happy2 0.0.5 → 0.0.11

package/packages/happy2-server/README.md

@@ -14,6 +14,10 @@ npx happy2-server --config ./happy2.toml
 # Published all-in-one web app and API on http://127.0.0.1:3000
 npx happy2
 
+# Install or remove automatic startup for the all-in-one app
+npx happy2 service start --config ./happy2.toml
+npx happy2 service stop
+
 # Development, with reload and no configuration file:
 pnpm dev:server
 
@@ -35,7 +39,7 @@ continues to describe only proxies outside Happy (2); the private loopback hop i
 handled internally.
 
 Without a TOML file, the package starts an `all`-role app on `127.0.0.1:3000`
-with SQLite, self-service password registration, and generated JWT/pepper
+with SQLite, password authentication, and generated JWT/pepper
 material. Database, files, generated secrets, agent workspaces, and Rig runtime
 state live under `.happy2` in the invoking directory. Add `.happy2` to the
 project's ignore rules and preserve it as private application state. The
@@ -46,25 +50,126 @@ package never connects to the user's global Rig daemon. Provide
 `--config /path/to/happy2.toml` or
 `HAPPY2_CONFIG=/path/to/happy2.toml` to override the defaults.
 
+`happy2 service start` keeps the all-in-one app running across restarts. On
+macOS it installs `~/Library/LaunchAgents/com.slopus.happy2.plist` without
+`sudo`, starts at login, and writes logs under `~/Library/Logs/Happy2`. On Linux
+it writes `happy2.service` in the current directory, prints the complete unit,
+and prints the exact `sudo install` and `systemctl` commands required to install
+and enable it. The command never invokes `sudo`. The Linux unit is system-wide
+but runs the process as the user who generated it; logs go to the systemd
+journal. The generated file remains in the current directory for inspection or
+reinstallation. `happy2 service stop` directly stops and removes the macOS LaunchAgent,
+while on Linux it prints the `sudo` commands that stop, disable, and remove the
+systemd unit.
+
+The service preserves the installation-time working directory, `PATH`, and
+optional `RIG_HOME`. When `--config` is supplied, its path is made
+absolute before installation. Put service secrets and SMTP environment values
+in the private `.env` beside the TOML configuration rather than expecting an
+interactive shell environment to exist during boot. An npx invocation generates
+a service that runs `npx --yes happy2`, avoiding a dependency on the disposable
+`_npx` cache directory. A global installation resolves `happy2` from the saved
+`PATH`; regenerate and reinstall the service after changing that path.
+
 Clients can discover the selected authentication method at `GET /v0/auth/methods`.
-The response includes the server role and one `method` value: `password`,
-`magic_link`, `oidc`, `cloudflare_access`, or `null` in validation-only API mode. Password responses
-also report `signupEnabled`; OIDC responses report `oidcProvider`.
+The response includes the server role, the durable `registration` availability
+(`bootstrap`, `open`, or `closed`), and one `method` value: `password`,
+`magic_link`, `oidc`, `cloudflare_access`, or `null` in validation-only API mode.
+Password responses also report the derived `signupEnabled`; OIDC responses report
+`oidcProvider`.
+
+The built-in plugin package, installation, container lifecycle, health, and MCP
+HTTP contracts are documented in [`PLUGINS.md`](./PLUGINS.md).
+
+## Server and user onboarding
+
+Every new database begins with durable server onboarding. `GET /v0/setup/status`
+is the intentionally minimal public routing status. It exposes only the setup
+schema version, phase, and registration availability. An authenticated account
+uses `GET /v0/setup` for the combined server/user step state and exact next route.
+
+Before server onboarding completes, exactly one new authentication account may
+be created across password, magic-link, OIDC, or Cloudflare Access. Magic-link
+requests do not create accounts: the first successfully verified link atomically
+creates the account and claims the bootstrap slot, while other still-pending links
+cannot claim it. The bootstrap account creates the only profile allowed during
+setup and atomically becomes the administrator. All later registration attempts
+are closed while that administrator selects and validates a sandbox provider and
+builds the base agent image.
+
+After the bootstrap profile exists, an administrator calls
+`GET /v0/setup/sandboxProviders`. Each request performs fresh, time-bounded
+Docker and Podman command/engine probes and returns displayable health, version,
+and remediation details. The response always explains that agent code runs
+inside the selected sandbox. It includes `recommendedProviderId` only when
+exactly one provider is healthy; when both are healthy, the administrator must
+choose explicitly.
+
+`POST /v0/setup/selectSandboxProvider` with
+`{ "providerId": "docker" | "podman" }` probes the requested provider again and
+atomically completes both durable provider-selection and validation steps. An
+unhealthy, missing, or timed-out provider is returned as a displayable conflict
+and is not persisted. The provider choice is installation state, not a TOML
+deployment switch. Docker and Podman are discovered from `PATH`; every image
+build, agent sandbox creation, file transfer, terminal attachment, and cleanup
+uses the selected provider boundary after selection and across server restarts.
+
+The next screen reads `GET /v0/setup/baseImages`. It returns the immutable
+Daycare Minimal and Daycare Full definitions plus custom definitions, the
+durable selected/default identifiers, and full progress, current log line,
+retained log, truncation, and failure details for the selected image. Built-ins
+use the display action `Download and build` because they fetch the pinned
+Daycare context; a custom Dockerfile uses `Build`. The administrator starts one
+choice with `POST /v0/setup/selectBaseImage`, passing either
+`{ "builtinKey": "daycare-minimal" | "daycare-full" }` or
+`{ "custom": { "name": "...", "dockerfile": "..." } }`. An existing
+immutable definition is reused. Otherwise the existing leased image worker owns
+the single durable job, so refresh and restart reconstruct the same progress
+screen without process-local state. A failed selected job is retried with
+`POST /v0/setup/retryBaseImageBuild` and an empty object body.
+
+Build completion, ready status, default-image promotion, setup completion,
+audit, and sync evidence commit in one transaction. If promotion fails, that
+transaction rolls back, the previous default remains unchanged, and the same
+selection becomes a visible retryable failure. Registration policy selection
+also revalidates that the setup selection is still the ready default instead of
+trusting completion flags alone. Image progress, failure, and completion use the
+normal `agent-images` plus `setup` SSE/difference areas.
+
+The final server step is
+`POST /v0/setup/chooseRegistrationPolicy` with `{ "enabled": true | false }`.
+It succeeds only for an active server administrator after all preceding durable
+steps are complete. The selection and `server_setup_complete` transition commit
+atomically and become the sole registration policy; there is no TOML signup
+switch. Server-owned provider/image work records its own step transitions rather
+than trusting completion flags from a client.
+
+Per-user onboarding is stored separately. A user records the supported
+`avatar` or `desktop_notifications` outcome with
+`POST /v0/me/updateOnboardingStep`; the outcome is `complete` or `skipped`.
+Avatar completion is rejected until a durable avatar exists. Every transition
+writes normal sync state and emits a realtime reconciliation hint.
 
 ## Profiles and avatar files
 
 Authentication creates an inactive account. `POST /v0/me/createProfile` (with the
 temporary bearer token) creates the product-level User profile—first name,
 optional last name, username, optional email, and optional phone—and activates
-the account. `GET /v0/me` reads the active profile and
+the account. The first setup profile atomically becomes the bootstrap administrator;
+later profiles are members after registration is opened. Successful token-issuance responses include `profileRequired`, so a
+client can enter profile creation without probing a protected product route.
+`GET /v0/me` reads the active profile and
 `POST /v0/me/updateProfile` replaces its editable state. Product routes reject
 accounts that do not yet have an active profile.
 
 `POST /v0/me/uploadAvatarFile` accepts one multipart image after profile
-creation. Its required `visibility` field is `public` or `private`. Images over
-2048px on either side or 10 MB are rejected. The server records the uploader,
-stores an unguessable CUID2-backed file record plus a JPEG file, converts the
-image to a 1024×1024 JPEG, and records a ThumbHash.
+creation. Its required `visibility` field is `public` or `private`; `crop` is a
+JSON object with integer `x`, `y`, `width`, and `height` coordinates in the
+orientation-normalized source image. The crop must be square and remain inside
+the source. Corrupt and animated images, images over 2048px on either side, and
+uploads over 10 MB are rejected. The server auto-orients and extracts the crop,
+then records the uploader, stores an unguessable CUID2-backed file record plus
+an exactly 1024×1024 JPEG, and records a ThumbHash.
 
 `POST /v0/me/updateAvatar` takes a `fileId` and accepts only a public file the
 current user uploaded. Public files are fetched directly with
@@ -94,8 +199,10 @@ Choose exactly one of password, magic-link, OIDC, or Cloudflare Access in `happy
 rejects configurations that enable more than one method. Clients can learn the
 selected method from `GET /v0/auth/methods`.
 
-- Password registration is disabled unless `signup_enabled` is true. Every
-  password has its own random salt; a server-wide password pepper is also used.
+- Password registration follows the durable setup registration policy. The first
+  bootstrap account is allowed once; after setup, the administrator's final
+  open/closed choice applies. Every password has its own random salt; a
+  server-wide password pepper is also used.
 - Magic-link SMTP credentials are exclusively `EMAIL_SMTP_HOST`,
   `EMAIL_SMTP_PORT`, `EMAIL_SMTP_USER`, and `EMAIL_SMTP_PASSWORD` environment
   variables. The configured `redirect_url` should be the desktop app’s link
@@ -171,6 +278,52 @@ Sessions are signed JWTs with a 30-day default lifetime and a stable `sid`.
 expiry. All authenticated requests check the shared SQLite session row, so a
 missing, expired, or revoked row is rejected regardless of JWT validity.
 
+## Server test coverage
+
+Run the complete server coverage gate from the repository root:
+
+```sh
+pnpm coverage:server
+```
+
+The command first tests the coverage tooling, then runs server unit tests and
+the complete non-Playwright Gym suite with Vitest's V8 provider. It validates
+both raw maps against one production-source universe, writes their boolean union,
+prints unit/Gym/combined statement, branch, function, and line percentages side
+by side, lists every uncovered file/line range, and compares exact covered/total
+fractions with `coverage-baseline.json`. Threshold comparisons use integer cross
+multiplication, so displayed percentage rounding cannot hide a regression. The
+same gate runs inside `pnpm check`.
+
+The authoritative universe is every `.ts` file under `sources`, including files
+that no test imports. It excludes `*.test.ts`, `*.spec.ts`, generated `*.d.ts`,
+and files inside `__tests__`, `testing`, `fixtures`, or `__fixtures__` directories.
+Both Vitest configs consume the same TypeScript definition, and the merge command
+fails if either report omits a production file or if the universe is empty.
+
+Reports are generated under:
+
+- `coverage/unit` for `happy2-server` unit tests;
+- `coverage/gym` for Gym integration coverage of the aliased server sources;
+- `coverage/combined` for the union, where a line hit by both suites is counted
+  once.
+
+Each directory contains `coverage.txt`, `index.html`, `lcov.info`,
+`coverage-final.json`, and `coverage-summary.json`. Compare
+`coverage/unit/index.html` with `coverage/gym/index.html` (or their
+`coverage.txt` files) to find behavior that unit tests exercise but Gym does not.
+Statements are executable statement regions, branches are control-flow outcomes,
+functions are callable regions, and lines are source lines containing statements.
+Generated coverage directories are gitignored and removed by `pnpm clean`.
+
+The individual report commands are `pnpm coverage:server:unit` and
+`pnpm coverage:server:gym`. `pnpm coverage:server:baseline` reruns the tooling and
+both suites before replacing the checked-in exact-ratio thresholds with that
+run's measurements. Timing-sensitive Gym paths may require a narrow reviewed
+floor below a sampled measurement. Any deliberate threshold reduction must
+include the measured range and rationale in the same reviewed change;
+improvements do not require a rationale.
+
 ## Collaboration API
 
 The API is HTTP-only. Durable reads and actions use JSON GET/POST endpoints;
@@ -209,6 +362,14 @@ authenticated Unix socket. Configure `[agents]` with the socket, token, Rig
 executable, and server-owned `default_cwd`; clients cannot select filesystem
 paths.
 
+An agent's reasoning effort is durable profile state. Any authenticated user can
+read its current value and the effort levels supported by all of its active Rig
+sessions from `GET /v0/agents/:agentUserId/effort`; only the agent's creator or
+a server administrator can change it with
+`POST /v0/agents/:agentUserId/changeEffort`. A change is applied to every
+existing private Rig session, inherited by sessions created later, reconciled
+again after server restart, and published as a normal `users` sync hint.
+
 The server seeds immutable `Daycare Minimal` and `Daycare Full` definitions from
 the pinned upstream Daycare runtime Dockerfiles. Both use Ubuntu 24.04; Full adds
 the Python, Rust, and Go toolchains. Administrators use
@@ -221,11 +382,20 @@ built-in or custom persisted Dockerfile, and select a ready default. List rows
 include a best-effort 0–100 step percentage and the last non-empty log line;
 detail responses include the Dockerfile, log, and an explicit truncation flag.
 Definitions and content-derived tags never change. Builds are leased in SQLite,
-resume after server restart, use the administrator host's active Docker context,
-and publish durable `agent-images` sync hints over the existing SSE connection.
+resume after server restart without clearing the interrupted attempt's progress
+or log, use the administrator host's selected sandbox provider, and publish
+durable `agent-images` sync hints over the existing SSE connection.
 Docker output is persisted in 500 ms batches so progress remains live without
 turning every process chunk into a SQLite transaction. The latest attempt's log
-is capped at two million characters and retries begin a fresh log.
+is capped at two million characters. An explicit retry begins a fresh log;
+worker restart recovery retains and appends to the interrupted log.
+
+Administrators can assign a ready image to an existing agent with
+`POST /v0/admin/agents/:agentUserId/changeImage`. A real change starts a fresh
+container and Rig session for every connected private workspace, atomically
+switches the durable bindings, and then removes the old containers. Workspace
+directories are preserved. Selecting the current image is a no-op, and changing
+an image is rejected while the agent has pending or running work.
 
 Each agent is rooted at `default_cwd/agents/<agent-user-id>`. Direct/private
 conversations get separate `users/<human-user-id>/home` and
@@ -241,11 +411,12 @@ members of group DMs and channels—including multiple agents in one channel—b
 those conversations remain dormant until mention-based collaboration is
 implemented.
 
-The workspace file API is available to any chat that has exactly one connected
-Rig environment. It resolves the persisted `agent_rig_bindings.cwd` host path,
-which is the directory mounted into that environment at `/workspace`; it never
-creates a separate directory from the chat ID. A current chat member can read
-its file-tree snapshot from `GET /v0/chats/:chatId/workspace`. An unconnected or
+Every public or private channel owns a shared server-side workspace at
+`default_cwd/channels/<chat-id>`, created lazily on its first workspace request.
+A DM with exactly one connected Rig environment instead resolves the
+persisted `agent_rig_bindings.cwd` host path, which is the directory mounted
+into that environment at `/workspace`. A current chat member can read its
+file-tree snapshot from `GET /v0/chats/:chatId/workspace`. An unconnected DM or
 ambiguous chat returns `404`, and public-channel discovery alone never reveals
 workspace contents. Paths are canonical `@pierre/trees` input (directory paths
 end in `/`), absolute server paths are never returned, and directory symlinks

package/packages/happy2-server/dist/cli.js

@@ -1,17 +1,24 @@
 #!/usr/bin/env node
 import { parseArgs } from "node:util";
+import { createClient } from "@libsql/client";
 import { TokenService } from "./modules/auth/tokens.js";
 import { loadRuntimeConfig } from "./modules/config/runtime.js";
-import { Database } from "./modules/database.js";
+import { serverSchemaMigrate } from "./modules/server/serverSchemaMigrate.js";
 import { buildServer } from "./server.js";
 const { values } = parseArgs({
     options: { config: { type: "string" } },
 });
 const configPath = values.config ?? process.env.HAPPY2_CONFIG;
 const { config } = await loadRuntimeConfig(configPath);
-const database = new Database(config.database.url, config.database.authTokenEnv ? process.env[config.database.authTokenEnv] : undefined);
-await database.migrate();
-const app = await buildServer(config, { database, tokens: await TokenService.create(config) });
+const client = createClient({
+    url: config.database.url,
+    authToken: config.database.authTokenEnv ? process.env[config.database.authTokenEnv] : undefined,
+});
+await serverSchemaMigrate(client);
+const app = await buildServer(config, {
+    client,
+    tokens: await TokenService.create(config),
+});
 let cleanupPromise;
 const cleanup = () => {
     cleanupPromise ??= (async () => {
@@ -19,7 +26,7 @@ const cleanup = () => {
             await app.close();
         }
         finally {
-            database.close();
+            client.close();
         }
     })();
     return cleanupPromise;

package/packages/happy2-server/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../sources/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CAC1C,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACvD,MAAM,QAAQ,GAAG,IAAI,QAAQ,CACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,EACnB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CACvF,CAAC;AACF,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;AACzB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC/F,IAAI,cAAyC,CAAC;AAC9C,MAAM,OAAO,GAAG,GAAG,EAAE;IACjB,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,cAAc,CAAC;AAC1B,CAAC,CAAC;AACF,IAAI,CAAC;IACD,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,GAAG,EAAE;QACd,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACpC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../sources/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CAC1C,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,YAAY,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;IACxB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;CAClG,CAAC,CAAC;AACH,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAClC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE;IAClC,MAAM;IACN,MAAM,EAAE,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;CAC5C,CAAC,CAAC;AACH,IAAI,cAAyC,CAAC;AAC9C,MAAM,OAAO,GAAG,GAAG,EAAE;IACjB,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACL,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,cAAc,CAAC;AAC1B,CAAC,CAAC;AACF,IAAI,CAAC;IACD,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,GAAG,EAAE;QACd,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACpC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,YAAqB,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/packages/happy2-server/dist/index.d.ts

@@ -5,20 +5,30 @@ export { defaultConfig } from "./modules/config/defaults.js";
 export { loadConfig, parseConfig } from "./modules/config/loader.js";
 export { startStandaloneHappy2, type StandaloneHappy2 } from "./standalone.js";
 export type { ServerConfig } from "./modules/config/type.js";
-export { Database, type RequestMetadata, type User } from "./modules/database.js";
-export { CollaborationRepository } from "./modules/collaboration/repository.js";
-export { AutomationRepository } from "./modules/automation/repository.js";
-export { IntegrationRepository } from "./modules/integrations/repository.js";
+export type { RequestMetadata } from "./modules/auth/types.js";
+export type { User } from "./modules/user/types.js";
+export { createDatabase, type DrizzleExecutor } from "./modules/drizzle.js";
+export { accountCreatePassword } from "./modules/auth/accountCreatePassword.js";
+export { sessionCreate } from "./modules/auth/sessionCreate.js";
+export { serverSchemaMigrate } from "./modules/server/serverSchemaMigrate.js";
+export { userCreateProfile } from "./modules/user/userCreateProfile.js";
+export { syncInitialize } from "./modules/sync/syncInitialize.js";
 export { AesGcmSecretProtector } from "./modules/integrations/secrets.js";
 export { NodeWebhookTransport } from "./modules/integrations/transport.js";
 export * from "./modules/integrations/types.js";
-export { OperationsRepository } from "./modules/operations/repository.js";
+export type { ResolvedWebhookUrl, WebhookUrlPolicy } from "./modules/integrations/ssrf.js";
 export * from "./modules/operations/types.js";
 export { FileStorage, type FileStorageFileSystem } from "./modules/files/storage.js";
-export * from "./modules/collaboration/types.js";
+export * from "./modules/chat/types.js";
 export * from "./modules/realtime/index.js";
+export * from "./modules/setup/index.js";
+export * from "./modules/sandbox/index.js";
+export { userOnboardingUpdateStep } from "./modules/user/userOnboardingUpdateStep.js";
 export * from "./modules/workspace/index.js";
-export { LocalAgentDockerRuntime } from "./modules/agents/index.js";
-export type { AgentContainerInput, AgentDockerRuntime, AgentImageBuildInput, AgentImageBuildOptions, AgentImageBuildUpdate, } from "./modules/agents/index.js";
+export * from "./modules/plugin/index.js";
+export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
+export type { PluginSecretProtector } from "./modules/plugin/secrets.js";
+export { PluginPackageStore } from "./modules/plugin/packageStore.js";
+export { SandboxPluginMcpRuntime, type PluginLocalOpenInput, type PluginLocalPrepareInput, type PluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer } from "./server.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/happy2-server/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,KAAK,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,YAAY,EACR,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/index.js

@@ -4,19 +4,26 @@ export { initializeManagedEnvironment } from "./modules/config/environment.js";
 export { defaultConfig } from "./modules/config/defaults.js";
 export { loadConfig, parseConfig } from "./modules/config/loader.js";
 export { startStandaloneHappy2 } from "./standalone.js";
-export { Database } from "./modules/database.js";
-export { CollaborationRepository } from "./modules/collaboration/repository.js";
-export { AutomationRepository } from "./modules/automation/repository.js";
-export { IntegrationRepository } from "./modules/integrations/repository.js";
+export { createDatabase } from "./modules/drizzle.js";
+export { accountCreatePassword } from "./modules/auth/accountCreatePassword.js";
+export { sessionCreate } from "./modules/auth/sessionCreate.js";
+export { serverSchemaMigrate } from "./modules/server/serverSchemaMigrate.js";
+export { userCreateProfile } from "./modules/user/userCreateProfile.js";
+export { syncInitialize } from "./modules/sync/syncInitialize.js";
 export { AesGcmSecretProtector } from "./modules/integrations/secrets.js";
 export { NodeWebhookTransport } from "./modules/integrations/transport.js";
 export * from "./modules/integrations/types.js";
-export { OperationsRepository } from "./modules/operations/repository.js";
 export * from "./modules/operations/types.js";
 export { FileStorage } from "./modules/files/storage.js";
-export * from "./modules/collaboration/types.js";
+export * from "./modules/chat/types.js";
 export * from "./modules/realtime/index.js";
+export * from "./modules/setup/index.js";
+export * from "./modules/sandbox/index.js";
+export { userOnboardingUpdateStep } from "./modules/user/userOnboardingUpdateStep.js";
 export * from "./modules/workspace/index.js";
-export { LocalAgentDockerRuntime } from "./modules/agents/index.js";
+export * from "./modules/plugin/index.js";
+export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
+export { PluginPackageStore } from "./modules/plugin/packageStore.js";
+export { SandboxPluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer } from "./server.js";
 //# sourceMappingURL=index.js.map

package/packages/happy2-server/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAmC,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,kCAAkC,CAAC;AACjD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAQpE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,GAI1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/modules/agent/agentChatBind.d.ts

@@ -0,0 +1,19 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Reassigns an agentRigBindings row only after the requested agent, rig, and chat relationship has been validated.
+ * Keeping validation and the binding write together prevents workers from attaching a run to a stale or unrelated conversation.
+ */
+export declare function agentChatBind(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    agentUserId: string;
+    chatId: string;
+    containerName: string;
+    cwd: string;
+    imageId: string;
+    sessionId: string;
+}): Promise<{
+    containerName: string;
+    cwd: string;
+    sessionId: string;
+}>;
+//# sourceMappingURL=agentChatBind.d.ts.map

package/packages/happy2-server/dist/modules/agent/agentChatBind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentChatBind.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAMtE;;;GAGG;AACH,wBAAsB,aAAa,CAC/B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB,GACF,OAAO,CAAC;IACP,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC,CA8CD"}

package/packages/happy2-server/dist/modules/agent/agentChatBind.js

@@ -0,0 +1,48 @@
+import { CollaborationError } from "../chat/types.js";
+import { withTransaction } from "../drizzle.js";
+import { agentRigBindings } from "../schema.js";
+import { and, eq } from "drizzle-orm";
+import { agentChatGetContext } from "./agentChatGetContext.js";
+/**
+ * Reassigns an agentRigBindings row only after the requested agent, rig, and chat relationship has been validated.
+ * Keeping validation and the binding write together prevents workers from attaching a run to a stale or unrelated conversation.
+ */
+export async function agentChatBind(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        const context = await agentChatGetContext(tx, input.actorUserId, input.chatId, input.agentUserId);
+        if (!context || context.image.id !== input.imageId)
+            throw new CollaborationError("not_found", "Agent conversation was not found");
+        await tx
+            .insert(agentRigBindings)
+            .values({
+            userId: input.agentUserId,
+            chatId: input.chatId,
+            imageId: input.imageId,
+            sessionId: input.sessionId,
+            containerName: input.containerName,
+            cwd: input.cwd,
+        })
+            .onConflictDoNothing();
+        const [binding] = await tx
+            .select({
+            agentUserId: agentRigBindings.userId,
+            containerName: agentRigBindings.containerName,
+            cwd: agentRigBindings.cwd,
+            imageId: agentRigBindings.imageId,
+            sessionId: agentRigBindings.sessionId,
+        })
+            .from(agentRigBindings)
+            .where(and(eq(agentRigBindings.userId, input.agentUserId), eq(agentRigBindings.chatId, input.chatId)))
+            .limit(1);
+        if (!binding)
+            throw new Error("Agent chat binding was not created");
+        if (binding.imageId !== input.imageId)
+            throw new Error("Agent chat binding uses a different image");
+        return {
+            containerName: binding.containerName,
+            cwd: binding.cwd,
+            sessionId: binding.sessionId,
+        };
+    });
+}
+//# sourceMappingURL=agentChatBind.js.map

package/packages/happy2-server/dist/modules/agent/agentChatBind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentChatBind.js","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatBind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,QAAyB,EACzB,KAQC;IAMD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,MAAM,mBAAmB,CACrC,EAAE,EACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,WAAW,CACpB,CAAC;QACF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO;YAC9C,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAClF,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC;YACJ,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,EAAE,KAAK,CAAC,GAAG;SACjB,CAAC;aACD,mBAAmB,EAAE,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,WAAW,EAAE,gBAAgB,CAAC,MAAM;YACpC,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,OAAO,EAAE,gBAAgB,CAAC,OAAO;YACjC,SAAS,EAAE,gBAAgB,CAAC,SAAS;SACxC,CAAC;aACD,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAC9C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAC5C,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,OAAO;YACH,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC/B,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/agent/agentChatGetContext.d.ts

@@ -0,0 +1,8 @@
+import { type AgentChatContext } from "./impl/agentChatContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Resolves one executable agent inside an accessible direct message or channel, including its stable conversation sandbox scope and optional Rig binding.
+ * Rejecting inactive or unready identities here keeps session creation tied to a concrete agent-conversation authorization boundary.
+ */
+export declare function agentChatGetContext(executor: DrizzleExecutor, actorUserId: string, chatId: string, requestedAgentUserId?: string): Promise<AgentChatContext | undefined>;
+//# sourceMappingURL=agentChatGetContext.d.ts.map

package/packages/happy2-server/dist/modules/agent/agentChatGetContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentChatGetContext.d.ts","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatGetContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAOrD;;;GAGG;AACH,wBAAsB,mBAAmB,CACrC,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,oBAAoB,CAAC,EAAE,MAAM,GAC9B,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAoGvC"}

package/packages/happy2-server/dist/modules/agent/agentChatGetContext.js

@@ -0,0 +1,89 @@
+import {} from "./impl/agentChatContext.js";
+import {} from "../drizzle.js";
+import { agentImages, agentRigBindings, chatMembers, users } from "../schema.js";
+import { and, eq, isNull } from "drizzle-orm";
+import { chatGetAccess } from "../chat/chatGetAccess.js";
+/**
+ * Resolves one executable agent inside an accessible direct message or channel, including its stable conversation sandbox scope and optional Rig binding.
+ * Rejecting inactive or unready identities here keeps session creation tied to a concrete agent-conversation authorization boundary.
+ */
+export async function agentChatGetContext(executor, actorUserId, chatId, requestedAgentUserId) {
+    const access = await chatGetAccess(executor, actorUserId, chatId, true);
+    if (!access || access.dmType === "group")
+        return undefined;
+    const [agent] = await executor
+        .select({
+        userId: users.id,
+        effort: users.agentEffort,
+        imageId: agentImages.id,
+        dockerTag: agentImages.dockerTag,
+        dockerImageId: agentImages.dockerImageId,
+        imageStatus: agentImages.status,
+    })
+        .from(chatMembers)
+        .innerJoin(users, eq(users.id, chatMembers.userId))
+        .innerJoin(agentImages, eq(agentImages.id, users.agentImageId))
+        .where(and(eq(chatMembers.chatId, chatId), isNull(chatMembers.leftAt), isNull(users.deletedAt), eq(users.kind, "agent"), requestedAgentUserId ? eq(users.id, requestedAgentUserId) : undefined))
+        .orderBy(users.id)
+        .limit(1);
+    if (!agent || agent.imageStatus !== "ready" || !agent.dockerImageId)
+        return undefined;
+    if (access.kind === "dm") {
+        if (access.dmType !== "direct")
+            return undefined;
+        const activeAgentCount = await executor
+            .select({ id: users.id })
+            .from(chatMembers)
+            .innerJoin(users, eq(users.id, chatMembers.userId))
+            .where(and(eq(chatMembers.chatId, chatId), isNull(chatMembers.leftAt), isNull(users.deletedAt), eq(users.kind, "agent")));
+        if (activeAgentCount.length !== 1)
+            return undefined;
+    }
+    else if (!requestedAgentUserId)
+        return undefined;
+    const [human] = access.kind === "dm"
+        ? await executor
+            .select({ userId: users.id })
+            .from(chatMembers)
+            .innerJoin(users, eq(users.id, chatMembers.userId))
+            .where(and(eq(chatMembers.chatId, chatId), isNull(chatMembers.leftAt), isNull(users.deletedAt), eq(users.kind, "human")))
+            .orderBy(users.id)
+            .limit(1)
+        : [];
+    if (access.kind === "dm" && !human)
+        return undefined;
+    const [bound] = await executor
+        .select({
+        containerName: agentRigBindings.containerName,
+        cwd: agentRigBindings.cwd,
+        sessionId: agentRigBindings.sessionId,
+    })
+        .from(agentRigBindings)
+        .where(and(eq(agentRigBindings.userId, agent.userId), eq(agentRigBindings.chatId, chatId), eq(agentRigBindings.imageId, agent.imageId)))
+        .limit(1);
+    return {
+        agentUserId: agent.userId,
+        ...(agent.effort ? { agentEffort: agent.effort } : {}),
+        chatId,
+        image: {
+            id: agent.imageId,
+            dockerImageId: agent.dockerImageId,
+            dockerTag: agent.dockerTag,
+        },
+        sandboxScope: {
+            kind: access.kind === "dm" ? "users" : "chats",
+            id: human?.userId ?? chatId,
+            ...(access.kind === "dm" ? { conversationId: chatId } : {}),
+        },
+        ...(bound
+            ? {
+                binding: {
+                    containerName: bound.containerName,
+                    cwd: bound.cwd,
+                    sessionId: bound.sessionId,
+                },
+            }
+            : {}),
+    };
+}
+//# sourceMappingURL=agentChatGetContext.js.map

package/packages/happy2-server/dist/modules/agent/agentChatGetContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentChatGetContext.js","sourceRoot":"","sources":["../../../sources/modules/agent/agentChatGetContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEjF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAAyB,EACzB,WAAmB,EACnB,MAAc,EACd,oBAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,QAAQ;SACzB,MAAM,CAAC;QACJ,MAAM,EAAE,KAAK,CAAC,EAAE;QAChB,MAAM,EAAE,KAAK,CAAC,WAAW;QACzB,OAAO,EAAE,WAAW,CAAC,EAAE;QACvB,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,WAAW,EAAE,WAAW,CAAC,MAAM;KAClC,CAAC;SACD,IAAI,CAAC,WAAW,CAAC;SACjB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;SAClD,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;SAC9D,KAAK,CACF,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EACvB,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CACxE,CACJ;SACA,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,gBAAgB,GAAG,MAAM,QAAQ;aAClC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;aACxB,IAAI,CAAC,WAAW,CAAC;aACjB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;aAClD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1B,CACJ,CAAC;QACN,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;IACxD,CAAC;SAAM,IAAI,CAAC,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,GACT,MAAM,CAAC,IAAI,KAAK,IAAI;QAChB,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;aAC5B,IAAI,CAAC,WAAW,CAAC;aACjB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;aAClD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAC1B,CACJ;aACA,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aACjB,KAAK,CAAC,CAAC,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;IACb,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,QAAQ;SACzB,MAAM,CAAC;QACJ,aAAa,EAAE,gBAAgB,CAAC,aAAa;QAC7C,GAAG,EAAE,gBAAgB,CAAC,GAAG;QACzB,SAAS,EAAE,gBAAgB,CAAC,SAAS;KACxC,CAAC;SACD,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACzC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC9C,CACJ;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,OAAO;QACH,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM;QACN,KAAK,EAAE;YACH,EAAE,EAAE,KAAK,CAAC,OAAO;YACjB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC7B;QACD,YAAY,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;YAC9C,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,MAAM;YAC3B,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;QACD,GAAG,CAAC,KAAK;YACL,CAAC,CAAC;gBACI,OAAO,EAAE;oBACL,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC7B;aACJ;YACH,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/agent/agentChatListUnfinishedIds.d.ts

@@ -0,0 +1,7 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Lists distinct chat identifiers that still have pending or running agent turns.
+ * Collapsing multiple turns per chat gives startup recovery a minimal set of conversations whose workers may need rescheduling.
+ */
+export declare function agentChatListUnfinishedIds(executor: DrizzleExecutor): Promise<string[]>;
+//# sourceMappingURL=agentChatListUnfinishedIds.d.ts.map