happy2 0.0.5

package/packages/happy2-server/drizzle/0005_ai_agents.sql

@@ -0,0 +1,85 @@
+CREATE TABLE `agent_images` (
+  `id` TEXT PRIMARY KEY NOT NULL,
+  `name` TEXT NOT NULL,
+  `dockerfile` TEXT NOT NULL,
+  `definition_hash` TEXT NOT NULL UNIQUE,
+  `docker_tag` TEXT NOT NULL UNIQUE,
+  `build_context` TEXT,
+  `builtin_key` TEXT,
+  `status` TEXT NOT NULL DEFAULT 'pending' CHECK (`status` IN ('pending', 'building', 'ready', 'failed')),
+  `build_attempt` INTEGER NOT NULL DEFAULT 0 CHECK (`build_attempt` >= 0),
+  `build_progress` INTEGER NOT NULL DEFAULT 0 CHECK (`build_progress` BETWEEN 0 AND 100),
+  `build_log` TEXT NOT NULL DEFAULT '',
+  `build_log_truncated` INTEGER NOT NULL DEFAULT 0 CHECK (`build_log_truncated` IN (0, 1)),
+  `last_build_log_line` TEXT,
+  `build_log_updated_at` TEXT,
+  `docker_image_id` TEXT,
+  `last_error` TEXT,
+  `build_requested_at` TEXT,
+  `build_started_at` TEXT,
+  `ready_at` TEXT,
+  `worker_id` TEXT,
+  `lease_expires_at` TEXT,
+  `created_by_user_id` TEXT REFERENCES `users`(`id`) ON DELETE SET NULL,
+  `created_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CHECK (
+    (`status` = 'ready' AND `docker_image_id` IS NOT NULL AND `ready_at` IS NOT NULL)
+    OR (`status` != 'ready' AND `ready_at` IS NULL)
+  )
+);
+--> statement-breakpoint
+CREATE INDEX `agent_images_status_requested_idx`
+ON `agent_images` (`status`, `build_requested_at`, `created_at`);
+--> statement-breakpoint
+CREATE TABLE `agent_image_settings` (
+  `id` INTEGER PRIMARY KEY NOT NULL CHECK (`id` = 1),
+  `default_image_id` TEXT REFERENCES `agent_images`(`id`) ON DELETE RESTRICT,
+  `updated_by_user_id` TEXT REFERENCES `users`(`id`) ON DELETE SET NULL,
+  `updated_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+--> statement-breakpoint
+INSERT INTO `agent_image_settings` (`id`) VALUES (1);
+--> statement-breakpoint
+CREATE TABLE `agent_rig_bindings` (
+  `user_id` TEXT NOT NULL REFERENCES `users`(`id`) ON DELETE CASCADE,
+  `chat_id` TEXT NOT NULL REFERENCES `chats`(`id`) ON DELETE CASCADE,
+  `image_id` TEXT NOT NULL REFERENCES `agent_images`(`id`) ON DELETE RESTRICT,
+  `session_id` TEXT NOT NULL,
+  `container_name` TEXT NOT NULL UNIQUE,
+  `cwd` TEXT NOT NULL,
+  `created_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`user_id`, `chat_id`)
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `agent_rig_bindings_session_unique_idx` ON `agent_rig_bindings` (`session_id`);
+--> statement-breakpoint
+CREATE TABLE `agent_turns` (
+  `user_message_id` TEXT NOT NULL REFERENCES `messages`(`id`) ON DELETE CASCADE,
+  `agent_user_id` TEXT NOT NULL REFERENCES `users`(`id`) ON DELETE CASCADE,
+  `chat_id` TEXT NOT NULL REFERENCES `chats`(`id`) ON DELETE CASCADE,
+  `session_id` TEXT NOT NULL REFERENCES `agent_rig_bindings`(`session_id`) ON DELETE CASCADE,
+  `run_id` TEXT,
+  `baseline_message_count` INTEGER CHECK (`baseline_message_count` IS NULL OR `baseline_message_count` >= 0),
+  `status` TEXT NOT NULL DEFAULT 'pending' CHECK (`status` IN ('pending', 'running', 'complete', 'failed')),
+  `assistant_message_id` TEXT REFERENCES `messages`(`id`) ON DELETE SET NULL,
+  `last_error` TEXT,
+  `worker_id` TEXT,
+  `lease_expires_at` TEXT,
+  `created_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `completed_at` TEXT,
+  PRIMARY KEY (`user_message_id`, `agent_user_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `agent_turns_status_created_idx`
+ON `agent_turns` (`status`, `created_at`, `user_message_id`);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `agent_turns_one_running_per_chat_idx`
+ON `agent_turns` (`chat_id`, `agent_user_id`)
+WHERE `status` = 'running';
+--> statement-breakpoint
+CREATE UNIQUE INDEX `agent_turns_session_run_unique_idx`
+ON `agent_turns` (`session_id`, `run_id`)
+WHERE `run_id` IS NOT NULL;

package/packages/happy2-server/drizzle/0006_rig_global_event_queue.sql

@@ -0,0 +1,10 @@
+CREATE TABLE `rig_event_sync_state` (
+  `id` INTEGER PRIMARY KEY NOT NULL CHECK (`id` = 1),
+  `cursor` INTEGER,
+  `trimmed_through` INTEGER,
+  `events_since_trim` INTEGER NOT NULL DEFAULT 0,
+  `last_trimmed_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `updated_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+--> statement-breakpoint
+INSERT INTO `rig_event_sync_state` (`id`) VALUES (1);

package/packages/happy2-server/drizzle/0007_rename_server_identity.sql

@@ -0,0 +1,3 @@
+UPDATE `server_settings`
+SET `name` = 'Happy (2)', `updated_at` = CURRENT_TIMESTAMP
+WHERE `name` = char(82, 105, 103, 103, 101, 100);

package/packages/happy2-server/drizzle/0008_agent_message_streaming.sql

@@ -0,0 +1,47 @@
+ALTER TABLE `agent_turns` ADD `last_session_event_id` TEXT;
+--> statement-breakpoint
+ALTER TABLE `agent_turns` ADD `stream_committed_text` TEXT NOT NULL DEFAULT '';
+--> statement-breakpoint
+CREATE UNIQUE INDEX `agent_turns_assistant_message_unique_idx`
+ON `agent_turns` (`assistant_message_id`)
+WHERE `assistant_message_id` IS NOT NULL;
+--> statement-breakpoint
+DROP TRIGGER `messages_fts_ai`;
+--> statement-breakpoint
+DROP TRIGGER `messages_fts_ad`;
+--> statement-breakpoint
+DROP TRIGGER `messages_fts_au_delete`;
+--> statement-breakpoint
+DROP TRIGGER `messages_fts_au_insert`;
+--> statement-breakpoint
+CREATE TRIGGER `messages_fts_ai`
+AFTER INSERT ON `messages`
+WHEN `new`.`deleted_at` IS NULL AND `new`.`published_at` IS NOT NULL
+BEGIN
+  INSERT INTO `messages_fts` (`rowid`, `text`)
+  VALUES (`new`.`rowid`, COALESCE(`new`.`text`, ''));
+END;
+--> statement-breakpoint
+CREATE TRIGGER `messages_fts_ad`
+AFTER DELETE ON `messages`
+WHEN `old`.`deleted_at` IS NULL AND `old`.`published_at` IS NOT NULL
+BEGIN
+  INSERT INTO `messages_fts` (`messages_fts`, `rowid`, `text`)
+  VALUES ('delete', `old`.`rowid`, COALESCE(`old`.`text`, ''));
+END;
+--> statement-breakpoint
+CREATE TRIGGER `messages_fts_au_delete`
+AFTER UPDATE OF `text`, `deleted_at`, `published_at` ON `messages`
+WHEN `old`.`deleted_at` IS NULL AND `old`.`published_at` IS NOT NULL
+BEGIN
+  INSERT INTO `messages_fts` (`messages_fts`, `rowid`, `text`)
+  VALUES ('delete', `old`.`rowid`, COALESCE(`old`.`text`, ''));
+END;
+--> statement-breakpoint
+CREATE TRIGGER `messages_fts_au_insert`
+AFTER UPDATE OF `text`, `deleted_at`, `published_at` ON `messages`
+WHEN `new`.`deleted_at` IS NULL AND `new`.`published_at` IS NOT NULL
+BEGIN
+  INSERT INTO `messages_fts` (`rowid`, `text`)
+  VALUES (`new`.`rowid`, COALESCE(`new`.`text`, ''));
+END;

package/packages/happy2-server/drizzle/0009_chat_workspace_binding_lookup.sql

@@ -0,0 +1,2 @@
+CREATE INDEX `agent_rig_bindings_chat_idx`
+ON `agent_rig_bindings` (`chat_id`);

package/packages/happy2-server/drizzle/0010_rig_secret_assignments.sql

@@ -0,0 +1,21 @@
+CREATE TABLE `agent_secret_agent_assignments` (
+  `secret_id` TEXT NOT NULL,
+  `agent_user_id` TEXT NOT NULL REFERENCES `users`(`id`) ON DELETE CASCADE,
+  `created_by_user_id` TEXT REFERENCES `users`(`id`) ON DELETE SET NULL,
+  `created_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`secret_id`, `agent_user_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `agent_secret_agent_assignments_agent_idx`
+ON `agent_secret_agent_assignments` (`agent_user_id`, `secret_id`);
+--> statement-breakpoint
+CREATE TABLE `agent_secret_channel_assignments` (
+  `secret_id` TEXT NOT NULL,
+  `chat_id` TEXT NOT NULL REFERENCES `chats`(`id`) ON DELETE CASCADE,
+  `created_by_user_id` TEXT REFERENCES `users`(`id`) ON DELETE SET NULL,
+  `created_at` TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  PRIMARY KEY (`secret_id`, `chat_id`)
+);
+--> statement-breakpoint
+CREATE INDEX `agent_secret_channel_assignments_chat_idx`
+ON `agent_secret_channel_assignments` (`chat_id`, `secret_id`);

package/packages/happy2-server/drizzle/meta/_journal.json

@@ -0,0 +1,83 @@
+{
+    "version": "7",
+    "dialect": "sqlite",
+    "entries": [
+        {
+            "idx": 0,
+            "version": "6",
+            "when": 1783770000000,
+            "tag": "0000_initial",
+            "breakpoints": true
+        },
+        {
+            "idx": 1,
+            "version": "6",
+            "when": 1783810000000,
+            "tag": "0001_accounts_profiles_files",
+            "breakpoints": true
+        },
+        {
+            "idx": 2,
+            "version": "6",
+            "when": 1783820000000,
+            "tag": "0002_file_visibility_and_uploader",
+            "breakpoints": true
+        },
+        {
+            "idx": 3,
+            "version": "6",
+            "when": 1783851113088,
+            "tag": "0003_collaboration",
+            "breakpoints": true
+        },
+        {
+            "idx": 4,
+            "version": "6",
+            "when": 1783877025268,
+            "tag": "0004_collaboration_expansion",
+            "breakpoints": true
+        },
+        {
+            "idx": 5,
+            "version": "6",
+            "when": 1783900000000,
+            "tag": "0005_ai_agents",
+            "breakpoints": true
+        },
+        {
+            "idx": 6,
+            "version": "6",
+            "when": 1784000000000,
+            "tag": "0006_rig_global_event_queue",
+            "breakpoints": true
+        },
+        {
+            "idx": 7,
+            "version": "6",
+            "when": 1784050000000,
+            "tag": "0007_rename_server_identity",
+            "breakpoints": true
+        },
+        {
+            "idx": 8,
+            "version": "6",
+            "when": 1784080000000,
+            "tag": "0008_agent_message_streaming",
+            "breakpoints": true
+        },
+        {
+            "idx": 9,
+            "version": "6",
+            "when": 1784167000000,
+            "tag": "0009_chat_workspace_binding_lookup",
+            "breakpoints": true
+        },
+        {
+            "idx": 10,
+            "version": "6",
+            "when": 1784170000000,
+            "tag": "0010_rig_secret_assignments",
+            "breakpoints": true
+        }
+    ]
+}

package/packages/happy2-server/happy2.example.toml

@@ -0,0 +1,104 @@
+[server]
+# "all" serves auth and API validation; "auth" only issues tokens; "api" only
+# validates them against the shared database.
+role = "all"
+host = "127.0.0.1"
+port = 3000
+public_url = "http://127.0.0.1:3000"
+# Keep 0 unless every request passes through exactly this many trusted proxies.
+# A wrong nonzero value lets clients spoof rate-limit and access telemetry IPs.
+trusted_proxy_hops = 0
+
+[database]
+# A local file works for one host. Use a shared libSQL endpoint when auth and
+# API are independently deployed, so every instance sees the same sessions.
+url = "file:happy2.db"
+# auth_token_env = "HAPPY2_DATABASE_AUTH_TOKEN"
+
+[agents]
+# The product server owns Rig sessions. Clients never access this socket or token.
+# By default, Server-started Rig keeps its configuration, durable state, socket,
+# and token under .happy2/rig instead of reusing the user's global Rig daemon.
+# Set the standard RIG_HOME environment variable to an absolute path to move
+# that private Rig home.
+enabled = true
+# The bundled @slopus/rig executable is used unless command is explicitly set.
+# Root for server-owned agent/user and agent/chat sandboxes. Clients cannot override it.
+default_cwd = "/srv/happy2/workspace"
+
+[files]
+# Keep this outside the published package/image in production.
+provider = "local"
+directory = "files"
+signed_url_expiry_seconds = 300
+# Generic chat attachments are streamed to disk. Keep this aligned with proxy limits.
+max_upload_bytes = 536870912
+# Resumable uploads persist their offset across reconnects and restarts.
+resumable_chunk_bytes = 8388608
+# Zero disables a quota. Values include generated previews and thumbnails.
+per_user_quota_bytes = 5368709120
+server_quota_bytes = 107374182400
+incomplete_upload_expiry_seconds = 86400
+quarantine_retention_seconds = 2592000
+# Optional scanner executable. It runs without a shell; {path} is replaced in
+# each argument, or appended when no argument contains the placeholder.
+# malware_scanner_command = "/usr/local/bin/clamscan"
+# malware_scanner_arguments = ["--no-summary", "{path}"]
+malware_scan_timeout_seconds = 120
+# "deny" quarantines files when the scanner is unavailable; "allow" fails open.
+malware_scan_failure_mode = "deny"
+
+[security]
+integration_secret_env = "HAPPY2_INTEGRATION_SECRET"
+
+[security.rate_limit]
+enabled = true
+reads_per_minute = 1200
+writes_per_minute = 300
+auth_per_minute = 30
+
+[security.idempotency]
+enabled = true
+lease_seconds = 30
+retention_seconds = 86400
+
+[jwt]
+issuer = "https://happy2.example.com"
+audience = "happy2-desktop"
+key_id = "2026-01"
+# Set paths to use mounted PEM key files. Otherwise the auth/all server
+# generates an RS256 key pair on first start and persists it in its .env file.
+# The API-only role needs the matching public key in HAPPY2_JWT_PUBLIC_KEY_B64
+# or public_key_path.
+# private_key_path = "/run/secrets/happy2-jwt-private.pem"
+# public_key_path = "/run/secrets/happy2-jwt-public.pem"
+expiry_days = 30
+
+[auth.password]
+enabled = true
+# Enable only when self-service account creation is intended.
+signup_enabled = false
+
+[auth.magic_link]
+enabled = false
+from = "Happy (2) <noreply@happy2.example.com>"
+redirect_url = "happy2://auth/magic-link"
+# SMTP settings are only read from EMAIL_SMTP_HOST, EMAIL_SMTP_PORT,
+# EMAIL_SMTP_USER, EMAIL_SMTP_PASSWORD, and EMAIL_FROM.
+
+[auth.oidc.google]
+enabled = false
+discovery_url = "https://accounts.google.com/.well-known/openid-configuration"
+client_id = "replace-me"
+# Name of the environment variable holding this provider's client secret.
+client_secret_env = "HAPPY2_OIDC_GOOGLE_CLIENT_SECRET"
+scopes = ["openid", "email", "profile"]
+redirect_path = "/v0/auth/oidc/google/callback"
+
+# Cloudflare Access authenticates the request at the proxy and forwards a signed
+# Cf-Access-Jwt-Assertion header. See README for the required Tunnel/origin setup.
+[auth.cloudflare_access]
+enabled = false
+team_domain = "https://replace-me.cloudflareaccess.com"
+# Copy the Application Audience (AUD) Tag from Cloudflare Zero Trust.
+audience = "replace-me"