From e9050b3518d4b1912621fbb9d006777b420ee534 Mon Sep 17 00:00:00 2001
From: William Mantly <wmantly@gmail.com>
Date: Wed, 5 Aug 2026 03:02:30 -0400
Subject: [PATCH] fix: mount docker socket for the docker discovery plugin;
 roll up sso v1.28.0 + theta-agent v1.3.1 (v1.41.0)

- docker-compose: mount /var/run/docker.sock into sso-manager so the seeded
  docker-local plugin can list containers (was ENOENT -> 'Last run: error')
- gitlinks: sso-manager-node 49100c9 (v1.28.0), theta-agent 51750d0 (v1.3.1)
---
 CHANGELOG.md       | 6 ++++++
 docker-compose.yml | 4 ++++
 sso-manager-node   | 2 +-
 theta-agent        | 2 +-
 4 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index eac06db..6df8378 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,12 @@ orchestration code; see each submodule's own `CHANGELOG.md`
 [sso-manager-node](https://github.com/theta42/sso-manager-node/blob/master/CHANGELOG.md))
 for what changed inside the apps it composes.
 
+## [v1.41.0] - 2026-08-05
+
+### Fixed
+- **The Local Docker daemon discovery plugin no longer errors** — the sso-manager container had no access to the host docker socket, so the seeded `docker-local` plugin (socketPath `/var/run/docker.sock`) failed with `ENOENT` and showed "Last run: error". `docker-compose.yml` now mounts `/var/run/docker.sock` into the container. Recreate the container (`docker compose up -d sso-manager`) and hit "Run now" on the plugin.
+- **theta-agent ships the rebuilt binary with the heartbeat fix** (v1.3.1, gitlink `51750d0`) — the prebuilt `theta-agent-linux-amd64` predated the v1.3.0 `heartbeat_ack` fix, so the installed agent still logged "Unknown command type: heartbeat_ack". Now rebuilt + tested.
+
 ## [v1.40.0] - 2026-08-05
 
 ### Fixed
diff --git a/docker-compose.yml b/docker-compose.yml
index 9d8bf73..7e699bd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -81,6 +81,10 @@ services:
       - HTTPS_PROXY=${CFG_HTTPS_PROXY:-}
       - NO_PROXY=${CFG_NO_PROXY:-}
     volumes:
+      # The host docker socket so the bundled Docker discovery plugin (seeded as
+      # 'docker-local' with socketPath /var/run/docker.sock) can list containers.
+      # Without this the plugin errors with ENOENT and shows 'Last run: error'.
+      - /var/run/docker.sock:/var/run/docker.sock
       # Operator-edited SSO secrets (sso-secrets.js). Read-WRITE so the bootstrap
       # can write the generated OAuth client creds into proxy-secrets.js. The
       # entrypoint points CONF_SECRETS at /config/sso-secrets.js.
diff --git a/sso-manager-node b/sso-manager-node
index e8d0420..49100c9 160000
--- a/sso-manager-node
+++ b/sso-manager-node
@@ -1 +1 @@
-Subproject commit e8d04203c38b0d65d65826b68f2dbcc2010727db
+Subproject commit 49100c9b684fe5ff6eee693599e0f44555fd0402
diff --git a/theta-agent b/theta-agent
index 52379c2..51750d0 160000
--- a/theta-agent
+++ b/theta-agent
@@ -1 +1 @@
-Subproject commit 52379c24349fe8cedc5ce82bf8a080218e19a680
+Subproject commit 51750d01ecda985423bf595a4770dbd3a5cc3707