happy2 0.0.12 → 0.0.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "happy2",
-  "version": "0.0.12",
+  "version": "0.0.14",
   "description": "Happy (2) desktop web app and server bundle",
   "repository": {
     "type": "git",
@@ -71,7 +71,7 @@
     "@libsql/client": "^0.17.4",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@paralleldrive/cuid2": "^3.3.0",
-    "@slopus/rig": "^0.0.24",
+    "@slopus/rig": "^0.0.25",
     "drizzle-orm": "^0.45.2",
     "fastify": "^5.8.2",
     "jose": "^6.1.3",

package/packages/happy2-server/PLUGINS.md

@@ -1,23 +1,27 @@
 # Server plugins
 
 Happy (2) plugins package Agent Skills, a persistent container command, an MCP
-server, or any useful combination of those pieces. This first
-server-side implementation installs only packages bundled with the server. It
-already keeps catalog discovery, durable system plugins, immutable package/image
-snapshots, and independent runtime installations separate so a later remote
-catalog/download step can reuse the same boundaries.
+server, or any useful combination of those pieces. Administrators can install a
+built-in package, upload one ZIP, download one ZIP over HTTPS, or import a GitHub
+repository. Catalog discovery, verified preparation, durable system plugins,
+immutable package/image snapshots, writable installation data, and independent
+runtime installations remain separate boundaries. Individual runtime
+installations can be uninstalled without removing the reusable system-plugin
+snapshot.
 
 Plugin management is system-wide and administrator-only. The first installation
-of a catalog package creates one durable system-plugin record and one immutable
+of a source package creates one durable system-plugin record and one immutable
 package snapshot; later installations reuse that plugin identity and snapshot.
 Every installation has its own CUID2, variables, selected image, lifecycle, and
 dedicated container when it has a local runtime. Remote MCP configuration is
 persisted and health-checked independently per installation. Ready MCP
 installations expose their durably cached tools to Rig as external functions on
-every agent submission. Happy executes each durable call against the originating
-installation and resolves the result back into the paused Rig run. This feature
-does not yet inject installed skills, and it does not yet implement upgrade,
-uninstall, marketplace download, or OAuth flows.
+every agent submission. Happy also reconciles the skills from ready
+installations into the exact agent sandbox home before each turn. Happy executes
+each durable MCP call against the originating installation and resolves the
+result back into the paused Rig run. Upgrade, marketplace discovery, and OAuth
+flows are not implemented; individual installations can be uninstalled. Remote
+update checks report drift but deliberately do not replace the installed snapshot.
 
 MCP tools are discovered during each runtime activation and atomically replace
 that installation's SQLite cache before it becomes ready. Local discovery runs
@@ -44,12 +48,17 @@ to a ready installation.
 
 ## Package anatomy
 
-Each built-in package is a directory below `packages/happy2-server/plugins`:
+Each package has this shape. Built-ins live below
+`packages/happy2-server/plugins`; installed snapshots live below the configured
+`plugins.directory`. A ZIP may contain this tree at its root or inside one
+top-level folder:
 
 ```text
 example-plugin/
 ├── plugin.json
 ├── plugin.png
+├── data/                     # server-owned; absent from source ZIPs
+│   └── <installation-id>/      # persistent writable workspace
 ├── container/                 # optional; used by bundled stdio runtimes
 │   └── Dockerfile
 └── skills/                    # optional
@@ -75,6 +84,16 @@ symlinks, unsafe relative paths, duplicate names, oversized packages, malformed
 frontmatter, and unexpected manifest fields before the catalog becomes
 available.
 
+Uploaded and downloaded ZIPs are capped at 50 MiB compressed. Extraction also
+bounds entry count, file count, individual and total uncompressed sizes, and
+actual DEFLATE output. It rejects ZIP64, encryption, unsupported compression,
+links, path traversal, duplicate paths, local/central filename disagreement,
+invalid checksums, and ambiguous generic archives. A generic uploaded or remote
+ZIP must contain exactly one `plugin.json`. GitHub archives may instead contain
+one root `plugin.json` or multiple `plugins/<name>/plugin.json` packages; when
+there are multiple packages, preparation returns each verified candidate so the
+administrator can choose one.
+
 `plugin.json` uses schema version 1:
 
 ```json
@@ -102,13 +121,15 @@ available.
         "dockerfile": "container/Dockerfile",
         "command": "/plugin/bin/indexer",
         "args": ["--watch"],
-        "permissions": ["plugins:list"]
+        "permissions": ["plugins:list", "plugins:install", "plugins:uninstall"]
     }
 }
 ```
 
-`version` uses `x.y.z` SemVer syntax. `shortName` is the stable catalog/package
-link and must match the package directory; it is not an installation identity.
+`version` uses `x.y.z` SemVer syntax. `shortName` is the stable package name and
+must match a built-in package directory. External ZIPs are not required to make
+their enclosing folder match; `shortName` still identifies the validated
+package metadata and is not an installation identity.
 The durable system plugin and every installation receive separate CUID2 IDs.
 Variable keys are environment variable names. Every declared variable is
 required for each installation. Secret values are encrypted with AES-256-GCM
@@ -122,14 +143,37 @@ otherwise it is required. A command and stdio MCP run alongside each other in
 the same dedicated installation container. Container variables are supplied to
 each configured process, not persisted in the image or container definition.
 
-`container.permissions` is an exact allowlist of host API capabilities. The
-currently supported permission is `plugins:list`. Unknown and duplicate
-permissions are rejected when the package is loaded.
-
-The bundled `hello` package is the minimal skill-plus-MCP example. It declares no
-variables or MCP authentication, so an administrator can install it with an
-empty POST body; each call still creates a separate installation and bundled
-container.
+`container.permissions` declares the exact host API capabilities a package may
+request. Permissions are grouped for presentation by API section:
+`channels:manage` is a mutating permission in `channels`, `chats:update` is a
+mutating permission in `chats`, while `plugins:list` is read-only and
+`plugins:install` and `plugins:uninstall` are mutating permissions in `plugins`.
+`plugins:request-install` and `plugins:request-uninstall` are also mutating
+permissions, but create chat-scoped human approvals instead of granting direct
+install or uninstall authority. Unknown and duplicate permissions are rejected
+when the package is loaded.
+Unknown and duplicate declarations are rejected when the package is loaded.
+
+Declarations are not grants. Each install request may include a `permissions`
+array containing any subset of the manifest declaration; omitted permissions
+default to an empty grant. Installation responses expose `grantedPermissions`,
+while catalog permission metadata is returned in `apiPermissions` sections with
+separate `readOnly` and `mutations` arrays. Administrators can replace the grant
+later with `POST /v0/admin/pluginInstallations/:installationId/updatePermissions`.
+Changing a grant invalidates the current runtime token and restarts the local
+container with a new token, so stale tokens cannot retain revoked access.
+
+The isolated plugin host listener provides `GET /plugins`, `POST /plugins/install`,
+`POST /plugins/uninstall`, `POST /channels/updateMembers`, and
+`POST /channels/createChannel`, alongside the chat-update route. Each route
+requires its matching capability. Plugin-triggered installs must also choose a
+subset of the target package's declared permissions.
+
+The bundled `hello` package is the minimal skill-plus-MCP example. The bundled
+`plugin-developer` package contributes a comprehensive Happy2 plugin-development
+skill and MCP tools for listing installations and requesting linked install or
+uninstall approval from the current chat. Neither format is a Conductor or
+Codex plugin format.
 
 ## Stdio MCP with a bundled container
 
@@ -151,7 +195,8 @@ container.
 The Dockerfile path is package-relative. Creating the durable system plugin
 copies the entire package once to `plugins.directory` before writing its
 database record. Each installation lifecycle builds or resolves that exact
-snapshot with the selected local Docker or Podman provider, using a
+snapshot, excluding the server-owned `data/` subtree from the build context,
+with the selected local Docker or Podman provider, using a
 content-addressed `happy2-plugin:<sha256>` tag. It then creates a dedicated,
 read-only container named from the installation CUID2, with `init`, all Linux capabilities
 dropped, privilege escalation disabled, bounded shared memory, and ephemeral
@@ -164,8 +209,13 @@ bundled Dockerfile is responsible for copying or installing its MCP executable
 and dependencies into the image. The MCP command itself must use newline-
 delimited JSON-RPC on stdin/stdout and must not write non-protocol output to
 stdout.
-The fixed `HOME`, `TMPDIR`, and working directory are `/tmp`, so tools that
-need a cache can still run without making the image root writable.
+The fixed `HOME` and `TMPDIR` are `/tmp`. The server creates
+`<plugins.directory>/<plugin-id>/data/<installation-id>` with private
+permissions, bind-mounts it read-write at `/workspace`, and uses `/workspace` as
+the container working directory. This is the plugin's persistent filesystem;
+the image root remains read-only. Different installations never share a data
+directory. Uninstalling the system plugin removes every linked installation,
+container, immutable package asset, and data subtree.
 
 Each installation container stays alive as that installation's plugin runtime.
 The optional persistent command is started detached once for each container
@@ -232,6 +282,39 @@ custom static headers described above. Production remote requests are capped at
 1,000,000 bytes and responses at 256,000 bytes, matching the bounded webhook
 transport used for SSRF-safe address pinning.
 
+## External package preparation
+
+External installation is a two-step, administrator-only flow. Preparation does
+all network and archive work before durable installation, and streams progress
+as SSE:
+
+- `POST /v0/admin/pluginPackages/preparePlugin` accepts either multipart form
+  data with one `plugin` ZIP file, or JSON containing
+  `{"source":{"kind":"zip_url"|"github","url":"https://..."}}`.
+- The server downloads remote archives through its public-HTTPS SSRF policy,
+  revalidates and pins DNS at every redirect, verifies package structure and
+  metadata, and emits `progress` events.
+- It emits `prepared` for one candidate or `selection_required` for multiple
+  GitHub candidates. Each candidate includes a 15-minute, administrator-bound,
+  one-use `preparedToken`, the immutable digest, source identity, version,
+  display name, description, skill descriptions, variable definitions, MCP
+  mode, and image metadata.
+- `POST /v0/admin/pluginPackages/installPlugin` accepts the selected
+  `preparedToken`, `variables`, and optional `containerImageId`. It returns HTTP
+  202 after consuming the token and making the installation durable.
+
+A GitHub URL may identify a repository or one `tree/<ref>` URL. The root
+`plugin.json` wins when present; otherwise the server discovers direct
+`plugins/<name>` children. ZIP URLs are stored as their normalized URL. Uploaded
+packages have content-addressed source identities and cannot be checked for a
+remote update.
+
+`POST /v0/admin/systemPlugins/:pluginId/checkForUpdate` is also an SSE endpoint.
+It downloads and verifies the same selected remote path, emits progress, then a
+`checked` event containing installed and remote versions/digests plus
+`updateAvailable`. Built-ins are compared with the current catalog. The check is
+read-only; a changed package requires an explicit future upgrade flow.
+
 ## Installation and lifecycle
 
 `POST /v0/admin/plugins/:shortName/installPlugin` accepts:
@@ -249,6 +332,15 @@ transport used for SSRF-safe address pinning.
 The request body may be omitted when the manifest declares no variables and
 does not require a selected container image.
 
+`POST /v0/admin/plugins/installPlugin` installs an external package. Send either
+multipart form data with an `archive` ZIP part plus optional JSON `variables`
+and `containerImageId` fields, or JSON with `sourceUrl`, `variables`, and
+`containerImageId`. Link downloads allow public HTTPS only, revalidate every
+redirect and resolved address, and are capped at three redirects, 20 seconds,
+and 20 MiB. ZIP extraction rejects traversal, absolute paths, symlinks,
+encryption, duplicate entries, more than 1,000 entries, files above 5 MiB, and
+uncompressed package data above 20 MiB.
+
 `containerImageId` is required for every local container manifest without a
 bundled Dockerfile, and it is rejected in every other case. Unknown, missing, empty, or
 oversized variable values are rejected. The endpoint returns HTTP 202 after the
@@ -256,7 +348,56 @@ durable system plugin (created once), immutable package/image snapshot, new
 installation, variables, audit entry, initial state, and sync event are durable.
 Calling it again for the same `shortName` creates another installation with a
 new CUID2 and its own parameters and runtime. Container preparation continues
-asynchronously.
+asynchronously. `shortName` is globally unique across system plugins: a package
+from another source that reuses an existing name is rejected with HTTP 409. An
+agent request with such a collision can be staged for review, but approval
+resolves it to `failed` without replacing the existing plugin.
+
+`POST /v0/admin/pluginInstallations/:installationId/uninstallPlugin` removes
+one exact installation. Happy stops and removes that installation's local
+runtime, deletes its variables and tool cache through cascading durable state,
+and removes the system plugin and immutable package snapshot only when no other
+installation references it.
+
+### Agent-requested approval
+
+A local plugin container may ask Happy to install a public HTTPS ZIP or
+uninstall an exact installation while its MCP tool is executing for an agent
+turn. The normal long-lived incarnation token cannot make such a request. For
+that MCP call only, Happy injects a five-minute capability token bound to the
+originating Rig session, call ID, human actor, agent, chat, requester
+installation, and live container incarnation.
+
+The host API validates and stages the exact package before creating a durable
+chat request. The request stores the package digest, source, display name,
+description, icon, optional reason, and a preallocated installation ID. It does
+not install synchronously and does not use MCP elicitation as authority. Happy's
+own administrator approval is the authority and audit boundary. Agent-requested
+installs reject packages requiring variables or an administrator-selected
+container image, because those values must not be collected through chat.
+
+Chat members can list requests and read the staged icon while a request is
+`pending` or `processing`. A server administrator who is also a chat member can
+approve or deny them:
+
+- `GET /v0/chats/:chatId/pluginManagementRequests`
+- `GET /v0/chats/:chatId/pluginManagementRequests/:requestId/image`
+- `POST .../:requestId/approvePluginInstall`
+- `POST .../:requestId/denyPluginInstall`
+- `POST .../:requestId/approvePluginUninstall`
+- `POST .../:requestId/denyPluginUninstall`
+
+Request creation and every terminal resolution advance the chat's durable
+point, append audit/sync evidence, and publish server and chat realtime hints.
+Approval claims publish their intermediate `processing` state as well. If the
+complete server stops during a claimed operation, startup reconciles the request
+to `approved` only when the deterministic durable installation outcome exists;
+otherwise it records a terminal failure instead of leaving the card stuck.
+Every terminal path removes the staged package, and startup retries that cleanup
+for requests resolved immediately before a process stopped. Terminal projections
+therefore omit `imageUrl`; the UI must reconcile these durable requests and
+render their name, description, optional image, source, reason, status, and
+action controls.
 
 If the catalog later advertises an update, additional installations remain
 pinned to the existing system plugin's immutable manifest and package until an
@@ -264,6 +405,12 @@ explicit upgrade action exists. Catalog reads therefore project the stored
 variable and MCP requirements for the install form while retaining the newer
 catalog version and `updateAvailable` indicator.
 
+`POST /v0/admin/systemPlugins/:pluginId/uninstallPlugin` atomically removes the
+system plugin, all linked installations and secrets, and publishes audit/sync
+evidence. Runtime cleanup then stops linked containers and removes the entire
+stored package directory, including images, descriptors, skills, and every
+installation's persistent `data` directory.
+
 An installation has one of these durable health states:
 
 - `preparing`: copying/reconciling package and image/container state.
@@ -305,6 +452,10 @@ Remote endpoints are rechecked.
 - `POST /v0/admin/plugins/:shortName/installPlugin` performs the durable install
   and queues lifecycle work. It may be called any number of times; each call
   creates a distinct installation linked to the same system plugin.
+- `POST /v0/admin/plugins/installPlugin` installs a validated ZIP upload or
+  public HTTPS ZIP link.
+- `POST /v0/admin/pluginInstallations/:installationId/uninstallPlugin` removes
+  one installation and removes its system plugin only when it was the last one.
 - `GET|POST /v0/pluginInstallations/:installationId/mcp` is the authenticated
   Streamable HTTP bridge for one ready local stdio installation. It follows MCP
   session semantics via `Mcp-Session-Id`. Happy’s existing bearer session is
@@ -318,6 +469,26 @@ Remote endpoints are rechecked.
   listener. A
   container may call it only when its manifest grants `plugins:list` and it
   presents the incarnation token supplied as `HAPPY2_PLUGIN_API_TOKEN`.
+- `POST /chats/updateChat` on that same listener changes the current chat's
+  `title` and/or `description`. It requires the installation runtime bearer
+  token, the `chats:update` manifest permission, and the current call's chat
+  capability in `X-Happy2-Chat-Token`. The endpoint deliberately accepts no
+  chat ID: the signed capability selects the chat, so tool arguments cannot
+  redirect the update to another conversation.
+- `POST /plugin-install-requests` and
+  `POST /plugin-uninstall-requests` live only on the dedicated plugin host
+  listener. A container must present `HAPPY2_PLUGIN_API_TOKEN` and declare the
+  corresponding host permission. The two mutation-request endpoints also
+  require an active contextual agent-call token.
+- `POST /channels/updateMembers` adds or removes signed user capabilities from
+  the current chat. It requires `channels:manage`, rejects direct messages, and
+  applies the triggering user's ordinary channel-manager authorization.
+- `POST /channels/createChannel` creates a private channel owned by the
+  triggering user, adds signed user capabilities as initial members, and may
+  post either a people-only opening message or an agent-audience prompt that
+  starts the calling agent. It also requires `channels:manage` and accepts an
+  optional `idempotencyKey` so a retried local request replays the same channel
+  and opening message instead of creating duplicates.
 
 Container processes receive `HAPPY2_PLUGIN_API_URL` and
 `HAPPY2_PLUGIN_API_TOKEN`. The URL is always
@@ -331,9 +502,11 @@ expose the host to an untrusted LAN should firewall
 `plugins.host_api_port`; it is a container capability endpoint, not a public
 service.
 
-The token is an RS256 capability containing the installation ID, a random CUID2
-container-incarnation ID, and the exact manifest permissions. Token bytes are
-never stored. The incarnation ID is stored in `plugin_installations` and also
+The ordinary token is an RS256 capability containing the installation ID, a
+random CUID2 container-incarnation ID, and the installation's exact granted
+permissions.
+Token bytes are never stored. The incarnation ID is stored in
+`plugin_installations` and also
 attached to the OCI container as `dev.happy2.plugin-instance`. On each request,
 Happy verifies the signature, matches the incarnation against the ready database
 row, and confirms that the correspondingly labelled container is running. A
@@ -344,10 +517,63 @@ The token intentionally has no time expiration: its lifetime is exactly the
 database-and-OCI incarnation lifetime, allowing a command to survive arbitrarily
 many server restarts without persisting or rotating token bytes. Killing,
 replacing, failing, or removing that incarnation immediately makes the token
-unauthorized.
+unauthorized. During one agent MCP call, Happy substitutes the bounded
+contextual token described above; it expires after five minutes and cannot be
+used outside that live container incarnation or after the exact durable external
+tool call stops being in progress.
 The capability is not a user session and the dedicated listener exposes no
 ordinary `/v0` APIs.
 
+When Happy asks an installed MCP tool to run for an agent, it adds the following
+request metadata:
+
+```json
+{
+    "_meta": {
+        "happy2/chat": {
+            "id": "current-chat-cuid2",
+            "token": "signed-chat-capability-jwt",
+            "triggeredByUserId": "sender-cuid2"
+        },
+        "happy2/users": [
+            {
+                "id": "sender-cuid2",
+                "username": "ada",
+                "firstName": "Ada",
+                "kind": "human",
+                "triggeredTurn": true,
+                "token": "signed-user-capability-jwt"
+            },
+            {
+                "id": "mentioned-user-cuid2",
+                "username": "grace",
+                "firstName": "Grace",
+                "kind": "human",
+                "triggeredTurn": false,
+                "token": "signed-user-capability-jwt"
+            }
+        ]
+    }
+}
+```
+
+The user list contains the message sender that triggered the exact agent turn,
+followed by every concrete `@username` mention recorded on that message, with
+duplicates removed. Special mentions such as `@here` do not create user
+capabilities. Each RS256 user token has no expiration and is bound to the user
+and the receiving plugin installation. A plugin may persist it; Happy does not
+require or provide persistence by default. Host actions verify that the signed
+user and the supplied user ID match.
+
+The RS256 chat token also has no expiration. It is bound to that chat, the
+triggering actor, the executing agent, and the specific plugin installation
+receiving the call. Plugin host chat actions additionally require the running
+installation's ordinary runtime token; presenting a chat or user token through
+another installation is rejected. Uninstalling or replacing an installation
+therefore prevents its old capabilities from being used by a new installation.
+Chat IDs remain immutable and are supplied in metadata and API results for
+correlation, never accepted as mutation input.
+
 The bridge allows at most 128 simultaneous sessions server-wide and 16 per
 authenticated user. Idle sessions close after 15 minutes; inbound requests and
 outbound server messages both renew that lifetime. A session is bound to the
@@ -366,28 +592,44 @@ persist the filesystem storage key, content type, byte size, width, height,
 thumbhash, and SHA-256 checksum.
 
 `plugin_installations` records a separate CUID2 and foreign key to `plugins`,
-plus that instance's container/image choice, lifecycle state, error detail,
+plus that instance's container/image choice, granted API permissions, lifecycle state, error detail,
 installer, tool-sync timestamp, and timestamps. `plugin_mcp_tools` contains the
 last complete MCP discovery keyed by installation and tool name.
 `plugin_installation_variables` records each declared
 value for one installation; secret rows contain authenticated ciphertext rather
 than plaintext. No installation uses `shortName` as identity.
 
+`plugin_management_requests` records the chat-scoped install/uninstall action,
+requesting agent call, validated publisher metadata, exact staged package
+coordinates, resolution, audit-related sync sequence, and deterministic target
+or installation ID. Actionable staged packages live beneath the private plugin
+package store and are revalidated by path and digest before image reads or
+approval. They are reclaimed on approval, denial, failure, and restart cleanup;
+terminal history retains metadata and audit evidence rather than package bytes.
+
 The built-in catalog and durable system plugin are deliberately independent.
-Persisted rows use `source_kind = 'builtin'` as their built-in marker. During
+Persisted rows use `source_kind = 'builtin'`, `archive`, or `link`. During
 startup, the server compares those rows with the current built-in catalog. If a
 bundle was removed from the server, its installations, encrypted variables,
 system-plugin row, private package/image snapshot, and any named local containers
-are removed before the remaining runtimes start. Remotely sourced plugins will
-not participate in this catalog-pruning rule.
+are removed before the remaining runtimes start. Archive- and link-sourced
+plugins do not participate in this catalog-pruning rule.
+
+Before each agent turn, skills from ready installations are integrity-checked
+against their immutable package digest and reconciled under
+`.agents/skills/happy2-plugins/<pluginId>-<skillName>` in that exact agent home.
+Rig recursively discovers skills below `.agents/skills` on every agent loop, so
+the published frontmatter name and immutable package files stay unchanged.
+Happy owns only the `happy2-plugins` subtree; user and project skills elsewhere
+are left untouched. Uninstalling the final ready installation removes that
+plugin's skills on the next turn.
 
 When the catalog contains a different digest for a persisted plugin's
 `shortName`, reads set `updateAvailable: true`; they do not mutate or restart its
-installations. A future upgrade action can download/validate a remote package
-into the same package abstraction, stage a new immutable package/image snapshot,
-and atomically replace the system plugin version before reconciling all linked
-installations. Until that action exists, upgrades are advertised only and the
-old snapshot continues to run.
+installations. A future upgrade action can validate a replacement package, stage
+a new immutable package/image snapshot, and atomically replace the system plugin
+version before reconciling all linked installations. Until that action exists,
+upgrades are advertised only and the old snapshot continues to run.
 
 Configured installed-package storage:
 

package/packages/happy2-server/README.md

@@ -373,13 +373,14 @@ authenticated Unix socket. Configure `[agents]` with the socket, token, Rig
 executable, and server-owned `default_cwd`; clients cannot select filesystem
 paths.
 
-An agent's reasoning effort is durable profile state. Any authenticated user can
-read its current value and the effort levels supported by all of its active Rig
-sessions from `GET /v0/agents/:agentUserId/effort`; only the agent's creator or
-a server administrator can change it with
-`POST /v0/agents/:agentUserId/changeEffort`. A change is applied to every
-existing private Rig session, inherited by sessions created later, reconciled
-again after server restart, and published as a normal `users` sync hint.
+An agent's profile effort is the default for new chat sessions. Each bound chat
+stores its own durable override, exposed to active chat members through
+`GET /v0/chats/:chatId/agents/:agentUserId/effort` and
+`POST /v0/chats/:chatId/agents/:agentUserId/changeEffort`. Changing one chat
+updates only that chat's Rig session, survives restart, and appends an
+`agent_effort_changed` service message to the same chat. Choosing the already
+effective value is a no-op and does not add duplicate history. A newly bound
+chat inherits the agent profile default rather than another chat's override.
 
 The server seeds immutable `Daycare Minimal` and `Daycare Full` definitions from
 the pinned upstream Daycare runtime Dockerfiles. Both use Ubuntu 24.04; Full adds

package/packages/happy2-server/dist/index.d.ts

@@ -15,6 +15,7 @@ export { userCreateProfile } from "./modules/user/userCreateProfile.js";
 export { syncInitialize } from "./modules/sync/syncInitialize.js";
 export { AesGcmSecretProtector } from "./modules/integrations/secrets.js";
 export { NodeWebhookTransport } from "./modules/integrations/transport.js";
+export { NodePluginPackageLinkDownloader, type PluginPackageLinkDownload, type PluginPackageLinkDownloader, } from "./modules/plugin/packageLinkDownloader.js";
 export * from "./modules/integrations/types.js";
 export type { ResolvedWebhookUrl, WebhookUrlPolicy } from "./modules/integrations/ssrf.js";
 export * from "./modules/operations/types.js";
@@ -29,6 +30,7 @@ export * from "./modules/plugin/index.js";
 export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
 export type { PluginSecretProtector } from "./modules/plugin/secrets.js";
 export { PluginPackageStore } from "./modules/plugin/packageStore.js";
-export { SandboxPluginMcpRuntime, type PluginLocalOpenInput, type PluginLocalPrepareInput, type PluginMcpRuntime, } from "./modules/plugin/runtime.js";
+export { NodePluginArchiveDownloader, type PluginArchiveDownload, type PluginArchiveDownloader, type PluginArchiveDownloadOptions, } from "./modules/plugin/source.js";
+export { SandboxPluginMcpRuntime, type PluginLocalOpenInput, type PluginLocalPrepareInput, type PluginLocalCommandHandle, type PluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer, pluginHostApiFor } from "./server.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/happy2-server/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EACH,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,GACnC,MAAM,2CAA2C,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GACpC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/index.js

@@ -12,6 +12,7 @@ export { userCreateProfile } from "./modules/user/userCreateProfile.js";
 export { syncInitialize } from "./modules/sync/syncInitialize.js";
 export { AesGcmSecretProtector } from "./modules/integrations/secrets.js";
 export { NodeWebhookTransport } from "./modules/integrations/transport.js";
+export { NodePluginPackageLinkDownloader, } from "./modules/plugin/packageLinkDownloader.js";
 export * from "./modules/integrations/types.js";
 export * from "./modules/operations/types.js";
 export { FileStorage } from "./modules/files/storage.js";
@@ -24,6 +25,7 @@ export * from "./modules/workspace/index.js";
 export * from "./modules/plugin/index.js";
 export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
 export { PluginPackageStore } from "./modules/plugin/packageStore.js";
+export { NodePluginArchiveDownloader, } from "./modules/plugin/source.js";
 export { SandboxPluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer, pluginHostApiFor } from "./server.js";
 //# sourceMappingURL=index.js.map

package/packages/happy2-server/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,GAI1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EACH,+BAA+B,GAGlC,MAAM,2CAA2C,CAAC;AACnD,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,2BAA2B,GAI9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,uBAAuB,GAK1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/modules/agent/agentChatBind.d.ts

@@ -9,6 +9,7 @@ export declare function agentChatBind(executor: DrizzleExecutor, input: {
     chatId: string;
     containerName: string;
     cwd: string;
+    effort: string;
     imageId: string;
     sessionId: string;
 }): Promise<{

package/packages/happy2-server/dist/modules/agent/agentChatBind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentChatBind.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAMtE;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB,GACF,OAAO,CAAC;IACP,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC,CA8CD"}
+{"version":3,"file":"agentChatBind.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAMtE;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB,GACF,OAAO,CAAC;IACP,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC,CAiDD"}

package/packages/happy2-server/dist/modules/agent/agentChatBind.js

@@ -21,6 +21,7 @@ export async function agentChatBind(executor, input) {
             sessionId: input.sessionId,
             containerName: input.containerName,
             cwd: input.cwd,
+            effort: input.effort,
         })
             .onConflictDoNothing();
         const [binding] = await tx
@@ -28,6 +29,7 @@ export async function agentChatBind(executor, input) {
             agentUserId: agentRigBindings.userId,
             containerName: agentRigBindings.containerName,
             cwd: agentRigBindings.cwd,
+            effort: agentRigBindings.effort,
             imageId: agentRigBindings.imageId,
             sessionId: agentRigBindings.sessionId,
         })
@@ -38,6 +40,8 @@ export async function agentChatBind(executor, input) {
             throw new Error("Agent chat binding was not created");
         if (binding.imageId !== input.imageId)
             throw new Error("Agent chat binding uses a different image");
+        if (!binding.effort)
+            throw new Error("Agent chat binding effort is missing");
         return {
             containerName: binding.containerName,
             cwd: binding.cwd,

package/packages/happy2-server/dist/modules/agent/agentChatBind.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentChatBind.js","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,QAAyB,EACzB,KAQC;IAMD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACrC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,CACpB,CAAC;QACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO;YAC9C,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAClF,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC;YACJ,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,EAAE,KAAK,CAAC,GAAG;SACjB,CAAC;aACD,mBAAmB,EAAE,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,WAAW,EAAE,gBAAgB,CAAC,MAAM;YACpC,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,OAAO,EAAE,gBAAgB,CAAC,OAAO;YACjC,SAAS,EAAE,gBAAgB,CAAC,SAAS;SACxC,CAAC;aACD,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAC9C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAC5C,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,OAAO;YACH,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC/B,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"agentChatBind.js","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,QAAyB,EACzB,KASC;IAMD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACrC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,CACpB,CAAC;QACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO;YAC9C,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAClF,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC;YACJ,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC;aACD,mBAAmB,EAAE,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,WAAW,EAAE,gBAAgB,CAAC,MAAM;YACpC,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,OAAO,EAAE,gBAAgB,CAAC,OAAO;YACjC,SAAS,EAAE,gBAAgB,CAAC,SAAS;SACxC,CAAC;aACD,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAC9C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAC5C,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7E,OAAO;YACH,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC/B,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/agent/agentChatGetContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentChatGetContext.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatGetContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAOrD;;;GAGG;AACH,wBAAsB,mBAAmB,CACrC,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,oBAAoB,CAAC,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAoGvC"}
+{"version":3,"file":"agentChatGetContext.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatGetContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAOrD;;;GAGG;AACH,wBAAsB,mBAAmB,CACrC,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,oBAAoB,CAAC,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAsGvC"}