@turmind/halo 2.2.5 → 2.2.6

package/dist/index.js

@@ -16830,7 +16830,7 @@ async function initObservability(haloProcess = "server") {
     return true;
   }
   const { registerSdk: registerSdk2 } = await Promise.resolve().then(() => (init_otel_sdk(), otel_sdk_exports));
-  providers = await registerSdk2(process.env.OTEL_SERVICE_NAME, "2.2.5", haloProcess);
+  providers = await registerSdk2(process.env.OTEL_SERVICE_NAME, "2.2.6", haloProcess);
   console.log(`[Observability] OTLP export \u2192 ${process.env.OTEL_EXPORTER_OTLP_ENDPOINT} (service.name=${process.env.OTEL_SERVICE_NAME}, halo.process=${haloProcess}, capture_content=${config.observability.captureContent})`);
   return true;
 }
@@ -23920,6 +23920,31 @@ async function planFolderZip(root, projectPath, opts) {
   const [rootReal, wsReal] = await Promise.all([fs53.realpath(root), fs53.realpath(projectPath)]);
   if (isBlockedPath(rootReal, wsReal))
     throw new FolderZipError(403, "Path is not accessible");
+  const planner = createPlanner(wsReal, opts);
+  await planner.walk(rootReal, "");
+  return planner.plan;
+}
+async function planSelectionZip(rels, projectPath, opts) {
+  const selected = new Set(rels);
+  const kept = [...selected].filter((rel) => rel === "" || !rel.split("/").some((_, i, segs) => selected.has(segs.slice(0, i).join("/")))).sort();
+  let common = kept[0].split("/").slice(0, -1);
+  for (const rel of kept) {
+    const segs = rel.split("/").slice(0, -1);
+    let i = 0;
+    while (i < common.length && common[i] === segs[i])
+      i++;
+    common = common.slice(0, i);
+  }
+  const parent = common.join("/");
+  const wsReal = await fs53.realpath(projectPath);
+  const planner = createPlanner(wsReal, opts);
+  for (const rel of kept) {
+    const real = rel ? path60.join(await fs53.realpath(path60.join(wsReal, path60.dirname(rel))), path60.basename(rel)) : wsReal;
+    await planner.addSelected(real, parent ? rel.slice(parent.length + 1) : rel);
+  }
+  return { plan: planner.plan, parent };
+}
+function createPlanner(wsReal, opts) {
   const { includeIgnored, limits, signal } = opts;
   const deadline = Date.now() + limits.maxWalkMs;
   const plan = { items: [], files: 0, bytes: 0, excluded: new ExcludedLog() };
@@ -24012,8 +24037,31 @@ async function planFolderZip(root, projectPath, opts) {
     }
     return nonEmpty2;
   }
-  await walk(rootReal, "");
-  return plan;
+  async function addSelected(real, rel) {
+    signal?.throwIfAborted();
+    if (Date.now() > deadline)
+      throw walkTimeout();
+    const name = path60.basename(real);
+    const st = await fs53.lstat(real);
+    if (rel.split("/").some((seg, i) => isZipUnsafeName(seg, i === 0))) {
+      excluded.add("unreadable", `${rel}${st.isDirectory() ? "/" : ""} (name not valid in a zip)`);
+    } else if (st.isSymbolicLink()) {
+      await addSymlink(real, rel, name);
+    } else if (st.isDirectory()) {
+      if (isBlockedPath(real, wsReal))
+        excluded.add("blocked", `${rel}/`);
+      else if (!await walk(real, rel) && rel)
+        plan.items.push({ rel, mtimeMs: st.mtimeMs });
+    } else if (st.isFile()) {
+      if (isEnvName(name) || isBlockedPath(real, wsReal))
+        excluded.add("blocked", rel);
+      else
+        addFile(rel, real, st);
+    } else {
+      excluded.add("unreadable", `${rel} (not a regular file)`);
+    }
+  }
+  return { plan, walk, addSelected };
 }
 function planSummary(plan) {
   return { files: plan.files, bytes: plan.bytes, excluded: { ...plan.excluded.counts }, ignoredNames: { ...plan.excluded.ignoredNames } };
@@ -24747,26 +24795,44 @@ function createFileRoutes(opts = {}) {
     }
   });
   app2.get("/files/download-folder", async (c) => {
-    const relPath = c.req.query("path") ?? "";
+    const relPaths = c.req.queries("path") ?? [];
+    const relPath = relPaths[0] ?? "";
     const projectId = c.req.query("projectId");
     if (!projectId)
       return c.json({ error: "projectId is required" }, 400);
     const signal = c.req.raw.signal;
+    const planOpts = { includeIgnored: c.req.query("include") === "excluded", limits: folderZipLimits, signal };
     try {
-      const resolved = await resolveProjectFile(projectId, relPath);
-      if ("error" in resolved)
-        return c.json({ error: resolved.error }, resolved.status);
-      const { projectPath, absolutePath } = resolved;
-      if (!(await fs54.stat(absolutePath)).isDirectory())
-        return c.json({ error: "Not a directory" }, 400);
-      const plan = await planFolderZip(absolutePath, projectPath, {
-        includeIgnored: c.req.query("include") === "excluded",
-        limits: folderZipLimits,
-        signal
-      });
+      let plan;
+      let folderName;
+      if (relPaths.length > 1) {
+        let projectPath = "";
+        const rels = [];
+        for (const p of relPaths) {
+          const resolved = await resolveProjectFile(projectId, p);
+          if ("error" in resolved)
+            return c.json({ error: resolved.error }, resolved.status);
+          projectPath = resolved.projectPath;
+          const rel = path61.relative(projectPath, resolved.absolutePath);
+          if (rel === ".." || rel.startsWith(`..${path61.sep}`) || path61.isAbsolute(rel))
+            return c.json({ error: "Path traversal not allowed" }, 403);
+          rels.push(rel.split(path61.sep).join("/"));
+        }
+        const selection = await planSelectionZip(rels, projectPath, planOpts);
+        plan = selection.plan;
+        folderName = `${path61.basename(path61.resolve(projectPath, selection.parent)) || "workspace"}-selection`;
+      } else {
+        const resolved = await resolveProjectFile(projectId, relPath);
+        if ("error" in resolved)
+          return c.json({ error: resolved.error }, resolved.status);
+        const { projectPath, absolutePath } = resolved;
+        if (!(await fs54.stat(absolutePath)).isDirectory())
+          return c.json({ error: "Not a directory" }, 400);
+        plan = await planFolderZip(absolutePath, projectPath, planOpts);
+        folderName = path61.basename(absolutePath) || "workspace";
+      }
       if (c.req.query("estimate") === "1")
         return c.json(planSummary(plan));
-      const folderName = path61.basename(absolutePath) || "workspace";
       const fileName = `${folderName}.zip`;
       const asciiName = fileName.replace(/[^\x20-\x7e]|["\\]/g, "_");
       const encodedName = encodeURIComponent(fileName).replace(/['()*]/g, (ch) => `%${ch.charCodeAt(0).toString(16).toUpperCase()}`);
@@ -32756,7 +32822,7 @@ function buildCard(workspace, interfaceUrl, caps) {
   return {
     name: raw.name,
     description: raw.description,
-    version: typeof raw.version === "string" ? raw.version : "2.2.5",
+    version: typeof raw.version === "string" ? raw.version : "2.2.6",
     supportedInterfaces: [{ url: interfaceUrl, protocolBinding: "JSONRPC", protocolVersion: A2A_VERSION }],
     capabilities: { streaming: caps.streaming, pushNotifications: true, extendedAgentCard: false },
     ...caps.tokenAuth === false ? {} : {
@@ -34238,7 +34304,7 @@ async function finishRun(runId, db4, session) {
     if (session.turnError) {
       status = "failed";
       failureReason = session.turnError.slice(0, 500);
-    } else if (!text6) {
+    } else if (!answer) {
       status = "failed";
       failureReason = "run produced no output (nothing to dispatch)";
     }
@@ -34250,7 +34316,7 @@ async function finishRun(runId, db4, session) {
     const targets = job ? parseTargets(job.targets) : [];
     let dispatchResults = [];
     if (job && status === "succeeded" && targets.length > 0) {
-      dispatchResults = await dispatchToTargets(text6, targets, row.workspacePath ?? job.workspacePath);
+      dispatchResults = await dispatchToTargets(answer, targets, row.workspacePath ?? job.workspacePath);
       if (dispatchResults.length > 0 && dispatchResults.every((r) => !r.ok)) {
         status = "failed";
         failureReason = `all ${dispatchResults.length} target(s) failed: ${dispatchResults.map((r) => `${r.channelType}:${r.error ?? "?"}`).join("; ")}`;
@@ -35928,7 +35994,7 @@ function createCoreChecker(opts) {
 }
 function getCoreStatus(force) {
   checker ??= createCoreChecker({
-    haloVersion: "2.2.5",
+    haloVersion: "2.2.6",
     fetchLatest: fetchNpmLatest,
     onChange: (status) => broadcast({ type: "updates:changed", scope: "core", status })
   });
@@ -36096,7 +36162,7 @@ function hubBase() {
 }
 function serverChecker() {
   checker2 ??= createExtensionsChecker({
-    haloVersion: "2.2.5",
+    haloVersion: "2.2.6",
     installed: () => {
       const s = getSnapshot();
       return [...s.extensions, ...s.disabled];
@@ -40952,7 +41018,6 @@ var init_api3 = __esm({
 
 // ../server/dist/channels/feishu/handler.js
 import path93 from "node:path";
-import * as Lark from "@larksuiteoapi/node-sdk";
 function buildSessionPrefixForThread2(chatId, rootId) {
   return sessionPrefix("feishu", `${chatId}:${rootId}`);
 }
@@ -41199,13 +41264,16 @@ function startFeishuChannel(deps) {
     const state = ensureState(accountId);
     if (state.stopped || state.wsClient)
       return;
-    const wsClient = new Lark.WSClient({
+    const { WSClient: WSClient2, EventDispatcher, LoggerLevel } = await import("./feishu-sdk.cjs");
+    if (state.stopped || state.wsClient)
+      return;
+    const wsClient = new WSClient2({
       appId: account.appId,
       appSecret: account.appSecret,
-      loggerLevel: Lark.LoggerLevel.warn
+      loggerLevel: LoggerLevel.warn
     });
     state.wsClient = wsClient;
-    const dispatcher = new Lark.EventDispatcher({});
+    const dispatcher = new EventDispatcher({});
     dispatcher.register({
       "im.message.receive_v1": async (data) => {
         dispatchEvent(accountId, data);
@@ -41718,7 +41786,7 @@ var init_event_adapter5 = __esm({
 // ../server/dist/channels/wecom/handler.js
 import path94 from "node:path";
 import fs89 from "node:fs/promises";
-import { WSClient as WSClient2, generateReqId } from "@wecom/aibot-node-sdk";
+import { WSClient, generateReqId } from "@wecom/aibot-node-sdk";
 function pickConversation(body) {
   const userid = body.from?.userid ?? "unknown";
   if (body.chattype === "group" && body.chatid) {
@@ -41950,7 +42018,7 @@ function startWecomChannel(deps) {
     const state = ensureState(accountId);
     if (state.stopped || state.wsClient)
       return;
-    const wsClient = new WSClient2({
+    const wsClient = new WSClient({
       botId: account.botId,
       secret: account.secret,
       maxReconnectAttempts: -1,
@@ -42593,7 +42661,7 @@ var init_dist2 = __esm({
     init_git_ssh();
     __dirname3 = path95.dirname(fileURLToPath3(import.meta.url));
     PORT = config.server.port;
-    HALO_VERSION = "2.2.5";
+    HALO_VERSION = "2.2.6";
     PROJECT_ROOT = findProjectRoot();
     HALO_HOME4 = path95.join(homedir26(), ".halo");
     GIT_SHA = readGitSha();
@@ -44791,7 +44859,7 @@ function installUserUnit(opts, run = runCommand) {
 }
 
 // src/index.ts
-var VERSION = "2.2.5";
+var VERSION = "2.2.6";
 var HELP_TOP = `Usage: halo <command> [options]
 
 Commands:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turmind/halo",
-  "version": "2.2.5",
+  "version": "2.2.6",
   "description": "Halo — multi-agent collaborative workspace. CLI + TUI + HTTP/WS server in one package.",
   "type": "module",
   "license": "MIT",
@@ -22,7 +22,6 @@
     "@aws-sdk/client-transcribe-streaming": "^3.1142.0",
     "@aws-sdk/credential-provider-node": "^3.972.30",
     "@hono/node-server": "^1.19.17",
-    "@larksuiteoapi/node-sdk": "^1.65.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "^0.222.0",
     "@opentelemetry/exporter-logs-otlp-proto": "^0.222.0",