@openhands/agent-canvas 1.0.0-beta.6 → 1.0.0-beta.8

package/dist/api/agent-server-compatibility.js

@@ -1,48 +1,53 @@
 import { isAuthRequired as e } from "./agent-server-config.js";
-import { getEffectiveLocalBackend as t } from "./backend-registry/active-store.js";
-import { ServerClient as n } from "../node_modules/@openhands/typescript-client/dist/client/server-client.js";
-import { SettingsClient as r } from "../node_modules/@openhands/typescript-client/dist/client/settings-client.js";
-import { getAgentServerClientOptions as i } from "./agent-server-client-options.js";
+import { getActiveBackend as t, getEffectiveLocalBackend as n, isNoBackend as r } from "./backend-registry/active-store.js";
+import { ServerClient as i } from "../node_modules/@openhands/typescript-client/dist/client/server-client.js";
+import { SettingsClient as a } from "../node_modules/@openhands/typescript-client/dist/client/settings-client.js";
+import { getAgentServerClientOptions as o } from "./agent-server-client-options.js";
 //#region src/api/agent-server-compatibility.ts
-var a = 5e3, o = null, s = (e) => Array.isArray(e?.usable_tools) ? e.usable_tools : null, c = class extends Error {
+var s = 5e3, c = null, l = (e) => Array.isArray(e?.usable_tools) ? e.usable_tools : null, u = class extends Error {
 	details;
 	constructor(e) {
 		super("Agent server not found. Could not connect to the configured agent server. Start a compatible agent server and reload the page."), this.name = "AgentServerUnavailableError", this.details = e ?? null;
 	}
-}, l = (e) => e instanceof c || typeof e == "object" && !!e && "name" in e && e.name === "AgentServerUnavailableError", u = (t) => e() && m(t, 401);
-function d() {
-	o = null;
+}, d = (e) => e instanceof u || typeof e == "object" && !!e && "name" in e && e.name === "AgentServerUnavailableError", f = (t) => e() && g(t, 401);
+function p() {
+	c = null;
 }
-function f(e) {
-	let t = s(o);
+function m(e) {
+	let t = l(c);
 	return Array.isArray(t) ? t.includes(e) : !0;
 }
-function p(e) {
+function h(e) {
 	return e instanceof Error && e.name === "HttpError" && "status" in e && typeof e.status == "number";
 }
-function m(e, t) {
-	return p(e) && e.status === t;
+function g(e, t) {
+	return h(e) && e.status === t;
 }
-async function h() {
-	let s = t(), l = i({
-		host: s.host,
-		sessionApiKey: s.apiKey || null,
-		timeout: a
-	}), u;
+async function _() {
+	let l = n();
+	if (!l) {
+		if (p(), r(t().backend)) throw new u("No backend configured");
+		return null;
+	}
+	let d = o({
+		host: l.host,
+		sessionApiKey: l.apiKey || null,
+		timeout: s
+	}), f;
 	try {
-		u = await new n(l).getServerInfo();
+		f = await new i(d).getServerInfo();
 	} catch (e) {
-		throw d(), p(e) ? e : new c(e instanceof Error ? e.message : null);
+		throw p(), g(e, 401) ? e : new u(e instanceof Error ? e.message : null);
 	}
 	if (e()) try {
-		await new r(l).getSettings();
+		await new a(d).getSettings();
 	} catch (e) {
-		if (m(e, 401)) throw e;
+		if (g(e, 401)) throw e;
 		console.warn("[agent-server] getSettings() probe failed (non-401):", e);
 	}
-	return o = u, u;
+	return c = f, f;
 }
 //#endregion
-export { u as isAgentServerAuthError, f as isAgentServerToolAvailable, l as isAgentServerUnavailableError, h as loadAgentServerInfo };
+export { f as isAgentServerAuthError, m as isAgentServerToolAvailable, d as isAgentServerUnavailableError, g as isSdkHttpStatusError, _ as loadAgentServerInfo };
 
 //# sourceMappingURL=agent-server-compatibility.js.map

package/dist/api/agent-server-compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport { getEffectiveLocalBackend } from \"#/api/backend-registry/active-store\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n\n  constructor(details?: string | null) {\n    super(\n      \"Agent server not found. Could not connect to the configured agent server. Start a compatible agent server and reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    if (isSdkHttpError(error)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":";;;;;;AASA,IAAM,IAA+B,KAMjC,IAAgD,MAE9C,KAAsB,MACtB,MAAM,QAAQ,GAAY,aAAa,GAClC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,GAAyB;AAKnC,EAJA,MACE,iIACD,EACD,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW;;GAIjB,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,KACV,EAAM,SAAS,+BAWN,KAA0B,MACrC,GAAgB,IAAI,EAAqB,GAAO,IAAI;AAEtD,SAAgB,IAA6B;AAC3C,KAAwB;;AAG1B,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,EAAsB;AAIhE,QAHK,MAAM,QAAQ,EAAe,GAG3B,EAAe,SAAS,EAAS,GAF/B;;AAKX,SAAgB,EAAe,GAAgB;AAC7C,QACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;;AAQ5B,SAAgB,EAAqB,GAAgB,GAAyB;AAC5E,QACE,EAAe,EAAM,IAAK,EAA6B,WAAW;;AAItE,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,GAA0B,EAClC,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;EACV,CAAC,EACE;AAEJ,KAAI;AACF,MAAc,MAAM,IAAI,EACtB,EACD,CAAC,eAAe;UACV,GAAO;AAOd,QANA,GAA4B,EACxB,EAAe,EAAM,GACjB,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,KACX;;AAOhD,KAAI,GAAgB,CAClB,KAAI;AACF,QAAM,IAAI,EAAe,EAAc,CAAC,aAAa;UAC9C,GAAO;AAWd,MAAI,EAAqB,GAAO,IAAI,CAClC,OAAM;AAGR,UAAQ,KACN,wDACA,EACD;;AAKL,QADA,IAAwB,GACjB"}
+{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n\n  constructor(details?: string | null) {\n    super(\n      \"Agent server not found. Could not connect to the configured agent server. Start a compatible agent server and reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\");\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":";;;;;;AAaA,IAAM,IAA+B,KAMjC,IAAgD,MAE9C,KAAsB,MACtB,MAAM,QAAQ,GAAY,aAAa,GAClC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CAEA,YAAY,GAAyB;AAKnC,EAJA,MACE,iIACD,EACD,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW;;GAIjB,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,KACV,EAAM,SAAS,+BAWN,KAA0B,MACrC,GAAgB,IAAI,EAAqB,GAAO,IAAI;AAEtD,SAAgB,IAA6B;AAC3C,KAAwB;;AAG1B,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,EAAsB;AAIhE,QAHK,MAAM,QAAQ,EAAe,GAG3B,EAAe,SAAS,EAAS,GAF/B;;AAKX,SAAgB,EAAe,GAAgB;AAC7C,QACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;;AAQ5B,SAAgB,EAAqB,GAAgB,GAAyB;AAC5E,QACE,EAAe,EAAM,IAAK,EAA6B,WAAW;;AAItE,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,GAA0B;AACxC,KAAI,CAAC,GAAO;AAMV,MALA,GAA4B,EAKxB,EAAY,GAAkB,CAAC,QAAQ,CACzC,OAAM,IAAI,EAA4B,wBAAwB;AAIhE,SAAO;;CAGT,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;EACV,CAAC,EACE;AAEJ,KAAI;AACF,MAAc,MAAM,IAAI,EACtB,EACD,CAAC,eAAe;UACV,GAAO;AAUd,QATA,GAA4B,EAIxB,EAAqB,GAAO,IAAI,GAC5B,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,KACX;;AAOhD,KAAI,GAAgB,CAClB,KAAI;AACF,QAAM,IAAI,EAAe,EAAc,CAAC,aAAa;UAC9C,GAAO;AAWd,MAAI,EAAqB,GAAO,IAAI,CAClC,OAAM;AAGR,UAAQ,KACN,wDACA,EACD;;AAKL,QADA,IAAwB,GACjB"}

package/dist/api/agent-server-config.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);var e=`openhands-agent-server-config`,t=`workspace/project`;function n(){if(typeof window>`u`)return{};try{let t=window.localStorage.getItem(e);return t?JSON.parse(t)??{}:{}}catch{return{}}}function r(t){if(typeof window>`u`)return;let n=Object.fromEntries(Object.entries(t).flatMap(([e,t])=>{if(typeof t!=`string`)return[];let n=t.trim();return n?[[e,n]]:[]}));if(Object.keys(n).length===0){window.localStorage.removeItem(e);return}window.localStorage.setItem(e,JSON.stringify(n))}function i(e){return e?.trim()||null}function a(e){if(!e)return null;let t=e.trim().replace(/\/$/,``);return t?/^https?:\/\//i.test(t)?t:typeof window<`u`?`${window.location.protocol}//${t}`:`http://${t}`:null}function o(){return a(n().baseUrl)||a(void 0)}function s(){return i(void 0)}function c(){return i(n().sessionApiKey)||s()}function l(){let e=s();if(!e)return;let t=n(),a=i(t.sessionApiKey);a&&a!==e&&r({...t,sessionApiKey:e})}function u(e){if(typeof window>`u`)return!1;try{let t=new URL(e),n=new Set([`127.0.0.1`,`localhost`,`0.0.0.0`]),r=window.location.hostname;return n.has(t.hostname)&&(!n.has(r)||t.hostname!==r)}catch{return!1}}function d(e){return e?u(e)?window.location.origin:e:null}function f(){return d(o())||(typeof window<`u`?window.location.origin:`http://127.0.0.1:8000`)}function p(){return c()}function m(){return(void 0)?.trim()||n().workingDir?.trim()||t}function h(e){return`${m().replace(/\/+$/,``)}/${e.replace(/-/g,``)}`}function g(){let e=p();return e?{"X-Session-API-Key":e}:{}}function _(){return!0}function v(){return typeof window<`u`&&window.__AGENT_CANVAS_AUTH_REQUIRED__===!0}exports.DEFAULT_WORKING_DIR=t,exports.buildConversationWorkingDir=h,exports.getAgentServerBaseUrl=f,exports.getAgentServerHeaders=g,exports.getAgentServerSessionApiKey=p,exports.getAgentServerWorkingDir=m,exports.isAuthRequired=v,exports.shouldLoadPublicSkills=_,exports.syncBakedSessionApiKey=l;
+require(`../_virtual/_rolldown/runtime.cjs`);var e=`workspace/project`;function t(e){return e?.trim()||null}function n(e){if(!e)return null;let t=e.trim().replace(/\/$/,``);return t?/^https?:\/\//i.test(t)?t:typeof window<`u`?`${window.location.protocol}//${t}`:`http://${t}`:null}function r(){return n(void 0)}function i(){let e=t(void 0);if(e)return e;if(typeof window<`u`){let e=window.__AGENT_CANVAS_SESSION_API_KEY__;if(typeof e==`string`)return t(e)}return null}function a(){return r()||(typeof window<`u`?window.location.origin:null)}function o(){return i()}function s(){return(void 0)?.trim()||e}function c(e){return`${s().replace(/\/+$/,``)}/${e.replace(/-/g,``)}`}function l(){let e=o();return e?{"X-Session-API-Key":e}:{}}function u(){return!0}function d(){return typeof window<`u`&&window.__AGENT_CANVAS_AUTH_REQUIRED__===!0}exports.DEFAULT_WORKING_DIR=e,exports.buildConversationWorkingDir=c,exports.getAgentServerBaseUrl=a,exports.getAgentServerHeaders=l,exports.getAgentServerSessionApiKey=o,exports.getAgentServerWorkingDir=s,exports.isAuthRequired=d,exports.shouldLoadPublicSkills=u;
 //# sourceMappingURL=agent-server-config.cjs.map

package/dist/api/agent-server-config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-config.cjs","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const AGENT_SERVER_CONFIG_STORAGE_KEY = \"openhands-agent-server-config\";\nexport const DEFAULT_WORKING_DIR = \"workspace/project\";\n\ninterface StoredAgentServerConfig {\n  baseUrl?: string | null;\n  sessionApiKey?: string | null;\n  workingDir?: string | null;\n}\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\nfunction readStoredConfig(): StoredAgentServerConfig {\n  if (typeof window === \"undefined\") return {};\n\n  try {\n    const raw = window.localStorage.getItem(AGENT_SERVER_CONFIG_STORAGE_KEY);\n    if (!raw) return {};\n    const parsed = JSON.parse(raw) as StoredAgentServerConfig;\n    return parsed ?? {};\n  } catch {\n    return {};\n  }\n}\n\nfunction writeStoredConfig(config: StoredAgentServerConfig): void {\n  if (typeof window === \"undefined\") return;\n\n  const nextConfig = Object.fromEntries(\n    Object.entries(config).flatMap(([key, value]) => {\n      if (typeof value !== \"string\") return [];\n\n      const trimmed = value.trim();\n      if (!trimmed) return [];\n\n      return [[key, trimmed]];\n    }),\n  ) as StoredAgentServerConfig;\n\n  if (Object.keys(nextConfig).length === 0) {\n    window.localStorage.removeItem(AGENT_SERVER_CONFIG_STORAGE_KEY);\n    return;\n  }\n\n  window.localStorage.setItem(\n    AGENT_SERVER_CONFIG_STORAGE_KEY,\n    JSON.stringify(nextConfig),\n  );\n}\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  const storedUrl = normalizeBaseUrl(readStoredConfig().baseUrl);\n  if (storedUrl) return storedUrl;\n\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the baked-in session API key from the Vite env or the runtime\n * injection by static-server.mjs.  This represents the *server's* truth\n * and is only set in non-public (local) mode.\n */\nexport function getBakedSessionApiKey(): string | null {\n  return trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n}\n\nfunction getConfiguredSessionApiKey(): string | null {\n  const storedKey = trimToNull(readStoredConfig().sessionApiKey);\n  if (storedKey) return storedKey;\n\n  return getBakedSessionApiKey();\n}\n\n/**\n * Sync the baked-in session API key into `openhands-agent-server-config`\n * localStorage when the stored value has drifted.\n *\n * In non-public (local) mode the dev scripts bake the session key into\n * `VITE_SESSION_API_KEY` (Vite dev) or inject it via `static-server.mjs`\n * (`--session-api-key`). That key represents the *server's* truth — the\n * agent-server was started with the same value as `OH_SESSION_API_KEYS_0`.\n *\n * If a user restarts the stack with a different `LOCAL_BACKEND_API_KEY`,\n * the baked-in key changes but the old value may still be persisted in\n * localStorage (written by the onboarding form, the Settings page, or a\n * previous key injection). Without this sync the stale stored key would\n * shadow the new baked key everywhere (`getConfiguredSessionApiKey()`\n * reads localStorage first), causing 401s.\n *\n * Must run **before** any call to `getConfiguredSessionApiKey()` or\n * `makeDefaultLocalBackend()` — called from `readStoredBackends()` in\n * `storage.ts` which is evaluated at module init time.\n */\nexport function syncBakedSessionApiKey(): void {\n  const bakedKey = getBakedSessionApiKey();\n  if (!bakedKey) return; // public mode or no key baked in\n\n  const storedConfig = readStoredConfig();\n  const storedKey = trimToNull(storedConfig.sessionApiKey);\n  if (storedKey && storedKey !== bakedKey) {\n    writeStoredConfig({ ...storedConfig, sessionApiKey: bakedKey });\n  }\n}\n\nfunction shouldUseProxyOrigin(baseUrl: string): boolean {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  try {\n    const configuredUrl = new URL(baseUrl);\n    const localHosts = new Set([\"127.0.0.1\", \"localhost\", \"0.0.0.0\"]);\n    const browserHostname = window.location.hostname;\n\n    return (\n      localHosts.has(configuredUrl.hostname) &&\n      (!localHosts.has(browserHostname) ||\n        configuredUrl.hostname !== browserHostname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction resolveAgentServerBaseUrl(baseUrl: string | null): string | null {\n  if (!baseUrl) {\n    return null;\n  }\n\n  if (shouldUseProxyOrigin(baseUrl)) {\n    return window.location.origin;\n  }\n\n  return baseUrl;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getConfiguredBaseUrl() ?? \"\",\n    sessionApiKey: getConfiguredSessionApiKey() ?? \"\",\n  };\n}\n\nexport function saveAgentServerConfig(config: AgentServerFormDefaults): void {\n  const currentConfig = readStoredConfig();\n\n  writeStoredConfig({\n    ...currentConfig,\n    baseUrl: normalizeBaseUrl(config.baseUrl),\n    sessionApiKey: trimToNull(config.sessionApiKey),\n  });\n}\n\nexport function getAgentServerBaseUrl(): string {\n  const configuredUrl = resolveAgentServerBaseUrl(getConfiguredBaseUrl());\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return \"http://127.0.0.1:8000\";\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getConfiguredSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  const storedDir = readStoredConfig().workingDir?.trim();\n  if (storedDir) return storedDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getConfiguredWorkerUrls(): string[] {\n  const raw = import.meta.env.VITE_WORKER_URLS?.trim();\n  if (!raw) return [];\n\n  return raw\n    .split(\",\")\n    .map((url: string) => normalizeBaseUrl(url))\n    .filter((url: string | null): url is string => Boolean(url));\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\n/**\n * Returns whether public skills from the OpenHands extensions marketplace\n * (https://github.com/OpenHands/extensions) should be loaded.\n *\n * Defaults to true. Set VITE_LOAD_PUBLIC_SKILLS=false to disable.\n */\nexport function shouldLoadPublicSkills(): boolean {\n  return import.meta.env.VITE_LOAD_PUBLIC_SKILLS !== \"false\";\n}\n\n/**\n * Whether the deployment requires an API key from the user (public mode).\n *\n * Checks both the Vite build-time env var (`VITE_AUTH_REQUIRED`) and the\n * runtime flag injected by static-server.mjs (`window.__AGENT_CANVAS_AUTH_REQUIRED__`).\n * The runtime flag is needed for pre-built static binaries where\n * `VITE_AUTH_REQUIRED` was not set at build time.\n */\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\n/**\n * Returns true when the server was started in public mode and the user\n * has not yet pasted an API key (nothing in localStorage, nothing baked\n * in via `VITE_SESSION_API_KEY`).\n *\n * Used by `root.tsx` to gate the app behind {@link ApiKeyEntryScreen}\n * before any network request is attempted.\n */\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getConfiguredSessionApiKey();\n}\n"],"mappings":"6CAAA,IAAa,EAAkC,gCAClC,EAAsB,oBAanC,SAAS,GAA4C,CACnD,GAAI,OAAO,OAAW,IAAa,MAAO,EAAE,CAE5C,GAAI,CACF,IAAM,EAAM,OAAO,aAAa,QAAQ,EAAgC,CAGxE,OAFK,EACU,KAAK,MAAM,EACnB,EAAU,EAAE,CAFF,EAAE,MAGb,CACN,MAAO,EAAE,EAIb,SAAS,EAAkB,EAAuC,CAChE,GAAI,OAAO,OAAW,IAAa,OAEnC,IAAM,EAAa,OAAO,YACxB,OAAO,QAAQ,EAAO,CAAC,SAAS,CAAC,EAAK,KAAW,CAC/C,GAAI,OAAO,GAAU,SAAU,MAAO,EAAE,CAExC,IAAM,EAAU,EAAM,MAAM,CAG5B,OAFK,EAEE,CAAC,CAAC,EAAK,EAAQ,CAAC,CAFF,EAAE,EAGvB,CACH,CAED,GAAI,OAAO,KAAK,EAAW,CAAC,SAAW,EAAG,CACxC,OAAO,aAAa,WAAW,EAAgC,CAC/D,OAGF,OAAO,aAAa,QAClB,EACA,KAAK,UAAU,EAAW,CAC3B,CAGH,SAAS,EAAW,EAAsC,CACxD,OAAO,GAAO,MAAM,EAAI,KAG1B,SAAS,EAAiB,EAAsC,CAC9D,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,CAW/C,OAVK,EAED,gBAAgB,KAAK,EAAQ,CACxB,EAGL,OAAO,OAAW,IACb,GAAG,OAAO,SAAS,SAAS,IAAI,IAGlC,UAAU,IAVI,KAavB,SAAS,GAAsC,CAI7C,OAHkB,EAAiB,GAAkB,CAAC,QAClD,EAEG,EAAA,IAAA,GAAuD,CAQhE,SAAgB,GAAuC,CACrD,OAAO,EAAA,IAAA,GAAgD,CAGzD,SAAS,GAA4C,CAInD,OAHkB,EAAW,GAAkB,CAAC,cAC5C,EAEG,GAAuB,CAuBhC,SAAgB,GAA+B,CAC7C,IAAM,EAAW,GAAuB,CACxC,GAAI,CAAC,EAAU,OAEf,IAAM,EAAe,GAAkB,CACjC,EAAY,EAAW,EAAa,cAAc,CACpD,GAAa,IAAc,GAC7B,EAAkB,CAAE,GAAG,EAAc,cAAe,EAAU,CAAC,CAInE,SAAS,EAAqB,EAA0B,CACtD,GAAI,OAAO,OAAW,IACpB,MAAO,GAGT,GAAI,CACF,IAAM,EAAgB,IAAI,IAAI,EAAQ,CAChC,EAAa,IAAI,IAAI,CAAC,YAAa,YAAa,UAAU,CAAC,CAC3D,EAAkB,OAAO,SAAS,SAExC,OACE,EAAW,IAAI,EAAc,SAAS,GACrC,CAAC,EAAW,IAAI,EAAgB,EAC/B,EAAc,WAAa,QAEzB,CACN,MAAO,IAIX,SAAS,EAA0B,EAAuC,CASxE,OARK,EAID,EAAqB,EAAQ,CACxB,OAAO,SAAS,OAGlB,EAPE,KA2BX,SAAgB,GAAgC,CAQ9C,OAPsB,EAA0B,GAAsB,CAClE,GAEA,OAAO,OAAW,IACb,OAAO,SAAS,OAGlB,yBAGT,SAAgB,GAA6C,CAC3D,OAAO,GAA4B,CAGrC,SAAgB,GAAmC,CAOjD,OANM,IAAA,KAA2C,MAAM,EAGrC,GAAkB,CAAC,YAAY,MAAM,EAGhD,EAGT,SAAgB,EAA4B,EAAgC,CAG1E,MAAO,GAFM,GAA0B,CAAC,QAAQ,OAAQ,GAE9C,CAAK,GADH,EAAe,QAAQ,KAAM,GACvB,GAapB,SAAgB,GAAgD,CAC9D,IAAM,EAAgB,GAA6B,CACnD,OAAO,EAAgB,CAAE,oBAAqB,EAAe,CAAG,EAAE,CASpE,SAAgB,GAAkC,CAChD,MAAO,GAWT,SAAgB,GAA0B,CACxC,OAEG,OAAO,OAAW,KAChB,OACE,iCAAmC"}
+{"version":3,"file":"agent-server-config.cjs","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getConfiguredWorkerUrls(): string[] {\n  const raw = import.meta.env.VITE_WORKER_URLS?.trim();\n  if (!raw) return [];\n\n  return raw\n    .split(\",\")\n    .map((url: string) => normalizeBaseUrl(url))\n    .filter((url: string | null): url is string => Boolean(url));\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function shouldLoadPublicSkills(): boolean {\n  return import.meta.env.VITE_LOAD_PUBLIC_SKILLS !== \"false\";\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":"6CAAA,IAAa,EAAsB,oBAOnC,SAAS,EAAW,EAAsC,CACxD,OAAO,GAAO,MAAM,EAAI,KAG1B,SAAS,EAAiB,EAAsC,CAC9D,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,MAAM,CAAC,QAAQ,MAAO,GAAG,CAW/C,OAVK,EAED,gBAAgB,KAAK,EAAQ,CACxB,EAGL,OAAO,OAAW,IACb,GAAG,OAAO,SAAS,SAAS,IAAI,IAGlC,UAAU,IAVI,KAavB,SAAS,GAAsC,CAC7C,OAAO,EAAA,IAAA,GAAuD,CAoBhE,SAAgB,GAAuC,CACrD,IAAM,EAAS,EAAA,IAAA,GAAgD,CAC/D,GAAI,EAAQ,OAAO,EAEnB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OACf,iCACH,GAAI,OAAO,GAAa,SACtB,OAAO,EAAW,EAAS,CAI/B,OAAO,KAUT,SAAgB,GAAuC,CAQrD,OAPsB,GAClB,GAEA,OAAO,OAAW,IACb,OAAO,SAAS,OAGlB,MAGT,SAAgB,GAA6C,CAC3D,OAAO,GAAuB,CAGhC,SAAgB,GAAmC,CAIjD,OAHM,IAAA,KAA2C,MAAM,EAGhD,EAGT,SAAgB,EAA4B,EAAgC,CAG1E,MAAO,GAFM,GAA0B,CAAC,QAAQ,OAAQ,GAE9C,CAAK,GADH,EAAe,QAAQ,KAAM,GACvB,GAapB,SAAgB,GAAgD,CAC9D,IAAM,EAAgB,GAA6B,CACnD,OAAO,EAAgB,CAAE,oBAAqB,EAAe,CAAG,EAAE,CAGpE,SAAgB,GAAkC,CAChD,MAAO,GAGT,SAAgB,GAA0B,CACxC,OAEG,OAAO,OAAW,KAChB,OACE,iCAAmC"}

package/dist/api/agent-server-config.d.ts

@@ -1,66 +1,33 @@
-export declare const AGENT_SERVER_CONFIG_STORAGE_KEY = "openhands-agent-server-config";
 export declare const DEFAULT_WORKING_DIR = "workspace/project";
 export interface AgentServerFormDefaults {
     baseUrl: string;
     sessionApiKey: string;
 }
 /**
- * Return the baked-in session API key from the Vite env or the runtime
- * injection by static-server.mjs.  This represents the *server's* truth
- * and is only set in non-public (local) mode.
- */
-export declare function getBakedSessionApiKey(): string | null;
-/**
- * Sync the baked-in session API key into `openhands-agent-server-config`
- * localStorage when the stored value has drifted.
- *
- * In non-public (local) mode the dev scripts bake the session key into
- * `VITE_SESSION_API_KEY` (Vite dev) or inject it via `static-server.mjs`
- * (`--session-api-key`). That key represents the *server's* truth — the
- * agent-server was started with the same value as `OH_SESSION_API_KEYS_0`.
+ * Return the session API key supplied by the deployment host.
  *
- * If a user restarts the stack with a different `LOCAL_BACKEND_API_KEY`,
- * the baked-in key changes but the old value may still be persisted in
- * localStorage (written by the onboarding form, the Settings page, or a
- * previous key injection). Without this sync the stale stored key would
- * shadow the new baked key everywhere (`getConfiguredSessionApiKey()`
- * reads localStorage first), causing 401s.
+ * Two sources are consulted, in order:
+ *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by
+ *      `npm run dev` so the dev server has the key without a round-trip).
+ *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`
+ *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.
+ *      This is the path used by the published `agent-canvas` binary, where
+ *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the
+ *      runtime key is generated when the user launches the CLI.
  *
- * Must run **before** any call to `getConfiguredSessionApiKey()` or
- * `makeDefaultLocalBackend()` — called from `readStoredBackends()` in
- * `storage.ts` which is evaluated at module init time.
+ * Without the window-global fallback, the published binary cannot construct a
+ * default local backend (`makeDefaultLocalBackend()` returns null), the
+ * registry is left empty, and the user sees the Manage Backends modal
+ * instead of the onboarding flow.
  */
-export declare function syncBakedSessionApiKey(): void;
+export declare function getBakedSessionApiKey(): string | null;
 export declare function getAgentServerFormDefaults(): AgentServerFormDefaults;
-export declare function saveAgentServerConfig(config: AgentServerFormDefaults): void;
-export declare function getAgentServerBaseUrl(): string;
+export declare function getAgentServerBaseUrl(): string | null;
 export declare function getAgentServerSessionApiKey(): string | null;
 export declare function getAgentServerWorkingDir(): string;
 export declare function buildConversationWorkingDir(conversationId: string): string;
 export declare function getConfiguredWorkerUrls(): string[];
 export declare function getAgentServerHeaders(): Record<string, string>;
-/**
- * Returns whether public skills from the OpenHands extensions marketplace
- * (https://github.com/OpenHands/extensions) should be loaded.
- *
- * Defaults to true. Set VITE_LOAD_PUBLIC_SKILLS=false to disable.
- */
 export declare function shouldLoadPublicSkills(): boolean;
-/**
- * Whether the deployment requires an API key from the user (public mode).
- *
- * Checks both the Vite build-time env var (`VITE_AUTH_REQUIRED`) and the
- * runtime flag injected by static-server.mjs (`window.__AGENT_CANVAS_AUTH_REQUIRED__`).
- * The runtime flag is needed for pre-built static binaries where
- * `VITE_AUTH_REQUIRED` was not set at build time.
- */
 export declare function isAuthRequired(): boolean;
-/**
- * Returns true when the server was started in public mode and the user
- * has not yet pasted an API key (nothing in localStorage, nothing baked
- * in via `VITE_SESSION_API_KEY`).
- *
- * Used by `root.tsx` to gate the app behind {@link ApiKeyEntryScreen}
- * before any network request is attempted.
- */
 export declare function isAuthRequiredAndMissing(): boolean;

package/dist/api/agent-server-config.js

@@ -1,92 +1,48 @@
 //#region src/api/agent-server-config.ts
-var e = "openhands-agent-server-config", t = "workspace/project";
-function n() {
-	if (typeof window > "u") return {};
-	try {
-		let t = window.localStorage.getItem(e);
-		return t ? JSON.parse(t) ?? {} : {};
-	} catch {
-		return {};
-	}
-}
-function r(t) {
-	if (typeof window > "u") return;
-	let n = Object.fromEntries(Object.entries(t).flatMap(([e, t]) => {
-		if (typeof t != "string") return [];
-		let n = t.trim();
-		return n ? [[e, n]] : [];
-	}));
-	if (Object.keys(n).length === 0) {
-		window.localStorage.removeItem(e);
-		return;
-	}
-	window.localStorage.setItem(e, JSON.stringify(n));
-}
-function i(e) {
+var e = "workspace/project";
+function t(e) {
 	return e?.trim() || null;
 }
-function a(e) {
+function n(e) {
 	if (!e) return null;
 	let t = e.trim().replace(/\/$/, "");
 	return t ? /^https?:\/\//i.test(t) ? t : typeof window < "u" ? `${window.location.protocol}//${t}` : `http://${t}` : null;
 }
-function o() {
-	return a(n().baseUrl) || a(void 0);
-}
-function s() {
-	return i(void 0);
-}
-function c() {
-	return i(n().sessionApiKey) || s();
-}
-function l() {
-	let e = s();
-	if (!e) return;
-	let t = n(), a = i(t.sessionApiKey);
-	a && a !== e && r({
-		...t,
-		sessionApiKey: e
-	});
+function r() {
+	return n(void 0);
 }
-function u(e) {
-	if (typeof window > "u") return !1;
-	try {
-		let t = new URL(e), n = new Set([
-			"127.0.0.1",
-			"localhost",
-			"0.0.0.0"
-		]), r = window.location.hostname;
-		return n.has(t.hostname) && (!n.has(r) || t.hostname !== r);
-	} catch {
-		return !1;
+function i() {
+	let e = t(void 0);
+	if (e) return e;
+	if (typeof window < "u") {
+		let e = window.__AGENT_CANVAS_SESSION_API_KEY__;
+		if (typeof e == "string") return t(e);
 	}
+	return null;
 }
-function d(e) {
-	return e ? u(e) ? window.location.origin : e : null;
-}
-function f() {
-	return d(o()) || (typeof window < "u" ? window.location.origin : "http://127.0.0.1:8000");
+function a() {
+	return r() || (typeof window < "u" ? window.location.origin : null);
 }
-function p() {
-	return c();
+function o() {
+	return i();
 }
-function m() {
-	return (void 0)?.trim() || n().workingDir?.trim() || t;
+function s() {
+	return (void 0)?.trim() || e;
 }
-function h(e) {
-	return `${m().replace(/\/+$/, "")}/${e.replace(/-/g, "")}`;
+function c(e) {
+	return `${s().replace(/\/+$/, "")}/${e.replace(/-/g, "")}`;
 }
-function g() {
-	let e = p();
+function l() {
+	let e = o();
 	return e ? { "X-Session-API-Key": e } : {};
 }
-function _() {
+function u() {
 	return !0;
 }
-function v() {
+function d() {
 	return typeof window < "u" && window.__AGENT_CANVAS_AUTH_REQUIRED__ === !0;
 }
 //#endregion
-export { t as DEFAULT_WORKING_DIR, h as buildConversationWorkingDir, f as getAgentServerBaseUrl, g as getAgentServerHeaders, p as getAgentServerSessionApiKey, m as getAgentServerWorkingDir, v as isAuthRequired, _ as shouldLoadPublicSkills, l as syncBakedSessionApiKey };
+export { e as DEFAULT_WORKING_DIR, c as buildConversationWorkingDir, a as getAgentServerBaseUrl, l as getAgentServerHeaders, o as getAgentServerSessionApiKey, s as getAgentServerWorkingDir, d as isAuthRequired, u as shouldLoadPublicSkills };
 
 //# sourceMappingURL=agent-server-config.js.map

package/dist/api/agent-server-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-config.js","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const AGENT_SERVER_CONFIG_STORAGE_KEY = \"openhands-agent-server-config\";\nexport const DEFAULT_WORKING_DIR = \"workspace/project\";\n\ninterface StoredAgentServerConfig {\n  baseUrl?: string | null;\n  sessionApiKey?: string | null;\n  workingDir?: string | null;\n}\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\nfunction readStoredConfig(): StoredAgentServerConfig {\n  if (typeof window === \"undefined\") return {};\n\n  try {\n    const raw = window.localStorage.getItem(AGENT_SERVER_CONFIG_STORAGE_KEY);\n    if (!raw) return {};\n    const parsed = JSON.parse(raw) as StoredAgentServerConfig;\n    return parsed ?? {};\n  } catch {\n    return {};\n  }\n}\n\nfunction writeStoredConfig(config: StoredAgentServerConfig): void {\n  if (typeof window === \"undefined\") return;\n\n  const nextConfig = Object.fromEntries(\n    Object.entries(config).flatMap(([key, value]) => {\n      if (typeof value !== \"string\") return [];\n\n      const trimmed = value.trim();\n      if (!trimmed) return [];\n\n      return [[key, trimmed]];\n    }),\n  ) as StoredAgentServerConfig;\n\n  if (Object.keys(nextConfig).length === 0) {\n    window.localStorage.removeItem(AGENT_SERVER_CONFIG_STORAGE_KEY);\n    return;\n  }\n\n  window.localStorage.setItem(\n    AGENT_SERVER_CONFIG_STORAGE_KEY,\n    JSON.stringify(nextConfig),\n  );\n}\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  const storedUrl = normalizeBaseUrl(readStoredConfig().baseUrl);\n  if (storedUrl) return storedUrl;\n\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the baked-in session API key from the Vite env or the runtime\n * injection by static-server.mjs.  This represents the *server's* truth\n * and is only set in non-public (local) mode.\n */\nexport function getBakedSessionApiKey(): string | null {\n  return trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n}\n\nfunction getConfiguredSessionApiKey(): string | null {\n  const storedKey = trimToNull(readStoredConfig().sessionApiKey);\n  if (storedKey) return storedKey;\n\n  return getBakedSessionApiKey();\n}\n\n/**\n * Sync the baked-in session API key into `openhands-agent-server-config`\n * localStorage when the stored value has drifted.\n *\n * In non-public (local) mode the dev scripts bake the session key into\n * `VITE_SESSION_API_KEY` (Vite dev) or inject it via `static-server.mjs`\n * (`--session-api-key`). That key represents the *server's* truth — the\n * agent-server was started with the same value as `OH_SESSION_API_KEYS_0`.\n *\n * If a user restarts the stack with a different `LOCAL_BACKEND_API_KEY`,\n * the baked-in key changes but the old value may still be persisted in\n * localStorage (written by the onboarding form, the Settings page, or a\n * previous key injection). Without this sync the stale stored key would\n * shadow the new baked key everywhere (`getConfiguredSessionApiKey()`\n * reads localStorage first), causing 401s.\n *\n * Must run **before** any call to `getConfiguredSessionApiKey()` or\n * `makeDefaultLocalBackend()` — called from `readStoredBackends()` in\n * `storage.ts` which is evaluated at module init time.\n */\nexport function syncBakedSessionApiKey(): void {\n  const bakedKey = getBakedSessionApiKey();\n  if (!bakedKey) return; // public mode or no key baked in\n\n  const storedConfig = readStoredConfig();\n  const storedKey = trimToNull(storedConfig.sessionApiKey);\n  if (storedKey && storedKey !== bakedKey) {\n    writeStoredConfig({ ...storedConfig, sessionApiKey: bakedKey });\n  }\n}\n\nfunction shouldUseProxyOrigin(baseUrl: string): boolean {\n  if (typeof window === \"undefined\") {\n    return false;\n  }\n\n  try {\n    const configuredUrl = new URL(baseUrl);\n    const localHosts = new Set([\"127.0.0.1\", \"localhost\", \"0.0.0.0\"]);\n    const browserHostname = window.location.hostname;\n\n    return (\n      localHosts.has(configuredUrl.hostname) &&\n      (!localHosts.has(browserHostname) ||\n        configuredUrl.hostname !== browserHostname)\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction resolveAgentServerBaseUrl(baseUrl: string | null): string | null {\n  if (!baseUrl) {\n    return null;\n  }\n\n  if (shouldUseProxyOrigin(baseUrl)) {\n    return window.location.origin;\n  }\n\n  return baseUrl;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getConfiguredBaseUrl() ?? \"\",\n    sessionApiKey: getConfiguredSessionApiKey() ?? \"\",\n  };\n}\n\nexport function saveAgentServerConfig(config: AgentServerFormDefaults): void {\n  const currentConfig = readStoredConfig();\n\n  writeStoredConfig({\n    ...currentConfig,\n    baseUrl: normalizeBaseUrl(config.baseUrl),\n    sessionApiKey: trimToNull(config.sessionApiKey),\n  });\n}\n\nexport function getAgentServerBaseUrl(): string {\n  const configuredUrl = resolveAgentServerBaseUrl(getConfiguredBaseUrl());\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return \"http://127.0.0.1:8000\";\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getConfiguredSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  const storedDir = readStoredConfig().workingDir?.trim();\n  if (storedDir) return storedDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getConfiguredWorkerUrls(): string[] {\n  const raw = import.meta.env.VITE_WORKER_URLS?.trim();\n  if (!raw) return [];\n\n  return raw\n    .split(\",\")\n    .map((url: string) => normalizeBaseUrl(url))\n    .filter((url: string | null): url is string => Boolean(url));\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\n/**\n * Returns whether public skills from the OpenHands extensions marketplace\n * (https://github.com/OpenHands/extensions) should be loaded.\n *\n * Defaults to true. Set VITE_LOAD_PUBLIC_SKILLS=false to disable.\n */\nexport function shouldLoadPublicSkills(): boolean {\n  return import.meta.env.VITE_LOAD_PUBLIC_SKILLS !== \"false\";\n}\n\n/**\n * Whether the deployment requires an API key from the user (public mode).\n *\n * Checks both the Vite build-time env var (`VITE_AUTH_REQUIRED`) and the\n * runtime flag injected by static-server.mjs (`window.__AGENT_CANVAS_AUTH_REQUIRED__`).\n * The runtime flag is needed for pre-built static binaries where\n * `VITE_AUTH_REQUIRED` was not set at build time.\n */\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\n/**\n * Returns true when the server was started in public mode and the user\n * has not yet pasted an API key (nothing in localStorage, nothing baked\n * in via `VITE_SESSION_API_KEY`).\n *\n * Used by `root.tsx` to gate the app behind {@link ApiKeyEntryScreen}\n * before any network request is attempted.\n */\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getConfiguredSessionApiKey();\n}\n"],"mappings":";AAAA,IAAa,IAAkC,iCAClC,IAAsB;AAanC,SAAS,IAA4C;AACnD,KAAI,OAAO,SAAW,IAAa,QAAO,EAAE;AAE5C,KAAI;EACF,IAAM,IAAM,OAAO,aAAa,QAAQ,EAAgC;AAGxE,SAFK,IACU,KAAK,MAAM,EACnB,IAAU,EAAE,GAFF,EAAE;SAGb;AACN,SAAO,EAAE;;;AAIb,SAAS,EAAkB,GAAuC;AAChE,KAAI,OAAO,SAAW,IAAa;CAEnC,IAAM,IAAa,OAAO,YACxB,OAAO,QAAQ,EAAO,CAAC,SAAS,CAAC,GAAK,OAAW;AAC/C,MAAI,OAAO,KAAU,SAAU,QAAO,EAAE;EAExC,IAAM,IAAU,EAAM,MAAM;AAG5B,SAFK,IAEE,CAAC,CAAC,GAAK,EAAQ,CAAC,GAFF,EAAE;GAGvB,CACH;AAED,KAAI,OAAO,KAAK,EAAW,CAAC,WAAW,GAAG;AACxC,SAAO,aAAa,WAAW,EAAgC;AAC/D;;AAGF,QAAO,aAAa,QAClB,GACA,KAAK,UAAU,EAAW,CAC3B;;AAGH,SAAS,EAAW,GAAsC;AACxD,QAAO,GAAO,MAAM,IAAI;;AAG1B,SAAS,EAAiB,GAAsC;AAC9D,KAAI,CAAC,EAAO,QAAO;CAEnB,IAAM,IAAU,EAAM,MAAM,CAAC,QAAQ,OAAO,GAAG;AAW/C,QAVK,IAED,gBAAgB,KAAK,EAAQ,GACxB,IAGL,OAAO,SAAW,MACb,GAAG,OAAO,SAAS,SAAS,IAAI,MAGlC,UAAU,MAVI;;AAavB,SAAS,IAAsC;AAI7C,QAHkB,EAAiB,GAAkB,CAAC,QAClD,IAEG,EAAA,KAAA,EAAuD;;AAQhE,SAAgB,IAAuC;AACrD,QAAO,EAAA,KAAA,EAAgD;;AAGzD,SAAS,IAA4C;AAInD,QAHkB,EAAW,GAAkB,CAAC,cAC5C,IAEG,GAAuB;;AAuBhC,SAAgB,IAA+B;CAC7C,IAAM,IAAW,GAAuB;AACxC,KAAI,CAAC,EAAU;CAEf,IAAM,IAAe,GAAkB,EACjC,IAAY,EAAW,EAAa,cAAc;AACxD,CAAI,KAAa,MAAc,KAC7B,EAAkB;EAAE,GAAG;EAAc,eAAe;EAAU,CAAC;;AAInE,SAAS,EAAqB,GAA0B;AACtD,KAAI,OAAO,SAAW,IACpB,QAAO;AAGT,KAAI;EACF,IAAM,IAAgB,IAAI,IAAI,EAAQ,EAChC,IAAa,IAAI,IAAI;GAAC;GAAa;GAAa;GAAU,CAAC,EAC3D,IAAkB,OAAO,SAAS;AAExC,SACE,EAAW,IAAI,EAAc,SAAS,KACrC,CAAC,EAAW,IAAI,EAAgB,IAC/B,EAAc,aAAa;SAEzB;AACN,SAAO;;;AAIX,SAAS,EAA0B,GAAuC;AASxE,QARK,IAID,EAAqB,EAAQ,GACxB,OAAO,SAAS,SAGlB,IAPE;;AA2BX,SAAgB,IAAgC;AAQ9C,QAPsB,EAA0B,GAAsB,CAClE,KAEA,OAAO,SAAW,MACb,OAAO,SAAS,SAGlB;;AAGT,SAAgB,IAA6C;AAC3D,QAAO,GAA4B;;AAGrC,SAAgB,IAAmC;AAOjD,SANM,KAAA,IAA2C,MAAM,IAGrC,GAAkB,CAAC,YAAY,MAAM,IAGhD;;AAGT,SAAgB,EAA4B,GAAgC;AAG1E,QAAO,GAFM,GAA0B,CAAC,QAAQ,QAAQ,GAE9C,CAAK,GADH,EAAe,QAAQ,MAAM,GACvB;;AAapB,SAAgB,IAAgD;CAC9D,IAAM,IAAgB,GAA6B;AACnD,QAAO,IAAgB,EAAE,qBAAqB,GAAe,GAAG,EAAE;;AASpE,SAAgB,IAAkC;AAChD,QAAO;;AAWT,SAAgB,IAA0B;AACxC,QAEG,OAAO,SAAW,OAChB,OACE,mCAAmC"}
+{"version":3,"file":"agent-server-config.js","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getConfiguredWorkerUrls(): string[] {\n  const raw = import.meta.env.VITE_WORKER_URLS?.trim();\n  if (!raw) return [];\n\n  return raw\n    .split(\",\")\n    .map((url: string) => normalizeBaseUrl(url))\n    .filter((url: string | null): url is string => Boolean(url));\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function shouldLoadPublicSkills(): boolean {\n  return import.meta.env.VITE_LOAD_PUBLIC_SKILLS !== \"false\";\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":";AAAA,IAAa,IAAsB;AAOnC,SAAS,EAAW,GAAsC;AACxD,QAAO,GAAO,MAAM,IAAI;;AAG1B,SAAS,EAAiB,GAAsC;AAC9D,KAAI,CAAC,EAAO,QAAO;CAEnB,IAAM,IAAU,EAAM,MAAM,CAAC,QAAQ,OAAO,GAAG;AAW/C,QAVK,IAED,gBAAgB,KAAK,EAAQ,GACxB,IAGL,OAAO,SAAW,MACb,GAAG,OAAO,SAAS,SAAS,IAAI,MAGlC,UAAU,MAVI;;AAavB,SAAS,IAAsC;AAC7C,QAAO,EAAA,KAAA,EAAuD;;AAoBhE,SAAgB,IAAuC;CACrD,IAAM,IAAS,EAAA,KAAA,EAAgD;AAC/D,KAAI,EAAQ,QAAO;AAEnB,KAAI,OAAO,SAAW,KAAa;EACjC,IAAM,IAAY,OACf;AACH,MAAI,OAAO,KAAa,SACtB,QAAO,EAAW,EAAS;;AAI/B,QAAO;;AAUT,SAAgB,IAAuC;AAQrD,QAPsB,GAClB,KAEA,OAAO,SAAW,MACb,OAAO,SAAS,SAGlB;;AAGT,SAAgB,IAA6C;AAC3D,QAAO,GAAuB;;AAGhC,SAAgB,IAAmC;AAIjD,SAHM,KAAA,IAA2C,MAAM,IAGhD;;AAGT,SAAgB,EAA4B,GAAgC;AAG1E,QAAO,GAFM,GAA0B,CAAC,QAAQ,QAAQ,GAE9C,CAAK,GADH,EAAe,QAAQ,MAAM,GACvB;;AAapB,SAAgB,IAAgD;CAC9D,IAAM,IAAgB,GAA6B;AACnD,QAAO,IAAgB,EAAE,qBAAqB,GAAe,GAAG,EAAE;;AAGpE,SAAgB,IAAkC;AAChD,QAAO;;AAGT,SAAgB,IAA0B;AACxC,QAEG,OAAO,SAAW,OAChB,OACE,mCAAmC"}

package/dist/api/backend-registry/active-store.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`./default-backend.cjs`),t=require(`./storage.cjs`);function n(t){return t.find(e=>e.kind===`local`)??e.makeDefaultLocalBackend()}function r(e,t){let r=null,i=null;if(t){let n=e.find(e=>e.id===t.backendId);n&&(r=n,i=t.orgId??null)}return r||(r=n(e),i=null),{backends:e,selection:t,active:{backend:r,orgId:i}}}var i=r(t.readStoredBackends(),t.readStoredActiveBackend()),a=new Set;function o(){a.forEach(e=>e())}function s(){return i.active}function c(){let e=i.active.backend;return e.kind===`local`?e:n(i.backends)}function l(){return i.backends}function u(){return i.selection}function d(){return i}function f(e){t.writeStoredActiveBackend(e),i=r(i.backends,e),o()}function p(e){t.writeStoredBackends(e);let n=i.selection;n&&!e.some(e=>e.id===n.backendId)&&(n=null,t.writeStoredActiveBackend(null)),i=r(e,n),o()}function m(e){return a.add(e),()=>{a.delete(e)}}exports.getActiveBackend=s,exports.getActiveSelection=u,exports.getEffectiveLocalBackend=c,exports.getRegisteredBackends=l,exports.getSnapshot=d,exports.setActiveSelection=f,exports.setRegisteredBackends=p,exports.subscribeActiveBackend=m;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`./storage.cjs`);var t=`no-backend`,n={id:t,name:`No Backend Available`,host:``,apiKey:``,kind:`local`};function r(e){return e.id===t}function i(e){return e[0]??n}function a(e,t){let n=null,r=null;if(t){let i=e.find(e=>e.id===t.backendId);i&&(n=i,r=t.orgId??null)}return n||(n=i(e),r=null),{backends:e,selection:t,active:{backend:n,orgId:r}}}var o=a(e.readStoredBackends(),e.readStoredActiveBackend()),s=new Set;function c(){s.forEach(e=>e())}function l(){return o.active}function u(){let e=o.active.backend;return e.kind===`local`&&!r(e)?e:null}function d(){return o.backends}function f(){return o.selection}function p(){return o}function m(t){e.writeStoredActiveBackend(t),o=a(o.backends,t),c()}function h(t){e.writeStoredBackends(t);let n=o.selection;n&&!t.some(e=>e.id===n.backendId)&&(n=null,e.writeStoredActiveBackend(null)),o=a(t,n),c()}function g(e){return s.add(e),()=>{s.delete(e)}}exports.NO_BACKEND=n,exports.getActiveBackend=l,exports.getActiveSelection=f,exports.getEffectiveLocalBackend=u,exports.getRegisteredBackends=d,exports.getSnapshot=p,exports.isNoBackend=r,exports.setActiveSelection=m,exports.setRegisteredBackends=h,exports.subscribeActiveBackend=g;
 //# sourceMappingURL=active-store.cjs.map

package/dist/api/backend-registry/active-store.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"active-store.cjs","names":[],"sources":["../../../src/api/backend-registry/active-store.ts"],"sourcesContent":["import { makeDefaultLocalBackend } from \"./default-backend\";\nimport {\n  readStoredActiveBackend,\n  readStoredBackends,\n  writeStoredActiveBackend,\n  writeStoredBackends,\n} from \"./storage\";\nimport type { Backend, BackendSelection, ResolvedActiveBackend } from \"./types\";\n\ntype Listener = () => void;\n\ninterface Snapshot {\n  backends: Backend[];\n  selection: BackendSelection | null;\n  active: ResolvedActiveBackend;\n}\n\n/**\n * Pick the local backend the GUI should talk to for local-protocol calls\n * (settings, conversations, secrets, …). Prefers the user's first\n * registered local backend. As a last resort — when the registry has no\n * local entry at all — synthesize one from env/agent-server-config so\n * synchronous call sites never have to handle a `null` backend; the\n * synthesized entry is never persisted.\n */\nfunction pickLocalBackend(backends: Backend[]): Backend {\n  const firstLocal = backends.find((b) => b.kind === \"local\");\n  return firstLocal ?? makeDefaultLocalBackend();\n}\n\nfunction computeSnapshot(\n  backends: Backend[],\n  selection: BackendSelection | null,\n): Snapshot {\n  let activeBackend: Backend | null = null;\n  let activeOrgId: string | null = null;\n\n  if (selection) {\n    const found = backends.find((b) => b.id === selection.backendId);\n    if (found) {\n      activeBackend = found;\n      activeOrgId = selection.orgId ?? null;\n    }\n    // If the selection points at a removed backend, fall through to\n    // the unselected case below; we also drop the orgId since it only\n    // makes sense in the context of a specific cloud backend.\n  }\n\n  // @spec BM-003 — Fallback on active backend removal\n  if (!activeBackend) {\n    activeBackend = pickLocalBackend(backends);\n    activeOrgId = null;\n  }\n\n  return {\n    backends,\n    selection,\n    active: { backend: activeBackend, orgId: activeOrgId },\n  };\n}\n\nlet snapshot: Snapshot = computeSnapshot(\n  readStoredBackends(),\n  readStoredActiveBackend(),\n);\n\nconst listeners = new Set<Listener>();\n\nfunction notify(): void {\n  listeners.forEach((listener) => listener());\n}\n\nexport function getActiveBackend(): ResolvedActiveBackend {\n  return snapshot.active;\n}\n\n/**\n * Pick the backend to use for *local agent-server protocol* calls.\n *\n * Most of the GUI's services (settings reads/writes, conversation CRUD,\n * skills/MCP/secrets, etc.) speak the local agent-server's protocol —\n * they would fail against a cloud host. When the user has chosen a\n * cloud backend as active, those calls fall back to the first registered\n * local backend (or the env-derived default if none exists). Cloud-only\n * call sites import `getActiveBackend` directly.\n */\nexport function getEffectiveLocalBackend(): Backend {\n  const active = snapshot.active.backend;\n  if (active.kind === \"local\") return active;\n  return pickLocalBackend(snapshot.backends);\n}\n\nexport function getRegisteredBackends(): Backend[] {\n  return snapshot.backends;\n}\n\nexport function getActiveSelection(): BackendSelection | null {\n  return snapshot.selection;\n}\n\nexport function getSnapshot(): Snapshot {\n  return snapshot;\n}\n\nexport function setActiveSelection(selection: BackendSelection | null): void {\n  writeStoredActiveBackend(selection);\n  snapshot = computeSnapshot(snapshot.backends, selection);\n  notify();\n}\n\nexport function setRegisteredBackends(backends: Backend[]): void {\n  writeStoredBackends(backends);\n\n  let nextSelection = snapshot.selection;\n  if (\n    nextSelection &&\n    !backends.some((b) => b.id === nextSelection!.backendId)\n  ) {\n    nextSelection = null;\n    writeStoredActiveBackend(null);\n  }\n\n  snapshot = computeSnapshot(backends, nextSelection);\n  notify();\n}\n\nexport function subscribeActiveBackend(listener: Listener): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test-only: re-read storage and clear listeners. */\n\nexport function __resetActiveStoreForTests(): void {\n  snapshot = computeSnapshot(readStoredBackends(), readStoredActiveBackend());\n  listeners.clear();\n}\n"],"mappings":"oHAyBA,SAAS,EAAiB,EAA8B,CAEtD,OADmB,EAAS,KAAM,GAAM,EAAE,OAAS,QAC5C,EAAc,EAAA,yBAAyB,CAGhD,SAAS,EACP,EACA,EACU,CACV,IAAI,EAAgC,KAChC,EAA6B,KAEjC,GAAI,EAAW,CACb,IAAM,EAAQ,EAAS,KAAM,GAAM,EAAE,KAAO,EAAU,UAAU,CAC5D,IACF,EAAgB,EAChB,EAAc,EAAU,OAAS,MAarC,OALK,IACH,EAAgB,EAAiB,EAAS,CAC1C,EAAc,MAGT,CACL,WACA,YACA,OAAQ,CAAE,QAAS,EAAe,MAAO,EAAa,CACvD,CAGH,IAAI,EAAqB,EACvB,EAAA,oBAAoB,CACpB,EAAA,yBAAyB,CAC1B,CAEK,EAAY,IAAI,IAEtB,SAAS,GAAe,CACtB,EAAU,QAAS,GAAa,GAAU,CAAC,CAG7C,SAAgB,GAA0C,CACxD,OAAO,EAAS,OAalB,SAAgB,GAAoC,CAClD,IAAM,EAAS,EAAS,OAAO,QAE/B,OADI,EAAO,OAAS,QAAgB,EAC7B,EAAiB,EAAS,SAAS,CAG5C,SAAgB,GAAmC,CACjD,OAAO,EAAS,SAGlB,SAAgB,GAA8C,CAC5D,OAAO,EAAS,UAGlB,SAAgB,GAAwB,CACtC,OAAO,EAGT,SAAgB,EAAmB,EAA0C,CAC3E,EAAA,yBAAyB,EAAU,CACnC,EAAW,EAAgB,EAAS,SAAU,EAAU,CACxD,GAAQ,CAGV,SAAgB,EAAsB,EAA2B,CAC/D,EAAA,oBAAoB,EAAS,CAE7B,IAAI,EAAgB,EAAS,UAE3B,GACA,CAAC,EAAS,KAAM,GAAM,EAAE,KAAO,EAAe,UAAU,GAExD,EAAgB,KAChB,EAAA,yBAAyB,KAAK,EAGhC,EAAW,EAAgB,EAAU,EAAc,CACnD,GAAQ,CAGV,SAAgB,EAAuB,EAAgC,CAErE,OADA,EAAU,IAAI,EAAS,KACV,CACX,EAAU,OAAO,EAAS"}
+{"version":3,"file":"active-store.cjs","names":[],"sources":["../../../src/api/backend-registry/active-store.ts"],"sourcesContent":["import {\n  readStoredActiveBackend,\n  readStoredBackends,\n  writeStoredActiveBackend,\n  writeStoredBackends,\n} from \"./storage\";\nimport type { Backend, BackendSelection, ResolvedActiveBackend } from \"./types\";\n\ntype Listener = () => void;\n\ninterface Snapshot {\n  backends: Backend[];\n  selection: BackendSelection | null;\n  active: ResolvedActiveBackend;\n}\n\nexport const NO_BACKEND_ID = \"no-backend\";\n\n/**\n * Sentinel returned when the registry has no usable backend. It must never be\n * persisted, and callers must check `isNoBackend()` before interpreting fields\n * like `kind`, `host`, or `apiKey`.\n */\nexport const NO_BACKEND: Backend = {\n  id: NO_BACKEND_ID,\n  name: \"No Backend Available\",\n  host: \"\",\n  apiKey: \"\",\n  kind: \"local\",\n};\n\nexport function isNoBackend(backend: Backend): boolean {\n  return backend.id === NO_BACKEND_ID;\n}\n\nfunction pickFallbackBackend(backends: Backend[]): Backend {\n  return backends[0] ?? NO_BACKEND;\n}\n\nfunction computeSnapshot(\n  backends: Backend[],\n  selection: BackendSelection | null,\n): Snapshot {\n  let activeBackend: Backend | null = null;\n  let activeOrgId: string | null = null;\n\n  if (selection) {\n    const found = backends.find((b) => b.id === selection.backendId);\n    if (found) {\n      activeBackend = found;\n      activeOrgId = selection.orgId ?? null;\n    }\n    // If the selection points at a removed backend, fall through to\n    // the unselected case below; we also drop the orgId since it only\n    // makes sense in the context of a specific cloud backend.\n  }\n\n  // @spec BM-003 — Fallback on active backend removal\n  if (!activeBackend) {\n    activeBackend = pickFallbackBackend(backends);\n    activeOrgId = null;\n  }\n\n  return {\n    backends,\n    selection,\n    active: { backend: activeBackend, orgId: activeOrgId },\n  };\n}\n\nlet snapshot: Snapshot = computeSnapshot(\n  readStoredBackends(),\n  readStoredActiveBackend(),\n);\n\nconst listeners = new Set<Listener>();\n\nfunction notify(): void {\n  listeners.forEach((listener) => listener());\n}\n\nexport function getActiveBackend(): ResolvedActiveBackend {\n  return snapshot.active;\n}\n\n/**\n * Pick the backend to use for *local agent-server protocol* calls.\n *\n * Most of the GUI's services (settings reads/writes, conversation CRUD,\n * skills/MCP/secrets, etc.) speak the local agent-server's protocol —\n * they would fail against a cloud host. Only the active backend is eligible:\n * a cloud selection must not borrow another registered local backend.\n */\nexport function getEffectiveLocalBackend(): Backend | null {\n  const active = snapshot.active.backend;\n  if (active.kind === \"local\" && !isNoBackend(active)) return active;\n  return null;\n}\n\nexport function getRegisteredBackends(): Backend[] {\n  return snapshot.backends;\n}\n\nexport function getActiveSelection(): BackendSelection | null {\n  return snapshot.selection;\n}\n\nexport function getSnapshot(): Snapshot {\n  return snapshot;\n}\n\nexport function setActiveSelection(selection: BackendSelection | null): void {\n  writeStoredActiveBackend(selection);\n  snapshot = computeSnapshot(snapshot.backends, selection);\n  notify();\n}\n\nexport function setRegisteredBackends(backends: Backend[]): void {\n  writeStoredBackends(backends);\n\n  let nextSelection = snapshot.selection;\n  if (\n    nextSelection &&\n    !backends.some((b) => b.id === nextSelection!.backendId)\n  ) {\n    nextSelection = null;\n    writeStoredActiveBackend(null);\n  }\n\n  snapshot = computeSnapshot(backends, nextSelection);\n  notify();\n}\n\nexport function subscribeActiveBackend(listener: Listener): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test-only: re-read storage and clear listeners. */\n\nexport function __resetActiveStoreForTests(): void {\n  snapshot = computeSnapshot(readStoredBackends(), readStoredActiveBackend());\n  listeners.clear();\n}\n"],"mappings":"iFAgBA,IAAa,EAAgB,aAOhB,EAAsB,CACjC,GAAI,EACJ,KAAM,uBACN,KAAM,GACN,OAAQ,GACR,KAAM,QACP,CAED,SAAgB,EAAY,EAA2B,CACrD,OAAO,EAAQ,KAAO,EAGxB,SAAS,EAAoB,EAA8B,CACzD,OAAO,EAAS,IAAM,EAGxB,SAAS,EACP,EACA,EACU,CACV,IAAI,EAAgC,KAChC,EAA6B,KAEjC,GAAI,EAAW,CACb,IAAM,EAAQ,EAAS,KAAM,GAAM,EAAE,KAAO,EAAU,UAAU,CAC5D,IACF,EAAgB,EAChB,EAAc,EAAU,OAAS,MAarC,OALK,IACH,EAAgB,EAAoB,EAAS,CAC7C,EAAc,MAGT,CACL,WACA,YACA,OAAQ,CAAE,QAAS,EAAe,MAAO,EAAa,CACvD,CAGH,IAAI,EAAqB,EACvB,EAAA,oBAAoB,CACpB,EAAA,yBAAyB,CAC1B,CAEK,EAAY,IAAI,IAEtB,SAAS,GAAe,CACtB,EAAU,QAAS,GAAa,GAAU,CAAC,CAG7C,SAAgB,GAA0C,CACxD,OAAO,EAAS,OAWlB,SAAgB,GAA2C,CACzD,IAAM,EAAS,EAAS,OAAO,QAE/B,OADI,EAAO,OAAS,SAAW,CAAC,EAAY,EAAO,CAAS,EACrD,KAGT,SAAgB,GAAmC,CACjD,OAAO,EAAS,SAGlB,SAAgB,GAA8C,CAC5D,OAAO,EAAS,UAGlB,SAAgB,GAAwB,CACtC,OAAO,EAGT,SAAgB,EAAmB,EAA0C,CAC3E,EAAA,yBAAyB,EAAU,CACnC,EAAW,EAAgB,EAAS,SAAU,EAAU,CACxD,GAAQ,CAGV,SAAgB,EAAsB,EAA2B,CAC/D,EAAA,oBAAoB,EAAS,CAE7B,IAAI,EAAgB,EAAS,UAE3B,GACA,CAAC,EAAS,KAAM,GAAM,EAAE,KAAO,EAAe,UAAU,GAExD,EAAgB,KAChB,EAAA,yBAAyB,KAAK,EAGhC,EAAW,EAAgB,EAAU,EAAc,CACnD,GAAQ,CAGV,SAAgB,EAAuB,EAAgC,CAErE,OADA,EAAU,IAAI,EAAS,KACV,CACX,EAAU,OAAO,EAAS"}

package/dist/api/backend-registry/active-store.d.ts

@@ -5,18 +5,24 @@ interface Snapshot {
     selection: BackendSelection | null;
     active: ResolvedActiveBackend;
 }
+export declare const NO_BACKEND_ID = "no-backend";
+/**
+ * Sentinel returned when the registry has no usable backend. It must never be
+ * persisted, and callers must check `isNoBackend()` before interpreting fields
+ * like `kind`, `host`, or `apiKey`.
+ */
+export declare const NO_BACKEND: Backend;
+export declare function isNoBackend(backend: Backend): boolean;
 export declare function getActiveBackend(): ResolvedActiveBackend;
 /**
  * Pick the backend to use for *local agent-server protocol* calls.
  *
  * Most of the GUI's services (settings reads/writes, conversation CRUD,
  * skills/MCP/secrets, etc.) speak the local agent-server's protocol —
- * they would fail against a cloud host. When the user has chosen a
- * cloud backend as active, those calls fall back to the first registered
- * local backend (or the env-derived default if none exists). Cloud-only
- * call sites import `getActiveBackend` directly.
+ * they would fail against a cloud host. Only the active backend is eligible:
+ * a cloud selection must not borrow another registered local backend.
  */
-export declare function getEffectiveLocalBackend(): Backend;
+export declare function getEffectiveLocalBackend(): Backend | null;
 export declare function getRegisteredBackends(): Backend[];
 export declare function getActiveSelection(): BackendSelection | null;
 export declare function getSnapshot(): Snapshot;

package/dist/api/backend-registry/active-store.js

@@ -1,16 +1,25 @@
-import { makeDefaultLocalBackend as e } from "./default-backend.js";
-import { readStoredActiveBackend as t, readStoredBackends as n, writeStoredActiveBackend as r, writeStoredBackends as i } from "./storage.js";
+import { readStoredActiveBackend as e, readStoredBackends as t, writeStoredActiveBackend as n, writeStoredBackends as r } from "./storage.js";
 //#region src/api/backend-registry/active-store.ts
-function a(t) {
-	return t.find((e) => e.kind === "local") ?? e();
+var i = "no-backend", a = {
+	id: i,
+	name: "No Backend Available",
+	host: "",
+	apiKey: "",
+	kind: "local"
+};
+function o(e) {
+	return e.id === i;
 }
-function o(e, t) {
+function s(e) {
+	return e[0] ?? a;
+}
+function c(e, t) {
 	let n = null, r = null;
 	if (t) {
 		let i = e.find((e) => e.id === t.backendId);
 		i && (n = i, r = t.orgId ?? null);
 	}
-	return n || (n = a(e), r = null), {
+	return n || (n = s(e), r = null), {
 		backends: e,
 		selection: t,
 		active: {
@@ -19,40 +28,40 @@ function o(e, t) {
 		}
 	};
 }
-var s = o(n(), t()), c = /* @__PURE__ */ new Set();
-function l() {
-	c.forEach((e) => e());
-}
-function u() {
-	return s.active;
-}
+var l = c(t(), e()), u = /* @__PURE__ */ new Set();
 function d() {
-	let e = s.active.backend;
-	return e.kind === "local" ? e : a(s.backends);
+	u.forEach((e) => e());
 }
 function f() {
-	return s.backends;
+	return l.active;
 }
 function p() {
-	return s.selection;
+	let e = l.active.backend;
+	return e.kind === "local" && !o(e) ? e : null;
 }
 function m() {
-	return s;
+	return l.backends;
 }
-function h(e) {
-	r(e), s = o(s.backends, e), l();
+function h() {
+	return l.selection;
 }
-function g(e) {
-	i(e);
-	let t = s.selection;
-	t && !e.some((e) => e.id === t.backendId) && (t = null, r(null)), s = o(e, t), l();
+function g() {
+	return l;
 }
 function _(e) {
-	return c.add(e), () => {
-		c.delete(e);
+	n(e), l = c(l.backends, e), d();
+}
+function v(e) {
+	r(e);
+	let t = l.selection;
+	t && !e.some((e) => e.id === t.backendId) && (t = null, n(null)), l = c(e, t), d();
+}
+function y(e) {
+	return u.add(e), () => {
+		u.delete(e);
 	};
 }
 //#endregion
-export { u as getActiveBackend, p as getActiveSelection, d as getEffectiveLocalBackend, f as getRegisteredBackends, m as getSnapshot, h as setActiveSelection, g as setRegisteredBackends, _ as subscribeActiveBackend };
+export { a as NO_BACKEND, f as getActiveBackend, h as getActiveSelection, p as getEffectiveLocalBackend, m as getRegisteredBackends, g as getSnapshot, o as isNoBackend, _ as setActiveSelection, v as setRegisteredBackends, y as subscribeActiveBackend };
 
 //# sourceMappingURL=active-store.js.map

package/dist/api/backend-registry/active-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-store.js","names":[],"sources":["../../../src/api/backend-registry/active-store.ts"],"sourcesContent":["import { makeDefaultLocalBackend } from \"./default-backend\";\nimport {\n  readStoredActiveBackend,\n  readStoredBackends,\n  writeStoredActiveBackend,\n  writeStoredBackends,\n} from \"./storage\";\nimport type { Backend, BackendSelection, ResolvedActiveBackend } from \"./types\";\n\ntype Listener = () => void;\n\ninterface Snapshot {\n  backends: Backend[];\n  selection: BackendSelection | null;\n  active: ResolvedActiveBackend;\n}\n\n/**\n * Pick the local backend the GUI should talk to for local-protocol calls\n * (settings, conversations, secrets, …). Prefers the user's first\n * registered local backend. As a last resort — when the registry has no\n * local entry at all — synthesize one from env/agent-server-config so\n * synchronous call sites never have to handle a `null` backend; the\n * synthesized entry is never persisted.\n */\nfunction pickLocalBackend(backends: Backend[]): Backend {\n  const firstLocal = backends.find((b) => b.kind === \"local\");\n  return firstLocal ?? makeDefaultLocalBackend();\n}\n\nfunction computeSnapshot(\n  backends: Backend[],\n  selection: BackendSelection | null,\n): Snapshot {\n  let activeBackend: Backend | null = null;\n  let activeOrgId: string | null = null;\n\n  if (selection) {\n    const found = backends.find((b) => b.id === selection.backendId);\n    if (found) {\n      activeBackend = found;\n      activeOrgId = selection.orgId ?? null;\n    }\n    // If the selection points at a removed backend, fall through to\n    // the unselected case below; we also drop the orgId since it only\n    // makes sense in the context of a specific cloud backend.\n  }\n\n  // @spec BM-003 — Fallback on active backend removal\n  if (!activeBackend) {\n    activeBackend = pickLocalBackend(backends);\n    activeOrgId = null;\n  }\n\n  return {\n    backends,\n    selection,\n    active: { backend: activeBackend, orgId: activeOrgId },\n  };\n}\n\nlet snapshot: Snapshot = computeSnapshot(\n  readStoredBackends(),\n  readStoredActiveBackend(),\n);\n\nconst listeners = new Set<Listener>();\n\nfunction notify(): void {\n  listeners.forEach((listener) => listener());\n}\n\nexport function getActiveBackend(): ResolvedActiveBackend {\n  return snapshot.active;\n}\n\n/**\n * Pick the backend to use for *local agent-server protocol* calls.\n *\n * Most of the GUI's services (settings reads/writes, conversation CRUD,\n * skills/MCP/secrets, etc.) speak the local agent-server's protocol —\n * they would fail against a cloud host. When the user has chosen a\n * cloud backend as active, those calls fall back to the first registered\n * local backend (or the env-derived default if none exists). Cloud-only\n * call sites import `getActiveBackend` directly.\n */\nexport function getEffectiveLocalBackend(): Backend {\n  const active = snapshot.active.backend;\n  if (active.kind === \"local\") return active;\n  return pickLocalBackend(snapshot.backends);\n}\n\nexport function getRegisteredBackends(): Backend[] {\n  return snapshot.backends;\n}\n\nexport function getActiveSelection(): BackendSelection | null {\n  return snapshot.selection;\n}\n\nexport function getSnapshot(): Snapshot {\n  return snapshot;\n}\n\nexport function setActiveSelection(selection: BackendSelection | null): void {\n  writeStoredActiveBackend(selection);\n  snapshot = computeSnapshot(snapshot.backends, selection);\n  notify();\n}\n\nexport function setRegisteredBackends(backends: Backend[]): void {\n  writeStoredBackends(backends);\n\n  let nextSelection = snapshot.selection;\n  if (\n    nextSelection &&\n    !backends.some((b) => b.id === nextSelection!.backendId)\n  ) {\n    nextSelection = null;\n    writeStoredActiveBackend(null);\n  }\n\n  snapshot = computeSnapshot(backends, nextSelection);\n  notify();\n}\n\nexport function subscribeActiveBackend(listener: Listener): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test-only: re-read storage and clear listeners. */\n\nexport function __resetActiveStoreForTests(): void {\n  snapshot = computeSnapshot(readStoredBackends(), readStoredActiveBackend());\n  listeners.clear();\n}\n"],"mappings":";;;AAyBA,SAAS,EAAiB,GAA8B;AAEtD,QADmB,EAAS,MAAM,MAAM,EAAE,SAAS,QAC5C,IAAc,GAAyB;;AAGhD,SAAS,EACP,GACA,GACU;CACV,IAAI,IAAgC,MAChC,IAA6B;AAEjC,KAAI,GAAW;EACb,IAAM,IAAQ,EAAS,MAAM,MAAM,EAAE,OAAO,EAAU,UAAU;AAChE,EAAI,MACF,IAAgB,GAChB,IAAc,EAAU,SAAS;;AAarC,QALK,MACH,IAAgB,EAAiB,EAAS,EAC1C,IAAc,OAGT;EACL;EACA;EACA,QAAQ;GAAE,SAAS;GAAe,OAAO;GAAa;EACvD;;AAGH,IAAI,IAAqB,EACvB,GAAoB,EACpB,GAAyB,CAC1B,EAEK,oBAAY,IAAI,KAAe;AAErC,SAAS,IAAe;AACtB,GAAU,SAAS,MAAa,GAAU,CAAC;;AAG7C,SAAgB,IAA0C;AACxD,QAAO,EAAS;;AAalB,SAAgB,IAAoC;CAClD,IAAM,IAAS,EAAS,OAAO;AAE/B,QADI,EAAO,SAAS,UAAgB,IAC7B,EAAiB,EAAS,SAAS;;AAG5C,SAAgB,IAAmC;AACjD,QAAO,EAAS;;AAGlB,SAAgB,IAA8C;AAC5D,QAAO,EAAS;;AAGlB,SAAgB,IAAwB;AACtC,QAAO;;AAGT,SAAgB,EAAmB,GAA0C;AAG3E,CAFA,EAAyB,EAAU,EACnC,IAAW,EAAgB,EAAS,UAAU,EAAU,EACxD,GAAQ;;AAGV,SAAgB,EAAsB,GAA2B;AAC/D,GAAoB,EAAS;CAE7B,IAAI,IAAgB,EAAS;AAU7B,CARE,KACA,CAAC,EAAS,MAAM,MAAM,EAAE,OAAO,EAAe,UAAU,KAExD,IAAgB,MAChB,EAAyB,KAAK,GAGhC,IAAW,EAAgB,GAAU,EAAc,EACnD,GAAQ;;AAGV,SAAgB,EAAuB,GAAgC;AAErE,QADA,EAAU,IAAI,EAAS,QACV;AACX,IAAU,OAAO,EAAS"}
+{"version":3,"file":"active-store.js","names":[],"sources":["../../../src/api/backend-registry/active-store.ts"],"sourcesContent":["import {\n  readStoredActiveBackend,\n  readStoredBackends,\n  writeStoredActiveBackend,\n  writeStoredBackends,\n} from \"./storage\";\nimport type { Backend, BackendSelection, ResolvedActiveBackend } from \"./types\";\n\ntype Listener = () => void;\n\ninterface Snapshot {\n  backends: Backend[];\n  selection: BackendSelection | null;\n  active: ResolvedActiveBackend;\n}\n\nexport const NO_BACKEND_ID = \"no-backend\";\n\n/**\n * Sentinel returned when the registry has no usable backend. It must never be\n * persisted, and callers must check `isNoBackend()` before interpreting fields\n * like `kind`, `host`, or `apiKey`.\n */\nexport const NO_BACKEND: Backend = {\n  id: NO_BACKEND_ID,\n  name: \"No Backend Available\",\n  host: \"\",\n  apiKey: \"\",\n  kind: \"local\",\n};\n\nexport function isNoBackend(backend: Backend): boolean {\n  return backend.id === NO_BACKEND_ID;\n}\n\nfunction pickFallbackBackend(backends: Backend[]): Backend {\n  return backends[0] ?? NO_BACKEND;\n}\n\nfunction computeSnapshot(\n  backends: Backend[],\n  selection: BackendSelection | null,\n): Snapshot {\n  let activeBackend: Backend | null = null;\n  let activeOrgId: string | null = null;\n\n  if (selection) {\n    const found = backends.find((b) => b.id === selection.backendId);\n    if (found) {\n      activeBackend = found;\n      activeOrgId = selection.orgId ?? null;\n    }\n    // If the selection points at a removed backend, fall through to\n    // the unselected case below; we also drop the orgId since it only\n    // makes sense in the context of a specific cloud backend.\n  }\n\n  // @spec BM-003 — Fallback on active backend removal\n  if (!activeBackend) {\n    activeBackend = pickFallbackBackend(backends);\n    activeOrgId = null;\n  }\n\n  return {\n    backends,\n    selection,\n    active: { backend: activeBackend, orgId: activeOrgId },\n  };\n}\n\nlet snapshot: Snapshot = computeSnapshot(\n  readStoredBackends(),\n  readStoredActiveBackend(),\n);\n\nconst listeners = new Set<Listener>();\n\nfunction notify(): void {\n  listeners.forEach((listener) => listener());\n}\n\nexport function getActiveBackend(): ResolvedActiveBackend {\n  return snapshot.active;\n}\n\n/**\n * Pick the backend to use for *local agent-server protocol* calls.\n *\n * Most of the GUI's services (settings reads/writes, conversation CRUD,\n * skills/MCP/secrets, etc.) speak the local agent-server's protocol —\n * they would fail against a cloud host. Only the active backend is eligible:\n * a cloud selection must not borrow another registered local backend.\n */\nexport function getEffectiveLocalBackend(): Backend | null {\n  const active = snapshot.active.backend;\n  if (active.kind === \"local\" && !isNoBackend(active)) return active;\n  return null;\n}\n\nexport function getRegisteredBackends(): Backend[] {\n  return snapshot.backends;\n}\n\nexport function getActiveSelection(): BackendSelection | null {\n  return snapshot.selection;\n}\n\nexport function getSnapshot(): Snapshot {\n  return snapshot;\n}\n\nexport function setActiveSelection(selection: BackendSelection | null): void {\n  writeStoredActiveBackend(selection);\n  snapshot = computeSnapshot(snapshot.backends, selection);\n  notify();\n}\n\nexport function setRegisteredBackends(backends: Backend[]): void {\n  writeStoredBackends(backends);\n\n  let nextSelection = snapshot.selection;\n  if (\n    nextSelection &&\n    !backends.some((b) => b.id === nextSelection!.backendId)\n  ) {\n    nextSelection = null;\n    writeStoredActiveBackend(null);\n  }\n\n  snapshot = computeSnapshot(backends, nextSelection);\n  notify();\n}\n\nexport function subscribeActiveBackend(listener: Listener): () => void {\n  listeners.add(listener);\n  return () => {\n    listeners.delete(listener);\n  };\n}\n\n/** Test-only: re-read storage and clear listeners. */\n\nexport function __resetActiveStoreForTests(): void {\n  snapshot = computeSnapshot(readStoredBackends(), readStoredActiveBackend());\n  listeners.clear();\n}\n"],"mappings":";;AAgBA,IAAa,IAAgB,cAOhB,IAAsB;CACjC,IAAI;CACJ,MAAM;CACN,MAAM;CACN,QAAQ;CACR,MAAM;CACP;AAED,SAAgB,EAAY,GAA2B;AACrD,QAAO,EAAQ,OAAO;;AAGxB,SAAS,EAAoB,GAA8B;AACzD,QAAO,EAAS,MAAM;;AAGxB,SAAS,EACP,GACA,GACU;CACV,IAAI,IAAgC,MAChC,IAA6B;AAEjC,KAAI,GAAW;EACb,IAAM,IAAQ,EAAS,MAAM,MAAM,EAAE,OAAO,EAAU,UAAU;AAChE,EAAI,MACF,IAAgB,GAChB,IAAc,EAAU,SAAS;;AAarC,QALK,MACH,IAAgB,EAAoB,EAAS,EAC7C,IAAc,OAGT;EACL;EACA;EACA,QAAQ;GAAE,SAAS;GAAe,OAAO;GAAa;EACvD;;AAGH,IAAI,IAAqB,EACvB,GAAoB,EACpB,GAAyB,CAC1B,EAEK,oBAAY,IAAI,KAAe;AAErC,SAAS,IAAe;AACtB,GAAU,SAAS,MAAa,GAAU,CAAC;;AAG7C,SAAgB,IAA0C;AACxD,QAAO,EAAS;;AAWlB,SAAgB,IAA2C;CACzD,IAAM,IAAS,EAAS,OAAO;AAE/B,QADI,EAAO,SAAS,WAAW,CAAC,EAAY,EAAO,GAAS,IACrD;;AAGT,SAAgB,IAAmC;AACjD,QAAO,EAAS;;AAGlB,SAAgB,IAA8C;AAC5D,QAAO,EAAS;;AAGlB,SAAgB,IAAwB;AACtC,QAAO;;AAGT,SAAgB,EAAmB,GAA0C;AAG3E,CAFA,EAAyB,EAAU,EACnC,IAAW,EAAgB,EAAS,UAAU,EAAU,EACxD,GAAQ;;AAGV,SAAgB,EAAsB,GAA2B;AAC/D,GAAoB,EAAS;CAE7B,IAAI,IAAgB,EAAS;AAU7B,CARE,KACA,CAAC,EAAS,MAAM,MAAM,EAAE,OAAO,EAAe,UAAU,KAExD,IAAgB,MAChB,EAAyB,KAAK,GAGhC,IAAW,EAAgB,GAAU,EAAc,EACnD,GAAQ;;AAGV,SAAgB,EAAuB,GAAgC;AAErE,QADA,EAAU,IAAI,EAAS,QACV;AACX,IAAU,OAAO,EAAS"}