happy2 0.0.9 → 0.0.11

package/README.md

@@ -49,6 +49,25 @@ Open [http://127.0.0.1:3000](http://127.0.0.1:3000) in your browser. Happy (2)
 stores its database, files, generated secrets, agent workspaces, and private Rig
 runtime under `.happy2` in the directory where you start it.
 
+Keep Happy (2) running across reboots with:
+
+```sh
+npx happy2 service start
+npx happy2 service stop
+```
+
+On macOS this installs a per-user LaunchAgent without `sudo`; it starts when the
+user logs in. On Linux it writes and prints `./happy2.service`, then shows the
+exact `sudo` commands you can run to install and start it as a system-wide
+systemd unit. `service stop` prints the corresponding systemd removal commands;
+it never invokes `sudo` itself. The generated file remains in the current
+directory so you can inspect or reinstall it. Add
+`--config /absolute/or/relative/happy2.toml` to `service start` to preserve an
+explicit configuration file; otherwise the service keeps the current directory
+as its working directory and uses its `.happy2` state. When started through
+`npx`, the generated service runs `npx --yes happy2` instead of depending on an
+evictable `_npx` cache path.
+
 ## Why Happy (2)?
 
 - **People and agents share the same workspace.** Conversations, threads,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "happy2",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "description": "Happy (2) desktop web app and server bundle",
   "repository": {
     "type": "git",
@@ -13,8 +13,10 @@
     "packages/happy2-server/bin/happy2.js",
     "packages/happy2-server/dist",
     "packages/happy2-server/drizzle",
+    "packages/happy2-server/plugins",
     "packages/happy2-server/happy2.example.toml",
     "packages/happy2-server/README.md",
+    "packages/happy2-server/PLUGINS.md",
     "packages/happy2-server/Dockerfile"
   ],
   "type": "module",
@@ -67,15 +69,17 @@
     "@fastify/multipart": "^10.1.0",
     "@fastify/static": "^10.1.0",
     "@libsql/client": "^0.17.4",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@paralleldrive/cuid2": "^3.3.0",
-    "@slopus/rig": "^0.0.17",
+    "@slopus/rig": "^0.0.24",
     "drizzle-orm": "^0.45.2",
     "fastify": "^5.8.2",
     "jose": "^6.1.3",
     "nodemailer": "^7.0.13",
     "sharp": "^0.35.3",
     "smol-toml": "^1.4.2",
-    "thumbhash": "^0.1.1"
+    "thumbhash": "^0.1.1",
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@eslint/css": "^1.4.0",

package/packages/happy2-server/PLUGINS.md

@@ -0,0 +1,330 @@
+# Server plugins
+
+Happy (2) plugins package Agent Skills, an MCP server, or both. This first
+server-side implementation installs only packages bundled with the server. It
+already keeps catalog discovery, durable system plugins, immutable package/image
+snapshots, and independent runtime installations separate so a later remote
+catalog/download step can reuse the same boundaries.
+
+Plugin management is system-wide and administrator-only. The first installation
+of a catalog package creates one durable system-plugin record and one immutable
+package snapshot; later installations reuse that plugin identity and snapshot.
+Every installation has its own CUID2, variables, selected image, lifecycle, and
+dedicated container when it is a local stdio MCP. Remote MCP configuration is
+persisted and health-checked independently per installation. Ready MCP
+installations expose their tools to Rig as durable external functions on every
+agent submission. Happy executes each durable call against the originating
+installation and resolves the result back into the paused Rig run. This feature
+does not yet inject installed skills, and it does not yet implement upgrade,
+uninstall, marketplace download, or OAuth flows.
+
+Tool discovery is bounded to 15 seconds per agent submission, and one MCP tool
+execution is bounded to 30 seconds so a stalled plugin cannot indefinitely block
+turn submission or Rig's global event consumer. Before execution, Happy claims a
+45-second database lease keyed by Rig session and call ID. Other server instances
+wait for that lease or replay its completed result instead of concurrently
+invoking the same tool. The first terminal outcome, including an MCP error or
+timeout, is persisted and reused for every later event delivery; Happy does not
+automatically retry an ambiguous failure because the first request may already
+have produced an external side effect. A process crash after the MCP side effect
+but before the outcome is committed can still cause one lease-expiry replay, so
+plugin tools with external side effects should themselves be idempotent.
+
+Rig sessions use Full access so durable external functions are executable without
+an unresolved permission prompt. Agent code still runs inside Happy's dedicated,
+restricted OCI sandbox; plugin processes remain isolated in their own containers,
+and only Happy crosses the boundary after matching the durable function identity
+to a ready installation.
+
+## Package anatomy
+
+Each built-in package is a directory below `packages/happy2-server/plugins`:
+
+```text
+example-plugin/
+├── plugin.json
+├── plugin.png
+├── container/                 # optional; used by bundled stdio runtimes
+│   └── Dockerfile
+└── skills/                    # optional
+    └── example-skill/
+        ├── SKILL.md
+        ├── scripts/           # optional Agent Skills resources
+        ├── references/
+        └── assets/
+```
+
+`plugin.png` is required and must be a square PNG no larger than 4096×4096. A
+1024×1024 source is preferred; smaller square icons remain valid. Catalog
+validation calculates its byte size, dimensions, SHA-256 checksum, and
+thumbhash. When the plugin first enters the system, those fields are persisted
+on the plugin record and the exact PNG remains in the private package snapshot
+on the filesystem.
+
+Every direct child of `skills/` must follow the
+[Agent Skills specification](https://agentskills.io/specification). In
+particular, it needs `SKILL.md` with YAML frontmatter containing `name` and
+`description`; `name` must match the skill directory. Package loading rejects
+symlinks, unsafe relative paths, duplicate names, oversized packages, malformed
+frontmatter, and unexpected manifest fields before the catalog becomes
+available.
+
+`plugin.json` uses schema version 1:
+
+```json
+{
+    "schemaVersion": 1,
+    "version": "1.2.3",
+    "displayName": "Project Search",
+    "shortName": "project-search",
+    "description": "Searches source code and project documentation.",
+    "variables": [
+        {
+            "key": "PROJECT_API_TOKEN",
+            "displayName": "API token",
+            "description": "Token used by the MCP server.",
+            "kind": "secret"
+        },
+        {
+            "key": "PROJECT_REGION",
+            "displayName": "Region",
+            "description": "Region used for project queries.",
+            "kind": "text"
+        }
+    ]
+}
+```
+
+`version` uses `x.y.z` SemVer syntax. `shortName` is the stable catalog/package
+link and must match the package directory; it is not an installation identity.
+The durable system plugin and every installation receive separate CUID2 IDs.
+Variable keys are environment variable names. Every declared variable is
+required for each installation. Secret values are encrypted with AES-256-GCM
+and are never returned by catalog or installation reads; text values are stored
+as ordinary configuration. Both kinds are supplied to a stdio process as
+environment variables.
+
+A package must contain at least one skill or an `mcp` definition.
+
+The bundled `hello` package is the minimal skill-plus-MCP example. It declares no
+variables or MCP authentication, so an administrator can install it with an
+empty POST body; each call still creates a separate installation and bundled
+container.
+
+## Stdio MCP with a bundled container
+
+```json
+{
+    "mcp": {
+        "type": "stdio",
+        "command": "/plugin/bin/project-mcp",
+        "args": ["--stdio"],
+        "container": {
+            "dockerfile": "container/Dockerfile"
+        }
+    }
+}
+```
+
+The Dockerfile path is package-relative. Creating the durable system plugin
+copies the entire package once to `plugins.directory` before writing its
+database record. Each installation lifecycle builds or resolves that exact
+snapshot with the selected local Docker or Podman provider, using a
+content-addressed `happy2-plugin:<sha256>` tag. It then creates a dedicated,
+read-only container named from the installation CUID2, with `init`, all Linux capabilities
+dropped, privilege escalation disabled, bounded shared memory, and ephemeral
+`/tmp` and `/run` filesystems. Runtime resources are capped at 1 GiB of memory,
+one CPU, and 256 processes per plugin container.
+
+The resulting image must provide `/bin/sh`; Happy uses it only as the inert
+container keepalive before starting the manifest command with OCI `exec`. A
+bundled Dockerfile is responsible for copying or installing its MCP executable
+and dependencies into the image. The MCP command itself must use newline-
+delimited JSON-RPC on stdin/stdout and must not write non-protocol output to
+stdout.
+The fixed `HOME`, `TMPDIR`, and working directory are `/tmp`, so tools that
+need a cache can still run without making the image root writable.
+
+Each installation container stays alive as that installation's plugin runtime.
+Each HTTP MCP session starts
+the configured command with `docker exec`/`podman exec`; variables reach that
+process through Docker/Podman's environment-copy option. Values are never placed
+in command arguments, Happy's process environment, the long-lived container
+definition, or the image build; they exist only in the short-lived OCI CLI child
+and the MCP process. Variables that could alter the OCI client itself, such as
+`DOCKER_*`, proxy, loader, or executable-path settings, are rejected. Happy
+transparently bridges newline-delimited stdio JSON-RPC to MCP Streamable HTTP, so
+the plugin itself does not need an HTTP server.
+
+## Stdio MCP using a selected container image
+
+Omit `mcp.container` when the plugin does not bundle its own Dockerfile:
+
+```json
+{
+    "mcp": {
+        "type": "stdio",
+        "command": "npx",
+        "args": ["-y", "@example/project-mcp"]
+    }
+}
+```
+
+The install request must then include `containerImageId`. It must identify an
+agent image whose build status is already `ready`. The selected image belongs
+only to that installation and creates that installation's dedicated container;
+it does not share an agent container or another plugin installation's container.
+
+## Remote MCP
+
+```json
+{
+    "mcp": {
+        "type": "remote",
+        "url": "https://mcp.example.com/mcp",
+        "headers": {
+            "Authorization": "Bearer ${PROJECT_API_TOKEN}",
+            "X-Project-Region": "${PROJECT_REGION}"
+        }
+    }
+}
+```
+
+Remote URLs must be public HTTPS URLs without embedded credentials or fragments.
+Header templates may reference only declared variables. The health worker
+resolves templates in memory, rejects newline-bearing resolved values, applies
+the same public-address/DNS-rebinding policy used by outgoing webhooks, pins the
+approved destination address, and sends an MCP `initialize` request. The remote
+URL and templates are persisted; resolved secret headers are not.
+
+Remote MCP remains remote: Happy does not create a container or proxy its normal
+traffic. OAuth is intentionally unsupported. Authentication is limited to the
+custom static headers described above. Production remote requests are capped at
+1,000,000 bytes and responses at 256,000 bytes, matching the bounded webhook
+transport used for SSRF-safe address pinning.
+
+## Installation and lifecycle
+
+`POST /v0/admin/plugins/:shortName/installPlugin` accepts:
+
+```json
+{
+    "variables": {
+        "PROJECT_API_TOKEN": "secret value",
+        "PROJECT_REGION": "us-west"
+    },
+    "containerImageId": "optional-ready-image-id"
+}
+```
+
+The request body may be omitted when the manifest declares no variables and
+does not require a selected container image.
+
+`containerImageId` is required only for stdio manifests without a bundled
+container, and it is rejected in every other case. Unknown, missing, empty, or
+oversized variable values are rejected. The endpoint returns HTTP 202 after the
+durable system plugin (created once), immutable package/image snapshot, new
+installation, variables, audit entry, initial state, and sync event are durable.
+Calling it again for the same `shortName` creates another installation with a
+new CUID2 and its own parameters and runtime. Container preparation continues
+asynchronously.
+
+If the catalog later advertises an update, additional installations remain
+pinned to the existing system plugin's immutable manifest and package until an
+explicit upgrade action exists. Catalog reads therefore project the stored
+variable and MCP requirements for the install form while retaining the newer
+catalog version and `updateAvailable` indicator.
+
+An installation has one of these durable health states:
+
+- `preparing`: copying/reconciling package and image/container state.
+- `starting`: the container exists or remote endpoint is selected and MCP
+  initialization/health checking is in progress.
+- `ready`: the MCP server completed initialization and ping (local), or returned
+  a valid initialization response (remote). A skills-only plugin becomes ready
+  immediately after its durable install.
+- `broken_configuration`: stored variables, selected image state, manifest
+  material, or resolved headers cannot form a valid runtime configuration.
+- `failed`: package integrity, image build, container creation, process startup,
+  protocol health, DNS, or network execution failed. `lastError` contains bounded
+  diagnostic text.
+
+Every transition updates `plugin_installations`, appends a `plugin.*` sync
+event, and publishes the normal server SSE hint with the `plugins` area. Clients
+must reconcile the durable catalog after a hint; the event itself is not state.
+On server restart, every installation is reconciled again. Its package path and
+SHA-256 digest are revalidated first; local containers are then recreated from
+the installed snapshot, and remote endpoints are rechecked.
+
+## Read and MCP endpoints
+
+- `GET /v0/admin/plugins` lists the validated built-in catalog, requirements,
+  skill summaries, and MCP/container mode. When a catalog package exists in the
+  system, `systemPlugin` contains its CUID2, persisted image metadata and URL,
+  `updateAvailable`, and every independent installation with current health. It
+  requires an active server administrator and never returns configured values.
+- `GET /v0/admin/plugins/:shortName/icon` returns the package PNG to an active
+  server administrator using the catalog link.
+- `GET /v0/admin/systemPlugins` lists persisted system plugins independently of
+  the catalog, including image metadata and every linked installation.
+- `GET /v0/admin/systemPlugins/:pluginId/image` returns the persisted system
+  plugin PNG from its private filesystem snapshot after validating the package
+  digest, storage key, byte size, and image checksum.
+- `POST /v0/admin/plugins/:shortName/installPlugin` performs the durable install
+  and queues lifecycle work. It may be called any number of times; each call
+  creates a distinct installation linked to the same system plugin.
+- `GET|POST /v0/pluginInstallations/:installationId/mcp` is the authenticated
+  Streamable HTTP bridge for one ready local stdio installation. It follows MCP
+  session semantics via `Mcp-Session-Id`. Happy’s existing bearer session is
+  required; there is no plugin-specific OAuth exchange.
+
+The bridge allows at most 128 simultaneous sessions server-wide and 16 per
+authenticated user. Idle sessions close after 15 minutes; inbound requests and
+outbound server messages both renew that lifetime. A session is bound to the
+authenticated user who initialized it and cannot be reused by another user.
+
+Only GET and POST are exposed. MCP session DELETE is optional in the protocol
+and is not enabled by this API; server shutdown and transport closure clean up
+processes and sessions.
+
+## Persistence and future upgrades
+
+`plugins` records the durable CUID2, catalog short name, display metadata, source
+kind/reference and installed version, package SHA-256 digest, exact manifest,
+persistent snapshot directory, installer, and timestamps. Its image columns
+persist the filesystem storage key, content type, byte size, width, height,
+thumbhash, and SHA-256 checksum.
+
+`plugin_installations` records a separate CUID2 and foreign key to `plugins`,
+plus that instance's container/image choice, lifecycle state, error detail,
+installer, and timestamps. `plugin_installation_variables` records each declared
+value for one installation; secret rows contain authenticated ciphertext rather
+than plaintext. No installation uses `shortName` as identity.
+
+The built-in catalog and durable system plugin are deliberately independent.
+Persisted rows use `source_kind = 'builtin'` as their built-in marker. During
+startup, the server compares those rows with the current built-in catalog. If a
+bundle was removed from the server, its installations, encrypted variables,
+system-plugin row, private package/image snapshot, and any named local containers
+are removed before the remaining runtimes start. Remotely sourced plugins will
+not participate in this catalog-pruning rule.
+
+When the catalog contains a different digest for a persisted plugin's
+`shortName`, reads set `updateAvailable: true`; they do not mutate or restart its
+installations. A future upgrade action can download/validate a remote package
+into the same package abstraction, stage a new immutable package/image snapshot,
+and atomically replace the system plugin version before reconciling all linked
+installations. Until that action exists, upgrades are advertised only and the
+old snapshot continues to run.
+
+Configured installed-package storage:
+
+```toml
+[plugins]
+directory = "/var/lib/happy2/plugins"
+```
+
+The directory must be persistent and private. Plugin variables share the
+server’s generated recoverable-secret master key but use a plugin-specific
+authenticated-encryption context bound to the installation ID and variable key,
+so ciphertext cannot be replayed across integrations, installations, or fields.

package/packages/happy2-server/README.md

@@ -14,6 +14,10 @@ npx happy2-server --config ./happy2.toml
 # Published all-in-one web app and API on http://127.0.0.1:3000
 npx happy2
 
+# Install or remove automatic startup for the all-in-one app
+npx happy2 service start --config ./happy2.toml
+npx happy2 service stop
+
 # Development, with reload and no configuration file:
 pnpm dev:server
 
@@ -46,6 +50,27 @@ package never connects to the user's global Rig daemon. Provide
 `--config /path/to/happy2.toml` or
 `HAPPY2_CONFIG=/path/to/happy2.toml` to override the defaults.
 
+`happy2 service start` keeps the all-in-one app running across restarts. On
+macOS it installs `~/Library/LaunchAgents/com.slopus.happy2.plist` without
+`sudo`, starts at login, and writes logs under `~/Library/Logs/Happy2`. On Linux
+it writes `happy2.service` in the current directory, prints the complete unit,
+and prints the exact `sudo install` and `systemctl` commands required to install
+and enable it. The command never invokes `sudo`. The Linux unit is system-wide
+but runs the process as the user who generated it; logs go to the systemd
+journal. The generated file remains in the current directory for inspection or
+reinstallation. `happy2 service stop` directly stops and removes the macOS LaunchAgent,
+while on Linux it prints the `sudo` commands that stop, disable, and remove the
+systemd unit.
+
+The service preserves the installation-time working directory, `PATH`, and
+optional `RIG_HOME`. When `--config` is supplied, its path is made
+absolute before installation. Put service secrets and SMTP environment values
+in the private `.env` beside the TOML configuration rather than expecting an
+interactive shell environment to exist during boot. An npx invocation generates
+a service that runs `npx --yes happy2`, avoiding a dependency on the disposable
+`_npx` cache directory. A global installation resolves `happy2` from the saved
+`PATH`; regenerate and reinstall the service after changing that path.
+
 Clients can discover the selected authentication method at `GET /v0/auth/methods`.
 The response includes the server role, the durable `registration` availability
 (`bootstrap`, `open`, or `closed`), and one `method` value: `password`,
@@ -53,6 +78,9 @@ The response includes the server role, the durable `registration` availability
 Password responses also report the derived `signupEnabled`; OIDC responses report
 `oidcProvider`.
 
+The built-in plugin package, installation, container lifecycle, health, and MCP
+HTTP contracts are documented in [`PLUGINS.md`](./PLUGINS.md).
+
 ## Server and user onboarding
 
 Every new database begins with durable server onboarding. `GET /v0/setup/status`

package/packages/happy2-server/dist/index.d.ts

@@ -16,6 +16,7 @@ export { syncInitialize } from "./modules/sync/syncInitialize.js";
 export { AesGcmSecretProtector } from "./modules/integrations/secrets.js";
 export { NodeWebhookTransport } from "./modules/integrations/transport.js";
 export * from "./modules/integrations/types.js";
+export type { ResolvedWebhookUrl, WebhookUrlPolicy } from "./modules/integrations/ssrf.js";
 export * from "./modules/operations/types.js";
 export { FileStorage, type FileStorageFileSystem } from "./modules/files/storage.js";
 export * from "./modules/chat/types.js";
@@ -24,5 +25,10 @@ export * from "./modules/setup/index.js";
 export * from "./modules/sandbox/index.js";
 export { userOnboardingUpdateStep } from "./modules/user/userOnboardingUpdateStep.js";
 export * from "./modules/workspace/index.js";
+export * from "./modules/plugin/index.js";
+export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
+export type { PluginSecretProtector } from "./modules/plugin/secrets.js";
+export { PluginPackageStore } from "./modules/plugin/packageStore.js";
+export { SandboxPluginMcpRuntime, type PluginLocalOpenInput, type PluginLocalPrepareInput, type PluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer } from "./server.js";
 //# sourceMappingURL=index.d.ts.map

package/packages/happy2-server/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,YAAY,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,YAAY,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,GACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/index.js

@@ -21,5 +21,9 @@ export * from "./modules/setup/index.js";
 export * from "./modules/sandbox/index.js";
 export { userOnboardingUpdateStep } from "./modules/user/userOnboardingUpdateStep.js";
 export * from "./modules/workspace/index.js";
+export * from "./modules/plugin/index.js";
+export { AesGcmPluginSecretProtector } from "./modules/plugin/secrets.js";
+export { PluginPackageStore } from "./modules/plugin/packageStore.js";
+export { SandboxPluginMcpRuntime, } from "./modules/plugin/runtime.js";
 export { buildServer } from "./server.js";
 //# sourceMappingURL=index.js.map

package/packages/happy2-server/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../sources/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAC5F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAwB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,cAAc,iCAAiC,CAAC;AAEhD,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EAAE,WAAW,EAA8B,MAAM,4BAA4B,CAAC;AACrF,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAE1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACH,uBAAuB,GAI1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/packages/happy2-server/dist/modules/agents/daemon.d.ts

@@ -1,3 +1,5 @@
+import type { RegisterSecretRequest, ResolveExternalToolCallResponse, SecretSummary } from "@slopus/rig/dist/protocol/index.js";
+import type { ExternalToolCall, ExternalToolCallResolution, ExternalToolDefinition } from "@slopus/rig/dist/external-tools/index.js";
 export interface RigDaemonConfig {
     directory: string;
     socketPath: string;
@@ -11,7 +13,7 @@ interface RigBlock {
 interface RigMessage {
     role: "agent" | "system" | "user";
     id?: string;
-    blocks: RigBlock[];
+    blocks: readonly RigBlock[];
     usage?: RigUsage;
 }
 interface RigUsage {
@@ -21,16 +23,8 @@ export interface RigEffortConfiguration {
     effort: string;
     options: string[];
 }
-export interface RigSecretRegistration {
-    description: string;
-    environment: Record<string, string>;
-    id: string;
-}
-export interface RigSecretSummary {
-    description: string;
-    environmentVariables: string[];
-    id: string;
-}
+export type RigSecretRegistration = RegisterSecretRequest;
+export type RigSecretSummary = SecretSummary;
 export interface RigSessionSecretPlan {
     desiredSecretIds: readonly string[];
     managedSecretIds: readonly string[];
@@ -57,6 +51,7 @@ export interface RigEvent {
     data: {
         errorMessage?: string;
         event?: RigAgentLoopEvent;
+        call?: ExternalToolCall;
         message?: RigMessage;
         runId?: string;
     };
@@ -89,7 +84,8 @@ export declare class RigDaemonClient {
     }>;
     effortConfiguration(sessionId: string, signal?: AbortSignal): Promise<RigEffortConfiguration>;
     changeEffort(sessionId: string, effort: string, signal?: AbortSignal): Promise<RigEffortConfiguration>;
-    listSecrets(signal?: AbortSignal): Promise<RigSecretSummary[]>;
+    ensureFunctionPermission(sessionId: string, signal?: AbortSignal): Promise<void>;
+    listSecrets(signal?: AbortSignal): Promise<readonly RigSecretSummary[]>;
     registerSecret(secret: RigSecretRegistration, signal?: AbortSignal): Promise<RigSecretSummary>;
     unregisterSecret(secretId: string, signal?: AbortSignal): Promise<boolean>;
     reconcileSessionSecrets(sessionId: string, loadPlan: () => Promise<RigSessionSecretPlan>, signal?: AbortSignal): Promise<void>;
@@ -102,10 +98,11 @@ export declare class RigDaemonClient {
     }>;
     submittedTurnBaseline(sessionId: string, text: string, signal?: AbortSignal): Promise<number>;
     inspectTurn(sessionId: string, baselineMessageCount: number, text: string, signal?: AbortSignal): Promise<RigTurnInspection>;
-    submitTurn(sessionId: string, text: string, signal?: AbortSignal): Promise<{
+    submitTurn(sessionId: string, text: string, externalTools: readonly ExternalToolDefinition[], signal?: AbortSignal): Promise<{
         eventId: string;
         runId: string;
     }>;
+    resolveExternalToolCall(sessionId: string, callId: string, resolution: ExternalToolCallResolution, signal?: AbortSignal): Promise<ResolveExternalToolCallResponse>;
     private session;
     private connectedRequest;
     private ensureReady;

package/packages/happy2-server/dist/modules/agents/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../sources/modules/agents/daemon.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,QAAQ;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,UAAU;IAChB,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED,UAAU,QAAQ;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAqBD,MAAM,WAAW,sBAAsB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,EAAE,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAgB;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,EAAE,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACjC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,UAAU,iBAAiB;IACvB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED,UAAU,iBAAiB;IACvB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACF,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACL;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACvB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAExC,qBAAa,eAAe;IAKZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAoC;IACjF,OAAO,CAAC,KAAK,CAAC,CAAS;IACvB,OAAO,CAAC,KAAK,CAAC,CAAgB;IAE9B,YAA6B,MAAM,EAAE,eAAe,EAAI;IAElD,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhE;IAEK,aAAa,CACf,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAazC;IAEK,mBAAmB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAEjC;IAEK,YAAY,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAQjC;IAEK,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAQnE;IAEK,cAAc,CAChB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;IAEK,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/E;IAEK,uBAAuB,CACzB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAC7C,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,IAAI,CAAC,CAoCf;IAEK,iBAAiB,CACnB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,EACjD,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,IAAI,CAAC,CAsBf;IAEK,kBAAkB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,EAC3C,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;IAEK,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;IAEK,iBAAiB,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAMzD;IAEK,qBAAqB,CACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,MAAM,CAAC,CAOjB;IAEK,WAAW,CACb,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,EAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAiB5B;IAEK,UAAU,CACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAO7C;IAED,OAAO,CAAC,OAAO;YASD,gBAAgB;IAqB9B,OAAO,CAAC,WAAW;YAUL,OAAO;YAoBP,OAAO;IAYrB,OAAO,CAAC,OAAO;IAmFf,OAAO,CAAC,MAAM;IAuEd,OAAO,CAAC,aAAa;CAuExB;AAqFD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK3D"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../../sources/modules/agents/daemon.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAUR,qBAAqB,EAGrB,+BAA+B,EAC/B,aAAa,EAMhB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACR,gBAAgB,EAChB,0BAA0B,EAC1B,sBAAsB,EACzB,MAAM,0CAA0C,CAAC;AAElD,MAAM,WAAW,eAAe;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,QAAQ;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,UAAU;IAChB,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED,UAAU,QAAQ;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE1D,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACjC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,UAAU,iBAAiB;IACvB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,QAAQ,CAAC;CACpB;AAED,UAAU,iBAAiB;IACvB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,QAAQ;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACF,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,IAAI,CAAC,EAAE,gBAAgB,CAAC;QACxB,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACL;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACvB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAExC,qBAAa,eAAe;IAKZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAoC;IACjF,OAAO,CAAC,KAAK,CAAC,CAAS;IACvB,OAAO,CAAC,KAAK,CAAC,CAAgB;IAE9B,YAA6B,MAAM,EAAE,eAAe,EAAI;IAElD,sBAAsB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhE;IAEK,aAAa,CACf,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAgBzC;IAEK,mBAAmB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAEjC;IAEK,YAAY,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,sBAAsB,CAAC,CAQjC;IAEK,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CASrF;IAEK,WAAW,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAQ5E;IAEK,cAAc,CAChB,MAAM,EAAE,qBAAqB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;IAEK,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ/E;IAEK,uBAAuB,CACzB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,EAC7C,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,IAAI,CAAC,CAoCf;IAEK,iBAAiB,CACnB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,EACjD,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,IAAI,CAAC,CAsBf;IAEK,kBAAkB,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,EAC3C,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkB7B;IAEK,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E;IAEK,iBAAiB,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAMzD;IAEK,qBAAqB,CACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,MAAM,CAAC,CAOjB;IAEK,WAAW,CACb,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,EAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,iBAAiB,CAAC,CAiB5B;IAEK,UAAU,CACZ,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,SAAS,sBAAsB,EAAE,EAChD,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAO7C;IAEK,uBAAuB,CACzB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,0BAA0B,EACtC,MAAM,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,+BAA+B,CAAC,CAO1C;IAED,OAAO,CAAC,OAAO;YASD,gBAAgB;IAqB9B,OAAO,CAAC,WAAW;YAUL,OAAO;YAoBP,OAAO;IASrB,OAAO,CAAC,OAAO;IAmFf,OAAO,CAAC,MAAM;IAuEd,OAAO,CAAC,aAAa;CAuExB;AAqFD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK3D"}

package/packages/happy2-server/dist/modules/agents/daemon.js

@@ -13,14 +13,19 @@ export class RigDaemonClient {
         const current = await this.connectedRequest("GET", "/config", undefined, signal);
         if (current.config.settings.durableGlobalEventQueue)
             return;
-        await this.connectedRequest("PATCH", "/config", { settings: { durableGlobalEventQueue: true } }, signal);
+        await this.connectedRequest("PATCH", "/config", {
+            settings: { durableGlobalEventQueue: true },
+        }, signal);
     }
     async createSession(cwd, containerName, effort, signal) {
         const response = await this.connectedRequest("POST", "/sessions", {
             cwd,
             docker: { container: containerName, workingDirectory: "/workspace" },
             ...(effort ? { effort } : {}),
-            permissionMode: "workspace_write",
+            // Rig's durable external functions intentionally require Full access. The
+            // agent remains bounded by Happy's dedicated OCI sandbox and cannot reach
+            // the plugin process directly; Happy owns and resolves every function call.
+            permissionMode: "full_access",
         }, signal);
         return { id: response.session.id, effort: sessionEffort(response.session).effort };
     }
@@ -31,6 +36,12 @@ export class RigDaemonClient {
         const response = await this.connectedRequest("PATCH", `/sessions/${encodeURIComponent(sessionId)}/effort`, { effort }, signal);
         return sessionEffort(response.session);
     }
+    async ensureFunctionPermission(sessionId, signal) {
+        const current = await this.session(sessionId, signal);
+        if (current.permissionMode === "full_access")
+            return;
+        await this.connectedRequest("PATCH", `/sessions/${encodeURIComponent(sessionId)}/permissions`, { permissionMode: "full_access" }, signal);
+    }
     async listSecrets(signal) {
         const response = await this.connectedRequest("GET", "/secrets", undefined, signal);
         return response.secrets;
@@ -150,8 +161,11 @@ export class RigDaemonClient {
             kind: "failed",
         };
     }
-    async submitTurn(sessionId, text, signal) {
-        return this.connectedRequest("POST", `/sessions/${encodeURIComponent(sessionId)}/messages`, { text }, signal);
+    async submitTurn(sessionId, text, externalTools, signal) {
+        return this.connectedRequest("POST", `/sessions/${encodeURIComponent(sessionId)}/messages`, { text, externalTools }, signal);
+    }
+    async resolveExternalToolCall(sessionId, callId, resolution, signal) {
+        return this.connectedRequest("POST", `/sessions/${encodeURIComponent(sessionId)}/external-tool-calls/${encodeURIComponent(callId)}`, resolution, signal);
     }
     session(sessionId, signal) {
         return this.connectedRequest("GET", `/sessions/${encodeURIComponent(sessionId)}`, undefined, signal).then((response) => response.session);
@@ -203,7 +217,7 @@ export class RigDaemonClient {
     async healthy() {
         try {
             const health = await this.request("GET", "/health");
-            return health.healthy && health.ready;
+            return health.status === "ready";
         }
         catch {
             return false;