const media = mediaPaths.length > 0 ? { paths: mediaPaths, workspacePath } : void 0;
   const out = [];
   for (const t2 of targets) {
     const handler = _registry.get(t2.channelType);
@@ -21085,7 +21222,7 @@ async function dispatchToTargets(text5, targets) {
       continue;
     }
     try {
-      const results = await handler.dispatch(t2.accountId, text5, t2.chatId);
+      const results = handler.supportsMedia ? await handler.dispatch(t2.accountId, strippedText, t2.chatId, media) : await handler.dispatch(t2.accountId, rawText, t2.chatId);
       for (const r of results)
         out.push(r);
     } catch (err) {
@@ -21104,6 +21241,7 @@ var _registry;
 var init_dispatcher = __esm({
   "packages/server/dist/cron/dispatcher.js"() {
     "use strict";
+    init_media();
     _registry = /* @__PURE__ */ new Map();
   }
 });
@@ -21534,7 +21672,7 @@ async function runJob(jobId, triggerKind) {
     }
     let dispatchResults = [];
     if (status === "succeeded" && targets.length > 0) {
-      dispatchResults = await dispatchToTargets(trimmedOut, targets);
+      dispatchResults = await dispatchToTargets(trimmedOut, targets, job.workspacePath);
       if (dispatchResults.length > 0 && dispatchResults.every((r) => !r.ok)) {
         status = "failed";
         failureReason = `all ${dispatchResults.length} target(s) failed: ${dispatchResults.map((r) => `${r.channelType}:${r.error ?? "?"}`).join("; ")}`;
@@ -22269,12 +22407,12 @@ var init_accounts3 = __esm({
 });
 
 // packages/server/dist/channels/telegram/event-adapter.js
-var HARD_CHARS, MEDIA_MARKER_RE, TelegramResponder;
+var HARD_CHARS, TelegramResponder;
 var init_event_adapter = __esm({
   "packages/server/dist/channels/telegram/event-adapter.js"() {
     "use strict";
+    init_media();
     HARD_CHARS = 4e3;
-    MEDIA_MARKER_RE = /^MEDIA:\s*(\S.*?)\s*$/gm;
     TelegramResponder = class {
       buffer = "";
       deps;
@@ -22347,12 +22485,7 @@ var init_event_adapter = __esm({
         return limit;
       }
       async dispatchChunk(chunk) {
-        const mediaPaths = [];
-        const text5 = chunk.replace(MEDIA_MARKER_RE, (_m, p) => {
-          if (p)
-            mediaPaths.push(p.trim());
-          return "";
-        }).replace(/\n{3,}/g, "\n\n").trim();
+        const { text: text5, mediaPaths } = extractMediaMessage(chunk);
         if (text5) {
           try {
             await this.deps.sendText(text5);
@@ -22372,6 +22505,21 @@ var init_event_adapter = __esm({
   }
 });
 
+// packages/server/dist/channels/shared/busy-hint.js
+function busyHint(sm, sessionId, lang) {
+  if (sm.isSessionCompacting(sessionId))
+    return t("handler.compacting", lang);
+  if (sm.isSessionRunning(sessionId))
+    return t("handler.queued", lang);
+  return null;
+}
+var init_busy_hint = __esm({
+  "packages/server/dist/channels/shared/busy-hint.js"() {
+    "use strict";
+    init_i18n();
+  }
+});
+
 // packages/server/dist/channels/shared/session-prefix.js
 function sessionPrefix(channel, userId) {
   return `${channel}_${userId}_`;
@@ -22384,7 +22532,6 @@ var init_session_prefix = __esm({
 
 // packages/server/dist/channels/telegram/handler.js
 import { Bot, InputFile } from "grammy";
-import path52 from "node:path";
 function inferMediaKind(filePath) {
   const cls = classifyMedia(filePath);
   if (cls === "image")
@@ -22660,23 +22807,16 @@ async function handleUserMessage(args) {
   const sm = registry2.getOrCreate(workspace);
   const accessLevel = account.accessLevel === "full" ? null : account.accessLevel === "workspace" ? "workspace" : "readonly";
   const sessionId = resolveGoalRoute(sm.getDb(), await getOrCreateActiveSession(sm, userId, activeOverrides2, accessLevel, workspace));
-  if (sm.isSessionCompacting(sessionId)) {
-    await ctx.reply(t("handler.compacting", lang));
-    return;
-  }
-  if (sm.isSessionRunning(sessionId)) {
-    await ctx.reply(t("handler.queued", lang));
-  }
+  const hint = busyHint(sm, sessionId, lang);
+  if (hint)
+    await ctx.reply(hint);
   if (!unsubscribers.has(sessionId)) {
     const responder = new TelegramResponder({
       sendText: async (chunk) => {
         await bot.api.sendMessage(chatId, chunk, { parse_mode: void 0 });
       },
       sendMedia: async (filePath) => {
-        const resolved = path52.resolve(filePath);
-        const ws = path52.resolve(workspace);
-        const inWorkspace = resolved === ws || resolved.startsWith(ws + path52.sep);
-        if (!inWorkspace && !isInTempDir(resolved)) {
+        if (!isMediaPathAllowed(filePath, workspace)) {
           console.log(`[telegram] sendMedia blocked: ${filePath} not under workspace`);
           return;
         }
@@ -22734,6 +22874,7 @@ var init_handler2 = __esm({
     init_commands2();
     init_goal_mode();
     init_i18n();
+    init_busy_hint();
     init_commands();
     init_media();
     init_session_prefix();
@@ -22742,7 +22883,7 @@ var init_handler2 = __esm({
 
 // packages/server/dist/routes/telegram.js
 import { Hono as Hono13 } from "hono";
-import path53 from "node:path";
+import path52 from "node:path";
 import { Bot as Bot2 } from "grammy";
 import fs47 from "node:fs";
 function createTelegramRoutes(deps) {
@@ -22772,7 +22913,7 @@ function createTelegramRoutes(deps) {
       return c.json({ error: "botToken required" }, 400);
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path53.isAbsolute(body.workspacePath))
+    if (!path52.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     if (!fs47.existsSync(body.workspacePath))
       return c.json({ error: "workspace path not found" }, 400);
@@ -23261,12 +23402,12 @@ var init_accounts4 = __esm({
 });
 
 // packages/server/dist/channels/wechat/event-adapter.js
-var HARD_CHARS2, MEDIA_MARKER_RE2, WeixinResponder;
+var HARD_CHARS2, WeixinResponder;
 var init_event_adapter2 = __esm({
   "packages/server/dist/channels/wechat/event-adapter.js"() {
     "use strict";
+    init_media();
     HARD_CHARS2 = 3500;
-    MEDIA_MARKER_RE2 = /^MEDIA:\s*(\S.*?)\s*$/gm;
     WeixinResponder = class {
       buffer = "";
       deps;
@@ -23287,13 +23428,13 @@ var init_event_adapter2 = __esm({
           case "error":
             if (event.error) {
               this.flushAll();
-              void this.dispatchChunk(`[\u9519\u8BEF] ${event.error}`);
+              void this.dispatchChunk(`\u274C ${event.error}`);
             }
             break;
           case "system":
             if (event.text) {
               this.flushAll();
-              void this.dispatchChunk(`[\u7CFB\u7EDF] ${event.text}`);
+              void this.dispatchChunk(`\u2139\uFE0F ${event.text}`);
             }
             break;
           case "complete":
@@ -23347,12 +23488,7 @@ var init_event_adapter2 = __esm({
        * goes out as a WeChat message (if non-empty after trim).
        */
       async dispatchChunk(chunk) {
-        const mediaPaths = [];
-        const text5 = chunk.replace(MEDIA_MARKER_RE2, (_m, p) => {
-          if (p)
-            mediaPaths.push(p.trim());
-          return "";
-        }).replace(/\n{3,}/g, "\n\n").trim();
+        const { text: text5, mediaPaths } = extractMediaMessage(chunk);
         if (text5) {
           try {
             await this.deps.sendText(text5);
@@ -23480,7 +23616,7 @@ var init_cdn = __esm({
 
 // packages/server/dist/channels/wechat/send-media.js
 import fs48 from "node:fs/promises";
-import path54 from "node:path";
+import path53 from "node:path";
 function inferKind(filePath) {
   const cls = classifyMedia(filePath);
   if (cls === "image")
@@ -23530,7 +23666,7 @@ async function sendMediaFile(params) {
     aesKeyBase64,
     fileSizeCiphertext: prep.filesize,
     fileSize: prep.rawsize,
-    fileName: path54.basename(filePath)
+    fileName: path53.basename(filePath)
   });
   const clientId = `halo-media-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   const body = {
@@ -23694,12 +23830,8 @@ var init_login = __esm({
 
 // packages/server/dist/channels/wechat/handler.js
 import fs49 from "node:fs";
-import path55 from "node:path";
+import path54 from "node:path";
 import QRCode from "qrcode";
-function isPathAllowed(filePath, workspacePath) {
-  const resolved = path55.resolve(filePath);
-  return resolved.startsWith(path55.resolve(workspacePath)) || isInTempDir(resolved);
-}
 function startWeixinChannel(deps) {
   const { registry: registry2, db } = deps;
   const runners = /* @__PURE__ */ new Map();
@@ -23983,21 +24115,13 @@ async function handleInbound(args) {
   const sm = registry2.getOrCreate(account.workspacePath);
   const sessionAccessLevel = account.accessLevel === "full" ? null : account.accessLevel === "workspace" ? "workspace" : "readonly";
   const sessionId = resolveGoalRoute(sm.getDb(), await getOrCreateActiveSession2(sm, fromUserId, activeOverrides2, sessionAccessLevel, account.workspacePath));
-  if (sm.isSessionCompacting(sessionId)) {
+  const hint = busyHint(sm, sessionId, lang);
+  if (hint) {
     await sendToUser({
       account,
       toUserId: fromUserId,
       contextToken: msg.context_token,
-      text: t("handler.compacting", lang)
-    });
-    return;
-  }
-  if (sm.isSessionRunning(sessionId)) {
-    await sendToUser({
-      account,
-      toUserId: fromUserId,
-      contextToken: msg.context_token,
-      text: t("handler.queued", lang)
+      text: hint
     });
   }
   if (msg.context_token)
@@ -24011,7 +24135,7 @@ async function handleInbound(args) {
         contextToken: sessionContextTokens.get(sessionId)
       }),
       sendMedia: async (filePath) => {
-        if (!isPathAllowed(filePath, account.workspacePath)) {
+        if (!isMediaPathAllowed(filePath, account.workspacePath)) {
           console.log(`[weixin] sendMedia blocked: ${filePath} not under workspace`);
           return;
         }
@@ -24053,7 +24177,7 @@ async function handleSlashCommand(args) {
         contextToken: sessionContextTokens.get(sessionId)
       }),
       sendMedia: async (filePath) => {
-        if (!isPathAllowed(filePath, account.workspacePath)) {
+        if (!isMediaPathAllowed(filePath, account.workspacePath)) {
           console.log(`[weixin] sendMedia blocked: ${filePath} not under workspace`);
           return;
         }
@@ -24135,7 +24259,7 @@ async function handleSlashCommand(args) {
         await reply(login.message);
         return true;
       }
-      const tmpPath = path55.join(tempDir(), `halo-qr-${login.sessionKey}.png`);
+      const tmpPath = path54.join(tempDir(), `halo-qr-${login.sessionKey}.png`);
       await QRCode.toFile(tmpPath, login.qrcodeUrl, { width: 256, margin: 2 });
       await sendMediaFile({
         baseUrl: account.baseUrl,
@@ -24215,6 +24339,7 @@ var init_handler3 = __esm({
     init_commands2();
     init_goal_mode();
     init_i18n();
+    init_busy_hint();
     init_session_prefix();
     MAX_CONSECUTIVE_FAILURES = 3;
     BACKOFF_DELAY_MS = 3e4;
@@ -24224,7 +24349,7 @@ var init_handler3 = __esm({
 
 // packages/server/dist/routes/weixin.js
 import { Hono as Hono14 } from "hono";
-import path56 from "node:path";
+import path55 from "node:path";
 import fs50 from "node:fs";
 function createWeixinRoutes(deps) {
   const { db, channel } = deps;
@@ -24250,7 +24375,7 @@ function createWeixinRoutes(deps) {
       return c.json({ error: "sessionKey required" }, 400);
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path56.isAbsolute(body.workspacePath))
+    if (!path55.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     const accessLevel = body.accessLevel === "full" ? "full" : body.accessLevel === "workspace" ? "workspace" : "readonly";
     const result = await waitLogin({ sessionKey: body.sessionKey, timeoutMs: body.timeoutMs });
@@ -24295,7 +24420,7 @@ function createWeixinRoutes(deps) {
     if (!existing)
       return c.json({ error: "not found" }, 404);
     const body = await c.req.json().catch(() => ({}));
-    if (body.workspacePath !== void 0 && !path56.isAbsolute(body.workspacePath)) {
+    if (body.workspacePath !== void 0 && !path55.isAbsolute(body.workspacePath)) {
       return c.json({ error: "workspacePath must be absolute" }, 400);
     }
     if (body.accessLevel !== void 0 && body.accessLevel !== "full" && body.accessLevel !== "workspace" && body.accessLevel !== "readonly") {
@@ -24353,7 +24478,7 @@ function readLastActiveChatId(accountId) {
   const v = acct.config?.lastActiveChatId;
   return typeof v === "string" && v.length > 0 ? v : null;
 }
-async function dispatch2(accountId, text5, explicitChatId) {
+async function dispatch2(accountId, text5, explicitChatId, media) {
   const acct = getAccount4(getChannelDb(), accountId);
   if (!acct)
     throw new Error(`wechat account ${accountId} not found`);
@@ -24363,8 +24488,32 @@ async function dispatch2(accountId, text5, explicitChatId) {
   if (!chatId) {
     throw new Error("no wechat target \u2014 bind the account first (the QR-login owner becomes the default cron recipient)");
   }
-  await sendToUser({ account: acct, toUserId: chatId, text: text5 });
-  return [{ channelType: "wechat", accountId, chatId, ok: true }];
+  const out = [];
+  if (text5) {
+    await sendToUser({ account: acct, toUserId: chatId, text: text5 });
+    out.push({ channelType: "wechat", accountId, chatId, ok: true });
+  }
+  for (const filePath of media?.paths ?? []) {
+    if (!isMediaPathAllowed(filePath, media.workspacePath)) {
+      console.log(`[weixin] cron sendMediaFile blocked: ${filePath} not under ${media.workspacePath}`);
+      out.push({ channelType: "wechat", accountId, chatId, ok: false, error: `media path not under job workspace: ${filePath}` });
+      continue;
+    }
+    try {
+      await sendMediaFile({
+        baseUrl: acct.baseUrl,
+        token: acct.botToken,
+        toUserId: chatId,
+        filePath
+      });
+      out.push({ channelType: "wechat", accountId, chatId, ok: true });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`[weixin] cron sendMediaFile ${filePath} failed: ${msg}`);
+      out.push({ channelType: "wechat", accountId, chatId, ok: false, error: `media ${filePath}: ${msg}` });
+    }
+  }
+  return out;
 }
 function listTargets2() {
   const cdb = getChannelDb();
@@ -24385,7 +24534,7 @@ function listTargets2() {
   return out;
 }
 function registerWechatCronDispatcher() {
-  registerCronDispatcher({ channelType: "wechat", dispatch: dispatch2, listTargets: listTargets2 });
+  registerCronDispatcher({ channelType: "wechat", supportsMedia: true, dispatch: dispatch2, listTargets: listTargets2 });
 }
 var init_cron_dispatcher2 = __esm({
   "packages/server/dist/channels/wechat/cron-dispatcher.js"() {
@@ -24394,6 +24543,8 @@ var init_cron_dispatcher2 = __esm({
     init_accounts();
     init_accounts4();
     init_handler3();
+    init_send_media();
+    init_media();
     init_dispatcher();
   }
 });
@@ -24428,14 +24579,14 @@ function createWebChannel(deps) {
     return findActiveSessionId(sm, accountId, prefix, activeOverrides2, "full") ?? void 0;
   }
   function resolveWorkspace(account, override) {
-    let path64 = account.workspacePath;
+    let path63 = account.workspacePath;
     if (override && override !== account.workspacePath) {
       if (account.accessLevel !== "full") {
         return { ok: false, error: "workspace override requires a full-access token" };
       }
-      path64 = override;
+      path63 = override;
     }
-    const resolved = resolveAccountWorkspace({ ...account, workspacePath: path64 });
+    const resolved = resolveAccountWorkspace({ ...account, workspacePath: path63 });
     if (!resolved)
       return { ok: false, error: "workspace not found" };
     return { ok: true, path: resolved };
@@ -24736,15 +24887,11 @@ function sseData(obj) {
 `;
 }
 function flushText(text5) {
-  const files = [];
-  const cleaned = text5.replace(MEDIA_MARKER_RE3, (_match, p) => {
-    files.push(p);
-    return "";
-  });
+  const { text: cleaned, mediaPaths } = extractMediaPaths(text5);
   let out = "";
   if (cleaned)
     out += sseData({ type: "stream", text: cleaned });
-  for (const filePath of files)
+  for (const filePath of mediaPaths)
     out += sseData({ type: "file", path: filePath });
   return out;
 }
@@ -24802,7 +24949,6 @@ function createMediaBuffer() {
     }
   };
 }
-var MEDIA_MARKER_RE3;
 var init_handler4 = __esm({
   "packages/server/dist/channels/web/handler.js"() {
     "use strict";
@@ -24810,12 +24956,12 @@ var init_handler4 = __esm({
     init_accounts2();
     init_accounts2();
     init_media_store();
+    init_media();
     init_accounts();
     init_commands2();
     init_goal_mode();
     init_i18n();
     init_session_prefix();
-    MEDIA_MARKER_RE3 = /^MEDIA:\s*(\S.*?)\s*$/gm;
   }
 });
 
@@ -24823,7 +24969,7 @@ var init_handler4 = __esm({
 import { Hono as Hono15 } from "hono";
 import { streamSSE } from "hono/streaming";
 import crypto4 from "node:crypto";
-import path57 from "node:path";
+import path56 from "node:path";
 import fs51 from "node:fs";
 function createWebRoutes(deps) {
   const { db, channel } = deps;
@@ -24849,7 +24995,7 @@ function createWebRoutes(deps) {
     const body = await c.req.json().catch(() => ({}));
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path57.isAbsolute(body.workspacePath))
+    if (!path56.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     if (!fs51.existsSync(body.workspacePath))
       return c.json({ error: "workspace path not found" }, 400);
@@ -24987,10 +25133,10 @@ function createWebRoutes(deps) {
     const filePath = c.req.query("path");
     if (!filePath)
       return c.json({ error: "path required" }, 400);
-    const path64 = await import("node:path");
-    const resolved = path64.default.resolve(account.workspacePath, filePath);
-    const root = path64.default.resolve(account.workspacePath);
-    if (resolved !== root && !resolved.startsWith(root + path64.default.sep)) {
+    const path63 = await import("node:path");
+    const resolved = path63.default.resolve(account.workspacePath, filePath);
+    const root = path63.default.resolve(account.workspacePath);
+    if (resolved !== root && !resolved.startsWith(root + path63.default.sep)) {
       return c.json({ error: "path traversal not allowed" }, 403);
     }
     let real;
@@ -25001,13 +25147,13 @@ function createWebRoutes(deps) {
     } catch {
       return c.json({ error: "file not found" }, 404);
     }
-    if (real !== realRoot && !real.startsWith(realRoot + path64.default.sep)) {
+    if (real !== realRoot && !real.startsWith(realRoot + path63.default.sep)) {
       return c.json({ error: "path traversal not allowed" }, 403);
     }
     const stat = fs51.statSync(real);
     if (stat.isDirectory())
       return c.json({ error: "cannot serve directory" }, 400);
-    const ext = path64.default.extname(real).toLowerCase();
+    const ext = path63.default.extname(real).toLowerCase();
     const mimeMap = {
       ".png": "image/png",
       ".jpg": "image/jpeg",
@@ -25021,7 +25167,7 @@ function createWebRoutes(deps) {
       ".txt": "text/plain"
     };
     const contentType = mimeMap[ext] || "application/octet-stream";
-    const fileName = path64.default.basename(resolved);
+    const fileName = path63.default.basename(resolved);
     const data = fs51.readFileSync(real);
     c.header("content-type", contentType);
     c.header("content-disposition", `inline; filename="${fileName}"`);
@@ -25227,13 +25373,13 @@ var init_markdown = __esm({
 });
 
 // packages/server/dist/channels/slack/event-adapter.js
-var HARD_CHARS3, MEDIA_MARKER_RE4, SlackResponder;
+var HARD_CHARS3, SlackResponder;
 var init_event_adapter3 = __esm({
   "packages/server/dist/channels/slack/event-adapter.js"() {
     "use strict";
     init_markdown();
+    init_media();
     HARD_CHARS3 = 35e3;
-    MEDIA_MARKER_RE4 = /^MEDIA:\s*(\S.*?)\s*$/gm;
     SlackResponder = class {
       buffer = "";
       deps;
@@ -25297,12 +25443,7 @@ var init_event_adapter3 = __esm({
         return limit;
       }
       async dispatchChunk(chunk) {
-        const mediaPaths = [];
-        const stripped = chunk.replace(MEDIA_MARKER_RE4, (_m, p) => {
-          if (p)
-            mediaPaths.push(p.trim());
-          return "";
-        }).replace(/\n{3,}/g, "\n\n").trim();
+        const { text: stripped, mediaPaths } = extractMediaMessage(chunk);
         const text5 = formatForSlack(stripped);
         if (text5) {
           try {
@@ -25353,8 +25494,8 @@ async function authTest(botToken) {
 }
 async function uploadFile(args) {
   const fs56 = await import("node:fs");
-  const path64 = await import("node:path");
-  const filename = args.filename ?? path64.basename(args.filePath);
+  const path63 = await import("node:path");
+  const filename = args.filename ?? path63.basename(args.filePath);
   const stat = fs56.statSync(args.filePath);
   if (!stat.isFile())
     throw new Error(`[slack:uploadFile] not a regular file: ${args.filePath}`);
@@ -25518,7 +25659,7 @@ var init_api2 = __esm({
 });
 
 // packages/server/dist/channels/slack/handler.js
-import path58 from "node:path";
+import path57 from "node:path";
 import { WebSocket } from "ws";
 function slashToBang(text5, commandNames) {
   if (commandNames.length === 0)
@@ -25527,11 +25668,6 @@ function slashToBang(text5, commandNames) {
   const re = new RegExp(`(^|[\\s(\\[,\uFF0C\u3001])\\/(${alternation})\\b`, "g");
   return text5.replace(re, "$1!$2");
 }
-function isPathAllowed2(filePath, workspacePath) {
-  const resolved = path58.resolve(filePath);
-  const wsResolved = path58.resolve(workspacePath);
-  return resolved.startsWith(wsResolved + path58.sep) || resolved === wsResolved || isInTempDir(resolved);
-}
 function rememberEventId(id) {
   if (SEEN_EVENT_IDS.has(id))
     return true;
@@ -25789,12 +25925,9 @@ async function handleInbound2(args) {
   const sm = registry2.getOrCreate(workspace);
   const accessLevel = account.accessLevel === "full" ? null : account.accessLevel === "workspace" ? "workspace" : "readonly";
   const sessionId = resolveGoalRoute(sm.getDb(), await getOrCreateSessionForThread({ sm, channelId, rootTs, userId, accessLevel, state, workspacePath: workspace }));
-  if (sm.isSessionCompacting(sessionId)) {
-    await postMessage({ botToken: account.botToken, channel: channelId, threadTs: replyTs, text: "\u23F3 \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u8BF7\u7A0D\u540E\u518D\u53D1\u6D88\u606F\uFF08\u901A\u5E38 30 \u79D2\u5185\u5B8C\u6210\uFF09" });
-    return;
-  }
-  if (sm.isSessionRunning(sessionId)) {
-    await postMessage({ botToken: account.botToken, channel: channelId, threadTs: replyTs, text: "\u5DF2\u6536\u5230\uFF0C\u4F1A\u5728\u5F53\u524D\u8F6E\u7ED3\u675F\u540E\u5904\u7406\u3002" });
+  const hint = busyHint(sm, sessionId, getLang(account));
+  if (hint) {
+    await postMessage({ botToken: account.botToken, channel: channelId, threadTs: replyTs, text: hint });
   }
   if (!state.unsubscribers.has(sessionId)) {
     const responder = new SlackResponder({
@@ -25802,8 +25935,8 @@ async function handleInbound2(args) {
         await postMessage({ botToken: account.botToken, channel: channelId, threadTs: replyTs, text: chunk });
       },
       sendMedia: async (filePath) => {
-        const resolved = path58.resolve(filePath);
-        if (!isPathAllowed2(resolved, workspace)) {
+        const resolved = path57.resolve(filePath);
+        if (!isMediaPathAllowed(resolved, workspace)) {
           console.log(`[slack] sendMedia blocked: ${filePath} not under workspace`);
           return;
         }
@@ -25820,7 +25953,10 @@ async function handleInbound2(args) {
             botToken: account.botToken,
             channel: channelId,
             threadTs: replyTs,
-            text: `\u26A0\uFE0F Failed to upload \`${path58.basename(filePath)}\`: ${err instanceof Error ? err.message : String(err)}`
+            text: t("handler.upload_failed", getLang(account), {
+              name: path57.basename(filePath),
+              error: err instanceof Error ? err.message : String(err)
+            })
           }).catch(() => {
           });
         }
@@ -25890,6 +26026,7 @@ var init_handler5 = __esm({
     init_session_prefix();
     init_commands();
     init_i18n();
+    init_busy_hint();
     SLACK_EXTRA_COMMANDS = ["qr"];
     SEEN_EVENT_IDS = /* @__PURE__ */ new Set();
     SEEN_EVENT_IDS_MAX = 2e3;
@@ -25899,7 +26036,7 @@ var init_handler5 = __esm({
 // packages/server/dist/routes/slack.js
 import { Hono as Hono16 } from "hono";
 import fs52 from "node:fs";
-import path59 from "node:path";
+import path58 from "node:path";
 function createSlackRoutes(deps) {
   const { db, channel } = deps;
   const app2 = new Hono16();
@@ -25942,7 +26079,7 @@ function createSlackRoutes(deps) {
       return c.json({ error: "appToken must start with xapp-" }, 400);
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path59.isAbsolute(body.workspacePath))
+    if (!path58.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     if (!fs52.existsSync(body.workspacePath))
       return c.json({ error: "workspace path not found" }, 400);
@@ -26042,7 +26179,7 @@ function parseChatId(raw) {
     return { channel: raw };
   return { channel: raw.slice(0, idx), threadTs: raw.slice(idx + 1) || void 0 };
 }
-async function dispatch3(accountId, text5, explicitChatId) {
+async function dispatch3(accountId, text5, explicitChatId, media) {
   const acct = getAccount5(getChannelDb(), accountId);
   if (!acct)
     throw new Error(`slack account ${accountId} not found`);
@@ -26052,18 +26189,37 @@ async function dispatch3(accountId, text5, explicitChatId) {
     throw new Error('slack cron target requires an explicit chatId (e.g. "D01234567" for a DM, or "C0123:1700.0" for a thread). Create the cron from inside a Slack chat to auto-pin, or pass --targets slack:<accountId>:<chatId>.');
   }
   const { channel, threadTs } = parseChatId(explicitChatId);
-  try {
-    await postMessage({ botToken: acct.botToken, channel, threadTs, text: text5 });
-    return [{ channelType: "slack", accountId, chatId: explicitChatId, ok: true }];
-  } catch (err) {
-    return [{
-      channelType: "slack",
-      accountId,
-      chatId: explicitChatId,
-      ok: false,
-      error: err instanceof Error ? err.message : String(err)
-    }];
+  const out = [];
+  if (text5) {
+    try {
+      await postMessage({ botToken: acct.botToken, channel, threadTs, text: text5 });
+      out.push({ channelType: "slack", accountId, chatId: explicitChatId, ok: true });
+    } catch (err) {
+      out.push({
+        channelType: "slack",
+        accountId,
+        chatId: explicitChatId,
+        ok: false,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
   }
+  for (const filePath of media?.paths ?? []) {
+    if (!isMediaPathAllowed(filePath, media.workspacePath)) {
+      console.log(`[slack] cron uploadFile blocked: ${filePath} not under ${media.workspacePath}`);
+      out.push({ channelType: "slack", accountId, chatId: explicitChatId, ok: false, error: `media path not under job workspace: ${filePath}` });
+      continue;
+    }
+    try {
+      await uploadFile({ botToken: acct.botToken, channel, threadTs, filePath });
+      out.push({ channelType: "slack", accountId, chatId: explicitChatId, ok: true });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`[slack] cron uploadFile ${filePath} failed: ${msg}`);
+      out.push({ channelType: "slack", accountId, chatId: explicitChatId, ok: false, error: `media ${filePath}: ${msg}` });
+    }
+  }
+  return out;
 }
 function listTargets3() {
   const cdb = getChannelDb();
@@ -26077,7 +26233,7 @@ function listTargets3() {
   }));
 }
 function registerSlackCronDispatcher() {
-  registerCronDispatcher({ channelType: "slack", dispatch: dispatch3, listTargets: listTargets3 });
+  registerCronDispatcher({ channelType: "slack", supportsMedia: true, dispatch: dispatch3, listTargets: listTargets3 });
 }
 var init_cron_dispatcher3 = __esm({
   "packages/server/dist/channels/slack/cron-dispatcher.js"() {
@@ -26085,6 +26241,7 @@ var init_cron_dispatcher3 = __esm({
     init_channel_db();
     init_accounts5();
     init_api2();
+    init_media();
     init_dispatcher();
   }
 });
@@ -26193,13 +26350,13 @@ var init_accounts6 = __esm({
 });
 
 // packages/server/dist/channels/feishu/event-adapter.js
-var HARD_CHARS4, MEDIA_MARKER_RE5, FeishuResponder;
+var HARD_CHARS4, FeishuResponder;
 var init_event_adapter4 = __esm({
   "packages/server/dist/channels/feishu/event-adapter.js"() {
     "use strict";
     init_markdown();
+    init_media();
     HARD_CHARS4 = 4500;
-    MEDIA_MARKER_RE5 = /^MEDIA:\s*(\S.*?)\s*$/gm;
     FeishuResponder = class {
       buffer = "";
       deps;
@@ -26263,12 +26420,7 @@ var init_event_adapter4 = __esm({
         return limit;
       }
       async dispatchChunk(chunk) {
-        const mediaPaths = [];
-        const stripped = chunk.replace(MEDIA_MARKER_RE5, (_m, p) => {
-          if (p)
-            mediaPaths.push(p.trim());
-          return "";
-        }).replace(/\n{3,}/g, "\n\n").trim();
+        const { text: stripped, mediaPaths } = extractMediaMessage(chunk);
         const text5 = formatForFeishu(stripped);
         if (text5) {
           try {
@@ -26419,9 +26571,9 @@ async function replyMessage(args) {
 }
 async function uploadImage(args) {
   const fs56 = await import("node:fs");
-  const path64 = await import("node:path");
+  const path63 = await import("node:path");
   const buf = fs56.readFileSync(args.filePath);
-  const filename = path64.basename(args.filePath);
+  const filename = path63.basename(args.filePath);
   const send = async (token2) => {
     const form = new FormData();
     form.append("image_type", "message");
@@ -26453,9 +26605,9 @@ async function uploadImage(args) {
 }
 async function uploadFile2(args) {
   const fs56 = await import("node:fs");
-  const path64 = await import("node:path");
+  const path63 = await import("node:path");
   const buf = fs56.readFileSync(args.filePath);
-  const filename = args.filename ?? path64.basename(args.filePath);
+  const filename = args.filename ?? path63.basename(args.filePath);
   const send = async (token2) => {
     const form = new FormData();
     form.append("file_type", args.fileType);
@@ -26561,13 +26713,8 @@ var init_api3 = __esm({
 });
 
 // packages/server/dist/channels/feishu/handler.js
-import path60 from "node:path";
+import path59 from "node:path";
 import * as Lark from "@larksuiteoapi/node-sdk";
-function isPathAllowed3(filePath, workspacePath) {
-  const resolved = path60.resolve(filePath);
-  const wsResolved = path60.resolve(workspacePath);
-  return resolved.startsWith(wsResolved + path60.sep) || resolved === wsResolved || isInTempDir(resolved);
-}
 function newAccountState2() {
   return {
     wsClient: null,
@@ -26795,12 +26942,9 @@ async function handleInbound3(args) {
   const sm = registry2.getOrCreate(workspace);
   const accessLevel = account.accessLevel === "full" ? null : account.accessLevel === "workspace" ? "workspace" : "readonly";
   const sessionId = resolveGoalRoute(sm.getDb(), await getOrCreateSessionForThread2({ sm, chatId, rootId, userId, accessLevel, state, workspacePath: workspace }));
-  if (sm.isSessionCompacting(sessionId)) {
-    await replyToInbound({ account, inboundMessageId, isP2P, chatId, text: "\u23F3 \u6B63\u5728\u6574\u7406\u4E0A\u4E0B\u6587\uFF0C\u8BF7\u7A0D\u540E\u518D\u53D1\u6D88\u606F\uFF08\u901A\u5E38 30 \u79D2\u5185\u5B8C\u6210\uFF09" });
-    return;
-  }
-  if (sm.isSessionRunning(sessionId)) {
-    await replyToInbound({ account, inboundMessageId, isP2P, chatId, text: "\u5DF2\u6536\u5230\uFF0C\u4F1A\u5728\u5F53\u524D\u8F6E\u7ED3\u675F\u540E\u5904\u7406\u3002" });
+  const hint = busyHint(sm, sessionId, getLang(account));
+  if (hint) {
+    await replyToInbound({ account, inboundMessageId, isP2P, chatId, text: hint });
   }
   if (!state.unsubscribers.has(sessionId)) {
     const responder = new FeishuResponder({
@@ -26808,8 +26952,8 @@ async function handleInbound3(args) {
         await replyToInbound({ account, inboundMessageId, isP2P, chatId, text: chunk });
       },
       sendMedia: async (filePath) => {
-        const resolved = path60.resolve(filePath);
-        if (!isPathAllowed3(resolved, workspace)) {
+        const resolved = path59.resolve(filePath);
+        if (!isMediaPathAllowed(resolved, workspace)) {
           console.log(`[feishu] sendMedia blocked: ${filePath} not under workspace`);
           return;
         }
@@ -26828,7 +26972,10 @@ async function handleInbound3(args) {
             inboundMessageId,
             isP2P,
             chatId,
-            text: `\u26A0\uFE0F \u6587\u4EF6\u4E0A\u4F20\u5931\u8D25\uFF1A${path60.basename(filePath)} \u2014 ${err instanceof Error ? err.message : String(err)}`
+            text: t("handler.upload_failed", getLang(account), {
+              name: path59.basename(filePath),
+              error: err instanceof Error ? err.message : String(err)
+            })
           }).catch(() => {
           });
         }
@@ -26858,7 +27005,7 @@ async function replyToInbound(args) {
 async function sendFeishuMedia(args) {
   const { account, inboundMessageId, isP2P, chatId, filePath } = args;
   const cls = classifyMedia(filePath);
-  const ext = path60.extname(filePath).toLowerCase();
+  const ext = path59.extname(filePath).toLowerCase();
   if (cls === "image") {
     const { imageKey } = await uploadImage({ appId: account.appId, appSecret: account.appSecret, filePath });
     await replyToInboundRaw({
@@ -26993,13 +27140,14 @@ var init_handler6 = __esm({
     init_goal_mode();
     init_session_prefix();
     init_i18n();
+    init_busy_hint();
   }
 });
 
 // packages/server/dist/routes/feishu.js
 import { Hono as Hono17 } from "hono";
 import fs53 from "node:fs";
-import path61 from "node:path";
+import path60 from "node:path";
 function createFeishuRoutes(deps) {
   const { db, channel } = deps;
   const app2 = new Hono17();
@@ -27041,7 +27189,7 @@ function createFeishuRoutes(deps) {
       return c.json({ error: "appSecret required" }, 400);
     if (!body.workspacePath)
       return c.json({ error: "workspacePath required" }, 400);
-    if (!path61.isAbsolute(body.workspacePath))
+    if (!path60.isAbsolute(body.workspacePath))
       return c.json({ error: "workspacePath must be absolute" }, 400);
     if (!fs53.existsSync(body.workspacePath))
       return c.json({ error: "workspace path not found" }, 400);
@@ -27375,18 +27523,46 @@ function createAuthRoutes() {
     setCookie(c, COOKIE_NAME, "", { path: "/", maxAge: 0 });
     return c.json({ ok: true });
   });
+  app2.post("/auth/change-password", async (c) => {
+    const body = await c.req.json().catch(() => ({}));
+    const oldPassword = typeof body.oldPassword === "string" ? body.oldPassword : "";
+    const newPassword = typeof body.newPassword === "string" ? body.newPassword : "";
+    if (passwordEnvPlaintext() != null) {
+      return c.json({ error: "Password is managed by the HALO_PASSWORD environment variable" }, 400);
+    }
+    if (!await verifyPassword(oldPassword, passwordHash())) {
+      return c.json({ error: "Incorrect current password" }, 401);
+    }
+    const weak = passwordStrengthError(newPassword);
+    if (weak)
+      return c.json({ error: weak }, 400);
+    if (newPassword === oldPassword) {
+      return c.json({ error: "New password must differ from the current password" }, 400);
+    }
+    updateConfigLeaves({ "server.password": await hashPassword(newPassword) });
+    return c.json({ ok: true });
+  });
   return app2;
 }
+function passwordStrengthError(pw) {
+  if (pw.length < 8)
+    return "Password must be at least 8 characters";
+  if (!/[A-Za-z]/.test(pw))
+    return "Password must contain at least one letter";
+  if (!/[0-9]/.test(pw))
+    return "Password must contain at least one digit";
+  return null;
+}
 function authMiddleware() {
   return async (c, next) => {
-    const path64 = c.req.path;
-    if (PUBLIC_PATHS.some((p) => path64 === p || path64.startsWith(p + "?"))) {
+    const path63 = c.req.path;
+    if (PUBLIC_PATHS.some((p) => path63 === p || path63.startsWith(p + "?"))) {
       return next();
     }
     const token = getCookie(c, COOKIE_NAME);
     const payload = validateToken(token);
     if (!payload) {
-      if (!path64.startsWith("/api/")) {
+      if (!path63.startsWith("/api/")) {
         return next();
       }
       return c.json({ error: "Unauthorized" }, 401);
@@ -27404,6 +27580,7 @@ var init_auth = __esm({
     "use strict";
     init_config();
     init_password_hash();
+    init_setup_config();
     init_brute_force();
     TOKEN_MAX_AGE = config.auth.tokenMaxAge;
     REFRESH_AFTER = config.auth.refreshAfter;
@@ -27423,7 +27600,7 @@ import { cors } from "hono/cors";
 import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { WebSocketServer } from "ws";
-import path62 from "node:path";
+import path61 from "node:path";
 import fs54 from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { homedir as homedir24 } from "node:os";
@@ -27431,9 +27608,9 @@ import { fileURLToPath as fileURLToPath3 } from "node:url";
 function findProjectRoot() {
   let dir = process.cwd();
   for (let i = 0; i < 32; i++) {
-    if (fs54.existsSync(path62.join(dir, "pnpm-workspace.yaml")))
+    if (fs54.existsSync(path61.join(dir, "pnpm-workspace.yaml")))
       return dir;
-    const parent = path62.dirname(dir);
+    const parent = path61.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -27442,7 +27619,7 @@ function findProjectRoot() {
   return process.cwd();
 }
 function acquireSingleInstanceLock(lockFile) {
-  fs54.mkdirSync(path62.dirname(lockFile), { recursive: true });
+  fs54.mkdirSync(path61.dirname(lockFile), { recursive: true });
   const fd = fs54.openSync(lockFile, fs54.constants.O_RDWR | fs54.constants.O_CREAT, 420);
   const result = spawnSync4("flock", ["-n", "3"], {
     stdio: ["ignore", "ignore", "ignore", fd]
@@ -27499,7 +27676,7 @@ function isProcessAlive(pid) {
   }
 }
 function readGitSha() {
-  if (!fs54.existsSync(path62.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs54.existsSync(path62.join(PROJECT_ROOT, ".git")))
+  if (!fs54.existsSync(path61.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs54.existsSync(path61.join(PROJECT_ROOT, ".git")))
     return null;
   try {
     const rev = spawnSync4("git", ["rev-parse", "--short", "HEAD"], { cwd: PROJECT_ROOT, encoding: "utf-8" });
@@ -27516,14 +27693,14 @@ function readGitSha() {
 }
 function resolveFrontendDir() {
   if (process.env.HALO_FRONTEND_DIR)
-    return path62.resolve(process.env.HALO_FRONTEND_DIR);
-  const bundled = path62.resolve(__dirname3, "..", "admin-out");
-  if (fs54.existsSync(path62.join(bundled, "index.html")))
+    return path61.resolve(process.env.HALO_FRONTEND_DIR);
+  const bundled = path61.resolve(__dirname3, "..", "admin-out");
+  if (fs54.existsSync(path61.join(bundled, "index.html")))
     return bundled;
-  const sibling = path62.resolve(__dirname3, "..", "..", "admin", "out");
-  if (fs54.existsSync(path62.join(sibling, "index.html")))
+  const sibling = path61.resolve(__dirname3, "..", "..", "admin", "out");
+  if (fs54.existsSync(path61.join(sibling, "index.html")))
     return sibling;
-  return path62.resolve(PROJECT_ROOT, "packages", "admin", "out");
+  return path61.resolve(PROJECT_ROOT, "packages", "admin", "out");
 }
 async function gracefulShutdown(signal) {
   console.log(`[Server] Received ${signal}, shutting down gracefully...`);
@@ -27576,13 +27753,13 @@ var init_dist2 = __esm({
     init_sandbox();
     init_init();
     init_git_ssh();
-    __dirname3 = path62.dirname(fileURLToPath3(import.meta.url));
+    __dirname3 = path61.dirname(fileURLToPath3(import.meta.url));
     PORT = config.server.port;
-    HALO_VERSION = "1.0.1";
+    HALO_VERSION = "1.0.3";
     PROJECT_ROOT = findProjectRoot();
-    HALO_HOME4 = path62.join(homedir24(), ".halo");
+    HALO_HOME4 = path61.join(homedir24(), ".halo");
     GIT_SHA = readGitSha();
-    if (!fs54.existsSync(path62.join(HALO_HOME4, "global", ".template-version"))) {
+    if (!fs54.existsSync(path61.join(HALO_HOME4, "global", ".template-version"))) {
       process.stderr.write("\x1B[31m[Server] ~/.halo/global/ not initialized. Run `halo setup` first.\x1B[0m\n");
       process.exit(1);
     }
@@ -27603,7 +27780,7 @@ var init_dist2 = __esm({
       process.exit(1);
     }
     if (!AGENTCORE)
-      acquireSingleInstanceLock(path62.join(HALO_HOME4, "global", "server.lock"));
+      acquireSingleInstanceLock(path61.join(HALO_HOME4, "global", "server.lock"));
     {
       const declared = new Set(commandRegistry.listDescriptors().filter((d) => d.source === "builtin").map((d) => d.slashName));
       const dispatched = new Set(DISPATCH_COMMANDS);
@@ -27669,10 +27846,10 @@ var init_dist2 = __esm({
     app.route("/api", evolutionRoutes);
     cronRoutes = createCronRoutes();
     app.route("/api", cronRoutes);
-    channelDb = createChannelDb(path62.join(HALO_HOME4, "secrets"));
+    channelDb = createChannelDb(path61.join(HALO_HOME4, "secrets"));
     setChannelDb(channelDb);
-    setEvoDb(createEvoDb(path62.join(HALO_HOME4, "global")));
-    setCronDb(createCronDb(path62.join(HALO_HOME4, "global")));
+    setEvoDb(createEvoDb(path61.join(HALO_HOME4, "global")));
+    setCronDb(createCronDb(path61.join(HALO_HOME4, "global")));
     setEvoSpawner(realEvoSpawner);
     if (!AGENTCORE) {
       startEvoTicker();
@@ -27696,9 +27873,9 @@ var init_dist2 = __esm({
       console.log(`[Server] AgentCore runtime mode \u2014 workspace: ${config.server.agentcoreWorkspace}`);
     }
     FRONTEND_DIR = resolveFrontendDir();
-    app.use("/*", serveStatic({ root: path62.relative(process.cwd(), FRONTEND_DIR) }));
+    app.use("/*", serveStatic({ root: path61.relative(process.cwd(), FRONTEND_DIR) }));
     app.get("/*", (c) => {
-      const indexPath = path62.join(FRONTEND_DIR, "index.html");
+      const indexPath = path61.join(FRONTEND_DIR, "index.html");
       try {
         const html = fs54.readFileSync(indexPath, "utf-8");
         return c.html(html);
@@ -28469,11 +28646,11 @@ process.emitWarning = (warning, ...args) => {
 };
 
 // packages/cli/src/index.ts
-import path63 from "node:path";
+import path62 from "node:path";
 import fs55 from "node:fs";
 import { homedir as homedir25 } from "node:os";
 import { parseArgs as parseArgs2 } from "node:util";
-var VERSION = "1.0.1";
+var VERSION = "1.0.3";
 var HELP_TOP = `Usage: halo <command> [options]
 
 Commands:
@@ -28726,8 +28903,8 @@ async function cmdSetup(argv = []) {
   const { buildBindProviderPlan: buildBindProviderPlan2, KEEP_CURRENT: KEEP_CURRENT2, AWS_CHAIN_PROVIDER: AWS_CHAIN_PROVIDER2 } = await Promise.resolve().then(() => (init_setup_bind_provider(), setup_bind_provider_exports));
   const { promptText: promptText2, promptPassword: promptPassword2, promptSelect: promptSelect2, promptMultiSelect: promptMultiSelect2 } = await Promise.resolve().then(() => (init_setup_prompts(), setup_prompts_exports));
   const nonInteractive = argv.includes("--non-interactive") || argv.includes("-y");
-  const haloHome2 = path63.join(homedir25(), ".halo");
-  const globalDir2 = path63.join(haloHome2, "global");
+  const haloHome2 = path62.join(homedir25(), ".halo");
+  const globalDir2 = path62.join(haloHome2, "global");
   ensureHaloHome2(haloHome2);
   process.stderr.write(`[setup] ${haloHome2}/ ready
 `);
@@ -29071,7 +29248,7 @@ halo: upgrade failed (npm exited ${install.status}). ${hint}
 async function cmdAgents(flags) {
   const { initRuntime: initRuntime2, listAgents: listAgents2 } = await Promise.resolve().then(() => (init_harness(), harness_exports));
   await initRuntime2();
-  const workspace = path63.resolve(flags.workspace ?? process.cwd());
+  const workspace = path62.resolve(flags.workspace ?? process.cwd());
   const agents = await listAgents2(workspace);
   if (agents.length === 0) {
     process.stderr.write("No agents found.\n");
@@ -29087,7 +29264,7 @@ async function cmdAgents(flags) {
 async function cmdSessions(flags) {
   const { initRuntime: initRuntime2, listSessions: listSessions2 } = await Promise.resolve().then(() => (init_harness(), harness_exports));
   await initRuntime2();
-  const workspace = path63.resolve(flags.workspace ?? process.cwd());
+  const workspace = path62.resolve(flags.workspace ?? process.cwd());
   const sessions2 = listSessions2(workspace);
   if (sessions2.length === 0) {
     process.stderr.write("No sessions found.\n");
@@ -29189,8 +29366,8 @@ ${stdinContent}` : stdinContent;
     harness.destroy();
   }
 }
-var SERVER_LOCK_PATH = path63.join(homedir25(), ".halo", "global", "server.lock");
-var SERVER_LOG_PATH = path63.join(homedir25(), ".halo", "logs", "server.log");
+var SERVER_LOCK_PATH = path62.join(homedir25(), ".halo", "global", "server.lock");
+var SERVER_LOG_PATH = path62.join(homedir25(), ".halo", "logs", "server.log");
 function readServerPid() {
   try {
     const txt = fs55.readFileSync(SERVER_LOCK_PATH, "utf-8").trim();
@@ -29275,7 +29452,7 @@ async function cmdServerStart(argv, _unused) {
     return;
   }
   const { spawn: spawn4 } = await import("node:child_process");
-  fs55.mkdirSync(path63.dirname(SERVER_LOG_PATH), { recursive: true });
+  fs55.mkdirSync(path62.dirname(SERVER_LOG_PATH), { recursive: true });
   const out = fs55.openSync(SERVER_LOG_PATH, "a");
   const child = spawn4(process.argv[0], [process.argv[1], "server", "start"], {
     detached: true,
@@ -29394,7 +29571,7 @@ function exitMissingSetup() {
   process.exit(1);
 }
 function isHaloHomeReady() {
-  return fs55.existsSync(path63.join(homedir25(), ".halo", "global", ".template-version"));
+  return fs55.existsSync(path62.join(homedir25(), ".halo", "global", ".template-version"));
 }
 async function main2() {
   const argv = process.argv.slice(2);