@kmmao/happy-agent 0.5.5 → 0.7.0

package/dist/index.cjs

@@ -39,7 +39,7 @@ function _interopNamespaceDefault(e) {
 
 var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
 
-var version = "0.5.5";
+var version = "0.7.0";
 
 function loadConfig() {
   const serverUrl = (process.env.HAPPY_SERVER_URL ?? "https://s.sangreal.code.xycloud.info:2443").replace(/\/+$/, "");
@@ -2261,6 +2261,8 @@ function handleTaskTrigger(data, serverUrl, _authToken, scheduler) {
         approvedNewDirectoryCreation: true,
         automationContext: { kind: "task", trigger: "task-dispatch", projectId: data.projectId },
         environmentVariables: {
+          // Profile-resolved env applied first so task-specific overrides win.
+          ...data.runtimeProfile?.environmentVariables ?? {},
           HAPPY_INITIAL_PROMPT_FILE: promptFile,
           HAPPY_TASK_ID: data.taskId,
           HAPPY_TASK_PRIORITY: data.priority,
@@ -4885,6 +4887,182 @@ z__namespace.discriminatedUnion("allowed", [
   VoiceTokenDeniedSchema
 ]);
 
+const CODEX_APP_SERVER_BACKEND = "codex-app-server";
+const CODEX_MCP_LEGACY_BACKEND = "codex-mcp-legacy";
+const CodexBackendModeSchema = z__namespace.enum([
+  "auto",
+  CODEX_APP_SERVER_BACKEND,
+  CODEX_MCP_LEGACY_BACKEND
+]);
+const CodexRequestedBackendSchema = CodexBackendModeSchema;
+const CodexResolvedBackendSchema = z__namespace.enum([
+  CODEX_APP_SERVER_BACKEND,
+  CODEX_MCP_LEGACY_BACKEND
+]);
+const CodexConfigModeSchema = z__namespace.enum([
+  "inherit",
+  "managed-profile",
+  "managed-overrides"
+]);
+const CODEX_REQUESTED_BACKEND_ALIASES = {
+  auto: ["", "auto"],
+  [CODEX_APP_SERVER_BACKEND]: ["app-server", "appserver", CODEX_APP_SERVER_BACKEND],
+  [CODEX_MCP_LEGACY_BACKEND]: [
+    "legacy",
+    "mcp",
+    "mcp-legacy",
+    CODEX_MCP_LEGACY_BACKEND
+  ]
+};
+new Map(
+  Object.entries(CODEX_REQUESTED_BACKEND_ALIASES).flatMap(
+    ([backend, aliases]) => aliases.map((alias) => [alias, backend])
+  )
+);
+
+function isTemplateAwareUrl(value) {
+  if (!value) return true;
+  if (/^\$\{[A-Z_][A-Z0-9_]*(:-[^}]*)?\}$/.test(value)) return true;
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+const BuiltInAIBackendProfileIdSchema = z.z.enum([
+  "anthropic",
+  "deepseek",
+  "zai",
+  "openai",
+  "azure-openai",
+  "minimax",
+  "kimi"
+]);
+new Set(
+  BuiltInAIBackendProfileIdSchema.options
+);
+const EnvironmentVariableSchema = z.z.object({
+  name: z.z.string().regex(/^[A-Z_][A-Z0-9_]*$/, "Invalid environment variable name"),
+  value: z.z.string()
+});
+const ProfileCompatibilitySchema = z.z.object({
+  claude: z.z.boolean().default(true),
+  codex: z.z.boolean().default(true),
+  gemini: z.z.boolean().default(true)
+});
+const AnthropicConfigSchema = z.z.object({
+  baseUrl: z.z.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  authToken: z.z.string().optional(),
+  model: z.z.string().optional()
+});
+const OpenAIConfigSchema = z.z.object({
+  apiKey: z.z.string().optional(),
+  baseUrl: z.z.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  model: z.z.string().optional()
+});
+const AzureOpenAIConfigSchema = z.z.object({
+  apiKey: z.z.string().optional(),
+  endpoint: z.z.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  apiVersion: z.z.string().optional(),
+  deploymentName: z.z.string().optional()
+});
+const TogetherAIConfigSchema = z.z.object({
+  apiKey: z.z.string().optional(),
+  model: z.z.string().optional()
+});
+const CodexConfigSchema = z.z.object({
+  backendMode: CodexBackendModeSchema.optional(),
+  configMode: CodexConfigModeSchema.optional(),
+  codexProfileName: z.z.string().optional(),
+  model: z.z.string().optional(),
+  reasoningEffort: z.z.string().optional(),
+  reasoningSummary: z.z.string().optional(),
+  verbosity: z.z.string().optional(),
+  personality: z.z.string().optional(),
+  serviceTier: z.z.string().optional(),
+  webSearchEnabled: z.z.boolean().optional(),
+  approvalPolicy: z.z.string().optional(),
+  sandboxMode: z.z.string().optional()
+});
+const TmuxConfigSchema = z.z.object({
+  sessionName: z.z.string().optional(),
+  tmpDir: z.z.string().optional(),
+  updateEnvironment: z.z.boolean().optional()
+});
+const CustomModelSchema = z.z.object({
+  id: z.z.string().min(1),
+  name: z.z.string().min(1).max(100),
+  description: z.z.string().nullish()
+});
+const DefaultPermissionModeSchema = z.z.enum([
+  "default",
+  "acceptEdits",
+  "auto",
+  "bypassPermissions",
+  "plan",
+  "read-only",
+  "safe-yolo",
+  "yolo"
+]);
+z.z.object({
+  id: z.z.string().min(1),
+  name: z.z.string().min(1).max(100),
+  description: z.z.string().max(500).optional(),
+  anthropicConfig: AnthropicConfigSchema.optional(),
+  openaiConfig: OpenAIConfigSchema.optional(),
+  azureOpenAIConfig: AzureOpenAIConfigSchema.optional(),
+  togetherAIConfig: TogetherAIConfigSchema.optional(),
+  codexConfig: CodexConfigSchema.optional(),
+  tmuxConfig: TmuxConfigSchema.optional(),
+  startupBashScript: z.z.string().optional(),
+  environmentVariables: z.z.array(EnvironmentVariableSchema).default([]),
+  customModels: z.z.array(CustomModelSchema).optional(),
+  modelMappings: z.z.record(z.z.string(), z.z.string()).optional(),
+  defaultSessionType: z.z.enum(["simple", "worktree"]).optional(),
+  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
+  defaultModelMode: z.z.string().optional(),
+  compatibility: ProfileCompatibilitySchema.default({
+    claude: true,
+    codex: true,
+    gemini: true
+  }),
+  isBuiltIn: z.z.boolean().default(false),
+  createdAt: z.z.number().default(() => Date.now()),
+  updatedAt: z.z.number().default(() => Date.now()),
+  version: z.z.string().default("1.0.0")
+});
+const RuntimeProfileSourceSchema = z.z.enum([
+  "built-in-profile",
+  "account-profile",
+  "local-profile",
+  "ad-hoc"
+]);
+const RuntimeProfileTrustSchema = z.z.enum(["trusted", "untrusted"]);
+const RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION = 1;
+const ResolvedRuntimeProfileSchema = z.z.object({
+  schemaVersion: z.z.literal(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION).default(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION),
+  profileId: z.z.string().optional(),
+  profileName: z.z.string().optional(),
+  source: RuntimeProfileSourceSchema,
+  trust: RuntimeProfileTrustSchema,
+  isBuiltIn: z.z.boolean().optional(),
+  compatibility: ProfileCompatibilitySchema.optional(),
+  environmentVariables: z.z.record(z.z.string(), z.z.string()).default({}),
+  startupBashScript: z.z.string().optional(),
+  customModels: z.z.array(CustomModelSchema).optional(),
+  modelMappings: z.z.record(z.z.string(), z.z.string()).optional(),
+  defaultSessionType: z.z.enum(["simple", "worktree"]).optional(),
+  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
+  defaultModelMode: z.z.string().optional()
+});
+
 const TaskPrioritySchema = z__namespace.enum([
   "urgent",
   // User-initiated, needs immediate execution
@@ -4943,7 +5121,12 @@ z__namespace.object({
   // Encrypted by App
   priority: TaskPrioritySchema.default("user"),
   maxAttempts: z__namespace.number().int().min(1).max(10).default(3),
-  skillIds: z__namespace.array(z__namespace.string()).max(10).default([])
+  skillIds: z__namespace.array(z__namespace.string()).max(10).default([]),
+  // Profile binding (wire 0.15.0). Business key — built-in id like
+  // "anthropic" or AiBackendProfile.profileKey for the account. Optional:
+  // when omitted the server falls back to Project.supervisorConfig.defaultProfileId
+  // via the unified runtimeProfileResolver (feature-flagged).
+  profileId: z__namespace.string().optional()
 });
 z__namespace.object({
   type: z__namespace.literal("task-trigger"),
@@ -4961,8 +5144,16 @@ z__namespace.object({
   })).optional(),
   agentType: z__namespace.string().nullable().optional(),
   // "claude" | "codex" | "gemini" — null = inherit CLI default
-  modelOverride: z__namespace.string().nullable().optional()
+  modelOverride: z__namespace.string().nullable().optional(),
   // e.g. "claude-sonnet-4-20250514" — null = agent default
+  // Profile binding for this task. `profileId` references the AIBackendProfile
+  // selected when the task was created (Task.profileId column). `runtimeProfile`
+  // is the resolved snapshot (env vars, startup script, permission mode, etc.)
+  // that the CLI should honor when spawning the session. Both optional for
+  // backward compatibility; starting from wire 0.14.0 + server unified resolver
+  // these are always populated for scheduled/webhook/manual tasks.
+  profileId: z__namespace.string().optional(),
+  runtimeProfile: ResolvedRuntimeProfileSchema.optional()
 });
 const TaskOutcomeSchema = z__namespace.enum([
   "completed",
@@ -5140,182 +5331,6 @@ z__namespace.object({
   exitCode: z__namespace.number()
 });
 
-const CODEX_APP_SERVER_BACKEND = "codex-app-server";
-const CODEX_MCP_LEGACY_BACKEND = "codex-mcp-legacy";
-const CodexBackendModeSchema = z__namespace.enum([
-  "auto",
-  CODEX_APP_SERVER_BACKEND,
-  CODEX_MCP_LEGACY_BACKEND
-]);
-const CodexRequestedBackendSchema = CodexBackendModeSchema;
-const CodexResolvedBackendSchema = z__namespace.enum([
-  CODEX_APP_SERVER_BACKEND,
-  CODEX_MCP_LEGACY_BACKEND
-]);
-const CodexConfigModeSchema = z__namespace.enum([
-  "inherit",
-  "managed-profile",
-  "managed-overrides"
-]);
-const CODEX_REQUESTED_BACKEND_ALIASES = {
-  auto: ["", "auto"],
-  [CODEX_APP_SERVER_BACKEND]: ["app-server", "appserver", CODEX_APP_SERVER_BACKEND],
-  [CODEX_MCP_LEGACY_BACKEND]: [
-    "legacy",
-    "mcp",
-    "mcp-legacy",
-    CODEX_MCP_LEGACY_BACKEND
-  ]
-};
-new Map(
-  Object.entries(CODEX_REQUESTED_BACKEND_ALIASES).flatMap(
-    ([backend, aliases]) => aliases.map((alias) => [alias, backend])
-  )
-);
-
-function isTemplateAwareUrl(value) {
-  if (!value) return true;
-  if (/^\$\{[A-Z_][A-Z0-9_]*(:-[^}]*)?\}$/.test(value)) return true;
-  try {
-    new URL(value);
-    return true;
-  } catch {
-    return false;
-  }
-}
-const BuiltInAIBackendProfileIdSchema = z.z.enum([
-  "anthropic",
-  "deepseek",
-  "zai",
-  "openai",
-  "azure-openai",
-  "minimax",
-  "kimi"
-]);
-new Set(
-  BuiltInAIBackendProfileIdSchema.options
-);
-const EnvironmentVariableSchema = z.z.object({
-  name: z.z.string().regex(/^[A-Z_][A-Z0-9_]*$/, "Invalid environment variable name"),
-  value: z.z.string()
-});
-const ProfileCompatibilitySchema = z.z.object({
-  claude: z.z.boolean().default(true),
-  codex: z.z.boolean().default(true),
-  gemini: z.z.boolean().default(true)
-});
-const AnthropicConfigSchema = z.z.object({
-  baseUrl: z.z.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  authToken: z.z.string().optional(),
-  model: z.z.string().optional()
-});
-const OpenAIConfigSchema = z.z.object({
-  apiKey: z.z.string().optional(),
-  baseUrl: z.z.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  model: z.z.string().optional()
-});
-const AzureOpenAIConfigSchema = z.z.object({
-  apiKey: z.z.string().optional(),
-  endpoint: z.z.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  apiVersion: z.z.string().optional(),
-  deploymentName: z.z.string().optional()
-});
-const TogetherAIConfigSchema = z.z.object({
-  apiKey: z.z.string().optional(),
-  model: z.z.string().optional()
-});
-const CodexConfigSchema = z.z.object({
-  backendMode: CodexBackendModeSchema.optional(),
-  configMode: CodexConfigModeSchema.optional(),
-  codexProfileName: z.z.string().optional(),
-  model: z.z.string().optional(),
-  reasoningEffort: z.z.string().optional(),
-  reasoningSummary: z.z.string().optional(),
-  verbosity: z.z.string().optional(),
-  personality: z.z.string().optional(),
-  serviceTier: z.z.string().optional(),
-  webSearchEnabled: z.z.boolean().optional(),
-  approvalPolicy: z.z.string().optional(),
-  sandboxMode: z.z.string().optional()
-});
-const TmuxConfigSchema = z.z.object({
-  sessionName: z.z.string().optional(),
-  tmpDir: z.z.string().optional(),
-  updateEnvironment: z.z.boolean().optional()
-});
-const CustomModelSchema = z.z.object({
-  id: z.z.string().min(1),
-  name: z.z.string().min(1).max(100),
-  description: z.z.string().nullish()
-});
-const DefaultPermissionModeSchema = z.z.enum([
-  "default",
-  "acceptEdits",
-  "auto",
-  "bypassPermissions",
-  "plan",
-  "read-only",
-  "safe-yolo",
-  "yolo"
-]);
-z.z.object({
-  id: z.z.string().min(1),
-  name: z.z.string().min(1).max(100),
-  description: z.z.string().max(500).optional(),
-  anthropicConfig: AnthropicConfigSchema.optional(),
-  openaiConfig: OpenAIConfigSchema.optional(),
-  azureOpenAIConfig: AzureOpenAIConfigSchema.optional(),
-  togetherAIConfig: TogetherAIConfigSchema.optional(),
-  codexConfig: CodexConfigSchema.optional(),
-  tmuxConfig: TmuxConfigSchema.optional(),
-  startupBashScript: z.z.string().optional(),
-  environmentVariables: z.z.array(EnvironmentVariableSchema).default([]),
-  customModels: z.z.array(CustomModelSchema).optional(),
-  modelMappings: z.z.record(z.z.string(), z.z.string()).optional(),
-  defaultSessionType: z.z.enum(["simple", "worktree"]).optional(),
-  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
-  defaultModelMode: z.z.string().optional(),
-  compatibility: ProfileCompatibilitySchema.default({
-    claude: true,
-    codex: true,
-    gemini: true
-  }),
-  isBuiltIn: z.z.boolean().default(false),
-  createdAt: z.z.number().default(() => Date.now()),
-  updatedAt: z.z.number().default(() => Date.now()),
-  version: z.z.string().default("1.0.0")
-});
-const RuntimeProfileSourceSchema = z.z.enum([
-  "built-in-profile",
-  "account-profile",
-  "local-profile",
-  "ad-hoc"
-]);
-const RuntimeProfileTrustSchema = z.z.enum(["trusted", "untrusted"]);
-const RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION = 1;
-z.z.object({
-  schemaVersion: z.z.literal(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION).default(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION),
-  profileId: z.z.string().optional(),
-  profileName: z.z.string().optional(),
-  source: RuntimeProfileSourceSchema,
-  trust: RuntimeProfileTrustSchema,
-  isBuiltIn: z.z.boolean().optional(),
-  compatibility: ProfileCompatibilitySchema.optional(),
-  environmentVariables: z.z.record(z.z.string(), z.z.string()).default({}),
-  startupBashScript: z.z.string().optional(),
-  customModels: z.z.array(CustomModelSchema).optional(),
-  modelMappings: z.z.record(z.z.string(), z.z.string()).optional(),
-  defaultSessionType: z.z.enum(["simple", "worktree"]).optional(),
-  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
-  defaultModelMode: z.z.string().optional()
-});
-
 const sessionProgressTodoStatusSchema = z__namespace.enum([
   "pending",
   "in_progress",
@@ -5567,6 +5582,90 @@ z__namespace.object({
   mcpServers: z__namespace.array(CodexMcpServerSummarySchema).optional()
 });
 
+z.z.object({}).strict();
+z.z.object({
+  /** Pre-formatted single-line summary (same text `/usage` prints in non-interactive mode). */
+  formatted: z.z.string(),
+  /** Total USD spent on this session so far. */
+  totalUsd: z.z.number().nonnegative(),
+  /** Optional breakdown by model. */
+  byModel: z.z.record(z.z.string(), z.z.object({
+    inputTokens: z.z.number().int().nonnegative(),
+    outputTokens: z.z.number().int().nonnegative(),
+    cacheCreationInputTokens: z.z.number().int().nonnegative().optional(),
+    cacheReadInputTokens: z.z.number().int().nonnegative().optional(),
+    costUsd: z.z.number().nonnegative()
+  })).optional()
+}).strict();
+z.z.object({}).strict();
+z.z.object({
+  /** Remote Claude Code binary version string, e.g. "2.1.119". */
+  version: z.z.string(),
+  /** Path to the binary if resolvable, informational only. */
+  binaryPath: z.z.string().optional(),
+  /** Happy-cli package version for context. */
+  happyCliVersion: z.z.string().optional()
+}).strict();
+z.z.object({
+  /** Agent color name or the literal "default" to reset. */
+  color: z.z.string().min(1).max(64)
+}).strict();
+z.z.object({
+  success: z.z.literal(true),
+  color: z.z.string()
+}).strict();
+z.z.object({
+  /** Path relative to cwd or absolute. CLI applies path blacklist + Read-tool permission gating. */
+  path: z.z.string().min(1).max(4096),
+  /** Optional max bytes to return; server-side hard cap enforces <= 1 MiB. */
+  maxBytes: z.z.number().int().positive().max(1024 * 1024).optional()
+}).strict();
+z.z.object({
+  /** Null when permission denied / missing / blocked by CLI path blacklist. */
+  result: z.z.object({
+    contents: z.z.string(),
+    absPath: z.z.string(),
+    truncated: z.z.boolean().optional()
+  }).nullable(),
+  /** Machine-readable reason when result is null. */
+  deniedReason: z.z.enum(["not_found", "permission_denied", "blacklisted_path", "too_large", "error"]).optional()
+}).strict();
+z.z.object({
+  /** Fully-qualified MCP tool name, e.g. `mcp__fs__read`. Must pass CLI whitelist. */
+  tool: z.z.string().regex(/^mcp__[a-z0-9_-]+__[a-z0-9_.-]+$/i, "must be of form mcp__<server>__<tool>"),
+  /** Tool arguments; schema-free, CLI passes through to MCP server. */
+  arguments: z.z.record(z.z.string(), z.z.unknown()).optional(),
+  /**
+   * Client-nonce that App must have displayed to the user in a 2-step
+   * confirm dialog. CLI uses this only for audit logging — the actual
+   * confirmation happens on App side and is logged for security review.
+   */
+  clientConfirmToken: z.z.string().min(8).max(128)
+}).strict();
+z.z.object({
+  success: z.z.boolean(),
+  /** Tool response payload, shape defined by each MCP tool. */
+  result: z.z.unknown().optional(),
+  /** Error code for UI to localize; see CLI handler for enum values. */
+  errorCode: z.z.enum([
+    "not_whitelisted",
+    "server_unavailable",
+    "tool_not_found",
+    "invalid_arguments",
+    "permission_denied",
+    /**
+     * SDK 0.2.119 defines the `mcp_call` control protocol type but does
+     * not expose a public runtime method on the `Query` interface. Until
+     * upstream lands a `callMcpTool()` / equivalent, the CLI handler
+     * returns this code so the App can surface an honest "waiting on
+     * SDK" state instead of masking the gap as a server error.
+     */
+    "sdk_not_implemented",
+    "unknown"
+  ]).optional(),
+  errorMessage: z.z.string().optional()
+}).strict();
+
 function buildSummaryRefreshPrompt(requestId) {
   return [
     "Please call mcp__happy__update_session_summary to record the current session summary with: goal, currentFocus, keyDecisions (if any), openQuestions (if any), impactScope (if any). Keep it accurate and concise.",

package/dist/index.d.cts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import * as z from 'zod';
+import { z as z$1 } from 'zod';
 import { EventEmitter } from 'node:events';
 import { Socket } from 'socket.io-client';
 
@@ -354,6 +355,52 @@ declare const DaemonStateSchema: z.ZodObject<{
 }, z.core.$strip>;
 type DaemonState = z.infer<typeof DaemonStateSchema>;
 
+declare const ResolvedRuntimeProfileSchema: z$1.ZodObject<{
+    schemaVersion: z$1.ZodDefault<z$1.ZodLiteral<1>>;
+    profileId: z$1.ZodOptional<z$1.ZodString>;
+    profileName: z$1.ZodOptional<z$1.ZodString>;
+    source: z$1.ZodEnum<{
+        "built-in-profile": "built-in-profile";
+        "account-profile": "account-profile";
+        "local-profile": "local-profile";
+        "ad-hoc": "ad-hoc";
+    }>;
+    trust: z$1.ZodEnum<{
+        trusted: "trusted";
+        untrusted: "untrusted";
+    }>;
+    isBuiltIn: z$1.ZodOptional<z$1.ZodBoolean>;
+    compatibility: z$1.ZodOptional<z$1.ZodObject<{
+        claude: z$1.ZodDefault<z$1.ZodBoolean>;
+        codex: z$1.ZodDefault<z$1.ZodBoolean>;
+        gemini: z$1.ZodDefault<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    environmentVariables: z$1.ZodDefault<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    startupBashScript: z$1.ZodOptional<z$1.ZodString>;
+    customModels: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        name: z$1.ZodString;
+        description: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+    }, z$1.core.$strip>>>;
+    modelMappings: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    defaultSessionType: z$1.ZodOptional<z$1.ZodEnum<{
+        simple: "simple";
+        worktree: "worktree";
+    }>>;
+    defaultPermissionMode: z$1.ZodOptional<z$1.ZodEnum<{
+        default: "default";
+        acceptEdits: "acceptEdits";
+        bypassPermissions: "bypassPermissions";
+        plan: "plan";
+        auto: "auto";
+        "read-only": "read-only";
+        "safe-yolo": "safe-yolo";
+        yolo: "yolo";
+    }>>;
+    defaultModelMode: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type ResolvedRuntimeProfile = z$1.infer<typeof ResolvedRuntimeProfileSchema>;
+
 type EncryptionVariant = "legacy" | "dataKey";
 type SessionEncryption = {
     readonly key: Uint8Array;
@@ -943,22 +990,6 @@ declare class AutomationAuditStore {
     get size(): number;
 }
 
-/**
- * Machine WebSocket client — trimmed from CLI's ApiMachineClient.
- *
- * Core capabilities retained:
- * - Machine-scoped Socket.IO connection
- * - RPC handler registration (via RpcHandlerManager)
- * - keepAlive heartbeat
- * - updateMetadata / updateDaemonState with OCC backoff
- * - Ephemeral event handling (webhook/supervisor triggers)
- *
- * Removed (CLI-only):
- * - Webhook/supervisor status emit + pending queues
- * - Fix kill handler
- * - CLI-specific logging (debugLargeJson)
- */
-
 /** Strongly-typed ephemeral event from server. */
 type EphemeralEvent = {
     type: "activity";
@@ -1001,6 +1032,10 @@ type EphemeralEvent = {
         name: string;
         content: string;
     }>;
+    agentType?: string | null;
+    modelOverride?: string | null;
+    profileId?: string;
+    runtimeProfile?: ResolvedRuntimeProfile;
 };
 type MachineClientOptions = {
     readonly token: string;

package/dist/index.d.mts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import * as z from 'zod';
+import { z as z$1 } from 'zod';
 import { EventEmitter } from 'node:events';
 import { Socket } from 'socket.io-client';
 
@@ -354,6 +355,52 @@ declare const DaemonStateSchema: z.ZodObject<{
 }, z.core.$strip>;
 type DaemonState = z.infer<typeof DaemonStateSchema>;
 
+declare const ResolvedRuntimeProfileSchema: z$1.ZodObject<{
+    schemaVersion: z$1.ZodDefault<z$1.ZodLiteral<1>>;
+    profileId: z$1.ZodOptional<z$1.ZodString>;
+    profileName: z$1.ZodOptional<z$1.ZodString>;
+    source: z$1.ZodEnum<{
+        "built-in-profile": "built-in-profile";
+        "account-profile": "account-profile";
+        "local-profile": "local-profile";
+        "ad-hoc": "ad-hoc";
+    }>;
+    trust: z$1.ZodEnum<{
+        trusted: "trusted";
+        untrusted: "untrusted";
+    }>;
+    isBuiltIn: z$1.ZodOptional<z$1.ZodBoolean>;
+    compatibility: z$1.ZodOptional<z$1.ZodObject<{
+        claude: z$1.ZodDefault<z$1.ZodBoolean>;
+        codex: z$1.ZodDefault<z$1.ZodBoolean>;
+        gemini: z$1.ZodDefault<z$1.ZodBoolean>;
+    }, z$1.core.$strip>>;
+    environmentVariables: z$1.ZodDefault<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    startupBashScript: z$1.ZodOptional<z$1.ZodString>;
+    customModels: z$1.ZodOptional<z$1.ZodArray<z$1.ZodObject<{
+        id: z$1.ZodString;
+        name: z$1.ZodString;
+        description: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+    }, z$1.core.$strip>>>;
+    modelMappings: z$1.ZodOptional<z$1.ZodRecord<z$1.ZodString, z$1.ZodString>>;
+    defaultSessionType: z$1.ZodOptional<z$1.ZodEnum<{
+        simple: "simple";
+        worktree: "worktree";
+    }>>;
+    defaultPermissionMode: z$1.ZodOptional<z$1.ZodEnum<{
+        default: "default";
+        acceptEdits: "acceptEdits";
+        bypassPermissions: "bypassPermissions";
+        plan: "plan";
+        auto: "auto";
+        "read-only": "read-only";
+        "safe-yolo": "safe-yolo";
+        yolo: "yolo";
+    }>>;
+    defaultModelMode: z$1.ZodOptional<z$1.ZodString>;
+}, z$1.core.$strip>;
+type ResolvedRuntimeProfile = z$1.infer<typeof ResolvedRuntimeProfileSchema>;
+
 type EncryptionVariant = "legacy" | "dataKey";
 type SessionEncryption = {
     readonly key: Uint8Array;
@@ -943,22 +990,6 @@ declare class AutomationAuditStore {
     get size(): number;
 }
 
-/**
- * Machine WebSocket client — trimmed from CLI's ApiMachineClient.
- *
- * Core capabilities retained:
- * - Machine-scoped Socket.IO connection
- * - RPC handler registration (via RpcHandlerManager)
- * - keepAlive heartbeat
- * - updateMetadata / updateDaemonState with OCC backoff
- * - Ephemeral event handling (webhook/supervisor triggers)
- *
- * Removed (CLI-only):
- * - Webhook/supervisor status emit + pending queues
- * - Fix kill handler
- * - CLI-specific logging (debugLargeJson)
- */
-
 /** Strongly-typed ephemeral event from server. */
 type EphemeralEvent = {
     type: "activity";
@@ -1001,6 +1032,10 @@ type EphemeralEvent = {
         name: string;
         content: string;
     }>;
+    agentType?: string | null;
+    modelOverride?: string | null;
+    profileId?: string;
+    runtimeProfile?: ResolvedRuntimeProfile;
 };
 type MachineClientOptions = {
     readonly token: string;

package/dist/index.mjs

@@ -19,7 +19,7 @@ import { createServer } from 'http';
 import * as z from 'zod';
 import { z as z$1 } from 'zod';
 
-var version = "0.5.5";
+var version = "0.7.0";
 
 function loadConfig() {
   const serverUrl = (process.env.HAPPY_SERVER_URL ?? "https://s.sangreal.code.xycloud.info:2443").replace(/\/+$/, "");
@@ -2241,6 +2241,8 @@ function handleTaskTrigger(data, serverUrl, _authToken, scheduler) {
         approvedNewDirectoryCreation: true,
         automationContext: { kind: "task", trigger: "task-dispatch", projectId: data.projectId },
         environmentVariables: {
+          // Profile-resolved env applied first so task-specific overrides win.
+          ...data.runtimeProfile?.environmentVariables ?? {},
           HAPPY_INITIAL_PROMPT_FILE: promptFile,
           HAPPY_TASK_ID: data.taskId,
           HAPPY_TASK_PRIORITY: data.priority,
@@ -4865,6 +4867,182 @@ z.discriminatedUnion("allowed", [
   VoiceTokenDeniedSchema
 ]);
 
+const CODEX_APP_SERVER_BACKEND = "codex-app-server";
+const CODEX_MCP_LEGACY_BACKEND = "codex-mcp-legacy";
+const CodexBackendModeSchema = z.enum([
+  "auto",
+  CODEX_APP_SERVER_BACKEND,
+  CODEX_MCP_LEGACY_BACKEND
+]);
+const CodexRequestedBackendSchema = CodexBackendModeSchema;
+const CodexResolvedBackendSchema = z.enum([
+  CODEX_APP_SERVER_BACKEND,
+  CODEX_MCP_LEGACY_BACKEND
+]);
+const CodexConfigModeSchema = z.enum([
+  "inherit",
+  "managed-profile",
+  "managed-overrides"
+]);
+const CODEX_REQUESTED_BACKEND_ALIASES = {
+  auto: ["", "auto"],
+  [CODEX_APP_SERVER_BACKEND]: ["app-server", "appserver", CODEX_APP_SERVER_BACKEND],
+  [CODEX_MCP_LEGACY_BACKEND]: [
+    "legacy",
+    "mcp",
+    "mcp-legacy",
+    CODEX_MCP_LEGACY_BACKEND
+  ]
+};
+new Map(
+  Object.entries(CODEX_REQUESTED_BACKEND_ALIASES).flatMap(
+    ([backend, aliases]) => aliases.map((alias) => [alias, backend])
+  )
+);
+
+function isTemplateAwareUrl(value) {
+  if (!value) return true;
+  if (/^\$\{[A-Z_][A-Z0-9_]*(:-[^}]*)?\}$/.test(value)) return true;
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+const BuiltInAIBackendProfileIdSchema = z$1.enum([
+  "anthropic",
+  "deepseek",
+  "zai",
+  "openai",
+  "azure-openai",
+  "minimax",
+  "kimi"
+]);
+new Set(
+  BuiltInAIBackendProfileIdSchema.options
+);
+const EnvironmentVariableSchema = z$1.object({
+  name: z$1.string().regex(/^[A-Z_][A-Z0-9_]*$/, "Invalid environment variable name"),
+  value: z$1.string()
+});
+const ProfileCompatibilitySchema = z$1.object({
+  claude: z$1.boolean().default(true),
+  codex: z$1.boolean().default(true),
+  gemini: z$1.boolean().default(true)
+});
+const AnthropicConfigSchema = z$1.object({
+  baseUrl: z$1.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  authToken: z$1.string().optional(),
+  model: z$1.string().optional()
+});
+const OpenAIConfigSchema = z$1.object({
+  apiKey: z$1.string().optional(),
+  baseUrl: z$1.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  model: z$1.string().optional()
+});
+const AzureOpenAIConfigSchema = z$1.object({
+  apiKey: z$1.string().optional(),
+  endpoint: z$1.string().refine(isTemplateAwareUrl, {
+    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
+  }).optional(),
+  apiVersion: z$1.string().optional(),
+  deploymentName: z$1.string().optional()
+});
+const TogetherAIConfigSchema = z$1.object({
+  apiKey: z$1.string().optional(),
+  model: z$1.string().optional()
+});
+const CodexConfigSchema = z$1.object({
+  backendMode: CodexBackendModeSchema.optional(),
+  configMode: CodexConfigModeSchema.optional(),
+  codexProfileName: z$1.string().optional(),
+  model: z$1.string().optional(),
+  reasoningEffort: z$1.string().optional(),
+  reasoningSummary: z$1.string().optional(),
+  verbosity: z$1.string().optional(),
+  personality: z$1.string().optional(),
+  serviceTier: z$1.string().optional(),
+  webSearchEnabled: z$1.boolean().optional(),
+  approvalPolicy: z$1.string().optional(),
+  sandboxMode: z$1.string().optional()
+});
+const TmuxConfigSchema = z$1.object({
+  sessionName: z$1.string().optional(),
+  tmpDir: z$1.string().optional(),
+  updateEnvironment: z$1.boolean().optional()
+});
+const CustomModelSchema = z$1.object({
+  id: z$1.string().min(1),
+  name: z$1.string().min(1).max(100),
+  description: z$1.string().nullish()
+});
+const DefaultPermissionModeSchema = z$1.enum([
+  "default",
+  "acceptEdits",
+  "auto",
+  "bypassPermissions",
+  "plan",
+  "read-only",
+  "safe-yolo",
+  "yolo"
+]);
+z$1.object({
+  id: z$1.string().min(1),
+  name: z$1.string().min(1).max(100),
+  description: z$1.string().max(500).optional(),
+  anthropicConfig: AnthropicConfigSchema.optional(),
+  openaiConfig: OpenAIConfigSchema.optional(),
+  azureOpenAIConfig: AzureOpenAIConfigSchema.optional(),
+  togetherAIConfig: TogetherAIConfigSchema.optional(),
+  codexConfig: CodexConfigSchema.optional(),
+  tmuxConfig: TmuxConfigSchema.optional(),
+  startupBashScript: z$1.string().optional(),
+  environmentVariables: z$1.array(EnvironmentVariableSchema).default([]),
+  customModels: z$1.array(CustomModelSchema).optional(),
+  modelMappings: z$1.record(z$1.string(), z$1.string()).optional(),
+  defaultSessionType: z$1.enum(["simple", "worktree"]).optional(),
+  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
+  defaultModelMode: z$1.string().optional(),
+  compatibility: ProfileCompatibilitySchema.default({
+    claude: true,
+    codex: true,
+    gemini: true
+  }),
+  isBuiltIn: z$1.boolean().default(false),
+  createdAt: z$1.number().default(() => Date.now()),
+  updatedAt: z$1.number().default(() => Date.now()),
+  version: z$1.string().default("1.0.0")
+});
+const RuntimeProfileSourceSchema = z$1.enum([
+  "built-in-profile",
+  "account-profile",
+  "local-profile",
+  "ad-hoc"
+]);
+const RuntimeProfileTrustSchema = z$1.enum(["trusted", "untrusted"]);
+const RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION = 1;
+const ResolvedRuntimeProfileSchema = z$1.object({
+  schemaVersion: z$1.literal(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION).default(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION),
+  profileId: z$1.string().optional(),
+  profileName: z$1.string().optional(),
+  source: RuntimeProfileSourceSchema,
+  trust: RuntimeProfileTrustSchema,
+  isBuiltIn: z$1.boolean().optional(),
+  compatibility: ProfileCompatibilitySchema.optional(),
+  environmentVariables: z$1.record(z$1.string(), z$1.string()).default({}),
+  startupBashScript: z$1.string().optional(),
+  customModels: z$1.array(CustomModelSchema).optional(),
+  modelMappings: z$1.record(z$1.string(), z$1.string()).optional(),
+  defaultSessionType: z$1.enum(["simple", "worktree"]).optional(),
+  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
+  defaultModelMode: z$1.string().optional()
+});
+
 const TaskPrioritySchema = z.enum([
   "urgent",
   // User-initiated, needs immediate execution
@@ -4923,7 +5101,12 @@ z.object({
   // Encrypted by App
   priority: TaskPrioritySchema.default("user"),
   maxAttempts: z.number().int().min(1).max(10).default(3),
-  skillIds: z.array(z.string()).max(10).default([])
+  skillIds: z.array(z.string()).max(10).default([]),
+  // Profile binding (wire 0.15.0). Business key — built-in id like
+  // "anthropic" or AiBackendProfile.profileKey for the account. Optional:
+  // when omitted the server falls back to Project.supervisorConfig.defaultProfileId
+  // via the unified runtimeProfileResolver (feature-flagged).
+  profileId: z.string().optional()
 });
 z.object({
   type: z.literal("task-trigger"),
@@ -4941,8 +5124,16 @@ z.object({
   })).optional(),
   agentType: z.string().nullable().optional(),
   // "claude" | "codex" | "gemini" — null = inherit CLI default
-  modelOverride: z.string().nullable().optional()
+  modelOverride: z.string().nullable().optional(),
   // e.g. "claude-sonnet-4-20250514" — null = agent default
+  // Profile binding for this task. `profileId` references the AIBackendProfile
+  // selected when the task was created (Task.profileId column). `runtimeProfile`
+  // is the resolved snapshot (env vars, startup script, permission mode, etc.)
+  // that the CLI should honor when spawning the session. Both optional for
+  // backward compatibility; starting from wire 0.14.0 + server unified resolver
+  // these are always populated for scheduled/webhook/manual tasks.
+  profileId: z.string().optional(),
+  runtimeProfile: ResolvedRuntimeProfileSchema.optional()
 });
 const TaskOutcomeSchema = z.enum([
   "completed",
@@ -5120,182 +5311,6 @@ z.object({
   exitCode: z.number()
 });
 
-const CODEX_APP_SERVER_BACKEND = "codex-app-server";
-const CODEX_MCP_LEGACY_BACKEND = "codex-mcp-legacy";
-const CodexBackendModeSchema = z.enum([
-  "auto",
-  CODEX_APP_SERVER_BACKEND,
-  CODEX_MCP_LEGACY_BACKEND
-]);
-const CodexRequestedBackendSchema = CodexBackendModeSchema;
-const CodexResolvedBackendSchema = z.enum([
-  CODEX_APP_SERVER_BACKEND,
-  CODEX_MCP_LEGACY_BACKEND
-]);
-const CodexConfigModeSchema = z.enum([
-  "inherit",
-  "managed-profile",
-  "managed-overrides"
-]);
-const CODEX_REQUESTED_BACKEND_ALIASES = {
-  auto: ["", "auto"],
-  [CODEX_APP_SERVER_BACKEND]: ["app-server", "appserver", CODEX_APP_SERVER_BACKEND],
-  [CODEX_MCP_LEGACY_BACKEND]: [
-    "legacy",
-    "mcp",
-    "mcp-legacy",
-    CODEX_MCP_LEGACY_BACKEND
-  ]
-};
-new Map(
-  Object.entries(CODEX_REQUESTED_BACKEND_ALIASES).flatMap(
-    ([backend, aliases]) => aliases.map((alias) => [alias, backend])
-  )
-);
-
-function isTemplateAwareUrl(value) {
-  if (!value) return true;
-  if (/^\$\{[A-Z_][A-Z0-9_]*(:-[^}]*)?\}$/.test(value)) return true;
-  try {
-    new URL(value);
-    return true;
-  } catch {
-    return false;
-  }
-}
-const BuiltInAIBackendProfileIdSchema = z$1.enum([
-  "anthropic",
-  "deepseek",
-  "zai",
-  "openai",
-  "azure-openai",
-  "minimax",
-  "kimi"
-]);
-new Set(
-  BuiltInAIBackendProfileIdSchema.options
-);
-const EnvironmentVariableSchema = z$1.object({
-  name: z$1.string().regex(/^[A-Z_][A-Z0-9_]*$/, "Invalid environment variable name"),
-  value: z$1.string()
-});
-const ProfileCompatibilitySchema = z$1.object({
-  claude: z$1.boolean().default(true),
-  codex: z$1.boolean().default(true),
-  gemini: z$1.boolean().default(true)
-});
-const AnthropicConfigSchema = z$1.object({
-  baseUrl: z$1.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  authToken: z$1.string().optional(),
-  model: z$1.string().optional()
-});
-const OpenAIConfigSchema = z$1.object({
-  apiKey: z$1.string().optional(),
-  baseUrl: z$1.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  model: z$1.string().optional()
-});
-const AzureOpenAIConfigSchema = z$1.object({
-  apiKey: z$1.string().optional(),
-  endpoint: z$1.string().refine(isTemplateAwareUrl, {
-    message: "Must be a valid URL or ${VAR} or ${VAR:-default} template string"
-  }).optional(),
-  apiVersion: z$1.string().optional(),
-  deploymentName: z$1.string().optional()
-});
-const TogetherAIConfigSchema = z$1.object({
-  apiKey: z$1.string().optional(),
-  model: z$1.string().optional()
-});
-const CodexConfigSchema = z$1.object({
-  backendMode: CodexBackendModeSchema.optional(),
-  configMode: CodexConfigModeSchema.optional(),
-  codexProfileName: z$1.string().optional(),
-  model: z$1.string().optional(),
-  reasoningEffort: z$1.string().optional(),
-  reasoningSummary: z$1.string().optional(),
-  verbosity: z$1.string().optional(),
-  personality: z$1.string().optional(),
-  serviceTier: z$1.string().optional(),
-  webSearchEnabled: z$1.boolean().optional(),
-  approvalPolicy: z$1.string().optional(),
-  sandboxMode: z$1.string().optional()
-});
-const TmuxConfigSchema = z$1.object({
-  sessionName: z$1.string().optional(),
-  tmpDir: z$1.string().optional(),
-  updateEnvironment: z$1.boolean().optional()
-});
-const CustomModelSchema = z$1.object({
-  id: z$1.string().min(1),
-  name: z$1.string().min(1).max(100),
-  description: z$1.string().nullish()
-});
-const DefaultPermissionModeSchema = z$1.enum([
-  "default",
-  "acceptEdits",
-  "auto",
-  "bypassPermissions",
-  "plan",
-  "read-only",
-  "safe-yolo",
-  "yolo"
-]);
-z$1.object({
-  id: z$1.string().min(1),
-  name: z$1.string().min(1).max(100),
-  description: z$1.string().max(500).optional(),
-  anthropicConfig: AnthropicConfigSchema.optional(),
-  openaiConfig: OpenAIConfigSchema.optional(),
-  azureOpenAIConfig: AzureOpenAIConfigSchema.optional(),
-  togetherAIConfig: TogetherAIConfigSchema.optional(),
-  codexConfig: CodexConfigSchema.optional(),
-  tmuxConfig: TmuxConfigSchema.optional(),
-  startupBashScript: z$1.string().optional(),
-  environmentVariables: z$1.array(EnvironmentVariableSchema).default([]),
-  customModels: z$1.array(CustomModelSchema).optional(),
-  modelMappings: z$1.record(z$1.string(), z$1.string()).optional(),
-  defaultSessionType: z$1.enum(["simple", "worktree"]).optional(),
-  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
-  defaultModelMode: z$1.string().optional(),
-  compatibility: ProfileCompatibilitySchema.default({
-    claude: true,
-    codex: true,
-    gemini: true
-  }),
-  isBuiltIn: z$1.boolean().default(false),
-  createdAt: z$1.number().default(() => Date.now()),
-  updatedAt: z$1.number().default(() => Date.now()),
-  version: z$1.string().default("1.0.0")
-});
-const RuntimeProfileSourceSchema = z$1.enum([
-  "built-in-profile",
-  "account-profile",
-  "local-profile",
-  "ad-hoc"
-]);
-const RuntimeProfileTrustSchema = z$1.enum(["trusted", "untrusted"]);
-const RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION = 1;
-z$1.object({
-  schemaVersion: z$1.literal(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION).default(RESOLVED_RUNTIME_PROFILE_SCHEMA_VERSION),
-  profileId: z$1.string().optional(),
-  profileName: z$1.string().optional(),
-  source: RuntimeProfileSourceSchema,
-  trust: RuntimeProfileTrustSchema,
-  isBuiltIn: z$1.boolean().optional(),
-  compatibility: ProfileCompatibilitySchema.optional(),
-  environmentVariables: z$1.record(z$1.string(), z$1.string()).default({}),
-  startupBashScript: z$1.string().optional(),
-  customModels: z$1.array(CustomModelSchema).optional(),
-  modelMappings: z$1.record(z$1.string(), z$1.string()).optional(),
-  defaultSessionType: z$1.enum(["simple", "worktree"]).optional(),
-  defaultPermissionMode: DefaultPermissionModeSchema.optional(),
-  defaultModelMode: z$1.string().optional()
-});
-
 const sessionProgressTodoStatusSchema = z.enum([
   "pending",
   "in_progress",
@@ -5547,6 +5562,90 @@ z.object({
   mcpServers: z.array(CodexMcpServerSummarySchema).optional()
 });
 
+z$1.object({}).strict();
+z$1.object({
+  /** Pre-formatted single-line summary (same text `/usage` prints in non-interactive mode). */
+  formatted: z$1.string(),
+  /** Total USD spent on this session so far. */
+  totalUsd: z$1.number().nonnegative(),
+  /** Optional breakdown by model. */
+  byModel: z$1.record(z$1.string(), z$1.object({
+    inputTokens: z$1.number().int().nonnegative(),
+    outputTokens: z$1.number().int().nonnegative(),
+    cacheCreationInputTokens: z$1.number().int().nonnegative().optional(),
+    cacheReadInputTokens: z$1.number().int().nonnegative().optional(),
+    costUsd: z$1.number().nonnegative()
+  })).optional()
+}).strict();
+z$1.object({}).strict();
+z$1.object({
+  /** Remote Claude Code binary version string, e.g. "2.1.119". */
+  version: z$1.string(),
+  /** Path to the binary if resolvable, informational only. */
+  binaryPath: z$1.string().optional(),
+  /** Happy-cli package version for context. */
+  happyCliVersion: z$1.string().optional()
+}).strict();
+z$1.object({
+  /** Agent color name or the literal "default" to reset. */
+  color: z$1.string().min(1).max(64)
+}).strict();
+z$1.object({
+  success: z$1.literal(true),
+  color: z$1.string()
+}).strict();
+z$1.object({
+  /** Path relative to cwd or absolute. CLI applies path blacklist + Read-tool permission gating. */
+  path: z$1.string().min(1).max(4096),
+  /** Optional max bytes to return; server-side hard cap enforces <= 1 MiB. */
+  maxBytes: z$1.number().int().positive().max(1024 * 1024).optional()
+}).strict();
+z$1.object({
+  /** Null when permission denied / missing / blocked by CLI path blacklist. */
+  result: z$1.object({
+    contents: z$1.string(),
+    absPath: z$1.string(),
+    truncated: z$1.boolean().optional()
+  }).nullable(),
+  /** Machine-readable reason when result is null. */
+  deniedReason: z$1.enum(["not_found", "permission_denied", "blacklisted_path", "too_large", "error"]).optional()
+}).strict();
+z$1.object({
+  /** Fully-qualified MCP tool name, e.g. `mcp__fs__read`. Must pass CLI whitelist. */
+  tool: z$1.string().regex(/^mcp__[a-z0-9_-]+__[a-z0-9_.-]+$/i, "must be of form mcp__<server>__<tool>"),
+  /** Tool arguments; schema-free, CLI passes through to MCP server. */
+  arguments: z$1.record(z$1.string(), z$1.unknown()).optional(),
+  /**
+   * Client-nonce that App must have displayed to the user in a 2-step
+   * confirm dialog. CLI uses this only for audit logging — the actual
+   * confirmation happens on App side and is logged for security review.
+   */
+  clientConfirmToken: z$1.string().min(8).max(128)
+}).strict();
+z$1.object({
+  success: z$1.boolean(),
+  /** Tool response payload, shape defined by each MCP tool. */
+  result: z$1.unknown().optional(),
+  /** Error code for UI to localize; see CLI handler for enum values. */
+  errorCode: z$1.enum([
+    "not_whitelisted",
+    "server_unavailable",
+    "tool_not_found",
+    "invalid_arguments",
+    "permission_denied",
+    /**
+     * SDK 0.2.119 defines the `mcp_call` control protocol type but does
+     * not expose a public runtime method on the `Query` interface. Until
+     * upstream lands a `callMcpTool()` / equivalent, the CLI handler
+     * returns this code so the App can surface an honest "waiting on
+     * SDK" state instead of masking the gap as a server error.
+     */
+    "sdk_not_implemented",
+    "unknown"
+  ]).optional(),
+  errorMessage: z$1.string().optional()
+}).strict();
+
 function buildSummaryRefreshPrompt(requestId) {
   return [
     "Please call mcp__happy__update_session_summary to record the current session summary with: goal, currentFocus, keyDecisions (if any), openQuestions (if any), impactScope (if any). Keep it accurate and concise.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kmmao/happy-agent",
-  "version": "0.5.5",
+  "version": "0.7.0",
   "description": "CLI client for controlling Happy Coder agents remotely",
   "author": "Kirill Dubovitskiy",
   "license": "MIT",
@@ -43,7 +43,7 @@
     "release": "npx --no-install release-it"
   },
   "dependencies": {
-    "@kmmao/happy-wire": "^0.13.0",
+    "@kmmao/happy-wire": "^0.16.0",
     "axios": "^1.15.2",
     "chalk": "^5.6.2",
     "commander": "^13.1.0",