@openhands/agent-canvas 1.1.0 → 1.2.0

package/dist/_virtual/__vite-browser-external.cjs

@@ -0,0 +1,2 @@
+var e=require(`./_rolldown/runtime.cjs`).__commonJSMin(((e,t)=>{t.exports={}}));Object.defineProperty(exports,`default`,{enumerable:!0,get:function(){return e()}});
+//# sourceMappingURL=__vite-browser-external.cjs.map

package/dist/_virtual/__vite-browser-external.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"__vite-browser-external.cjs","names":[],"sources":["../../__vite-browser-external"],"sourcesContent":["module.exports = {}"],"mappings":"gEAAA,EAAO,QAAU,EAAA"}

package/dist/_virtual/__vite-browser-external.js

@@ -0,0 +1,9 @@
+import { __commonJSMin as e } from "./_rolldown/runtime.js";
+//#region __vite-browser-external
+var t = /* @__PURE__ */ e(((e, t) => {
+	t.exports = {};
+}));
+//#endregion
+export default t();
+
+//# sourceMappingURL=__vite-browser-external.js.map

package/dist/_virtual/__vite-browser-external.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"__vite-browser-external.js","names":[],"sources":["../../__vite-browser-external"],"sourcesContent":["module.exports = {}"],"mappings":";;;AAAA,GAAO,UAAU,EAAA"}

package/dist/api/agent-profiles-service/agent-profiles-service.api.cjs

@@ -0,0 +1,2 @@
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/agent-profiles-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../cloud/agent-profiles-service.api.cjs`);function i(){return t.getActiveBackend().backend.kind===`cloud`}var a=`default`,o=class{static async listProfiles(){return i()?r.listCloudAgentProfiles():new e.AgentProfilesClient(n.getAgentServerClientOptions()).listAgentProfiles()}static async getProfile(t,a){if(i())return r.getCloudAgentProfile(t);let o=a?{exposeSecrets:a}:{};return new e.AgentProfilesClient(n.getAgentServerClientOptions()).getAgentProfile(t,o)}static async saveProfile(t,a){return i()?r.saveCloudAgentProfile(t,a):new e.AgentProfilesClient(n.getAgentServerClientOptions()).saveAgentProfile(t,a)}static async deleteProfile(t){return i()?r.deleteCloudAgentProfile(t):new e.AgentProfilesClient(n.getAgentServerClientOptions()).deleteAgentProfile(t)}static async renameProfile(t,a){return i()?r.renameCloudAgentProfile(t,a):new e.AgentProfilesClient(n.getAgentServerClientOptions()).renameAgentProfile(t,a)}static async activateProfile(t){return i()?r.activateCloudAgentProfile(t):new e.AgentProfilesClient(n.getAgentServerClientOptions()).activateAgentProfile(t)}};exports.WELL_KNOWN_DEFAULT_AGENT_PROFILE_NAME=a,exports.default=o;
+//# sourceMappingURL=agent-profiles-service.api.cjs.map

package/dist/api/agent-profiles-service/agent-profiles-service.api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profiles-service.api.cjs","names":[],"sources":["../../../src/api/agent-profiles-service/agent-profiles-service.api.ts"],"sourcesContent":["/**\n * AgentProfilesService wraps the SDK's AgentProfilesClient, creating a client\n * per-call so it always picks up the active backend's host/apiKey (same pattern\n * as ProfilesService / SettingsService).\n *\n * Backs the Settings → Agent profiles library + reused agent editor. The\n * `AgentProfilesClient` ships in ts-client (pinned 1.28.0 here); the\n * `/api/agent-profiles` endpoints it targets shipped in agent-server v1.29.0\n * (local) and in the enterprise cloud app-server (OpenHands #15060, epic\n * #3730). Cloud exposes the SAME contract but authenticates with a bearer\n * token + `X-Org-Id`, so cloud calls route through `callCloudProxy` (see\n * `cloud/agent-profiles-service.api.ts`) instead of the direct client.\n */\nimport {\n  AgentProfilesClient,\n  type GetAgentProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n  AgentProfile,\n  AgentProfileSummary,\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n  ExposeSecretsMode,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  listCloudAgentProfiles,\n  getCloudAgentProfile,\n  saveCloudAgentProfile,\n  deleteCloudAgentProfile,\n  renameCloudAgentProfile,\n  activateCloudAgentProfile,\n} from \"../cloud/agent-profiles-service.api\";\n\nfunction isCloud(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\n/**\n * The seeded, well-known baseline agent profile. The backend lazily seeds it to\n * mirror the user's global config (#3719), and onboarding configures it from the\n * user's choice. It stands in for global `agent_settings`, so the home-launch\n * path treats it as the enriched baseline rather than a deliberate profile\n * selection (see `useCreateConversation`).\n */\nexport const WELL_KNOWN_DEFAULT_AGENT_PROFILE_NAME = \"default\";\n\n// Re-export SDK types for consumers.\nexport type {\n  AgentProfile,\n  AgentProfileSummary,\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n};\n\nclass AgentProfilesService {\n  static async listProfiles(): Promise<AgentProfileListResponse> {\n    if (isCloud()) return listCloudAgentProfiles();\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).listAgentProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<AgentProfileDetailResponse> {\n    // Agent profiles are secret-free at rest now (embedded skills and their\n    // `mcp_tools` were removed in #4017 — a profile carries only refs + the\n    // `disabled_skills` deny-list of names), so `exposeSecrets` is vestigial and\n    // cloud ignores it; kept for local signature parity with ProfilesService.\n    if (isCloud()) return getCloudAgentProfile(name);\n    const options: GetAgentProfileOptions = exposeSecrets\n      ? { exposeSecrets }\n      : {};\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).getAgentProfile(name, options);\n  }\n\n  /** Create or overwrite a profile by name (upsert). */\n  static async saveProfile(\n    name: string,\n    profile: AgentProfileSaveInput,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return saveCloudAgentProfile(name, profile);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).saveAgentProfile(name, profile);\n  }\n\n  static async deleteProfile(\n    name: string,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return deleteCloudAgentProfile(name);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).deleteAgentProfile(name);\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return renameCloudAgentProfile(name, newName);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).renameAgentProfile(name, newName);\n  }\n\n  /** Activate by the profile's stable UUID `id` (pointer-only; never writes\n   * agent_settings). */\n  static async activateProfile(\n    profileId: string,\n  ): Promise<ActivateAgentProfileResponse> {\n    if (isCloud()) return activateCloudAgentProfile(profileId);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).activateAgentProfile(profileId);\n  }\n}\n\nexport default AgentProfilesService;\n"],"mappings":"kYAsCA,SAAS,GAAmB,CAC1B,OAAO,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAU7C,IAAa,EAAwC,UAa/C,EAAN,KAA2B,CACzB,aAAa,cAAkD,CAE7D,OADI,GAAS,CAAS,EAAA,wBAAwB,CACvC,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,mBAAmB,CAGvB,aAAa,WACX,EACA,EACqC,CAKrC,GAAI,GAAS,CAAE,OAAO,EAAA,qBAAqB,EAAK,CAChD,IAAM,EAAkC,EACpC,CAAE,gBAAe,CACjB,EAAE,CACN,OAAO,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,gBAAgB,EAAM,EAAQ,CAIlC,aAAa,YACX,EACA,EACuC,CAEvC,OADI,GAAS,CAAS,EAAA,sBAAsB,EAAM,EAAQ,CACnD,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,iBAAiB,EAAM,EAAQ,CAGnC,aAAa,cACX,EACuC,CAEvC,OADI,GAAS,CAAS,EAAA,wBAAwB,EAAK,CAC5C,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,mBAAmB,EAAK,CAG5B,aAAa,cACX,EACA,EACuC,CAEvC,OADI,GAAS,CAAS,EAAA,wBAAwB,EAAM,EAAQ,CACrD,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,mBAAmB,EAAM,EAAQ,CAKrC,aAAa,gBACX,EACuC,CAEvC,OADI,GAAS,CAAS,EAAA,0BAA0B,EAAU,CACnD,IAAI,EAAA,oBACT,EAAA,6BAA6B,CAC9B,CAAC,qBAAqB,EAAU"}

package/dist/api/agent-profiles-service/agent-profiles-service.api.d.ts

@@ -0,0 +1,22 @@
+import type { AgentProfile, AgentProfileSummary, AgentProfileSaveInput, AgentProfileListResponse, AgentProfileDetailResponse, AgentProfileMutationResponse, ActivateAgentProfileResponse, ExposeSecretsMode } from "@openhands/typescript-client";
+/**
+ * The seeded, well-known baseline agent profile. The backend lazily seeds it to
+ * mirror the user's global config (#3719), and onboarding configures it from the
+ * user's choice. It stands in for global `agent_settings`, so the home-launch
+ * path treats it as the enriched baseline rather than a deliberate profile
+ * selection (see `useCreateConversation`).
+ */
+export declare const WELL_KNOWN_DEFAULT_AGENT_PROFILE_NAME = "default";
+export type { AgentProfile, AgentProfileSummary, AgentProfileSaveInput, AgentProfileListResponse, AgentProfileDetailResponse, AgentProfileMutationResponse, ActivateAgentProfileResponse, };
+declare class AgentProfilesService {
+    static listProfiles(): Promise<AgentProfileListResponse>;
+    static getProfile(name: string, exposeSecrets?: ExposeSecretsMode): Promise<AgentProfileDetailResponse>;
+    /** Create or overwrite a profile by name (upsert). */
+    static saveProfile(name: string, profile: AgentProfileSaveInput): Promise<AgentProfileMutationResponse>;
+    static deleteProfile(name: string): Promise<AgentProfileMutationResponse>;
+    static renameProfile(name: string, newName: string): Promise<AgentProfileMutationResponse>;
+    /** Activate by the profile's stable UUID `id` (pointer-only; never writes
+     * agent_settings). */
+    static activateProfile(profileId: string): Promise<ActivateAgentProfileResponse>;
+}
+export default AgentProfilesService;

package/dist/api/agent-profiles-service/agent-profiles-service.api.js

@@ -0,0 +1,35 @@
+import { AgentProfilesClient as e } from "../../node_modules/@openhands/typescript-client/dist/client/agent-profiles-client.js";
+import "../../node_modules/@openhands/typescript-client/dist/clients.js";
+import { getActiveBackend as t } from "../backend-registry/active-store.js";
+import { getAgentServerClientOptions as n } from "../agent-server-client-options.js";
+import { activateCloudAgentProfile as r, deleteCloudAgentProfile as i, getCloudAgentProfile as a, listCloudAgentProfiles as o, renameCloudAgentProfile as s, saveCloudAgentProfile as c } from "../cloud/agent-profiles-service.api.js";
+//#region src/api/agent-profiles-service/agent-profiles-service.api.ts
+function l() {
+	return t().backend.kind === "cloud";
+}
+var u = "default", d = class {
+	static async listProfiles() {
+		return l() ? o() : new e(n()).listAgentProfiles();
+	}
+	static async getProfile(t, r) {
+		if (l()) return a(t);
+		let i = r ? { exposeSecrets: r } : {};
+		return new e(n()).getAgentProfile(t, i);
+	}
+	static async saveProfile(t, r) {
+		return l() ? c(t, r) : new e(n()).saveAgentProfile(t, r);
+	}
+	static async deleteProfile(t) {
+		return l() ? i(t) : new e(n()).deleteAgentProfile(t);
+	}
+	static async renameProfile(t, r) {
+		return l() ? s(t, r) : new e(n()).renameAgentProfile(t, r);
+	}
+	static async activateProfile(t) {
+		return l() ? r(t) : new e(n()).activateAgentProfile(t);
+	}
+};
+//#endregion
+export { u as WELL_KNOWN_DEFAULT_AGENT_PROFILE_NAME, d as default };
+
+//# sourceMappingURL=agent-profiles-service.api.js.map

package/dist/api/agent-profiles-service/agent-profiles-service.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profiles-service.api.js","names":[],"sources":["../../../src/api/agent-profiles-service/agent-profiles-service.api.ts"],"sourcesContent":["/**\n * AgentProfilesService wraps the SDK's AgentProfilesClient, creating a client\n * per-call so it always picks up the active backend's host/apiKey (same pattern\n * as ProfilesService / SettingsService).\n *\n * Backs the Settings → Agent profiles library + reused agent editor. The\n * `AgentProfilesClient` ships in ts-client (pinned 1.28.0 here); the\n * `/api/agent-profiles` endpoints it targets shipped in agent-server v1.29.0\n * (local) and in the enterprise cloud app-server (OpenHands #15060, epic\n * #3730). Cloud exposes the SAME contract but authenticates with a bearer\n * token + `X-Org-Id`, so cloud calls route through `callCloudProxy` (see\n * `cloud/agent-profiles-service.api.ts`) instead of the direct client.\n */\nimport {\n  AgentProfilesClient,\n  type GetAgentProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n  AgentProfile,\n  AgentProfileSummary,\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n  ExposeSecretsMode,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  listCloudAgentProfiles,\n  getCloudAgentProfile,\n  saveCloudAgentProfile,\n  deleteCloudAgentProfile,\n  renameCloudAgentProfile,\n  activateCloudAgentProfile,\n} from \"../cloud/agent-profiles-service.api\";\n\nfunction isCloud(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\n/**\n * The seeded, well-known baseline agent profile. The backend lazily seeds it to\n * mirror the user's global config (#3719), and onboarding configures it from the\n * user's choice. It stands in for global `agent_settings`, so the home-launch\n * path treats it as the enriched baseline rather than a deliberate profile\n * selection (see `useCreateConversation`).\n */\nexport const WELL_KNOWN_DEFAULT_AGENT_PROFILE_NAME = \"default\";\n\n// Re-export SDK types for consumers.\nexport type {\n  AgentProfile,\n  AgentProfileSummary,\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n};\n\nclass AgentProfilesService {\n  static async listProfiles(): Promise<AgentProfileListResponse> {\n    if (isCloud()) return listCloudAgentProfiles();\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).listAgentProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<AgentProfileDetailResponse> {\n    // Agent profiles are secret-free at rest now (embedded skills and their\n    // `mcp_tools` were removed in #4017 — a profile carries only refs + the\n    // `disabled_skills` deny-list of names), so `exposeSecrets` is vestigial and\n    // cloud ignores it; kept for local signature parity with ProfilesService.\n    if (isCloud()) return getCloudAgentProfile(name);\n    const options: GetAgentProfileOptions = exposeSecrets\n      ? { exposeSecrets }\n      : {};\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).getAgentProfile(name, options);\n  }\n\n  /** Create or overwrite a profile by name (upsert). */\n  static async saveProfile(\n    name: string,\n    profile: AgentProfileSaveInput,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return saveCloudAgentProfile(name, profile);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).saveAgentProfile(name, profile);\n  }\n\n  static async deleteProfile(\n    name: string,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return deleteCloudAgentProfile(name);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).deleteAgentProfile(name);\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<AgentProfileMutationResponse> {\n    if (isCloud()) return renameCloudAgentProfile(name, newName);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).renameAgentProfile(name, newName);\n  }\n\n  /** Activate by the profile's stable UUID `id` (pointer-only; never writes\n   * agent_settings). */\n  static async activateProfile(\n    profileId: string,\n  ): Promise<ActivateAgentProfileResponse> {\n    if (isCloud()) return activateCloudAgentProfile(profileId);\n    return new AgentProfilesClient(\n      getAgentServerClientOptions(),\n    ).activateAgentProfile(profileId);\n  }\n}\n\nexport default AgentProfilesService;\n"],"mappings":";;;;;;AAsCA,SAAS,IAAmB;AAC1B,QAAO,GAAkB,CAAC,QAAQ,SAAS;;AAU7C,IAAa,IAAwC,WAa/C,IAAN,MAA2B;CACzB,aAAa,eAAkD;AAE7D,SADI,GAAS,GAAS,GAAwB,GACvC,IAAI,EACT,GAA6B,CAC9B,CAAC,mBAAmB;;CAGvB,aAAa,WACX,GACA,GACqC;AAKrC,MAAI,GAAS,CAAE,QAAO,EAAqB,EAAK;EAChD,IAAM,IAAkC,IACpC,EAAE,kBAAe,GACjB,EAAE;AACN,SAAO,IAAI,EACT,GAA6B,CAC9B,CAAC,gBAAgB,GAAM,EAAQ;;CAIlC,aAAa,YACX,GACA,GACuC;AAEvC,SADI,GAAS,GAAS,EAAsB,GAAM,EAAQ,GACnD,IAAI,EACT,GAA6B,CAC9B,CAAC,iBAAiB,GAAM,EAAQ;;CAGnC,aAAa,cACX,GACuC;AAEvC,SADI,GAAS,GAAS,EAAwB,EAAK,GAC5C,IAAI,EACT,GAA6B,CAC9B,CAAC,mBAAmB,EAAK;;CAG5B,aAAa,cACX,GACA,GACuC;AAEvC,SADI,GAAS,GAAS,EAAwB,GAAM,EAAQ,GACrD,IAAI,EACT,GAA6B,CAC9B,CAAC,mBAAmB,GAAM,EAAQ;;CAKrC,aAAa,gBACX,GACuC;AAEvC,SADI,GAAS,GAAS,EAA0B,EAAU,GACnD,IAAI,EACT,GAA6B,CAC9B,CAAC,qBAAqB,EAAU"}

package/dist/api/agent-server-adapter.cjs

@@ -1,5 +1,5 @@
 require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../types/agent-server/core/base/common.cjs`),t=require(`./agent-server-config.cjs`),n=require(`./backend-registry/active-store.cjs`),r=require(`./agent-server-client-options.cjs`),i=require(`./agent-server-compatibility.cjs`),a=require(`./backend-registry/auth.cjs`),o=require(`../node_modules/@openhands/typescript-client/dist/models/acp.cjs`);require(`../node_modules/@openhands/typescript-client/dist/index.cjs`);const s=require(`./conversation-metadata-store.cjs`),c=require(`../node_modules/@openhands/extensions/skills/index.cjs`),l=require(`../services/settings.cjs`),u=require(`../constants/acp-providers.cjs`),d=require(`./settings-service/settings-service.api.cjs`),f=require(`../constants/llm-subscription.cjs`),p=require(`./llm-subscription-service.cjs`);var m=`canvas_ui`,h=`canvas_ui_tool`,g=[`terminal`,`file_editor`,`task_tracker`,m],_=`browser_tool_set`,v=`task_tool_set`;function y(){return!0}function b(){let e=(void 0)?.trim();if(e)return e;if(typeof window<`u`){let e=window.__AGENT_CANVAS_RUNTIME_SERVICES_INFO__;if(typeof e==`string`)return e.trim()||null}return null}function x(){let e=b();if(!e)return null;try{let t=JSON.parse(e);return!t||typeof t!=`object`?null:t}catch{return null}}function S(){let e=x();if(!e?.services)return;let t=[];t.push(`<RUNTIME_SERVICES>`),e.mode?t.push(`You are running inside an agent-canvas dev stack started in '${e.mode}' mode.`):t.push(`You are running inside an agent-canvas dev stack.`),t.push(`The following services are reachable from your sandbox. URLs are written`,`from your point of view (i.e., as you should curl/fetch them).`,``);let{agent_server:n,ingress:r,automation:i}=e.services,{frontend:a}=e.services;n?.url_from_agent&&t.push(`* Agent Server (you): ${n.url_from_agent}`,`    ${n.description??`The agent-server hosting your tool calls.`}`),r?.url_from_agent&&t.push(`* Ingress: ${r.url_from_agent}`,`    ${r.description??`Unified entry point for browser-facing traffic.`}`),a?.url_from_agent&&t.push(`* Frontend: ${a.url_from_agent}`,`    ${a.description??`Frontend dev server.`}`),i?.url_from_agent?(t.push(`* Automation backend: ${i.url_from_agent}`,`    ${i.description??`OpenHands Automations service.`}`),i.docs_url&&t.push(`    Docs:    ${i.docs_url}`),i.openapi_url&&t.push(`    OpenAPI: ${i.openapi_url}`),i.auth_env_var&&t.push(`    Auth:    header 'X-Session-API-Key: $${i.auth_env_var}'`)):t.push(`* Automation backend: not running in this dev mode (skip /api/automation calls).`);let o=n?.url_from_agent;return t.push(``,`Trust this block over guessing: do not assume any other URLs are running.`),o&&t.push(`In particular, ${o} inside your sandbox is the Agent Server`,`you are running inside of — NOT the automation backend.`),t.push(`</RUNTIME_SERVICES>`),t.join(`
-`)}function C(e){let{host:t}=r.getAgentServerClientOptions();return`${t}/api/conversations/${e}`}function w(e){return`Conversation ${e.slice(0,5)}`}function T(n){let i=s.getStoredConversationMetadata(n.id),a=n.agent?.kind===`ACPAgent`,o=a?n.tags?.acpserver??null:null;return{id:n.id,created_by_user_id:null,selected_repository:i?.selected_repository??null,selected_branch:i?.selected_branch??null,git_provider:i?.git_provider??null,selected_workspace:i?.selected_workspace??null,active_profile:i?.active_profile??null,title:n.title?.trim()?n.title:w(n.id),trigger:null,pr_number:[],agent_kind:a?`acp`:`openhands`,acp_server:o,llm_model:a?u.resolveEffectiveAcpModel({runtimeName:n.current_model_name,runtimeId:n.current_model_id,configured:n.agent?.acp_model,sdkLlm:n.agent?.llm?.model}):n.agent?.llm?.model??l.DEFAULT_SETTINGS.llm_model,metrics:n.metrics?{accumulated_cost:n.metrics.accumulated_cost??null,max_budget_per_task:n.metrics.max_budget_per_task??null,accumulated_token_usage:n.metrics.accumulated_token_usage?{prompt_tokens:n.metrics.accumulated_token_usage.prompt_tokens??0,completion_tokens:n.metrics.accumulated_token_usage.completion_tokens??0,cache_read_tokens:n.metrics.accumulated_token_usage.cache_read_tokens??0,cache_write_tokens:n.metrics.accumulated_token_usage.cache_write_tokens??0,context_window:n.metrics.accumulated_token_usage.context_window??0,per_turn_token:n.metrics.accumulated_token_usage.per_turn_token??0}:null}:null,created_at:n.created_at,updated_at:n.updated_at,execution_status:n.execution_status??e.ExecutionStatus.IDLE,sandbox_status:n.sandbox_status??null,conversation_url:C(n.id),session_api_key:r.getAgentServerClientOptions().apiKey??null,sandbox_id:null,workspace:{working_dir:n.workspace?.working_dir??t.getAgentServerWorkingDir()},public:!1,sub_conversation_ids:[]}}function E(e){return{items:e.items.map(T),next_page_id:e.next_page_id??null}}var D=`acpserver`,O=`gAAAAA`,k=new Set([`schema_version`,`agent_settings`,`workspace`,`conversation_id`,`initial_message`,`plugins`]);function A(e){return!e||typeof e!=`object`||Array.isArray(e)?{}:structuredClone(e)}function j(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function M(e){return!!e&&typeof e==`object`&&!Array.isArray(e)}function N(e){return!M(e)||!M(e.mcpServers)?!1:Object.values(e.mcpServers).some(e=>M(e)?[`env`,`headers`].some(t=>{let n=e[t];return M(n)?Object.values(n).some(e=>typeof e==`string`&&e.startsWith(O)):!1}):!1)}function P(e){return e.confirmation_mode===!0?e.security_analyzer===`llm`?{kind:`ConfirmRisky`,threshold:`HIGH`,confirm_unknown:!0}:{kind:`AlwaysConfirm`}:{kind:`NeverConfirm`}}function F(e){switch(e.security_analyzer){case`llm`:return{kind:`LLMSecurityAnalyzer`};case`pattern`:return{kind:`PatternSecurityAnalyzer`};case`policy_rail`:return{kind:`PolicyRailSecurityAnalyzer`};default:return}}function I(e){return!!e&&typeof e==`object`&&!Array.isArray(e)&&typeof e.name==`string`}function L(e,t){return e===m?i.isAgentServerToolAvailable(e):e===_?y()&&i.isAgentServerToolAvailable(e):e===v?t.enable_sub_agents===!0&&i.isAgentServerToolAvailable(e):!0}function R(e){let t=new Map;for(let n of g)L(n,e)&&t.set(n,{name:n,params:{}});for(let n of[_,v])L(n,e)&&t.set(n,{name:n,params:{}});let n=e.tools;if(Array.isArray(n)&&n.every(e=>I(e)))for(let r of n)L(r.name,e)&&t.set(r.name,{name:r.name,params:A(r.params)});return Array.from(t.values())}function z(e,t){let n=[e?.trim(),t?.trim()].filter(Boolean);return n.length===0?null:{role:`user`,content:[{type:`text`,text:n.join(`
+`)}function C(e){let{host:t}=r.getAgentServerClientOptions();return`${t}/api/conversations/${e}`}function w(e){return`Conversation ${e.slice(0,5)}`}function T(n){let i=s.getStoredConversationMetadata(n.id),a=n.agent?.kind===`ACPAgent`,o=a?n.tags?.acpserver??n.agent?.acp_server??null:null;return{id:n.id,created_by_user_id:null,selected_repository:i?.selected_repository??null,selected_branch:i?.selected_branch??null,git_provider:i?.git_provider??null,selected_workspace:i?.selected_workspace??null,active_profile:i?.active_profile??null,title:n.title?.trim()?n.title:w(n.id),trigger:null,pr_number:[],agent_kind:a?`acp`:`openhands`,acp_server:o,llm_model:a?u.resolveEffectiveAcpModel({runtimeName:n.current_model_name,runtimeId:n.current_model_id,configured:n.agent?.acp_model,sdkLlm:n.agent?.llm?.model}):n.agent?.llm?.model??l.DEFAULT_SETTINGS.llm_model,metrics:n.metrics?{accumulated_cost:n.metrics.accumulated_cost??null,max_budget_per_task:n.metrics.max_budget_per_task??null,accumulated_token_usage:n.metrics.accumulated_token_usage?{prompt_tokens:n.metrics.accumulated_token_usage.prompt_tokens??0,completion_tokens:n.metrics.accumulated_token_usage.completion_tokens??0,cache_read_tokens:n.metrics.accumulated_token_usage.cache_read_tokens??0,cache_write_tokens:n.metrics.accumulated_token_usage.cache_write_tokens??0,context_window:n.metrics.accumulated_token_usage.context_window??0,per_turn_token:n.metrics.accumulated_token_usage.per_turn_token??0}:null}:null,created_at:n.created_at,updated_at:n.updated_at,execution_status:n.execution_status??e.ExecutionStatus.IDLE,sandbox_status:n.sandbox_status??null,conversation_url:C(n.id),session_api_key:r.getAgentServerClientOptions().apiKey??null,sandbox_id:null,workspace:{working_dir:n.workspace?.working_dir??t.getAgentServerWorkingDir()},public:!1,sub_conversation_ids:[]}}function E(e){return{items:e.items.map(T),next_page_id:e.next_page_id??null}}var D=`acpserver`,O=`gAAAAA`,k=new Set([`schema_version`,`agent_settings`,`workspace`,`conversation_id`,`initial_message`,`plugins`]);function A(e){return!e||typeof e!=`object`||Array.isArray(e)?{}:structuredClone(e)}function j(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function M(e){return!!e&&typeof e==`object`&&!Array.isArray(e)}function N(e){return typeof e==`string`?e.startsWith(O):Array.isArray(e)?e.some(N):M(e)?Object.values(e).some(N):!1}function P(e){return M(e)?Object.values(e).some(N):!1}function F(e){return e.confirmation_mode===!0?e.security_analyzer===`llm`?{kind:`ConfirmRisky`,threshold:`HIGH`,confirm_unknown:!0}:{kind:`AlwaysConfirm`}:{kind:`NeverConfirm`}}function I(e){switch(e.security_analyzer){case`llm`:return{kind:`LLMSecurityAnalyzer`};case`pattern`:return{kind:`PatternSecurityAnalyzer`};case`policy_rail`:return{kind:`PolicyRailSecurityAnalyzer`};default:return}}function L(e){return!!e&&typeof e==`object`&&!Array.isArray(e)&&typeof e.name==`string`}function R(e,t){return e===m?i.isAgentServerToolAvailable(e):e===_?y()&&i.isAgentServerToolAvailable(e):e===v?t.enable_sub_agents===!0&&i.isAgentServerToolAvailable(e):!0}function z(e){let t=new Map;for(let n of g)R(n,e)&&t.set(n,{name:n,params:{}});for(let n of[_,v])R(n,e)&&t.set(n,{name:n,params:{}});let n=e.tools;if(Array.isArray(n)&&n.every(e=>L(e)))for(let r of n)R(r.name,e)&&t.set(r.name,{name:r.name,params:A(r.params)});return Array.from(t.values())}function B(e,t){let n=[e?.trim(),t?.trim()].filter(Boolean);return n.length===0?null:{role:`user`,content:[{type:`text`,text:n.join(`
 
-`)}],run:!0}}function B(){return c.default.map(e=>{let t=e.triggers?.length>0?{type:`keyword`,keywords:e.triggers}:null;return{name:e.name,content:e.content,trigger:t,source:`public`,description:e.description??null,is_agentskills_format:!0,...e.license?{license:e.license}:{},...e.compatibility?{compatibility:e.compatibility}:{}}})}function V(e){let t=S(),n=A(e.agent_context),r=[...Array.isArray(n.skills)?n.skills:[],...B()];return{...n,skills:r,load_public_skills:!1,load_user_skills:!0,load_project_skills:!0,...t?{system_message_suffix:t}:{}}}function H(e){return A(e.agent_settings).agent_kind===`acp`}function U(e){let t=A(e.agent_settings).acp_server;return typeof t==`string`&&t.length>0?t:void 0}function W(e){let t=e.acp_command;if(!(Array.isArray(t)&&t.length===0)&&t!==void 0)return t;let n=u.getAcpProvider(typeof e.acp_server==`string`?e.acp_server:void 0);return n?[...n.default_command]:t}function G(e){let t=A(e.agent_settings),n={agent_kind:`acp`,agent_context:V(t)};for(let e of o.ACP_SETTINGS_KEYS){if(e===`acp_model`||e===`acp_env`)continue;let r=e===`acp_command`?W(t):t[e];r!=null&&(n[e]=r)}let r=A(t.mcp_config);Object.keys(r).length>0&&`mcpServers`in r&&(n.mcp_config=r);let i=typeof t.acp_server==`string`?t.acp_server:void 0,a=u.resolveEffectiveAcpModel({configured:t.acp_model,providerDefault:u.getAcpPreferredDefaultModel(i)});return a&&(n.acp_model=a),n}function K(e){let t=A(e.agent_settings),n=A(t.llm);n.model=typeof n.model==`string`&&n.model.trim().length>0?n.model:l.DEFAULT_SETTINGS.llm_model,n.stream=!0;let r=j(n.api_key);r?n.api_key=r:delete n.api_key;let i=j(n.base_url);i?n.base_url=i:delete n.base_url,f.isSubscriptionLlmConfig(n)?(n.auth_type=f.LLM_AUTH_TYPE_SUBSCRIPTION,n.subscription_vendor=f.OPENAI_SUBSCRIPTION_VENDOR,delete n.api_key,delete n.base_url):(delete n.auth_type,delete n.subscription_vendor);let a=A(t.mcp_config);(Object.keys(a).length===0||!(`mcpServers`in a))&&delete t.mcp_config,delete t.acp_server;for(let e of o.ACP_SETTINGS_KEYS)delete t[e];return delete t.acp_env,{...t,llm:n,agent_context:V(t),tools:R(t)}}function q(e){return H(e)?G(e):K(e)}function J(e){let{settings:n,query:r,conversationInstructions:i,plugins:a,workingDir:o}=e,s=A(n.conversation_settings),c=z(r,i);return k.forEach(e=>delete s[e]),{...s,workspace:{kind:`LocalWorkspace`,working_dir:o??t.getAgentServerWorkingDir()},...c?{initial_message:c}:{},...a?.length?{plugins:a.map(e=>({source:e.source,...e.ref?{ref:e.ref}:{},...e.repo_path?{repo_path:e.repo_path}:{}}))}:{}}}function Y(e){let t=e.encryptedAgentSettings?{...e.settings,agent_settings:e.encryptedAgentSettings}:e.settings,r=H(t),o=q(t),s=r?U(t):void 0,c=J(e.encryptedConversationSettings?{...e,settings:{...e.settings,conversation_settings:e.encryptedConversationSettings}}:e),l={agent_settings:o,workspace:c.workspace,confirmation_policy:P(c),max_iterations:typeof c.max_iterations==`number`?c.max_iterations:500,stuck_detection:!0,autotitle:!0,worktree:e.worktree??!0};s&&(l.tags={[D]:s}),e.secretsEncrypted&&(!r||N(o.mcp_config))&&(l.secrets_encrypted=!0),e.conversationId&&(l.conversation_id=e.conversationId);let u=F(c);u&&(l.security_analyzer=u),c.initial_message&&(l.initial_message=c.initial_message),c.plugins&&(l.plugins=c.plugins),c.hook_config&&(l.hook_config=c.hook_config);let d={},f=i.isAgentServerToolAvailable(m);if(f&&(d[m]=h),Object.assign(d,c.tool_module_qualnames??{}),f||delete d[m],Object.keys(d).length>0&&(l.tool_module_qualnames=d),c.agent_definitions&&(l.agent_definitions=c.agent_definitions),e.customSecrets&&e.customSecrets.length>0){let t=n.getEffectiveLocalBackend(),r=t?a.buildAuthHeaders(t):{},i={};for(let t of e.customSecrets){let e={kind:`LookupSecret`,url:`/api/settings/secrets/${encodeURIComponent(t.name)}`,description:t.description};Object.keys(r).length>0&&(e.headers=r),i[t.name]=e}l.secrets=i}return l}var X=`Connect your ChatGPT subscription before starting a conversation with this LLM profile.`;async function Z(e){if(f.isSubscriptionLlmConfig(A(e.llm))&&!(await p.default.getOpenAIStatus()).connected)throw Error(X)}async function Q(e){let{SecretsService:t}=await Promise.resolve().then(()=>require(`./secrets-service.cjs`)),[n,r]=await Promise.all([d.default.getSettingsForConversation(),t.getSecrets()]),{agentSettings:i,conversationSettings:a,secretsEncrypted:o}=n;return await Z(i),Y({...e,encryptedAgentSettings:i,encryptedConversationSettings:a,secretsEncrypted:o,customSecrets:r})}function $(){return{hooks:[]}}exports.assertSubscriptionAuthReady=Z,exports.buildStartConversationRequestWithEncryptedSettings=Q,exports.emptyHooksResponse=$,exports.getDefaultConversationTitle=w,exports.toAppConversation=T,exports.toConversationPage=E;
+`)}],run:!0}}function V(){return c.default.map(e=>{let t=e.triggers?.length>0?{type:`keyword`,keywords:e.triggers}:null;return{name:e.name,content:e.content,trigger:t,source:`public`,description:e.description??null,is_agentskills_format:!0,...e.license?{license:e.license}:{},...e.compatibility?{compatibility:e.compatibility}:{}}})}function H(e){let t=S(),n=A(e.agent_context),r=[...Array.isArray(n.skills)?n.skills:[],...V()];return{...n,skills:r,load_public_skills:!1,load_user_skills:!0,load_project_skills:!0,...t?{system_message_suffix:t}:{}}}function U(e){return A(e.agent_settings).agent_kind===`acp`}function W(e){let t=A(e.agent_settings).acp_server;return typeof t==`string`&&t.length>0?t:void 0}function G(e){let t=e.acp_command;if(!(Array.isArray(t)&&t.length===0)&&t!==void 0)return t;let n=u.getAcpProvider(typeof e.acp_server==`string`?e.acp_server:void 0);return n?[...n.default_command]:t}function K(e){let t=A(e.agent_settings),n={agent_kind:`acp`,agent_context:H(t)};for(let e of o.ACP_SETTINGS_KEYS){if(e===`acp_model`||e===`acp_env`)continue;let r=e===`acp_command`?G(t):t[e];r!=null&&(n[e]=r)}let r=A(t.mcp_config);Object.keys(r).length>0&&(n.mcp_config=r);let i=typeof t.acp_server==`string`?t.acp_server:void 0,a=u.resolveEffectiveAcpModel({configured:t.acp_model,providerDefault:u.getAcpPreferredDefaultModel(i)});return a&&(n.acp_model=a),n}function q(e){let t=A(e.agent_settings),n=A(t.llm);n.model=typeof n.model==`string`&&n.model.trim().length>0?n.model:l.DEFAULT_SETTINGS.llm_model,n.stream=!0;let r=j(n.api_key);r?n.api_key=r:delete n.api_key;let i=j(n.base_url);i?n.base_url=i:delete n.base_url,f.isSubscriptionLlmConfig(n)?(n.auth_type=f.LLM_AUTH_TYPE_SUBSCRIPTION,n.subscription_vendor=f.OPENAI_SUBSCRIPTION_VENDOR,delete n.api_key,delete n.base_url):(delete n.auth_type,delete n.subscription_vendor);let a=A(t.mcp_config);Object.keys(a).length===0&&delete t.mcp_config,delete t.acp_server;for(let e of o.ACP_SETTINGS_KEYS)delete t[e];return delete t.acp_env,{...t,llm:n,agent_context:H(t),tools:z(t)}}function J(e){return U(e)?K(e):q(e)}function Y(e){let{settings:n,query:r,conversationInstructions:i,plugins:a,workingDir:o}=e,s=A(n.conversation_settings),c=B(r,i);return k.forEach(e=>delete s[e]),{...s,workspace:{kind:`LocalWorkspace`,working_dir:o??t.getAgentServerWorkingDir()},...c?{initial_message:c}:{},...a?.length?{plugins:a.map(e=>({source:e.source,...e.ref?{ref:e.ref}:{},...e.repo_path?{repo_path:e.repo_path}:{}}))}:{}}}function X(e){let t=e.encryptedAgentSettings?{...e.settings,agent_settings:e.encryptedAgentSettings}:e.settings,r=U(t),o=J(t),s=r?W(t):void 0,c=Y(e.encryptedConversationSettings?{...e,settings:{...e.settings,conversation_settings:e.encryptedConversationSettings}}:e),l={...e.agentProfileId?{agent_profile_id:e.agentProfileId}:{agent_settings:o},workspace:c.workspace,confirmation_policy:F(c),max_iterations:typeof c.max_iterations==`number`?c.max_iterations:500,stuck_detection:!0,autotitle:!0,worktree:e.worktree??!0};!e.agentProfileId&&s&&(l.tags={[D]:s}),!e.agentProfileId&&e.secretsEncrypted&&(!r||P(o.mcp_config))&&(l.secrets_encrypted=!0),e.conversationId&&(l.conversation_id=e.conversationId);let u=I(c);u&&(l.security_analyzer=u),c.initial_message&&(l.initial_message=c.initial_message),c.plugins&&(l.plugins=c.plugins),c.hook_config&&(l.hook_config=c.hook_config);let d={},f=i.isAgentServerToolAvailable(m);if(f&&(d[m]=h),Object.assign(d,c.tool_module_qualnames??{}),f||delete d[m],Object.keys(d).length>0&&(l.tool_module_qualnames=d),c.agent_definitions&&(l.agent_definitions=c.agent_definitions),e.customSecrets&&e.customSecrets.length>0){let t=n.getEffectiveLocalBackend(),r=t?a.buildAuthHeaders(t):{},i={};for(let t of e.customSecrets){let e={kind:`LookupSecret`,url:`/api/settings/secrets/${encodeURIComponent(t.name)}`,description:t.description};Object.keys(r).length>0&&(e.headers=r),i[t.name]=e}l.secrets=i}return l}var Z=`Connect your ChatGPT subscription before starting a conversation with this LLM profile.`;async function Q(e){if(f.isSubscriptionLlmConfig(A(e.llm))&&!(await p.default.getOpenAIStatus()).connected)throw Error(Z)}async function $(e){let{SecretsService:t}=await Promise.resolve().then(()=>require(`./secrets-service.cjs`)),[n,r]=await Promise.all([d.default.getSettingsForConversation(),t.getSecrets()]),{agentSettings:i,conversationSettings:a,secretsEncrypted:o}=n;return e.agentProfileId||await Q(i),X({...e,encryptedAgentSettings:i,encryptedConversationSettings:a,secretsEncrypted:o,customSecrets:r})}function ee(){return{hooks:[]}}exports.assertSubscriptionAuthReady=Q,exports.buildStartConversationRequestWithEncryptedSettings=$,exports.emptyHooksResponse=ee,exports.getDefaultConversationTitle=w,exports.toAppConversation=T,exports.toConversationPage=E;
 //# sourceMappingURL=agent-server-adapter.cjs.map

package/dist/api/agent-server-adapter.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport { isAgentServerToolAvailable } from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n}\n\n// Module qualname for the Canvas-UI tool. The agent-server imports this via\n// tool_module_qualnames; the host directory is exposed via OH_EXTRA_PYTHON_PATH\n// (see scripts/dev-safe.mjs).\nconst CANVAS_UI_TOOL_NAME = \"canvas_ui\";\nconst CANVAS_UI_TOOL_MODULE = \"canvas_ui_tool\";\n\nconst DEFAULT_TOOL_NAMES = [\n  \"terminal\",\n  \"file_editor\",\n  \"task_tracker\",\n  CANVAS_UI_TOOL_NAME,\n];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info (set by the dev launchers in\n * scripts/dev-*.mjs as `VITE_RUNTIME_SERVICES_INFO`, or injected at serve time\n * by `scripts/static-server.mjs` for static builds — see\n * `getRawRuntimeServicesInfo`). All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's\n * reachable from inside its sandbox without having to probe.\n */\ninterface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\n/**\n * Return the raw runtime-services JSON string, consulting two sources in order\n * (mirrors `getBakedSessionApiKey` in agent-server-config.ts):\n *   1. `VITE_RUNTIME_SERVICES_INFO` — baked into the bundle at build time by\n *      the dev launchers (`npm run dev`, dev:static).\n *   2. `window.__AGENT_CANVAS_RUNTIME_SERVICES_INFO__` — injected into\n *      index.html at serve time by `scripts/static-server.mjs\n *      --runtime-services-info <json>`. This is the path used by static builds\n *      (the Docker image and the published binary), where the env var is empty\n *      in the prebuilt bundle. Without it the `<RUNTIME_SERVICES>` block is\n *      missing and the agent cannot reach the local automation backend.\n */\nfunction getRawRuntimeServicesInfo(): string | null {\n  const envRaw = import.meta.env.VITE_RUNTIME_SERVICES_INFO?.trim();\n  if (envRaw) return envRaw;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_RUNTIME_SERVICES_INFO__;\n    if (typeof injected === \"string\") {\n      return injected.trim() || null;\n    }\n  }\n\n  return null;\n}\n\nfunction parseRuntimeServicesInfo(): RuntimeServicesInfo | null {\n  const raw = getRawRuntimeServicesInfo();\n  if (!raw) return null;\n  try {\n    const parsed = JSON.parse(raw) as RuntimeServicesInfo;\n    if (!parsed || typeof parsed !== \"object\") return null;\n    return parsed;\n  } catch {\n    // Malformed JSON: ignore and fall back to no runtime info, rather than\n    // tearing down conversation creation over a misconfigured env var or\n    // injected value.\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is configured.\n */\nexport function getDeploymentMode(): string | null {\n  return parseRuntimeServicesInfo()?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is configured, so callers can\n * safely omit the field on production builds (where the launcher doesn't\n * set `VITE_RUNTIME_SERVICES_INFO`).\n */\nexport function buildRuntimeServicesSystemSuffix(): string | undefined {\n  const info = parseRuntimeServicesInfo();\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie.\n  const acpServer = isAcp ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? null) : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : null,\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items.map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig) || !isPlainRecord(mcpConfig.mcpServers)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig.mcpServers).some((server) => {\n    if (!isPlainRecord(server)) return false;\n    return [\"env\", \"headers\"].some((key) => {\n      const values = server[key];\n      if (!isPlainRecord(values)) return false;\n      return Object.values(values).some(\n        (value) =>\n          typeof value === \"string\" && value.startsWith(FERNET_TOKEN_PREFIX),\n      );\n    });\n  });\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === CANVAS_UI_TOOL_NAME) {\n    return isAgentServerToolAvailable(name);\n  }\n\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(agentSettings: SettingsRecord): SettingsRecord {\n  const runtimeServicesSuffix = buildRuntimeServicesSystemSuffix();\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const mergedSkills = [...existingSkills, ...buildBundledSkills()];\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(agentSettings),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a *shared* field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0 && \"mcpServers\" in mcpConfig) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = toRecord(agentSettings.llm);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n    delete llm.base_url;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0 || !(\"mcpServers\" in mcpConfig)) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(agentSettings),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings)\n    : buildConfiguredOpenHandsAgentSettings(settings);\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\ntype StartConversationPayload = Record<string, unknown> & {\n  agent_settings: AgentSettingsPayload;\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: true;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  tool_module_qualnames?: Record<string, string>;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: Array<{ name: string; description?: string }>;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): StartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const agentSettings = buildConfiguredAgentSettings(sourceAgentSettings);\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: StartConversationPayload = {\n    agent_settings: agentSettings,\n    workspace: conversationSettings.workspace,\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations:\n      typeof conversationSettings.max_iterations === \"number\"\n        ? conversationSettings.max_iterations\n        : 500,\n    stuck_detection: true,\n    autotitle: true,\n    worktree: options.worktree ?? true,\n  };\n\n  if (acpServerTag) {\n    payload.tags = { [ACP_SERVER_TAG_KEY]: acpServerTag };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config.env/headers as Fernet tokens,\n  // and ACP forwards that mcp_config directly to the subprocess.\n  if (\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  }\n\n  const toolModuleQualnames: Record<string, string> = {};\n  const canvasUiAvailable = isAgentServerToolAvailable(CANVAS_UI_TOOL_NAME);\n  if (canvasUiAvailable) {\n    toolModuleQualnames[CANVAS_UI_TOOL_NAME] = CANVAS_UI_TOOL_MODULE;\n  }\n  Object.assign(\n    toolModuleQualnames,\n    (conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {},\n  );\n  if (!canvasUiAvailable) {\n    delete toolModuleQualnames[CANVAS_UI_TOOL_NAME];\n  }\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  // Every saved secret rides as a LookupSecret the agent-server resolves back\n  // from its own store at spawn time — ``request.secrets`` is the sole channel,\n  // uniform for ACP and non-ACP (agent-canvas#1039). For ACP the resolution\n  // runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the loopback\n  // fetch can't deadlock.\n  if (options.customSecrets && options.customSecrets.length > 0) {\n    const backend = getEffectiveLocalBackend();\n    const headers = backend ? buildAuthHeaders(backend) : {};\n\n    const secrets: Record<string, LookupSecret> = {};\n    for (const secret of options.customSecrets) {\n      const lookupSecret: LookupSecret = {\n        kind: \"LookupSecret\",\n        url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n        description: secret.description,\n      };\n\n      if (Object.keys(headers).length > 0) {\n        lookupSecret.headers = headers;\n      }\n\n      secrets[secret.name] = lookupSecret;\n    }\n\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n}): Promise<Record<string, unknown>> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets] = await Promise.all([\n    SettingsService.getSettingsForConversation(),\n    SecretsService.getSecrets(),\n  ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  await assertSubscriptionAuthReady(agentSettings);\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"6zBAkFA,IAAM,EAAsB,YACtB,EAAwB,iBAExB,EAAqB,CACzB,WACA,cACA,eACA,EACD,CACK,EAAwB,mBACxB,EAAqB,gBAE3B,SAAS,GAAsB,CAC7B,MAAO,GAiDT,SAAS,GAA2C,CAClD,IAAM,GAAA,IAAA,KAAqD,MAAM,CACjE,GAAI,EAAQ,OAAO,EAEnB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OACf,uCACH,GAAI,OAAO,GAAa,SACtB,OAAO,EAAS,MAAM,EAAI,KAI9B,OAAO,KAGT,SAAS,GAAuD,CAC9D,IAAM,EAAM,GAA2B,CACvC,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,IAAM,EAAS,KAAK,MAAM,EAAI,CAE9B,MADI,CAAC,GAAU,OAAO,GAAW,SAAiB,KAC3C,OACD,CAIN,OAAO,MAoBX,SAAgB,GAAuD,CACrE,IAAM,EAAO,GAA0B,CACvC,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,EAAE,CAC1B,EAAM,KAAK,qBAAqB,CAC5B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,SAC3E,CAED,EAAM,KAAK,oDAAoD,CAEjE,EAAM,KACJ,2EACA,iEACA,GACD,CAED,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,8CACpC,CAEC,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,oDAC/B,CAEC,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,yBAChC,CAEC,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,mCAClC,CACG,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,WAAW,CAE/C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,cAAc,CAElD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,GACrE,EAGH,EAAM,KACJ,mFACD,CAQH,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,4EACD,CACG,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,0DACD,CAEH,EAAM,KAAK,sBAAsB,CAE1B,EAAM,KAAK;EAAK,CAGzB,SAAgB,EAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,6BAA6B,CAC9C,MAAO,GAAG,EAAK,qBAAqB,IAMtC,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,EAAE,GAGnD,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,GAAG,CAKjD,EAAQ,EAAK,OAAO,OAAS,WAK7B,EAAY,EAAS,EAAK,MAAA,WAA8B,KAAQ,KACtE,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,MAAM,CACrB,EAAK,MACL,EAA4B,EAAK,GAAG,CACxC,QAAS,KACT,UAAW,EAAE,CACb,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EAKZ,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,MAC1B,CAAC,CACD,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EAC1D,CACD,KACL,CACD,KACJ,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,EAAkB,EAAK,GAAG,CAC5C,gBAAiB,EAAA,6BAA6B,CAAC,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,0BAA0B,CACvE,CACD,OAAQ,GACR,qBAAsB,EAAE,CACzB,CAGH,SAAgB,EAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MAAM,IAAI,EAAkB,CACxC,aAAc,EAAK,cAAgB,KACpC,CAgCH,IAAa,EAAqB,YAE5B,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,UACD,CAAC,CAEF,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,EAAM,CACtD,EAAE,CAGJ,gBAAgB,EAAwB,CAGjD,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,MAAM,CAC5B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,GAGxC,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,EAAM,CAGtE,SAAS,EAAuB,EAA6B,CAK3D,MAJI,CAAC,EAAc,EAAU,EAAI,CAAC,EAAc,EAAU,WAAW,CAC5D,GAGF,OAAO,OAAO,EAAU,WAAW,CAAC,KAAM,GAC1C,EAAc,EAAO,CACnB,CAAC,MAAO,UAAU,CAAC,KAAM,GAAQ,CACtC,IAAM,EAAS,EAAO,GAEtB,OADK,EAAc,EAAO,CACnB,OAAO,OAAO,EAAO,CAAC,KAC1B,GACC,OAAO,GAAU,UAAY,EAAM,WAAW,EAAoB,CACrE,CAJkC,IAKnC,CARiC,GASnC,CAGJ,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,GAAM,CAGpE,CAAE,KAAM,gBAAiB,CAPvB,CAAE,KAAM,eAAgB,CAUnC,SAAS,EAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,sBAAuB,CACxC,IAAK,UACH,MAAO,CAAE,KAAM,0BAA2B,CAC5C,IAAK,cACH,MAAO,CAAE,KAAM,6BAA8B,CAC/C,QACE,QAIN,SAAS,EACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,EAAM,EACrB,OAAQ,EAA6B,MAAS,SAIlD,SAAS,EAAkB,EAAc,EAA+B,CAgBtE,OAfI,IAAS,EACJ,EAAA,2BAA2B,EAAK,CAGrC,IAAS,EACJ,GAAqB,EAAI,EAAA,2BAA2B,EAAK,CAG9D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,EAAK,CAI7B,GAGT,SAAS,EAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,EACb,EAAkB,EAAM,EAAc,EACxC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,EAAE,CAAE,CAAC,CAIzC,IAAK,IAAM,IAAQ,CAAC,EAAuB,EAAmB,CACxD,EAAkB,EAAM,EAAc,EACxC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,EAAE,CAAE,CAAC,CAIzC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,EAAgB,EAC9B,EAAgB,MAAO,GAAS,EAAa,EAAK,CAAC,KAE9C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,EAAc,EAC7C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,OAAO,CAC9B,CAAC,CAKR,OAAO,MAAM,KAAK,EAAM,QAAQ,CAAC,CAGnC,SAAS,EACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,MAAM,CAAE,GAA0B,MAAM,CAAC,CAAC,OAC9D,QACD,CAKD,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;EAAO,CAAE,CAAC,CACrD,IAAK,GACN,CA4BH,SAAS,GAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,SAAU,CAC7C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,QAAS,CAAG,EAAE,CACnD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,cAAe,CAAG,EAAE,CACtE,EACD,CAGJ,SAAS,EAAkB,EAA+C,CACxE,IAAM,EAAwB,GAAkC,CAC1D,EAAkB,EAAS,EAAc,cAAc,CAOvD,EAAe,CAAC,GAHC,MAAM,QAAQ,EAAgB,OAAO,CACvD,EAAgB,OACjB,EAAE,CACmC,GAAG,GAAoB,CAAC,CAEjE,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GACrB,GAAI,EACA,CAAE,sBAAuB,EAAuB,CAChD,EAAE,CACP,CAGH,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,eACjC,CAAc,aAAe,MAGtC,SAAS,EAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,eAC1B,CAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,GAGjE,SAAS,EAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,EAAI,EAAI,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACoC,CAC1C,OAAO,EAAW,CAAC,GAAG,EAAS,gBAAgB,CAAG,EAGpD,SAAS,EACP,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,eAAe,CACjD,EAAgC,CACpC,WAAY,MACZ,cAAe,EAAkB,EAAc,CAChD,CASD,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,EAAkB,EAAc,CAChC,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,GAQnB,IAAM,EAAY,EAAS,EAAc,WAAW,CAChD,OAAO,KAAK,EAAU,CAAC,OAAS,GAAK,eAAgB,IACvD,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,EAAU,CACxD,CAAC,CAKF,OAJI,IACF,EAAQ,UAAY,GAGf,EAGT,SAAS,EACP,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,eAAe,CACjD,EAAM,EAAS,EAAc,IAAI,CAEvC,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,MAAM,CAAC,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAIvB,EAAI,OAAS,GAEb,IAAM,EAAS,EAAsB,EAAI,QAAQ,CAC7C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,SAAS,CAC/C,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,EAAI,EAC9B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,QACX,OAAO,EAAI,WAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGb,IAAM,EAAY,EAAS,EAAc,WAAW,EAChD,OAAO,KAAK,EAAU,CAAC,SAAW,GAAK,EAAE,eAAgB,KAC3D,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EAAkB,EAAc,CAC/C,MAAO,EAAc,EAAc,CACpC,CAGH,SAAS,EACP,EACsB,CACtB,OAAO,EAAW,EAAS,CACvB,EAAgC,EAAS,CACzC,EAAsC,EAAS,CAGrD,SAAS,EAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,sBAAsB,CAC/D,EAAiB,EAAoB,EAAO,EAAyB,CAwB3E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,GACtC,CAoBM,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,0BAA0B,CACtD,CACD,GAAI,EAAiB,CAAE,gBAAiB,EAAgB,CAAG,EAAE,CAC7D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,IAAK,CAAG,EAAE,CACzC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,UAAW,CAAG,EAAE,CAC5D,EAAE,CACJ,CACD,EAAE,CAGD,CAyCT,SAAgB,EACd,EAC0B,CAC1B,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,uBAAwB,CACvE,EAAQ,SAEN,EAAU,EAAW,EAAoB,CACzC,EAAgB,EAA6B,EAAoB,CACjE,EAAe,EACjB,EAAgB,EAAoB,CACpC,IAAA,GAYE,EAAuB,EAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,8BAChC,CACF,CACD,EAIH,CAEK,EAAoC,CACxC,eAAgB,EAChB,UAAW,EAAqB,UAChC,oBACE,EAAkC,EAAqB,CACzD,eACE,OAAO,EAAqB,gBAAmB,SAC3C,EAAqB,eACrB,IACN,gBAAiB,GACjB,UAAW,GACX,SAAU,EAAQ,UAAY,GAC/B,CAEG,IACF,EAAQ,KAAO,EAAG,GAAqB,EAAc,EAUrD,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,WAAW,IAE7D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGpC,IAAM,EACJ,EAAgC,EAAqB,CACnD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,cACvB,EAAQ,YAAc,EAAqB,aAG7C,IAAM,EAA8C,EAAE,CAChD,EAAoB,EAAA,2BAA2B,EAAoB,CA0BzE,GAzBI,IACF,EAAoB,GAAuB,GAE7C,OAAO,OACL,EACC,EAAqB,uBAEJ,EAAE,CACrB,CACI,GACH,OAAO,EAAoB,GAEzB,OAAO,KAAK,EAAoB,CAAC,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAQ/C,EAAQ,eAAiB,EAAQ,cAAc,OAAS,EAAG,CAC7D,IAAM,EAAU,EAAA,0BAA0B,CACpC,EAAU,EAAU,EAAA,iBAAiB,EAAQ,CAAG,EAAE,CAElD,EAAwC,EAAE,CAChD,IAAK,IAAM,KAAU,EAAQ,cAAe,CAC1C,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,KAAK,GAC7D,YAAa,EAAO,YACrB,CAEG,OAAO,KAAK,EAAQ,CAAC,OAAS,IAChC,EAAa,QAAU,GAGzB,EAAQ,EAAO,MAAQ,EAGzB,EAAQ,QAAU,EAGpB,OAAO,EAGT,IAAa,EACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,IACN,CAAI,EAG7B,EAAC,MADgB,EAAA,QAAuB,iBAAiB,EACjD,UACV,MAAU,MAAM,EAAkC,CAItD,eAAsB,EAAmD,EAQpC,CACnC,GAAM,CAAE,kBAAmB,MAAA,QAAA,SAAA,CAAA,SAAA,QAAM,wBAAA,CAAA,CAE3B,CAAC,EAAgB,GAAiB,MAAM,QAAQ,IAAI,CACxD,EAAA,QAAgB,4BAA4B,CAC5C,EAAe,YAAY,CAC5B,CAAC,CAEI,CAAE,gBAAe,uBAAsB,oBAC3C,EAIF,OAFA,MAAM,EAA4B,EAAc,CAEzC,EAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACD,CAAC,CAGJ,SAAgB,GAAuC,CACrD,MAAO,CAAE,MAAO,EAAE,CAAE"}
+{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport { isAgentServerToolAvailable } from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    /**\n     * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the\n     * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the\n     * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag\n     * client-side and the server may not repopulate it. Read by {@link toAppConversation}.\n     */\n    acp_server?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n}\n\n// Module qualname for the Canvas-UI tool. The agent-server imports this via\n// tool_module_qualnames; the host directory is exposed via OH_EXTRA_PYTHON_PATH\n// (see scripts/dev-safe.mjs).\nconst CANVAS_UI_TOOL_NAME = \"canvas_ui\";\nconst CANVAS_UI_TOOL_MODULE = \"canvas_ui_tool\";\n\nconst DEFAULT_TOOL_NAMES = [\n  \"terminal\",\n  \"file_editor\",\n  \"task_tracker\",\n  CANVAS_UI_TOOL_NAME,\n];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info (set by the dev launchers in\n * scripts/dev-*.mjs as `VITE_RUNTIME_SERVICES_INFO`, or injected at serve time\n * by `scripts/static-server.mjs` for static builds — see\n * `getRawRuntimeServicesInfo`). All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's\n * reachable from inside its sandbox without having to probe.\n */\ninterface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\n/**\n * Return the raw runtime-services JSON string, consulting two sources in order\n * (mirrors `getBakedSessionApiKey` in agent-server-config.ts):\n *   1. `VITE_RUNTIME_SERVICES_INFO` — baked into the bundle at build time by\n *      the dev launchers (`npm run dev`, dev:static).\n *   2. `window.__AGENT_CANVAS_RUNTIME_SERVICES_INFO__` — injected into\n *      index.html at serve time by `scripts/static-server.mjs\n *      --runtime-services-info <json>`. This is the path used by static builds\n *      (the Docker image and the published binary), where the env var is empty\n *      in the prebuilt bundle. Without it the `<RUNTIME_SERVICES>` block is\n *      missing and the agent cannot reach the local automation backend.\n */\nfunction getRawRuntimeServicesInfo(): string | null {\n  const envRaw = import.meta.env.VITE_RUNTIME_SERVICES_INFO?.trim();\n  if (envRaw) return envRaw;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_RUNTIME_SERVICES_INFO__;\n    if (typeof injected === \"string\") {\n      return injected.trim() || null;\n    }\n  }\n\n  return null;\n}\n\nfunction parseRuntimeServicesInfo(): RuntimeServicesInfo | null {\n  const raw = getRawRuntimeServicesInfo();\n  if (!raw) return null;\n  try {\n    const parsed = JSON.parse(raw) as RuntimeServicesInfo;\n    if (!parsed || typeof parsed !== \"object\") return null;\n    return parsed;\n  } catch {\n    // Malformed JSON: ignore and fall back to no runtime info, rather than\n    // tearing down conversation creation over a misconfigured env var or\n    // injected value.\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is configured.\n */\nexport function getDeploymentMode(): string | null {\n  return parseRuntimeServicesInfo()?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is configured, so callers can\n * safely omit the field on production builds (where the launcher doesn't\n * set `VITE_RUNTIME_SERVICES_INFO`).\n */\nexport function buildRuntimeServicesSystemSuffix(): string | undefined {\n  const info = parseRuntimeServicesInfo();\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie. Fall back to the\n  // agent's own ``acp_server`` (#3692) when the tag is missing — a profile\n  // launch doesn't stamp the tag, so tag-only reads would drop the ACP model\n  // picker and degrade the chip to a generic \"ACP\" (#1571).\n  const acpServer = isAcp\n    ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? info.agent?.acp_server ?? null)\n    : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : null,\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items.map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedString(value: unknown): boolean {\n  if (typeof value === \"string\") {\n    return value.startsWith(FERNET_TOKEN_PREFIX);\n  }\n  if (Array.isArray(value)) {\n    return value.some(hasEncryptedString);\n  }\n  if (isPlainRecord(value)) {\n    return Object.values(value).some(hasEncryptedString);\n  }\n  return false;\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig).some(hasEncryptedString);\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === CANVAS_UI_TOOL_NAME) {\n    return isAgentServerToolAvailable(name);\n  }\n\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(agentSettings: SettingsRecord): SettingsRecord {\n  const runtimeServicesSuffix = buildRuntimeServicesSystemSuffix();\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const mergedSkills = [...existingSkills, ...buildBundledSkills()];\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(agentSettings),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a shared field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = toRecord(agentSettings.llm);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n    delete llm.base_url;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(agentSettings),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings)\n    : buildConfiguredOpenHandsAgentSettings(settings);\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\ntype StartConversationPayload = Record<string, unknown> & {\n  // Omitted when launching via ``agent_profile_id`` — the two are mutually\n  // exclusive agent sources; the server resolves the profile server-side.\n  agent_settings?: AgentSettingsPayload;\n  agent_profile_id?: string;\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: true;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  tool_module_qualnames?: Record<string, string>;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: Array<{ name: string; description?: string }>;\n  // When set, the conversation launches from this AgentProfile (resolved\n  // server-side) instead of an inline ``agent_settings`` dump (#3727).\n  agentProfileId?: string;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): StartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const agentSettings = buildConfiguredAgentSettings(sourceAgentSettings);\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: StartConversationPayload = {\n    // ``agent_profile_id`` and ``agent_settings`` are mutually exclusive agent\n    // sources; the profile path lets the server resolve the profile (#3727).\n    //\n    // Enrichment boundary: on the profile path the server rebuilds the agent\n    // purely from the stored profile fields, so the client-owned enrichments\n    // this adapter folds into ``agent_settings`` do NOT apply. The exec toolset\n    // (terminal/file_editor/task_tracker) and public-skill loading are the\n    // server/SDK's responsibility to restore on the profile path — tracked in\n    // software-agent-sdk#3967 (profile resolution must attach the default\n    // toolset + public skills, else a profile-launched OpenHands agent has only\n    // Finish/Think). The two genuinely canvas-only enrichments — the\n    // ``canvas_ui`` tool and the dev ``RUNTIME_SERVICES`` system-message-suffix\n    // (``buildAgentContext``) — have no server-side representation and are\n    // intentionally not carried on the profile path.\n    ...(options.agentProfileId\n      ? { agent_profile_id: options.agentProfileId }\n      : { agent_settings: agentSettings }),\n    workspace: conversationSettings.workspace,\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations:\n      typeof conversationSettings.max_iterations === \"number\"\n        ? conversationSettings.max_iterations\n        : 500,\n    stuck_detection: true,\n    autotitle: true,\n    worktree: options.worktree ?? true,\n  };\n\n  // A profile launch resolves the ACP server server-side, so don't stamp the\n  // tag from current settings (it may not match the launched profile).\n  if (!options.agentProfileId && acpServerTag) {\n    payload.tags = { [ACP_SERVER_TAG_KEY]: acpServerTag };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config secrets as Fernet tokens,\n  // and ACP forwards mcp_config directly to the subprocess.\n  if (\n    !options.agentProfileId &&\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  }\n\n  const toolModuleQualnames: Record<string, string> = {};\n  const canvasUiAvailable = isAgentServerToolAvailable(CANVAS_UI_TOOL_NAME);\n  if (canvasUiAvailable) {\n    toolModuleQualnames[CANVAS_UI_TOOL_NAME] = CANVAS_UI_TOOL_MODULE;\n  }\n  Object.assign(\n    toolModuleQualnames,\n    (conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {},\n  );\n  if (!canvasUiAvailable) {\n    delete toolModuleQualnames[CANVAS_UI_TOOL_NAME];\n  }\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  // Every saved secret rides as a LookupSecret the agent-server resolves back\n  // from its own store at spawn time — ``request.secrets`` is the sole channel,\n  // uniform for ACP and non-ACP (agent-canvas#1039). For ACP the resolution\n  // runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the loopback\n  // fetch can't deadlock.\n  if (options.customSecrets && options.customSecrets.length > 0) {\n    const backend = getEffectiveLocalBackend();\n    const headers = backend ? buildAuthHeaders(backend) : {};\n\n    const secrets: Record<string, LookupSecret> = {};\n    for (const secret of options.customSecrets) {\n      const lookupSecret: LookupSecret = {\n        kind: \"LookupSecret\",\n        url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n        description: secret.description,\n      };\n\n      if (Object.keys(headers).length > 0) {\n        lookupSecret.headers = headers;\n      }\n\n      secrets[secret.name] = lookupSecret;\n    }\n\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  agentProfileId?: string;\n}): Promise<Record<string, unknown>> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets] = await Promise.all([\n    SettingsService.getSettingsForConversation(),\n    SecretsService.getSecrets(),\n  ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  // A profile launch resolves the LLM server-side, so the current-settings\n  // subscription check doesn't apply (and can't see the profile's LLM).\n  if (!options.agentProfileId) {\n    await assertSubscriptionAuthReady(agentSettings);\n  }\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"6zBAyFA,IAAM,EAAsB,YACtB,EAAwB,iBAExB,EAAqB,CACzB,WACA,cACA,eACA,EACD,CACK,EAAwB,mBACxB,EAAqB,gBAE3B,SAAS,GAAsB,CAC7B,MAAO,GAiDT,SAAS,GAA2C,CAClD,IAAM,GAAA,IAAA,KAAqD,MAAM,CACjE,GAAI,EAAQ,OAAO,EAEnB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OACf,uCACH,GAAI,OAAO,GAAa,SACtB,OAAO,EAAS,MAAM,EAAI,KAI9B,OAAO,KAGT,SAAS,GAAuD,CAC9D,IAAM,EAAM,GAA2B,CACvC,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,IAAM,EAAS,KAAK,MAAM,EAAI,CAE9B,MADI,CAAC,GAAU,OAAO,GAAW,SAAiB,KAC3C,OACD,CAIN,OAAO,MAoBX,SAAgB,GAAuD,CACrE,IAAM,EAAO,GAA0B,CACvC,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,EAAE,CAC1B,EAAM,KAAK,qBAAqB,CAC5B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,SAC3E,CAED,EAAM,KAAK,oDAAoD,CAEjE,EAAM,KACJ,2EACA,iEACA,GACD,CAED,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,8CACpC,CAEC,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,oDAC/B,CAEC,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,yBAChC,CAEC,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,mCAClC,CACG,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,WAAW,CAE/C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,cAAc,CAElD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,GACrE,EAGH,EAAM,KACJ,mFACD,CAQH,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,4EACD,CACG,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,0DACD,CAEH,EAAM,KAAK,sBAAsB,CAE1B,EAAM,KAAK;EAAK,CAGzB,SAAgB,EAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,6BAA6B,CAC9C,MAAO,GAAG,EAAK,qBAAqB,IAMtC,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,EAAE,GAGnD,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,GAAG,CAKjD,EAAQ,EAAK,OAAO,OAAS,WAQ7B,EAAY,EACb,EAAK,MAAA,WAA8B,EAAK,OAAO,YAAc,KAC9D,KACJ,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,MAAM,CACrB,EAAK,MACL,EAA4B,EAAK,GAAG,CACxC,QAAS,KACT,UAAW,EAAE,CACb,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EAKZ,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,MAC1B,CAAC,CACD,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EAC1D,CACD,KACL,CACD,KACJ,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,EAAkB,EAAK,GAAG,CAC5C,gBAAiB,EAAA,6BAA6B,CAAC,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,0BAA0B,CACvE,CACD,OAAQ,GACR,qBAAsB,EAAE,CACzB,CAGH,SAAgB,EAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MAAM,IAAI,EAAkB,CACxC,aAAc,EAAK,cAAgB,KACpC,CAgCH,IAAa,EAAqB,YAE5B,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,UACD,CAAC,CAEF,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,EAAM,CACtD,EAAE,CAGJ,gBAAgB,EAAwB,CAGjD,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,MAAM,CAC5B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,GAGxC,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,EAAM,CAGtE,SAAS,EAAmB,EAAyB,CAUnD,OATI,OAAO,GAAU,SACZ,EAAM,WAAW,EAAoB,CAE1C,MAAM,QAAQ,EAAM,CACf,EAAM,KAAK,EAAmB,CAEnC,EAAc,EAAM,CACf,OAAO,OAAO,EAAM,CAAC,KAAK,EAAmB,CAE/C,GAGT,SAAS,EAAuB,EAA6B,CAK3D,OAJK,EAAc,EAAU,CAItB,OAAO,OAAO,EAAU,CAAC,KAAK,EAAmB,CAH/C,GAMX,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,GAAM,CAGpE,CAAE,KAAM,gBAAiB,CAPvB,CAAE,KAAM,eAAgB,CAUnC,SAAS,EAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,sBAAuB,CACxC,IAAK,UACH,MAAO,CAAE,KAAM,0BAA2B,CAC5C,IAAK,cACH,MAAO,CAAE,KAAM,6BAA8B,CAC/C,QACE,QAIN,SAAS,EACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,EAAM,EACrB,OAAQ,EAA6B,MAAS,SAIlD,SAAS,EAAkB,EAAc,EAA+B,CAgBtE,OAfI,IAAS,EACJ,EAAA,2BAA2B,EAAK,CAGrC,IAAS,EACJ,GAAqB,EAAI,EAAA,2BAA2B,EAAK,CAG9D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,EAAK,CAI7B,GAGT,SAAS,EAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,EACb,EAAkB,EAAM,EAAc,EACxC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,EAAE,CAAE,CAAC,CAIzC,IAAK,IAAM,IAAQ,CAAC,EAAuB,EAAmB,CACxD,EAAkB,EAAM,EAAc,EACxC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,EAAE,CAAE,CAAC,CAIzC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,EAAgB,EAC9B,EAAgB,MAAO,GAAS,EAAa,EAAK,CAAC,KAE9C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,EAAc,EAC7C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,OAAO,CAC9B,CAAC,CAKR,OAAO,MAAM,KAAK,EAAM,QAAQ,CAAC,CAGnC,SAAS,EACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,MAAM,CAAE,GAA0B,MAAM,CAAC,CAAC,OAC9D,QACD,CAKD,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;EAAO,CAAE,CAAC,CACrD,IAAK,GACN,CA4BH,SAAS,GAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,SAAU,CAC7C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,QAAS,CAAG,EAAE,CACnD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,cAAe,CAAG,EAAE,CACtE,EACD,CAGJ,SAAS,EAAkB,EAA+C,CACxE,IAAM,EAAwB,GAAkC,CAC1D,EAAkB,EAAS,EAAc,cAAc,CAOvD,EAAe,CAAC,GAHC,MAAM,QAAQ,EAAgB,OAAO,CACvD,EAAgB,OACjB,EAAE,CACmC,GAAG,GAAoB,CAAC,CAEjE,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GACrB,GAAI,EACA,CAAE,sBAAuB,EAAuB,CAChD,EAAE,CACP,CAGH,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,eACjC,CAAc,aAAe,MAGtC,SAAS,EAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,eAC1B,CAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,GAGjE,SAAS,EAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,EAAI,EAAI,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACoC,CAC1C,OAAO,EAAW,CAAC,GAAG,EAAS,gBAAgB,CAAG,EAGpD,SAAS,EACP,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,eAAe,CACjD,EAAgC,CACpC,WAAY,MACZ,cAAe,EAAkB,EAAc,CAChD,CASD,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,EAAkB,EAAc,CAChC,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,GAQnB,IAAM,EAAY,EAAS,EAAc,WAAW,CAChD,OAAO,KAAK,EAAU,CAAC,OAAS,IAClC,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,EAAU,CACxD,CAAC,CAKF,OAJI,IACF,EAAQ,UAAY,GAGf,EAGT,SAAS,EACP,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,eAAe,CACjD,EAAM,EAAS,EAAc,IAAI,CAEvC,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,MAAM,CAAC,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAIvB,EAAI,OAAS,GAEb,IAAM,EAAS,EAAsB,EAAI,QAAQ,CAC7C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,SAAS,CAC/C,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,EAAI,EAC9B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,QACX,OAAO,EAAI,WAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGb,IAAM,EAAY,EAAS,EAAc,WAAW,CAChD,OAAO,KAAK,EAAU,CAAC,SAAW,GACpC,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EAAkB,EAAc,CAC/C,MAAO,EAAc,EAAc,CACpC,CAGH,SAAS,EACP,EACsB,CACtB,OAAO,EAAW,EAAS,CACvB,EAAgC,EAAS,CACzC,EAAsC,EAAS,CAGrD,SAAS,EAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,sBAAsB,CAC/D,EAAiB,EAAoB,EAAO,EAAyB,CAwB3E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,GACtC,CAoBM,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,0BAA0B,CACtD,CACD,GAAI,EAAiB,CAAE,gBAAiB,EAAgB,CAAG,EAAE,CAC7D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,IAAK,CAAG,EAAE,CACzC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,UAAW,CAAG,EAAE,CAC5D,EAAE,CACJ,CACD,EAAE,CAGD,CA+CT,SAAgB,EACd,EAC0B,CAC1B,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,uBAAwB,CACvE,EAAQ,SAEN,EAAU,EAAW,EAAoB,CACzC,EAAgB,EAA6B,EAAoB,CACjE,EAAe,EACjB,EAAgB,EAAoB,CACpC,IAAA,GAYE,EAAuB,EAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,8BAChC,CACF,CACD,EAIH,CAEK,EAAoC,CAexC,GAAI,EAAQ,eACR,CAAE,iBAAkB,EAAQ,eAAgB,CAC5C,CAAE,eAAgB,EAAe,CACrC,UAAW,EAAqB,UAChC,oBACE,EAAkC,EAAqB,CACzD,eACE,OAAO,EAAqB,gBAAmB,SAC3C,EAAqB,eACrB,IACN,gBAAiB,GACjB,UAAW,GACX,SAAU,EAAQ,UAAY,GAC/B,CAIG,CAAC,EAAQ,gBAAkB,IAC7B,EAAQ,KAAO,EAAG,GAAqB,EAAc,EAUrD,CAAC,EAAQ,gBACT,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,WAAW,IAE7D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGpC,IAAM,EACJ,EAAgC,EAAqB,CACnD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,cACvB,EAAQ,YAAc,EAAqB,aAG7C,IAAM,EAA8C,EAAE,CAChD,EAAoB,EAAA,2BAA2B,EAAoB,CA0BzE,GAzBI,IACF,EAAoB,GAAuB,GAE7C,OAAO,OACL,EACC,EAAqB,uBAEJ,EAAE,CACrB,CACI,GACH,OAAO,EAAoB,GAEzB,OAAO,KAAK,EAAoB,CAAC,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAQ/C,EAAQ,eAAiB,EAAQ,cAAc,OAAS,EAAG,CAC7D,IAAM,EAAU,EAAA,0BAA0B,CACpC,EAAU,EAAU,EAAA,iBAAiB,EAAQ,CAAG,EAAE,CAElD,EAAwC,EAAE,CAChD,IAAK,IAAM,KAAU,EAAQ,cAAe,CAC1C,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,KAAK,GAC7D,YAAa,EAAO,YACrB,CAEG,OAAO,KAAK,EAAQ,CAAC,OAAS,IAChC,EAAa,QAAU,GAGzB,EAAQ,EAAO,MAAQ,EAGzB,EAAQ,QAAU,EAGpB,OAAO,EAGT,IAAa,EACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,IACN,CAAI,EAG7B,EAAC,MADgB,EAAA,QAAuB,iBAAiB,EACjD,UACV,MAAU,MAAM,EAAkC,CAItD,eAAsB,EAAmD,EASpC,CACnC,GAAM,CAAE,kBAAmB,MAAA,QAAA,SAAA,CAAA,SAAA,QAAM,wBAAA,CAAA,CAE3B,CAAC,EAAgB,GAAiB,MAAM,QAAQ,IAAI,CACxD,EAAA,QAAgB,4BAA4B,CAC5C,EAAe,YAAY,CAC5B,CAAC,CAEI,CAAE,gBAAe,uBAAsB,oBAC3C,EAQF,OAJK,EAAQ,gBACX,MAAM,EAA4B,EAAc,CAG3C,EAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACD,CAAC,CAGJ,SAAgB,IAAuC,CACrD,MAAO,CAAE,MAAO,EAAE,CAAE"}

package/dist/api/agent-server-adapter.d.ts

@@ -28,6 +28,13 @@ export interface DirectConversationInfo {
          */
         kind?: string | null;
         acp_model?: string | null;
+        /**
+         * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the
+         * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the
+         * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag
+         * client-side and the server may not repopulate it. Read by {@link toAppConversation}.
+         */
+        acp_server?: string | null;
         llm?: {
             model?: string | null;
         } | null;
@@ -98,7 +105,8 @@ interface LookupSecret {
     description?: string;
 }
 type StartConversationPayload = Record<string, unknown> & {
-    agent_settings: AgentSettingsPayload;
+    agent_settings?: AgentSettingsPayload;
+    agent_profile_id?: string;
     workspace: LocalWorkspacePayload;
     confirmation_policy: SettingsRecord;
     security_analyzer?: SettingsRecord;
@@ -128,6 +136,7 @@ export interface StartConversationOptions {
         name: string;
         description?: string;
     }>;
+    agentProfileId?: string;
 }
 export declare function buildStartConversationRequest(options: StartConversationOptions): StartConversationPayload;
 export declare const SUBSCRIPTION_LOGIN_REQUIRED_ERROR = "Connect your ChatGPT subscription before starting a conversation with this LLM profile.";
@@ -146,6 +155,7 @@ export declare function buildStartConversationRequestWithEncryptedSettings(optio
     conversationId?: string;
     workingDir?: string;
     worktree?: boolean;
+    agentProfileId?: string;
 }): Promise<Record<string, unknown>>;
 export declare function emptyHooksResponse(): GetHooksResponse;
 export {};