@openhands/agent-canvas 1.0.0-alpha.9 → 1.0.0-beta.1

package/scripts/dev-with-automation.mjs

@@ -134,6 +134,7 @@ function parseArgs() {
     dynamic: false,
     staticDir: null,
     skipBuild: false,
+    public: false,
   };
 
   for (let i = 0; i < args.length; i++) {
@@ -164,6 +165,9 @@ function parseArgs() {
       case "--skip-build":
         config.skipBuild = true;
         break;
+      case "--public":
+        config.public = true;
+        break;
       case "-h":
       case "--help":
         showHelp();
@@ -281,6 +285,18 @@ async function buildConfig(args, env = process.env) {
     env.OH_AUTOMATION_REPO = args.automationRepo;
   }
 
+  const isPublic = args.public;
+
+  // In public mode, LOCAL_BACKEND_API_KEY is required — without it the
+  // auth screen has nothing to validate against.
+  if (isPublic && !env.LOCAL_BACKEND_API_KEY) {
+    logError(
+      "PUBLIC MODE requires LOCAL_BACKEND_API_KEY environment variable.\n" +
+        "  Example: LOCAL_BACKEND_API_KEY=my-secret npm run dev -- --public",
+    );
+    process.exit(1);
+  }
+
   // Preferred ports (from env or defaults).
   // OH_CANVAS_SAFE_BACKEND_PORT / OH_CANVAS_SAFE_AUTOMATION_PORT /
   // OH_CANVAS_SAFE_VITE_PORT allow tests (and advanced users) to redirect
@@ -303,11 +319,14 @@ async function buildConfig(args, env = process.env) {
 
   const vscodePort = preferredBackendPort + 1000;
 
-  // Session API key — shared by both agent-server and automation backend.
+  // API key — shared by both agent-server and automation backend.
   // Both validate it via the `X-Session-API-Key` header.
+  // LOCAL_BACKEND_API_KEY is the single user-facing env var: if set it's
+  // used directly; otherwise one is auto-generated and persisted.
   const stateDir =
     env.OH_CANVAS_SAFE_STATE_DIR ||
     join(homedir(), ".openhands", "agent-canvas");
+
   const safeConfig = buildSafeDevConfig(projectRoot, {
     ...env,
     OH_CANVAS_SAFE_STATE_DIR: stateDir,
@@ -316,6 +335,19 @@ async function buildConfig(args, env = process.env) {
   });
   const sessionApiKey = safeConfig.sessionApiKey;
 
+  if (isPublic) {
+    logService(
+      "auth",
+      "PUBLIC MODE — key will NOT be injected into the frontend",
+      c.yellow,
+    );
+    logService(
+      "auth",
+      "Users must paste the LOCAL_BACKEND_API_KEY in the browser",
+      c.dim,
+    );
+  }
+
   return {
     // Ingress port (main entry point)
     ingressPort: preferredIngressPort,
@@ -335,6 +367,9 @@ async function buildConfig(args, env = process.env) {
     // Auth — single key for both backends
     sessionApiKey,
 
+    // Public mode — the session key should NOT be baked into the frontend
+    isPublic,
+
     verbose: args.verbose,
   };
 }
@@ -517,6 +552,9 @@ function startAgentServer(config) {
   const agentServerEnv = {
     ...buildAgentServerEnv(safeConfig),
     ...buildAgentServerAutomationEnv(config),
+    // Ensure the agent-server uses the resolved key from config. This is
+    // LOCAL_BACKEND_API_KEY when set, or the auto-generated persisted key.
+    OH_SESSION_API_KEYS_0: config.sessionApiKey,
   };
 
   spawnService(
@@ -726,22 +764,31 @@ function startVite(config) {
   const frontendCommand = buildNpmScriptCommand("dev:frontend");
   const runtimeServicesInfo = buildAutomationRuntimeServicesInfo(config);
 
+  const viteEnv = {
+    // Point Vite at the ingress (so client-side fetches work)
+    VITE_BACKEND_HOST: `127.0.0.1:${config.ingressPort}`,
+    VITE_BACKEND_BASE_URL: `http://127.0.0.1:${config.ingressPort}`,
+    VITE_WORKING_DIR:
+      config.viteWorkingDir ?? join(config.stateDir, "workspaces"),
+    VITE_FRONTEND_PORT: config.vitePort.toString(),
+    // Inform the frontend (and downstream, the agent's system prompt) about
+    // which services are available in this dev stack.
+    VITE_RUNTIME_SERVICES_INFO: JSON.stringify(runtimeServicesInfo),
+  };
+
+  // In local mode, bake the session key into the frontend so the user
+  // never has to paste it. In public mode, omit the key and set
+  // VITE_AUTH_REQUIRED so the frontend shows the API key entry screen
+  // immediately (no network round-trip needed).
+  if (config.isPublic) {
+    viteEnv.VITE_AUTH_REQUIRED = "true";
+  } else {
+    viteEnv.VITE_SESSION_API_KEY = config.sessionApiKey;
+  }
+
   spawnService("vite", frontendCommand.command, frontendCommand.args, {
     cwd: config.canvasPath,
-    env: {
-      // Point Vite at the ingress (so client-side fetches work)
-      VITE_BACKEND_HOST: `127.0.0.1:${config.ingressPort}`,
-      VITE_BACKEND_BASE_URL: `http://127.0.0.1:${config.ingressPort}`,
-      VITE_WORKING_DIR:
-        config.viteWorkingDir ?? join(config.stateDir, "workspaces"),
-      VITE_FRONTEND_PORT: config.vitePort.toString(),
-      // Session API key — used by the frontend for both agent-server and
-      // automation auth via the `X-Session-API-Key` header.
-      VITE_SESSION_API_KEY: config.sessionApiKey,
-      // Inform the frontend (and downstream, the agent's system prompt) about
-      // which services are available in this dev stack.
-      VITE_RUNTIME_SERVICES_INFO: JSON.stringify(runtimeServicesInfo),
-    },
+    env: viteEnv,
     color: c.magenta,
   });
 }
@@ -905,10 +952,18 @@ async function main(options = {}) {
     // Human-readable label for the dev mode, surfaced in the agent's
     // <RUNTIME_SERVICES> system-prompt block.
     mode = "dev:automation",
+    // When true, enable public mode (require LOCAL_BACKEND_API_KEY,
+    // don't bake session key into frontend).
+    isPublic: isPublicOverride,
   } = options;
 
   const args = parseArgs();
 
+  // Allow options to override CLI args for public mode
+  if (isPublicOverride != null) {
+    args.public = isPublicOverride;
+  }
+
   // Allow options to override CLI args (for bin/agent-canvas.mjs)
   const useStaticMode =
     staticModeOverride ??
@@ -1041,12 +1096,13 @@ function startStaticFrontend(config, staticDir) {
       "0.0.0.0",
       "--port",
       String(config.vitePort),
-      // Inject the runtime session key so the pre-built frontend can
-      // authenticate to agent-server without VITE_SESSION_API_KEY being baked
-      // into the bundle at publish time.
-      ...(config.sessionApiKey
+      // In local mode, inject the API key so the pre-built frontend can
+      // authenticate transparently. In public mode, pass --auth-required
+      // so the frontend shows the API key entry screen instead.
+      ...(!config.isPublic && config.sessionApiKey
         ? ["--session-api-key", config.sessionApiKey]
         : []),
+      ...(config.isPublic ? ["--auth-required"] : []),
       // Proxy routes to backends (same as ingress but for direct access to vitePort)
       "--route",
       `/api/automation=http://localhost:${config.autoBackendPort}`,

package/scripts/static-server.mjs

@@ -73,6 +73,7 @@ export function parseArgs(argv = process.argv.slice(2)) {
     dir: "build",
     routes: {},
     sessionApiKey: null,
+    authRequired: false,
   };
 
   for (let i = 0; i < argv.length; i++) {
@@ -108,6 +109,9 @@ export function parseArgs(argv = process.argv.slice(2)) {
       case "--session-api-key":
         config.sessionApiKey = argv[++i] || null;
         break;
+      case "--auth-required":
+        config.authRequired = true;
+        break;
       case "-h":
       case "--help":
         showHelp();
@@ -117,6 +121,19 @@ export function parseArgs(argv = process.argv.slice(2)) {
     }
   }
 
+  // Guard: --session-api-key and --auth-required are semantically
+  // mutually exclusive. The first auto-injects the key (local mode);
+  // the second forces the user to paste it (public mode). Combining
+  // both is a misconfiguration.
+  if (config.sessionApiKey && config.authRequired) {
+    console.error(
+      "ERROR: --session-api-key and --auth-required are mutually exclusive.\n" +
+        "  Use --session-api-key for local mode (key auto-injected).\n" +
+        "  Use --auth-required for public mode (user pastes key).",
+    );
+    process.exit(1);
+  }
+
   return config;
 }
 
@@ -136,6 +153,9 @@ OPTIONS:
   --session-api-key <key>      Inject session API key into index.html so the
                                pre-built frontend authenticates to agent-server
                                without needing VITE_SESSION_API_KEY baked in.
+  --auth-required              Inject authRequired flag into index.html so the
+                               pre-built frontend shows the API key entry screen
+                               (public mode) without VITE_AUTH_REQUIRED baked in.
   -h, --help                   Show this help
 
 ROUTING:
@@ -152,39 +172,55 @@ ROUTING:
 // ─────────────────────────────────────────────────────────────────────────────
 
 /**
- * Build a tiny inline script that seeds the session API key into the
- * `openhands-agent-server-config` localStorage entry the first time the page
- * loads. Only writes if no key is already stored — explicit user overrides
- * (set via Settings > Agent Server in the UI) are always preserved.
+ * Build a tiny inline script that seeds runtime config into the page.
+ *
+ * - `sessionApiKey`: written to `openhands-agent-server-config` in localStorage
+ *   so the pre-built frontend authenticates without VITE_SESSION_API_KEY baked in.
+ *   Only writes if no key is already stored — explicit user overrides are preserved.
  *
- * This lets the pre-built static binary work without needing VITE_SESSION_API_KEY
- * baked into the bundle at publish time: the runtime key is injected here instead.
+ * - `authRequired`: sets `window.__AGENT_CANVAS_AUTH_REQUIRED__ = true` so the
+ *   pre-built frontend shows the API key entry screen (public mode) without
+ *   VITE_AUTH_REQUIRED baked in.
  */
-function makeConfigInjectionScript(sessionApiKey) {
-  if (!sessionApiKey) return "";
-  // JSON.stringify produces a properly escaped JS string literal.
-  const keyLiteral = JSON.stringify(sessionApiKey);
-  return (
-    `<script>` +
-    `(function(){` +
-    `try{` +
-    `var _k='openhands-agent-server-config',` +
-    `_c=JSON.parse(localStorage.getItem(_k)||'{}');` +
-    `if(!_c.sessionApiKey){` +
-    `_c.sessionApiKey=${keyLiteral};` +
-    `localStorage.setItem(_k,JSON.stringify(_c));` +
-    `}` +
-    `}catch(e){}` +
-    `}());` +
-    `</script>`
-  );
+function makeConfigInjectionScript(sessionApiKey, authRequired) {
+  const parts = [];
+
+  if (sessionApiKey) {
+    const keyLiteral = JSON.stringify(sessionApiKey);
+    // Always overwrite when the stored key differs from the runtime key.
+    // A previous session may have persisted a now-stale key; the runtime
+    // value (from --session-api-key) is the server's truth.
+    parts.push(
+      `try{` +
+        `var _k='openhands-agent-server-config',` +
+        `_c=JSON.parse(localStorage.getItem(_k)||'{}');` +
+        `if(_c.sessionApiKey!==${keyLiteral}){` +
+        `_c.sessionApiKey=${keyLiteral};` +
+        `localStorage.setItem(_k,JSON.stringify(_c));` +
+        `}` +
+        `}catch(e){}`,
+    );
+  }
+
+  if (authRequired) {
+    parts.push(`window.__AGENT_CANVAS_AUTH_REQUIRED__=true;`);
+  }
+
+  if (parts.length === 0) return "";
+
+  return `<script>(function(){${parts.join("")}}());</script>`;
 }
 
 /**
- * Serve index.html with the runtime session key injected into <head>.
+ * Serve index.html with runtime config injected into <head>.
  * Returns true if the response was written, false if the file was not found.
  */
-async function serveInjectedIndexHtml(req, res, indexPath, sessionApiKey) {
+async function serveInjectedIndexHtml(
+  req,
+  res,
+  indexPath,
+  { sessionApiKey, authRequired } = {},
+) {
   let content;
   try {
     content = await readFile(indexPath, "utf8");
@@ -192,7 +228,7 @@ async function serveInjectedIndexHtml(req, res, indexPath, sessionApiKey) {
     return false;
   }
 
-  const script = makeConfigInjectionScript(sessionApiKey);
+  const script = makeConfigInjectionScript(sessionApiKey, authRequired);
   // Inject right before </head> so the key is available before any app code runs.
   // replace() targets the first (and only) </head> in well-formed HTML.
   const injected = content.includes("</head>")
@@ -393,7 +429,7 @@ async function serveFile(req, res, filePath, urlPath) {
   return true;
 }
 
-async function handleStatic(req, res, dirAbs, sessionApiKey = null) {
+async function handleStatic(req, res, dirAbs, injectionOpts = {}) {
   const rawPath = req.url.split("?")[0];
   let urlPath;
   try {
@@ -417,9 +453,12 @@ async function handleStatic(req, res, dirAbs, sessionApiKey = null) {
     filePath = resolve(filePath, "index.html");
   }
 
-  // Serve index.html with runtime key injection when a session key is configured.
-  if (sessionApiKey && filePath.endsWith("index.html")) {
-    if (await serveInjectedIndexHtml(req, res, filePath, sessionApiKey)) return;
+  const needsInjection =
+    injectionOpts.sessionApiKey || injectionOpts.authRequired;
+
+  // Serve index.html with runtime config injection when configured.
+  if (needsInjection && filePath.endsWith("index.html")) {
+    if (await serveInjectedIndexHtml(req, res, filePath, injectionOpts)) return;
     // Fall through to regular serveFile (handles 404 path correctly).
   }
 
@@ -431,8 +470,8 @@ async function handleStatic(req, res, dirAbs, sessionApiKey = null) {
     !looksLikeAssetRequest(urlPath)
   ) {
     const indexPath = resolve(dirAbs, "index.html");
-    if (sessionApiKey) {
-      if (await serveInjectedIndexHtml(req, res, indexPath, sessionApiKey))
+    if (needsInjection) {
+      if (await serveInjectedIndexHtml(req, res, indexPath, injectionOpts))
         return;
     } else if (await serveFile(req, res, indexPath, "/")) return;
   }
@@ -448,7 +487,10 @@ async function handleStatic(req, res, dirAbs, sessionApiKey = null) {
 export function startStaticServer(config) {
   const route = createRouter(config.routes);
   const dirAbs = resolve(config.dir);
-  const sessionApiKey = config.sessionApiKey || null;
+  const injectionOpts = {
+    sessionApiKey: config.sessionApiKey || null,
+    authRequired: config.authRequired || false,
+  };
 
   const server = createServer((req, res) => {
     const backend = route(req.url);
@@ -456,7 +498,7 @@ export function startStaticServer(config) {
       proxyRequest(req, res, backend);
       return;
     }
-    handleStatic(req, res, dirAbs, sessionApiKey).catch((err) => {
+    handleStatic(req, res, dirAbs, injectionOpts).catch((err) => {
       console.error(`Static handler error for ${req.url}:`, err);
       if (!res.headersSent) {
         res.writeHead(500);

package/tools/canvas_ui_tool.py

@@ -90,7 +90,11 @@ When to call (pick the most specific option that matches your last action):
     command="open_tab", tab="terminal"
 
 * You browsed to a URL the user should see →
+    First call browser_get_state(include_screenshot=true) after your final
+    browser interaction so Agent Canvas has a screenshot to display, then call
     command="open_tab", tab="browser"
+    (browser_navigate alone only updates the URL; without browser_get_state,
+    the Browser tab will open without a screenshot.)
 
 Call this BEFORE writing your chat-message summary of the change, so the
 artifact is visible while the user reads what you did. One canvas_ui call

package/build/assets/acp-providers-DauuOsW9.js

@@ -1 +0,0 @@
-import{t as e}from"./declaration-D378OjpZ.js";import{t}from"./vendor~root-layout~home~conversation-panel~conversation~launch~extensions-hub~skills-settin~dp08i1qy-CHrEOFl6.js";var n=`cli-generic`,r=new Set([`default`,`default (recommended)`]);function i(e){if(typeof e!=`string`)return null;let t=e.trim();return!t||r.has(t.toLowerCase())||t===`acp-managed`?null:t}function a(e){for(let t of[e.runtimeName,e.runtimeId,e.configured,e.sdkLlm]){let e=i(t);if(e)return e}return e.providerDefault??null}var o={"claude-code":{icon:`claude-code`,description_key:e.ONBOARDING$AGENT_CLAUDE_CODE_DESCRIPTION},codex:{icon:`codex`,description_key:e.ONBOARDING$AGENT_CODEX_DESCRIPTION},"gemini-cli":{icon:`gemini`,description_key:e.ONBOARDING$AGENT_GEMINI_CLI_DESCRIPTION}},s=Object.entries(o).map(([e,n])=>{let r=t(e);return{key:e,display_name:r?.display_name??e,default_command:r?[...r.default_command]:[],available_models:r?.available_models?.map(e=>({id:e.id,label:e.label})),default_model:r?.default_model??void 0,description_key:n.description_key,icon:n.icon}}),c=`custom`;function l(e){if(e)return s.find(t=>t.key===e)}function u(e){let t=l(e);return t?t.display_name:null}function d(e){return l(e)?.icon??`cli-generic`}function f(e,t){return t?l(e)?.available_models?.find(e=>e.id===t)?.label??t:null}function p(e,t={}){if(e===`openhands`)return{agent_kind:`openhands`};let n=e===c,r=n?void 0:l(e);if(!n&&!r&&!t.allowUnknownServer)return null;let i=t.model===void 0?r?.default_model??null:t.model;return{agent_kind:`acp`,acp_server:e,acp_command:t.command??[],acp_args:[],acp_model:i??null}}export{l as a,d as c,p as i,a as l,s as n,u as o,n as r,f as s,c as t};

package/build/assets/add-backend-modal-FsnpTTgO.js

@@ -1 +0,0 @@
-import{r as e}from"./rolldown-runtime-BFRubm34.js";import{o as t}from"./declaration-D378OjpZ.js";import{n}from"./backend-form-modal-DxYjqqAK.js";var r=e({AddBackendModal:()=>a}),i=t();function a({onClose:e}){return(0,i.jsx)(n,{mode:`add`,onClose:e})}export{r as n,a as t};

package/build/assets/agent-server-client-options-DT2GP6VJ.js

@@ -1 +0,0 @@
-var e=`openhands-agent-server-config`,t=`workspace/project`;function n(){if(typeof window>`u`)return{};try{let t=window.localStorage.getItem(e);return t?JSON.parse(t)??{}:{}}catch{return{}}}function r(e){return e?.trim()||null}function i(e){if(!e)return null;let t=e.trim().replace(/\/$/,``);return t?/^https?:\/\//i.test(t)?t:typeof window<`u`?`${window.location.protocol}//${t}`:`http://${t}`:null}function a(){return i(n().baseUrl)||i(void 0)}function o(){return r(n().sessionApiKey)||r(void 0)}function s(e){if(typeof window>`u`)return!1;try{let t=new URL(e),n=new Set([`127.0.0.1`,`localhost`,`0.0.0.0`]),r=window.location.hostname;return n.has(t.hostname)&&!n.has(r)}catch{return!1}}function c(e){return e?s(e)?window.location.origin:e:null}function l(){return c(a())||(typeof window<`u`?window.location.origin:`http://127.0.0.1:8000`)}function u(){return o()}function d(){return(void 0)?.trim()||n().workingDir?.trim()||t}function f(e){return`${d().replace(/\/+$/,``)}/${e.replace(/-/g,``)}`}function p(){let e=u();return e?{"X-Session-API-Key":e}:{}}function m(){return!0}var h=`default-local`,g=`Local`;function _(){return{id:h,name:g,host:l(),apiKey:u()??``,kind:`local`}}var v=`openhands-backends`,y=`openhands-active-backend`;function b(e){return e===`local`||e===`cloud`}function x(e){if(typeof e!=`object`||!e)return!1;let t=e;return typeof t.id==`string`&&t.id.length>0&&typeof t.name==`string`&&typeof t.host==`string`&&typeof t.apiKey==`string`&&b(t.kind)}function S(e){try{return new URL(e).origin}catch{return e.replace(/\/+$/,``)}}function C(e){let t=_();return e.id!==t.id||e.kind!==`local`||!t.apiKey||S(e.host)!==S(t.host)||e.apiKey===t.apiKey?e:{...e,apiKey:t.apiKey}}function w(e){if(!(typeof window>`u`))try{window.localStorage.setItem(v,JSON.stringify(e))}catch{}}function T(){if(typeof window>`u`)return[];try{let e=window.localStorage.getItem(v);if(e===null){let e=[_()];return w(e),e}let t=JSON.parse(e);if(!Array.isArray(t))return[];let n=t.filter(x);if(n.length===0){let e=[_()];return w(e),e}let r=n.map(C);return r.some((e,t)=>e!==n[t])&&w(r),r}catch{return[]}}function E(){if(typeof window>`u`)return null;try{let e=window.localStorage.getItem(y);if(!e)return null;let t=JSON.parse(e);if(typeof t!=`object`||!t||typeof t.backendId!=`string`)return null;let n=t.orgId;return{backendId:t.backendId,orgId:typeof n==`string`&&n.length>0?n:null}}catch{return null}}function D(e){if(!(typeof window>`u`))try{if(!e){window.localStorage.removeItem(y);return}window.localStorage.setItem(y,JSON.stringify({backendId:e.backendId,orgId:e.orgId??null}))}catch{}}function O(e){return e.find(e=>e.kind===`local`)??_()}function k(e,t){let n=null,r=null;if(t){let i=e.find(e=>e.id===t.backendId);i&&(n=i,r=t.orgId??null)}return n||(n=O(e),r=null),{backends:e,selection:t,active:{backend:n,orgId:r}}}var A=k(T(),E()),j=new Set;function M(){j.forEach(e=>e())}function N(){return A.active}function P(){let e=A.active.backend;return e.kind===`local`?e:O(A.backends)}function F(){return A.backends}function I(){return A.selection}function L(){return A}function R(e){D(e),A=k(A.backends,e),M()}function z(e){w(e);let t=A.selection;t&&!e.some(e=>e.id===t.backendId)&&(t=null,D(null)),A=k(e,t),M()}function B(e){return j.add(e),()=>{j.delete(e)}}var V=class extends Error{constructor(e,t,n,r){super(r||`HTTP ${e}: ${t}`),this.status=e,this.statusText=t,this.response=n,this.name=`HttpError`}},H=class{constructor(e){this.baseUrl=e.baseUrl.replace(/\/$/,``),this.apiKey=e.apiKey,this.timeout=e.timeout||6e4}async request(e){let t=e.url.startsWith(`/`)?e.url.slice(1):e.url,n=new URL(t,this.baseUrl+`/`);e.params&&Object.entries(e.params).forEach(([e,t])=>{t!=null&&(Array.isArray(t)?t.forEach(t=>n.searchParams.append(e,String(t))):n.searchParams.append(e,String(t)))});let r={"Content-Type":`application/json`,...e.headers};this.apiKey&&(r[`X-Session-API-Key`]=this.apiKey);let i={method:e.method,headers:r,signal:AbortSignal.timeout(e.timeout||this.timeout)};e.credentials&&(i.credentials=e.credentials),e.data&&e.method!==`GET`&&(e.data instanceof FormData?(delete r[`Content-Type`],i.body=e.data):i.body=JSON.stringify(e.data));try{let t=await fetch(n.toString(),i);if(!(e.acceptableStatusCodes?.has(t.status)||!e.acceptableStatusCodes&&t.ok)){let e;try{e=t.headers.get(`content-type`)?.includes(`application/json`)?await t.json():await t.text()}catch{e=null}throw new V(t.status,t.statusText,e,`HTTP request failed (${t.status} ${t.statusText}): ${JSON.stringify(e)}`)}let r=await this.parseResponse(t,e.responseType||`auto`),a={};return t.headers.forEach((e,t)=>{a[t]=e}),{data:r,status:t.status,statusText:t.statusText,headers:a}}catch(t){throw t instanceof V?t:t instanceof Error?t.name===`AbortError`?Error(`Request timeout after ${e.timeout||this.timeout}ms`,{cause:t}):Error(`Request failed: ${t.message}`,{cause:t}):Error(`Unknown request error`,{cause:t})}}async parseResponse(e,t){return t===`json`?await e.json():t===`text`?await e.text():t===`blob`?await e.blob():t===`arrayBuffer`?await e.arrayBuffer():e.headers.get(`content-type`)?.includes(`application/json`)?await e.json():await e.text()}async get(e,t){return this.request({method:`GET`,url:e,...t})}async post(e,t,n){return this.request({method:`POST`,url:e,data:t,...n})}async put(e,t,n){return this.request({method:`PUT`,url:e,data:t,...n})}async patch(e,t,n){return this.request({method:`PATCH`,url:e,data:t,...n})}async delete(e,t){return this.request({method:`DELETE`,url:e,...t})}close(){}};function U(e){if(e&&!e.startsWith(`/`))try{let t=new URL(e),n=t.hostname,r=window.location.hostname??window.location.host?.split(`:`)[0];return r&&(n===`localhost`||n===`127.0.0.1`)&&r!==`localhost`&&r!==`127.0.0.1`?`${r}:${t.port}`:t.host}catch{return window.location.host}return window.location.host}function W(e){if(e&&!e.startsWith(`/`))try{return(new URL(e).pathname.split(`/api/conversations`)[0]||``).replace(/\/$/,``)}catch{return``}return``}function G(e){let t=U(e),n=W(e);return`${window.location.protocol===`https:`?`https:`:`http:`}//${t}${n}`}function K(e){if(!e||e.startsWith(`/`))return null;try{return new URL(e).protocol}catch{return null}}function q(e,t){let n=U(e),r=W(e),i=window.location.protocol===`https:`,a=K(e)===`https:`,o=`${i||a?`wss:`:`ws:`}//${n}${r}/sockets/bash-events`;return t?`${o}?session_api_key=${encodeURIComponent(t)}`:o}function J(e,t){if(!e)return null;let n=U(t),r=W(t),i=window.location.protocol===`https:`,a=K(t)===`https:`;return`${i||a?`wss:`:`ws:`}//${n}${r}/sockets/events/${e}`}function Y(e){return e.replace(/\/+$/,``)}function X(e,t){return e.host?Y(e.host):e.conversationUrl?Y(G(e.conversationUrl)):Y(t.host)}function Z(e={}){let t=P(),n=u(),r=t.id===`default-local`?n:null,i=e.sessionApiKey??e.apiKey??r??t.apiKey??void 0;return{host:X(e,t),...i?{apiKey:i}:{},workingDir:e.workingDir??d(),...e.timeout===void 0?{}:{timeout:e.timeout}}}function Q(e){let{host:t,apiKey:n,timeout:r}=Z(e);return{baseUrl:t,...n?{apiKey:n}:{},timeout:r??6e4}}export{m as C,d as S,_,J as a,p as b,N as c,F as d,L as f,h as g,B as h,G as i,I as l,z as m,Q as n,H as o,R as p,q as r,V as s,Z as t,P as u,t as v,u as x,f as y};

package/build/assets/agent-server-compatibility-2aOx5iWd.js

@@ -1 +0,0 @@
-import{t as e,u as t}from"./agent-server-client-options-DT2GP6VJ.js";import{t as n}from"./server-client-C3mC8Hl3.js";var r=5e3,i=null,a=e=>Array.isArray(e?.usable_tools)?e.usable_tools:null,o=class extends Error{details;constructor(e){super(`Agent server not found. Could not connect to the configured agent server. Start a compatible agent server and reload the page.`),this.name=`AgentServerUnavailableError`,this.details=e??null}},s=e=>e instanceof o||typeof e==`object`&&!!e&&`name`in e&&e.name===`AgentServerUnavailableError`;function c(){i=null}function l(e){let t=a(i);return Array.isArray(t)?t.includes(e):!0}function u(e){return e instanceof Error&&e.name===`HttpError`&&`status`in e&&typeof e.status==`number`}async function d(){let a=t(),s;try{s=await new n(e({host:a.host,sessionApiKey:a.apiKey||null,timeout:r})).getServerInfo()}catch(e){throw c(),u(e)?e:new o(e instanceof Error?e.message:null)}return i=s,s}export{s as n,d as r,l as t};

package/build/assets/agent-server-conversation-service.api-BZmUqtiO.js

@@ -1,5 +0,0 @@
-const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/secrets-service-Bwd5DeUs.js","assets/rolldown-runtime-BFRubm34.js","assets/agent-server-client-options-DT2GP6VJ.js","assets/settings-client-CwjfwoiB.js","assets/proxy-CurRmrqf.js","assets/vendor~root-layout~home~conversation-panel~conversation~launch~extensions-hub~skills-settin~pfbaerbd-zhv9fooy.js"])))=>i.map(i=>d[i]);
-import{t as e}from"./preload-helper-CT1Z6Pdu.js";import{C as t,S as n,c as r,i,o as a,s as o,t as s,u as c,y as l}from"./agent-server-client-options-DT2GP6VJ.js";import{n as u,s as d,u as f}from"./vendor~root-layout~home~conversation-panel~conversation~launch~extensions-hub~skills-settin~dp08i1qy-CHrEOFl6.js";import{t as p}from"./profiles-client-BGkKEV9j.js";import{t as m}from"./agent-server-compatibility-2aOx5iWd.js";import{n as h,t as g}from"./proxy-CurRmrqf.js";import{t as _}from"./settings-D5am1n6X.js";import{t as ee}from"./common-SMkEaBSr.js";import{a as v,l as y}from"./acp-providers-DauuOsW9.js";import{t as b}from"./settings-service.api-FvJGK45W.js";var x=class{constructor(e){this.host=e.host.replace(/\/$/,``),this.apiKey=e.apiKey,this.client=new a({baseUrl:this.host,apiKey:this.apiKey,timeout:e.timeout||6e4})}async createConversation(e){return(await this.client.post(`/api/conversations`,e)).data}async searchConversations(e={}){return(await this.client.get(`/api/conversations/search`,{params:e})).data}async countConversations(e={}){return(await this.client.get(`/api/conversations/count`,{params:e})).data}async getConversations(e){return(await this.client.get(`/api/conversations`,{params:{ids:e}})).data}async getConversation(e){return(await this.client.get(`/api/conversations/${e}`)).data}async searchEvents(e,t={}){return(await this.client.get(`/api/conversations/${e}/events/search`,{params:t})).data}async getEvent(e,t){return(await this.client.get(`/api/conversations/${e}/events/${t}`)).data}async getEvents(e,t){return Promise.all(t.map(async t=>{try{return await this.getEvent(e,t)}catch(e){if(e instanceof o&&e.status===404)return null;throw e}}))}async sendEvent(e,t,n={}){await this.client.post(`/api/conversations/${e}/events`,{...t,...n.run===void 0?{}:{run:n.run}})}async pauseConversation(e){return(await this.client.post(`/api/conversations/${e}/pause`,{})).data}async interruptConversation(e){return(await this.client.post(`/api/conversations/${e}/interrupt`,{})).data}async runConversation(e){return(await this.client.post(`/api/conversations/${e}/run`,{})).data}async askAgent(e,t){return(await this.client.post(`/api/conversations/${e}/ask_agent`,{question:t})).data}async getEventCount(e,t={}){return(await this.client.get(`/api/conversations/${e}/events/count`,{params:t})).data}async respondToConfirmation(e,t){return(await this.client.post(`/api/conversations/${e}/events/respond_to_confirmation`,t)).data}async getAgentFinalResponse(e){return(await this.client.get(`/api/conversations/${e}/agent_final_response`)).data}async setConfirmationPolicy(e,t){let n=`policy`in t?t:{policy:t};return(await this.client.post(`/api/conversations/${e}/confirmation_policy`,n)).data}async condenseConversation(e){return(await this.client.post(`/api/conversations/${e}/condense`,{})).data}async setSecurityAnalyzer(e,t){let n=te(t)?t:{security_analyzer:t};return(await this.client.post(`/api/conversations/${e}/security_analyzer`,n)).data}async updateSecrets(e,t){return(await this.client.post(`/api/conversations/${e}/secrets`,t)).data}async forkConversation(e,t={},n={}){return(await this.client.post(`/api/conversations/${e}/fork`,t,{params:n.includeSkills===void 0?void 0:{include_skills:n.includeSkills}})).data}async switchProfile(e,t){await this.client.post(`/api/conversations/${e}/switch_profile`,{profile_name:t})}async switchLLM(e,t){await this.client.post(`/api/conversations/${e}/switch_llm`,{llm:t})}async switchAcpModel(e,t){await this.client.post(`/api/conversations/${e}/switch_acp_model`,{model:t})}async deleteConversation(e){await this.client.delete(`/api/conversations/${e}`)}async updateConversation(e,t){return(await this.client.patch(`/api/conversations/${e}`,t)).data}close(){this.client.close()}};function te(e){return typeof e==`object`&&!!e&&`security_analyzer`in e}var S=[];for(let e=0;e<256;++e)S.push((e+256).toString(16).slice(1));function ne(e,t=0){return(S[e[t+0]]+S[e[t+1]]+S[e[t+2]]+S[e[t+3]]+`-`+S[e[t+4]]+S[e[t+5]]+`-`+S[e[t+6]]+S[e[t+7]]+`-`+S[e[t+8]]+S[e[t+9]]+`-`+S[e[t+10]]+S[e[t+11]]+S[e[t+12]]+S[e[t+13]]+S[e[t+14]]+S[e[t+15]]).toLowerCase()}var re=new Uint8Array(16);function ie(){return crypto.getRandomValues(re)}function ae(e,t,n){return!t&&!e&&crypto.randomUUID?crypto.randomUUID():oe(e,t,n)}function oe(e,t,n){e||={};let r=e.random??e.rng?.()??ie();if(r.length<16)throw Error(`Random bytes length must be >= 16`);if(r[6]=r[6]&15|64,r[8]=r[8]&63|128,t){if(n||=0,n<0||n+16>t.length)throw RangeError(`UUID byte range ${n}:${n+15} is out of buffer bounds`);for(let e=0;e<16;++e)t[n+e]=r[e];return t}return ne(r)}var C=`openhands-agent-server-conversation-metadata`,w=()=>{if(typeof window>`u`)return{};try{let e=window.localStorage.getItem(C);if(!e)return{};let t=JSON.parse(e);return!t||typeof t!=`object`?{}:t}catch{return{}}},T=e=>{if(!(typeof window>`u`)){if(Object.keys(e).length===0){window.localStorage.removeItem(C);return}window.localStorage.setItem(C,JSON.stringify(e))}},E=e=>w()[e]??null,D=(e,t)=>{let n=w();n[e]=t,T(n)},O=e=>{let t=w();e in t&&(delete t[e],T(t))};function k(e){if(!e?.id)return e;let t=E(e.id);return t?{...e,selected_repository:e.selected_repository??t.selected_repository??null,selected_branch:e.selected_branch??t.selected_branch??null,git_provider:e.git_provider??t.git_provider??null,selected_workspace:e.selected_workspace??t.selected_workspace??null}:e}function A(){let e=r().backend;if(e.kind!==`cloud`)throw Error(`Cloud conversations call requires a cloud backend.`);return e}async function se(e=20,t){let n=A(),r=new URLSearchParams;r.set(`limit`,String(e)),t&&r.set(`page_id`,t),r.set(`sort_order`,`UPDATED_AT_DESC`);let i=await g({backend:n,method:`GET`,path:`/api/v1/app-conversations/search?${r.toString()}`});return{items:(i?.items??[]).map(e=>k(e)),next_page_id:i?.next_page_id??null}}async function j(e){if(e.length===0)return[];let t=A(),n=new URLSearchParams;for(let t of e)n.append(`ids`,t);return(await g({backend:t,method:`GET`,path:`/api/v1/app-conversations?${n.toString()}`})??[]).map(k)}async function ce(e){return await g({backend:A(),method:`POST`,path:`/api/v1/app-conversations`,body:e})}async function le(e){return g({backend:A(),method:`GET`,path:`/api/v1/app-conversations/${e}/download`,responseType:`blob`})}async function ue(e){await g({backend:A(),method:`DELETE`,path:`/api/v1/app-conversations/${e}`})}async function de(e,t){return await g({backend:A(),method:`PATCH`,path:`/api/v1/app-conversations/${e}`,body:{public:t}})}async function fe(e){await g({backend:A(),method:`POST`,path:`/api/v1/sandboxes/${e}/pause`})}async function pe(e){await g({backend:A(),method:`POST`,path:`/api/v1/sandboxes/${e}/resume`})}async function me(e,t){let n=A(),r=new URLSearchParams;return r.append(`file_path`,t),await g({backend:n,method:`GET`,path:`/api/v1/app-conversations/${e}/file?${r.toString()}`})??``}async function he(e){let t=A(),n=new URLSearchParams;return n.set(`ids`,e),(await g({backend:t,method:`GET`,path:`/api/v1/app-conversations/start-tasks?${n.toString()}`}))?.[0]??null}var M=`canvas_ui`,ge=`canvas_ui_tool`,_e=[`terminal`,`file_editor`,`task_tracker`,M],N=`browser_tool_set`,P=`task_tool_set`;function ve(){return!0}function ye(){let e=(void 0)?.trim();if(!e)return null;try{let t=JSON.parse(e);return!t||typeof t!=`object`?null:t}catch{return null}}function be(){let e=ye();if(!e?.services)return;let t=[];t.push(`<RUNTIME_SERVICES>`),e.mode?t.push(`You are running inside an agent-canvas dev stack started in '${e.mode}' mode.`):t.push(`You are running inside an agent-canvas dev stack.`),t.push(`The following services are reachable from your sandbox. URLs are written`,`from your point of view (i.e., as you should curl/fetch them).`,``);let{agent_server:n,ingress:r,automation:i}=e.services,a=e.services.frontend??e.services.vite;n?.url_from_agent&&t.push(`* Agent Server (you): ${n.url_from_agent}`,`    ${n.description??`The agent-server hosting your tool calls.`}`),r?.url_from_agent&&t.push(`* Ingress: ${r.url_from_agent}`,`    ${r.description??`Unified entry point for browser-facing traffic.`}`),a?.url_from_agent&&t.push(`* Frontend: ${a.url_from_agent}`,`    ${a.description??`Frontend dev server.`}`),i?.url_from_agent?(t.push(`* Automation backend: ${i.url_from_agent}`,`    ${i.description??`OpenHands Automations service.`}`),i.docs_url&&t.push(`    Docs:    ${i.docs_url}`),i.openapi_url&&t.push(`    OpenAPI: ${i.openapi_url}`),i.auth_env_var&&t.push(`    Auth:    header 'X-API-Key: $${i.auth_env_var}'`)):t.push(`* Automation backend: not running in this dev mode (skip /api/automation calls).`);let o=n?.url_from_agent;return t.push(``,`Trust this block over guessing: do not assume any other URLs are running.`),o&&t.push(`In particular, ${o} inside your sandbox is the Agent Server`,`you are running inside of — NOT the automation backend.`),t.push(`</RUNTIME_SERVICES>`),t.join(`
-`)}function xe(e){let{host:t}=s();return`${t}/api/conversations/${e}`}function F(e){return`Conversation ${e.slice(0,5)}`}function I(e){let t=E(e.id),r=e.agent?.kind===`ACPAgent`,i=r?e.tags?.acpserver??null:null;return{id:e.id,created_by_user_id:null,selected_repository:t?.selected_repository??null,selected_branch:t?.selected_branch??null,git_provider:t?.git_provider??null,selected_workspace:t?.selected_workspace??null,title:e.title?.trim()?e.title:F(e.id),trigger:null,pr_number:[],agent_kind:r?`acp`:`openhands`,acp_server:i,llm_model:r?y({runtimeName:e.current_model_name,runtimeId:e.current_model_id,configured:e.agent?.acp_model,sdkLlm:e.agent?.llm?.model}):e.agent?.llm?.model??_.llm_model,metrics:e.metrics?{accumulated_cost:e.metrics.accumulated_cost??null,max_budget_per_task:e.metrics.max_budget_per_task??null,accumulated_token_usage:e.metrics.accumulated_token_usage?{prompt_tokens:e.metrics.accumulated_token_usage.prompt_tokens??0,completion_tokens:e.metrics.accumulated_token_usage.completion_tokens??0,cache_read_tokens:e.metrics.accumulated_token_usage.cache_read_tokens??0,cache_write_tokens:e.metrics.accumulated_token_usage.cache_write_tokens??0,context_window:e.metrics.accumulated_token_usage.context_window??0,per_turn_token:e.metrics.accumulated_token_usage.per_turn_token??0}:null}:null,created_at:e.created_at,updated_at:e.updated_at,execution_status:e.execution_status??ee.IDLE,sandbox_status:e.sandbox_status??null,conversation_url:xe(e.id),session_api_key:s().apiKey??null,sandbox_id:null,workspace:{working_dir:e.workspace?.working_dir??n()},public:!1,sub_conversation_ids:[]}}function Se(e){return{items:e.items.map(I),next_page_id:e.next_page_id??null}}var L=[`acp_command`,`acp_args`,`acp_env`,`acp_model`,`acp_session_mode`,`acp_prompt_timeout`],Ce=`acpserver`,we=new Set([`schema_version`,`agent_settings`,`workspace`,`conversation_id`,`initial_message`,`plugins`]);function R(e){return!e||typeof e!=`object`||Array.isArray(e)?{}:structuredClone(e)}function z(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function Te(e){return e.confirmation_mode===!0?e.security_analyzer===`llm`?{kind:`ConfirmRisky`,threshold:`HIGH`,confirm_unknown:!0}:{kind:`AlwaysConfirm`}:{kind:`NeverConfirm`}}function Ee(e){switch(e.security_analyzer){case`llm`:return{kind:`LLMSecurityAnalyzer`};case`pattern`:return{kind:`PatternSecurityAnalyzer`};case`policy_rail`:return{kind:`PolicyRailSecurityAnalyzer`};default:return}}function De(e){return!!e&&typeof e==`object`&&!Array.isArray(e)&&typeof e.name==`string`}function B(e,t){return e===N?ve()&&m(e):e===P?t.enable_sub_agents===!0&&m(e):!0}function Oe(e){let t=new Map;for(let e of _e)t.set(e,{name:e,params:{}});for(let n of[N,P])B(n,e)&&t.set(n,{name:n,params:{}});let n=e.tools;if(Array.isArray(n)&&n.every(e=>De(e)))for(let r of n)B(r.name,e)&&t.set(r.name,{name:r.name,params:R(r.params)});return Array.from(t.values())}function ke(e,t){let n=[e?.trim(),t?.trim()].filter(Boolean);return n.length===0?null:{role:`user`,content:[{type:`text`,text:n.join(`
-
-`)}],run:!0}}function V(e){let n=be();return{...R(e.agent_context),load_public_skills:t(),load_user_skills:!0,load_project_skills:!0,...n?{system_message_suffix:n}:{}}}function H(e){return R(e.agent_settings).agent_kind===`acp`}function Ae(e){let t=R(e.agent_settings).acp_server;return typeof t==`string`&&t.length>0?t:void 0}function je(e){let t=e.acp_command;if(!(Array.isArray(t)&&t.length===0)&&t!==void 0)return t;let n=v(typeof e.acp_server==`string`?e.acp_server:void 0);return n?[...n.default_command]:t}function Me(e){let t=R(e.agent_settings),n={agent_kind:`acp`,agent_context:V(t)};for(let e of L){if(e===`acp_model`)continue;let r=e===`acp_command`?je(t):t[e];r!=null&&(n[e]=r)}let r=v(typeof t.acp_server==`string`?t.acp_server:void 0),i=y({configured:t.acp_model,providerDefault:r?.default_model});return i&&(n.acp_model=i),n}function Ne(e){let t=R(e.agent_settings),n=R(t.llm);n.model=typeof n.model==`string`?n.model:_.llm_model;let r=z(n.api_key);r?n.api_key=r:delete n.api_key;let i=z(n.base_url);i?n.base_url=i:delete n.base_url;let a=R(t.mcp_config);(Object.keys(a).length===0||!(`mcpServers`in a))&&delete t.mcp_config,delete t.acp_server;for(let e of L)delete t[e];return{...t,llm:n,agent_context:V(t),tools:Oe(t)}}function Pe(e){return H(e)?Me(e):Ne(e)}function Fe(e){let{settings:t,query:r,conversationInstructions:i,plugins:a,workingDir:o}=e,s=R(t.conversation_settings),c=ke(r,i);return we.forEach(e=>delete s[e]),{...s,workspace:{kind:`LocalWorkspace`,working_dir:o??n()},...c?{initial_message:c}:{},...a?.length?{plugins:a.map(e=>({source:e.source,...e.ref?{ref:e.ref}:{},...e.repo_path?{repo_path:e.repo_path}:{}}))}:{}}}function Ie(e){let t=e.encryptedAgentSettings?{...e.settings,agent_settings:e.encryptedAgentSettings}:e.settings,n=H(t),r=Pe(t),i=n?Ae(t):void 0,a=Fe(e.encryptedConversationSettings?{...e,settings:{...e.settings,conversation_settings:e.encryptedConversationSettings}}:e),o={agent_settings:r,workspace:a.workspace,confirmation_policy:Te(a),max_iterations:typeof a.max_iterations==`number`?a.max_iterations:500,stuck_detection:!0,autotitle:!0,worktree:!0};i&&(o.tags={[Ce]:i}),e.secretsEncrypted&&(o.secrets_encrypted=!0),e.conversationId&&(o.conversation_id=e.conversationId);let s=Ee(a);if(s&&(o.security_analyzer=s),a.initial_message&&(o.initial_message=a.initial_message),a.plugins&&(o.plugins=a.plugins),a.hook_config&&(o.hook_config=a.hook_config),o.tool_module_qualnames={[M]:ge,...a.tool_module_qualnames??{}},a.agent_definitions&&(o.agent_definitions=a.agent_definitions),e.customSecrets&&e.customSecrets.length>0){let t=h(c()),r={};for(let n of e.customSecrets){let e={kind:`LookupSecret`,url:`/api/settings/secrets/${encodeURIComponent(n.name)}`,description:n.description};Object.keys(t).length>0&&(e.headers=t),r[n.name]=e}o.secrets=r,n&&(o.agent_settings.agent_context={...o.agent_settings.agent_context,secrets:r})}return o}async function Le(t){let{SecretsService:n}=await e(async()=>{let{SecretsService:e}=await import(`./secrets-service-Bwd5DeUs.js`).then(e=>e.n);return{SecretsService:e}},__vite__mapDeps([0,1,2,3,4,5])),[r,i]=await Promise.all([b.getSettingsForConversation(),n.getSecrets()]),{agentSettings:a,conversationSettings:o,secretsEncrypted:s}=r;return Ie({...t,encryptedAgentSettings:a,encryptedConversationSettings:o,secretsEncrypted:s,customSecrets:i})}function Re(){return{hooks:[]}}var ze=`1970-01-01T00:00:00.000Z`,Be=`Unable to load conversations because the selected agent server returned data this UI does not understand. Check the backend URL/session key and update the agent server if needed.`,Ve=`Unable to switch LLM profiles because the selected agent server returned profile data this UI does not understand. Check the backend URL/session key and update the agent server if needed.`;function U(){return Error(Be)}function W(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function He(e){return W(e)&&typeof e.model==`string`}function G(e){return typeof e==`number`?e:null}function K(e){return typeof e==`number`?e:0}function q(e){return typeof e==`string`?e:null}function J(e,t,n){let r=e[t]??e[n];return typeof r==`string`&&r.trim()?r:ze}function Ue(e){return W(e)?{prompt_tokens:K(e.prompt_tokens),completion_tokens:K(e.completion_tokens),cache_read_tokens:K(e.cache_read_tokens),cache_write_tokens:K(e.cache_write_tokens),context_window:K(e.context_window),per_turn_token:K(e.per_turn_token)}:null}function Y(e){return W(e)?{accumulated_cost:G(e.accumulated_cost),max_budget_per_task:G(e.max_budget_per_task),accumulated_token_usage:Ue(e.accumulated_token_usage)}:null}function We(e){if(!W(e))return null;let t=W(e.llm)?{model:q(e.llm.model)}:null;return{kind:q(e.kind),acp_model:q(e.acp_model),llm:t}}function Ge(e){return W(e)?{working_dir:q(e.working_dir)}:null}function Ke(e){if(!W(e))return null;let t={};for(let[n,r]of Object.entries(e))typeof r==`string`&&(t[n]=r);return t}function X(e){if(!e.startsWith(`/`))return null;let t=[];for(let n of e.split(`/`))if(n&&n!==`.`)if(n===`..`){if(!t.length)return null;t.pop()}else t.push(n);return`/${t.join(`/`)}`}function Z(e,t){let n=X(e),r=X(t);if(!n||!r||n!==r&&!n.startsWith(`${r}/`))throw Error(`Conversation file path must stay inside the workspace`);return n}function Q(e){if(!W(e)||typeof e.id!=`string`||!e.id.trim())throw U();return{id:e.id.trim(),title:q(e.title),created_at:J(e,`created_at`,`createdAt`),updated_at:J(e,`updated_at`,`updatedAt`),execution_status:q(e.execution_status),sandbox_status:q(e.sandbox_status),metrics:Y(e.metrics),agent:We(e.agent),workspace:Ge(e.workspace),tags:Ke(e.tags),current_model_id:q(e.current_model_id),current_model_name:q(e.current_model_name)}}function $(e){if(!Array.isArray(e))throw U();return e.map(Q)}function qe(e){if(Array.isArray(e))return{items:$(e),next_page_id:null};if(!W(e))throw U();return{items:$(e.items),next_page_id:typeof e.next_page_id==`string`?e.next_page_id:null}}var Je=new Set([`idle`,`running`,`paused`,`waiting_for_confirmation`,`finished`,`error`,`stuck`]);function Ye(e){let t=e??`idle`;return Je.has(t)?t:`idle`}function Xe(e,t){if(!e)throw Error(`Conversation ${t} was not found`);return e}var Ze=class{static async sendMessage(e,t,n){let a=r().backend,o=n?.conversationUrl??null,c=n?.sessionApiKey??null;if(a.kind===`cloud`){if(!o||!c){let[t]=await j([e]);o=t?.conversation_url?.trim()??null,c=t?.session_api_key?.trim()??null}if(!o||!c)throw Error(`Conversation sandbox is still starting. Wait for it to finish, then try again.`);return await g({backend:a,method:`POST`,hostOverride:i(o),path:`/api/conversations/${e}/events`,body:{...t,run:!0},authMode:`session-api-key`,sessionApiKey:c}),t}return await new x(s({conversationUrl:o,sessionApiKey:c})).sendEvent(e,t,{run:!0}),t}static async createConversation(e,t,n,i,a,o,u,d){if(r().backend.kind===`cloud`)return ce({initial_message:e?{role:`user`,content:[{type:`text`,text:e}]}:null,title:t??null,selected_repository:i?.selected_repository??null,selected_branch:i?.selected_branch??null,git_provider:i?.git_provider??null,plugins:n??null,parent_conversation_id:o??null,agent_type:u,sandbox_id:d??null});let f=await b.getSettings(),p=ae(),m=await Le({settings:f,query:e,conversationInstructions:t,plugins:n,conversationId:p,workingDir:a??l(p)}),h=await new x(s()).createConversation(m);return(i?.selected_repository||a)&&D(h.id,{selected_repository:i?.selected_repository??null,selected_branch:i?.selected_branch??null,git_provider:i?.git_provider??null,selected_workspace:a??null}),{id:h.id,created_by_user_id:null,status:`READY`,detail:null,app_conversation_id:h.id,agent_server_url:c().host,request:{initial_message:m.initial_message,plugins:n??null},created_at:h.created_at,updated_at:h.updated_at}}static async getStartTask(e){return r().backend.kind===`cloud`?he(e):null}static async getVSCodeUrl(e,t,n){let r=await this.resolveConversationWorkingDir(e);return{vscode_url:await new d(s({conversationUrl:t,sessionApiKey:n})).getUrl({baseUrl:typeof window<`u`?window.location.origin:void 0,workspaceDir:r})}}static async resolveConversationWorkingDir(e){let[t]=await this.batchGetAppConversations([e]);return t?.workspace?.working_dir??n()}static async batchGetAppConversations(e){return e.length===0?[]:r().backend.kind===`cloud`?j(e):$(await new x(s()).getConversations(e)).map(e=>I(e))}static async updateConversationPublicFlag(e,t){if(r().backend.kind!==`cloud`)throw Error(`Public sharing requires a cloud backend.`);return de(e,t)}static async updateConversationRepository(e,t,n,r){t?D(e,{...E(e)??{},selected_repository:t,selected_branch:n??null,git_provider:r??null}):O(e);let[i]=await this.batchGetAppConversations([e]);return Xe(i,e)}static async readConversationFile(e,t){if(r().backend.kind===`cloud`)return me(e,Z(t??`/workspace/project/.agents_tmp/PLAN.md`,`/workspace/project`));let n=await this.resolveConversationWorkingDir(e),i=Z(t??`${n}/.agents_tmp/PLAN.md`,n);return new f(s()).downloadTextFile(i)}static async downloadConversation(e){return r().backend.kind===`cloud`?le(e):new f(s()).downloadTrajectory(e)}static async getHooks(e){return Re()}static async getRuntimeConversation(e,t,n){let a=r().backend,o=a.kind===`cloud`&&t?await g({backend:a,method:`GET`,hostOverride:i(t),path:`/api/conversations/${e}`,authMode:`session-api-key`,sessionApiKey:n}):await new x(s({conversationUrl:t,sessionApiKey:n})).getConversation(e),c=Q(o),l=W(o)?o.stats:null;return{id:c.id,title:c.title?.trim()?c.title:F(c.id),metrics:Y(c.metrics),created_at:c.created_at,updated_at:c.updated_at,status:Ye(c.execution_status),stats:W(l)?l:{usage_to_metrics:{}}}}static async searchConversations(e=20,t){return r().backend.kind===`cloud`?se(e,t):Se(qe(await new x(s()).searchConversations({limit:e,page_id:t,sort_order:u.UPDATED_AT_DESC})))}static async deleteConversation(e){r().backend.kind===`cloud`?await ue(e):await new x(s()).deleteConversation(e),O(e)}static async updateConversationTitle(e,t){await new x(s()).updateConversation(e,{title:t});let[n]=await this.batchGetAppConversations([e]);return Xe(n,e)}static async switchProfile(e,t){if(r().backend.kind===`cloud`)throw Error(`LLM profile switching is only supported for local agent-server backends.`);let n=new p(s());if(!e){await n.activateProfile(t);return}let i=await n.getProfile(t,{exposeSecrets:`encrypted`});if(!He(i.config))throw Error(Ve);await new x(s()).switchLLM(e,i.config)}static async switchAcpModel(e,t){if(r().backend.kind===`cloud`)throw Error(`ACP model switching is only supported for local agent-server backends.`);await new x(s()).switchAcpModel(e,t)}};export{E as a,pe as i,j as n,ae as o,fe as r,x as s,Ze as t};

package/build/assets/browser-store-C3AqxAO7.js

@@ -1 +0,0 @@
-import{t as e}from"./react-Do0CT17Y.js";var t={url:`https://github.com/OpenHands/OpenHands`,screenshotSrc:``},n=e(e=>({...t,setUrl:t=>e({url:t}),setScreenshotSrc:t=>e({screenshotSrc:t}),reset:()=>e(t)}));export{n as t};

package/build/assets/browser-tab-B_BuTvrO.js

@@ -1 +0,0 @@
-import{a as e}from"./rolldown-runtime-BFRubm34.js";import{t}from"./react-CM_dJw1Z.js";import{o as n,t as r}from"./declaration-D378OjpZ.js";import{t as i}from"./useTranslation-CpIcQBq6.js";import{t as a}from"./use-conversation-id-DajhCn2A.js";import{t as o}from"./browser-store-C3AqxAO7.js";import{t as s}from"./vendor~browser-tab-BiVxfjJo.js";import{t as c}from"./conversation-tab-empty-state-D8dNvo-V.js";var l=e(t(),1),u=n();function d({src:e}){let{t}=i(`openhands`);return(0,u.jsx)(`img`,{src:e,className:`rounded-xl object-contain w-full h-auto`,alt:t(r.BROWSER$SCREENSHOT_ALT)})}function f(){let{t:e}=i(`openhands`);return(0,u.jsx)(c,{icon:(0,u.jsx)(s,{}),children:e(r.BROWSER$NO_PAGE_LOADED)})}function p(){let{url:e,screenshotSrc:t,reset:n}=o(),{conversationId:r}=a();(0,l.useEffect)(()=>{n()},[r,n]);let i=t?.startsWith(`data:image/png;base64,`)?t:`data:image/png;base64,${t??``}`;return(0,u.jsxs)(`div`,{className:`h-full w-full flex flex-col text-[var(--oh-muted)]`,children:[(0,u.jsx)(`div`,{className:`w-full p-2 truncate border-b border-[var(--oh-border)]`,children:e}),(0,u.jsx)(`div`,{className:`overflow-y-auto grow scrollbar-hide rounded-xl`,children:t?(0,u.jsx)(d,{src:i}):(0,u.jsx)(f,{})})]})}function m(){return(0,u.jsx)(p,{})}export{m as default};