@openhands/agent-canvas 1.0.0-beta.5 → 1.0.0-beta.7

package/dist/api/conversation-service/agent-server-conversation-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-conversation-service.api.js","names":[],"sources":["../../../src/api/conversation-service/agent-server-conversation-service.api.ts"],"sourcesContent":["import { ConversationSortOrder } from \"@openhands/typescript-client\";\nimport {\n  ConversationClient,\n  FileClient,\n  ProfilesClient,\n  VSCodeClient,\n} from \"@openhands/typescript-client/clients\";\nimport { v4 as uuidv4 } from \"uuid\";\nimport { Provider } from \"#/types/settings\";\nimport type { ConversationRuntimeContext } from \"#/api/conversation-file-upload.api\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport {\n  buildConversationWorkingDir,\n  getAgentServerWorkingDir,\n} from \"../agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n} from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport {\n  batchGetCloudConversations,\n  createCloudAppConversation,\n  deleteCloudConversation,\n  downloadCloudConversation,\n  getCloudAppConversationStartTask,\n  readCloudConversationFile,\n  searchCloudConversations,\n  updateCloudConversationPublicFlag,\n} from \"../cloud/conversation-service.api\";\nimport {\n  DirectConversationInfo,\n  buildStartConversationRequestWithEncryptedSettings,\n  emptyHooksResponse,\n  getDefaultConversationTitle,\n  toAppConversation,\n  toConversationPage,\n} from \"../agent-server-adapter\";\nimport { GetVSCodeUrlResponse } from \"../open-hands.types\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport SettingsService from \"../settings-service/settings-service.api\";\nimport {\n  ConversationMetadata,\n  getStoredConversationMetadata,\n  removeStoredConversationMetadata,\n  setStoredConversationMetadata,\n} from \"../conversation-metadata-store\";\nimport type {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  AppConversationStartRequest,\n  AppConversationStartTask,\n  MetricsSnapshot,\n  RuntimeConversationInfo,\n  SendMessageRequest,\n  SendMessageResponse,\n} from \"./agent-server-conversation-service.types\";\n\nconst DEFAULT_CONVERSATION_TIMESTAMP = \"1970-01-01T00:00:00.000Z\";\nconst INVALID_CONVERSATION_RESPONSE_MESSAGE =\n  \"Unable to load conversations because the selected agent server returned \" +\n  \"data this UI does not understand. Check the backend URL/session key and \" +\n  \"update the agent server if needed.\";\nfunction invalidConversationResponse(): Error {\n  return new Error(INVALID_CONVERSATION_RESPONSE_MESSAGE);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction numberOrNull(value: unknown): number | null {\n  return typeof value === \"number\" ? value : null;\n}\n\nfunction numberOrZero(value: unknown): number {\n  return typeof value === \"number\" ? value : 0;\n}\n\nfunction stringOrNull(value: unknown): string | null {\n  return typeof value === \"string\" ? value : null;\n}\n\nfunction readTimestamp(\n  item: Record<string, unknown>,\n  snakeKey: \"created_at\" | \"updated_at\",\n  camelKey: \"createdAt\" | \"updatedAt\",\n): string {\n  const value = item[snakeKey] ?? item[camelKey];\n  return typeof value === \"string\" && value.trim()\n    ? value\n    : DEFAULT_CONVERSATION_TIMESTAMP;\n}\n\nfunction normalizeTokenUsage(\n  value: unknown,\n): NonNullable<MetricsSnapshot[\"accumulated_token_usage\"]> | null {\n  if (!isRecord(value)) return null;\n\n  return {\n    prompt_tokens: numberOrZero(value.prompt_tokens),\n    completion_tokens: numberOrZero(value.completion_tokens),\n    cache_read_tokens: numberOrZero(value.cache_read_tokens),\n    cache_write_tokens: numberOrZero(value.cache_write_tokens),\n    context_window: numberOrZero(value.context_window),\n    per_turn_token: numberOrZero(value.per_turn_token),\n  };\n}\n\nfunction normalizeMetrics(value: unknown): MetricsSnapshot | null {\n  if (!isRecord(value)) return null;\n\n  return {\n    accumulated_cost: numberOrNull(value.accumulated_cost),\n    max_budget_per_task: numberOrNull(value.max_budget_per_task),\n    accumulated_token_usage: normalizeTokenUsage(value.accumulated_token_usage),\n  };\n}\n\nfunction normalizeAgent(value: unknown): DirectConversationInfo[\"agent\"] {\n  if (!isRecord(value)) return null;\n  const llm = isRecord(value.llm)\n    ? { model: stringOrNull(value.llm.model) }\n    : null;\n  // ``kind`` is the SDK's pydantic discriminator (``\"Agent\"`` vs ``\"ACPAgent\"``);\n  // ``toAppConversation`` reads it to derive ``agent_kind``. ``acp_model`` is\n  // the Canvas-configured model on the ACPAgent — preserved so the conversation\n  // adapter and the conversation chip can fall back to it when the SDK runtime\n  // model fields aren't populated. Preserving these here makes the wire path\n  // agree with the unit-test path that builds ``DirectConversationInfo``\n  // directly (e.g. ``__tests__/api/agent-server-adapter.test.ts``).\n  return {\n    kind: stringOrNull(value.kind),\n    acp_model: stringOrNull(value.acp_model),\n    llm,\n  };\n}\n\nfunction normalizeWorkspace(\n  value: unknown,\n): DirectConversationInfo[\"workspace\"] {\n  if (!isRecord(value)) return null;\n  return { working_dir: stringOrNull(value.working_dir) };\n}\n\n/**\n * Accept the agent-server's ``tags: Record[str, str]`` payload defensively:\n * the wire shape is guaranteed by the server-side validator (keys\n * ``^[a-z0-9]+$``, string values), but a non-conforming response (older\n * server, raw API write, future schema drift) must never crash the parser\n * — Canvas only consumes ``acpserver`` and falls back to a generic chip\n * for anything it doesn't recognize. Drop entries whose value isn't a\n * plain string; return ``null`` when the wire field is absent or not an\n * object so consumers can use ``info.tags?.[KEY] ?? null`` uniformly.\n */\nfunction normalizeTags(value: unknown): Record<string, string> | null {\n  if (!isRecord(value)) return null;\n  const tags: Record<string, string> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    if (typeof entry === \"string\") {\n      tags[key] = entry;\n    }\n  }\n  return tags;\n}\n\nfunction normalizeAbsolutePath(path: string): string | null {\n  if (!path.startsWith(\"/\")) return null;\n\n  const segments: string[] = [];\n  for (const segment of path.split(\"/\")) {\n    if (segment && segment !== \".\") {\n      if (segment === \"..\") {\n        if (!segments.length) return null;\n        segments.pop();\n      } else {\n        segments.push(segment);\n      }\n    }\n  }\n\n  return `/${segments.join(\"/\")}`;\n}\n\nfunction requirePathInsideDirectory(path: string, directory: string): string {\n  const normalizedPath = normalizeAbsolutePath(path);\n  const normalizedDirectory = normalizeAbsolutePath(directory);\n\n  if (\n    !normalizedPath ||\n    !normalizedDirectory ||\n    (normalizedPath !== normalizedDirectory &&\n      !normalizedPath.startsWith(`${normalizedDirectory}/`))\n  ) {\n    throw new Error(\"Conversation file path must stay inside the workspace\");\n  }\n\n  return normalizedPath;\n}\n\nfunction requireDirectConversationInfo(item: unknown): DirectConversationInfo {\n  if (!isRecord(item) || typeof item.id !== \"string\" || !item.id.trim()) {\n    throw invalidConversationResponse();\n  }\n\n  return {\n    id: item.id.trim(),\n    title: stringOrNull(item.title),\n    created_at: readTimestamp(item, \"created_at\", \"createdAt\"),\n    updated_at: readTimestamp(item, \"updated_at\", \"updatedAt\"),\n    execution_status: stringOrNull(item.execution_status),\n    sandbox_status: stringOrNull(item.sandbox_status),\n    metrics: normalizeMetrics(item.metrics),\n    agent: normalizeAgent(item.agent),\n    workspace: normalizeWorkspace(item.workspace),\n    tags: normalizeTags(item.tags),\n    // SDK-runtime ACP model fields (populated when the agent-server supports\n    // ``ConversationInfo.current_model_*``). Consumed by the conversation\n    // adapter to drive the per-card chip's model text. Older agent-servers\n    // omit these — adapter handles ``undefined`` / ``null`` gracefully.\n    current_model_id: stringOrNull(item.current_model_id),\n    current_model_name: stringOrNull(item.current_model_name),\n  };\n}\n\nfunction requireDirectConversationItems(\n  items: unknown,\n): DirectConversationInfo[] {\n  if (!Array.isArray(items)) {\n    throw invalidConversationResponse();\n  }\n  return items.map(requireDirectConversationInfo);\n}\n\nfunction requireConversationSearchPage(page: unknown): {\n  items: DirectConversationInfo[];\n  next_page_id: string | null;\n} {\n  if (Array.isArray(page)) {\n    return {\n      items: requireDirectConversationItems(page),\n      next_page_id: null,\n    };\n  }\n\n  if (!isRecord(page)) {\n    throw invalidConversationResponse();\n  }\n\n  return {\n    items: requireDirectConversationItems(page.items),\n    next_page_id:\n      typeof page.next_page_id === \"string\" ? page.next_page_id : null,\n  };\n}\n\nconst RUNTIME_STATUSES = new Set<string>([\n  \"idle\",\n  \"running\",\n  \"paused\",\n  \"waiting_for_confirmation\",\n  \"finished\",\n  \"error\",\n  \"stuck\",\n]);\n\nfunction toRuntimeStatus(\n  status: DirectConversationInfo[\"execution_status\"],\n): RuntimeConversationInfo[\"status\"] {\n  const nextStatus = status ?? \"idle\";\n  return (\n    RUNTIME_STATUSES.has(nextStatus) ? nextStatus : \"idle\"\n  ) as RuntimeConversationInfo[\"status\"];\n}\n\nfunction requireAppConversation(\n  conversation: AppConversation | null | undefined,\n  conversationId: string,\n): AppConversation {\n  if (!conversation) {\n    throw new Error(`Conversation ${conversationId} was not found`);\n  }\n  return conversation;\n}\n\nclass AgentServerConversationService {\n  static async sendMessage(\n    conversationId: string,\n    message: SendMessageRequest,\n    runtime?: ConversationRuntimeContext | null,\n  ): Promise<SendMessageResponse> {\n    const active = getActiveBackend().backend;\n    let conversationUrl = runtime?.conversationUrl ?? null;\n    let sessionApiKey = runtime?.sessionApiKey ?? null;\n\n    if (active.kind === \"cloud\") {\n      if (!conversationUrl || !sessionApiKey) {\n        const [conversation] = await batchGetCloudConversations([\n          conversationId,\n        ]);\n        conversationUrl = conversation?.conversation_url?.trim() ?? null;\n        sessionApiKey = conversation?.session_api_key?.trim() ?? null;\n      }\n\n      if (!conversationUrl || !sessionApiKey) {\n        throw new Error(\n          \"Conversation sandbox is still starting. Wait for it to finish, then try again.\",\n        );\n      }\n\n      await callCloudProxy({\n        backend: active,\n        method: \"POST\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events`,\n        body: { ...message, run: true },\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n\n      return message;\n    }\n\n    await new ConversationClient(\n      getAgentServerClientOptions({ conversationUrl, sessionApiKey }),\n    ).sendEvent(conversationId, message, {\n      run: true,\n    });\n\n    return message;\n  }\n\n  static async createConversation(\n    initialUserMsg?: string,\n    conversationInstructions?: string,\n    plugins?: PluginSpec[],\n    metadata?: ConversationMetadata | null,\n    workingDirOverride?: string,\n    parentConversationId?: string,\n    agentType?: \"default\" | \"plan\",\n    sandboxId?: string,\n  ): Promise<AppConversationStartTask> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      // Cloud path mirrors OpenHands' frontend: build a flat\n      // AppConversationStartRequest, POST /api/v1/app-conversations\n      // (returns a WORKING task), and let the conversation route's\n      // useTaskPolling drive it to READY. NO encrypted-settings\n      // round-trip — the cloud backend holds secrets server-side.\n      const request: AppConversationStartRequest = {\n        initial_message: initialUserMsg\n          ? {\n              role: \"user\",\n              content: [{ type: \"text\", text: initialUserMsg }],\n            }\n          : null,\n        title: conversationInstructions ?? null,\n        selected_repository: metadata?.selected_repository ?? null,\n        selected_branch: metadata?.selected_branch ?? null,\n        git_provider: metadata?.git_provider ?? null,\n        plugins: plugins ?? null,\n        parent_conversation_id: parentConversationId ?? null,\n        agent_type: agentType,\n        sandbox_id: sandboxId ?? null,\n      };\n      return createCloudAppConversation(request);\n    }\n\n    const settings = await SettingsService.getSettings();\n    const conversationId = uuidv4();\n    const workingDir =\n      workingDirOverride ?? buildConversationWorkingDir(conversationId);\n\n    // Use encrypted settings to avoid exposing secrets in the browser\n    const payload = await buildStartConversationRequestWithEncryptedSettings({\n      settings,\n      query: initialUserMsg,\n      conversationInstructions,\n      plugins,\n      conversationId,\n      workingDir,\n    });\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).createConversation<DirectConversationInfo>(payload);\n\n    if (metadata?.selected_repository || workingDirOverride) {\n      // The agent-server runtime has no concept of selected repo/branch/\n      // workspace, so persist the home-page selection client-side.\n      // `toAppConversation` reads the repo/branch fields back to hydrate\n      // the chat-page badges; `useHasAttachedSource` reads\n      // `selected_workspace` to default the Files tab to Diff mode when\n      // the user explicitly attached a local workspace.\n      setStoredConversationMetadata(data.id, {\n        selected_repository: metadata?.selected_repository ?? null,\n        selected_branch: metadata?.selected_branch ?? null,\n        git_provider: metadata?.git_provider ?? null,\n        selected_workspace: workingDirOverride ?? null,\n      });\n    }\n\n    return {\n      id: data.id,\n      created_by_user_id: null,\n      status: \"READY\",\n      detail: null,\n      app_conversation_id: data.id,\n      agent_server_url: getEffectiveLocalBackend().host,\n      request: {\n        initial_message: payload.initial_message as\n          | AppConversationStartRequest[\"initial_message\"]\n          | undefined,\n        plugins: plugins ?? null,\n      },\n      created_at: data.created_at,\n      updated_at: data.updated_at,\n    };\n  }\n\n  static async getStartTask(\n    taskId: string,\n  ): Promise<AppConversationStartTask | null> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return getCloudAppConversationStartTask(taskId);\n    }\n    // Local agent-server creates conversations synchronously — every\n    // local \"task\" is already READY when createConversation returns, so\n    // there's nothing to poll for.\n    return null;\n  }\n\n  static async getVSCodeUrl(\n    conversationId: string,\n    conversationUrl: string | null | undefined,\n    sessionApiKey?: string | null,\n  ): Promise<GetVSCodeUrlResponse> {\n    // Local-only path. Cloud conversations read the VSCode URL straight\n    // from the cloud-computed `sandbox.exposed_urls` (see\n    // `useUnifiedVSCodeUrl` + `useCloudSandbox`); the runtime's own\n    // `/api/vscode/url` only knows its internal `localhost:8001`, which\n    // the user's browser can't reach.\n    const workspaceDir =\n      await this.resolveConversationWorkingDir(conversationId);\n    // Local mode: the typescript-client targets the local agent-server\n    // directly via the conversationUrl override.\n    const vscodeUrl = await new VSCodeClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).getUrl({\n      baseUrl:\n        typeof window !== \"undefined\" ? window.location.origin : undefined,\n      workspaceDir,\n    });\n\n    return { vscode_url: vscodeUrl };\n  }\n\n  static async resolveConversationWorkingDir(\n    conversationId: string,\n  ): Promise<string> {\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return conversation?.workspace?.working_dir ?? getAgentServerWorkingDir();\n  }\n\n  static async batchGetAppConversations(\n    ids: string[],\n  ): Promise<(AppConversation | null)[]> {\n    if (ids.length === 0) return [];\n\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return batchGetCloudConversations(ids);\n    }\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).getConversations<DirectConversationInfo>(ids);\n\n    return requireDirectConversationItems(data).map((item) =>\n      toAppConversation(item),\n    );\n  }\n\n  static async updateConversationPublicFlag(\n    conversationId: string,\n    isPublic: boolean,\n  ): Promise<AppConversation> {\n    if (getActiveBackend().backend.kind !== \"cloud\") {\n      throw new Error(\"Public sharing requires a cloud backend.\");\n    }\n    return updateCloudConversationPublicFlag(conversationId, isPublic);\n  }\n\n  static async updateConversationRepository(\n    conversationId: string,\n    repository: string | null,\n    branch?: string | null,\n    gitProvider?: string | null,\n  ): Promise<AppConversation> {\n    if (repository) {\n      const existing = getStoredConversationMetadata(conversationId);\n      setStoredConversationMetadata(conversationId, {\n        ...(existing ?? {}),\n        selected_repository: repository,\n        selected_branch: branch ?? null,\n        git_provider: (gitProvider as Provider | null | undefined) ?? null,\n      });\n    } else {\n      removeStoredConversationMetadata(conversationId);\n    }\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return requireAppConversation(conversation, conversationId);\n  }\n\n  static async readConversationFile(\n    conversationId: string,\n    filePath?: string,\n  ): Promise<string> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      // Cloud exposes a per-conversation file endpoint; the sandbox\n      // working dir is fixed (`/workspace/project`), so PLAN.md lives at\n      // a known absolute path. Mirrors OpenHands' readConversationFile.\n      const path = requirePathInsideDirectory(\n        filePath ?? \"/workspace/project/.agents_tmp/PLAN.md\",\n        \"/workspace/project\",\n      );\n      return readCloudConversationFile(conversationId, path);\n    }\n\n    const workingDir = await this.resolveConversationWorkingDir(conversationId);\n    const path = requirePathInsideDirectory(\n      filePath ?? `${workingDir}/.agents_tmp/PLAN.md`,\n      workingDir,\n    );\n    return new FileClient(getAgentServerClientOptions()).downloadTextFile(path);\n  }\n\n  static async downloadConversation(conversationId: string): Promise<Blob> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return downloadCloudConversation(conversationId);\n    }\n\n    return new FileClient(getAgentServerClientOptions()).downloadTrajectory(\n      conversationId,\n    );\n  }\n\n  static async getHooks(conversationId: string): Promise<GetHooksResponse> {\n    if (!conversationId) {\n      return emptyHooksResponse();\n    }\n    return emptyHooksResponse();\n  }\n\n  static async getRuntimeConversation(\n    conversationId: string,\n    conversationUrl: string | null | undefined,\n    sessionApiKey?: string | null,\n  ): Promise<RuntimeConversationInfo> {\n    const active = getActiveBackend().backend;\n\n    type RawRuntime = DirectConversationInfo & {\n      stats?: RuntimeConversationInfo[\"stats\"];\n    };\n\n    // Cloud mode: route through the cloud-proxy to the runtime sandbox at\n    // the conversation's runtime URL — same pattern as getVSCodeUrl. Local\n    // mode forwards conversationUrl so the host explicitly resolves to the\n    // conversation's runtime instead of falling back to the active backend.\n    const response =\n      active.kind === \"cloud\" && conversationUrl\n        ? await callCloudProxy<RawRuntime>({\n            backend: active,\n            method: \"GET\",\n            hostOverride: buildHttpBaseUrl(conversationUrl),\n            path: `/api/conversations/${conversationId}`,\n            authMode: \"session-api-key\",\n            sessionApiKey,\n          })\n        : await new ConversationClient(\n            getAgentServerClientOptions({\n              conversationUrl,\n              sessionApiKey,\n            }),\n          ).getConversation<RawRuntime>(conversationId);\n    const data = requireDirectConversationInfo(response);\n    const stats = isRecord(response) ? response.stats : null;\n\n    return {\n      id: data.id,\n      title: data.title?.trim()\n        ? data.title\n        : getDefaultConversationTitle(data.id),\n      metrics: normalizeMetrics(data.metrics),\n      created_at: data.created_at,\n      updated_at: data.updated_at,\n      status: toRuntimeStatus(data.execution_status),\n      stats: isRecord(stats) ? stats : { usage_to_metrics: {} },\n    };\n  }\n\n  static async searchConversations(\n    limit: number = 20,\n    pageId?: string,\n  ): Promise<AppConversationPage> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return searchCloudConversations(limit, pageId);\n    }\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).searchConversations({\n      limit,\n      page_id: pageId,\n      sort_order: ConversationSortOrder.UPDATED_AT_DESC,\n    });\n\n    return toConversationPage(requireConversationSearchPage(data));\n  }\n\n  static async deleteConversation(conversationId: string): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      await deleteCloudConversation(conversationId);\n    } else {\n      await new ConversationClient(\n        getAgentServerClientOptions(),\n      ).deleteConversation(conversationId);\n    }\n    removeStoredConversationMetadata(conversationId);\n  }\n\n  static async updateConversationTitle(\n    conversationId: string,\n    title: string,\n  ): Promise<AppConversation> {\n    await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).updateConversation(conversationId, {\n      title,\n    });\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return requireAppConversation(conversation, conversationId);\n  }\n\n  /**\n   * Switches the LLM profile for the running conversation when one is open\n   * (POST /switch_profile — per-conversation swap, doesn't change the user's\n   * default profile). When called without a conversationId (home page),\n   * falls back to POST /activate so the next conversation created picks up\n   * the chosen profile.\n   *\n   * The per-conversation endpoint accepts only the profile name, so the UI does\n   * not need to fetch or forward profile secrets. That keeps switching working\n   * even when the agent server has no OH_SECRET_KEY for encrypted secret export.\n   */\n  static async switchProfile(\n    conversationId: string | null,\n    profileName: string,\n  ): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      throw new Error(\n        \"LLM profile switching is only supported for local agent-server backends.\",\n      );\n    }\n\n    if (!conversationId) {\n      await new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n        profileName,\n      );\n      return;\n    }\n\n    await new ConversationClient(getAgentServerClientOptions()).switchProfile(\n      conversationId,\n      profileName,\n    );\n  }\n\n  /**\n   * Switches the model of a running ACP conversation in place (POST\n   * /switch_acp_model — the ACP analog of {@link switchProfile}'s /switch_profile).\n   * The agent-server calls the ACP wrapper's ``session/set_model`` on the live\n   * session, preserving context. Mirrors {@link switchProfile}'s\n   * local-backend-only guard and per-conversation ConversationClient call.\n   *\n   * Only valid once an ACP session exists (after the first message); the\n   * agent-server returns 409 before then — the home/no-session default is\n   * persisted via Settings instead (see ``use-switch-acp-model``).\n   */\n  static async switchAcpModel(\n    conversationId: string,\n    model: string,\n  ): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      throw new Error(\n        \"ACP model switching is only supported for local agent-server backends.\",\n      );\n    }\n\n    await new ConversationClient(getAgentServerClientOptions()).switchAcpModel(\n      conversationId,\n      model,\n    );\n  }\n}\n\nexport default AgentServerConversationService;\n"],"mappings":";;;;;;;;;;;;;;;;;AA4DA,IAAM,IAAiC,4BACjC,IACJ;AAGF,SAAS,IAAqC;AAC5C,QAAW,MAAM,EAAsC;;AAGzD,SAAS,EAAS,GAAkD;AAClE,QAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,EAAM;;AAG7E,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAAwB;AAC5C,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EACP,GACA,GACA,GACQ;CACR,IAAM,IAAQ,EAAK,MAAa,EAAK;AACrC,QAAO,OAAO,KAAU,YAAY,EAAM,MAAM,GAC5C,IACA;;AAGN,SAAS,EACP,GACgE;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,eAAe,EAAa,EAAM,cAAc;EAChD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,oBAAoB,EAAa,EAAM,mBAAmB;EAC1D,gBAAgB,EAAa,EAAM,eAAe;EAClD,gBAAgB,EAAa,EAAM,eAAe;EACnD,GAT4B;;AAY/B,SAAS,EAAiB,GAAwC;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,kBAAkB,EAAa,EAAM,iBAAiB;EACtD,qBAAqB,EAAa,EAAM,oBAAoB;EAC5D,yBAAyB,EAAoB,EAAM,wBAAwB;EAC5E,GAN4B;;AAS/B,SAAS,EAAe,GAAiD;AACvE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAAM,EAAS,EAAM,IAAI,GAC3B,EAAE,OAAO,EAAa,EAAM,IAAI,MAAM,EAAE,GACxC;AAQJ,QAAO;EACL,MAAM,EAAa,EAAM,KAAK;EAC9B,WAAW,EAAa,EAAM,UAAU;EACxC;EACD;;AAGH,SAAS,EACP,GACqC;AAErC,QADK,EAAS,EAAM,GACb,EAAE,aAAa,EAAa,EAAM,YAAY,EAAE,GAD1B;;AAc/B,SAAS,EAAc,GAA+C;AACpE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAA+B,EAAE;AACvC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,OAAO,KAAU,aACnB,EAAK,KAAO;AAGhB,QAAO;;AAGT,SAAS,EAAsB,GAA6B;AAC1D,KAAI,CAAC,EAAK,WAAW,IAAI,CAAE,QAAO;CAElC,IAAM,IAAqB,EAAE;AAC7B,MAAK,IAAM,KAAW,EAAK,MAAM,IAAI,CACnC,KAAI,KAAW,MAAY,IACzB,KAAI,MAAY,MAAM;AACpB,MAAI,CAAC,EAAS,OAAQ,QAAO;AAC7B,IAAS,KAAK;OAEd,GAAS,KAAK,EAAQ;AAK5B,QAAO,IAAI,EAAS,KAAK,IAAI;;AAG/B,SAAS,EAA2B,GAAc,GAA2B;CAC3E,IAAM,IAAiB,EAAsB,EAAK,EAC5C,IAAsB,EAAsB,EAAU;AAE5D,KACE,CAAC,KACD,CAAC,KACA,MAAmB,KAClB,CAAC,EAAe,WAAW,GAAG,EAAoB,GAAG,CAEvD,OAAU,MAAM,wDAAwD;AAG1E,QAAO;;AAGT,SAAS,EAA8B,GAAuC;AAC5E,KAAI,CAAC,EAAS,EAAK,IAAI,OAAO,EAAK,MAAO,YAAY,CAAC,EAAK,GAAG,MAAM,CACnE,OAAM,GAA6B;AAGrC,QAAO;EACL,IAAI,EAAK,GAAG,MAAM;EAClB,OAAO,EAAa,EAAK,MAAM;EAC/B,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,gBAAgB,EAAa,EAAK,eAAe;EACjD,SAAS,EAAiB,EAAK,QAAQ;EACvC,OAAO,EAAe,EAAK,MAAM;EACjC,WAAW,EAAmB,EAAK,UAAU;EAC7C,MAAM,EAAc,EAAK,KAAK;EAK9B,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,oBAAoB,EAAa,EAAK,mBAAmB;EAC1D;;AAGH,SAAS,EACP,GAC0B;AAC1B,KAAI,CAAC,MAAM,QAAQ,EAAM,CACvB,OAAM,GAA6B;AAErC,QAAO,EAAM,IAAI,EAA8B;;AAGjD,SAAS,EAA8B,GAGrC;AACA,KAAI,MAAM,QAAQ,EAAK,CACrB,QAAO;EACL,OAAO,EAA+B,EAAK;EAC3C,cAAc;EACf;AAGH,KAAI,CAAC,EAAS,EAAK,CACjB,OAAM,GAA6B;AAGrC,QAAO;EACL,OAAO,EAA+B,EAAK,MAAM;EACjD,cACE,OAAO,EAAK,gBAAiB,WAAW,EAAK,eAAe;EAC/D;;AAGH,IAAM,IAAmB,IAAI,IAAY;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,EACP,GACmC;CACnC,IAAM,IAAa,KAAU;AAC7B,QACE,EAAiB,IAAI,EAAW,GAAG,IAAa;;AAIpD,SAAS,EACP,GACA,GACiB;AACjB,KAAI,CAAC,EACH,OAAU,MAAM,gBAAgB,EAAe,gBAAgB;AAEjE,QAAO;;AAGT,IAAM,IAAN,MAAqC;CACnC,aAAa,YACX,GACA,GACA,GAC8B;EAC9B,IAAM,IAAS,GAAkB,CAAC,SAC9B,IAAkB,GAAS,mBAAmB,MAC9C,IAAgB,GAAS,iBAAiB;AAE9C,MAAI,EAAO,SAAS,SAAS;AAC3B,OAAI,CAAC,KAAmB,CAAC,GAAe;IACtC,IAAM,CAAC,KAAgB,MAAM,EAA2B,CACtD,EACD,CAAC;AAEF,IADA,IAAkB,GAAc,kBAAkB,MAAM,IAAI,MAC5D,IAAgB,GAAc,iBAAiB,MAAM,IAAI;;AAG3D,OAAI,CAAC,KAAmB,CAAC,EACvB,OAAU,MACR,iFACD;AAaH,UAVA,MAAM,EAAe;IACnB,SAAS;IACT,QAAQ;IACR,cAAc,EAAiB,EAAgB;IAC/C,MAAM,sBAAsB,EAAe;IAC3C,MAAM;KAAE,GAAG;KAAS,KAAK;KAAM;IAC/B,UAAU;IACV;IACD,CAAC,EAEK;;AAST,SANA,MAAM,IAAI,EACR,EAA4B;GAAE;GAAiB;GAAe,CAAC,CAChE,CAAC,UAAU,GAAgB,GAAS,EACnC,KAAK,IACN,CAAC,EAEK;;CAGT,aAAa,mBACX,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACmC;AACnC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAsBtC,QAAO,EAA2B;GAfhC,iBAAiB,IACb;IACE,MAAM;IACN,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAgB,CAAC;IAClD,GACD;GACJ,OAAO,KAA4B;GACnC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,SAAS,KAAW;GACpB,wBAAwB,KAAwB;GAChD,YAAY;GACZ,YAAY,KAAa;GAEO,CAAQ;EAG5C,IAAM,IAAW,MAAM,EAAgB,aAAa,EAC9C,IAAiB,GAAQ,EAKzB,IAAU,MAAM,EAAmD;GACvE;GACA,OAAO;GACP;GACA;GACA;GACA,YATA,KAAsB,EAA4B,EAAe;GAUlE,CAAC,EAEI,IAAO,MAAM,IAAI,EACrB,GAA6B,CAC9B,CAAC,mBAA2C,EAAQ;AAiBrD,UAfI,GAAU,uBAAuB,MAOnC,EAA8B,EAAK,IAAI;GACrC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,oBAAoB,KAAsB;GAC3C,CAAC,EAGG;GACL,IAAI,EAAK;GACT,oBAAoB;GACpB,QAAQ;GACR,QAAQ;GACR,qBAAqB,EAAK;GAC1B,kBAAkB,GAA0B,CAAC;GAC7C,SAAS;IACP,iBAAiB,EAAQ;IAGzB,SAAS,KAAW;IACrB;GACD,YAAY,EAAK;GACjB,YAAY,EAAK;GAClB;;CAGH,aAAa,aACX,GAC0C;AAO1C,SANI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAiC,EAAO,GAK1C;;CAGT,aAAa,aACX,GACA,GACA,GAC+B;EAM/B,IAAM,IACJ,MAAM,KAAK,8BAA8B,EAAe;AAc1D,SAAO,EAAE,YAAY,MAXG,IAAI,EAC1B,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,OAAO;GACP,SACE,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS,KAAA;GAC3D;GACD,CAAC,EAE8B;;CAGlC,aAAa,8BACX,GACiB;EACjB,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,GAAc,WAAW,eAAe,GAA0B;;CAG3E,aAAa,yBACX,GACqC;AAWrC,SAVI,EAAI,WAAW,IAAU,EAAE,GAE3B,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA2B,EAAI,GAOjC,EAA+B,MAJnB,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,EAAI,CAEJ,CAAC,KAAK,MAC/C,EAAkB,EAAK,CACxB;;CAGH,aAAa,6BACX,GACA,GAC0B;AAC1B,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MAAM,2CAA2C;AAE7D,SAAO,EAAkC,GAAgB,EAAS;;CAGpE,aAAa,6BACX,GACA,GACA,GACA,GAC0B;AAC1B,EAAI,IAEF,EAA8B,GAAgB;GAC5C,GAFe,EAA8B,EAEzC,IAAY,EAAE;GAClB,qBAAqB;GACrB,iBAAiB,KAAU;GAC3B,cAAe,KAA+C;GAC/D,CAAC,GAEF,EAAiC,EAAe;EAElD,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAG7D,aAAa,qBACX,GACA,GACiB;AACjB,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAQtC,QAAO,EAA0B,GAJpB,EACX,KAAY,0CACZ,qBAE+C,CAAK;EAGxD,IAAM,IAAa,MAAM,KAAK,8BAA8B,EAAe,EACrE,IAAO,EACX,KAAY,GAAG,EAAW,uBAC1B,EACD;AACD,SAAO,IAAI,EAAW,GAA6B,CAAC,CAAC,iBAAiB,EAAK;;CAG7E,aAAa,qBAAqB,GAAuC;AAKvE,SAJI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA0B,EAAe,GAG3C,IAAI,EAAW,GAA6B,CAAC,CAAC,mBACnD,EACD;;CAGH,aAAa,SAAS,GAAmD;AAIvE,SAAO,GAAoB;;CAG7B,aAAa,uBACX,GACA,GACA,GACkC;EAClC,IAAM,IAAS,GAAkB,CAAC,SAU5B,IACJ,EAAO,SAAS,WAAW,IACvB,MAAM,EAA2B;GAC/B,SAAS;GACT,QAAQ;GACR,cAAc,EAAiB,EAAgB;GAC/C,MAAM,sBAAsB;GAC5B,UAAU;GACV;GACD,CAAC,GACF,MAAM,IAAI,EACR,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,gBAA4B,EAAe,EAC7C,IAAO,EAA8B,EAAS,EAC9C,IAAQ,EAAS,EAAS,GAAG,EAAS,QAAQ;AAEpD,SAAO;GACL,IAAI,EAAK;GACT,OAAO,EAAK,OAAO,MAAM,GACrB,EAAK,QACL,EAA4B,EAAK,GAAG;GACxC,SAAS,EAAiB,EAAK,QAAQ;GACvC,YAAY,EAAK;GACjB,YAAY,EAAK;GACjB,QAAQ,EAAgB,EAAK,iBAAiB;GAC9C,OAAO,EAAS,EAAM,GAAG,IAAQ,EAAE,kBAAkB,EAAE,EAAE;GAC1D;;CAGH,aAAa,oBACX,IAAgB,IAChB,GAC8B;AAa9B,SAZI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAyB,GAAO,EAAO,GAWzC,EAAmB,EAA8B,MARrC,IAAI,EACrB,GAA6B,CAC9B,CAAC,oBAAoB;GACpB;GACA,SAAS;GACT,YAAY,EAAsB;GACnC,CAAC,CAE2D,CAAC;;CAGhE,aAAa,mBAAmB,GAAuC;AAQrE,EAPI,GAAkB,CAAC,QAAQ,SAAS,UACtC,MAAM,EAAwB,EAAe,GAE7C,MAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,EAAe,EAEtC,EAAiC,EAAe;;CAGlD,aAAa,wBACX,GACA,GAC0B;AAC1B,QAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,GAAgB,EACnC,UACD,CAAC;EACF,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAc7D,aAAa,cACX,GACA,GACe;AACf,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,2EACD;AAGH,MAAI,CAAC,GAAgB;AACnB,SAAM,IAAI,EAAe,GAA6B,CAAC,CAAC,gBACtD,EACD;AACD;;AAGF,QAAM,IAAI,EAAmB,GAA6B,CAAC,CAAC,cAC1D,GACA,EACD;;CAcH,aAAa,eACX,GACA,GACe;AACf,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,yEACD;AAGH,QAAM,IAAI,EAAmB,GAA6B,CAAC,CAAC,eAC1D,GACA,EACD"}
+{"version":3,"file":"agent-server-conversation-service.api.js","names":[],"sources":["../../../src/api/conversation-service/agent-server-conversation-service.api.ts"],"sourcesContent":["import {\n  ConversationSortOrder,\n  type LLMConfig,\n} from \"@openhands/typescript-client\";\nimport {\n  ConversationClient,\n  FileClient,\n  ProfilesClient,\n  VSCodeClient,\n} from \"@openhands/typescript-client/clients\";\nimport { v4 as uuidv4 } from \"uuid\";\nimport { Provider } from \"#/types/settings\";\nimport type { ConversationRuntimeContext } from \"#/api/conversation-file-upload.api\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport {\n  buildConversationWorkingDir,\n  getAgentServerWorkingDir,\n} from \"../agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n} from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport {\n  batchGetCloudConversations,\n  createCloudAppConversation,\n  deleteCloudConversation,\n  downloadCloudConversation,\n  getCloudAppConversationStartTask,\n  readCloudConversationFile,\n  searchCloudConversations,\n  updateCloudConversationPublicFlag,\n} from \"../cloud/conversation-service.api\";\nimport {\n  DirectConversationInfo,\n  buildStartConversationRequestWithEncryptedSettings,\n  emptyHooksResponse,\n  getDefaultConversationTitle,\n  toAppConversation,\n  toConversationPage,\n} from \"../agent-server-adapter\";\nimport { GetVSCodeUrlResponse } from \"../open-hands.types\";\nimport {\n  getAgentServerClientOptions,\n  NoBackendAvailableError,\n} from \"../agent-server-client-options\";\nimport SettingsService from \"../settings-service/settings-service.api\";\nimport {\n  ConversationMetadata,\n  getStoredConversationMetadata,\n  removeStoredConversationMetadata,\n  setStoredConversationMetadata,\n} from \"../conversation-metadata-store\";\nimport type {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  AppConversationStartRequest,\n  AppConversationStartTask,\n  MetricsSnapshot,\n  RuntimeConversationInfo,\n  SendMessageRequest,\n  SendMessageResponse,\n} from \"./agent-server-conversation-service.types\";\n\nconst DEFAULT_CONVERSATION_TIMESTAMP = \"1970-01-01T00:00:00.000Z\";\nconst INVALID_CONVERSATION_RESPONSE_MESSAGE =\n  \"Unable to load conversations because the selected agent server returned \" +\n  \"data this UI does not understand. Check the backend URL/session key and \" +\n  \"update the agent server if needed.\";\nfunction invalidConversationResponse(): Error {\n  return new Error(INVALID_CONVERSATION_RESPONSE_MESSAGE);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction numberOrNull(value: unknown): number | null {\n  return typeof value === \"number\" ? value : null;\n}\n\nfunction numberOrZero(value: unknown): number {\n  return typeof value === \"number\" ? value : 0;\n}\n\nfunction stringOrNull(value: unknown): string | null {\n  return typeof value === \"string\" ? value : null;\n}\n\nfunction readTimestamp(\n  item: Record<string, unknown>,\n  snakeKey: \"created_at\" | \"updated_at\",\n  camelKey: \"createdAt\" | \"updatedAt\",\n): string {\n  const value = item[snakeKey] ?? item[camelKey];\n  return typeof value === \"string\" && value.trim()\n    ? value\n    : DEFAULT_CONVERSATION_TIMESTAMP;\n}\n\nfunction normalizeTokenUsage(\n  value: unknown,\n): NonNullable<MetricsSnapshot[\"accumulated_token_usage\"]> | null {\n  if (!isRecord(value)) return null;\n\n  return {\n    prompt_tokens: numberOrZero(value.prompt_tokens),\n    completion_tokens: numberOrZero(value.completion_tokens),\n    cache_read_tokens: numberOrZero(value.cache_read_tokens),\n    cache_write_tokens: numberOrZero(value.cache_write_tokens),\n    context_window: numberOrZero(value.context_window),\n    per_turn_token: numberOrZero(value.per_turn_token),\n  };\n}\n\nfunction normalizeMetrics(value: unknown): MetricsSnapshot | null {\n  if (!isRecord(value)) return null;\n\n  return {\n    accumulated_cost: numberOrNull(value.accumulated_cost),\n    max_budget_per_task: numberOrNull(value.max_budget_per_task),\n    accumulated_token_usage: normalizeTokenUsage(value.accumulated_token_usage),\n  };\n}\n\nfunction normalizeAgent(value: unknown): DirectConversationInfo[\"agent\"] {\n  if (!isRecord(value)) return null;\n  const llm = isRecord(value.llm)\n    ? { model: stringOrNull(value.llm.model) }\n    : null;\n  // ``kind`` is the SDK's pydantic discriminator (``\"Agent\"`` vs ``\"ACPAgent\"``);\n  // ``toAppConversation`` reads it to derive ``agent_kind``. ``acp_model`` is\n  // the Canvas-configured model on the ACPAgent — preserved so the conversation\n  // adapter and the conversation chip can fall back to it when the SDK runtime\n  // model fields aren't populated. Preserving these here makes the wire path\n  // agree with the unit-test path that builds ``DirectConversationInfo``\n  // directly (e.g. ``__tests__/api/agent-server-adapter.test.ts``).\n  return {\n    kind: stringOrNull(value.kind),\n    acp_model: stringOrNull(value.acp_model),\n    llm,\n  };\n}\n\nfunction normalizeWorkspace(\n  value: unknown,\n): DirectConversationInfo[\"workspace\"] {\n  if (!isRecord(value)) return null;\n  return { working_dir: stringOrNull(value.working_dir) };\n}\n\n/**\n * Accept the agent-server's ``tags: Record[str, str]`` payload defensively:\n * the wire shape is guaranteed by the server-side validator (keys\n * ``^[a-z0-9]+$``, string values), but a non-conforming response (older\n * server, raw API write, future schema drift) must never crash the parser\n * — Canvas only consumes ``acpserver`` and falls back to a generic chip\n * for anything it doesn't recognize. Drop entries whose value isn't a\n * plain string; return ``null`` when the wire field is absent or not an\n * object so consumers can use ``info.tags?.[KEY] ?? null`` uniformly.\n */\nfunction normalizeTags(value: unknown): Record<string, string> | null {\n  if (!isRecord(value)) return null;\n  const tags: Record<string, string> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    if (typeof entry === \"string\") {\n      tags[key] = entry;\n    }\n  }\n  return tags;\n}\n\nfunction normalizeAbsolutePath(path: string): string | null {\n  if (!path.startsWith(\"/\")) return null;\n\n  const segments: string[] = [];\n  for (const segment of path.split(\"/\")) {\n    if (segment && segment !== \".\") {\n      if (segment === \"..\") {\n        if (!segments.length) return null;\n        segments.pop();\n      } else {\n        segments.push(segment);\n      }\n    }\n  }\n\n  return `/${segments.join(\"/\")}`;\n}\n\nfunction requirePathInsideDirectory(path: string, directory: string): string {\n  const normalizedPath = normalizeAbsolutePath(path);\n  const normalizedDirectory = normalizeAbsolutePath(directory);\n\n  if (\n    !normalizedPath ||\n    !normalizedDirectory ||\n    (normalizedPath !== normalizedDirectory &&\n      !normalizedPath.startsWith(`${normalizedDirectory}/`))\n  ) {\n    throw new Error(\"Conversation file path must stay inside the workspace\");\n  }\n\n  return normalizedPath;\n}\n\nfunction requireDirectConversationInfo(item: unknown): DirectConversationInfo {\n  if (!isRecord(item) || typeof item.id !== \"string\" || !item.id.trim()) {\n    throw invalidConversationResponse();\n  }\n\n  return {\n    id: item.id.trim(),\n    title: stringOrNull(item.title),\n    created_at: readTimestamp(item, \"created_at\", \"createdAt\"),\n    updated_at: readTimestamp(item, \"updated_at\", \"updatedAt\"),\n    execution_status: stringOrNull(item.execution_status),\n    sandbox_status: stringOrNull(item.sandbox_status),\n    metrics: normalizeMetrics(item.metrics),\n    agent: normalizeAgent(item.agent),\n    workspace: normalizeWorkspace(item.workspace),\n    tags: normalizeTags(item.tags),\n    // SDK-runtime ACP model fields (populated when the agent-server supports\n    // ``ConversationInfo.current_model_*``). Consumed by the conversation\n    // adapter to drive the per-card chip's model text. Older agent-servers\n    // omit these — adapter handles ``undefined`` / ``null`` gracefully.\n    current_model_id: stringOrNull(item.current_model_id),\n    current_model_name: stringOrNull(item.current_model_name),\n  };\n}\n\nfunction requireDirectConversationItems(\n  items: unknown,\n): DirectConversationInfo[] {\n  if (!Array.isArray(items)) {\n    throw invalidConversationResponse();\n  }\n  return items.map(requireDirectConversationInfo);\n}\n\nfunction requireConversationSearchPage(page: unknown): {\n  items: DirectConversationInfo[];\n  next_page_id: string | null;\n} {\n  if (Array.isArray(page)) {\n    return {\n      items: requireDirectConversationItems(page),\n      next_page_id: null,\n    };\n  }\n\n  if (!isRecord(page)) {\n    throw invalidConversationResponse();\n  }\n\n  return {\n    items: requireDirectConversationItems(page.items),\n    next_page_id:\n      typeof page.next_page_id === \"string\" ? page.next_page_id : null,\n  };\n}\n\nconst RUNTIME_STATUSES = new Set<string>([\n  \"idle\",\n  \"running\",\n  \"paused\",\n  \"waiting_for_confirmation\",\n  \"finished\",\n  \"error\",\n  \"stuck\",\n]);\n\nfunction toRuntimeStatus(\n  status: DirectConversationInfo[\"execution_status\"],\n): RuntimeConversationInfo[\"status\"] {\n  const nextStatus = status ?? \"idle\";\n  return (\n    RUNTIME_STATUSES.has(nextStatus) ? nextStatus : \"idle\"\n  ) as RuntimeConversationInfo[\"status\"];\n}\n\nfunction requireAppConversation(\n  conversation: AppConversation | null | undefined,\n  conversationId: string,\n): AppConversation {\n  if (!conversation) {\n    throw new Error(`Conversation ${conversationId} was not found`);\n  }\n  return conversation;\n}\n\nclass AgentServerConversationService {\n  static async sendMessage(\n    conversationId: string,\n    message: SendMessageRequest,\n    runtime?: ConversationRuntimeContext | null,\n  ): Promise<SendMessageResponse> {\n    const active = getActiveBackend().backend;\n    let conversationUrl = runtime?.conversationUrl ?? null;\n    let sessionApiKey = runtime?.sessionApiKey ?? null;\n\n    if (active.kind === \"cloud\") {\n      if (!conversationUrl || !sessionApiKey) {\n        const [conversation] = await batchGetCloudConversations([\n          conversationId,\n        ]);\n        conversationUrl = conversation?.conversation_url?.trim() ?? null;\n        sessionApiKey = conversation?.session_api_key?.trim() ?? null;\n      }\n\n      if (!conversationUrl || !sessionApiKey) {\n        throw new Error(\n          \"Conversation sandbox is still starting. Wait for it to finish, then try again.\",\n        );\n      }\n\n      await callCloudProxy({\n        backend: active,\n        method: \"POST\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events`,\n        body: { ...message, run: true },\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n\n      return message;\n    }\n\n    await new ConversationClient(\n      getAgentServerClientOptions({ conversationUrl, sessionApiKey }),\n    ).sendEvent(conversationId, message, {\n      run: true,\n    });\n\n    return message;\n  }\n\n  static async createConversation(\n    initialUserMsg?: string,\n    conversationInstructions?: string,\n    plugins?: PluginSpec[],\n    metadata?: ConversationMetadata | null,\n    workingDirOverride?: string,\n    parentConversationId?: string,\n    agentType?: \"default\" | \"plan\",\n    sandboxId?: string,\n  ): Promise<AppConversationStartTask> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      // Cloud path mirrors OpenHands' frontend: build a flat\n      // AppConversationStartRequest, POST /api/v1/app-conversations\n      // (returns a WORKING task), and let the conversation route's\n      // useTaskPolling drive it to READY. NO encrypted-settings\n      // round-trip — the cloud backend holds secrets server-side.\n      const request: AppConversationStartRequest = {\n        initial_message: initialUserMsg\n          ? {\n              role: \"user\",\n              content: [{ type: \"text\", text: initialUserMsg }],\n            }\n          : null,\n        title: conversationInstructions ?? null,\n        selected_repository: metadata?.selected_repository ?? null,\n        selected_branch: metadata?.selected_branch ?? null,\n        git_provider: metadata?.git_provider ?? null,\n        plugins: plugins ?? null,\n        parent_conversation_id: parentConversationId ?? null,\n        agent_type: agentType,\n        sandbox_id: sandboxId ?? null,\n      };\n      return createCloudAppConversation(request);\n    }\n\n    const settings = await SettingsService.getSettings();\n    const conversationId = uuidv4();\n    const workingDir =\n      workingDirOverride ?? buildConversationWorkingDir(conversationId);\n\n    // Use encrypted settings to avoid exposing secrets in the browser\n    const payload = await buildStartConversationRequestWithEncryptedSettings({\n      settings,\n      query: initialUserMsg,\n      conversationInstructions,\n      plugins,\n      conversationId,\n      workingDir,\n    });\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).createConversation<DirectConversationInfo>(payload);\n    const localBackend = getEffectiveLocalBackend();\n    if (!localBackend) throw new NoBackendAvailableError();\n\n    if (metadata?.selected_repository || workingDirOverride) {\n      // The agent-server runtime has no concept of selected repo/branch/\n      // workspace, so persist the home-page selection client-side.\n      // `toAppConversation` reads the repo/branch fields back to hydrate\n      // the chat-page badges; `useHasAttachedSource` reads\n      // `selected_workspace` to default the Files tab to Diff mode when\n      // the user explicitly attached a local workspace.\n      setStoredConversationMetadata(data.id, {\n        selected_repository: metadata?.selected_repository ?? null,\n        selected_branch: metadata?.selected_branch ?? null,\n        git_provider: metadata?.git_provider ?? null,\n        selected_workspace: workingDirOverride ?? null,\n      });\n    }\n\n    return {\n      id: data.id,\n      created_by_user_id: null,\n      status: \"READY\",\n      detail: null,\n      app_conversation_id: data.id,\n      agent_server_url: localBackend.host,\n      request: {\n        initial_message: payload.initial_message as\n          | AppConversationStartRequest[\"initial_message\"]\n          | undefined,\n        plugins: plugins ?? null,\n      },\n      created_at: data.created_at,\n      updated_at: data.updated_at,\n    };\n  }\n\n  static async getStartTask(\n    taskId: string,\n  ): Promise<AppConversationStartTask | null> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return getCloudAppConversationStartTask(taskId);\n    }\n    // Local agent-server creates conversations synchronously — every\n    // local \"task\" is already READY when createConversation returns, so\n    // there's nothing to poll for.\n    return null;\n  }\n\n  static async getVSCodeUrl(\n    conversationId: string,\n    conversationUrl: string | null | undefined,\n    sessionApiKey?: string | null,\n  ): Promise<GetVSCodeUrlResponse> {\n    // Local-only path. Cloud conversations read the VSCode URL straight\n    // from the cloud-computed `sandbox.exposed_urls` (see\n    // `useUnifiedVSCodeUrl` + `useCloudSandbox`); the runtime's own\n    // `/api/vscode/url` only knows its internal `localhost:8001`, which\n    // the user's browser can't reach.\n    const workspaceDir =\n      await this.resolveConversationWorkingDir(conversationId);\n    // Local mode: the typescript-client targets the local agent-server\n    // directly via the conversationUrl override.\n    const vscodeUrl = await new VSCodeClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).getUrl({\n      baseUrl:\n        typeof window !== \"undefined\" ? window.location.origin : undefined,\n      workspaceDir,\n    });\n\n    return { vscode_url: vscodeUrl };\n  }\n\n  static async resolveConversationWorkingDir(\n    conversationId: string,\n  ): Promise<string> {\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return conversation?.workspace?.working_dir ?? getAgentServerWorkingDir();\n  }\n\n  static async batchGetAppConversations(\n    ids: string[],\n  ): Promise<(AppConversation | null)[]> {\n    if (ids.length === 0) return [];\n\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return batchGetCloudConversations(ids);\n    }\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).getConversations<DirectConversationInfo>(ids);\n\n    return requireDirectConversationItems(data).map((item) =>\n      toAppConversation(item),\n    );\n  }\n\n  static async updateConversationPublicFlag(\n    conversationId: string,\n    isPublic: boolean,\n  ): Promise<AppConversation> {\n    if (getActiveBackend().backend.kind !== \"cloud\") {\n      throw new Error(\"Public sharing requires a cloud backend.\");\n    }\n    return updateCloudConversationPublicFlag(conversationId, isPublic);\n  }\n\n  static async updateConversationRepository(\n    conversationId: string,\n    repository: string | null,\n    branch?: string | null,\n    gitProvider?: string | null,\n  ): Promise<AppConversation> {\n    if (repository) {\n      const existing = getStoredConversationMetadata(conversationId);\n      setStoredConversationMetadata(conversationId, {\n        ...(existing ?? {}),\n        selected_repository: repository,\n        selected_branch: branch ?? null,\n        git_provider: (gitProvider as Provider | null | undefined) ?? null,\n      });\n    } else {\n      removeStoredConversationMetadata(conversationId);\n    }\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return requireAppConversation(conversation, conversationId);\n  }\n\n  static async readConversationFile(\n    conversationId: string,\n    filePath?: string,\n  ): Promise<string> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      // Cloud exposes a per-conversation file endpoint; the sandbox\n      // working dir is fixed (`/workspace/project`), so PLAN.md lives at\n      // a known absolute path. Mirrors OpenHands' readConversationFile.\n      const path = requirePathInsideDirectory(\n        filePath ?? \"/workspace/project/.agents_tmp/PLAN.md\",\n        \"/workspace/project\",\n      );\n      return readCloudConversationFile(conversationId, path);\n    }\n\n    const workingDir = await this.resolveConversationWorkingDir(conversationId);\n    const path = requirePathInsideDirectory(\n      filePath ?? `${workingDir}/.agents_tmp/PLAN.md`,\n      workingDir,\n    );\n    return new FileClient(getAgentServerClientOptions()).downloadTextFile(path);\n  }\n\n  static async downloadConversation(conversationId: string): Promise<Blob> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return downloadCloudConversation(conversationId);\n    }\n\n    return new FileClient(getAgentServerClientOptions()).downloadTrajectory(\n      conversationId,\n    );\n  }\n\n  static async getHooks(conversationId: string): Promise<GetHooksResponse> {\n    if (!conversationId) {\n      return emptyHooksResponse();\n    }\n    return emptyHooksResponse();\n  }\n\n  static async getRuntimeConversation(\n    conversationId: string,\n    conversationUrl: string | null | undefined,\n    sessionApiKey?: string | null,\n  ): Promise<RuntimeConversationInfo> {\n    const active = getActiveBackend().backend;\n\n    type RawRuntime = DirectConversationInfo & {\n      stats?: RuntimeConversationInfo[\"stats\"];\n    };\n\n    // Cloud mode: route through the cloud-proxy to the runtime sandbox at\n    // the conversation's runtime URL — same pattern as getVSCodeUrl. Local\n    // mode forwards conversationUrl so the host explicitly resolves to the\n    // conversation's runtime instead of falling back to the active backend.\n    const response =\n      active.kind === \"cloud\" && conversationUrl\n        ? await callCloudProxy<RawRuntime>({\n            backend: active,\n            method: \"GET\",\n            hostOverride: buildHttpBaseUrl(conversationUrl),\n            path: `/api/conversations/${conversationId}`,\n            authMode: \"session-api-key\",\n            sessionApiKey,\n          })\n        : await new ConversationClient(\n            getAgentServerClientOptions({\n              conversationUrl,\n              sessionApiKey,\n            }),\n          ).getConversation<RawRuntime>(conversationId);\n    const data = requireDirectConversationInfo(response);\n    const stats = isRecord(response) ? response.stats : null;\n\n    return {\n      id: data.id,\n      title: data.title?.trim()\n        ? data.title\n        : getDefaultConversationTitle(data.id),\n      metrics: normalizeMetrics(data.metrics),\n      created_at: data.created_at,\n      updated_at: data.updated_at,\n      status: toRuntimeStatus(data.execution_status),\n      stats: isRecord(stats) ? stats : { usage_to_metrics: {} },\n    };\n  }\n\n  static async searchConversations(\n    limit: number = 20,\n    pageId?: string,\n  ): Promise<AppConversationPage> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return searchCloudConversations(limit, pageId);\n    }\n\n    const data = await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).searchConversations({\n      limit,\n      page_id: pageId,\n      sort_order: ConversationSortOrder.UPDATED_AT_DESC,\n    });\n\n    return toConversationPage(requireConversationSearchPage(data));\n  }\n\n  static async deleteConversation(conversationId: string): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      await deleteCloudConversation(conversationId);\n    } else {\n      await new ConversationClient(\n        getAgentServerClientOptions(),\n      ).deleteConversation(conversationId);\n    }\n    removeStoredConversationMetadata(conversationId);\n  }\n\n  static async updateConversationTitle(\n    conversationId: string,\n    title: string,\n  ): Promise<AppConversation> {\n    await new ConversationClient(\n      getAgentServerClientOptions(),\n    ).updateConversation(conversationId, {\n      title,\n    });\n    const [conversation] = await this.batchGetAppConversations([\n      conversationId,\n    ]);\n    return requireAppConversation(conversation, conversationId);\n  }\n\n  /**\n   * Switches the LLM profile for the running conversation when one is open\n   * (POST /switch_profile — per-conversation swap, doesn't change the user's\n   * default profile). When called without a conversationId (home page),\n   * falls back to POST /activate so the next conversation created picks up\n   * the chosen profile.\n   *\n   * The per-conversation endpoint accepts only the profile name, so the UI does\n   * not need to fetch or forward profile secrets. That keeps switching working\n   * even when the agent server has no OH_SECRET_KEY for encrypted secret export.\n   */\n  static async switchProfile(\n    conversationId: string | null,\n    profileName: string,\n  ): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      throw new Error(\n        \"LLM profile switching is only supported for local agent-server backends.\",\n      );\n    }\n\n    if (!conversationId) {\n      await new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n        profileName,\n      );\n      return;\n    }\n\n    const clientOptions = getAgentServerClientOptions();\n    const conversationClient = new ConversationClient(clientOptions);\n    const profile = await new ProfilesClient(clientOptions).getProfile(\n      profileName,\n      { exposeSecrets: \"encrypted\" },\n    );\n    const model =\n      typeof profile.config.model === \"string\" ? profile.config.model : \"\";\n    if (!model) throw new Error(`Profile '${profileName}' has no model.`);\n    await conversationClient.switchLLM(conversationId, {\n      ...profile.config,\n      model,\n      // Avoid stale first-write-wins entries in the backend LLM registry.\n      usage_id: `profile:${profileName}:${uuidv4()}`,\n    } as LLMConfig);\n  }\n\n  /**\n   * Switches the model of a running ACP conversation in place (POST\n   * /switch_acp_model — the ACP analog of {@link switchProfile}'s /switch_profile).\n   * The agent-server calls the ACP wrapper's ``session/set_model`` on the live\n   * session, preserving context. Mirrors {@link switchProfile}'s\n   * local-backend-only guard and per-conversation ConversationClient call.\n   *\n   * Only valid once an ACP session exists (after the first message); the\n   * agent-server returns 409 before then — the home/no-session default is\n   * persisted via Settings instead (see ``use-switch-acp-model``).\n   */\n  static async switchAcpModel(\n    conversationId: string,\n    model: string,\n  ): Promise<void> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      throw new Error(\n        \"ACP model switching is only supported for local agent-server backends.\",\n      );\n    }\n\n    await new ConversationClient(getAgentServerClientOptions()).switchAcpModel(\n      conversationId,\n      model,\n    );\n  }\n}\n\nexport default AgentServerConversationService;\n"],"mappings":";;;;;;;;;;;;;;;;;AAkEA,IAAM,IAAiC,4BACjC,IACJ;AAGF,SAAS,IAAqC;AAC5C,QAAW,MAAM,EAAsC;;AAGzD,SAAS,EAAS,GAAkD;AAClE,QAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,EAAM;;AAG7E,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAAwB;AAC5C,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EACP,GACA,GACA,GACQ;CACR,IAAM,IAAQ,EAAK,MAAa,EAAK;AACrC,QAAO,OAAO,KAAU,YAAY,EAAM,MAAM,GAC5C,IACA;;AAGN,SAAS,EACP,GACgE;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,eAAe,EAAa,EAAM,cAAc;EAChD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,oBAAoB,EAAa,EAAM,mBAAmB;EAC1D,gBAAgB,EAAa,EAAM,eAAe;EAClD,gBAAgB,EAAa,EAAM,eAAe;EACnD,GAT4B;;AAY/B,SAAS,EAAiB,GAAwC;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,kBAAkB,EAAa,EAAM,iBAAiB;EACtD,qBAAqB,EAAa,EAAM,oBAAoB;EAC5D,yBAAyB,EAAoB,EAAM,wBAAwB;EAC5E,GAN4B;;AAS/B,SAAS,EAAe,GAAiD;AACvE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAAM,EAAS,EAAM,IAAI,GAC3B,EAAE,OAAO,EAAa,EAAM,IAAI,MAAM,EAAE,GACxC;AAQJ,QAAO;EACL,MAAM,EAAa,EAAM,KAAK;EAC9B,WAAW,EAAa,EAAM,UAAU;EACxC;EACD;;AAGH,SAAS,EACP,GACqC;AAErC,QADK,EAAS,EAAM,GACb,EAAE,aAAa,EAAa,EAAM,YAAY,EAAE,GAD1B;;AAc/B,SAAS,EAAc,GAA+C;AACpE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAA+B,EAAE;AACvC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,OAAO,KAAU,aACnB,EAAK,KAAO;AAGhB,QAAO;;AAGT,SAAS,EAAsB,GAA6B;AAC1D,KAAI,CAAC,EAAK,WAAW,IAAI,CAAE,QAAO;CAElC,IAAM,IAAqB,EAAE;AAC7B,MAAK,IAAM,KAAW,EAAK,MAAM,IAAI,CACnC,KAAI,KAAW,MAAY,IACzB,KAAI,MAAY,MAAM;AACpB,MAAI,CAAC,EAAS,OAAQ,QAAO;AAC7B,IAAS,KAAK;OAEd,GAAS,KAAK,EAAQ;AAK5B,QAAO,IAAI,EAAS,KAAK,IAAI;;AAG/B,SAAS,EAA2B,GAAc,GAA2B;CAC3E,IAAM,IAAiB,EAAsB,EAAK,EAC5C,IAAsB,EAAsB,EAAU;AAE5D,KACE,CAAC,KACD,CAAC,KACA,MAAmB,KAClB,CAAC,EAAe,WAAW,GAAG,EAAoB,GAAG,CAEvD,OAAU,MAAM,wDAAwD;AAG1E,QAAO;;AAGT,SAAS,EAA8B,GAAuC;AAC5E,KAAI,CAAC,EAAS,EAAK,IAAI,OAAO,EAAK,MAAO,YAAY,CAAC,EAAK,GAAG,MAAM,CACnE,OAAM,GAA6B;AAGrC,QAAO;EACL,IAAI,EAAK,GAAG,MAAM;EAClB,OAAO,EAAa,EAAK,MAAM;EAC/B,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,gBAAgB,EAAa,EAAK,eAAe;EACjD,SAAS,EAAiB,EAAK,QAAQ;EACvC,OAAO,EAAe,EAAK,MAAM;EACjC,WAAW,EAAmB,EAAK,UAAU;EAC7C,MAAM,EAAc,EAAK,KAAK;EAK9B,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,oBAAoB,EAAa,EAAK,mBAAmB;EAC1D;;AAGH,SAAS,EACP,GAC0B;AAC1B,KAAI,CAAC,MAAM,QAAQ,EAAM,CACvB,OAAM,GAA6B;AAErC,QAAO,EAAM,IAAI,EAA8B;;AAGjD,SAAS,EAA8B,GAGrC;AACA,KAAI,MAAM,QAAQ,EAAK,CACrB,QAAO;EACL,OAAO,EAA+B,EAAK;EAC3C,cAAc;EACf;AAGH,KAAI,CAAC,EAAS,EAAK,CACjB,OAAM,GAA6B;AAGrC,QAAO;EACL,OAAO,EAA+B,EAAK,MAAM;EACjD,cACE,OAAO,EAAK,gBAAiB,WAAW,EAAK,eAAe;EAC/D;;AAGH,IAAM,IAAmB,IAAI,IAAY;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,EACP,GACmC;CACnC,IAAM,IAAa,KAAU;AAC7B,QACE,EAAiB,IAAI,EAAW,GAAG,IAAa;;AAIpD,SAAS,EACP,GACA,GACiB;AACjB,KAAI,CAAC,EACH,OAAU,MAAM,gBAAgB,EAAe,gBAAgB;AAEjE,QAAO;;AAGT,IAAM,IAAN,MAAqC;CACnC,aAAa,YACX,GACA,GACA,GAC8B;EAC9B,IAAM,IAAS,GAAkB,CAAC,SAC9B,IAAkB,GAAS,mBAAmB,MAC9C,IAAgB,GAAS,iBAAiB;AAE9C,MAAI,EAAO,SAAS,SAAS;AAC3B,OAAI,CAAC,KAAmB,CAAC,GAAe;IACtC,IAAM,CAAC,KAAgB,MAAM,EAA2B,CACtD,EACD,CAAC;AAEF,IADA,IAAkB,GAAc,kBAAkB,MAAM,IAAI,MAC5D,IAAgB,GAAc,iBAAiB,MAAM,IAAI;;AAG3D,OAAI,CAAC,KAAmB,CAAC,EACvB,OAAU,MACR,iFACD;AAaH,UAVA,MAAM,EAAe;IACnB,SAAS;IACT,QAAQ;IACR,cAAc,EAAiB,EAAgB;IAC/C,MAAM,sBAAsB,EAAe;IAC3C,MAAM;KAAE,GAAG;KAAS,KAAK;KAAM;IAC/B,UAAU;IACV;IACD,CAAC,EAEK;;AAST,SANA,MAAM,IAAI,EACR,EAA4B;GAAE;GAAiB;GAAe,CAAC,CAChE,CAAC,UAAU,GAAgB,GAAS,EACnC,KAAK,IACN,CAAC,EAEK;;CAGT,aAAa,mBACX,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACmC;AACnC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAsBtC,QAAO,EAA2B;GAfhC,iBAAiB,IACb;IACE,MAAM;IACN,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAgB,CAAC;IAClD,GACD;GACJ,OAAO,KAA4B;GACnC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,SAAS,KAAW;GACpB,wBAAwB,KAAwB;GAChD,YAAY;GACZ,YAAY,KAAa;GAEO,CAAQ;EAG5C,IAAM,IAAW,MAAM,EAAgB,aAAa,EAC9C,IAAiB,GAAQ,EAKzB,IAAU,MAAM,EAAmD;GACvE;GACA,OAAO;GACP;GACA;GACA;GACA,YATA,KAAsB,EAA4B,EAAe;GAUlE,CAAC,EAEI,IAAO,MAAM,IAAI,EACrB,GAA6B,CAC9B,CAAC,mBAA2C,EAAQ,EAC/C,IAAe,GAA0B;AAC/C,MAAI,CAAC,EAAc,OAAM,IAAI,GAAyB;AAiBtD,UAfI,GAAU,uBAAuB,MAOnC,EAA8B,EAAK,IAAI;GACrC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,oBAAoB,KAAsB;GAC3C,CAAC,EAGG;GACL,IAAI,EAAK;GACT,oBAAoB;GACpB,QAAQ;GACR,QAAQ;GACR,qBAAqB,EAAK;GAC1B,kBAAkB,EAAa;GAC/B,SAAS;IACP,iBAAiB,EAAQ;IAGzB,SAAS,KAAW;IACrB;GACD,YAAY,EAAK;GACjB,YAAY,EAAK;GAClB;;CAGH,aAAa,aACX,GAC0C;AAO1C,SANI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAiC,EAAO,GAK1C;;CAGT,aAAa,aACX,GACA,GACA,GAC+B;EAM/B,IAAM,IACJ,MAAM,KAAK,8BAA8B,EAAe;AAc1D,SAAO,EAAE,YAAY,MAXG,IAAI,EAC1B,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,OAAO;GACP,SACE,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS,KAAA;GAC3D;GACD,CAAC,EAE8B;;CAGlC,aAAa,8BACX,GACiB;EACjB,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,GAAc,WAAW,eAAe,GAA0B;;CAG3E,aAAa,yBACX,GACqC;AAWrC,SAVI,EAAI,WAAW,IAAU,EAAE,GAE3B,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA2B,EAAI,GAOjC,EAA+B,MAJnB,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,EAAI,CAEJ,CAAC,KAAK,MAC/C,EAAkB,EAAK,CACxB;;CAGH,aAAa,6BACX,GACA,GAC0B;AAC1B,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MAAM,2CAA2C;AAE7D,SAAO,EAAkC,GAAgB,EAAS;;CAGpE,aAAa,6BACX,GACA,GACA,GACA,GAC0B;AAC1B,EAAI,IAEF,EAA8B,GAAgB;GAC5C,GAFe,EAA8B,EAEzC,IAAY,EAAE;GAClB,qBAAqB;GACrB,iBAAiB,KAAU;GAC3B,cAAe,KAA+C;GAC/D,CAAC,GAEF,EAAiC,EAAe;EAElD,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAG7D,aAAa,qBACX,GACA,GACiB;AACjB,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAQtC,QAAO,EAA0B,GAJpB,EACX,KAAY,0CACZ,qBAE+C,CAAK;EAGxD,IAAM,IAAa,MAAM,KAAK,8BAA8B,EAAe,EACrE,IAAO,EACX,KAAY,GAAG,EAAW,uBAC1B,EACD;AACD,SAAO,IAAI,EAAW,GAA6B,CAAC,CAAC,iBAAiB,EAAK;;CAG7E,aAAa,qBAAqB,GAAuC;AAKvE,SAJI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA0B,EAAe,GAG3C,IAAI,EAAW,GAA6B,CAAC,CAAC,mBACnD,EACD;;CAGH,aAAa,SAAS,GAAmD;AAIvE,SAAO,GAAoB;;CAG7B,aAAa,uBACX,GACA,GACA,GACkC;EAClC,IAAM,IAAS,GAAkB,CAAC,SAU5B,IACJ,EAAO,SAAS,WAAW,IACvB,MAAM,EAA2B;GAC/B,SAAS;GACT,QAAQ;GACR,cAAc,EAAiB,EAAgB;GAC/C,MAAM,sBAAsB;GAC5B,UAAU;GACV;GACD,CAAC,GACF,MAAM,IAAI,EACR,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,gBAA4B,EAAe,EAC7C,IAAO,EAA8B,EAAS,EAC9C,IAAQ,EAAS,EAAS,GAAG,EAAS,QAAQ;AAEpD,SAAO;GACL,IAAI,EAAK;GACT,OAAO,EAAK,OAAO,MAAM,GACrB,EAAK,QACL,EAA4B,EAAK,GAAG;GACxC,SAAS,EAAiB,EAAK,QAAQ;GACvC,YAAY,EAAK;GACjB,YAAY,EAAK;GACjB,QAAQ,EAAgB,EAAK,iBAAiB;GAC9C,OAAO,EAAS,EAAM,GAAG,IAAQ,EAAE,kBAAkB,EAAE,EAAE;GAC1D;;CAGH,aAAa,oBACX,IAAgB,IAChB,GAC8B;AAa9B,SAZI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAyB,GAAO,EAAO,GAWzC,EAAmB,EAA8B,MARrC,IAAI,EACrB,GAA6B,CAC9B,CAAC,oBAAoB;GACpB;GACA,SAAS;GACT,YAAY,EAAsB;GACnC,CAAC,CAE2D,CAAC;;CAGhE,aAAa,mBAAmB,GAAuC;AAQrE,EAPI,GAAkB,CAAC,QAAQ,SAAS,UACtC,MAAM,EAAwB,EAAe,GAE7C,MAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,EAAe,EAEtC,EAAiC,EAAe;;CAGlD,aAAa,wBACX,GACA,GAC0B;AAC1B,QAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,GAAgB,EACnC,UACD,CAAC;EACF,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAc7D,aAAa,cACX,GACA,GACe;AACf,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,2EACD;AAGH,MAAI,CAAC,GAAgB;AACnB,SAAM,IAAI,EAAe,GAA6B,CAAC,CAAC,gBACtD,EACD;AACD;;EAGF,IAAM,IAAgB,GAA6B,EAC7C,IAAqB,IAAI,EAAmB,EAAc,EAC1D,IAAU,MAAM,IAAI,EAAe,EAAc,CAAC,WACtD,GACA,EAAE,eAAe,aAAa,CAC/B,EACK,IACJ,OAAO,EAAQ,OAAO,SAAU,WAAW,EAAQ,OAAO,QAAQ;AACpE,MAAI,CAAC,EAAO,OAAU,MAAM,YAAY,EAAY,iBAAiB;AACrE,QAAM,EAAmB,UAAU,GAAgB;GACjD,GAAG,EAAQ;GACX;GAEA,UAAU,WAAW,EAAY,GAAG,GAAQ;GAC7C,CAAc;;CAcjB,aAAa,eACX,GACA,GACe;AACf,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,yEACD;AAGH,QAAM,IAAI,EAAmB,GAA6B,CAAC,CAAC,eAC1D,GACA,EACD"}

package/dist/api/device-flow-client.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`./backend-registry/active-store.cjs`),t=require(`./backend-registry/auth.cjs`);var n=class extends Error{constructor(e,t){super(e),this.code=t,this.name=`DeviceFlowError`}},r=6e5,i=3e4;async function a(n,r,i,a,o,s){let c=e.getEffectiveLocalBackend(),l=`${c.host.replace(/\/+$/,``)}/api/cloud-proxy`;return await fetch(l,{method:`POST`,headers:{"Content-Type":`application/json`,...t.buildAuthHeaders(c)},body:JSON.stringify({host:n,method:r,path:i,headers:o?{"Content-Type":o}:{},body:a??null}),signal:s})}async function o(e){let t=e.replace(/\/+$/,``);try{let e=await a(t,`POST`,`/oauth/device/authorize`,{},`application/json`);if(!e.ok)throw new n(`Failed to start device flow: Server returned ${e.status}`);let r=await e.json();if(!r.device_code||!r.user_code||!r.verification_uri)throw new n(`Invalid response from device authorization endpoint: missing required fields`);let i=r.verification_uri_complete??`${r.verification_uri}?user_code=${encodeURIComponent(r.user_code)}`;return{device_code:r.device_code,user_code:r.user_code,verification_uri:r.verification_uri,verification_uri_complete:i,expires_in:r.expires_in??600,interval:r.interval??5}}catch(e){throw e instanceof n?e:new n(`Failed to start device flow: ${e instanceof Error?e.message:String(e)}`)}}async function s(e,t,o){let s=e.replace(/\/+$/,``),l=o.timeout??r,u=Math.max(1,o.interval)*1e3,d=Date.now();for(;Date.now()-d<l;){if(o.signal?.aborted)throw new n(`Authorization cancelled`,`cancelled`);try{let e=await a(s,`POST`,`/oauth/device/token`,new URLSearchParams({grant_type:`urn:ietf:params:oauth:grant-type:device_code`,device_code:t}).toString(),`application/x-www-form-urlencoded`,o.signal);if(e.ok){let t=await e.json();if(!t.access_token)throw new n(`Invalid token response: missing access_token`);return{access_token:t.access_token,token_type:t.token_type??`Bearer`,expires_in:t.expires_in}}let r;try{r=await e.json()}catch{throw new n(`Unexpected response from server: ${e.status}`)}let{error:c,error_description:l}=r;switch(c){case`authorization_pending`:break;case`slow_down`:u=typeof r.interval==`number`&&isFinite(r.interval)&&r.interval>0?Math.max(1,Math.min(r.interval,30))*1e3:Math.min(u+5e3,i);break;case`expired_token`:throw new n(`Device code has expired. Please try again.`,`expired_token`);case`access_denied`:throw new n(`Authorization request was denied.`,`access_denied`);default:throw new n(`Authorization error: ${c}${l?` - ${l}`:``}`,c)}}catch(e){if(e instanceof n)throw e;if(e instanceof DOMException&&e.name===`AbortError`)throw new n(`Authorization cancelled`,`cancelled`);console.warn(`Network error during polling, retrying:`,e)}try{await c(u,o.signal)}catch(e){throw e instanceof DOMException&&e.name===`AbortError`?new n(`Authorization cancelled`,`cancelled`):e}}throw new n(`Timeout waiting for authorization. Please try again.`,`timeout`)}function c(e,t){return new Promise((n,r)=>{if(t?.aborted){r(new DOMException(`Aborted`,`AbortError`));return}let i=setTimeout(n,e);t?.addEventListener(`abort`,()=>{clearTimeout(i),r(new DOMException(`Aborted`,`AbortError`))},{once:!0})})}exports.DeviceFlowError=n,exports.pollForToken=s,exports.startDeviceFlow=o;
+require(`../_virtual/_rolldown/runtime.cjs`);var e=class extends Error{constructor(e,t){super(e),this.code=t,this.name=`DeviceFlowError`}},t=6e5,n=3e4;async function r(e,t,n,r,i,a){let o=r===void 0?void 0:typeof r==`string`||r instanceof Blob||r instanceof FormData||r instanceof URLSearchParams?r:JSON.stringify(r);return await fetch(`${e.replace(/\/+$/,``)}${n}`,{method:t,headers:{...i?{"Content-Type":i}:{}},body:o,signal:a})}async function i(t){let n=t.replace(/\/+$/,``);try{let t=await r(n,`POST`,`/oauth/device/authorize`,{},`application/json`);if(!t.ok)throw new e(`Failed to start device flow: Server returned ${t.status}`);let i=await t.json();if(!i.device_code||!i.user_code||!i.verification_uri)throw new e(`Invalid response from device authorization endpoint: missing required fields`);let a=i.verification_uri_complete??`${i.verification_uri}?user_code=${encodeURIComponent(i.user_code)}`;return{device_code:i.device_code,user_code:i.user_code,verification_uri:i.verification_uri,verification_uri_complete:a,expires_in:i.expires_in??600,interval:i.interval??5}}catch(t){throw t instanceof e?t:new e(`Failed to start device flow: ${t instanceof Error?t.message:String(t)}`)}}async function a(i,a,s){let c=i.replace(/\/+$/,``),l=s.timeout??t,u=Math.max(1,s.interval)*1e3,d=Date.now();for(;Date.now()-d<l;){if(s.signal?.aborted)throw new e(`Authorization cancelled`,`cancelled`);try{let t=await r(c,`POST`,`/oauth/device/token`,new URLSearchParams({grant_type:`urn:ietf:params:oauth:grant-type:device_code`,device_code:a}).toString(),`application/x-www-form-urlencoded`,s.signal);if(t.ok){let n=await t.json();if(!n.access_token)throw new e(`Invalid token response: missing access_token`);return{access_token:n.access_token,token_type:n.token_type??`Bearer`,expires_in:n.expires_in}}let i;try{i=await t.json()}catch{throw new e(`Unexpected response from server: ${t.status}`)}let{error:o,error_description:l}=i;switch(o){case`authorization_pending`:break;case`slow_down`:u=typeof i.interval==`number`&&isFinite(i.interval)&&i.interval>0?Math.max(1,Math.min(i.interval,30))*1e3:Math.min(u+5e3,n);break;case`expired_token`:throw new e(`Device code has expired. Please try again.`,`expired_token`);case`access_denied`:throw new e(`Authorization request was denied.`,`access_denied`);default:throw new e(`Authorization error: ${o}${l?` - ${l}`:``}`,o)}}catch(t){if(t instanceof e)throw t;if(t instanceof DOMException&&t.name===`AbortError`)throw new e(`Authorization cancelled`,`cancelled`);console.warn(`Network error during polling, retrying:`,t)}try{await o(u,s.signal)}catch(t){throw t instanceof DOMException&&t.name===`AbortError`?new e(`Authorization cancelled`,`cancelled`):t}}throw new e(`Timeout waiting for authorization. Please try again.`,`timeout`)}function o(e,t){return new Promise((n,r)=>{if(t?.aborted){r(new DOMException(`Aborted`,`AbortError`));return}let i=setTimeout(n,e);t?.addEventListener(`abort`,()=>{clearTimeout(i),r(new DOMException(`Aborted`,`AbortError`))},{once:!0})})}exports.DeviceFlowError=e,exports.pollForToken=a,exports.startDeviceFlow=i;
 //# sourceMappingURL=device-flow-client.cjs.map

package/dist/api/device-flow-client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"device-flow-client.cjs","names":[],"sources":["../../src/api/device-flow-client.ts"],"sourcesContent":["/**\n * OAuth 2.0 Device Flow client implementation (RFC 8628).\n *\n * Used for one-click authentication with cloud backends.\n * The flow allows users to authenticate in their browser while the\n * application polls for the resulting API key.\n *\n * All device flow requests are proxied through the local agent-server's\n * cloud-proxy endpoint to avoid CORS issues. Since a local agent-server\n * is required to use the frontend, the proxy is always available.\n */\n\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\n\nexport class DeviceFlowError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: string,\n  ) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceAuthorizationResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface DeviceTokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in?: number;\n}\n\ninterface DeviceTokenErrorResponse {\n  error: string;\n  error_description?: string;\n  interval?: number;\n}\n\nconst DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes\nconst MAX_INTERVAL_MS = 30_000; // 30 seconds max polling interval\n\n/**\n * Check if a host is a known OpenHands Cloud domain.\n * Uses hostname extraction to prevent substring matching attacks.\n */\nexport function isOpenHandsCloudHost(host: string): boolean {\n  try {\n    // Extract hostname from URL or treat as hostname if no protocol\n    const trimmed = host.trim().toLowerCase();\n    const withProtocol = /^https?:\\/\\//i.test(trimmed)\n      ? trimmed\n      : `https://${trimmed}`;\n    const url = new URL(withProtocol);\n    const hostname = url.hostname;\n\n    // Check if hostname ends with known domains (exact suffix match)\n    return (\n      hostname.endsWith(\".all-hands.dev\") ||\n      hostname === \"all-hands.dev\" ||\n      hostname.endsWith(\".openhands.dev\") ||\n      hostname === \"openhands.dev\"\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Make a proxied request through the local agent-server's cloud-proxy endpoint.\n * This avoids CORS issues when calling OpenHands Cloud endpoints.\n */\nasync function makeProxiedRequest(\n  upstreamHost: string,\n  method: \"GET\" | \"POST\",\n  path: string,\n  body?: unknown,\n  contentType?: string,\n  signal?: AbortSignal,\n): Promise<Response> {\n  const local = getEffectiveLocalBackend();\n  const proxyUrl = `${local.host.replace(/\\/+$/, \"\")}/api/cloud-proxy`;\n\n  const response = await fetch(proxyUrl, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      ...buildAuthHeaders(local),\n    },\n    body: JSON.stringify({\n      host: upstreamHost,\n      method,\n      path,\n      headers: contentType ? { \"Content-Type\": contentType } : {},\n      body: body ?? null,\n    }),\n    signal,\n  });\n\n  return response;\n}\n\n/**\n * Start the OAuth 2.0 Device Flow by requesting a device code.\n * All requests are proxied through the local agent-server to avoid CORS issues.\n *\n * @param host - The cloud backend host URL (e.g., \"https://app.all-hands.dev\")\n * @returns DeviceAuthorizationResponse with device_code, user_code, verification URLs, etc.\n * @throws DeviceFlowError if the request fails\n */\nexport async function startDeviceFlow(\n  host: string,\n): Promise<DeviceAuthorizationResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n\n  try {\n    const response = await makeProxiedRequest(\n      normalizedHost,\n      \"POST\",\n      \"/oauth/device/authorize\",\n      {},\n      \"application/json\",\n    );\n\n    if (!response.ok) {\n      // Avoid exposing sensitive server error details\n      throw new DeviceFlowError(\n        `Failed to start device flow: Server returned ${response.status}`,\n      );\n    }\n\n    const data = await response.json();\n\n    // Validate required fields per RFC 8628 Section 3.2\n    // verification_uri_complete is OPTIONAL per RFC\n    if (!data.device_code || !data.user_code || !data.verification_uri) {\n      throw new DeviceFlowError(\n        \"Invalid response from device authorization endpoint: missing required fields\",\n      );\n    }\n\n    // Build verification_uri_complete if not provided (optional per RFC)\n    const verificationUriComplete =\n      data.verification_uri_complete ??\n      `${data.verification_uri}?user_code=${encodeURIComponent(data.user_code)}`;\n\n    return {\n      device_code: data.device_code,\n      user_code: data.user_code,\n      verification_uri: data.verification_uri,\n      verification_uri_complete: verificationUriComplete,\n      expires_in: data.expires_in ?? 600,\n      interval: data.interval ?? 5,\n    };\n  } catch (error) {\n    if (error instanceof DeviceFlowError) {\n      throw error;\n    }\n    throw new DeviceFlowError(\n      `Failed to start device flow: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nexport interface PollOptions {\n  /** Polling interval in seconds (from device authorization response) */\n  interval: number;\n  /** Maximum time to wait for authorization in milliseconds */\n  timeout?: number;\n  /** Abort signal to cancel polling */\n  signal?: AbortSignal;\n}\n\n/**\n * Poll for the API key after user authorization.\n * All requests are proxied through the local agent-server to avoid CORS issues.\n *\n * @param host - The cloud backend host URL\n * @param deviceCode - The device code from startDeviceFlow\n * @param options - Polling options including interval, timeout, and abort signal\n * @returns DeviceTokenResponse containing the access_token (API key)\n * @throws DeviceFlowError if polling fails, user denies access, or timeout expires\n */\nexport async function pollForToken(\n  host: string,\n  deviceCode: string,\n  options: PollOptions,\n): Promise<DeviceTokenResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n  const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n  let interval = Math.max(1, options.interval) * 1000; // At least 1 second\n  const startTime = Date.now();\n\n  while (Date.now() - startTime < timeout) {\n    // Check if cancelled\n    if (options.signal?.aborted) {\n      throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n    }\n\n    try {\n      // RFC 8628 Section 3.4 requires grant_type parameter\n      const tokenRequestBody = new URLSearchParams({\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        device_code: deviceCode,\n      }).toString();\n\n      const response = await makeProxiedRequest(\n        normalizedHost,\n        \"POST\",\n        \"/oauth/device/token\",\n        tokenRequestBody,\n        \"application/x-www-form-urlencoded\",\n        options.signal,\n      );\n\n      if (response.ok) {\n        const data = await response.json();\n        if (!data.access_token) {\n          throw new DeviceFlowError(\n            \"Invalid token response: missing access_token\",\n          );\n        }\n        return {\n          access_token: data.access_token,\n          token_type: data.token_type ?? \"Bearer\",\n          expires_in: data.expires_in,\n        };\n      }\n\n      // Handle error responses\n      let errorData: DeviceTokenErrorResponse;\n      try {\n        errorData = await response.json();\n      } catch {\n        throw new DeviceFlowError(\n          `Unexpected response from server: ${response.status}`,\n        );\n      }\n\n      const { error, error_description } = errorData;\n\n      switch (error) {\n        case \"authorization_pending\":\n          // User hasn't finished yet; continue polling\n          break;\n\n        case \"slow_down\":\n          // Server asks us to poll less frequently\n          // RFC 8628 Section 3.5: \"the client MUST increase its polling interval by 5 seconds\"\n          // Validate server-provided interval to prevent DoS (must be number, finite, positive)\n          if (\n            typeof errorData.interval === \"number\" &&\n            isFinite(errorData.interval) &&\n            errorData.interval > 0\n          ) {\n            interval = Math.max(1, Math.min(errorData.interval, 30)) * 1000;\n          } else {\n            // RFC 8628 mandates incrementing by 5 seconds\n            interval = Math.min(interval + 5000, MAX_INTERVAL_MS);\n          }\n          break;\n\n        case \"expired_token\":\n          throw new DeviceFlowError(\n            \"Device code has expired. Please try again.\",\n            \"expired_token\",\n          );\n\n        case \"access_denied\":\n          throw new DeviceFlowError(\n            \"Authorization request was denied.\",\n            \"access_denied\",\n          );\n\n        default:\n          throw new DeviceFlowError(\n            `Authorization error: ${error}${error_description ? ` - ${error_description}` : \"\"}`,\n            error,\n          );\n      }\n    } catch (error) {\n      // DeviceFlowError means a definitive error (denied, expired, etc.) - rethrow\n      if (error instanceof DeviceFlowError) {\n        throw error;\n      }\n      // User cancelled - rethrow\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      // Network errors during polling should continue until timeout, not fail immediately\n      // Brief network hiccups shouldn't abort 10-minute flows\n      console.warn(\"Network error during polling, retrying:\", error);\n    }\n\n    // Wait before next poll (wrap in try-catch for consistent abort handling)\n    try {\n      await sleep(interval, options.signal);\n    } catch (error) {\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      throw error;\n    }\n  }\n\n  throw new DeviceFlowError(\n    \"Timeout waiting for authorization. Please try again.\",\n    \"timeout\",\n  );\n}\n\n/**\n * Sleep for a given duration, respecting an optional abort signal.\n */\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"Aborted\", \"AbortError\"));\n      return;\n    }\n\n    const timeoutId = setTimeout(resolve, ms);\n\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timeoutId);\n        reject(new DOMException(\"Aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n}\n"],"mappings":"6IAeA,IAAa,EAAb,cAAqC,KAAM,CACzC,YACE,EACA,EACA,CACA,MAAM,EAAQ,CAFE,KAAA,KAAA,EAGhB,KAAK,KAAO,oBAyBV,EAAqB,IACrB,EAAkB,IAgCxB,eAAe,EACb,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EAAQ,EAAA,0BAA0B,CAClC,EAAW,GAAG,EAAM,KAAK,QAAQ,OAAQ,GAAG,CAAC,kBAkBnD,OAAO,MAhBgB,MAAM,EAAU,CACrC,OAAQ,OACR,QAAS,CACP,eAAgB,mBAChB,GAAG,EAAA,iBAAiB,EAAM,CAC3B,CACD,KAAM,KAAK,UAAU,CACnB,KAAM,EACN,SACA,OACA,QAAS,EAAc,CAAE,eAAgB,EAAa,CAAG,EAAE,CAC3D,KAAM,GAAQ,KACf,CAAC,CACF,SACD,CAAC,CAaJ,eAAsB,EACpB,EACsC,CACtC,IAAM,EAAiB,EAAK,QAAQ,OAAQ,GAAG,CAE/C,GAAI,CACF,IAAM,EAAW,MAAM,EACrB,EACA,OACA,0BACA,EAAE,CACF,mBACD,CAED,GAAI,CAAC,EAAS,GAEZ,MAAM,IAAI,EACR,gDAAgD,EAAS,SAC1D,CAGH,IAAM,EAAO,MAAM,EAAS,MAAM,CAIlC,GAAI,CAAC,EAAK,aAAe,CAAC,EAAK,WAAa,CAAC,EAAK,iBAChD,MAAM,IAAI,EACR,+EACD,CAIH,IAAM,EACJ,EAAK,2BACL,GAAG,EAAK,iBAAiB,aAAa,mBAAmB,EAAK,UAAU,GAE1E,MAAO,CACL,YAAa,EAAK,YAClB,UAAW,EAAK,UAChB,iBAAkB,EAAK,iBACvB,0BAA2B,EAC3B,WAAY,EAAK,YAAc,IAC/B,SAAU,EAAK,UAAY,EAC5B,OACM,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,IAAI,EACR,gCAAgC,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,GACvF,EAuBL,eAAsB,EACpB,EACA,EACA,EAC8B,CAC9B,IAAM,EAAiB,EAAK,QAAQ,OAAQ,GAAG,CACzC,EAAU,EAAQ,SAAW,EAC/B,EAAW,KAAK,IAAI,EAAG,EAAQ,SAAS,CAAG,IACzC,EAAY,KAAK,KAAK,CAE5B,KAAO,KAAK,KAAK,CAAG,EAAY,GAAS,CAEvC,GAAI,EAAQ,QAAQ,QAClB,MAAM,IAAI,EAAgB,0BAA2B,YAAY,CAGnE,GAAI,CAOF,IAAM,EAAW,MAAM,EACrB,EACA,OACA,sBARuB,IAAI,gBAAgB,CAC3C,WAAY,+CACZ,YAAa,EACd,CAAC,CAAC,UAMD,CACA,oCACA,EAAQ,OACT,CAED,GAAI,EAAS,GAAI,CACf,IAAM,EAAO,MAAM,EAAS,MAAM,CAClC,GAAI,CAAC,EAAK,aACR,MAAM,IAAI,EACR,+CACD,CAEH,MAAO,CACL,aAAc,EAAK,aACnB,WAAY,EAAK,YAAc,SAC/B,WAAY,EAAK,WAClB,CAIH,IAAI,EACJ,GAAI,CACF,EAAY,MAAM,EAAS,MAAM,MAC3B,CACN,MAAM,IAAI,EACR,oCAAoC,EAAS,SAC9C,CAGH,GAAM,CAAE,QAAO,qBAAsB,EAErC,OAAQ,EAAR,CACE,IAAK,wBAEH,MAEF,IAAK,YAIH,AAQE,EAPA,OAAO,EAAU,UAAa,UAC9B,SAAS,EAAU,SAAS,EAC5B,EAAU,SAAW,EAEV,KAAK,IAAI,EAAG,KAAK,IAAI,EAAU,SAAU,GAAG,CAAC,CAAG,IAGhD,KAAK,IAAI,EAAW,IAAM,EAAgB,CAEvD,MAEF,IAAK,gBACH,MAAM,IAAI,EACR,6CACA,gBACD,CAEH,IAAK,gBACH,MAAM,IAAI,EACR,oCACA,gBACD,CAEH,QACE,MAAM,IAAI,EACR,wBAAwB,IAAQ,EAAoB,MAAM,IAAsB,KAChF,EACD,QAEE,EAAO,CAEd,GAAI,aAAiB,EACnB,MAAM,EAGR,GAAI,aAAiB,cAAgB,EAAM,OAAS,aAClD,MAAM,IAAI,EAAgB,0BAA2B,YAAY,CAInE,QAAQ,KAAK,0CAA2C,EAAM,CAIhE,GAAI,CACF,MAAM,EAAM,EAAU,EAAQ,OAAO,OAC9B,EAAO,CAId,MAHI,aAAiB,cAAgB,EAAM,OAAS,aAC5C,IAAI,EAAgB,0BAA2B,YAAY,CAE7D,GAIV,MAAM,IAAI,EACR,uDACA,UACD,CAMH,SAAS,EAAM,EAAY,EAAqC,CAC9D,OAAO,IAAI,SAAS,EAAS,IAAW,CACtC,GAAI,GAAQ,QAAS,CACnB,EAAO,IAAI,aAAa,UAAW,aAAa,CAAC,CACjD,OAGF,IAAM,EAAY,WAAW,EAAS,EAAG,CAEzC,GAAQ,iBACN,YACM,CACJ,aAAa,EAAU,CACvB,EAAO,IAAI,aAAa,UAAW,aAAa,CAAC,EAEnD,CAAE,KAAM,GAAM,CACf,EACD"}
+{"version":3,"file":"device-flow-client.cjs","names":[],"sources":["../../src/api/device-flow-client.ts"],"sourcesContent":["/**\n * OAuth 2.0 Device Flow client implementation (RFC 8628).\n *\n * Used for one-click authentication with cloud backends.\n * The flow allows users to authenticate in their browser while the\n * application polls for the resulting API key.\n *\n * Device flow requests go directly to the configured OpenHands Cloud host.\n */\n\nexport class DeviceFlowError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: string,\n  ) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceAuthorizationResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface DeviceTokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in?: number;\n}\n\ninterface DeviceTokenErrorResponse {\n  error: string;\n  error_description?: string;\n  interval?: number;\n}\n\nconst DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes\nconst MAX_INTERVAL_MS = 30_000; // 30 seconds max polling interval\n\n/**\n * Check if a host is a known OpenHands Cloud domain.\n * Uses hostname extraction to prevent substring matching attacks.\n */\nexport function isOpenHandsCloudHost(host: string): boolean {\n  try {\n    // Extract hostname from URL or treat as hostname if no protocol\n    const trimmed = host.trim().toLowerCase();\n    const withProtocol = /^https?:\\/\\//i.test(trimmed)\n      ? trimmed\n      : `https://${trimmed}`;\n    const url = new URL(withProtocol);\n    const hostname = url.hostname;\n\n    // Check if hostname ends with known domains (exact suffix match)\n    return (\n      hostname.endsWith(\".all-hands.dev\") ||\n      hostname === \"all-hands.dev\" ||\n      hostname.endsWith(\".openhands.dev\") ||\n      hostname === \"openhands.dev\"\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Make a direct request to the OpenHands Cloud device-flow endpoint.\n */\nasync function makeCloudRequest(\n  upstreamHost: string,\n  method: \"GET\" | \"POST\",\n  path: string,\n  body?: unknown,\n  contentType?: string,\n  signal?: AbortSignal,\n): Promise<Response> {\n  const requestBody =\n    body === undefined\n      ? undefined\n      : typeof body === \"string\" ||\n          body instanceof Blob ||\n          body instanceof FormData ||\n          body instanceof URLSearchParams\n        ? body\n        : JSON.stringify(body);\n\n  const response = await fetch(`${upstreamHost.replace(/\\/+$/, \"\")}${path}`, {\n    method,\n    headers: {\n      ...(contentType ? { \"Content-Type\": contentType } : {}),\n    },\n    body: requestBody,\n    signal,\n  });\n\n  return response;\n}\n\n/**\n * Start the OAuth 2.0 Device Flow by requesting a device code.\n * Requests are sent directly to the cloud host.\n *\n * @param host - The cloud backend host URL (e.g., \"https://app.all-hands.dev\")\n * @returns DeviceAuthorizationResponse with device_code, user_code, verification URLs, etc.\n * @throws DeviceFlowError if the request fails\n */\nexport async function startDeviceFlow(\n  host: string,\n): Promise<DeviceAuthorizationResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n\n  try {\n    const response = await makeCloudRequest(\n      normalizedHost,\n      \"POST\",\n      \"/oauth/device/authorize\",\n      {},\n      \"application/json\",\n    );\n\n    if (!response.ok) {\n      // Avoid exposing sensitive server error details\n      throw new DeviceFlowError(\n        `Failed to start device flow: Server returned ${response.status}`,\n      );\n    }\n\n    const data = await response.json();\n\n    // Validate required fields per RFC 8628 Section 3.2\n    // verification_uri_complete is OPTIONAL per RFC\n    if (!data.device_code || !data.user_code || !data.verification_uri) {\n      throw new DeviceFlowError(\n        \"Invalid response from device authorization endpoint: missing required fields\",\n      );\n    }\n\n    // Build verification_uri_complete if not provided (optional per RFC)\n    const verificationUriComplete =\n      data.verification_uri_complete ??\n      `${data.verification_uri}?user_code=${encodeURIComponent(data.user_code)}`;\n\n    return {\n      device_code: data.device_code,\n      user_code: data.user_code,\n      verification_uri: data.verification_uri,\n      verification_uri_complete: verificationUriComplete,\n      expires_in: data.expires_in ?? 600,\n      interval: data.interval ?? 5,\n    };\n  } catch (error) {\n    if (error instanceof DeviceFlowError) {\n      throw error;\n    }\n    throw new DeviceFlowError(\n      `Failed to start device flow: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nexport interface PollOptions {\n  /** Polling interval in seconds (from device authorization response) */\n  interval: number;\n  /** Maximum time to wait for authorization in milliseconds */\n  timeout?: number;\n  /** Abort signal to cancel polling */\n  signal?: AbortSignal;\n}\n\n/**\n * Poll for the API key after user authorization.\n * Requests are sent directly to the cloud host.\n *\n * @param host - The cloud backend host URL\n * @param deviceCode - The device code from startDeviceFlow\n * @param options - Polling options including interval, timeout, and abort signal\n * @returns DeviceTokenResponse containing the access_token (API key)\n * @throws DeviceFlowError if polling fails, user denies access, or timeout expires\n */\nexport async function pollForToken(\n  host: string,\n  deviceCode: string,\n  options: PollOptions,\n): Promise<DeviceTokenResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n  const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n  let interval = Math.max(1, options.interval) * 1000; // At least 1 second\n  const startTime = Date.now();\n\n  while (Date.now() - startTime < timeout) {\n    // Check if cancelled\n    if (options.signal?.aborted) {\n      throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n    }\n\n    try {\n      // RFC 8628 Section 3.4 requires grant_type parameter\n      const tokenRequestBody = new URLSearchParams({\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        device_code: deviceCode,\n      }).toString();\n\n      const response = await makeCloudRequest(\n        normalizedHost,\n        \"POST\",\n        \"/oauth/device/token\",\n        tokenRequestBody,\n        \"application/x-www-form-urlencoded\",\n        options.signal,\n      );\n\n      if (response.ok) {\n        const data = await response.json();\n        if (!data.access_token) {\n          throw new DeviceFlowError(\n            \"Invalid token response: missing access_token\",\n          );\n        }\n        return {\n          access_token: data.access_token,\n          token_type: data.token_type ?? \"Bearer\",\n          expires_in: data.expires_in,\n        };\n      }\n\n      // Handle error responses\n      let errorData: DeviceTokenErrorResponse;\n      try {\n        errorData = await response.json();\n      } catch {\n        throw new DeviceFlowError(\n          `Unexpected response from server: ${response.status}`,\n        );\n      }\n\n      const { error, error_description } = errorData;\n\n      switch (error) {\n        case \"authorization_pending\":\n          // User hasn't finished yet; continue polling\n          break;\n\n        case \"slow_down\":\n          // Server asks us to poll less frequently\n          // RFC 8628 Section 3.5: \"the client MUST increase its polling interval by 5 seconds\"\n          // Validate server-provided interval to prevent DoS (must be number, finite, positive)\n          if (\n            typeof errorData.interval === \"number\" &&\n            isFinite(errorData.interval) &&\n            errorData.interval > 0\n          ) {\n            interval = Math.max(1, Math.min(errorData.interval, 30)) * 1000;\n          } else {\n            // RFC 8628 mandates incrementing by 5 seconds\n            interval = Math.min(interval + 5000, MAX_INTERVAL_MS);\n          }\n          break;\n\n        case \"expired_token\":\n          throw new DeviceFlowError(\n            \"Device code has expired. Please try again.\",\n            \"expired_token\",\n          );\n\n        case \"access_denied\":\n          throw new DeviceFlowError(\n            \"Authorization request was denied.\",\n            \"access_denied\",\n          );\n\n        default:\n          throw new DeviceFlowError(\n            `Authorization error: ${error}${error_description ? ` - ${error_description}` : \"\"}`,\n            error,\n          );\n      }\n    } catch (error) {\n      // DeviceFlowError means a definitive error (denied, expired, etc.) - rethrow\n      if (error instanceof DeviceFlowError) {\n        throw error;\n      }\n      // User cancelled - rethrow\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      // Network errors during polling should continue until timeout, not fail immediately\n      // Brief network hiccups shouldn't abort 10-minute flows\n      console.warn(\"Network error during polling, retrying:\", error);\n    }\n\n    // Wait before next poll (wrap in try-catch for consistent abort handling)\n    try {\n      await sleep(interval, options.signal);\n    } catch (error) {\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      throw error;\n    }\n  }\n\n  throw new DeviceFlowError(\n    \"Timeout waiting for authorization. Please try again.\",\n    \"timeout\",\n  );\n}\n\n/**\n * Sleep for a given duration, respecting an optional abort signal.\n */\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"Aborted\", \"AbortError\"));\n      return;\n    }\n\n    const timeoutId = setTimeout(resolve, ms);\n\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timeoutId);\n        reject(new DOMException(\"Aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n}\n"],"mappings":"6CAUA,IAAa,EAAb,cAAqC,KAAM,CACzC,YACE,EACA,EACA,CACA,MAAM,EAAQ,CAFE,KAAA,KAAA,EAGhB,KAAK,KAAO,oBAyBV,EAAqB,IACrB,EAAkB,IA+BxB,eAAe,EACb,EACA,EACA,EACA,EACA,EACA,EACmB,CACnB,IAAM,EACJ,IAAS,IAAA,GACL,IAAA,GACA,OAAO,GAAS,UACd,aAAgB,MAChB,aAAgB,UAChB,aAAgB,gBAChB,EACA,KAAK,UAAU,EAAK,CAW5B,OAAO,MATgB,MAAM,GAAG,EAAa,QAAQ,OAAQ,GAAG,GAAG,IAAQ,CACzE,SACA,QAAS,CACP,GAAI,EAAc,CAAE,eAAgB,EAAa,CAAG,EAAE,CACvD,CACD,KAAM,EACN,SACD,CAAC,CAaJ,eAAsB,EACpB,EACsC,CACtC,IAAM,EAAiB,EAAK,QAAQ,OAAQ,GAAG,CAE/C,GAAI,CACF,IAAM,EAAW,MAAM,EACrB,EACA,OACA,0BACA,EAAE,CACF,mBACD,CAED,GAAI,CAAC,EAAS,GAEZ,MAAM,IAAI,EACR,gDAAgD,EAAS,SAC1D,CAGH,IAAM,EAAO,MAAM,EAAS,MAAM,CAIlC,GAAI,CAAC,EAAK,aAAe,CAAC,EAAK,WAAa,CAAC,EAAK,iBAChD,MAAM,IAAI,EACR,+EACD,CAIH,IAAM,EACJ,EAAK,2BACL,GAAG,EAAK,iBAAiB,aAAa,mBAAmB,EAAK,UAAU,GAE1E,MAAO,CACL,YAAa,EAAK,YAClB,UAAW,EAAK,UAChB,iBAAkB,EAAK,iBACvB,0BAA2B,EAC3B,WAAY,EAAK,YAAc,IAC/B,SAAU,EAAK,UAAY,EAC5B,OACM,EAAO,CAId,MAHI,aAAiB,EACb,EAEF,IAAI,EACR,gCAAgC,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,GACvF,EAuBL,eAAsB,EACpB,EACA,EACA,EAC8B,CAC9B,IAAM,EAAiB,EAAK,QAAQ,OAAQ,GAAG,CACzC,EAAU,EAAQ,SAAW,EAC/B,EAAW,KAAK,IAAI,EAAG,EAAQ,SAAS,CAAG,IACzC,EAAY,KAAK,KAAK,CAE5B,KAAO,KAAK,KAAK,CAAG,EAAY,GAAS,CAEvC,GAAI,EAAQ,QAAQ,QAClB,MAAM,IAAI,EAAgB,0BAA2B,YAAY,CAGnE,GAAI,CAOF,IAAM,EAAW,MAAM,EACrB,EACA,OACA,sBARuB,IAAI,gBAAgB,CAC3C,WAAY,+CACZ,YAAa,EACd,CAAC,CAAC,UAMD,CACA,oCACA,EAAQ,OACT,CAED,GAAI,EAAS,GAAI,CACf,IAAM,EAAO,MAAM,EAAS,MAAM,CAClC,GAAI,CAAC,EAAK,aACR,MAAM,IAAI,EACR,+CACD,CAEH,MAAO,CACL,aAAc,EAAK,aACnB,WAAY,EAAK,YAAc,SAC/B,WAAY,EAAK,WAClB,CAIH,IAAI,EACJ,GAAI,CACF,EAAY,MAAM,EAAS,MAAM,MAC3B,CACN,MAAM,IAAI,EACR,oCAAoC,EAAS,SAC9C,CAGH,GAAM,CAAE,QAAO,qBAAsB,EAErC,OAAQ,EAAR,CACE,IAAK,wBAEH,MAEF,IAAK,YAIH,AAQE,EAPA,OAAO,EAAU,UAAa,UAC9B,SAAS,EAAU,SAAS,EAC5B,EAAU,SAAW,EAEV,KAAK,IAAI,EAAG,KAAK,IAAI,EAAU,SAAU,GAAG,CAAC,CAAG,IAGhD,KAAK,IAAI,EAAW,IAAM,EAAgB,CAEvD,MAEF,IAAK,gBACH,MAAM,IAAI,EACR,6CACA,gBACD,CAEH,IAAK,gBACH,MAAM,IAAI,EACR,oCACA,gBACD,CAEH,QACE,MAAM,IAAI,EACR,wBAAwB,IAAQ,EAAoB,MAAM,IAAsB,KAChF,EACD,QAEE,EAAO,CAEd,GAAI,aAAiB,EACnB,MAAM,EAGR,GAAI,aAAiB,cAAgB,EAAM,OAAS,aAClD,MAAM,IAAI,EAAgB,0BAA2B,YAAY,CAInE,QAAQ,KAAK,0CAA2C,EAAM,CAIhE,GAAI,CACF,MAAM,EAAM,EAAU,EAAQ,OAAO,OAC9B,EAAO,CAId,MAHI,aAAiB,cAAgB,EAAM,OAAS,aAC5C,IAAI,EAAgB,0BAA2B,YAAY,CAE7D,GAIV,MAAM,IAAI,EACR,uDACA,UACD,CAMH,SAAS,EAAM,EAAY,EAAqC,CAC9D,OAAO,IAAI,SAAS,EAAS,IAAW,CACtC,GAAI,GAAQ,QAAS,CACnB,EAAO,IAAI,aAAa,UAAW,aAAa,CAAC,CACjD,OAGF,IAAM,EAAY,WAAW,EAAS,EAAG,CAEzC,GAAQ,iBACN,YACM,CACJ,aAAa,EAAU,CACvB,EAAO,IAAI,aAAa,UAAW,aAAa,CAAC,EAEnD,CAAE,KAAM,GAAM,CACf,EACD"}

package/dist/api/device-flow-client.d.ts

@@ -5,9 +5,7 @@
  * The flow allows users to authenticate in their browser while the
  * application polls for the resulting API key.
  *
- * All device flow requests are proxied through the local agent-server's
- * cloud-proxy endpoint to avoid CORS issues. Since a local agent-server
- * is required to use the frontend, the proxy is always available.
+ * Device flow requests go directly to the configured OpenHands Cloud host.
  */
 export declare class DeviceFlowError extends Error {
     readonly code?: string | undefined;
@@ -33,7 +31,7 @@ export interface DeviceTokenResponse {
 export declare function isOpenHandsCloudHost(host: string): boolean;
 /**
  * Start the OAuth 2.0 Device Flow by requesting a device code.
- * All requests are proxied through the local agent-server to avoid CORS issues.
+ * Requests are sent directly to the cloud host.
  *
  * @param host - The cloud backend host URL (e.g., "https://app.all-hands.dev")
  * @returns DeviceAuthorizationResponse with device_code, user_code, verification URLs, etc.
@@ -50,7 +48,7 @@ export interface PollOptions {
 }
 /**
  * Poll for the API key after user authorization.
- * All requests are proxied through the local agent-server to avoid CORS issues.
+ * Requests are sent directly to the cloud host.
  *
  * @param host - The cloud backend host URL
  * @param deviceCode - The device code from startDeviceFlow

package/dist/api/device-flow-client.js

@@ -1,97 +1,86 @@
-import { getEffectiveLocalBackend as e } from "./backend-registry/active-store.js";
-import { buildAuthHeaders as t } from "./backend-registry/auth.js";
 //#region src/api/device-flow-client.ts
-var n = class extends Error {
+var e = class extends Error {
 	constructor(e, t) {
 		super(e), this.code = t, this.name = "DeviceFlowError";
 	}
-}, r = 6e5, i = 3e4;
-async function a(n, r, i, a, o, s) {
-	let c = e(), l = `${c.host.replace(/\/+$/, "")}/api/cloud-proxy`;
-	return await fetch(l, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			...t(c)
-		},
-		body: JSON.stringify({
-			host: n,
-			method: r,
-			path: i,
-			headers: o ? { "Content-Type": o } : {},
-			body: a ?? null
-		}),
-		signal: s
+}, t = 6e5, n = 3e4;
+async function r(e, t, n, r, i, a) {
+	let o = r === void 0 ? void 0 : typeof r == "string" || r instanceof Blob || r instanceof FormData || r instanceof URLSearchParams ? r : JSON.stringify(r);
+	return await fetch(`${e.replace(/\/+$/, "")}${n}`, {
+		method: t,
+		headers: { ...i ? { "Content-Type": i } : {} },
+		body: o,
+		signal: a
 	});
 }
-async function o(e) {
-	let t = e.replace(/\/+$/, "");
+async function i(t) {
+	let n = t.replace(/\/+$/, "");
 	try {
-		let e = await a(t, "POST", "/oauth/device/authorize", {}, "application/json");
-		if (!e.ok) throw new n(`Failed to start device flow: Server returned ${e.status}`);
-		let r = await e.json();
-		if (!r.device_code || !r.user_code || !r.verification_uri) throw new n("Invalid response from device authorization endpoint: missing required fields");
-		let i = r.verification_uri_complete ?? `${r.verification_uri}?user_code=${encodeURIComponent(r.user_code)}`;
+		let t = await r(n, "POST", "/oauth/device/authorize", {}, "application/json");
+		if (!t.ok) throw new e(`Failed to start device flow: Server returned ${t.status}`);
+		let i = await t.json();
+		if (!i.device_code || !i.user_code || !i.verification_uri) throw new e("Invalid response from device authorization endpoint: missing required fields");
+		let a = i.verification_uri_complete ?? `${i.verification_uri}?user_code=${encodeURIComponent(i.user_code)}`;
 		return {
-			device_code: r.device_code,
-			user_code: r.user_code,
-			verification_uri: r.verification_uri,
-			verification_uri_complete: i,
-			expires_in: r.expires_in ?? 600,
-			interval: r.interval ?? 5
+			device_code: i.device_code,
+			user_code: i.user_code,
+			verification_uri: i.verification_uri,
+			verification_uri_complete: a,
+			expires_in: i.expires_in ?? 600,
+			interval: i.interval ?? 5
 		};
-	} catch (e) {
-		throw e instanceof n ? e : new n(`Failed to start device flow: ${e instanceof Error ? e.message : String(e)}`);
+	} catch (t) {
+		throw t instanceof e ? t : new e(`Failed to start device flow: ${t instanceof Error ? t.message : String(t)}`);
 	}
 }
-async function s(e, t, o) {
-	let s = e.replace(/\/+$/, ""), l = o.timeout ?? r, u = Math.max(1, o.interval) * 1e3, d = Date.now();
+async function a(i, a, s) {
+	let c = i.replace(/\/+$/, ""), l = s.timeout ?? t, u = Math.max(1, s.interval) * 1e3, d = Date.now();
 	for (; Date.now() - d < l;) {
-		if (o.signal?.aborted) throw new n("Authorization cancelled", "cancelled");
+		if (s.signal?.aborted) throw new e("Authorization cancelled", "cancelled");
 		try {
-			let e = await a(s, "POST", "/oauth/device/token", new URLSearchParams({
+			let t = await r(c, "POST", "/oauth/device/token", new URLSearchParams({
 				grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-				device_code: t
-			}).toString(), "application/x-www-form-urlencoded", o.signal);
-			if (e.ok) {
-				let t = await e.json();
-				if (!t.access_token) throw new n("Invalid token response: missing access_token");
+				device_code: a
+			}).toString(), "application/x-www-form-urlencoded", s.signal);
+			if (t.ok) {
+				let n = await t.json();
+				if (!n.access_token) throw new e("Invalid token response: missing access_token");
 				return {
-					access_token: t.access_token,
-					token_type: t.token_type ?? "Bearer",
-					expires_in: t.expires_in
+					access_token: n.access_token,
+					token_type: n.token_type ?? "Bearer",
+					expires_in: n.expires_in
 				};
 			}
-			let r;
+			let i;
 			try {
-				r = await e.json();
+				i = await t.json();
 			} catch {
-				throw new n(`Unexpected response from server: ${e.status}`);
+				throw new e(`Unexpected response from server: ${t.status}`);
 			}
-			let { error: c, error_description: l } = r;
-			switch (c) {
+			let { error: o, error_description: l } = i;
+			switch (o) {
 				case "authorization_pending": break;
 				case "slow_down":
-					u = typeof r.interval == "number" && isFinite(r.interval) && r.interval > 0 ? Math.max(1, Math.min(r.interval, 30)) * 1e3 : Math.min(u + 5e3, i);
+					u = typeof i.interval == "number" && isFinite(i.interval) && i.interval > 0 ? Math.max(1, Math.min(i.interval, 30)) * 1e3 : Math.min(u + 5e3, n);
 					break;
-				case "expired_token": throw new n("Device code has expired. Please try again.", "expired_token");
-				case "access_denied": throw new n("Authorization request was denied.", "access_denied");
-				default: throw new n(`Authorization error: ${c}${l ? ` - ${l}` : ""}`, c);
+				case "expired_token": throw new e("Device code has expired. Please try again.", "expired_token");
+				case "access_denied": throw new e("Authorization request was denied.", "access_denied");
+				default: throw new e(`Authorization error: ${o}${l ? ` - ${l}` : ""}`, o);
 			}
-		} catch (e) {
-			if (e instanceof n) throw e;
-			if (e instanceof DOMException && e.name === "AbortError") throw new n("Authorization cancelled", "cancelled");
-			console.warn("Network error during polling, retrying:", e);
+		} catch (t) {
+			if (t instanceof e) throw t;
+			if (t instanceof DOMException && t.name === "AbortError") throw new e("Authorization cancelled", "cancelled");
+			console.warn("Network error during polling, retrying:", t);
 		}
 		try {
-			await c(u, o.signal);
-		} catch (e) {
-			throw e instanceof DOMException && e.name === "AbortError" ? new n("Authorization cancelled", "cancelled") : e;
+			await o(u, s.signal);
+		} catch (t) {
+			throw t instanceof DOMException && t.name === "AbortError" ? new e("Authorization cancelled", "cancelled") : t;
 		}
 	}
-	throw new n("Timeout waiting for authorization. Please try again.", "timeout");
+	throw new e("Timeout waiting for authorization. Please try again.", "timeout");
 }
-function c(e, t) {
+function o(e, t) {
 	return new Promise((n, r) => {
 		if (t?.aborted) {
 			r(new DOMException("Aborted", "AbortError"));
@@ -104,6 +93,6 @@ function c(e, t) {
 	});
 }
 //#endregion
-export { n as DeviceFlowError, s as pollForToken, o as startDeviceFlow };
+export { e as DeviceFlowError, a as pollForToken, i as startDeviceFlow };
 
 //# sourceMappingURL=device-flow-client.js.map

package/dist/api/device-flow-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"device-flow-client.js","names":[],"sources":["../../src/api/device-flow-client.ts"],"sourcesContent":["/**\n * OAuth 2.0 Device Flow client implementation (RFC 8628).\n *\n * Used for one-click authentication with cloud backends.\n * The flow allows users to authenticate in their browser while the\n * application polls for the resulting API key.\n *\n * All device flow requests are proxied through the local agent-server's\n * cloud-proxy endpoint to avoid CORS issues. Since a local agent-server\n * is required to use the frontend, the proxy is always available.\n */\n\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\n\nexport class DeviceFlowError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: string,\n  ) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceAuthorizationResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface DeviceTokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in?: number;\n}\n\ninterface DeviceTokenErrorResponse {\n  error: string;\n  error_description?: string;\n  interval?: number;\n}\n\nconst DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes\nconst MAX_INTERVAL_MS = 30_000; // 30 seconds max polling interval\n\n/**\n * Check if a host is a known OpenHands Cloud domain.\n * Uses hostname extraction to prevent substring matching attacks.\n */\nexport function isOpenHandsCloudHost(host: string): boolean {\n  try {\n    // Extract hostname from URL or treat as hostname if no protocol\n    const trimmed = host.trim().toLowerCase();\n    const withProtocol = /^https?:\\/\\//i.test(trimmed)\n      ? trimmed\n      : `https://${trimmed}`;\n    const url = new URL(withProtocol);\n    const hostname = url.hostname;\n\n    // Check if hostname ends with known domains (exact suffix match)\n    return (\n      hostname.endsWith(\".all-hands.dev\") ||\n      hostname === \"all-hands.dev\" ||\n      hostname.endsWith(\".openhands.dev\") ||\n      hostname === \"openhands.dev\"\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Make a proxied request through the local agent-server's cloud-proxy endpoint.\n * This avoids CORS issues when calling OpenHands Cloud endpoints.\n */\nasync function makeProxiedRequest(\n  upstreamHost: string,\n  method: \"GET\" | \"POST\",\n  path: string,\n  body?: unknown,\n  contentType?: string,\n  signal?: AbortSignal,\n): Promise<Response> {\n  const local = getEffectiveLocalBackend();\n  const proxyUrl = `${local.host.replace(/\\/+$/, \"\")}/api/cloud-proxy`;\n\n  const response = await fetch(proxyUrl, {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      ...buildAuthHeaders(local),\n    },\n    body: JSON.stringify({\n      host: upstreamHost,\n      method,\n      path,\n      headers: contentType ? { \"Content-Type\": contentType } : {},\n      body: body ?? null,\n    }),\n    signal,\n  });\n\n  return response;\n}\n\n/**\n * Start the OAuth 2.0 Device Flow by requesting a device code.\n * All requests are proxied through the local agent-server to avoid CORS issues.\n *\n * @param host - The cloud backend host URL (e.g., \"https://app.all-hands.dev\")\n * @returns DeviceAuthorizationResponse with device_code, user_code, verification URLs, etc.\n * @throws DeviceFlowError if the request fails\n */\nexport async function startDeviceFlow(\n  host: string,\n): Promise<DeviceAuthorizationResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n\n  try {\n    const response = await makeProxiedRequest(\n      normalizedHost,\n      \"POST\",\n      \"/oauth/device/authorize\",\n      {},\n      \"application/json\",\n    );\n\n    if (!response.ok) {\n      // Avoid exposing sensitive server error details\n      throw new DeviceFlowError(\n        `Failed to start device flow: Server returned ${response.status}`,\n      );\n    }\n\n    const data = await response.json();\n\n    // Validate required fields per RFC 8628 Section 3.2\n    // verification_uri_complete is OPTIONAL per RFC\n    if (!data.device_code || !data.user_code || !data.verification_uri) {\n      throw new DeviceFlowError(\n        \"Invalid response from device authorization endpoint: missing required fields\",\n      );\n    }\n\n    // Build verification_uri_complete if not provided (optional per RFC)\n    const verificationUriComplete =\n      data.verification_uri_complete ??\n      `${data.verification_uri}?user_code=${encodeURIComponent(data.user_code)}`;\n\n    return {\n      device_code: data.device_code,\n      user_code: data.user_code,\n      verification_uri: data.verification_uri,\n      verification_uri_complete: verificationUriComplete,\n      expires_in: data.expires_in ?? 600,\n      interval: data.interval ?? 5,\n    };\n  } catch (error) {\n    if (error instanceof DeviceFlowError) {\n      throw error;\n    }\n    throw new DeviceFlowError(\n      `Failed to start device flow: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nexport interface PollOptions {\n  /** Polling interval in seconds (from device authorization response) */\n  interval: number;\n  /** Maximum time to wait for authorization in milliseconds */\n  timeout?: number;\n  /** Abort signal to cancel polling */\n  signal?: AbortSignal;\n}\n\n/**\n * Poll for the API key after user authorization.\n * All requests are proxied through the local agent-server to avoid CORS issues.\n *\n * @param host - The cloud backend host URL\n * @param deviceCode - The device code from startDeviceFlow\n * @param options - Polling options including interval, timeout, and abort signal\n * @returns DeviceTokenResponse containing the access_token (API key)\n * @throws DeviceFlowError if polling fails, user denies access, or timeout expires\n */\nexport async function pollForToken(\n  host: string,\n  deviceCode: string,\n  options: PollOptions,\n): Promise<DeviceTokenResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n  const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n  let interval = Math.max(1, options.interval) * 1000; // At least 1 second\n  const startTime = Date.now();\n\n  while (Date.now() - startTime < timeout) {\n    // Check if cancelled\n    if (options.signal?.aborted) {\n      throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n    }\n\n    try {\n      // RFC 8628 Section 3.4 requires grant_type parameter\n      const tokenRequestBody = new URLSearchParams({\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        device_code: deviceCode,\n      }).toString();\n\n      const response = await makeProxiedRequest(\n        normalizedHost,\n        \"POST\",\n        \"/oauth/device/token\",\n        tokenRequestBody,\n        \"application/x-www-form-urlencoded\",\n        options.signal,\n      );\n\n      if (response.ok) {\n        const data = await response.json();\n        if (!data.access_token) {\n          throw new DeviceFlowError(\n            \"Invalid token response: missing access_token\",\n          );\n        }\n        return {\n          access_token: data.access_token,\n          token_type: data.token_type ?? \"Bearer\",\n          expires_in: data.expires_in,\n        };\n      }\n\n      // Handle error responses\n      let errorData: DeviceTokenErrorResponse;\n      try {\n        errorData = await response.json();\n      } catch {\n        throw new DeviceFlowError(\n          `Unexpected response from server: ${response.status}`,\n        );\n      }\n\n      const { error, error_description } = errorData;\n\n      switch (error) {\n        case \"authorization_pending\":\n          // User hasn't finished yet; continue polling\n          break;\n\n        case \"slow_down\":\n          // Server asks us to poll less frequently\n          // RFC 8628 Section 3.5: \"the client MUST increase its polling interval by 5 seconds\"\n          // Validate server-provided interval to prevent DoS (must be number, finite, positive)\n          if (\n            typeof errorData.interval === \"number\" &&\n            isFinite(errorData.interval) &&\n            errorData.interval > 0\n          ) {\n            interval = Math.max(1, Math.min(errorData.interval, 30)) * 1000;\n          } else {\n            // RFC 8628 mandates incrementing by 5 seconds\n            interval = Math.min(interval + 5000, MAX_INTERVAL_MS);\n          }\n          break;\n\n        case \"expired_token\":\n          throw new DeviceFlowError(\n            \"Device code has expired. Please try again.\",\n            \"expired_token\",\n          );\n\n        case \"access_denied\":\n          throw new DeviceFlowError(\n            \"Authorization request was denied.\",\n            \"access_denied\",\n          );\n\n        default:\n          throw new DeviceFlowError(\n            `Authorization error: ${error}${error_description ? ` - ${error_description}` : \"\"}`,\n            error,\n          );\n      }\n    } catch (error) {\n      // DeviceFlowError means a definitive error (denied, expired, etc.) - rethrow\n      if (error instanceof DeviceFlowError) {\n        throw error;\n      }\n      // User cancelled - rethrow\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      // Network errors during polling should continue until timeout, not fail immediately\n      // Brief network hiccups shouldn't abort 10-minute flows\n      console.warn(\"Network error during polling, retrying:\", error);\n    }\n\n    // Wait before next poll (wrap in try-catch for consistent abort handling)\n    try {\n      await sleep(interval, options.signal);\n    } catch (error) {\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      throw error;\n    }\n  }\n\n  throw new DeviceFlowError(\n    \"Timeout waiting for authorization. Please try again.\",\n    \"timeout\",\n  );\n}\n\n/**\n * Sleep for a given duration, respecting an optional abort signal.\n */\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"Aborted\", \"AbortError\"));\n      return;\n    }\n\n    const timeoutId = setTimeout(resolve, ms);\n\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timeoutId);\n        reject(new DOMException(\"Aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n}\n"],"mappings":";;;AAeA,IAAa,IAAb,cAAqC,MAAM;CACzC,YACE,GACA,GACA;AAEA,EADA,MAAM,EAAQ,EAFE,KAAA,OAAA,GAGhB,KAAK,OAAO;;GAyBV,IAAqB,KACrB,IAAkB;AAgCxB,eAAe,EACb,GACA,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAM,IAAQ,GAA0B,EAClC,IAAW,GAAG,EAAM,KAAK,QAAQ,QAAQ,GAAG,CAAC;AAkBnD,QAAO,MAhBgB,MAAM,GAAU;EACrC,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,GAAG,EAAiB,EAAM;GAC3B;EACD,MAAM,KAAK,UAAU;GACnB,MAAM;GACN;GACA;GACA,SAAS,IAAc,EAAE,gBAAgB,GAAa,GAAG,EAAE;GAC3D,MAAM,KAAQ;GACf,CAAC;EACF;EACD,CAAC;;AAaJ,eAAsB,EACpB,GACsC;CACtC,IAAM,IAAiB,EAAK,QAAQ,QAAQ,GAAG;AAE/C,KAAI;EACF,IAAM,IAAW,MAAM,EACrB,GACA,QACA,2BACA,EAAE,EACF,mBACD;AAED,MAAI,CAAC,EAAS,GAEZ,OAAM,IAAI,EACR,gDAAgD,EAAS,SAC1D;EAGH,IAAM,IAAO,MAAM,EAAS,MAAM;AAIlC,MAAI,CAAC,EAAK,eAAe,CAAC,EAAK,aAAa,CAAC,EAAK,iBAChD,OAAM,IAAI,EACR,+EACD;EAIH,IAAM,IACJ,EAAK,6BACL,GAAG,EAAK,iBAAiB,aAAa,mBAAmB,EAAK,UAAU;AAE1E,SAAO;GACL,aAAa,EAAK;GAClB,WAAW,EAAK;GAChB,kBAAkB,EAAK;GACvB,2BAA2B;GAC3B,YAAY,EAAK,cAAc;GAC/B,UAAU,EAAK,YAAY;GAC5B;UACM,GAAO;AAId,QAHI,aAAiB,IACb,IAEF,IAAI,EACR,gCAAgC,aAAiB,QAAQ,EAAM,UAAU,OAAO,EAAM,GACvF;;;AAuBL,eAAsB,EACpB,GACA,GACA,GAC8B;CAC9B,IAAM,IAAiB,EAAK,QAAQ,QAAQ,GAAG,EACzC,IAAU,EAAQ,WAAW,GAC/B,IAAW,KAAK,IAAI,GAAG,EAAQ,SAAS,GAAG,KACzC,IAAY,KAAK,KAAK;AAE5B,QAAO,KAAK,KAAK,GAAG,IAAY,IAAS;AAEvC,MAAI,EAAQ,QAAQ,QAClB,OAAM,IAAI,EAAgB,2BAA2B,YAAY;AAGnE,MAAI;GAOF,IAAM,IAAW,MAAM,EACrB,GACA,QACA,uBARuB,IAAI,gBAAgB;IAC3C,YAAY;IACZ,aAAa;IACd,CAAC,CAAC,UAMD,EACA,qCACA,EAAQ,OACT;AAED,OAAI,EAAS,IAAI;IACf,IAAM,IAAO,MAAM,EAAS,MAAM;AAClC,QAAI,CAAC,EAAK,aACR,OAAM,IAAI,EACR,+CACD;AAEH,WAAO;KACL,cAAc,EAAK;KACnB,YAAY,EAAK,cAAc;KAC/B,YAAY,EAAK;KAClB;;GAIH,IAAI;AACJ,OAAI;AACF,QAAY,MAAM,EAAS,MAAM;WAC3B;AACN,UAAM,IAAI,EACR,oCAAoC,EAAS,SAC9C;;GAGH,IAAM,EAAE,UAAO,yBAAsB;AAErC,WAAQ,GAAR;IACE,KAAK,wBAEH;IAEF,KAAK;AAIH,KAQE,IAPA,OAAO,EAAU,YAAa,YAC9B,SAAS,EAAU,SAAS,IAC5B,EAAU,WAAW,IAEV,KAAK,IAAI,GAAG,KAAK,IAAI,EAAU,UAAU,GAAG,CAAC,GAAG,MAGhD,KAAK,IAAI,IAAW,KAAM,EAAgB;AAEvD;IAEF,KAAK,gBACH,OAAM,IAAI,EACR,8CACA,gBACD;IAEH,KAAK,gBACH,OAAM,IAAI,EACR,qCACA,gBACD;IAEH,QACE,OAAM,IAAI,EACR,wBAAwB,IAAQ,IAAoB,MAAM,MAAsB,MAChF,EACD;;WAEE,GAAO;AAEd,OAAI,aAAiB,EACnB,OAAM;AAGR,OAAI,aAAiB,gBAAgB,EAAM,SAAS,aAClD,OAAM,IAAI,EAAgB,2BAA2B,YAAY;AAInE,WAAQ,KAAK,2CAA2C,EAAM;;AAIhE,MAAI;AACF,SAAM,EAAM,GAAU,EAAQ,OAAO;WAC9B,GAAO;AAId,SAHI,aAAiB,gBAAgB,EAAM,SAAS,eAC5C,IAAI,EAAgB,2BAA2B,YAAY,GAE7D;;;AAIV,OAAM,IAAI,EACR,wDACA,UACD;;AAMH,SAAS,EAAM,GAAY,GAAqC;AAC9D,QAAO,IAAI,SAAS,GAAS,MAAW;AACtC,MAAI,GAAQ,SAAS;AACnB,KAAO,IAAI,aAAa,WAAW,aAAa,CAAC;AACjD;;EAGF,IAAM,IAAY,WAAW,GAAS,EAAG;AAEzC,KAAQ,iBACN,eACM;AAEJ,GADA,aAAa,EAAU,EACvB,EAAO,IAAI,aAAa,WAAW,aAAa,CAAC;KAEnD,EAAE,MAAM,IAAM,CACf;GACD"}
+{"version":3,"file":"device-flow-client.js","names":[],"sources":["../../src/api/device-flow-client.ts"],"sourcesContent":["/**\n * OAuth 2.0 Device Flow client implementation (RFC 8628).\n *\n * Used for one-click authentication with cloud backends.\n * The flow allows users to authenticate in their browser while the\n * application polls for the resulting API key.\n *\n * Device flow requests go directly to the configured OpenHands Cloud host.\n */\n\nexport class DeviceFlowError extends Error {\n  constructor(\n    message: string,\n    public readonly code?: string,\n  ) {\n    super(message);\n    this.name = \"DeviceFlowError\";\n  }\n}\n\nexport interface DeviceAuthorizationResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  expires_in: number;\n  interval: number;\n}\n\nexport interface DeviceTokenResponse {\n  access_token: string;\n  token_type: string;\n  expires_in?: number;\n}\n\ninterface DeviceTokenErrorResponse {\n  error: string;\n  error_description?: string;\n  interval?: number;\n}\n\nconst DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes\nconst MAX_INTERVAL_MS = 30_000; // 30 seconds max polling interval\n\n/**\n * Check if a host is a known OpenHands Cloud domain.\n * Uses hostname extraction to prevent substring matching attacks.\n */\nexport function isOpenHandsCloudHost(host: string): boolean {\n  try {\n    // Extract hostname from URL or treat as hostname if no protocol\n    const trimmed = host.trim().toLowerCase();\n    const withProtocol = /^https?:\\/\\//i.test(trimmed)\n      ? trimmed\n      : `https://${trimmed}`;\n    const url = new URL(withProtocol);\n    const hostname = url.hostname;\n\n    // Check if hostname ends with known domains (exact suffix match)\n    return (\n      hostname.endsWith(\".all-hands.dev\") ||\n      hostname === \"all-hands.dev\" ||\n      hostname.endsWith(\".openhands.dev\") ||\n      hostname === \"openhands.dev\"\n    );\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Make a direct request to the OpenHands Cloud device-flow endpoint.\n */\nasync function makeCloudRequest(\n  upstreamHost: string,\n  method: \"GET\" | \"POST\",\n  path: string,\n  body?: unknown,\n  contentType?: string,\n  signal?: AbortSignal,\n): Promise<Response> {\n  const requestBody =\n    body === undefined\n      ? undefined\n      : typeof body === \"string\" ||\n          body instanceof Blob ||\n          body instanceof FormData ||\n          body instanceof URLSearchParams\n        ? body\n        : JSON.stringify(body);\n\n  const response = await fetch(`${upstreamHost.replace(/\\/+$/, \"\")}${path}`, {\n    method,\n    headers: {\n      ...(contentType ? { \"Content-Type\": contentType } : {}),\n    },\n    body: requestBody,\n    signal,\n  });\n\n  return response;\n}\n\n/**\n * Start the OAuth 2.0 Device Flow by requesting a device code.\n * Requests are sent directly to the cloud host.\n *\n * @param host - The cloud backend host URL (e.g., \"https://app.all-hands.dev\")\n * @returns DeviceAuthorizationResponse with device_code, user_code, verification URLs, etc.\n * @throws DeviceFlowError if the request fails\n */\nexport async function startDeviceFlow(\n  host: string,\n): Promise<DeviceAuthorizationResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n\n  try {\n    const response = await makeCloudRequest(\n      normalizedHost,\n      \"POST\",\n      \"/oauth/device/authorize\",\n      {},\n      \"application/json\",\n    );\n\n    if (!response.ok) {\n      // Avoid exposing sensitive server error details\n      throw new DeviceFlowError(\n        `Failed to start device flow: Server returned ${response.status}`,\n      );\n    }\n\n    const data = await response.json();\n\n    // Validate required fields per RFC 8628 Section 3.2\n    // verification_uri_complete is OPTIONAL per RFC\n    if (!data.device_code || !data.user_code || !data.verification_uri) {\n      throw new DeviceFlowError(\n        \"Invalid response from device authorization endpoint: missing required fields\",\n      );\n    }\n\n    // Build verification_uri_complete if not provided (optional per RFC)\n    const verificationUriComplete =\n      data.verification_uri_complete ??\n      `${data.verification_uri}?user_code=${encodeURIComponent(data.user_code)}`;\n\n    return {\n      device_code: data.device_code,\n      user_code: data.user_code,\n      verification_uri: data.verification_uri,\n      verification_uri_complete: verificationUriComplete,\n      expires_in: data.expires_in ?? 600,\n      interval: data.interval ?? 5,\n    };\n  } catch (error) {\n    if (error instanceof DeviceFlowError) {\n      throw error;\n    }\n    throw new DeviceFlowError(\n      `Failed to start device flow: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nexport interface PollOptions {\n  /** Polling interval in seconds (from device authorization response) */\n  interval: number;\n  /** Maximum time to wait for authorization in milliseconds */\n  timeout?: number;\n  /** Abort signal to cancel polling */\n  signal?: AbortSignal;\n}\n\n/**\n * Poll for the API key after user authorization.\n * Requests are sent directly to the cloud host.\n *\n * @param host - The cloud backend host URL\n * @param deviceCode - The device code from startDeviceFlow\n * @param options - Polling options including interval, timeout, and abort signal\n * @returns DeviceTokenResponse containing the access_token (API key)\n * @throws DeviceFlowError if polling fails, user denies access, or timeout expires\n */\nexport async function pollForToken(\n  host: string,\n  deviceCode: string,\n  options: PollOptions,\n): Promise<DeviceTokenResponse> {\n  const normalizedHost = host.replace(/\\/+$/, \"\");\n  const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n  let interval = Math.max(1, options.interval) * 1000; // At least 1 second\n  const startTime = Date.now();\n\n  while (Date.now() - startTime < timeout) {\n    // Check if cancelled\n    if (options.signal?.aborted) {\n      throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n    }\n\n    try {\n      // RFC 8628 Section 3.4 requires grant_type parameter\n      const tokenRequestBody = new URLSearchParams({\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        device_code: deviceCode,\n      }).toString();\n\n      const response = await makeCloudRequest(\n        normalizedHost,\n        \"POST\",\n        \"/oauth/device/token\",\n        tokenRequestBody,\n        \"application/x-www-form-urlencoded\",\n        options.signal,\n      );\n\n      if (response.ok) {\n        const data = await response.json();\n        if (!data.access_token) {\n          throw new DeviceFlowError(\n            \"Invalid token response: missing access_token\",\n          );\n        }\n        return {\n          access_token: data.access_token,\n          token_type: data.token_type ?? \"Bearer\",\n          expires_in: data.expires_in,\n        };\n      }\n\n      // Handle error responses\n      let errorData: DeviceTokenErrorResponse;\n      try {\n        errorData = await response.json();\n      } catch {\n        throw new DeviceFlowError(\n          `Unexpected response from server: ${response.status}`,\n        );\n      }\n\n      const { error, error_description } = errorData;\n\n      switch (error) {\n        case \"authorization_pending\":\n          // User hasn't finished yet; continue polling\n          break;\n\n        case \"slow_down\":\n          // Server asks us to poll less frequently\n          // RFC 8628 Section 3.5: \"the client MUST increase its polling interval by 5 seconds\"\n          // Validate server-provided interval to prevent DoS (must be number, finite, positive)\n          if (\n            typeof errorData.interval === \"number\" &&\n            isFinite(errorData.interval) &&\n            errorData.interval > 0\n          ) {\n            interval = Math.max(1, Math.min(errorData.interval, 30)) * 1000;\n          } else {\n            // RFC 8628 mandates incrementing by 5 seconds\n            interval = Math.min(interval + 5000, MAX_INTERVAL_MS);\n          }\n          break;\n\n        case \"expired_token\":\n          throw new DeviceFlowError(\n            \"Device code has expired. Please try again.\",\n            \"expired_token\",\n          );\n\n        case \"access_denied\":\n          throw new DeviceFlowError(\n            \"Authorization request was denied.\",\n            \"access_denied\",\n          );\n\n        default:\n          throw new DeviceFlowError(\n            `Authorization error: ${error}${error_description ? ` - ${error_description}` : \"\"}`,\n            error,\n          );\n      }\n    } catch (error) {\n      // DeviceFlowError means a definitive error (denied, expired, etc.) - rethrow\n      if (error instanceof DeviceFlowError) {\n        throw error;\n      }\n      // User cancelled - rethrow\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      // Network errors during polling should continue until timeout, not fail immediately\n      // Brief network hiccups shouldn't abort 10-minute flows\n      console.warn(\"Network error during polling, retrying:\", error);\n    }\n\n    // Wait before next poll (wrap in try-catch for consistent abort handling)\n    try {\n      await sleep(interval, options.signal);\n    } catch (error) {\n      if (error instanceof DOMException && error.name === \"AbortError\") {\n        throw new DeviceFlowError(\"Authorization cancelled\", \"cancelled\");\n      }\n      throw error;\n    }\n  }\n\n  throw new DeviceFlowError(\n    \"Timeout waiting for authorization. Please try again.\",\n    \"timeout\",\n  );\n}\n\n/**\n * Sleep for a given duration, respecting an optional abort signal.\n */\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(new DOMException(\"Aborted\", \"AbortError\"));\n      return;\n    }\n\n    const timeoutId = setTimeout(resolve, ms);\n\n    signal?.addEventListener(\n      \"abort\",\n      () => {\n        clearTimeout(timeoutId);\n        reject(new DOMException(\"Aborted\", \"AbortError\"));\n      },\n      { once: true },\n    );\n  });\n}\n"],"mappings":";AAUA,IAAa,IAAb,cAAqC,MAAM;CACzC,YACE,GACA,GACA;AAEA,EADA,MAAM,EAAQ,EAFE,KAAA,OAAA,GAGhB,KAAK,OAAO;;GAyBV,IAAqB,KACrB,IAAkB;AA+BxB,eAAe,EACb,GACA,GACA,GACA,GACA,GACA,GACmB;CACnB,IAAM,IACJ,MAAS,KAAA,IACL,KAAA,IACA,OAAO,KAAS,YACd,aAAgB,QAChB,aAAgB,YAChB,aAAgB,kBAChB,IACA,KAAK,UAAU,EAAK;AAW5B,QAAO,MATgB,MAAM,GAAG,EAAa,QAAQ,QAAQ,GAAG,GAAG,KAAQ;EACzE;EACA,SAAS,EACP,GAAI,IAAc,EAAE,gBAAgB,GAAa,GAAG,EAAE,EACvD;EACD,MAAM;EACN;EACD,CAAC;;AAaJ,eAAsB,EACpB,GACsC;CACtC,IAAM,IAAiB,EAAK,QAAQ,QAAQ,GAAG;AAE/C,KAAI;EACF,IAAM,IAAW,MAAM,EACrB,GACA,QACA,2BACA,EAAE,EACF,mBACD;AAED,MAAI,CAAC,EAAS,GAEZ,OAAM,IAAI,EACR,gDAAgD,EAAS,SAC1D;EAGH,IAAM,IAAO,MAAM,EAAS,MAAM;AAIlC,MAAI,CAAC,EAAK,eAAe,CAAC,EAAK,aAAa,CAAC,EAAK,iBAChD,OAAM,IAAI,EACR,+EACD;EAIH,IAAM,IACJ,EAAK,6BACL,GAAG,EAAK,iBAAiB,aAAa,mBAAmB,EAAK,UAAU;AAE1E,SAAO;GACL,aAAa,EAAK;GAClB,WAAW,EAAK;GAChB,kBAAkB,EAAK;GACvB,2BAA2B;GAC3B,YAAY,EAAK,cAAc;GAC/B,UAAU,EAAK,YAAY;GAC5B;UACM,GAAO;AAId,QAHI,aAAiB,IACb,IAEF,IAAI,EACR,gCAAgC,aAAiB,QAAQ,EAAM,UAAU,OAAO,EAAM,GACvF;;;AAuBL,eAAsB,EACpB,GACA,GACA,GAC8B;CAC9B,IAAM,IAAiB,EAAK,QAAQ,QAAQ,GAAG,EACzC,IAAU,EAAQ,WAAW,GAC/B,IAAW,KAAK,IAAI,GAAG,EAAQ,SAAS,GAAG,KACzC,IAAY,KAAK,KAAK;AAE5B,QAAO,KAAK,KAAK,GAAG,IAAY,IAAS;AAEvC,MAAI,EAAQ,QAAQ,QAClB,OAAM,IAAI,EAAgB,2BAA2B,YAAY;AAGnE,MAAI;GAOF,IAAM,IAAW,MAAM,EACrB,GACA,QACA,uBARuB,IAAI,gBAAgB;IAC3C,YAAY;IACZ,aAAa;IACd,CAAC,CAAC,UAMD,EACA,qCACA,EAAQ,OACT;AAED,OAAI,EAAS,IAAI;IACf,IAAM,IAAO,MAAM,EAAS,MAAM;AAClC,QAAI,CAAC,EAAK,aACR,OAAM,IAAI,EACR,+CACD;AAEH,WAAO;KACL,cAAc,EAAK;KACnB,YAAY,EAAK,cAAc;KAC/B,YAAY,EAAK;KAClB;;GAIH,IAAI;AACJ,OAAI;AACF,QAAY,MAAM,EAAS,MAAM;WAC3B;AACN,UAAM,IAAI,EACR,oCAAoC,EAAS,SAC9C;;GAGH,IAAM,EAAE,UAAO,yBAAsB;AAErC,WAAQ,GAAR;IACE,KAAK,wBAEH;IAEF,KAAK;AAIH,KAQE,IAPA,OAAO,EAAU,YAAa,YAC9B,SAAS,EAAU,SAAS,IAC5B,EAAU,WAAW,IAEV,KAAK,IAAI,GAAG,KAAK,IAAI,EAAU,UAAU,GAAG,CAAC,GAAG,MAGhD,KAAK,IAAI,IAAW,KAAM,EAAgB;AAEvD;IAEF,KAAK,gBACH,OAAM,IAAI,EACR,8CACA,gBACD;IAEH,KAAK,gBACH,OAAM,IAAI,EACR,qCACA,gBACD;IAEH,QACE,OAAM,IAAI,EACR,wBAAwB,IAAQ,IAAoB,MAAM,MAAsB,MAChF,EACD;;WAEE,GAAO;AAEd,OAAI,aAAiB,EACnB,OAAM;AAGR,OAAI,aAAiB,gBAAgB,EAAM,SAAS,aAClD,OAAM,IAAI,EAAgB,2BAA2B,YAAY;AAInE,WAAQ,KAAK,2CAA2C,EAAM;;AAIhE,MAAI;AACF,SAAM,EAAM,GAAU,EAAQ,OAAO;WAC9B,GAAO;AAId,SAHI,aAAiB,gBAAgB,EAAM,SAAS,eAC5C,IAAI,EAAgB,2BAA2B,YAAY,GAE7D;;;AAIV,OAAM,IAAI,EACR,wDACA,UACD;;AAMH,SAAS,EAAM,GAAY,GAAqC;AAC9D,QAAO,IAAI,SAAS,GAAS,MAAW;AACtC,MAAI,GAAQ,SAAS;AACnB,KAAO,IAAI,aAAa,WAAW,aAAa,CAAC;AACjD;;EAGF,IAAM,IAAY,WAAW,GAAS,EAAG;AAEzC,KAAQ,iBACN,eACM;AAEJ,GADA,aAAa,EAAU,EACvB,EAAO,IAAI,aAAa,WAAW,aAAa,CAAC;KAEnD,EAAE,MAAM,IAAM,CACf;GACD"}

package/dist/api/event-service/event-service.api.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`../../node_modules/@openhands/typescript-client/dist/client/conversation-client.cjs`),n=require(`../../utils/websocket-url.cjs`),r=require(`../../node_modules/@openhands/typescript-client/dist/events/remote-events-list.cjs`),i=require(`../cloud/proxy.cjs`),a=require(`../agent-server-client-options.cjs`);var o=class{static async respondToConfirmation(r,o,s,c){let l=e.getActiveBackend().backend;return l.kind===`cloud`?i.callCloudProxy({backend:l,method:`POST`,hostOverride:n.buildHttpBaseUrl(o),path:`/api/conversations/${r}/events/respond_to_confirmation`,body:s,authMode:`session-api-key`,sessionApiKey:c}):new t.ConversationClient(a.getAgentServerClientOptions({conversationUrl:o,sessionApiKey:c})).respondToConfirmation(r,s)}static async getEventCount(r,o,s){let c=e.getActiveBackend().backend;return c.kind===`cloud`?i.callCloudProxy({backend:c,method:`GET`,hostOverride:n.buildHttpBaseUrl(o),path:`/api/conversations/${r}/events/count`,authMode:`session-api-key`,sessionApiKey:s}):new t.ConversationClient(a.getAgentServerClientOptions({conversationUrl:o,sessionApiKey:s})).getEventCount(r)}static async searchEvents(t,n,o,s={}){let c=e.getActiveBackend().backend,l=s.limit??100;if(c.kind===`cloud`){let e=Math.min(l,100),n=!!(s.sortOrder||s.pageId||s.timestampGte||s.timestampLt),r=new URLSearchParams;r.set(`limit`,String(e)),s.sortOrder&&r.set(`sort_order`,s.sortOrder),s.pageId&&r.set(`page_id`,s.pageId),s.timestampGte&&r.set(`timestamp__gte`,s.timestampGte),s.timestampLt&&r.set(`timestamp__lt`,s.timestampLt);let a=e=>i.callCloudProxy({backend:c,method:`GET`,path:`/api/v1/conversation/${t}/events/search?${e.toString()}`});try{let e=await a(r);return{items:e?.items??[],next_page_id:e?.next_page_id??null}}catch(e){if(!n)throw e;return console.warn(`[EventService] Cloud backend doesn't support pagination filters. Falling back to initial load only. Server needs OpenHands/OpenHands#14399.`),{items:[],next_page_id:null}}}let u=await new r.RemoteEventsList(a.getAgentServerHttpClientOptions({conversationUrl:n,sessionApiKey:o}),t).search({limit:l,...s.pageId?{page_id:s.pageId}:{},...s.sortOrder?{sort_order:s.sortOrder}:{},...s.timestampGte?{timestamp__gte:s.timestampGte}:{},...s.timestampLt?{timestamp__lt:s.timestampLt}:{}});return{items:u?.items??[],next_page_id:u?.next_page_id??null}}};exports.default=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`../../node_modules/@openhands/typescript-client/dist/client/conversation-client.cjs`),n=require(`../../utils/websocket-url.cjs`),r=require(`../../node_modules/@openhands/typescript-client/dist/events/remote-events-list.cjs`),i=require(`../agent-server-client-options.cjs`),a=require(`../cloud/proxy.cjs`);var o=class{static async respondToConfirmation(r,o,s,c){let l=e.getActiveBackend().backend;return l.kind===`cloud`?a.callCloudProxy({backend:l,method:`POST`,hostOverride:n.buildHttpBaseUrl(o),path:`/api/conversations/${r}/events/respond_to_confirmation`,body:s,authMode:`session-api-key`,sessionApiKey:c}):new t.ConversationClient(i.getAgentServerClientOptions({conversationUrl:o,sessionApiKey:c})).respondToConfirmation(r,s)}static async getEventCount(r,o,s){let c=e.getActiveBackend().backend;return c.kind===`cloud`?a.callCloudProxy({backend:c,method:`GET`,hostOverride:n.buildHttpBaseUrl(o),path:`/api/conversations/${r}/events/count`,authMode:`session-api-key`,sessionApiKey:s}):new t.ConversationClient(i.getAgentServerClientOptions({conversationUrl:o,sessionApiKey:s})).getEventCount(r)}static async searchEvents(t,n,o,s={}){let c=e.getActiveBackend().backend,l=s.limit??100;if(c.kind===`cloud`){let e=Math.min(l,100),n=!!(s.sortOrder||s.pageId||s.timestampGte||s.timestampLt),r=new URLSearchParams;r.set(`limit`,String(e)),s.sortOrder&&r.set(`sort_order`,s.sortOrder),s.pageId&&r.set(`page_id`,s.pageId),s.timestampGte&&r.set(`timestamp__gte`,s.timestampGte),s.timestampLt&&r.set(`timestamp__lt`,s.timestampLt);let i=e=>a.callCloudProxy({backend:c,method:`GET`,path:`/api/v1/conversation/${t}/events/search?${e.toString()}`});try{let e=await i(r);return{items:e?.items??[],next_page_id:e?.next_page_id??null}}catch(e){if(!n)throw e;return console.warn(`[EventService] Cloud backend doesn't support pagination filters. Falling back to initial load only. Server needs OpenHands/OpenHands#14399.`),{items:[],next_page_id:null}}}let u=await new r.RemoteEventsList(i.getAgentServerHttpClientOptions({conversationUrl:n,sessionApiKey:o}),t).search({limit:l,...s.pageId?{page_id:s.pageId}:{},...s.sortOrder?{sort_order:s.sortOrder}:{},...s.timestampGte?{timestamp__gte:s.timestampGte}:{},...s.timestampLt?{timestamp__lt:s.timestampLt}:{}});return{items:u?.items??[],next_page_id:u?.next_page_id??null}}};exports.default=o;
 //# sourceMappingURL=event-service.api.cjs.map

package/dist/api/event-service/event-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"event-service.api.cjs","names":[],"sources":["../../../src/api/event-service/event-service.api.ts"],"sourcesContent":["import { ConversationClient } from \"@openhands/typescript-client/clients\";\nimport { RemoteEventsList } from \"@openhands/typescript-client/events/remote-events-list\";\nimport { OpenHandsEvent } from \"#/types/agent-server/core\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport {\n  getAgentServerClientOptions,\n  getAgentServerHttpClientOptions,\n} from \"../agent-server-client-options\";\nimport type {\n  ConfirmationResponseRequest,\n  ConfirmationResponseResponse,\n  EventSearchOptions,\n  EventSearchPage,\n} from \"./event-service.types\";\n\n/**\n * Cloud-mode REST calls are split between two upstream hosts (matching\n * OpenHands' cloud frontend):\n *\n *   - **App API** (`backend.host`, default in `callCloudProxy`):\n *     event *history* (`/api/v1/conversation/{id}/events/search`).\n *     Persisted by the cloud backend — survives the runtime sandbox.\n *\n *   - **Runtime sandbox** (extracted from `conversation.conversation_url`\n *     and passed as `hostOverride`): live runtime endpoints like\n *     `/api/conversations/{id}/events/count` and\n *     `/api/conversations/{id}/events/respond_to_confirmation`. Auth on\n *     these endpoints is `X-Session-API-Key`, not `Authorization: Bearer`.\n *\n * Both go through the bundled local agent-server's `/api/cloud-proxy`,\n * which sidesteps the cross-origin restrictions that block the GUI at\n * `localhost` from talking directly to either the cloud backend or the runtime.\n *\n * Local mode keeps the existing typescript-client path: it targets the\n * conversation's host directly via typed client classes.\n */\nclass EventService {\n  static async respondToConfirmation(\n    conversationId: string,\n    conversationUrl: string,\n    request: ConfirmationResponseRequest,\n    sessionApiKey?: string | null,\n  ): Promise<ConfirmationResponseResponse> {\n    const active = getActiveBackend().backend;\n\n    if (active.kind === \"cloud\") {\n      return callCloudProxy<ConfirmationResponseResponse>({\n        backend: active,\n        method: \"POST\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events/respond_to_confirmation`,\n        body: request,\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n    }\n\n    return new ConversationClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).respondToConfirmation<ConfirmationResponseResponse>(\n      conversationId,\n      request,\n    );\n  }\n\n  static async getEventCount(\n    conversationId: string,\n    conversationUrl: string,\n    sessionApiKey?: string | null,\n  ): Promise<number> {\n    const active = getActiveBackend().backend;\n\n    if (active.kind === \"cloud\") {\n      return callCloudProxy<number>({\n        backend: active,\n        method: \"GET\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events/count`,\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n    }\n\n    return new ConversationClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).getEventCount(conversationId);\n  }\n\n  /**\n   * Search events for a conversation. Returns the raw page so callers can\n   * paginate (via `next_page_id`) and so REST-driven history loading can\n   * tell when there are no more older events to load.\n   */\n  static async searchEvents(\n    conversationId: string,\n    conversationUrl?: string | null,\n    sessionApiKey?: string | null,\n    options: EventSearchOptions = {},\n  ): Promise<EventSearchPage<OpenHandsEvent>> {\n    const active = getActiveBackend().backend;\n    const limit = options.limit ?? 100;\n\n    if (active.kind === \"cloud\") {\n      // Event *history* lives on the cloud App API, not the runtime\n      // sandbox. Path is singular `conversation` and v1-prefixed.\n      //\n      // Full pagination params (sort_order, page_id, timestamp filters)\n      // require the server-side fix from OpenHands/OpenHands#14399. If\n      // the cloud backend hasn't been updated yet, the timestamp filters\n      // trigger a 500 (str-vs-datetime comparison). We attempt the full\n      // request first and fall back to a limit-only request on failure.\n      const cloudLimit = Math.min(limit, 100);\n      const hasFilterParams = !!(\n        options.sortOrder ||\n        options.pageId ||\n        options.timestampGte ||\n        options.timestampLt\n      );\n\n      const params = new URLSearchParams();\n      params.set(\"limit\", String(cloudLimit));\n      if (options.sortOrder) params.set(\"sort_order\", options.sortOrder);\n      if (options.pageId) params.set(\"page_id\", options.pageId);\n      if (options.timestampGte)\n        params.set(\"timestamp__gte\", options.timestampGte);\n      if (options.timestampLt) params.set(\"timestamp__lt\", options.timestampLt);\n\n      const doCloudSearch = (searchParams: URLSearchParams) =>\n        callCloudProxy<EventSearchPage<OpenHandsEvent>>({\n          backend: active,\n          method: \"GET\",\n          path: `/api/v1/conversation/${conversationId}/events/search?${searchParams.toString()}`,\n        });\n\n      try {\n        const data = await doCloudSearch(params);\n        return {\n          items: data?.items ?? [],\n          next_page_id: data?.next_page_id ?? null,\n        };\n      } catch (err) {\n        if (!hasFilterParams) throw err;\n\n        // Server doesn't support timestamp filters yet — stop pagination\n        // by returning an empty page so the UI doesn't retry indefinitely.\n        // A limit-only fallback would return the same most-recent events\n        // already in the store, which get deduped but keep hasMore=true.\n        console.warn(\n          \"[EventService] Cloud backend doesn't support pagination filters. \" +\n            \"Falling back to initial load only. \" +\n            \"Server needs OpenHands/OpenHands#14399.\",\n        );\n        return { items: [], next_page_id: null };\n      }\n    }\n\n    const page = await new RemoteEventsList(\n      getAgentServerHttpClientOptions({ conversationUrl, sessionApiKey }),\n      conversationId,\n    ).search({\n      limit,\n      ...(options.pageId ? { page_id: options.pageId } : {}),\n      ...(options.sortOrder ? { sort_order: options.sortOrder } : {}),\n      ...(options.timestampGte ? { timestamp__gte: options.timestampGte } : {}),\n      ...(options.timestampLt ? { timestamp__lt: options.timestampLt } : {}),\n    });\n\n    return {\n      items: (page?.items ?? []) as OpenHandsEvent[],\n      next_page_id: page?.next_page_id ?? null,\n    };\n  }\n}\n\nexport default EventService;\n"],"mappings":"oaAsCA,IAAM,EAAN,KAAmB,CACjB,aAAa,sBACX,EACA,EACA,EACA,EACuC,CACvC,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAclC,OAZI,EAAO,OAAS,QACX,EAAA,eAA6C,CAClD,QAAS,EACT,OAAQ,OACR,aAAc,EAAA,iBAAiB,EAAgB,CAC/C,KAAM,sBAAsB,EAAe,iCAC3C,KAAM,EACN,SAAU,kBACV,gBACD,CAAC,CAGG,IAAI,EAAA,mBACT,EAAA,4BAA4B,CAC1B,kBACA,gBACD,CAAC,CACH,CAAC,sBACA,EACA,EACD,CAGH,aAAa,cACX,EACA,EACA,EACiB,CACjB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAalC,OAXI,EAAO,OAAS,QACX,EAAA,eAAuB,CAC5B,QAAS,EACT,OAAQ,MACR,aAAc,EAAA,iBAAiB,EAAgB,CAC/C,KAAM,sBAAsB,EAAe,eAC3C,SAAU,kBACV,gBACD,CAAC,CAGG,IAAI,EAAA,mBACT,EAAA,4BAA4B,CAC1B,kBACA,gBACD,CAAC,CACH,CAAC,cAAc,EAAe,CAQjC,aAAa,aACX,EACA,EACA,EACA,EAA8B,EAAE,CACU,CAC1C,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAC5B,EAAQ,EAAQ,OAAS,IAE/B,GAAI,EAAO,OAAS,QAAS,CAS3B,IAAM,EAAa,KAAK,IAAI,EAAO,IAAI,CACjC,EAAkB,CAAC,EACvB,EAAQ,WACR,EAAQ,QACR,EAAQ,cACR,EAAQ,aAGJ,EAAS,IAAI,gBACnB,EAAO,IAAI,QAAS,OAAO,EAAW,CAAC,CACnC,EAAQ,WAAW,EAAO,IAAI,aAAc,EAAQ,UAAU,CAC9D,EAAQ,QAAQ,EAAO,IAAI,UAAW,EAAQ,OAAO,CACrD,EAAQ,cACV,EAAO,IAAI,iBAAkB,EAAQ,aAAa,CAChD,EAAQ,aAAa,EAAO,IAAI,gBAAiB,EAAQ,YAAY,CAEzE,IAAM,EAAiB,GACrB,EAAA,eAAgD,CAC9C,QAAS,EACT,OAAQ,MACR,KAAM,wBAAwB,EAAe,iBAAiB,EAAa,UAAU,GACtF,CAAC,CAEJ,GAAI,CACF,IAAM,EAAO,MAAM,EAAc,EAAO,CACxC,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,cAAgB,KACrC,OACM,EAAK,CACZ,GAAI,CAAC,EAAiB,MAAM,EAW5B,OALA,QAAQ,KACN,8IAGD,CACM,CAAE,MAAO,EAAE,CAAE,aAAc,KAAM,EAI5C,IAAM,EAAO,MAAM,IAAI,EAAA,iBACrB,EAAA,gCAAgC,CAAE,kBAAiB,gBAAe,CAAC,CACnE,EACD,CAAC,OAAO,CACP,QACA,GAAI,EAAQ,OAAS,CAAE,QAAS,EAAQ,OAAQ,CAAG,EAAE,CACrD,GAAI,EAAQ,UAAY,CAAE,WAAY,EAAQ,UAAW,CAAG,EAAE,CAC9D,GAAI,EAAQ,aAAe,CAAE,eAAgB,EAAQ,aAAc,CAAG,EAAE,CACxE,GAAI,EAAQ,YAAc,CAAE,cAAe,EAAQ,YAAa,CAAG,EAAE,CACtE,CAAC,CAEF,MAAO,CACL,MAAQ,GAAM,OAAS,EAAE,CACzB,aAAc,GAAM,cAAgB,KACrC"}
+{"version":3,"file":"event-service.api.cjs","names":[],"sources":["../../../src/api/event-service/event-service.api.ts"],"sourcesContent":["import { ConversationClient } from \"@openhands/typescript-client/clients\";\nimport { RemoteEventsList } from \"@openhands/typescript-client/events/remote-events-list\";\nimport { OpenHandsEvent } from \"#/types/agent-server/core\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport {\n  getAgentServerClientOptions,\n  getAgentServerHttpClientOptions,\n} from \"../agent-server-client-options\";\nimport type {\n  ConfirmationResponseRequest,\n  ConfirmationResponseResponse,\n  EventSearchOptions,\n  EventSearchPage,\n} from \"./event-service.types\";\n\n/**\n * Cloud-mode REST calls are split between two upstream hosts (matching\n * OpenHands' cloud frontend):\n *\n *   - **App API** (`backend.host`, default in `callCloudProxy`):\n *     event *history* (`/api/v1/conversation/{id}/events/search`).\n *     Persisted by the cloud backend — survives the runtime sandbox.\n *\n *   - **Runtime sandbox** (extracted from `conversation.conversation_url`\n *     and passed as `hostOverride`): live runtime endpoints like\n *     `/api/conversations/{id}/events/count` and\n *     `/api/conversations/{id}/events/respond_to_confirmation`. Auth on\n *     these endpoints is `X-Session-API-Key`, not `Authorization: Bearer`.\n *\n * App API calls go directly to the cloud backend with bearer auth. Runtime\n * sandbox calls go through `/api/cloud-proxy`, which avoids depending on CORS\n * for per-conversation runtime hosts.\n *\n * Local mode keeps the existing typescript-client path: it targets the\n * conversation's host directly via typed client classes.\n */\nclass EventService {\n  static async respondToConfirmation(\n    conversationId: string,\n    conversationUrl: string,\n    request: ConfirmationResponseRequest,\n    sessionApiKey?: string | null,\n  ): Promise<ConfirmationResponseResponse> {\n    const active = getActiveBackend().backend;\n\n    if (active.kind === \"cloud\") {\n      return callCloudProxy<ConfirmationResponseResponse>({\n        backend: active,\n        method: \"POST\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events/respond_to_confirmation`,\n        body: request,\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n    }\n\n    return new ConversationClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).respondToConfirmation<ConfirmationResponseResponse>(\n      conversationId,\n      request,\n    );\n  }\n\n  static async getEventCount(\n    conversationId: string,\n    conversationUrl: string,\n    sessionApiKey?: string | null,\n  ): Promise<number> {\n    const active = getActiveBackend().backend;\n\n    if (active.kind === \"cloud\") {\n      return callCloudProxy<number>({\n        backend: active,\n        method: \"GET\",\n        hostOverride: buildHttpBaseUrl(conversationUrl),\n        path: `/api/conversations/${conversationId}/events/count`,\n        authMode: \"session-api-key\",\n        sessionApiKey,\n      });\n    }\n\n    return new ConversationClient(\n      getAgentServerClientOptions({\n        conversationUrl,\n        sessionApiKey,\n      }),\n    ).getEventCount(conversationId);\n  }\n\n  /**\n   * Search events for a conversation. Returns the raw page so callers can\n   * paginate (via `next_page_id`) and so REST-driven history loading can\n   * tell when there are no more older events to load.\n   */\n  static async searchEvents(\n    conversationId: string,\n    conversationUrl?: string | null,\n    sessionApiKey?: string | null,\n    options: EventSearchOptions = {},\n  ): Promise<EventSearchPage<OpenHandsEvent>> {\n    const active = getActiveBackend().backend;\n    const limit = options.limit ?? 100;\n\n    if (active.kind === \"cloud\") {\n      // Event *history* lives on the cloud App API, not the runtime\n      // sandbox. Path is singular `conversation` and v1-prefixed.\n      //\n      // Full pagination params (sort_order, page_id, timestamp filters)\n      // require the server-side fix from OpenHands/OpenHands#14399. If\n      // the cloud backend hasn't been updated yet, the timestamp filters\n      // trigger a 500 (str-vs-datetime comparison). We attempt the full\n      // request first and fall back to a limit-only request on failure.\n      const cloudLimit = Math.min(limit, 100);\n      const hasFilterParams = !!(\n        options.sortOrder ||\n        options.pageId ||\n        options.timestampGte ||\n        options.timestampLt\n      );\n\n      const params = new URLSearchParams();\n      params.set(\"limit\", String(cloudLimit));\n      if (options.sortOrder) params.set(\"sort_order\", options.sortOrder);\n      if (options.pageId) params.set(\"page_id\", options.pageId);\n      if (options.timestampGte)\n        params.set(\"timestamp__gte\", options.timestampGte);\n      if (options.timestampLt) params.set(\"timestamp__lt\", options.timestampLt);\n\n      const doCloudSearch = (searchParams: URLSearchParams) =>\n        callCloudProxy<EventSearchPage<OpenHandsEvent>>({\n          backend: active,\n          method: \"GET\",\n          path: `/api/v1/conversation/${conversationId}/events/search?${searchParams.toString()}`,\n        });\n\n      try {\n        const data = await doCloudSearch(params);\n        return {\n          items: data?.items ?? [],\n          next_page_id: data?.next_page_id ?? null,\n        };\n      } catch (err) {\n        if (!hasFilterParams) throw err;\n\n        // Server doesn't support timestamp filters yet — stop pagination\n        // by returning an empty page so the UI doesn't retry indefinitely.\n        // A limit-only fallback would return the same most-recent events\n        // already in the store, which get deduped but keep hasMore=true.\n        console.warn(\n          \"[EventService] Cloud backend doesn't support pagination filters. \" +\n            \"Falling back to initial load only. \" +\n            \"Server needs OpenHands/OpenHands#14399.\",\n        );\n        return { items: [], next_page_id: null };\n      }\n    }\n\n    const page = await new RemoteEventsList(\n      getAgentServerHttpClientOptions({ conversationUrl, sessionApiKey }),\n      conversationId,\n    ).search({\n      limit,\n      ...(options.pageId ? { page_id: options.pageId } : {}),\n      ...(options.sortOrder ? { sort_order: options.sortOrder } : {}),\n      ...(options.timestampGte ? { timestamp__gte: options.timestampGte } : {}),\n      ...(options.timestampLt ? { timestamp__lt: options.timestampLt } : {}),\n    });\n\n    return {\n      items: (page?.items ?? []) as OpenHandsEvent[],\n      next_page_id: page?.next_page_id ?? null,\n    };\n  }\n}\n\nexport default EventService;\n"],"mappings":"oaAsCA,IAAM,EAAN,KAAmB,CACjB,aAAa,sBACX,EACA,EACA,EACA,EACuC,CACvC,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAclC,OAZI,EAAO,OAAS,QACX,EAAA,eAA6C,CAClD,QAAS,EACT,OAAQ,OACR,aAAc,EAAA,iBAAiB,EAAgB,CAC/C,KAAM,sBAAsB,EAAe,iCAC3C,KAAM,EACN,SAAU,kBACV,gBACD,CAAC,CAGG,IAAI,EAAA,mBACT,EAAA,4BAA4B,CAC1B,kBACA,gBACD,CAAC,CACH,CAAC,sBACA,EACA,EACD,CAGH,aAAa,cACX,EACA,EACA,EACiB,CACjB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAalC,OAXI,EAAO,OAAS,QACX,EAAA,eAAuB,CAC5B,QAAS,EACT,OAAQ,MACR,aAAc,EAAA,iBAAiB,EAAgB,CAC/C,KAAM,sBAAsB,EAAe,eAC3C,SAAU,kBACV,gBACD,CAAC,CAGG,IAAI,EAAA,mBACT,EAAA,4BAA4B,CAC1B,kBACA,gBACD,CAAC,CACH,CAAC,cAAc,EAAe,CAQjC,aAAa,aACX,EACA,EACA,EACA,EAA8B,EAAE,CACU,CAC1C,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAC5B,EAAQ,EAAQ,OAAS,IAE/B,GAAI,EAAO,OAAS,QAAS,CAS3B,IAAM,EAAa,KAAK,IAAI,EAAO,IAAI,CACjC,EAAkB,CAAC,EACvB,EAAQ,WACR,EAAQ,QACR,EAAQ,cACR,EAAQ,aAGJ,EAAS,IAAI,gBACnB,EAAO,IAAI,QAAS,OAAO,EAAW,CAAC,CACnC,EAAQ,WAAW,EAAO,IAAI,aAAc,EAAQ,UAAU,CAC9D,EAAQ,QAAQ,EAAO,IAAI,UAAW,EAAQ,OAAO,CACrD,EAAQ,cACV,EAAO,IAAI,iBAAkB,EAAQ,aAAa,CAChD,EAAQ,aAAa,EAAO,IAAI,gBAAiB,EAAQ,YAAY,CAEzE,IAAM,EAAiB,GACrB,EAAA,eAAgD,CAC9C,QAAS,EACT,OAAQ,MACR,KAAM,wBAAwB,EAAe,iBAAiB,EAAa,UAAU,GACtF,CAAC,CAEJ,GAAI,CACF,IAAM,EAAO,MAAM,EAAc,EAAO,CACxC,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,cAAgB,KACrC,OACM,EAAK,CACZ,GAAI,CAAC,EAAiB,MAAM,EAW5B,OALA,QAAQ,KACN,8IAGD,CACM,CAAE,MAAO,EAAE,CAAE,aAAc,KAAM,EAI5C,IAAM,EAAO,MAAM,IAAI,EAAA,iBACrB,EAAA,gCAAgC,CAAE,kBAAiB,gBAAe,CAAC,CACnE,EACD,CAAC,OAAO,CACP,QACA,GAAI,EAAQ,OAAS,CAAE,QAAS,EAAQ,OAAQ,CAAG,EAAE,CACrD,GAAI,EAAQ,UAAY,CAAE,WAAY,EAAQ,UAAW,CAAG,EAAE,CAC9D,GAAI,EAAQ,aAAe,CAAE,eAAgB,EAAQ,aAAc,CAAG,EAAE,CACxE,GAAI,EAAQ,YAAc,CAAE,cAAe,EAAQ,YAAa,CAAG,EAAE,CACtE,CAAC,CAEF,MAAO,CACL,MAAQ,GAAM,OAAS,EAAE,CACzB,aAAc,GAAM,cAAgB,KACrC"}

package/dist/api/event-service/event-service.api.d.ts

@@ -14,9 +14,9 @@ import type { ConfirmationResponseRequest, ConfirmationResponseResponse, EventSe
  *     `/api/conversations/{id}/events/respond_to_confirmation`. Auth on
  *     these endpoints is `X-Session-API-Key`, not `Authorization: Bearer`.
  *
- * Both go through the bundled local agent-server's `/api/cloud-proxy`,
- * which sidesteps the cross-origin restrictions that block the GUI at
- * `localhost` from talking directly to either the cloud backend or the runtime.
+ * App API calls go directly to the cloud backend with bearer auth. Runtime
+ * sandbox calls go through `/api/cloud-proxy`, which avoids depending on CORS
+ * for per-conversation runtime hosts.
  *
  * Local mode keeps the existing typescript-client path: it targets the
  * conversation's host directly via typed client classes.