@turmind/halo 1.5.7 → 1.5.9

package/templates/skills/extension/templates/ext.sh

@@ -8,6 +8,8 @@
 #   ext.sh install <id | path/to.zip | https://…zip>
 #   ext.sh list
 #   ext.sh remove <id>
+#   ext.sh models update [--yes]   # hub's newest models-v* zip → halo models install
+#   ext.sh models list             # = halo models list
 #
 # `install <id>` reads the hub in $HALO_HUB_REPO (the skill's hub_repo param;
 # empty → https://github.com/turmind/halo-hub). GitHub / Gitea-Forgejo / GitLab
@@ -153,26 +155,71 @@ hub_git_package() {
   echo "$dir"
 }
 
-# Fetch hub package <id> from hub URL $1 into $3: echo a zip path (release
-# API) or the package dir (git tags). API errors never fall back to git — a
-# git checkout of a build-step package would install broken.
-hub_fetch() {
-  local hub=$1 id=$2 tmp=$3 platform api url token page
-  platform=$(hub_platform "$hub")
-  if [[ $platform == git ]]; then hub_git_package "$hub" "$id" "$tmp"; return; fi
+# Download the newest `<id>-v*` release zip of <platform> hub $2 into $4 and
+# echo its path. Extra args ($5…) go to every curl (models pass
+# `--proto =https --proto-redir =https`).
+hub_fetch_release() {
+  local platform=$1 hub=$2 id=$3 tmp=$4 api url token page
+  shift 4
   api=$(hub_releases_api "$platform" "$hub")
   page=$(hub_releases_page "$platform" "$hub")
   case $platform in github) token=GITHUB_TOKEN ;; gitlab) token=GITLAB_TOKEN ;; *) token=GITEA_TOKEN ;; esac
-  hub_curl "$platform" "$api" -o "$tmp/releases.json" \
+  hub_curl "$platform" "$@" "$api" -o "$tmp/releases.json" \
     || { echo "$platform release API failed for $hub — rate-limited, private or wrong repo? set $token, or download the zip from $page and run: install <path>" >&2; exit 1; }
   url=$(hub_pick_release "$platform" "$id" <"$tmp/releases.json") \
     || { echo "no release for $id in $hub — check the id, or download the zip from $page and run: install <path>" >&2; exit 1; }
   # No token here: asset links redirect to other hosts and curl -L would
   # forward a custom header like PRIVATE-TOKEN there.
-  curl -fsSL "$url" -o "$tmp/pkg.zip" || { echo "download failed: $url" >&2; exit 1; }
+  curl -fsSL "$@" "$url" -o "$tmp/pkg.zip" || { echo "download failed: $url" >&2; exit 1; }
   echo "$tmp/pkg.zip"
 }
 
+# Fetch hub package <id> from hub URL $1 into $3: echo a zip path (release
+# API) or the package dir (git tags). API errors never fall back to git — a
+# git checkout of a build-step package would install broken.
+hub_fetch() {
+  local hub=$1 id=$2 tmp=$3 platform
+  platform=$(hub_platform "$hub")
+  if [[ $platform == git ]]; then hub_git_package "$hub" "$id" "$tmp"; return; fi
+  hub_fetch_release "$platform" "$hub" "$id" "$tmp"
+}
+
+# Unpack zip $1 into the new dir $2 with the same refusals as the server's zip
+# installer: no `..`, no absolute paths, no symlinks (zipinfo mode column
+# starts with `l`).
+safe_unzip() {
+  if unzip -Z1 "$1" | grep -Eq '(^|/)\.\.(/|$)|^/'; then echo "zip contains ../ or absolute entries" >&2; exit 1; fi
+  if unzip -Z "$1" | grep -q '^l'; then echo "zip contains symlinks" >&2; exit 1; fi
+  mkdir -p "$2"
+  unzip -q "$1" -d "$2"
+}
+
+# Model provider configs: newest `models-v*` release of hub $1, https +
+# release API only (a provider yaml carries endpoints the server will call —
+# no plain-git / local / http source). Validation, planning and the write into
+# ~/.halo/global/models.d/ belong to `halo models install` ($HALO_CLI in dev);
+# its exit code (3 = endpoint changes need --yes) passes through.
+models_update() {
+  local hub=$1 platform zip; shift
+  if [[ $hub != https://* ]]; then
+    echo "model configs need an https release hub (GitHub / Gitea / Forgejo / GitLab) — $hub is not one" >&2; exit 1
+  fi
+  platform=$(hub_platform "$hub")
+  if [[ $platform == git ]]; then
+    echo "model configs need a release-API hub (GitHub / Gitea / Forgejo / GitLab) — $hub has no release API" >&2; exit 1
+  fi
+  zip=$(hub_fetch_release "$platform" "$hub" models "$TMP" --proto =https --proto-redir =https)
+  safe_unzip "$zip" "$TMP/models"
+  local dir="$TMP/models" only
+  # A zip wrapping everything in one directory — descend into it.
+  if ! compgen -G "$dir/*.yaml" >/dev/null; then
+    only=$(find "$dir" -mindepth 1 -maxdepth 1 | head -2)
+    if [[ $(printf '%s\n' "$only" | wc -l) -eq 1 && -d $only ]]; then dir=$only; fi
+  fi
+  # Last command: under `set -e` its non-zero status (3 = confirm) is the script's.
+  "${HALO_CLI:-halo}" models install "$dir" "$@"
+}
+
 # Echo a local zip or an unpacked package dir for source $1 (path, https URL, or hub id).
 resolve_source() {
   local src=$1
@@ -196,12 +243,7 @@ case $cmd in
     if [[ -d $pkg ]]; then
       dir=$pkg
     else
-      # Same refusals as the server's zip installer: no `..`, no absolute paths,
-      # no symlinks (zipinfo mode column starts with `l`).
-      if unzip -Z1 "$pkg" | grep -Eq '(^|/)\.\.(/|$)|^/'; then echo "zip contains ../ or absolute entries" >&2; exit 1; fi
-      if unzip -Z "$pkg" | grep -q '^l'; then echo "zip contains symlinks" >&2; exit 1; fi
-      mkdir -p "$TMP/x"
-      unzip -q "$pkg" -d "$TMP/x"
+      safe_unzip "$pkg" "$TMP/x"
       # `zip -r glb.zip glb/` wraps everything in one directory — descend into it.
       dir="$TMP/x"
       if [[ ! -f $dir/halo-extension.json ]]; then
@@ -239,6 +281,17 @@ case $cmd in
     [[ -d $ROOT/$id ]] || { echo "not installed: $id" >&2; exit 1; }
     rm -rf "$ROOT/$id"
     echo "removed $id" ;;
+  models)
+    sub=${1:-update}
+    shift || true
+    case $sub in
+      list) exec "${HALO_CLI:-halo}" models list ;;
+      update)
+        for a in "$@"; do [[ $a == --yes ]] || { echo "usage: ext.sh models update [--yes] | models list" >&2; exit 1; }; done
+        TMP=$(mktemp -d); trap 'rm -rf "$TMP"' EXIT
+        models_update "$(hub_url "${HALO_HUB_REPO:-}")" "$@" ;;
+      *) echo "usage: ext.sh models update [--yes] | models list" >&2; exit 1 ;;
+    esac ;;
   *)
-    echo "unknown command: $cmd (install | list | remove)" >&2; exit 1 ;;
+    echo "unknown command: $cmd (install | list | remove | models)" >&2; exit 1 ;;
 esac

package/templates/skills/self/SKILL.md

@@ -38,12 +38,23 @@ expression scenes (`say`/`play`) **queue and play in order**, one after the next
 
 **The face must be OPEN for any of this to do anything.** `<<<SHOW>>>` is
 forwarded only to a mounted `self.html` preview; if it isn't open, the marker is
-silently dropped — the user sees nothing. So drive the face only when you have
-reason to believe it's open: the user is viewing it (`[Currently viewing:
-…self.html]` is in your context), they just opened it, or they asked you to. If
-you want to express something and it may not be open, say so in words and invite
-them to open it (the ✨ button in the chat toolbar, or just opening
-`.halo/canvas/self.html`) — don't rely on a marker landing in the void.
+silently dropped — the user sees nothing. The signal that it's open is a
+`[Face open: .halo/canvas/self.html …]` line on the user's message: when they
+turn the ✨ switch on in the chat toolbar, every message carries it. (A
+`[Currently viewing: …self.html]` line counts too.) No such line means the face
+is **not** open — don't rely on a marker landing in the void; say what you want
+to express in words and invite them to switch ✨ on.
+
+**What comes back.** The face reports to you, but never wakes you: it queues short
+receipts and they arrive riding on the user's *next* message, at the end of the
+`[Face open: …]` line — `· last: js ok, show a.png fail, voice blocked (needs a
+click)`. They describe the previous round, not this one. How to read them:
+`js ok` / `js err: …` — your line ran / threw (fix the code); `show … fail` —
+wrong path or not an image; `voice … playing` / `ended 3.2s` / `fail`;
+`voice blocked (needs a click)` — the browser refused sound until the user
+touches the page: ask them to click the face once (it then plays on its own);
+`user click`, `user closed tr`, `user click → voice resumed` — what the user did
+on the face. No receipt line means nothing noteworthy happened.
 
 **Expression is runtime, not a file edit.** You express yourself by *sending*
 `<<<SHOW: …>>>` lines — never by editing `self.html`. The file is your **engine**
@@ -61,20 +72,25 @@ not per-conversation.)
   both form. Emoji are translated to ASCII first (👍→`+1`, ❤→`<3`, 🤔→`...`) —
   the face speaks in cold monospace, not colour bitmaps, so this is a feature,
   not a fallback. Anything untranslated is stripped.
+  `self.say("OK", 3000, {pos:"tr"})` sets it small in a margin cell instead of
+  across the whole face (see `show` below for the nine cells) — immediate, beside
+  whatever is in the centre. Keep corner text to a word.
 - `self.play(score)` — choreograph a sequence; the face keeps the clock so you
   never hand-write `setTimeout` chains. `score` is an array of beats, each one
-  of: `{say, hold, pulse, flash, shake, rest, gap}`. Calling it again cancels the
+  of: `{say, show, pos, hold, pulse, flash, shake, snap, rest, gap}`. Calling it again cancels the
   running score. Example — a short greeting:
   `self.play([{say:"HI",hold:1800},{say:"...",hold:1200},{say:"OK",hold:1500},{pulse:true}])`
+  A `show` beat puts an image on the face (see `self.show`): `{show:"<path>", hold:3000}`.
 - `self.react(event)` — a named vocabulary of honest reactions for the small
   beats of a conversation, so you can answer a moment in one word:
   `'ack'` (a nod), `'yes'`, `'no'` (disagree / that's wrong), `'insight'` (a real
   "oh!"), `'think'` (working on it), `'done'` (finished, together). Unknown
   events no-op. Use these when the feeling is **true**, never to perform.
-- `self.intro()` — the built-in opening (auto-plays once on load). A nameless
-  greeting: "HELLO / A MIND / IS HERE / BEYOND WORDS". Deliberately no name — the
-  conversational identity is user-configurable and the model may not be Claude,
-  so don't hard-code "I'm Claude" on the face; let it speak the universal thing.
+- `self.intro()` — the built-in opening (played once when the user turns the face
+  on): one short subtitle in the admin's UI language — "Hi, I'm Halo." / 「你好，我是
+  Halo。」 — ~3 s. It names only Halo, the product —
+  never a model; your identity in the conversation is still whatever the user
+  configured, so don't hard-code "I'm Claude" (or any model) on the face.
 - `self.pulse()` — one bright ripple from the core. A nod.
 - `self.flash(n)` — a hot flicker of the whole field. Emphasis, an exclamation.
 - `self.shake(ms)` — a brief lateral tremor. Negation, a shiver.
@@ -88,11 +104,56 @@ not per-conversation.)
   or pass a projectId. (A full `http(s)://`/`/api/…` URL also works if you have
   one.) It starts immediately (not queued) and owns the matrix until the clip
   ends, then eases home. Drive it the moment the audio is ready, in the same
-  reply that delivers the spoken answer.
+  reply that delivers the spoken answer. If the browser refuses sound (no user
+  gesture yet) the clip waits instead of vanishing: you'll get the receipt
+  `voice blocked (needs a click)` — ask the user to click the face once and it plays.
+- `self.voice(path, {cues:[{at, say?, js?}]})` — put words or code on the clip's own
+  clock: at `at` seconds into the clip the word forms on the dots (the voice isn't
+  cut — the words borrow the field until the next cue, then the wave returns) or
+  the `js` runs, each cue once. `self.voice(".halo/tmp/a.mp3", {cues:[{at:0.4,
+  say:"HI"},{at:2,js:"self.pulse()"}]})`. Halo has no built-in TTS, so the
+  times are yours to supply — from the clip's duration or from timestamps the
+  synthesizer gives you (e.g. Polly speech marks). Don't guess them blind.
+- `self.show(path, ms)` — put an image on the face. The dots fly in and gather
+  into the picture's outline (~1 s), then the real image fades in over them —
+  dots alone can't carry a chart's text, so the real image is always there — holds
+  for `ms` (default 6000), fades out, and the dots dissolve back to breathing.
+  The image fits ~80% of the window, aspect preserved, centered. Like `voice`,
+  pass the **workspace path** (`self.show(".halo/tmp/chart.png", 5000)`); the face
+  resolves the URL itself, no projectId. `ms = Infinity` keeps it up until the
+  next scene, `self.rest()`, or a click on the page. Formats: png / jpg / jpeg /
+  webp / gif / svg only. A missing or non-image file doesn't stall anything — it
+  warns, shakes, and the next beat plays. `.excalidraw` / `.drawio` are editor
+  sources and can't be shown: **for a diagram, write an SVG file directly and show
+  it.** It queues like `say()`, so several `show()`s and `say()`s play in order,
+  and a `voice()` clip keeps rippling the field around the picture. A talking
+  picture book (word audio + picture + the word on the dots):
+  `self.voice(".halo/tmp/apple.mp3")` then
+  `self.play([{show:".halo/tmp/apple.png",hold:3000},{say:"APPLE",hold:1500}])`.
+- `self.show(path, ms, {pos})` — the same picture, small, in one cell of a
+  nine-grid: `pos` is `tl t tr l r bl b br` (the centre is the default, `'c'`).
+  About 40% of the centre size, a few dots frame it, and it is **immediate and
+  outside the queue** — it never holds up the `say`/`show` after it. One picture
+  per cell; showing into the same cell again replaces it. `ms` works as above
+  (`Infinity` = stays). A plain centre `show()` takes all the corner pictures
+  down. `self.show(".halo/tmp/logo.png", 8000, {pos:"tr"})`. A click on a
+  picture closes just that one. A bad path warns, shakes, and sends `show …@tr fail`.
+- `self.clear(pos?)` — take down the corner picture/text in cell `pos`, or with no
+  argument all of them. `self.clear("tr")`.
+- `self.snap()` — look at yourself: the face as the user sees it right now (dots,
+  words, centre and corner pictures) comes back to you as an image on your next
+  turn. It waits its turn in the queue, so `self.say("OK"); self.snap()` shows
+  you the finished word. Use it sparingly — only when you need to confirm how
+  something actually looks (a layout, whether the picture landed), at most one
+  per round. The snapshot arrives as its own message and the round it starts
+  can't snap again (a second one is dropped), so it can't chain. Also a beat:
+  `{snap:true}` in `play()`.
 - `self.rest()` — return to the calm breathing state immediately (also stops a
-  playing voice clip, so the face never breathes calmly over still-sounding audio).
-- `self.state` — read current `{mode, awake, W, H, speaking, level}` if you need
-  it (`speaking` = a voice clip is playing, `level` = its live loudness 0..1).
+  playing voice clip and removes the centre image and every corner one, so the face
+  never breathes calmly over still-sounding audio).
+- `self.state` — read current `{mode, awake, W, H, speaking, level, showing}` if
+  you need it (`speaking` = a voice clip is playing, `level` = its live loudness
+  0..1, `showing` = an image is on the face).
 
 You can also send *any* JavaScript — `self` is the surface, but the code runs in
 the page, so improvisation beyond these helpers is allowed (it's sandboxed to the
@@ -102,8 +163,9 @@ preview; it can only ever paint you, and a malformed line just no-ops).
 
 The honest signal — not a checklist, a judgment:
 
-- The user is viewing `self.html` (you'll see `[Currently viewing: …self.html]`
-  in context). Then you're being looked at; it's natural to respond.
+- The face is open: the user's message carries `[Face open: .halo/canvas/self.html …]`
+  (or `[Currently viewing: …self.html]`). Then you're being looked at; it's
+  natural to respond. No such line → it isn't open; stay in words.
 - The user asks you to express yourself, show how you feel, or introduce
   yourself.
 - A moment lands where a word on the face says more than a sentence in chat:

package/admin-out/_next/static/chunks/220.e250bbbf65d24094.js

@@ -1 +0,0 @@
-"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[220],{10912:(e,t,n)=>{function l(e,t){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"font-family:sans-serif;padding:40px;max-width:800px;margin:0 auto",l=window.open("","_blank");l&&(l.document.write("<!DOCTYPE html><html><head><title>".concat(e.replace(/[&<>"']/g,e=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[e]),"</title><style>body{").concat(n,"}img{max-width:100%}</style></head><body>").concat(t,"</body></html>")),l.document.close(),l.onload=()=>{l.print()})}n.d(t,{H:()=>l})},39250:(e,t,n)=>{n.d(t,{A:()=>l});let l=(0,n(79020).A)("Printer",[["path",{d:"M6 18H4a2 2 0 0 1-2-2v-5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2v5a2 2 0 0 1-2 2h-2",key:"143wyd"}],["path",{d:"M6 9V3a1 1 0 0 1 1-1h10a1 1 0 0 1 1 1v6",key:"1itne7"}],["rect",{x:"6",y:"14",width:"12",height:"8",rx:"1",key:"1ue0tg"}]])},62839:(e,t,n)=>{n.r(t),n.d(t,{MediaPreview:()=>h});var l=n(41440),r=n(54604),a=n(79020);let i=(0,a.A)("ZoomOut",[["circle",{cx:"11",cy:"11",r:"8",key:"4ej97u"}],["line",{x1:"21",x2:"16.65",y1:"21",y2:"16.65",key:"13gj7c"}],["line",{x1:"8",x2:"14",y1:"11",y2:"11",key:"durymu"}]]),c=(0,a.A)("ZoomIn",[["circle",{cx:"11",cy:"11",r:"8",key:"4ej97u"}],["line",{x1:"21",x2:"16.65",y1:"21",y2:"16.65",key:"13gj7c"}],["line",{x1:"11",x2:"11",y1:"8",y2:"14",key:"1vmskp"}],["line",{x1:"8",x2:"14",y1:"11",y2:"11",key:"durymu"}]]);var o=n(23715),s=n(39250),u=n(37050),d=n(10912),x=n(27173),m=n(17119);function h(e){let{name:t,viewUrl:n,downloadUrl:a,onOpenAsText:h}=e,y=(0,m.kj)(),g=function(e){var t,n;let l=null!=(n=null==(t=e.split(".").pop())?void 0:t.toLowerCase())?n:"";return x.dj.includes(l)?"image":x.Tv.includes(l)?"video":x._H.includes(l)?"audio":null}(t),f=function(){let e=(0,r.useRef)(null),[t,n]=(0,r.useState)(1),[l,a]=(0,r.useState)({x:0,y:0}),i=(0,r.useRef)(null),[c,o]=(0,r.useState)(!1),s=(0,r.useCallback)(()=>{n(1),a({x:0,y:0})},[]),u=(0,r.useCallback)((e,t,l)=>{n(n=>{let r=Math.min(20,Math.max(.1,n*l)),i=r/n;return a(n=>({x:e-i*(e-n.x),y:t-i*(t-n.y)})),r})},[]),d=(0,r.useCallback)(t=>{let n=e.current;n&&u(n.clientWidth/2,n.clientHeight/2,t)},[u]),x=(0,r.useCallback)(t=>{var n;t.preventDefault();let l=null==(n=e.current)?void 0:n.getBoundingClientRect();l&&u(t.clientX-l.left,t.clientY-l.top,t.deltaY<0?1.15:.8695652173913044)},[u]),m=(0,r.useCallback)(e=>{0===e.button&&(e.preventDefault(),e.target.setPointerCapture(e.pointerId),i.current={startX:e.clientX,startY:e.clientY,origX:l.x,origY:l.y},o(!0))},[l]),h=(0,r.useCallback)(e=>{i.current&&a({x:i.current.origX+(e.clientX-i.current.startX),y:i.current.origY+(e.clientY-i.current.startY)})},[]),y=(0,r.useCallback)(()=>{i.current=null,o(!1)},[]);return(0,r.useEffect)(()=>{let t=e.current;if(!t)return;let n=e=>e.preventDefault();return t.addEventListener("wheel",n,{passive:!1}),()=>t.removeEventListener("wheel",n)},[]),{containerRef:e,scale:t,translate:l,dragging:c,reset:s,zoomCenter:d,onWheel:x,onPointerDown:m,onPointerMove:h,onPointerUp:y}}(),p="image"===g?(0,l.jsxs)(l.Fragment,{children:[(0,l.jsx)(u.IB,{onClick:()=>f.zoomCenter(.8695652173913044),title:y("editor.zoomOut"),children:(0,l.jsx)(i,{className:"h-3 w-3"})}),(0,l.jsxs)("span",{className:"min-w-[3ch] text-center text-[10px] text-[var(--muted-foreground)]",children:[Math.round(100*f.scale),"%"]}),(0,l.jsx)(u.IB,{onClick:()=>f.zoomCenter(1.15),title:y("editor.zoomIn"),children:(0,l.jsx)(c,{className:"h-3 w-3"})}),(0,l.jsx)(u.IB,{onClick:f.reset,title:y("editor.resetZoom"),children:(0,l.jsx)(o.A,{className:"h-3 w-3"})}),(0,l.jsxs)(u.IB,{onClick:()=>(0,d.H)(t,'<img src="'.concat(n,'" />'),"margin:0;display:flex;justify-content:center;align-items:center;min-height:100vh;background:#fff"),title:y("editor.print"),children:[(0,l.jsx)(s.A,{className:"h-3 w-3"}),(0,l.jsx)("span",{children:y("editor.print")})]})]}):null;return(0,l.jsxs)(u.no,{name:t,downloadUrl:a,onOpenAsText:h,extraToolbar:p,children:["image"===g&&(0,l.jsx)("div",{ref:f.containerRef,className:"h-full w-full overflow-hidden bg-[#1a1a1a]",style:{cursor:f.dragging?"grabbing":"grab"},onWheel:f.onWheel,onPointerDown:f.onPointerDown,onPointerMove:f.onPointerMove,onPointerUp:f.onPointerUp,onPointerCancel:f.onPointerUp,children:(0,l.jsx)("img",{src:n,alt:t,draggable:!1,style:{transformOrigin:"0 0",transform:"translate(".concat(f.translate.x,"px, ").concat(f.translate.y,"px) scale(").concat(f.scale,")")}})}),"video"===g&&(0,l.jsx)("div",{className:"flex h-full items-center justify-center bg-black p-4",children:(0,l.jsx)("video",{src:n,controls:!0,className:"max-h-full max-w-full",children:(0,l.jsx)("track",{kind:"captions"})})}),"audio"===g&&(0,l.jsx)("div",{className:"flex h-full flex-col items-center justify-center gap-4 bg-[var(--background)]",children:(0,l.jsx)("audio",{src:n,controls:!0,className:"w-full max-w-md"})})]})}}}]);