@turmind/halo 2.0.4 → 2.0.6

package/dist/index.js

@@ -15857,7 +15857,7 @@ async function initObservability(haloProcess = "server") {
     return true;
   }
   const { registerSdk: registerSdk2 } = await Promise.resolve().then(() => (init_otel_sdk(), otel_sdk_exports));
-  providers = await registerSdk2(process.env.OTEL_SERVICE_NAME, "2.0.4", haloProcess);
+  providers = await registerSdk2(process.env.OTEL_SERVICE_NAME, "2.0.6", haloProcess);
   console.log(`[Observability] OTLP export \u2192 ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT} (service.name=${process.env.OTEL_SERVICE_NAME}, halo.process=${haloProcess}, capture_content=${config.observability.captureContent})`);
   return true;
 }
@@ -23626,6 +23626,24 @@ function createFileRoutes(opts = {}) {
     m4a: "audio/mp4",
     wasm: "application/wasm"
   };
+  function systemPath(target) {
+    if (!target || !path60.isAbsolute(target) || target.split(/[\\/]/).includes(".."))
+      return null;
+    return path60.resolve(target);
+  }
+  const fsErrorStatus = (err) => {
+    const code = err.code;
+    return code === "ENOENT" || code === "ENOTDIR" ? 404 : code === "EACCES" || code === "EPERM" ? 403 : 500;
+  };
+  function hiddenAsMissing(syscall, target) {
+    return Object.assign(new Error(`ENOENT: no such file or directory, ${syscall} '${target}'`), { code: "ENOENT" });
+  }
+  async function readableRealPath(target) {
+    const real = await fs51.realpath(target);
+    if (isHiddenHostPath(real))
+      throw hiddenAsMissing("realpath", target);
+    return real;
+  }
   app2.get("/files/download", async (c) => {
     try {
       const filePath = c.req.query("path");
@@ -23638,16 +23656,23 @@ function createFileRoutes(opts = {}) {
       if (!projectPath) {
         return c.json({ error: "Project not found" }, 404);
       }
-      const isTmp = path60.isAbsolute(filePath) && isInTempDir(filePath);
-      if (!isTmp && !validatePath(filePath, projectPath)) {
-        return c.json({ error: "Path traversal not allowed" }, 403);
+      let absolutePath;
+      if (path60.isAbsolute(filePath)) {
+        const target = systemPath(filePath);
+        if (!target)
+          return c.json({ error: "absolute path without .. required" }, 400);
+        absolutePath = await readableRealPath(target);
+      } else {
+        if (!validatePath(filePath, projectPath)) {
+          return c.json({ error: "Path traversal not allowed" }, 403);
+        }
+        absolutePath = path60.resolve(projectPath, filePath);
       }
-      const absolutePath = isTmp ? path60.resolve(filePath) : path60.resolve(projectPath, filePath);
       const stat = await fs51.stat(absolutePath);
       if (stat.isDirectory()) {
         return c.json({ error: "Cannot download a directory" }, 400);
       }
-      const fileName = path60.basename(filePath);
+      const fileName = path60.basename(absolutePath);
       const ext = fileName.split(".").pop()?.toLowerCase() ?? "";
       const mime = inline ? imageMimeFromExt(ext) ?? MIME_MAP[ext] ?? "application/octet-stream" : "application/octet-stream";
       const disposition = inline ? `inline; filename="${encodeURIComponent(fileName)}"` : `attachment; filename="${encodeURIComponent(fileName)}"`;
@@ -23690,11 +23715,12 @@ function createFileRoutes(opts = {}) {
       }
       return new Response(webStream, { status, headers });
     } catch (err) {
-      if (err.code === "ENOENT")
+      const status = fsErrorStatus(err);
+      if (status === 404)
         return c.json({ error: "File not found" }, 404);
       const errorMessage = err instanceof Error ? err.message : String(err);
       console.log(`[Files] Error downloading: ${errorMessage}`);
-      return c.json({ error: errorMessage }, 500);
+      return c.json({ error: errorMessage }, status);
     }
   });
   app2.get("/files/download-folder", async (c) => {
@@ -23874,24 +23900,6 @@ function createFileRoutes(opts = {}) {
       return c.json({ error: err.message }, 404);
     }
   });
-  function systemPath(target) {
-    if (!target || !path60.isAbsolute(target) || target.split(/[\\/]/).includes(".."))
-      return null;
-    return path60.resolve(target);
-  }
-  const fsErrorStatus = (err) => {
-    const code = err.code;
-    return code === "ENOENT" || code === "ENOTDIR" ? 404 : code === "EACCES" || code === "EPERM" ? 403 : 500;
-  };
-  function hiddenAsMissing(syscall, target) {
-    return Object.assign(new Error(`ENOENT: no such file or directory, ${syscall} '${target}'`), { code: "ENOENT" });
-  }
-  async function readableRealPath(target) {
-    const real = await fs51.realpath(target);
-    if (isHiddenHostPath(real))
-      throw hiddenAsMissing("realpath", target);
-    return real;
-  }
   app2.get("/fs/stat", async (c) => {
     const target = systemPath(c.req.query("path"));
     if (!target)
@@ -23928,7 +23936,6 @@ var init_files2 = __esm({
   "../server/dist/routes/files.js"() {
     "use strict";
     init_dist();
-    init_media();
     init_workspace_path();
     init_sandbox();
     init_folder_zip();
@@ -31001,7 +31008,7 @@ function buildCard(workspace, interfaceUrl, caps) {
   return {
     name: raw.name,
     description: raw.description,
-    version: typeof raw.version === "string" ? raw.version : "2.0.4",
+    version: typeof raw.version === "string" ? raw.version : "2.0.6",
     supportedInterfaces: [{ url: interfaceUrl, protocolBinding: "JSONRPC", protocolVersion: A2A_VERSION }],
     capabilities: { streaming: caps.streaming, pushNotifications: true, extendedAgentCard: false },
     ...caps.tokenAuth === false ? {} : {
@@ -33760,7 +33767,7 @@ function createCoreChecker(opts) {
 }
 function getCoreStatus(force) {
   checker ??= createCoreChecker({
-    haloVersion: "2.0.4",
+    haloVersion: "2.0.6",
     fetchLatest: fetchNpmLatest,
     onChange: (status) => broadcast({ type: "updates:changed", scope: "core", status })
   });
@@ -33928,7 +33935,7 @@ function hubBase() {
 }
 function serverChecker() {
   checker2 ??= createExtensionsChecker({
-    haloVersion: "2.0.4",
+    haloVersion: "2.0.6",
     installed: () => {
       const s = getSnapshot();
       return [...s.extensions, ...s.disabled];
@@ -34627,29 +34634,48 @@ var init_ticker = __esm({
 });
 
 // ../server/dist/evolution/spawn.js
+import fs75 from "node:fs";
 import path83 from "node:path";
 import { spawn as spawn5 } from "node:child_process";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
+function spawnEvoWrapper(wrapperPath, mode, id) {
+  fs75.mkdirSync(evoLogsDir(), { recursive: true });
+  const logPath = mode === "run" ? evoWrapperLogFile(id) : evoApplyLogFile(id);
+  const logFd = fs75.openSync(logPath, "a");
+  let child;
+  try {
+    child = spawn5(process.execPath, [wrapperPath, `--mode=${mode}`, `--id=${id}`], {
+      detached: true,
+      stdio: ["ignore", "ignore", logFd],
+      env: cleanChildEnv(),
+      // Without this, a detached console process on Windows gets a freshly
+      // allocated console window (a black box pops up for every evo/score/apply
+      // run). cron doesn't hit this — it spawns the cli inline, not via a
+      // detached wrapper. No-op on macOS/Linux.
+      windowsHide: true
+    });
+  } finally {
+    fs75.closeSync(logFd);
+  }
+  child.once("exit", (code, signal) => {
+    if (code === 0)
+      return;
+    console.error(`[EvoSpawn] ${mode} wrapper pid=${child.pid} id=${id} exited code=${code} signal=${signal} \u2014 see ${logPath}`);
+  });
+  child.unref();
+  console.log(`[EvoSpawn] launched ${mode} wrapper pid=${child.pid} id=${id}`);
+  return child;
+}
 var __dirname2, WRAPPER_PATH, realEvoSpawner;
 var init_spawn = __esm({
   "../server/dist/evolution/spawn.js"() {
     "use strict";
     init_child_env();
+    init_paths();
     __dirname2 = path83.dirname(fileURLToPath2(import.meta.url));
     WRAPPER_PATH = path83.resolve(__dirname2, "evo-wrapper.js");
     realEvoSpawner = (mode, id) => {
-      const child = spawn5(process.execPath, [WRAPPER_PATH, `--mode=${mode}`, `--id=${id}`], {
-        detached: true,
-        stdio: "ignore",
-        env: cleanChildEnv(),
-        // Without this, a detached console process on Windows gets a freshly
-        // allocated console window (a black box pops up for every evo/score/apply
-        // run). cron doesn't hit this — it spawns the cli inline, not via a
-        // detached wrapper. No-op on macOS/Linux.
-        windowsHide: true
-      });
-      child.unref();
-      console.log(`[EvoSpawn] launched ${mode} wrapper pid=${child.pid} id=${id}`);
+      spawnEvoWrapper(WRAPPER_PATH, mode, id);
     };
   }
 });
@@ -35467,12 +35493,12 @@ var init_handler3 = __esm({
 });
 
 // ../server/dist/routes/channel-accounts.js
-import fs75 from "node:fs";
+import fs76 from "node:fs";
 function accountListFields(a) {
   return {
     accountId: a.accountId,
     workspacePath: a.workspacePath,
-    workspaceMissing: !fs75.existsSync(a.workspacePath),
+    workspaceMissing: !fs76.existsSync(a.workspacePath),
     label: a.label,
     enabled: a.enabled,
     accessLevel: a.accessLevel,
@@ -36114,7 +36140,7 @@ var init_cdn = __esm({
 });
 
 // ../server/dist/channels/wechat/send-media.js
-import fs76 from "node:fs/promises";
+import fs77 from "node:fs/promises";
 import path84 from "node:path";
 function inferKind(filePath) {
   const cls = classifyMedia(filePath);
@@ -36127,7 +36153,7 @@ function inferKind(filePath) {
 async function sendMediaFile(params) {
   const { baseUrl, token, toUserId, contextToken, contextTokenAt, filePath } = params;
   const kind = params.kind ?? inferKind(filePath);
-  const plaintext = await fs76.readFile(filePath);
+  const plaintext = await fs77.readFile(filePath);
   const prep = prepareUpload(plaintext);
   console.log(`[WeChat] sendMediaFile: path=${filePath} kind=${kind} rawsize=${prep.rawsize} filesize=${prep.filesize}`);
   const mediaType = kind === "image" ? UploadMediaType.IMAGE : kind === "video" ? UploadMediaType.VIDEO : UploadMediaType.FILE;
@@ -36328,7 +36354,7 @@ var init_login = __esm({
 });
 
 // ../server/dist/channels/wechat/handler.js
-import fs77 from "node:fs";
+import fs78 from "node:fs";
 import path85 from "node:path";
 import QRCode from "qrcode";
 function wxRoute(fromUserId, contextToken, contextTokenAt) {
@@ -36759,7 +36785,7 @@ async function handleSlashCommand(args) {
         contextToken,
         filePath: tmpPath
       });
-      await fs77.promises.unlink(tmpPath).catch(() => {
+      await fs78.promises.unlink(tmpPath).catch(() => {
       });
       await reply(t("wechat.qr_sent", lang, { level, path: account.workspacePath }));
       waitLogin({ sessionKey: login.sessionKey }).then(async (result2) => {
@@ -36840,7 +36866,7 @@ var init_handler4 = __esm({
 // ../server/dist/routes/wechat.js
 import { Hono as Hono22 } from "hono";
 import path86 from "node:path";
-import fs78 from "node:fs";
+import fs79 from "node:fs";
 function createWechatRoutes(deps) {
   const { db: db4, channel } = deps;
   const app2 = new Hono22();
@@ -36849,7 +36875,7 @@ function createWechatRoutes(deps) {
       return {
         ...stripSecrets(acc),
         workspacePath: acc.workspacePath,
-        workspaceMissing: !fs78.existsSync(acc.workspacePath)
+        workspaceMissing: !fs79.existsSync(acc.workspacePath)
       };
     });
     return c.json({ accounts });
@@ -37078,7 +37104,7 @@ var init_descriptor2 = __esm({
 import { Hono as Hono23 } from "hono";
 import { streamSSE as streamSSE3 } from "hono/streaming";
 import crypto12 from "node:crypto";
-import fs79 from "node:fs";
+import fs80 from "node:fs";
 function streamWithKeepalive(c, chunks) {
   return streamSSE3(c, async (stream) => {
     const timer2 = setInterval(() => {
@@ -37283,8 +37309,8 @@ function createWebRoutes(deps) {
     let real;
     let realRoot;
     try {
-      real = fs79.realpathSync(resolved);
-      realRoot = fs79.realpathSync(root);
+      real = fs80.realpathSync(resolved);
+      realRoot = fs80.realpathSync(root);
     } catch {
       return c.json({ error: "file not found" }, 404);
     }
@@ -37294,7 +37320,7 @@ function createWebRoutes(deps) {
     if (isHiddenWorkspacePath(real, realRoot)) {
       return c.json({ error: "path is not accessible" }, 403);
     }
-    const stat = fs79.statSync(real);
+    const stat = fs80.statSync(real);
     if (stat.isDirectory())
       return c.json({ error: "cannot serve directory" }, 400);
     const ext = path94.default.extname(real).toLowerCase();
@@ -37306,7 +37332,7 @@ function createWebRoutes(deps) {
     };
     const contentType = imageMimeFromExt(ext) || nonImageMimes[ext] || "application/octet-stream";
     const fileName = path94.default.basename(resolved);
-    const data = fs79.readFileSync(real);
+    const data = fs80.readFileSync(real);
     c.header("content-type", contentType);
     c.header("content-disposition", `inline; filename="${fileName}"`);
     return c.body(data);
@@ -37528,10 +37554,10 @@ async function authTest(botToken) {
   return slackPost("auth.test", botToken, {});
 }
 async function uploadFile(args) {
-  const fs84 = await import("node:fs");
+  const fs85 = await import("node:fs");
   const path94 = await import("node:path");
   const filename = args.filename ?? path94.basename(args.filePath);
-  const stat = fs84.statSync(args.filePath);
+  const stat = fs85.statSync(args.filePath);
   if (!stat.isFile())
     throw new Error(`[slack:uploadFile] not a regular file: ${args.filePath}`);
   const length = stat.size;
@@ -37549,7 +37575,7 @@ async function uploadFile(args) {
   if (step1Parsed.ok === false || !step1Parsed.upload_url || !step1Parsed.file_id) {
     throw new Error(`[slack:files.getUploadURLExternal] ${step1Parsed.error ?? "unknown"}`);
   }
-  const buf = fs84.readFileSync(args.filePath);
+  const buf = fs85.readFileSync(args.filePath);
   const step2 = await fetch(step1Parsed.upload_url, {
     method: "POST",
     body: buf
@@ -38469,9 +38495,9 @@ async function replyMessage(args) {
   return { message_id: parsed.data?.message_id ?? "" };
 }
 async function uploadImage(args) {
-  const fs84 = await import("node:fs");
+  const fs85 = await import("node:fs");
   const path94 = await import("node:path");
-  const buf = fs84.readFileSync(args.filePath);
+  const buf = fs85.readFileSync(args.filePath);
   const filename = path94.basename(args.filePath);
   const send2 = async (token) => {
     const form = new FormData();
@@ -38488,9 +38514,9 @@ async function uploadImage(args) {
   return { imageKey: parsed.data.image_key };
 }
 async function uploadFile2(args) {
-  const fs84 = await import("node:fs");
+  const fs85 = await import("node:fs");
   const path94 = await import("node:path");
-  const buf = fs84.readFileSync(args.filePath);
+  const buf = fs85.readFileSync(args.filePath);
   const filename = args.filename ?? path94.basename(args.filePath);
   const send2 = async (token) => {
     const form = new FormData();
@@ -39324,7 +39350,7 @@ var init_event_adapter5 = __esm({
 
 // ../server/dist/channels/wecom/handler.js
 import path89 from "node:path";
-import fs80 from "node:fs/promises";
+import fs81 from "node:fs/promises";
 import { WSClient as WSClient2, generateReqId } from "@wecom/aibot-node-sdk";
 function pickConversation(body) {
   const userid = body.from?.userid ?? "unknown";
@@ -39450,7 +39476,7 @@ async function sendWecomMedia(args) {
   const ext = path89.extname(filePath).toLowerCase();
   const cls = classifyMedia(filePath);
   const type = cls === "image" && [".png", ".jpg", ".jpeg", ".gif"].includes(ext) ? "image" : cls === "video" && ext === ".mp4" ? "video" : "file";
-  const buf = await fs80.readFile(filePath);
+  const buf = await fs81.readFile(filePath);
   if (buf.length > MAX_WECOM_DOWNLOAD_BYTES)
     throw new Error("file exceeds 20MB");
   const { media_id: mediaId } = await wsClient.uploadMedia(buf, { type, filename: path89.basename(filePath) });
@@ -39987,14 +40013,14 @@ import { serve } from "@hono/node-server";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { WebSocketServer as WebSocketServer4 } from "ws";
 import path90 from "node:path";
-import fs81 from "node:fs";
+import fs82 from "node:fs";
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { homedir as homedir25 } from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function findProjectRoot() {
   let dir = process.cwd();
   for (let i = 0; i < 32; i++) {
-    if (fs81.existsSync(path90.join(dir, "pnpm-workspace.yaml")))
+    if (fs82.existsSync(path90.join(dir, "pnpm-workspace.yaml")))
       return dir;
     const parent = path90.dirname(dir);
     if (parent === dir)
@@ -40006,15 +40032,15 @@ function findProjectRoot() {
   return process.cwd();
 }
 function acquireSingleInstanceLock(lockFile) {
-  fs81.mkdirSync(path90.dirname(lockFile), { recursive: true });
-  const fd = fs81.openSync(lockFile, fs81.constants.O_RDWR | fs81.constants.O_CREAT, 420);
+  fs82.mkdirSync(path90.dirname(lockFile), { recursive: true });
+  const fd = fs82.openSync(lockFile, fs82.constants.O_RDWR | fs82.constants.O_CREAT, 420);
   const result = spawnSync4("flock", ["-n", "3"], {
     stdio: ["ignore", "ignore", "ignore", fd]
   });
   if (result.error) {
     const content = readLockPid(fd);
     if (content > 0 && isProcessAlive(content)) {
-      fs81.closeSync(fd);
+      fs82.closeSync(fd);
       console.error(`[Server] another halo server is already running (pid ${content}). kill it first.`);
       process.exit(1);
     }
@@ -40023,19 +40049,19 @@ function acquireSingleInstanceLock(lockFile) {
     if (content > 0 && !isProcessAlive(content)) {
       console.warn(`[Server] removing stale server.lock (pid ${content} not running)`);
     } else {
-      fs81.closeSync(fd);
+      fs82.closeSync(fd);
       console.error(`[Server] another halo server is already running${content > 0 ? ` (pid ${content})` : ""}. kill it first.`);
       process.exit(1);
     }
   }
-  fs81.ftruncateSync(fd);
-  fs81.writeSync(fd, String(process.pid));
-  fs81.fsyncSync(fd);
+  fs82.ftruncateSync(fd);
+  fs82.writeSync(fd, String(process.pid));
+  fs82.fsyncSync(fd);
 }
 function readLockPid(fd) {
   try {
     const buf = Buffer.alloc(32);
-    const n = fs81.readSync(fd, buf, 0, 32, 0);
+    const n = fs82.readSync(fd, buf, 0, 32, 0);
     return parseInt(buf.subarray(0, n).toString("utf-8").trim(), 10) || 0;
   } catch {
     return 0;
@@ -40063,7 +40089,7 @@ function isProcessAlive(pid) {
   }
 }
 function readGitSha() {
-  if (!fs81.existsSync(path90.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs81.existsSync(path90.join(PROJECT_ROOT, ".git")))
+  if (!fs82.existsSync(path90.join(PROJECT_ROOT, "pnpm-workspace.yaml")) || !fs82.existsSync(path90.join(PROJECT_ROOT, ".git")))
     return null;
   try {
     const rev = spawnSync4("git", ["rev-parse", "--short", "HEAD"], { cwd: PROJECT_ROOT, encoding: "utf-8" });
@@ -40086,10 +40112,10 @@ function resolveFrontendDir() {
   if (process.env.HALO_FRONTEND_DIR)
     return path90.resolve(process.env.HALO_FRONTEND_DIR);
   const bundled = path90.resolve(__dirname3, "..", "admin-out");
-  if (fs81.existsSync(path90.join(bundled, "index.html")))
+  if (fs82.existsSync(path90.join(bundled, "index.html")))
     return bundled;
   const sibling = path90.resolve(__dirname3, "..", "..", "admin", "out");
-  if (fs81.existsSync(path90.join(sibling, "index.html")))
+  if (fs82.existsSync(path90.join(sibling, "index.html")))
     return sibling;
   return path90.resolve(PROJECT_ROOT, "packages", "admin", "out");
 }
@@ -40194,11 +40220,11 @@ var init_dist2 = __esm({
     init_git_ssh();
     __dirname3 = path90.dirname(fileURLToPath3(import.meta.url));
     PORT = config.server.port;
-    HALO_VERSION = "2.0.4";
+    HALO_VERSION = "2.0.6";
     PROJECT_ROOT = findProjectRoot();
     HALO_HOME4 = path90.join(homedir25(), ".halo");
     GIT_SHA = readGitSha();
-    if (!fs81.existsSync(path90.join(HALO_HOME4, "global", ".template-version"))) {
+    if (!fs82.existsSync(path90.join(HALO_HOME4, "global", ".template-version"))) {
       process.stderr.write("\x1B[31m[Server] ~/.halo/global/ not initialized. Run `halo setup` first.\x1B[0m\n");
       process.exit(1);
     }
@@ -40300,7 +40326,7 @@ var init_dist2 = __esm({
     setCronSessionRegistry(registry);
     if (OWNS_RUNTIMES && !AGENTCORE) {
       for (const ws of listRunningWorkspaces()) {
-        if (!fs81.existsSync(path90.join(ws, ".halo")))
+        if (!fs82.existsSync(path90.join(ws, ".halo")))
           continue;
         if (!claimWorkspaceRuntime(ws))
           continue;
@@ -40346,7 +40372,7 @@ var init_dist2 = __esm({
       app.get("/*", (c) => {
         const indexPath = path90.join(FRONTEND_DIR, "index.html");
         try {
-          const html = fs81.readFileSync(indexPath, "utf-8");
+          const html = fs82.readFileSync(indexPath, "utf-8");
           return c.html(html);
         } catch {
           return c.text("Frontend not built. Run: cd packages/admin && npx next build", 503);
@@ -40434,7 +40460,7 @@ __export(agentcore_front_exports, {
   workerEnv: () => workerEnv
 });
 import http3 from "node:http";
-import fs82 from "node:fs";
+import fs83 from "node:fs";
 import fsp2 from "node:fs/promises";
 import os11 from "node:os";
 import path91 from "node:path";
@@ -40465,39 +40491,39 @@ function skipTemplateEntry(rel) {
 }
 function chownTree(dir, owner, sid) {
   try {
-    fs82.lchownSync(dir, owner.uid, owner.gid);
-    for (const rel of fs82.readdirSync(dir, { recursive: true }))
-      fs82.lchownSync(path91.join(dir, rel), owner.uid, owner.gid);
+    fs83.lchownSync(dir, owner.uid, owner.gid);
+    for (const rel of fs83.readdirSync(dir, { recursive: true }))
+      fs83.lchownSync(path91.join(dir, rel), owner.uid, owner.gid);
   } catch (err) {
     console.warn(`[AgentCore] front: chown ${sid} to ${owner.uid}:${owner.gid} failed (${err.message}) \u2014 serving it as is`);
   }
 }
 function ensureSessionDir(base, sid, owner) {
   const dir = path91.join(base, sid);
-  if (fs82.existsSync(dir))
+  if (fs83.existsSync(dir))
     return false;
   const tmp = path91.join(base, `.tmp-${crypto13.randomBytes(8).toString("hex")}`);
-  fs82.mkdirSync(tmp, { mode: 448 });
+  fs83.mkdirSync(tmp, { mode: 448 });
   try {
     const template = path91.join(base, TEMPLATE_DIR);
-    if (fs82.statSync(template, { throwIfNoEntry: false })?.isDirectory()) {
-      fs82.cpSync(template, tmp, { recursive: true, verbatimSymlinks: true, filter: (src) => !skipTemplateEntry(path91.relative(template, src)) });
+    if (fs83.statSync(template, { throwIfNoEntry: false })?.isDirectory()) {
+      fs83.cpSync(template, tmp, { recursive: true, verbatimSymlinks: true, filter: (src) => !skipTemplateEntry(path91.relative(template, src)) });
     }
     if (owner)
       chownTree(tmp, owner, sid);
-    if (fs82.readdirSync(tmp).length === 0) {
-      fs82.rmdirSync(tmp);
-      fs82.mkdirSync(dir, { mode: 448 });
+    if (fs83.readdirSync(tmp).length === 0) {
+      fs83.rmdirSync(tmp);
+      fs83.mkdirSync(dir, { mode: 448 });
       if (owner)
         chownTree(dir, owner, sid);
       return true;
     }
-    fs82.renameSync(tmp, dir);
+    fs83.renameSync(tmp, dir);
     return true;
   } catch (err) {
-    fs82.rmSync(tmp, { recursive: true, force: true });
+    fs83.rmSync(tmp, { recursive: true, force: true });
     const code = err.code;
-    if ((code === "EEXIST" || code === "ENOTEMPTY") && fs82.existsSync(dir))
+    if ((code === "EEXIST" || code === "ENOTEMPTY") && fs83.existsSync(dir))
       return false;
     throw err;
   }
@@ -40541,7 +40567,7 @@ async function runViewSetup(base, sessionDir, deps = SYSTEM_SETUP) {
   const left = mountLayers(base, deps.mountinfo());
   if (left > 0)
     throw new Error(`view setup: ${base} still has ${left} mount(s) after ${MAX_UMOUNTS} \xD7 umount -l`);
-  if (fs82.existsSync(sessionDir))
+  if (fs83.existsSync(sessionDir))
     throw new Error(`view setup: ${base} is still visible after umount -l`);
 }
 function workerEnv(src, front) {
@@ -40560,15 +40586,15 @@ async function copyMediaFile(p, root, dest, max = MAX_MEDIA_BYTES) {
     return "not an absolute path";
   let pfd;
   try {
-    pfd = fs82.openSync(p, O_PATH);
+    pfd = fs83.openSync(p, O_PATH);
   } catch (err) {
     return `cannot open (${err.code})`;
   }
   try {
-    const link = fs82.readlinkSync(`/proc/self/fd/${pfd}`);
+    const link = fs83.readlinkSync(`/proc/self/fd/${pfd}`);
     if (!link.startsWith(`${root}/`))
       return `not under ${root}/`;
-    const st = fs82.fstatSync(pfd);
+    const st = fs83.fstatSync(pfd);
     if (!st.isFile())
       return "not a regular file";
     if (st.size > max)
@@ -40595,7 +40621,7 @@ async function copyMediaFile(p, root, dest, max = MAX_MEDIA_BYTES) {
       await src.close();
     }
   } finally {
-    fs82.closeSync(pfd);
+    fs83.closeSync(pfd);
   }
 }
 async function copyMediaLines(text6, root, dir, sid) {
@@ -40608,7 +40634,7 @@ async function copyMediaLines(text6, root, dir, sid) {
       continue;
     }
     const sub = path91.join(dir, String(n++));
-    fs82.mkdirSync(sub);
+    fs83.mkdirSync(sub);
     const name = path91.basename(m[1]).replace(/[\x00-\x1f\x7f]/g, "_").replace(/^\.+/, "") || "file";
     const dest = path91.join(sub, name);
     const why = await copyMediaFile(m[1], root, dest).catch((err) => err.message);
@@ -40616,7 +40642,7 @@ async function copyMediaLines(text6, root, dir, sid) {
       out.push(`MEDIA:${dest}`);
       continue;
     }
-    fs82.rmSync(sub, { recursive: true, force: true });
+    fs83.rmSync(sub, { recursive: true, force: true });
     console.warn(`[AgentCore] notify ${sid}: MEDIA dropped (${why}): ${JSON.stringify(m[1].slice(0, 300))}`);
   }
   return out.join("\n");
@@ -40660,7 +40686,7 @@ function readBody(req, max) {
   });
 }
 async function startAgentCoreFront(o) {
-  const base = fs82.realpathSync(o.base);
+  const base = fs83.realpathSync(o.base);
   const workerPort = o.workerPort ?? WORKER_PORT;
   const token = crypto13.randomBytes(32).toString("hex");
   const isMounted = o.isMounted ?? ((b) => mountLayers(b, readMountinfo()) > 0);
@@ -40722,11 +40748,11 @@ async function startAgentCoreFront(o) {
     preparing++;
     let dir = "";
     const cleanup = () => {
-      fs82.rmSync(dir, { recursive: true, force: true });
+      fs83.rmSync(dir, { recursive: true, force: true });
       settle();
     };
     try {
-      dir = fs82.mkdtempSync(path91.join(os11.tmpdir(), "halo-notify-"));
+      dir = fs83.mkdtempSync(path91.join(os11.tmpdir(), "halo-notify-"));
       const text6 = await copyMediaLines(b.text, viewRoot, dir, b.session);
       runNotify(cmd, text6, { HALO_SESSION_ID: b.session, HALO_RUN_STATUS: b.status, HALO_WORKSPACE: dir }, dir, cleanup);
     } catch (err) {
@@ -40943,7 +40969,7 @@ var init_agentcore_front = __esm({
     MAX_MEDIA_BYTES = 20 * 1024 * 1024;
     O_PATH = 2097152;
     execFileP = promisify3(execFile2);
-    readMountinfo = () => fs82.readFileSync("/proc/self/mountinfo", "utf8");
+    readMountinfo = () => fs83.readFileSync("/proc/self/mountinfo", "utf8");
     SYSTEM_SETUP = {
       mountinfo: readMountinfo,
       exec: (argv) => execFileP(argv[0], argv.slice(1), { timeout: SETUP_TIMEOUT_MS })
@@ -42081,7 +42107,7 @@ process.emitWarning = (warning, ...args) => {
 // src/index.ts
 init_server_supervisor();
 import path93 from "node:path";
-import fs83 from "node:fs";
+import fs84 from "node:fs";
 import { homedir as homedir26, userInfo } from "node:os";
 import { parseArgs as parseArgs2 } from "node:util";
 
@@ -42372,7 +42398,7 @@ function installUserUnit(opts, run = runCommand) {
 }
 
 // src/index.ts
-var VERSION = "2.0.4";
+var VERSION = "2.0.6";
 var HELP_TOP = `Usage: halo <command> [options]
 
 Commands:
@@ -43166,7 +43192,7 @@ ${HELP_SESSIONS}`);
   }
 }
 async function cmdSessionsMigrate(workspace) {
-  if (!fs83.existsSync(path93.join(workspace, ".halo"))) {
+  if (!fs84.existsSync(path93.join(workspace, ".halo"))) {
     process.stderr.write(`Not a Halo workspace (no .halo/): ${workspace}
 `);
     process.exitCode = 1;
@@ -43311,7 +43337,7 @@ var SERVER_LOCK_PATH = path93.join(homedir26(), ".halo", "global", "server.lock"
 var SERVER_LOG_PATH = path93.join(homedir26(), ".halo", "logs", "server.log");
 function readServerPid() {
   try {
-    const txt = fs83.readFileSync(SERVER_LOCK_PATH, "utf-8").trim();
+    const txt = fs84.readFileSync(SERVER_LOCK_PATH, "utf-8").trim();
     const n = parseInt(txt, 10);
     return Number.isFinite(n) && n > 0 ? n : null;
   } catch {
@@ -43418,8 +43444,8 @@ async function cmdServerStart(argv, restart) {
   }
   if (plan.note) writeDim(plan.note);
   const { spawn: spawn7 } = await import("node:child_process");
-  fs83.mkdirSync(path93.dirname(SERVER_LOG_PATH), { recursive: true });
-  const out = fs83.openSync(SERVER_LOG_PATH, "a");
+  fs84.mkdirSync(path93.dirname(SERVER_LOG_PATH), { recursive: true });
+  const out = fs84.openSync(SERVER_LOG_PATH, "a");
   const child = spawn7(process.argv[0], [process.argv[1], "server", "start"], {
     detached: true,
     stdio: ["ignore", out, out],
@@ -43501,7 +43527,7 @@ ${HELP_AGENTCORE}`);
     return;
   }
   const workspace = path93.resolve(raw);
-  if (!fs83.statSync(workspace, { throwIfNoEntry: false })?.isDirectory()) {
+  if (!fs84.statSync(workspace, { throwIfNoEntry: false })?.isDirectory()) {
     process.stderr.write(`Workspace is not a directory: ${workspace}
 `);
     process.exitCode = 1;
@@ -43612,7 +43638,7 @@ async function cmdServerLogs(argv) {
       lines: { type: "string", short: "n" }
     }
   });
-  if (!fs83.existsSync(SERVER_LOG_PATH)) {
+  if (!fs84.existsSync(SERVER_LOG_PATH)) {
     process.stderr.write(`No log file at ${SERVER_LOG_PATH}
 `);
     return;
@@ -43630,7 +43656,7 @@ function exitMissingSetup() {
   process.exit(1);
 }
 function isHaloHomeReady() {
-  return fs83.existsSync(path93.join(homedir26(), ".halo", "global", ".template-version"));
+  return fs84.existsSync(path93.join(homedir26(), ".halo", "global", ".template-version"));
 }
 async function main2() {
   const argv = process.argv.slice(2);