feat: members use the Built-In agent with their own keys; People admin; session renewal

apps/server/src/app.ts

@@ -42,6 +42,7 @@ import { resetExternalNoteSessions } from './modules/canvas/external-watcher.js'
 import externalNoteRoutes from './modules/canvas/external.route.js';
 import syncRoutes from './modules/canvas/sync.route.js';
 import { createIdentity, registerIdentity } from './modules/identity/index.js';
+import peopleRoutes from './modules/identity/people.route.js';
 import integrationsRoutes from './modules/integrations/integrations.route.js';
 import interactiveViewRoutes from './modules/interactive-view/interactive-view.route.js';
 import rfsRoutes from './modules/remote_fs/rfs.route.js';
@@ -59,6 +60,7 @@ import { registerSpaceAccess } from './modules/security/space-access.js';
 import serviceRoutes from './modules/services/services.route.js';
 import { closeStorage } from './modules/storage/index.js';
 import webRoutes from './modules/web/web.route.js';
+import { workspaceScopedRoutes } from './modules/workspace/scoped-routes.js';
 import { registerWorkspaceRequiredGuard } from './modules/workspace-required.js';
 import { initWorkspaceFromEnv } from './modules/workspace.js';
 import workspaceRoutes from './modules/workspace.route.js';
@@ -144,6 +146,10 @@ registerIdentity(app, {
 // An embedded Bubble serves its own API beside Huabu's, behind the same host,
 // origin and rate-limit guards; clients address it as `<origin>/bubble`.
 if (identity.bubble) app.register(identity.bubble, { prefix: '/bubble' });
+app.register(peopleRoutes, {
+  prefix: '/api/people',
+  service: identity.service,
+});
 
 // Register @fastify/static to enable `reply.sendFile()`.
 // Actual artifact serving uses a dynamic root resolved at request time
@@ -183,6 +189,10 @@ app.register(skillsRoutes, { prefix: '/api/skills' });
 app.register(workspaceRoutes, { prefix: '/api/workspace' });
 app.register(workspacesRoutes, { prefix: '/api/workspaces' });
 app.register(rfsRoutes, { prefix: '/api/rfs' });
+// An agent's reachback names the Workspace its run started in.
+app.register(workspaceScopedRoutes(rfsRoutes), {
+  prefix: '/api/rfs/w/:workspaceId',
+});
 
 // ── External agent (ACP) transport host ───────────────────────────────
 // Mount the Agenetes agentlet transport host (`@agenetes/agentlet-host`).

apps/server/src/modules/agent/acp/profiles.route.ts

@@ -33,6 +33,7 @@ import {
 } from '@agenetes/agentlet-host';
 
 import {
+  HUABU_AGENT_PROFILE_ID,
   agentProfileParamsSchema,
   createAcpProfileBodySchema,
   patchAgentProfileBodySchema,
@@ -52,6 +53,7 @@ import {
   readProfileCapabilities,
 } from './profile-capabilities.js';
 import { invalidateProfileSchemaCache } from './profile-schema-cache.js';
+import { personalSettingsOwner } from '../../identity/personal-settings.js';
 import { isOwnerRequest } from '../../security/owner.js';
 import {
   getAgentDefaults,
@@ -220,6 +222,17 @@ const acpProfilesRoutes: FastifyPluginAsync = async (app) => {
   app.get<{ Reply: ApiResult<AcpProfilesListResponse> }>(
     '/profiles',
     async (request, reply) => {
+      // A member runs the Built-In agent only: no external profile, device or
+      // daemon of the operator's is theirs to see.
+      if (personalSettingsOwner())
+        return {
+          profiles: [],
+          selectableProfileIds: [HUABU_AGENT_PROFILE_ID],
+          connectedDevices: [],
+          folderPickerAgentletId: null,
+          agentlet: getDaemonSupervisor().getStatus(),
+          agentDefaults: getAgentDefaults(),
+        };
       if (denyRemote(request, reply)) return;
       const registry = getAgentProfileRegistry();
       if (!registry) {

apps/server/src/modules/agent/acp/reachback-env.ts

@@ -9,7 +9,7 @@
  * host over the canvas-scoped Remote File System (RFS) and attribute its
  * change-review activity to the right conversation:
  *
- *   - `HUABU_RFS_URL`   — `<publicOrigin>/api/rfs/<canvasId>`,
+ *   - `HUABU_RFS_URL`   — `<publicOrigin>/api/rfs/w/<workspaceId>/<canvasId>`,
  *                          the canvas-scoped RFS base (capabilities / query /
  *                          download / upload / execute / agent / skill). Bakes the canvasId into the path
  *                          so the agent needs no separate canvas variable.
@@ -27,6 +27,7 @@
 
 import { getHostServerPort } from '../../../host-port.js';
 import { resolveConfiguredPublicOrigin } from '../../security/public-origin.js';
+import { getWorkspaceHandle } from '../../workspace.js';
 
 /**
  * Build the reachback env for an agent serving `threadId` in `canvasId`.
@@ -45,8 +46,11 @@ export function buildReachbackEnv(
       if (port > 0) origin = `http://127.0.0.1:${port}`;
     }
     if (origin) {
+      // Named so the run keeps its Workspace after its starter switches.
+      const workspaceId = getWorkspaceHandle()?.workspaceId;
+      const scope = workspaceId ? `w/${encodeURIComponent(workspaceId)}/` : '';
       env.HUABU_RFS_URL = new URL(
-        `/api/rfs/${encodeURIComponent(canvasId)}`,
+        `/api/rfs/${scope}${encodeURIComponent(canvasId)}`,
         origin,
       ).toString();
     }

apps/server/src/modules/agent/agent-defaults.route.ts

@@ -14,7 +14,7 @@ import {
 
 import { getProfileSchemaCache } from './acp/profile-schema-cache.js';
 import { getAgentDefaults, setAgentDefaults } from './agent-defaults.js';
-import { isOwnerRequest } from '../security/owner.js';
+import { canChangeOwnSettings } from '../security/owner.js';
 
 import type {
   AgentDefaults,
@@ -75,7 +75,7 @@ function projectDefaults(defaults: AgentDefaults): AgentDefaultsResponse {
 
 const agentDefaultsRoutes: FastifyPluginAsync = async (app) => {
   app.addHook('preHandler', async (request, reply) => {
-    if (!isOwnerRequest(request)) {
+    if (!canChangeOwnSettings(request)) {
       return reply.status(403).send({
         message:
           'Forbidden: Utility Agent settings require owner authorization',

apps/server/src/modules/agent/agent-defaults.ts

@@ -10,6 +10,10 @@ import { agentDefaultsSchema } from '@huabu/shared';
 
 import { getDataDir } from '../../data-dir.js';
 import { atomicWriteJson } from '../../utils/fs.js';
+import {
+  personalSettingsOwner,
+  settingsFilePath,
+} from '../identity/personal-settings.js';
 
 import type { AgentDefaults, AgentProfileView } from '@huabu/shared';
 
@@ -35,7 +39,9 @@ interface AgentDefaultsStorage {
 }
 
 function configPath(): string {
-  return join(getDataDir(), 'agent-defaults.json');
+  return personalSettingsOwner()
+    ? settingsFilePath('agent-defaults.json')
+    : join(getDataDir(), 'agent-defaults.json');
 }
 
 const diskStorage: AgentDefaultsStorage = {
@@ -125,9 +131,19 @@ export class AgentDefaultsService {
 }
 
 const service = new AgentDefaultsService();
-export const getAgentDefaults = (): AgentDefaults => service.getAgentDefaults();
+/**
+ * A member's own defaults always pick the Built-In agent: external agents run
+ * on the operator's machines under the operator's logins, so they stay the
+ * administrators'.
+ */
+export const getAgentDefaults = (): AgentDefaults => {
+  const defaults = service.getAgentDefaults();
+  return personalSettingsOwner()
+    ? { ...defaults, profileId: 'huabu' }
+    : defaults;
+};
 export const requireDefaultAgentProfileId = (): string =>
-  service.requireDefaultAgentProfileId();
+  personalSettingsOwner() ? 'huabu' : service.requireDefaultAgentProfileId();
 export const setAgentDefaults = (config: AgentDefaults): AgentDefaults =>
   service.setAgentDefaults(config);
 export const initializeAgentDefaults = (

apps/server/src/modules/agent/agent.route.ts

@@ -56,6 +56,7 @@ import {
 import { buildHistoryFromTurns } from '../agent/conversation/transcript/history.js';
 import { getLLMModel } from '../agent/llm.js';
 import { hydrateCanvasNodes } from '../canvas/canvas-executor.js';
+import { personalSettingsOwner } from '../identity/personal-settings.js';
 import { space } from '../storage/index.js';
 import { canvasAcpNamespace } from '../workspace/paths.js';
 
@@ -831,6 +832,14 @@ const agentRoutes: FastifyPluginAsync = async (
       agentTarget,
       fixedTarget,
     });
+    // External agents run on the operator's machines under the operator's
+    // logins and reach every Space through the shared machine credential, so
+    // a member runs the Built-In agent, with their own model keys.
+    if (effectiveBinding?.kind === 'external' && personalSettingsOwner())
+      return reply.code(403).send({
+        message: 'External agents are available to administrators only',
+        code: 'AGENT_ACCESS_REQUIRED',
+      });
     if (effectiveBinding?.kind === 'external') {
       request.log.info(
         {

apps/server/src/modules/agent/llm.route.ts

@@ -27,7 +27,7 @@ import {
   verifyOAuthCredentials,
 } from './oauth.js';
 import { getRootErrorMessage } from '../../utils/error-message.js';
-import { isOwnerRequest } from '../security/owner.js';
+import { canChangeOwnSettings } from '../security/owner.js';
 
 import type {
   ApiResult,
@@ -59,7 +59,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
   app.put<{ Body: LLMConfigUpdate; Reply: ApiResult<LLMConfig> }>(
     '/config',
     async (request, reply) => {
-      if (!isOwnerRequest(request)) {
+      if (!canChangeOwnSettings(request)) {
         return reply.status(403).send({
           message: 'Forbidden: LLM settings can only be changed from localhost',
         });
@@ -86,7 +86,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
   app.put<{ Body: LLMImageConfigUpdate; Reply: ApiResult<LLMImageConfig> }>(
     '/image-config',
     async (request, reply) => {
-      if (!isOwnerRequest(request)) {
+      if (!canChangeOwnSettings(request)) {
         return reply.status(403).send({
           message: 'Forbidden: LLM settings can only be changed from localhost',
         });
@@ -116,7 +116,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
   app.put<{ Body: LLMUtilityConfigUpdate; Reply: ApiResult<LLMUtilityConfig> }>(
     '/utility-config',
     async (request, reply) => {
-      if (!isOwnerRequest(request)) {
+      if (!canChangeOwnSettings(request)) {
         return reply.status(403).send({
           message: 'Forbidden: LLM settings can only be changed from localhost',
         });
@@ -165,7 +165,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
     Body: OAuthProviderBody;
     Reply: ApiResult<OAuthDeviceCodeResponse>;
   }>('/oauth/device-code', async (request, reply) => {
-    if (!isOwnerRequest(request)) {
+    if (!canChangeOwnSettings(request)) {
       return reply.status(403).send({ message: 'Forbidden' });
     }
 
@@ -191,7 +191,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
     Body: OAuthProviderBody;
     Reply: ApiResult<OAuthPollResponse>;
   }>('/oauth/poll', async (request, reply) => {
-    if (!isOwnerRequest(request)) {
+    if (!canChangeOwnSettings(request)) {
       return reply.status(403).send({ message: 'Forbidden' });
     }
 
@@ -234,7 +234,7 @@ const llmRoutes: FastifyPluginAsync = async (app) => {
     Body: OAuthProviderBody;
     Reply: ApiResult<OAuthLogoutResponse>;
   }>('/oauth/logout', async (request, reply) => {
-    if (!isOwnerRequest(request)) {
+    if (!canChangeOwnSettings(request)) {
       return reply.status(403).send({ message: 'Forbidden' });
     }