@openhands/agent-canvas 1.1.0 → 1.2.0

package/dist/api/agent-server-compatibility.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-compatibility.cjs","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  if (typeof serverInfo.version !== \"string\") return null;\n  const trimmed = serverInfo.version.trim();\n  return trimmed || null;\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nfunction compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":"gZAcA,IAAM,EAA+B,IAC/B,EAA+B,UAExB,EACX,EAAA,QAAS,cAAc,mBACZ,EACX,mCACW,EACX,+BAME,EAAgD,KAE9C,EAAsB,GACtB,MAAM,QAAQ,GAAY,aAAa,CAClC,EAAW,aAEb,KAGI,EAAb,cAAiD,KAAM,CACrD,QACA,oBAEA,YACE,EACA,EACA,CACA,IAAM,EAAsB,GAAS,qBAAuB,GAC5D,MACE,EACI,2EACA,iHACL,CACD,KAAK,KAAO,8BACZ,KAAK,QAAU,GAAW,KAC1B,KAAK,oBAAsB,IAIlB,EACX,GAEA,aAAiB,GAChB,OAAO,GAAU,YAChB,GACA,SAAU,GACV,EAAM,OAAS,8BAEN,EAAb,cAAwD,CAA4B,CAClF,KAAgB,EAChB,cACA,gBAA2B,EAE3B,YAAY,EAAuB,CACjC,IAAM,EAAU,sCAAsC,EAAwC,qCAAqC,EAAc,4CACjJ,MAAM,EAAQ,CACd,KAAK,KAAO,qCACZ,KAAK,QAAU,EACf,KAAK,cAAgB,IAIZ,EAAb,cAAoD,CAA4B,CAC9E,KAAgB,EAChB,cACA,gBAA2B,EAE3B,YAAY,EAA8B,CAExC,IAAM,EACJ,2DAFe,EAAgB,iBAAiB,EAAc,IAAM,GAEA,sCAC9B,EAAwC,4IAGhF,MAAM,EAAQ,CACd,KAAK,KAAO,iCACZ,KAAK,QAAU,EACf,KAAK,cAAgB,IA+BZ,EAA0B,GACrC,EAAA,gBAAgB,EAAI,EAAqB,EAAO,IAAI,CAEtD,SAAgB,GAA6B,CAC3C,EAAwB,KAG1B,SAAgB,EAA2B,EAAkB,CAC3D,IAAM,EAAiB,EAAmB,EAAsB,CAIhE,OAHK,MAAM,QAAQ,EAAe,CAG3B,EAAe,SAAS,EAAS,CAF/B,GAKX,SAAgB,EAAe,EAAgB,CAC7C,OACE,aAAiB,OACjB,EAAM,OAAS,aACf,WAAY,GACZ,OAAO,EAAM,QAAW,SAQ5B,SAAgB,EAAqB,EAAgB,EAAyB,CAC5E,OACE,EAAe,EAAM,EAAK,EAA6B,SAAW,EAItE,SAAS,EAAyB,EAA4C,CAG5E,OAFI,OAAO,EAAW,SAAY,UAClB,EAAW,QAAQ,MAC5B,EAF4C,KAKrD,SAAS,EACP,EACe,CACf,IAAM,EAAU,EAAyB,EAAW,CAIpD,MAHI,CAAC,GAAW,EAAQ,aAAa,GAAK,EACjC,KAEF,EAGT,SAAgB,EACd,EACe,CACf,IAAM,EAAU,EAAgC,EAAW,CAI3D,MAHI,CAAC,GAAW,CAAC,EAAwB,EAAQ,CACxC,KAEF,EAGT,SAAS,EAA2B,EAAgB,EAAkB,CACpE,IAAM,EAAe,EAAwB,EAAO,CAC9C,EAAiB,EAAwB,EAAS,CAExD,GAAI,CAAC,GAAgB,CAAC,EACpB,OAAO,KAGT,IAAK,IAAM,IAAO,CAAC,QAAS,QAAS,QAAQ,CAAW,CACtD,GAAI,EAAa,GAAO,EAAe,GACrC,MAAO,GAET,GAAI,EAAa,GAAO,EAAe,GACrC,MAAO,GAcX,OAVI,EAAa,YAAc,CAAC,EAAe,WACtC,GAEL,CAAC,EAAa,YAAc,EAAe,WACtC,EAEL,EAAa,YAAc,EAAe,WACrC,EAAa,WAAW,cAAc,EAAe,WAAW,CAGlE,EAGT,SAAS,EAAwB,EAAiB,CAEhD,GAAM,CAAC,GADS,EAAQ,MAAM,CAAC,QAAQ,KAAM,GACtB,CAAQ,MAAM,IAAI,CACnC,CAAC,EAAM,GAAc,EAAa,MAAM,IAAK,EAAE,CAC/C,EAAQ,EAAK,MAAM,IAAI,CAE7B,GAAI,EAAM,SAAW,EACnB,OAAO,KAGT,GAAM,CAAC,EAAO,EAAO,GAAS,EAAM,IAAK,GAAS,OAAO,EAAK,CAAC,CAO/D,MALG,CAAC,EAAO,EAAO,EAAM,CAAC,MAAO,GAAS,OAAO,UAAU,EAAK,EAAI,GAAQ,EAAE,CAKtE,CAAE,QAAO,QAAO,QAAO,aAAY,CAHjC,KAMX,SAAgB,EACd,EACA,CACA,IAAM,EAAgB,EAAgC,EAAW,CACjE,GAAI,CAAC,EAEH,MADA,GAA4B,CACtB,IAAI,EACR,EAAyB,EAAW,CACrC,CAGH,IAAM,EAAa,EACjB,EACA,EACD,CAED,GAAI,IAAe,KAEjB,MADA,GAA4B,CACtB,IAAI,EAA+B,EAAc,CAGzD,GAAI,EAAa,EAEf,MADA,GAA4B,CACtB,IAAI,EAAmC,EAAc,CAI/D,eAAsB,GAAsB,CAK1C,IAAM,EAAQ,EAAA,0BAA0B,CACxC,GAAI,CAAC,EAAO,CAMV,GALA,GAA4B,CAKxB,EAAA,YAAY,EAAA,kBAAkB,CAAC,QAAQ,CACzC,MAAM,IAAI,EAA4B,wBAAyB,CAC7D,oBAAqB,GACtB,CAAC,CAIJ,OAAO,KAGT,IAAM,EAAgB,EAAA,4BAA4B,CAChD,KAAM,EAAM,KACZ,cAAe,EAAM,QAAU,KAC/B,QAAS,EACV,CAAC,CACE,EAEJ,GAAI,CACF,EAAc,MAAM,IAAI,EAAA,aACtB,EACD,CAAC,eAAe,OACV,EAAO,CAUd,MATA,GAA4B,CAIxB,EAAqB,EAAO,IAAI,CAC5B,EAIF,IAAI,EADM,aAAiB,MAAQ,EAAM,QAAU,KACX,CAShD,GANA,EAAoC,EAAW,CAM3C,EAAA,gBAAgB,CAClB,GAAI,CACF,MAAM,IAAI,EAAA,eAAe,EAAc,CAAC,aAAa,OAC9C,EAAO,CAWd,GAAI,EAAqB,EAAO,IAAI,CAClC,MAAM,EAGR,QAAQ,KACN,uDACA,EACD,CAKL,MADA,GAAwB,EACjB"}
+{"version":3,"file":"agent-server-compatibility.cjs","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  if (typeof serverInfo.version !== \"string\") return null;\n  const trimmed = serverInfo.version.trim();\n  return trimmed || null;\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nfunction compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":"+dAcA,IAAM,EAA+B,IAC/B,EAA+B,UAExB,EACX,EAAA,QAAS,cAAc,mBACZ,EACX,mCACW,EACX,+BAME,EAAgD,KAE9C,EAAsB,GACtB,MAAM,QAAQ,GAAY,aAAa,CAClC,EAAW,aAEb,KAGI,EAAb,cAAiD,KAAM,CACrD,QACA,oBAEA,YACE,EACA,EACA,CACA,IAAM,EAAsB,GAAS,qBAAuB,GAC5D,MACE,EACI,2EACA,iHACL,CACD,KAAK,KAAO,8BACZ,KAAK,QAAU,GAAW,KAC1B,KAAK,oBAAsB,IAIlB,EACX,GAEA,aAAiB,GAChB,OAAO,GAAU,YAChB,GACA,SAAU,GACV,EAAM,OAAS,8BAEN,EAAb,cAAwD,CAA4B,CAClF,KAAgB,EAChB,cACA,gBAA2B,EAE3B,YAAY,EAAuB,CACjC,IAAM,EAAU,sCAAsC,EAAwC,qCAAqC,EAAc,4CACjJ,MAAM,EAAQ,CACd,KAAK,KAAO,qCACZ,KAAK,QAAU,EACf,KAAK,cAAgB,IAIZ,EAAb,cAAoD,CAA4B,CAC9E,KAAgB,EAChB,cACA,gBAA2B,EAE3B,YAAY,EAA8B,CAExC,IAAM,EACJ,2DAFe,EAAgB,iBAAiB,EAAc,IAAM,GAEA,sCAC9B,EAAwC,4IAGhF,MAAM,EAAQ,CACd,KAAK,KAAO,iCACZ,KAAK,QAAU,EACf,KAAK,cAAgB,IA+BZ,EAA0B,GACrC,EAAA,gBAAgB,EAAI,EAAqB,EAAO,IAAI,CAEtD,SAAgB,GAA6B,CAC3C,EAAwB,KAG1B,SAAgB,EAA2B,EAAkB,CAC3D,IAAM,EAAiB,EAAmB,EAAsB,CAIhE,OAHK,MAAM,QAAQ,EAAe,CAG3B,EAAe,SAAS,EAAS,CAF/B,GAKX,SAAgB,EAAe,EAAgB,CAC7C,OACE,aAAiB,OACjB,EAAM,OAAS,aACf,WAAY,GACZ,OAAO,EAAM,QAAW,SAQ5B,SAAgB,EAAqB,EAAgB,EAAyB,CAC5E,OACE,EAAe,EAAM,EAAK,EAA6B,SAAW,EAItE,SAAS,EAAyB,EAA4C,CAG5E,OAFI,OAAO,EAAW,SAAY,UAClB,EAAW,QAAQ,MAC5B,EAF4C,KAKrD,SAAS,EACP,EACe,CACf,IAAM,EAAU,EAAyB,EAAW,CAIpD,MAHI,CAAC,GAAW,EAAQ,aAAa,GAAK,EACjC,KAEF,EAGT,SAAgB,EACd,EACe,CACf,IAAM,EAAU,EAAgC,EAAW,CAI3D,MAHI,CAAC,GAAW,CAAC,EAAwB,EAAQ,CACxC,KAEF,EAGT,SAAS,EAA2B,EAAgB,EAAkB,CACpE,IAAM,EAAe,EAAwB,EAAO,CAC9C,EAAiB,EAAwB,EAAS,CAExD,GAAI,CAAC,GAAgB,CAAC,EACpB,OAAO,KAGT,IAAK,IAAM,IAAO,CAAC,QAAS,QAAS,QAAQ,CAAW,CACtD,GAAI,EAAa,GAAO,EAAe,GACrC,MAAO,GAET,GAAI,EAAa,GAAO,EAAe,GACrC,MAAO,GAcX,OAVI,EAAa,YAAc,CAAC,EAAe,WACtC,GAEL,CAAC,EAAa,YAAc,EAAe,WACtC,EAEL,EAAa,YAAc,EAAe,WACrC,EAAa,WAAW,cAAc,EAAe,WAAW,CAGlE,EAGT,SAAS,EAAwB,EAAiB,CAEhD,GAAM,CAAC,GADS,EAAQ,MAAM,CAAC,QAAQ,KAAM,GACtB,CAAQ,MAAM,IAAI,CACnC,CAAC,EAAM,GAAc,EAAa,MAAM,IAAK,EAAE,CAC/C,EAAQ,EAAK,MAAM,IAAI,CAE7B,GAAI,EAAM,SAAW,EACnB,OAAO,KAGT,GAAM,CAAC,EAAO,EAAO,GAAS,EAAM,IAAK,GAAS,OAAO,EAAK,CAAC,CAO/D,MALG,CAAC,EAAO,EAAO,EAAM,CAAC,MAAO,GAAS,OAAO,UAAU,EAAK,EAAI,GAAQ,EAAE,CAKtE,CAAE,QAAO,QAAO,QAAO,aAAY,CAHjC,KAMX,SAAgB,EACd,EACA,CACA,IAAM,EAAgB,EAAgC,EAAW,CACjE,GAAI,CAAC,EAEH,MADA,GAA4B,CACtB,IAAI,EACR,EAAyB,EAAW,CACrC,CAGH,IAAM,EAAa,EACjB,EACA,EACD,CAED,GAAI,IAAe,KAEjB,MADA,GAA4B,CACtB,IAAI,EAA+B,EAAc,CAGzD,GAAI,EAAa,EAEf,MADA,GAA4B,CACtB,IAAI,EAAmC,EAAc,CAI/D,eAAsB,GAAsB,CAK1C,IAAM,EAAQ,EAAA,0BAA0B,CACxC,GAAI,CAAC,EAAO,CAMV,GALA,GAA4B,CAKxB,EAAA,YAAY,EAAA,kBAAkB,CAAC,QAAQ,CACzC,MAAM,IAAI,EAA4B,wBAAyB,CAC7D,oBAAqB,GACtB,CAAC,CAIJ,OAAO,KAGT,IAAM,EAAgB,EAAA,4BAA4B,CAChD,KAAM,EAAM,KACZ,cAAe,EAAM,QAAU,KAC/B,QAAS,EACV,CAAC,CACE,EAEJ,GAAI,CACF,EAAc,MAAM,IAAI,EAAA,aACtB,EACD,CAAC,eAAe,OACV,EAAO,CAUd,MATA,GAA4B,CAIxB,EAAqB,EAAO,IAAI,CAC5B,EAIF,IAAI,EADM,aAAiB,MAAQ,EAAM,QAAU,KACX,CAShD,GANA,EAAoC,EAAW,CAM3C,EAAA,gBAAgB,CAClB,GAAI,CACF,MAAM,IAAI,EAAA,eAAe,EAAc,CAAC,aAAa,OAC9C,EAAO,CAWd,GAAI,EAAqB,EAAO,IAAI,CAClC,MAAM,EAGR,QAAQ,KACN,uDACA,EACD,CAKL,MADA,GAAwB,EACjB"}

package/dist/api/agent-server-compatibility.js

@@ -1,5 +1,6 @@
 import { ServerClient as e } from "../node_modules/@openhands/typescript-client/dist/client/server-client.js";
 import { SettingsClient as t } from "../node_modules/@openhands/typescript-client/dist/client/settings-client.js";
+import "../node_modules/@openhands/typescript-client/dist/clients.js";
 import { isAuthRequired as n } from "./agent-server-config.js";
 import { getActiveBackend as r, getEffectiveLocalBackend as i, isNoBackend as a } from "./backend-registry/active-store.js";
 import { getAgentServerClientOptions as o } from "./agent-server-client-options.js";

package/dist/api/agent-server-compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  if (typeof serverInfo.version !== \"string\") return null;\n  const trimmed = serverInfo.version.trim();\n  return trimmed || null;\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nfunction compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":";;;;;;;AAcA,IAAM,IAA+B,KAC/B,IAA+B,WAExB,IACX,EAAS,cAAc,oBACZ,IACX,oCACW,IACX,gCAME,IAAgD,MAE9C,KAAsB,MACtB,MAAM,QAAQ,GAAY,aAAa,GAClC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CACA;CAEA,YACE,GACA,GACA;EACA,IAAM,IAAsB,GAAS,uBAAuB;AAQ5D,EAPA,MACE,IACI,6EACA,iHACL,EACD,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW,MAC1B,KAAK,sBAAsB;;GAIlB,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,KACV,EAAM,SAAS,+BAEN,IAAb,cAAwD,EAA4B;CAClF,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAAuB;EACjC,IAAM,IAAU,sCAAsC,EAAwC,qCAAqC,EAAc;AAIjJ,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,sCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;;GAIZ,IAAb,cAAoD,EAA4B;CAC9E,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAA8B;EAExC,IAAM,IACJ,2DAFe,IAAgB,iBAAiB,EAAc,MAAM,GAEA,sCAC9B,EAAwC;AAMhF,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,kCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;;GA+BZ,KAA0B,MACrC,GAAgB,IAAI,EAAqB,GAAO,IAAI;AAEtD,SAAgB,IAA6B;AAC3C,KAAwB;;AAG1B,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,EAAsB;AAIhE,QAHK,MAAM,QAAQ,EAAe,GAG3B,EAAe,SAAS,EAAS,GAF/B;;AAKX,SAAgB,EAAe,GAAgB;AAC7C,QACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;;AAQ5B,SAAgB,EAAqB,GAAgB,GAAyB;AAC5E,QACE,EAAe,EAAM,IAAK,EAA6B,WAAW;;AAItE,SAAS,EAAyB,GAA4C;AAG5E,QAFI,OAAO,EAAW,WAAY,YAClB,EAAW,QAAQ,MAC5B,IAF4C;;AAKrD,SAAS,EACP,GACe;CACf,IAAM,IAAU,EAAyB,EAAW;AAIpD,QAHI,CAAC,KAAW,EAAQ,aAAa,KAAK,IACjC,OAEF;;AAGT,SAAgB,EACd,GACe;CACf,IAAM,IAAU,EAAgC,EAAW;AAI3D,QAHI,CAAC,KAAW,CAAC,EAAwB,EAAQ,GACxC,OAEF;;AAGT,SAAS,EAA2B,GAAgB,GAAkB;CACpE,IAAM,IAAe,EAAwB,EAAO,EAC9C,IAAiB,EAAwB,EAAS;AAExD,KAAI,CAAC,KAAgB,CAAC,EACpB,QAAO;AAGT,MAAK,IAAM,KAAO;EAAC;EAAS;EAAS;EAAQ,EAAW;AACtD,MAAI,EAAa,KAAO,EAAe,GACrC,QAAO;AAET,MAAI,EAAa,KAAO,EAAe,GACrC,QAAO;;AAcX,QAVI,EAAa,cAAc,CAAC,EAAe,aACtC,KAEL,CAAC,EAAa,cAAc,EAAe,aACtC,IAEL,EAAa,cAAc,EAAe,aACrC,EAAa,WAAW,cAAc,EAAe,WAAW,GAGlE;;AAGT,SAAS,EAAwB,GAAiB;CAEhD,IAAM,CAAC,KADS,EAAQ,MAAM,CAAC,QAAQ,MAAM,GACtB,CAAQ,MAAM,IAAI,EACnC,CAAC,GAAM,KAAc,EAAa,MAAM,KAAK,EAAE,EAC/C,IAAQ,EAAK,MAAM,IAAI;AAE7B,KAAI,EAAM,WAAW,EACnB,QAAO;CAGT,IAAM,CAAC,GAAO,GAAO,KAAS,EAAM,KAAK,MAAS,OAAO,EAAK,CAAC;AAO/D,QALG;EAAC;EAAO;EAAO;EAAM,CAAC,OAAO,MAAS,OAAO,UAAU,EAAK,IAAI,KAAQ,EAAE,GAKtE;EAAE;EAAO;EAAO;EAAO;EAAY,GAHjC;;AAMX,SAAgB,EACd,GACA;CACA,IAAM,IAAgB,EAAgC,EAAW;AACjE,KAAI,CAAC,EAEH,OADA,GAA4B,EACtB,IAAI,EACR,EAAyB,EAAW,CACrC;CAGH,IAAM,IAAa,EACjB,GACA,EACD;AAED,KAAI,MAAe,KAEjB,OADA,GAA4B,EACtB,IAAI,EAA+B,EAAc;AAGzD,KAAI,IAAa,EAEf,OADA,GAA4B,EACtB,IAAI,EAAmC,EAAc;;AAI/D,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,GAA0B;AACxC,KAAI,CAAC,GAAO;AAMV,MALA,GAA4B,EAKxB,EAAY,GAAkB,CAAC,QAAQ,CACzC,OAAM,IAAI,EAA4B,yBAAyB,EAC7D,qBAAqB,IACtB,CAAC;AAIJ,SAAO;;CAGT,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;EACV,CAAC,EACE;AAEJ,KAAI;AACF,MAAc,MAAM,IAAI,EACtB,EACD,CAAC,eAAe;UACV,GAAO;AAUd,QATA,GAA4B,EAIxB,EAAqB,GAAO,IAAI,GAC5B,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,KACX;;AAShD,KANA,EAAoC,EAAW,EAM3C,GAAgB,CAClB,KAAI;AACF,QAAM,IAAI,EAAe,EAAc,CAAC,aAAa;UAC9C,GAAO;AAWd,MAAI,EAAqB,GAAO,IAAI,CAClC,OAAM;AAGR,UAAQ,KACN,wDACA,EACD;;AAKL,QADA,IAAwB,GACjB"}
+{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  usable_tools?: string[] | null;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    error.name === \"AgentServerUnavailableError\");\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  if (typeof serverInfo.version !== \"string\") return null;\n  const trimmed = serverInfo.version.trim();\n  return trimmed || null;\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nfunction compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  return serverInfo;\n}\n"],"mappings":";;;;;;;;AAcA,IAAM,IAA+B,KAC/B,IAA+B,WAExB,IACX,EAAS,cAAc,oBACZ,IACX,oCACW,IACX,gCAME,IAAgD,MAE9C,KAAsB,MACtB,MAAM,QAAQ,GAAY,aAAa,GAClC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CACA;CAEA,YACE,GACA,GACA;EACA,IAAM,IAAsB,GAAS,uBAAuB;AAQ5D,EAPA,MACE,IACI,6EACA,iHACL,EACD,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW,MAC1B,KAAK,sBAAsB;;GAIlB,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,KACV,EAAM,SAAS,+BAEN,IAAb,cAAwD,EAA4B;CAClF,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAAuB;EACjC,IAAM,IAAU,sCAAsC,EAAwC,qCAAqC,EAAc;AAIjJ,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,sCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;;GAIZ,IAAb,cAAoD,EAA4B;CAC9E,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAA8B;EAExC,IAAM,IACJ,2DAFe,IAAgB,iBAAiB,EAAc,MAAM,GAEA,sCAC9B,EAAwC;AAMhF,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,kCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;;GA+BZ,KAA0B,MACrC,GAAgB,IAAI,EAAqB,GAAO,IAAI;AAEtD,SAAgB,IAA6B;AAC3C,KAAwB;;AAG1B,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,EAAsB;AAIhE,QAHK,MAAM,QAAQ,EAAe,GAG3B,EAAe,SAAS,EAAS,GAF/B;;AAKX,SAAgB,EAAe,GAAgB;AAC7C,QACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;;AAQ5B,SAAgB,EAAqB,GAAgB,GAAyB;AAC5E,QACE,EAAe,EAAM,IAAK,EAA6B,WAAW;;AAItE,SAAS,EAAyB,GAA4C;AAG5E,QAFI,OAAO,EAAW,WAAY,YAClB,EAAW,QAAQ,MAC5B,IAF4C;;AAKrD,SAAS,EACP,GACe;CACf,IAAM,IAAU,EAAyB,EAAW;AAIpD,QAHI,CAAC,KAAW,EAAQ,aAAa,KAAK,IACjC,OAEF;;AAGT,SAAgB,EACd,GACe;CACf,IAAM,IAAU,EAAgC,EAAW;AAI3D,QAHI,CAAC,KAAW,CAAC,EAAwB,EAAQ,GACxC,OAEF;;AAGT,SAAS,EAA2B,GAAgB,GAAkB;CACpE,IAAM,IAAe,EAAwB,EAAO,EAC9C,IAAiB,EAAwB,EAAS;AAExD,KAAI,CAAC,KAAgB,CAAC,EACpB,QAAO;AAGT,MAAK,IAAM,KAAO;EAAC;EAAS;EAAS;EAAQ,EAAW;AACtD,MAAI,EAAa,KAAO,EAAe,GACrC,QAAO;AAET,MAAI,EAAa,KAAO,EAAe,GACrC,QAAO;;AAcX,QAVI,EAAa,cAAc,CAAC,EAAe,aACtC,KAEL,CAAC,EAAa,cAAc,EAAe,aACtC,IAEL,EAAa,cAAc,EAAe,aACrC,EAAa,WAAW,cAAc,EAAe,WAAW,GAGlE;;AAGT,SAAS,EAAwB,GAAiB;CAEhD,IAAM,CAAC,KADS,EAAQ,MAAM,CAAC,QAAQ,MAAM,GACtB,CAAQ,MAAM,IAAI,EACnC,CAAC,GAAM,KAAc,EAAa,MAAM,KAAK,EAAE,EAC/C,IAAQ,EAAK,MAAM,IAAI;AAE7B,KAAI,EAAM,WAAW,EACnB,QAAO;CAGT,IAAM,CAAC,GAAO,GAAO,KAAS,EAAM,KAAK,MAAS,OAAO,EAAK,CAAC;AAO/D,QALG;EAAC;EAAO;EAAO;EAAM,CAAC,OAAO,MAAS,OAAO,UAAU,EAAK,IAAI,KAAQ,EAAE,GAKtE;EAAE;EAAO;EAAO;EAAO;EAAY,GAHjC;;AAMX,SAAgB,EACd,GACA;CACA,IAAM,IAAgB,EAAgC,EAAW;AACjE,KAAI,CAAC,EAEH,OADA,GAA4B,EACtB,IAAI,EACR,EAAyB,EAAW,CACrC;CAGH,IAAM,IAAa,EACjB,GACA,EACD;AAED,KAAI,MAAe,KAEjB,OADA,GAA4B,EACtB,IAAI,EAA+B,EAAc;AAGzD,KAAI,IAAa,EAEf,OADA,GAA4B,EACtB,IAAI,EAAmC,EAAc;;AAI/D,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,GAA0B;AACxC,KAAI,CAAC,GAAO;AAMV,MALA,GAA4B,EAKxB,EAAY,GAAkB,CAAC,QAAQ,CACzC,OAAM,IAAI,EAA4B,yBAAyB,EAC7D,qBAAqB,IACtB,CAAC;AAIJ,SAAO;;CAGT,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;EACV,CAAC,EACE;AAEJ,KAAI;AACF,MAAc,MAAM,IAAI,EACtB,EACD,CAAC,eAAe;UACV,GAAO;AAUd,QATA,GAA4B,EAIxB,EAAqB,GAAO,IAAI,GAC5B,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,KACX;;AAShD,KANA,EAAoC,EAAW,EAM3C,GAAgB,CAClB,KAAI;AACF,QAAM,IAAI,EAAe,EAAc,CAAC,aAAa;UAC9C,GAAO;AAWd,MAAI,EAAqB,GAAO,IAAI,CAClC,OAAM;AAGR,UAAQ,KACN,wDACA,EACD;;AAKL,QADA,IAAwB,GACjB"}

package/dist/api/agent-server-home.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../node_modules/@openhands/typescript-client/dist/client/file-client.cjs`),t=require(`./agent-server-client-options.cjs`);var n=new Map;function r(e){return/^([/\\]|[a-zA-Z]:[/\\])/.test(e)}function i(e,t){return`${e.replace(/[/\\]+$/,``)}/${t.replace(/^[/\\]+/,``)}`}async function a(r={}){let i=t.getAgentServerClientOptions(r),a=i.host,o=n.get(a);if(o)return o;let s=(async()=>{let{home:t}=await new e.FileClient(i).getHome();if(!t||typeof t!=`string`)throw Error(`Agent server returned an empty home directory`);return t.replace(/[/\\]+$/,``)})();n.set(a,s);try{return await s}catch(e){throw n.delete(a),e}}async function o(e,t={}){let n=e.replace(/[/\\]+$/,``);return n?r(n)?n:i(await a(t),n):a(t)}exports.resolveAbsoluteAgentServerPath=o;
+require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../node_modules/@openhands/typescript-client/dist/client/file-client.cjs`);require(`../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`./agent-server-client-options.cjs`);var n=new Map;function r(e){return/^([/\\]|[a-zA-Z]:[/\\])/.test(e)}function i(e,t){return`${e.replace(/[/\\]+$/,``)}/${t.replace(/^[/\\]+/,``)}`}async function a(r={}){let i=t.getAgentServerClientOptions(r),a=i.host,o=n.get(a);if(o)return o;let s=(async()=>{let{home:t}=await new e.FileClient(i).getHome();if(!t||typeof t!=`string`)throw Error(`Agent server returned an empty home directory`);return t.replace(/[/\\]+$/,``)})();n.set(a,s);try{return await s}catch(e){throw n.delete(a),e}}async function o(e,t={}){let n=e.replace(/[/\\]+$/,``);return n?r(n)?n:i(await a(t),n):a(t)}exports.resolveAbsoluteAgentServerPath=o;
 //# sourceMappingURL=agent-server-home.cjs.map

package/dist/api/agent-server-home.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-home.cjs","names":[],"sources":["../../src/api/agent-server-home.ts"],"sourcesContent":["// @spec WUP-001 — Resolve relative working dirs against /api/file/home\nimport { FileClient } from \"@openhands/typescript-client/clients\";\nimport {\n  getAgentServerClientOptions,\n  type AgentServerClientOverrides,\n} from \"./agent-server-client-options\";\n\n/**\n * Cache the agent-server's home directory per host so we only round-trip\n * `/api/file/home` once per backend. The home dir is effectively static for\n * the lifetime of a running agent-server (it's `Path.home()` on the host),\n * so caching is safe and avoids hammering the endpoint on every upload.\n *\n * The cache holds `Promise<string>` rather than `string` so concurrent\n * callers share a single in-flight request.\n */\nconst homeDirCache = new Map<string, Promise<string>>();\n\nfunction isAbsolutePath(path: string): boolean {\n  // Treat POSIX-style and Windows-style absolute paths as absolute.\n  // The agent-server itself is POSIX on Linux/macOS and uses `\\\\` style\n  // on Windows; we just need to know whether `Path(path).is_absolute()`\n  // would return true on the server.\n  //\n  // Patterns covered:\n  //   POSIX absolute:      /foo/bar\n  //   Windows drive:       C:\\foo  or  C:/foo\n  //   Windows UNC:         \\\\server\\share  (starts with `\\`, matches `[/\\\\]`)\n  return /^([/\\\\]|[a-zA-Z]:[/\\\\])/.test(path);\n}\n\n/**\n * Join a parent directory and a relative child segment with a forward slash,\n * collapsing any duplicate separators that result from the join.\n */\nfunction joinPath(parent: string, child: string): string {\n  const left = parent.replace(/[/\\\\]+$/, \"\");\n  const right = child.replace(/^[/\\\\]+/, \"\");\n  return `${left}/${right}`;\n}\n\n/**\n * Fetch and cache the agent-server's home directory via `GET /api/file/home`.\n *\n * The result is the absolute path returned by `Path.home()` on the\n * agent-server host (e.g. `/Users/foo`, `/root`, or `C:\\\\Users\\\\Foo`). This\n * is the most reliable absolute, writable anchor the agent-server API\n * currently exposes — `/server_info` doesn't include the process CWD.\n *\n * @param overrides Same shape as `getAgentServerClientOptions` — lets cloud\n *   sandboxes pass a `conversationUrl` + `sessionApiKey` so the lookup goes\n *   to the per-conversation runtime rather than the bundled local backend.\n */\nexport async function getAgentServerHomeDir(\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const options = getAgentServerClientOptions(overrides);\n  const cacheKey = options.host;\n  const cached = homeDirCache.get(cacheKey);\n  if (cached) return cached;\n\n  const lookup = (async () => {\n    const { home } = await new FileClient(options).getHome();\n    if (!home || typeof home !== \"string\") {\n      throw new Error(\"Agent server returned an empty home directory\");\n    }\n    return home.replace(/[/\\\\]+$/, \"\");\n  })();\n\n  homeDirCache.set(cacheKey, lookup);\n  try {\n    return await lookup;\n  } catch (error) {\n    // Don't cache failures — let the next call retry.\n    homeDirCache.delete(cacheKey);\n    throw error;\n  }\n}\n\n/** Test-only helper. */\nexport function clearAgentServerHomeDirCache(): void {\n  homeDirCache.clear();\n}\n\n/**\n * Resolve a (possibly relative) working dir to an absolute path the\n * agent-server's file APIs will accept.\n *\n * - If `workingDir` is already absolute, returns it unchanged.\n * - Otherwise prepends the agent-server's home dir (looked up via\n *   `/api/file/home` and cached). This matches how the published binary\n *   and Docker entrypoint expect to anchor relative working dirs: under\n *   `~/workspace/project` rather than the filesystem root.\n *\n * Why this matters: the agent-server's `/api/file/upload` endpoint requires\n * an absolute path and `mkdir -p`s the parent. Naively prepending `/` to a\n * relative dir like `workspace/project/<hex>` produces `/workspace/...`,\n * which on macOS lives under the SIP-protected read-only root and fails\n * with `Errno 30: Read-only file system: '/workspace'`. Resolving against\n * `Path.home()` instead puts the path somewhere reliably writable.\n */\nexport async function resolveAbsoluteAgentServerPath(\n  workingDir: string,\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const trimmed = workingDir.replace(/[/\\\\]+$/, \"\");\n  if (!trimmed) {\n    return getAgentServerHomeDir(overrides);\n  }\n  if (isAbsolutePath(trimmed)) return trimmed;\n\n  const home = await getAgentServerHomeDir(overrides);\n  return joinPath(home, trimmed);\n}\n"],"mappings":"wLAgBA,IAAM,EAAe,IAAI,IAEzB,SAAS,EAAe,EAAuB,CAU7C,MAAO,0BAA0B,KAAK,EAAK,CAO7C,SAAS,EAAS,EAAgB,EAAuB,CAGvD,MAAO,GAFM,EAAO,QAAQ,UAAW,GAE7B,CAAK,GADD,EAAM,QAAQ,UAAW,GACrB,GAepB,eAAsB,EACpB,EAAwC,EAAE,CACzB,CACjB,IAAM,EAAU,EAAA,4BAA4B,EAAU,CAChD,EAAW,EAAQ,KACnB,EAAS,EAAa,IAAI,EAAS,CACzC,GAAI,EAAQ,OAAO,EAEnB,IAAM,GAAU,SAAY,CAC1B,GAAM,CAAE,QAAS,MAAM,IAAI,EAAA,WAAW,EAAQ,CAAC,SAAS,CACxD,GAAI,CAAC,GAAQ,OAAO,GAAS,SAC3B,MAAU,MAAM,gDAAgD,CAElE,OAAO,EAAK,QAAQ,UAAW,GAAG,IAChC,CAEJ,EAAa,IAAI,EAAU,EAAO,CAClC,GAAI,CACF,OAAO,MAAM,QACN,EAAO,CAGd,MADA,EAAa,OAAO,EAAS,CACvB,GA0BV,eAAsB,EACpB,EACA,EAAwC,EAAE,CACzB,CACjB,IAAM,EAAU,EAAW,QAAQ,UAAW,GAAG,CAOjD,OANK,EAGD,EAAe,EAAQ,CAAS,EAG7B,EAAS,MADG,EAAsB,EAAU,CAC7B,EAAQ,CALrB,EAAsB,EAAU"}
+{"version":3,"file":"agent-server-home.cjs","names":[],"sources":["../../src/api/agent-server-home.ts"],"sourcesContent":["// @spec WUP-001 — Resolve relative working dirs against /api/file/home\nimport { FileClient } from \"@openhands/typescript-client/clients\";\nimport {\n  getAgentServerClientOptions,\n  type AgentServerClientOverrides,\n} from \"./agent-server-client-options\";\n\n/**\n * Cache the agent-server's home directory per host so we only round-trip\n * `/api/file/home` once per backend. The home dir is effectively static for\n * the lifetime of a running agent-server (it's `Path.home()` on the host),\n * so caching is safe and avoids hammering the endpoint on every upload.\n *\n * The cache holds `Promise<string>` rather than `string` so concurrent\n * callers share a single in-flight request.\n */\nconst homeDirCache = new Map<string, Promise<string>>();\n\nfunction isAbsolutePath(path: string): boolean {\n  // Treat POSIX-style and Windows-style absolute paths as absolute.\n  // The agent-server itself is POSIX on Linux/macOS and uses `\\\\` style\n  // on Windows; we just need to know whether `Path(path).is_absolute()`\n  // would return true on the server.\n  //\n  // Patterns covered:\n  //   POSIX absolute:      /foo/bar\n  //   Windows drive:       C:\\foo  or  C:/foo\n  //   Windows UNC:         \\\\server\\share  (starts with `\\`, matches `[/\\\\]`)\n  return /^([/\\\\]|[a-zA-Z]:[/\\\\])/.test(path);\n}\n\n/**\n * Join a parent directory and a relative child segment with a forward slash,\n * collapsing any duplicate separators that result from the join.\n */\nfunction joinPath(parent: string, child: string): string {\n  const left = parent.replace(/[/\\\\]+$/, \"\");\n  const right = child.replace(/^[/\\\\]+/, \"\");\n  return `${left}/${right}`;\n}\n\n/**\n * Fetch and cache the agent-server's home directory via `GET /api/file/home`.\n *\n * The result is the absolute path returned by `Path.home()` on the\n * agent-server host (e.g. `/Users/foo`, `/root`, or `C:\\\\Users\\\\Foo`). This\n * is the most reliable absolute, writable anchor the agent-server API\n * currently exposes — `/server_info` doesn't include the process CWD.\n *\n * @param overrides Same shape as `getAgentServerClientOptions` — lets cloud\n *   sandboxes pass a `conversationUrl` + `sessionApiKey` so the lookup goes\n *   to the per-conversation runtime rather than the bundled local backend.\n */\nexport async function getAgentServerHomeDir(\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const options = getAgentServerClientOptions(overrides);\n  const cacheKey = options.host;\n  const cached = homeDirCache.get(cacheKey);\n  if (cached) return cached;\n\n  const lookup = (async () => {\n    const { home } = await new FileClient(options).getHome();\n    if (!home || typeof home !== \"string\") {\n      throw new Error(\"Agent server returned an empty home directory\");\n    }\n    return home.replace(/[/\\\\]+$/, \"\");\n  })();\n\n  homeDirCache.set(cacheKey, lookup);\n  try {\n    return await lookup;\n  } catch (error) {\n    // Don't cache failures — let the next call retry.\n    homeDirCache.delete(cacheKey);\n    throw error;\n  }\n}\n\n/** Test-only helper. */\nexport function clearAgentServerHomeDirCache(): void {\n  homeDirCache.clear();\n}\n\n/**\n * Resolve a (possibly relative) working dir to an absolute path the\n * agent-server's file APIs will accept.\n *\n * - If `workingDir` is already absolute, returns it unchanged.\n * - Otherwise prepends the agent-server's home dir (looked up via\n *   `/api/file/home` and cached). This matches how the published binary\n *   and Docker entrypoint expect to anchor relative working dirs: under\n *   `~/workspace/project` rather than the filesystem root.\n *\n * Why this matters: the agent-server's `/api/file/upload` endpoint requires\n * an absolute path and `mkdir -p`s the parent. Naively prepending `/` to a\n * relative dir like `workspace/project/<hex>` produces `/workspace/...`,\n * which on macOS lives under the SIP-protected read-only root and fails\n * with `Errno 30: Read-only file system: '/workspace'`. Resolving against\n * `Path.home()` instead puts the path somewhere reliably writable.\n */\nexport async function resolveAbsoluteAgentServerPath(\n  workingDir: string,\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const trimmed = workingDir.replace(/[/\\\\]+$/, \"\");\n  if (!trimmed) {\n    return getAgentServerHomeDir(overrides);\n  }\n  if (isAbsolutePath(trimmed)) return trimmed;\n\n  const home = await getAgentServerHomeDir(overrides);\n  return joinPath(home, trimmed);\n}\n"],"mappings":"uQAgBA,IAAM,EAAe,IAAI,IAEzB,SAAS,EAAe,EAAuB,CAU7C,MAAO,0BAA0B,KAAK,EAAK,CAO7C,SAAS,EAAS,EAAgB,EAAuB,CAGvD,MAAO,GAFM,EAAO,QAAQ,UAAW,GAE7B,CAAK,GADD,EAAM,QAAQ,UAAW,GACrB,GAepB,eAAsB,EACpB,EAAwC,EAAE,CACzB,CACjB,IAAM,EAAU,EAAA,4BAA4B,EAAU,CAChD,EAAW,EAAQ,KACnB,EAAS,EAAa,IAAI,EAAS,CACzC,GAAI,EAAQ,OAAO,EAEnB,IAAM,GAAU,SAAY,CAC1B,GAAM,CAAE,QAAS,MAAM,IAAI,EAAA,WAAW,EAAQ,CAAC,SAAS,CACxD,GAAI,CAAC,GAAQ,OAAO,GAAS,SAC3B,MAAU,MAAM,gDAAgD,CAElE,OAAO,EAAK,QAAQ,UAAW,GAAG,IAChC,CAEJ,EAAa,IAAI,EAAU,EAAO,CAClC,GAAI,CACF,OAAO,MAAM,QACN,EAAO,CAGd,MADA,EAAa,OAAO,EAAS,CACvB,GA0BV,eAAsB,EACpB,EACA,EAAwC,EAAE,CACzB,CACjB,IAAM,EAAU,EAAW,QAAQ,UAAW,GAAG,CAOjD,OANK,EAGD,EAAe,EAAQ,CAAS,EAG7B,EAAS,MADG,EAAsB,EAAU,CAC7B,EAAQ,CALrB,EAAsB,EAAU"}

package/dist/api/agent-server-home.js

@@ -1,4 +1,5 @@
 import { FileClient as e } from "../node_modules/@openhands/typescript-client/dist/client/file-client.js";
+import "../node_modules/@openhands/typescript-client/dist/clients.js";
 import { getAgentServerClientOptions as t } from "./agent-server-client-options.js";
 //#region src/api/agent-server-home.ts
 var n = /* @__PURE__ */ new Map();

package/dist/api/agent-server-home.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-home.js","names":[],"sources":["../../src/api/agent-server-home.ts"],"sourcesContent":["// @spec WUP-001 — Resolve relative working dirs against /api/file/home\nimport { FileClient } from \"@openhands/typescript-client/clients\";\nimport {\n  getAgentServerClientOptions,\n  type AgentServerClientOverrides,\n} from \"./agent-server-client-options\";\n\n/**\n * Cache the agent-server's home directory per host so we only round-trip\n * `/api/file/home` once per backend. The home dir is effectively static for\n * the lifetime of a running agent-server (it's `Path.home()` on the host),\n * so caching is safe and avoids hammering the endpoint on every upload.\n *\n * The cache holds `Promise<string>` rather than `string` so concurrent\n * callers share a single in-flight request.\n */\nconst homeDirCache = new Map<string, Promise<string>>();\n\nfunction isAbsolutePath(path: string): boolean {\n  // Treat POSIX-style and Windows-style absolute paths as absolute.\n  // The agent-server itself is POSIX on Linux/macOS and uses `\\\\` style\n  // on Windows; we just need to know whether `Path(path).is_absolute()`\n  // would return true on the server.\n  //\n  // Patterns covered:\n  //   POSIX absolute:      /foo/bar\n  //   Windows drive:       C:\\foo  or  C:/foo\n  //   Windows UNC:         \\\\server\\share  (starts with `\\`, matches `[/\\\\]`)\n  return /^([/\\\\]|[a-zA-Z]:[/\\\\])/.test(path);\n}\n\n/**\n * Join a parent directory and a relative child segment with a forward slash,\n * collapsing any duplicate separators that result from the join.\n */\nfunction joinPath(parent: string, child: string): string {\n  const left = parent.replace(/[/\\\\]+$/, \"\");\n  const right = child.replace(/^[/\\\\]+/, \"\");\n  return `${left}/${right}`;\n}\n\n/**\n * Fetch and cache the agent-server's home directory via `GET /api/file/home`.\n *\n * The result is the absolute path returned by `Path.home()` on the\n * agent-server host (e.g. `/Users/foo`, `/root`, or `C:\\\\Users\\\\Foo`). This\n * is the most reliable absolute, writable anchor the agent-server API\n * currently exposes — `/server_info` doesn't include the process CWD.\n *\n * @param overrides Same shape as `getAgentServerClientOptions` — lets cloud\n *   sandboxes pass a `conversationUrl` + `sessionApiKey` so the lookup goes\n *   to the per-conversation runtime rather than the bundled local backend.\n */\nexport async function getAgentServerHomeDir(\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const options = getAgentServerClientOptions(overrides);\n  const cacheKey = options.host;\n  const cached = homeDirCache.get(cacheKey);\n  if (cached) return cached;\n\n  const lookup = (async () => {\n    const { home } = await new FileClient(options).getHome();\n    if (!home || typeof home !== \"string\") {\n      throw new Error(\"Agent server returned an empty home directory\");\n    }\n    return home.replace(/[/\\\\]+$/, \"\");\n  })();\n\n  homeDirCache.set(cacheKey, lookup);\n  try {\n    return await lookup;\n  } catch (error) {\n    // Don't cache failures — let the next call retry.\n    homeDirCache.delete(cacheKey);\n    throw error;\n  }\n}\n\n/** Test-only helper. */\nexport function clearAgentServerHomeDirCache(): void {\n  homeDirCache.clear();\n}\n\n/**\n * Resolve a (possibly relative) working dir to an absolute path the\n * agent-server's file APIs will accept.\n *\n * - If `workingDir` is already absolute, returns it unchanged.\n * - Otherwise prepends the agent-server's home dir (looked up via\n *   `/api/file/home` and cached). This matches how the published binary\n *   and Docker entrypoint expect to anchor relative working dirs: under\n *   `~/workspace/project` rather than the filesystem root.\n *\n * Why this matters: the agent-server's `/api/file/upload` endpoint requires\n * an absolute path and `mkdir -p`s the parent. Naively prepending `/` to a\n * relative dir like `workspace/project/<hex>` produces `/workspace/...`,\n * which on macOS lives under the SIP-protected read-only root and fails\n * with `Errno 30: Read-only file system: '/workspace'`. Resolving against\n * `Path.home()` instead puts the path somewhere reliably writable.\n */\nexport async function resolveAbsoluteAgentServerPath(\n  workingDir: string,\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const trimmed = workingDir.replace(/[/\\\\]+$/, \"\");\n  if (!trimmed) {\n    return getAgentServerHomeDir(overrides);\n  }\n  if (isAbsolutePath(trimmed)) return trimmed;\n\n  const home = await getAgentServerHomeDir(overrides);\n  return joinPath(home, trimmed);\n}\n"],"mappings":";;;AAgBA,IAAM,oBAAe,IAAI,KAA8B;AAEvD,SAAS,EAAe,GAAuB;AAU7C,QAAO,0BAA0B,KAAK,EAAK;;AAO7C,SAAS,EAAS,GAAgB,GAAuB;AAGvD,QAAO,GAFM,EAAO,QAAQ,WAAW,GAE7B,CAAK,GADD,EAAM,QAAQ,WAAW,GACrB;;AAepB,eAAsB,EACpB,IAAwC,EAAE,EACzB;CACjB,IAAM,IAAU,EAA4B,EAAU,EAChD,IAAW,EAAQ,MACnB,IAAS,EAAa,IAAI,EAAS;AACzC,KAAI,EAAQ,QAAO;CAEnB,IAAM,KAAU,YAAY;EAC1B,IAAM,EAAE,YAAS,MAAM,IAAI,EAAW,EAAQ,CAAC,SAAS;AACxD,MAAI,CAAC,KAAQ,OAAO,KAAS,SAC3B,OAAU,MAAM,gDAAgD;AAElE,SAAO,EAAK,QAAQ,WAAW,GAAG;KAChC;AAEJ,GAAa,IAAI,GAAU,EAAO;AAClC,KAAI;AACF,SAAO,MAAM;UACN,GAAO;AAGd,QADA,EAAa,OAAO,EAAS,EACvB;;;AA0BV,eAAsB,EACpB,GACA,IAAwC,EAAE,EACzB;CACjB,IAAM,IAAU,EAAW,QAAQ,WAAW,GAAG;AAOjD,QANK,IAGD,EAAe,EAAQ,GAAS,IAG7B,EAAS,MADG,EAAsB,EAAU,EAC7B,EAAQ,GALrB,EAAsB,EAAU"}
+{"version":3,"file":"agent-server-home.js","names":[],"sources":["../../src/api/agent-server-home.ts"],"sourcesContent":["// @spec WUP-001 — Resolve relative working dirs against /api/file/home\nimport { FileClient } from \"@openhands/typescript-client/clients\";\nimport {\n  getAgentServerClientOptions,\n  type AgentServerClientOverrides,\n} from \"./agent-server-client-options\";\n\n/**\n * Cache the agent-server's home directory per host so we only round-trip\n * `/api/file/home` once per backend. The home dir is effectively static for\n * the lifetime of a running agent-server (it's `Path.home()` on the host),\n * so caching is safe and avoids hammering the endpoint on every upload.\n *\n * The cache holds `Promise<string>` rather than `string` so concurrent\n * callers share a single in-flight request.\n */\nconst homeDirCache = new Map<string, Promise<string>>();\n\nfunction isAbsolutePath(path: string): boolean {\n  // Treat POSIX-style and Windows-style absolute paths as absolute.\n  // The agent-server itself is POSIX on Linux/macOS and uses `\\\\` style\n  // on Windows; we just need to know whether `Path(path).is_absolute()`\n  // would return true on the server.\n  //\n  // Patterns covered:\n  //   POSIX absolute:      /foo/bar\n  //   Windows drive:       C:\\foo  or  C:/foo\n  //   Windows UNC:         \\\\server\\share  (starts with `\\`, matches `[/\\\\]`)\n  return /^([/\\\\]|[a-zA-Z]:[/\\\\])/.test(path);\n}\n\n/**\n * Join a parent directory and a relative child segment with a forward slash,\n * collapsing any duplicate separators that result from the join.\n */\nfunction joinPath(parent: string, child: string): string {\n  const left = parent.replace(/[/\\\\]+$/, \"\");\n  const right = child.replace(/^[/\\\\]+/, \"\");\n  return `${left}/${right}`;\n}\n\n/**\n * Fetch and cache the agent-server's home directory via `GET /api/file/home`.\n *\n * The result is the absolute path returned by `Path.home()` on the\n * agent-server host (e.g. `/Users/foo`, `/root`, or `C:\\\\Users\\\\Foo`). This\n * is the most reliable absolute, writable anchor the agent-server API\n * currently exposes — `/server_info` doesn't include the process CWD.\n *\n * @param overrides Same shape as `getAgentServerClientOptions` — lets cloud\n *   sandboxes pass a `conversationUrl` + `sessionApiKey` so the lookup goes\n *   to the per-conversation runtime rather than the bundled local backend.\n */\nexport async function getAgentServerHomeDir(\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const options = getAgentServerClientOptions(overrides);\n  const cacheKey = options.host;\n  const cached = homeDirCache.get(cacheKey);\n  if (cached) return cached;\n\n  const lookup = (async () => {\n    const { home } = await new FileClient(options).getHome();\n    if (!home || typeof home !== \"string\") {\n      throw new Error(\"Agent server returned an empty home directory\");\n    }\n    return home.replace(/[/\\\\]+$/, \"\");\n  })();\n\n  homeDirCache.set(cacheKey, lookup);\n  try {\n    return await lookup;\n  } catch (error) {\n    // Don't cache failures — let the next call retry.\n    homeDirCache.delete(cacheKey);\n    throw error;\n  }\n}\n\n/** Test-only helper. */\nexport function clearAgentServerHomeDirCache(): void {\n  homeDirCache.clear();\n}\n\n/**\n * Resolve a (possibly relative) working dir to an absolute path the\n * agent-server's file APIs will accept.\n *\n * - If `workingDir` is already absolute, returns it unchanged.\n * - Otherwise prepends the agent-server's home dir (looked up via\n *   `/api/file/home` and cached). This matches how the published binary\n *   and Docker entrypoint expect to anchor relative working dirs: under\n *   `~/workspace/project` rather than the filesystem root.\n *\n * Why this matters: the agent-server's `/api/file/upload` endpoint requires\n * an absolute path and `mkdir -p`s the parent. Naively prepending `/` to a\n * relative dir like `workspace/project/<hex>` produces `/workspace/...`,\n * which on macOS lives under the SIP-protected read-only root and fails\n * with `Errno 30: Read-only file system: '/workspace'`. Resolving against\n * `Path.home()` instead puts the path somewhere reliably writable.\n */\nexport async function resolveAbsoluteAgentServerPath(\n  workingDir: string,\n  overrides: AgentServerClientOverrides = {},\n): Promise<string> {\n  const trimmed = workingDir.replace(/[/\\\\]+$/, \"\");\n  if (!trimmed) {\n    return getAgentServerHomeDir(overrides);\n  }\n  if (isAbsolutePath(trimmed)) return trimmed;\n\n  const home = await getAgentServerHomeDir(overrides);\n  return joinPath(home, trimmed);\n}\n"],"mappings":";;;;AAgBA,IAAM,oBAAe,IAAI,KAA8B;AAEvD,SAAS,EAAe,GAAuB;AAU7C,QAAO,0BAA0B,KAAK,EAAK;;AAO7C,SAAS,EAAS,GAAgB,GAAuB;AAGvD,QAAO,GAFM,EAAO,QAAQ,WAAW,GAE7B,CAAK,GADD,EAAM,QAAQ,WAAW,GACrB;;AAepB,eAAsB,EACpB,IAAwC,EAAE,EACzB;CACjB,IAAM,IAAU,EAA4B,EAAU,EAChD,IAAW,EAAQ,MACnB,IAAS,EAAa,IAAI,EAAS;AACzC,KAAI,EAAQ,QAAO;CAEnB,IAAM,KAAU,YAAY;EAC1B,IAAM,EAAE,YAAS,MAAM,IAAI,EAAW,EAAQ,CAAC,SAAS;AACxD,MAAI,CAAC,KAAQ,OAAO,KAAS,SAC3B,OAAU,MAAM,gDAAgD;AAElE,SAAO,EAAK,QAAQ,WAAW,GAAG;KAChC;AAEJ,GAAa,IAAI,GAAU,EAAO;AAClC,KAAI;AACF,SAAO,MAAM;UACN,GAAO;AAGd,QADA,EAAa,OAAO,EAAS,EACvB;;;AA0BV,eAAsB,EACpB,GACA,IAAwC,EAAE,EACzB;CACjB,IAAM,IAAU,EAAW,QAAQ,WAAW,GAAG;AAOjD,QANK,IAGD,EAAe,EAAQ,GAAS,IAG7B,EAAS,MADG,EAAsB,EAAU,EAC7B,EAAQ,GALrB,EAAsB,EAAU"}

package/dist/api/cloud/agent-profiles-service.api.cjs

@@ -0,0 +1,2 @@
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`./proxy.cjs`);var n=`/api/agent-profiles`;function r(){let t=e.getActiveBackend().backend;if(t.kind!==`cloud`)throw Error(`Cloud agent-profile call requires a cloud backend.`);return t}async function i(){return t.callCloudProxy({backend:r(),method:`GET`,path:n})}async function a(e){return t.callCloudProxy({backend:r(),method:`GET`,path:`${n}/${encodeURIComponent(e)}`})}async function o(e,i){return t.callCloudProxy({backend:r(),method:`POST`,path:`${n}/${encodeURIComponent(e)}`,body:i})}async function s(e){return t.callCloudProxy({backend:r(),method:`DELETE`,path:`${n}/${encodeURIComponent(e)}`})}async function c(e,i){return t.callCloudProxy({backend:r(),method:`POST`,path:`${n}/${encodeURIComponent(e)}/rename`,body:{new_name:i}})}async function l(e){return t.callCloudProxy({backend:r(),method:`POST`,path:`${n}/${encodeURIComponent(e)}/activate`,body:{}})}exports.activateCloudAgentProfile=l,exports.deleteCloudAgentProfile=s,exports.getCloudAgentProfile=a,exports.listCloudAgentProfiles=i,exports.renameCloudAgentProfile=c,exports.saveCloudAgentProfile=o;
+//# sourceMappingURL=agent-profiles-service.api.cjs.map

package/dist/api/cloud/agent-profiles-service.api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profiles-service.api.cjs","names":[],"sources":["../../../src/api/cloud/agent-profiles-service.api.ts"],"sourcesContent":["import type {\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * Cloud transport for the Agent Profiles surface. The cloud enterprise\n * app-server exposes the SAME `/api/agent-profiles` contract as the local\n * agent-server (paths + response shapes mirror `agent_profiles_router.py`),\n * but cloud calls authenticate with the backend's bearer token + `X-Org-Id`\n * and must go through {@link callCloudProxy} — not the direct\n * `AgentProfilesClient` (which speaks `X-Session-API-Key` to a local host).\n *\n * The org is resolved server-side from the auth session (`EFFECTIVE_ORG_ID`),\n * so — unlike org LLM profiles — no `{org_id}` path segment is needed here.\n *\n * Mirrors the pattern in `cloud/settings-service.api.ts`. Consumed by\n * `AgentProfilesService` on the cloud path.\n */\n\nconst BASE = \"/api/agent-profiles\";\n\nfunction activeCloudBackend(): Backend {\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\"Cloud agent-profile call requires a cloud backend.\");\n  }\n  return active;\n}\n\nexport async function listCloudAgentProfiles(): Promise<AgentProfileListResponse> {\n  return callCloudProxy<AgentProfileListResponse>({\n    backend: activeCloudBackend(),\n    method: \"GET\",\n    path: BASE,\n  });\n}\n\nexport async function getCloudAgentProfile(\n  name: string,\n): Promise<AgentProfileDetailResponse> {\n  return callCloudProxy<AgentProfileDetailResponse>({\n    backend: activeCloudBackend(),\n    method: \"GET\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function saveCloudAgentProfile(\n  name: string,\n  profile: AgentProfileSaveInput,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n    body: profile,\n  });\n}\n\nexport async function deleteCloudAgentProfile(\n  name: string,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"DELETE\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function renameCloudAgentProfile(\n  name: string,\n  newName: string,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(name)}/rename`,\n    body: { new_name: newName },\n  });\n}\n\nexport async function activateCloudAgentProfile(\n  profileId: string,\n): Promise<ActivateAgentProfileResponse> {\n  return callCloudProxy<ActivateAgentProfileResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(profileId)}/activate`,\n    body: {},\n  });\n}\n"],"mappings":"iIA0BA,IAAM,EAAO,sBAEb,SAAS,GAA8B,CACrC,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAClC,GAAI,EAAO,OAAS,QAClB,MAAU,MAAM,qDAAqD,CAEvE,OAAO,EAGT,eAAsB,GAA4D,CAChF,OAAO,EAAA,eAAyC,CAC9C,QAAS,GAAoB,CAC7B,OAAQ,MACR,KAAM,EACP,CAAC,CAGJ,eAAsB,EACpB,EACqC,CACrC,OAAO,EAAA,eAA2C,CAChD,QAAS,GAAoB,CAC7B,OAAQ,MACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GAC1C,CAAC,CAGJ,eAAsB,EACpB,EACA,EACuC,CACvC,OAAO,EAAA,eAA6C,CAClD,QAAS,GAAoB,CAC7B,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GACzC,KAAM,EACP,CAAC,CAGJ,eAAsB,EACpB,EACuC,CACvC,OAAO,EAAA,eAA6C,CAClD,QAAS,GAAoB,CAC7B,OAAQ,SACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GAC1C,CAAC,CAGJ,eAAsB,EACpB,EACA,EACuC,CACvC,OAAO,EAAA,eAA6C,CAClD,QAAS,GAAoB,CAC7B,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC,SAC1C,KAAM,CAAE,SAAU,EAAS,CAC5B,CAAC,CAGJ,eAAsB,EACpB,EACuC,CACvC,OAAO,EAAA,eAA6C,CAClD,QAAS,GAAoB,CAC7B,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAU,CAAC,WAC/C,KAAM,EAAE,CACT,CAAC"}

package/dist/api/cloud/agent-profiles-service.api.d.ts

@@ -0,0 +1,7 @@
+import type { AgentProfileSaveInput, AgentProfileListResponse, AgentProfileDetailResponse, AgentProfileMutationResponse, ActivateAgentProfileResponse } from "@openhands/typescript-client";
+export declare function listCloudAgentProfiles(): Promise<AgentProfileListResponse>;
+export declare function getCloudAgentProfile(name: string): Promise<AgentProfileDetailResponse>;
+export declare function saveCloudAgentProfile(name: string, profile: AgentProfileSaveInput): Promise<AgentProfileMutationResponse>;
+export declare function deleteCloudAgentProfile(name: string): Promise<AgentProfileMutationResponse>;
+export declare function renameCloudAgentProfile(name: string, newName: string): Promise<AgentProfileMutationResponse>;
+export declare function activateCloudAgentProfile(profileId: string): Promise<ActivateAgentProfileResponse>;

package/dist/api/cloud/agent-profiles-service.api.js

@@ -0,0 +1,58 @@
+import { getActiveBackend as e } from "../backend-registry/active-store.js";
+import { callCloudProxy as t } from "./proxy.js";
+//#region src/api/cloud/agent-profiles-service.api.ts
+var n = "/api/agent-profiles";
+function r() {
+	let t = e().backend;
+	if (t.kind !== "cloud") throw Error("Cloud agent-profile call requires a cloud backend.");
+	return t;
+}
+async function i() {
+	return t({
+		backend: r(),
+		method: "GET",
+		path: n
+	});
+}
+async function a(e) {
+	return t({
+		backend: r(),
+		method: "GET",
+		path: `${n}/${encodeURIComponent(e)}`
+	});
+}
+async function o(e, i) {
+	return t({
+		backend: r(),
+		method: "POST",
+		path: `${n}/${encodeURIComponent(e)}`,
+		body: i
+	});
+}
+async function s(e) {
+	return t({
+		backend: r(),
+		method: "DELETE",
+		path: `${n}/${encodeURIComponent(e)}`
+	});
+}
+async function c(e, i) {
+	return t({
+		backend: r(),
+		method: "POST",
+		path: `${n}/${encodeURIComponent(e)}/rename`,
+		body: { new_name: i }
+	});
+}
+async function l(e) {
+	return t({
+		backend: r(),
+		method: "POST",
+		path: `${n}/${encodeURIComponent(e)}/activate`,
+		body: {}
+	});
+}
+//#endregion
+export { l as activateCloudAgentProfile, s as deleteCloudAgentProfile, a as getCloudAgentProfile, i as listCloudAgentProfiles, c as renameCloudAgentProfile, o as saveCloudAgentProfile };
+
+//# sourceMappingURL=agent-profiles-service.api.js.map

package/dist/api/cloud/agent-profiles-service.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-profiles-service.api.js","names":[],"sources":["../../../src/api/cloud/agent-profiles-service.api.ts"],"sourcesContent":["import type {\n  AgentProfileSaveInput,\n  AgentProfileListResponse,\n  AgentProfileDetailResponse,\n  AgentProfileMutationResponse,\n  ActivateAgentProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * Cloud transport for the Agent Profiles surface. The cloud enterprise\n * app-server exposes the SAME `/api/agent-profiles` contract as the local\n * agent-server (paths + response shapes mirror `agent_profiles_router.py`),\n * but cloud calls authenticate with the backend's bearer token + `X-Org-Id`\n * and must go through {@link callCloudProxy} — not the direct\n * `AgentProfilesClient` (which speaks `X-Session-API-Key` to a local host).\n *\n * The org is resolved server-side from the auth session (`EFFECTIVE_ORG_ID`),\n * so — unlike org LLM profiles — no `{org_id}` path segment is needed here.\n *\n * Mirrors the pattern in `cloud/settings-service.api.ts`. Consumed by\n * `AgentProfilesService` on the cloud path.\n */\n\nconst BASE = \"/api/agent-profiles\";\n\nfunction activeCloudBackend(): Backend {\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\"Cloud agent-profile call requires a cloud backend.\");\n  }\n  return active;\n}\n\nexport async function listCloudAgentProfiles(): Promise<AgentProfileListResponse> {\n  return callCloudProxy<AgentProfileListResponse>({\n    backend: activeCloudBackend(),\n    method: \"GET\",\n    path: BASE,\n  });\n}\n\nexport async function getCloudAgentProfile(\n  name: string,\n): Promise<AgentProfileDetailResponse> {\n  return callCloudProxy<AgentProfileDetailResponse>({\n    backend: activeCloudBackend(),\n    method: \"GET\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function saveCloudAgentProfile(\n  name: string,\n  profile: AgentProfileSaveInput,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n    body: profile,\n  });\n}\n\nexport async function deleteCloudAgentProfile(\n  name: string,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"DELETE\",\n    path: `${BASE}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function renameCloudAgentProfile(\n  name: string,\n  newName: string,\n): Promise<AgentProfileMutationResponse> {\n  return callCloudProxy<AgentProfileMutationResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(name)}/rename`,\n    body: { new_name: newName },\n  });\n}\n\nexport async function activateCloudAgentProfile(\n  profileId: string,\n): Promise<ActivateAgentProfileResponse> {\n  return callCloudProxy<ActivateAgentProfileResponse>({\n    backend: activeCloudBackend(),\n    method: \"POST\",\n    path: `${BASE}/${encodeURIComponent(profileId)}/activate`,\n    body: {},\n  });\n}\n"],"mappings":";;;AA0BA,IAAM,IAAO;AAEb,SAAS,IAA8B;CACrC,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MAAM,qDAAqD;AAEvE,QAAO;;AAGT,eAAsB,IAA4D;AAChF,QAAO,EAAyC;EAC9C,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM;EACP,CAAC;;AAGJ,eAAsB,EACpB,GACqC;AACrC,QAAO,EAA2C;EAChD,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EAC1C,CAAC;;AAGJ,eAAsB,EACpB,GACA,GACuC;AACvC,QAAO,EAA6C;EAClD,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EACzC,MAAM;EACP,CAAC;;AAGJ,eAAsB,EACpB,GACuC;AACvC,QAAO,EAA6C;EAClD,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EAC1C,CAAC;;AAGJ,eAAsB,EACpB,GACA,GACuC;AACvC,QAAO,EAA6C;EAClD,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC;EAC1C,MAAM,EAAE,UAAU,GAAS;EAC5B,CAAC;;AAGJ,eAAsB,EACpB,GACuC;AACvC,QAAO,EAA6C;EAClD,SAAS,GAAoB;EAC7B,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAU,CAAC;EAC/C,MAAM,EAAE;EACT,CAAC"}

package/dist/api/cloud/organization-service.api.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`../../node_modules/axios/lib/axios.cjs`),n=require(`./proxy.cjs`);function r(e){return{items:e?.items??[],currentOrgId:e?.current_org_id??null}}function i(t){if(t)return t;let n=e.getActiveBackend().backend;if(n.kind!==`cloud`)throw Error(`Cloud organization calls require a cloud backend. Active backend is local.`);return n}async function a(e){return r(await n.callCloudProxy({backend:i(e),method:`GET`,path:`/api/organizations`}))}async function o(e){let r=i(e);try{return{orgId:(await n.callCloudProxy({backend:r,method:`GET`,path:`/api/keys/current`}))?.org_id??null,isLegacyKey:!1}}catch(e){if(t.default.isAxiosError(e)&&e.response?.status===400)return{orgId:null,isLegacyKey:!0};throw e}}async function s(e,t){let r=await n.callCloudProxy({backend:i(t),method:`GET`,path:`/api/organizations/${encodeURIComponent(e)}/me`});return{orgId:r?.org_id??e,userId:r?.user_id??``}}exports.getCloudOrganizationMe=s,exports.getCloudOrganizations=a,exports.getCurrentCloudApiKey=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`../../node_modules/axios/lib/axios.cjs`),n=require(`./proxy.cjs`);function r(e){return{items:e?.items??[],currentOrgId:e?.current_org_id??null}}function i(t){if(t)return t;let n=e.getActiveBackend().backend;if(n.kind!==`cloud`)throw Error(`Cloud organization calls require a cloud backend. Active backend is local.`);return n}async function a(e){return r(await n.callCloudProxy({backend:i(e),method:`GET`,path:`/api/organizations`}))}async function o(e){let r=i(e);try{return{orgId:(await n.callCloudProxy({backend:r,method:`GET`,path:`/api/keys/current`}))?.org_id??null,isLegacyKey:!1}}catch(e){if(t.default.isAxiosError(e)&&e.response?.status===400)return{orgId:null,isLegacyKey:!0};throw e}}async function s(e,t){let r=await n.callCloudProxy({backend:i(t),method:`GET`,path:`/api/organizations/${encodeURIComponent(e)}/me`});return{orgId:r?.org_id??e,userId:r?.user_id??``,role:r?.role??null,permissions:Array.isArray(r?.permissions)?r.permissions:null}}exports.getCloudOrganizationMe=s,exports.getCloudOrganizations=a,exports.getCurrentCloudApiKey=o;
 //# sourceMappingURL=organization-service.api.cjs.map

package/dist/api/cloud/organization-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"organization-service.api.cjs","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{ orgId: string; userId: string }> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{ org_id: string; user_id: string }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n  };\n}\n"],"mappings":"qLAeA,SAAS,EACP,EACqB,CACrB,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,gBAAkB,KACvC,CAGH,SAAS,EAAe,EAA4B,CAClD,GAAI,EAAS,OAAO,EACpB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAClC,GAAI,EAAO,OAAS,QAClB,MAAU,MACR,6EACD,CAEH,OAAO,EAUT,eAAsB,EACpB,EAC8B,CAO9B,OAAO,EAAgB,MALJ,EAAA,eAA2C,CAC5D,QAFa,EAAe,EAEnB,CACT,OAAQ,MACR,KAAM,qBACP,CAAC,CAC0B,CAc9B,eAAsB,EACpB,EACyD,CACzD,IAAM,EAAS,EAAe,EAAQ,CACtC,GAAI,CAMF,MAAO,CAAE,OAAO,MALG,EAAA,eAAoC,CACrD,QAAS,EACT,OAAQ,MACR,KAAM,oBACP,CAAC,GACoB,QAAU,KAAM,YAAa,GAAO,OACnD,EAAG,CACV,GAAI,EAAA,QAAM,aAAa,EAAE,EAAI,EAAE,UAAU,SAAW,IAClD,MAAO,CAAE,MAAO,KAAM,YAAa,GAAM,CAE3C,MAAM,GAWV,eAAsB,EACpB,EACA,EAC4C,CAE5C,IAAM,EAAO,MAAM,EAAA,eAAoD,CACrE,QAFa,EAAe,EAEnB,CACT,OAAQ,MACR,KAAM,sBAAsB,mBAAmB,EAAM,CAAC,KACvD,CAAC,CACF,MAAO,CACL,MAAO,GAAM,QAAU,EACvB,OAAQ,GAAM,SAAW,GAC1B"}
+{"version":3,"file":"organization-service.api.cjs","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":"qLAeA,SAAS,EACP,EACqB,CACrB,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,gBAAkB,KACvC,CAGH,SAAS,EAAe,EAA4B,CAClD,GAAI,EAAS,OAAO,EACpB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAClC,GAAI,EAAO,OAAS,QAClB,MAAU,MACR,6EACD,CAEH,OAAO,EAUT,eAAsB,EACpB,EAC8B,CAO9B,OAAO,EAAgB,MALJ,EAAA,eAA2C,CAC5D,QAFa,EAAe,EAEnB,CACT,OAAQ,MACR,KAAM,qBACP,CAAC,CAC0B,CAc9B,eAAsB,EACpB,EACyD,CACzD,IAAM,EAAS,EAAe,EAAQ,CACtC,GAAI,CAMF,MAAO,CAAE,OAAO,MALG,EAAA,eAAoC,CACrD,QAAS,EACT,OAAQ,MACR,KAAM,oBACP,CAAC,GACoB,QAAU,KAAM,YAAa,GAAO,OACnD,EAAG,CACV,GAAI,EAAA,QAAM,aAAa,EAAE,EAAI,EAAE,UAAU,SAAW,IAClD,MAAO,CAAE,MAAO,KAAM,YAAa,GAAM,CAE3C,MAAM,GAiBV,eAAsB,EACpB,EACA,EAMC,CAED,IAAM,EAAO,MAAM,EAAA,eAKhB,CACD,QAPa,EAAe,EAOnB,CACT,OAAQ,MACR,KAAM,sBAAsB,mBAAmB,EAAM,CAAC,KACvD,CAAC,CACF,MAAO,CACL,MAAO,GAAM,QAAU,EACvB,OAAQ,GAAM,SAAW,GACzB,KAAM,GAAM,MAAQ,KAGpB,YAAa,MAAM,QAAQ,GAAM,YAAY,CAAG,EAAK,YAAc,KACpE"}

package/dist/api/cloud/organization-service.api.d.ts

@@ -33,9 +33,17 @@ export declare function getCurrentCloudApiKey(backend?: Backend): Promise<{
  * whether `orgId` is the user's personal workspace — that's the cloud
  * contract (the auto-generated personal-workspace org has the same id as
  * the user).
+ *
+ * `role` is the caller's role in the org (`owner` | `admin` | `member`, or
+ * `null` if the upstream omits it). `permissions` is the server-defined
+ * permission set for that role (e.g. `edit_org_settings`); it is `null` on
+ * older app-servers that don't return it, so callers fall back to the role.
+ * See `useCanManageOrgProfiles`.
  */
 export declare function getCloudOrganizationMe(orgId: string, backend?: Backend): Promise<{
     orgId: string;
     userId: string;
+    role: string | null;
+    permissions?: string[] | null;
 }>;
 export {};

package/dist/api/cloud/organization-service.api.js

@@ -48,7 +48,9 @@ async function s(e, t) {
 	});
 	return {
 		orgId: r?.org_id ?? e,
-		userId: r?.user_id ?? ""
+		userId: r?.user_id ?? "",
+		role: r?.role ?? null,
+		permissions: Array.isArray(r?.permissions) ? r.permissions : null
 	};
 }
 //#endregion

package/dist/api/cloud/organization-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-service.api.js","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{ orgId: string; userId: string }> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{ org_id: string; user_id: string }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n  };\n}\n"],"mappings":";;;;AAeA,SAAS,EACP,GACqB;AACrB,QAAO;EACL,OAAO,GAAM,SAAS,EAAE;EACxB,cAAc,GAAM,kBAAkB;EACvC;;AAGH,SAAS,EAAe,GAA4B;AAClD,KAAI,EAAS,QAAO;CACpB,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MACR,6EACD;AAEH,QAAO;;AAUT,eAAsB,EACpB,GAC8B;AAO9B,QAAO,EAAgB,MALJ,EAA2C;EAC5D,SAFa,EAAe,EAEnB;EACT,QAAQ;EACR,MAAM;EACP,CAAC,CAC0B;;AAc9B,eAAsB,EACpB,GACyD;CACzD,IAAM,IAAS,EAAe,EAAQ;AACtC,KAAI;AAMF,SAAO;GAAE,QAAO,MALG,EAAoC;IACrD,SAAS;IACT,QAAQ;IACR,MAAM;IACP,CAAC,GACoB,UAAU;GAAM,aAAa;GAAO;UACnD,GAAG;AACV,MAAI,EAAM,aAAa,EAAE,IAAI,EAAE,UAAU,WAAW,IAClD,QAAO;GAAE,OAAO;GAAM,aAAa;GAAM;AAE3C,QAAM;;;AAWV,eAAsB,EACpB,GACA,GAC4C;CAE5C,IAAM,IAAO,MAAM,EAAoD;EACrE,SAFa,EAAe,EAEnB;EACT,QAAQ;EACR,MAAM,sBAAsB,mBAAmB,EAAM,CAAC;EACvD,CAAC;AACF,QAAO;EACL,OAAO,GAAM,UAAU;EACvB,QAAQ,GAAM,WAAW;EAC1B"}
+{"version":3,"file":"organization-service.api.js","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":";;;;AAeA,SAAS,EACP,GACqB;AACrB,QAAO;EACL,OAAO,GAAM,SAAS,EAAE;EACxB,cAAc,GAAM,kBAAkB;EACvC;;AAGH,SAAS,EAAe,GAA4B;AAClD,KAAI,EAAS,QAAO;CACpB,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MACR,6EACD;AAEH,QAAO;;AAUT,eAAsB,EACpB,GAC8B;AAO9B,QAAO,EAAgB,MALJ,EAA2C;EAC5D,SAFa,EAAe,EAEnB;EACT,QAAQ;EACR,MAAM;EACP,CAAC,CAC0B;;AAc9B,eAAsB,EACpB,GACyD;CACzD,IAAM,IAAS,EAAe,EAAQ;AACtC,KAAI;AAMF,SAAO;GAAE,QAAO,MALG,EAAoC;IACrD,SAAS;IACT,QAAQ;IACR,MAAM;IACP,CAAC,GACoB,UAAU;GAAM,aAAa;GAAO;UACnD,GAAG;AACV,MAAI,EAAM,aAAa,EAAE,IAAI,EAAE,UAAU,WAAW,IAClD,QAAO;GAAE,OAAO;GAAM,aAAa;GAAM;AAE3C,QAAM;;;AAiBV,eAAsB,EACpB,GACA,GAMC;CAED,IAAM,IAAO,MAAM,EAKhB;EACD,SAPa,EAAe,EAOnB;EACT,QAAQ;EACR,MAAM,sBAAsB,mBAAmB,EAAM,CAAC;EACvD,CAAC;AACF,QAAO;EACL,OAAO,GAAM,UAAU;EACvB,QAAQ,GAAM,WAAW;EACzB,MAAM,GAAM,QAAQ;EAGpB,aAAa,MAAM,QAAQ,GAAM,YAAY,GAAG,EAAK,cAAc;EACpE"}

package/dist/api/cloud/profiles-service.api.cjs

@@ -0,0 +1,2 @@
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`./proxy.cjs`);var n=`/api/v1/settings/profiles`;function r(){let{backend:t,orgId:r}=e.getActiveBackend();if(t.kind!==`cloud`)throw Error(`Cloud profiles call requires a cloud backend.`);return{backend:t,base:r?`/api/organizations/${encodeURIComponent(r)}/profiles`:n}}async function i(){let{backend:e,base:n}=r();return t.callCloudProxy({backend:e,method:`GET`,path:n})}async function a(e){let{backend:n,base:i}=r(),a=await t.callCloudProxy({backend:n,method:`GET`,path:`${i}/${encodeURIComponent(e)}`});return{name:a.name,config:a.config??a.llm??{},api_key_set:a.api_key_set??!1}}async function o(e,n){let{backend:i,base:a}=r();return t.callCloudProxy({backend:i,method:`POST`,path:`${a}/${encodeURIComponent(e)}`,body:n})}async function s(e){let{backend:n,base:i}=r();return t.callCloudProxy({backend:n,method:`DELETE`,path:`${i}/${encodeURIComponent(e)}`})}async function c(e,n){let{backend:i,base:a}=r();return t.callCloudProxy({backend:i,method:`POST`,path:`${a}/${encodeURIComponent(e)}/rename`,body:{new_name:n}})}async function l(e){let{backend:n,base:i}=r(),a=await t.callCloudProxy({backend:n,method:`POST`,path:`${i}/${encodeURIComponent(e)}/activate`,body:{}});return{name:a.name,message:a.message,llm_applied:a.model!=null||a.llm!=null}}exports.activateCloudProfile=l,exports.deleteCloudProfile=s,exports.fetchCloudProfile=a,exports.fetchCloudProfiles=i,exports.renameCloudProfile=c,exports.saveCloudProfile=o;
+//# sourceMappingURL=profiles-service.api.cjs.map

package/dist/api/cloud/profiles-service.api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles-service.api.cjs","names":[],"sources":["../../../src/api/cloud/profiles-service.api.ts"],"sourcesContent":["import type {\n  ActivateProfileResponse,\n  ProfileDetailResponse,\n  ProfileListResponse,\n  ProfileMutationResponse,\n  SaveProfileRequest,\n} from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * Cloud LLM-profile service.\n *\n * Profile CRUD is routed to the org-scoped endpoints\n * `/api/organizations/{orgId}/profiles`, which enforce `EDIT_ORG_SETTINGS`\n * server-side — so a member's mutation is rejected with 403 even on a direct\n * API call, not just hidden in the UI. When the active cloud backend has no org\n * bound (legacy API keys), we fall back to the ungated per-user settings route\n * `/api/v1/settings/profiles`, where there is no org role to enforce against.\n *\n * The two routes share shapes except `get` (org returns `llm`, settings returns\n * `config`) and `activate` (org returns `llm`, settings returns `model`); both\n * are normalized to the SDK profile types below. Neither route exposes secrets.\n */\n\nconst SETTINGS_PROFILES_PATH = \"/api/v1/settings/profiles\";\n\n/**\n * Resolve the backend + base path for the active cloud backend's profiles:\n * the org-gated route when an org is bound, else the per-user settings route.\n */\nfunction cloudProfilesTarget(): { backend: Backend; base: string } {\n  const { backend, orgId } = getActiveBackend();\n  if (backend.kind !== \"cloud\") {\n    throw new Error(\"Cloud profiles call requires a cloud backend.\");\n  }\n  return {\n    backend,\n    base: orgId\n      ? `/api/organizations/${encodeURIComponent(orgId)}/profiles`\n      : SETTINGS_PROFILES_PATH,\n  };\n}\n\nexport async function fetchCloudProfiles(): Promise<ProfileListResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileListResponse>({\n    backend,\n    method: \"GET\",\n    path: base,\n  });\n}\n\nexport async function fetchCloudProfile(\n  name: string,\n): Promise<ProfileDetailResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  // Org returns `{ name, llm }`; settings returns `{ name, config, api_key_set }`.\n  // Normalize to the SDK detail shape. Neither route exposes the key, and the\n  // GUI never reads the detail's `api_key_set` (only list-item `api_key_set`).\n  const result = await callCloudProxy<{\n    name: string;\n    config?: Record<string, unknown>;\n    llm?: Record<string, unknown>;\n    api_key_set?: boolean;\n  }>({\n    backend,\n    method: \"GET\",\n    path: `${base}/${encodeURIComponent(name)}`,\n  });\n  return {\n    name: result.name,\n    config: result.config ?? result.llm ?? {},\n    api_key_set: result.api_key_set ?? false,\n  };\n}\n\nexport async function saveCloudProfile(\n  name: string,\n  request: SaveProfileRequest,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}`,\n    body: request,\n  });\n}\n\nexport async function deleteCloudProfile(\n  name: string,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"DELETE\",\n    path: `${base}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function renameCloudProfile(\n  name: string,\n  newName: string,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}/rename`,\n    body: { new_name: newName },\n  });\n}\n\nexport async function activateCloudProfile(\n  name: string,\n): Promise<ActivateProfileResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  // Org returns `{ name, message, llm }`; settings returns `{ name, message,\n  // model }`. The SDK type carries `llm_applied`; derive it from whichever the\n  // route provided (consumers only read name/message — the hook just\n  // invalidates caches).\n  const result = await callCloudProxy<{\n    name: string;\n    message: string;\n    model?: string | null;\n    llm?: Record<string, unknown> | null;\n  }>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}/activate`,\n    body: {},\n  });\n  return {\n    name: result.name,\n    message: result.message,\n    llm_applied: result.model != null || result.llm != null,\n  };\n}\n"],"mappings":"iIA0BA,IAAM,EAAyB,4BAM/B,SAAS,GAA0D,CACjE,GAAM,CAAE,UAAS,SAAU,EAAA,kBAAkB,CAC7C,GAAI,EAAQ,OAAS,QACnB,MAAU,MAAM,gDAAgD,CAElE,MAAO,CACL,UACA,KAAM,EACF,sBAAsB,mBAAmB,EAAM,CAAC,WAChD,EACL,CAGH,eAAsB,GAAmD,CACvE,GAAM,CAAE,UAAS,QAAS,GAAqB,CAC/C,OAAO,EAAA,eAAoC,CACzC,UACA,OAAQ,MACR,KAAM,EACP,CAAC,CAGJ,eAAsB,EACpB,EACgC,CAChC,GAAM,CAAE,UAAS,QAAS,GAAqB,CAIzC,EAAS,MAAM,EAAA,eAKlB,CACD,UACA,OAAQ,MACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GAC1C,CAAC,CACF,MAAO,CACL,KAAM,EAAO,KACb,OAAQ,EAAO,QAAU,EAAO,KAAO,EAAE,CACzC,YAAa,EAAO,aAAe,GACpC,CAGH,eAAsB,EACpB,EACA,EACkC,CAClC,GAAM,CAAE,UAAS,QAAS,GAAqB,CAC/C,OAAO,EAAA,eAAwC,CAC7C,UACA,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GACzC,KAAM,EACP,CAAC,CAGJ,eAAsB,EACpB,EACkC,CAClC,GAAM,CAAE,UAAS,QAAS,GAAqB,CAC/C,OAAO,EAAA,eAAwC,CAC7C,UACA,OAAQ,SACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,GAC1C,CAAC,CAGJ,eAAsB,EACpB,EACA,EACkC,CAClC,GAAM,CAAE,UAAS,QAAS,GAAqB,CAC/C,OAAO,EAAA,eAAwC,CAC7C,UACA,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC,SAC1C,KAAM,CAAE,SAAU,EAAS,CAC5B,CAAC,CAGJ,eAAsB,EACpB,EACkC,CAClC,GAAM,CAAE,UAAS,QAAS,GAAqB,CAKzC,EAAS,MAAM,EAAA,eAKlB,CACD,UACA,OAAQ,OACR,KAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC,WAC1C,KAAM,EAAE,CACT,CAAC,CACF,MAAO,CACL,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,YAAa,EAAO,OAAS,MAAQ,EAAO,KAAO,KACpD"}

package/dist/api/cloud/profiles-service.api.d.ts

@@ -0,0 +1,7 @@
+import type { ActivateProfileResponse, ProfileDetailResponse, ProfileListResponse, ProfileMutationResponse, SaveProfileRequest } from "@openhands/typescript-client";
+export declare function fetchCloudProfiles(): Promise<ProfileListResponse>;
+export declare function fetchCloudProfile(name: string): Promise<ProfileDetailResponse>;
+export declare function saveCloudProfile(name: string, request: SaveProfileRequest): Promise<ProfileMutationResponse>;
+export declare function deleteCloudProfile(name: string): Promise<ProfileMutationResponse>;
+export declare function renameCloudProfile(name: string, newName: string): Promise<ProfileMutationResponse>;
+export declare function activateCloudProfile(name: string): Promise<ActivateProfileResponse>;

package/dist/api/cloud/profiles-service.api.js

@@ -0,0 +1,75 @@
+import { getActiveBackend as e } from "../backend-registry/active-store.js";
+import { callCloudProxy as t } from "./proxy.js";
+//#region src/api/cloud/profiles-service.api.ts
+var n = "/api/v1/settings/profiles";
+function r() {
+	let { backend: t, orgId: r } = e();
+	if (t.kind !== "cloud") throw Error("Cloud profiles call requires a cloud backend.");
+	return {
+		backend: t,
+		base: r ? `/api/organizations/${encodeURIComponent(r)}/profiles` : n
+	};
+}
+async function i() {
+	let { backend: e, base: n } = r();
+	return t({
+		backend: e,
+		method: "GET",
+		path: n
+	});
+}
+async function a(e) {
+	let { backend: n, base: i } = r(), a = await t({
+		backend: n,
+		method: "GET",
+		path: `${i}/${encodeURIComponent(e)}`
+	});
+	return {
+		name: a.name,
+		config: a.config ?? a.llm ?? {},
+		api_key_set: a.api_key_set ?? !1
+	};
+}
+async function o(e, n) {
+	let { backend: i, base: a } = r();
+	return t({
+		backend: i,
+		method: "POST",
+		path: `${a}/${encodeURIComponent(e)}`,
+		body: n
+	});
+}
+async function s(e) {
+	let { backend: n, base: i } = r();
+	return t({
+		backend: n,
+		method: "DELETE",
+		path: `${i}/${encodeURIComponent(e)}`
+	});
+}
+async function c(e, n) {
+	let { backend: i, base: a } = r();
+	return t({
+		backend: i,
+		method: "POST",
+		path: `${a}/${encodeURIComponent(e)}/rename`,
+		body: { new_name: n }
+	});
+}
+async function l(e) {
+	let { backend: n, base: i } = r(), a = await t({
+		backend: n,
+		method: "POST",
+		path: `${i}/${encodeURIComponent(e)}/activate`,
+		body: {}
+	});
+	return {
+		name: a.name,
+		message: a.message,
+		llm_applied: a.model != null || a.llm != null
+	};
+}
+//#endregion
+export { l as activateCloudProfile, s as deleteCloudProfile, a as fetchCloudProfile, i as fetchCloudProfiles, c as renameCloudProfile, o as saveCloudProfile };
+
+//# sourceMappingURL=profiles-service.api.js.map

package/dist/api/cloud/profiles-service.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles-service.api.js","names":[],"sources":["../../../src/api/cloud/profiles-service.api.ts"],"sourcesContent":["import type {\n  ActivateProfileResponse,\n  ProfileDetailResponse,\n  ProfileListResponse,\n  ProfileMutationResponse,\n  SaveProfileRequest,\n} from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * Cloud LLM-profile service.\n *\n * Profile CRUD is routed to the org-scoped endpoints\n * `/api/organizations/{orgId}/profiles`, which enforce `EDIT_ORG_SETTINGS`\n * server-side — so a member's mutation is rejected with 403 even on a direct\n * API call, not just hidden in the UI. When the active cloud backend has no org\n * bound (legacy API keys), we fall back to the ungated per-user settings route\n * `/api/v1/settings/profiles`, where there is no org role to enforce against.\n *\n * The two routes share shapes except `get` (org returns `llm`, settings returns\n * `config`) and `activate` (org returns `llm`, settings returns `model`); both\n * are normalized to the SDK profile types below. Neither route exposes secrets.\n */\n\nconst SETTINGS_PROFILES_PATH = \"/api/v1/settings/profiles\";\n\n/**\n * Resolve the backend + base path for the active cloud backend's profiles:\n * the org-gated route when an org is bound, else the per-user settings route.\n */\nfunction cloudProfilesTarget(): { backend: Backend; base: string } {\n  const { backend, orgId } = getActiveBackend();\n  if (backend.kind !== \"cloud\") {\n    throw new Error(\"Cloud profiles call requires a cloud backend.\");\n  }\n  return {\n    backend,\n    base: orgId\n      ? `/api/organizations/${encodeURIComponent(orgId)}/profiles`\n      : SETTINGS_PROFILES_PATH,\n  };\n}\n\nexport async function fetchCloudProfiles(): Promise<ProfileListResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileListResponse>({\n    backend,\n    method: \"GET\",\n    path: base,\n  });\n}\n\nexport async function fetchCloudProfile(\n  name: string,\n): Promise<ProfileDetailResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  // Org returns `{ name, llm }`; settings returns `{ name, config, api_key_set }`.\n  // Normalize to the SDK detail shape. Neither route exposes the key, and the\n  // GUI never reads the detail's `api_key_set` (only list-item `api_key_set`).\n  const result = await callCloudProxy<{\n    name: string;\n    config?: Record<string, unknown>;\n    llm?: Record<string, unknown>;\n    api_key_set?: boolean;\n  }>({\n    backend,\n    method: \"GET\",\n    path: `${base}/${encodeURIComponent(name)}`,\n  });\n  return {\n    name: result.name,\n    config: result.config ?? result.llm ?? {},\n    api_key_set: result.api_key_set ?? false,\n  };\n}\n\nexport async function saveCloudProfile(\n  name: string,\n  request: SaveProfileRequest,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}`,\n    body: request,\n  });\n}\n\nexport async function deleteCloudProfile(\n  name: string,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"DELETE\",\n    path: `${base}/${encodeURIComponent(name)}`,\n  });\n}\n\nexport async function renameCloudProfile(\n  name: string,\n  newName: string,\n): Promise<ProfileMutationResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  return callCloudProxy<ProfileMutationResponse>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}/rename`,\n    body: { new_name: newName },\n  });\n}\n\nexport async function activateCloudProfile(\n  name: string,\n): Promise<ActivateProfileResponse> {\n  const { backend, base } = cloudProfilesTarget();\n  // Org returns `{ name, message, llm }`; settings returns `{ name, message,\n  // model }`. The SDK type carries `llm_applied`; derive it from whichever the\n  // route provided (consumers only read name/message — the hook just\n  // invalidates caches).\n  const result = await callCloudProxy<{\n    name: string;\n    message: string;\n    model?: string | null;\n    llm?: Record<string, unknown> | null;\n  }>({\n    backend,\n    method: \"POST\",\n    path: `${base}/${encodeURIComponent(name)}/activate`,\n    body: {},\n  });\n  return {\n    name: result.name,\n    message: result.message,\n    llm_applied: result.model != null || result.llm != null,\n  };\n}\n"],"mappings":";;;AA0BA,IAAM,IAAyB;AAM/B,SAAS,IAA0D;CACjE,IAAM,EAAE,YAAS,aAAU,GAAkB;AAC7C,KAAI,EAAQ,SAAS,QACnB,OAAU,MAAM,gDAAgD;AAElE,QAAO;EACL;EACA,MAAM,IACF,sBAAsB,mBAAmB,EAAM,CAAC,aAChD;EACL;;AAGH,eAAsB,IAAmD;CACvE,IAAM,EAAE,YAAS,YAAS,GAAqB;AAC/C,QAAO,EAAoC;EACzC;EACA,QAAQ;EACR,MAAM;EACP,CAAC;;AAGJ,eAAsB,EACpB,GACgC;CAChC,IAAM,EAAE,YAAS,YAAS,GAAqB,EAIzC,IAAS,MAAM,EAKlB;EACD;EACA,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EAC1C,CAAC;AACF,QAAO;EACL,MAAM,EAAO;EACb,QAAQ,EAAO,UAAU,EAAO,OAAO,EAAE;EACzC,aAAa,EAAO,eAAe;EACpC;;AAGH,eAAsB,EACpB,GACA,GACkC;CAClC,IAAM,EAAE,YAAS,YAAS,GAAqB;AAC/C,QAAO,EAAwC;EAC7C;EACA,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EACzC,MAAM;EACP,CAAC;;AAGJ,eAAsB,EACpB,GACkC;CAClC,IAAM,EAAE,YAAS,YAAS,GAAqB;AAC/C,QAAO,EAAwC;EAC7C;EACA,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK;EAC1C,CAAC;;AAGJ,eAAsB,EACpB,GACA,GACkC;CAClC,IAAM,EAAE,YAAS,YAAS,GAAqB;AAC/C,QAAO,EAAwC;EAC7C;EACA,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC;EAC1C,MAAM,EAAE,UAAU,GAAS;EAC5B,CAAC;;AAGJ,eAAsB,EACpB,GACkC;CAClC,IAAM,EAAE,YAAS,YAAS,GAAqB,EAKzC,IAAS,MAAM,EAKlB;EACD;EACA,QAAQ;EACR,MAAM,GAAG,EAAK,GAAG,mBAAmB,EAAK,CAAC;EAC1C,MAAM,EAAE;EACT,CAAC;AACF,QAAO;EACL,MAAM,EAAO;EACb,SAAS,EAAO;EAChB,aAAa,EAAO,SAAS,QAAQ,EAAO,OAAO;EACpD"}

package/dist/api/cloud/settings-service.api.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`./proxy.cjs`);function n(){let t=e.getActiveBackend().backend;if(t.kind!==`cloud`)throw Error(`Cloud settings call requires a cloud backend.`);return t}function r(e){if(e.agent_settings&&Object.keys(e.agent_settings).length>0)return e.agent_settings;let t={},n={};typeof e.llm_model==`string`&&(n.model=e.llm_model),typeof e.llm_base_url==`string`&&(n.base_url=e.llm_base_url),typeof e.llm_api_key==`string`&&(n.api_key=e.llm_api_key),Object.keys(n).length>0&&(t.llm=n);let r={};return typeof e.enable_default_condenser==`boolean`&&(r.enabled=e.enable_default_condenser),typeof e.condenser_max_size==`number`&&(r.max_size=e.condenser_max_size),Object.keys(r).length>0&&(t.condenser=r),typeof e.agent==`string`&&(t.agent=e.agent),t}function i(e){if(e.conversation_settings&&Object.keys(e.conversation_settings).length>0)return e.conversation_settings;let t={};return typeof e.confirmation_mode==`boolean`&&(t.confirmation_mode=e.confirmation_mode),(typeof e.security_analyzer==`string`||e.security_analyzer===null)&&(t.security_analyzer=e.security_analyzer),typeof e.max_iterations==`number`&&(t.max_iterations=e.max_iterations),t}async function a(){let e=await t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings`});return{...e,agent_settings:r(e),conversation_settings:i(e),llm_api_key_set:!!e.llm_api_key_set,search_api_key_set:!!e.search_api_key_set,provider_tokens_set:e.provider_tokens_set}}async function o(e){let r=n(),i={};if(e.agent_settings_diff){let t={...e.agent_settings_diff};t.agent_context===null&&delete t.agent_context,Object.keys(t).length>0&&(i.agent_settings_diff=t)}if(e.conversation_settings_diff&&Object.keys(e.conversation_settings_diff).length>0&&(i.conversation_settings_diff=e.conversation_settings_diff),e.app_preferences)for(let[t,n]of Object.entries(e.app_preferences))n!==void 0&&(i[t]=n);await t.callCloudProxy({backend:r,method:`POST`,path:`/api/v1/settings`,body:i})}async function s(){return t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings/agent-schema`})}async function c(){return t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings/conversation-schema`})}exports.fetchCloudConversationSettingsSchema=c,exports.fetchCloudSettings=a,exports.fetchCloudSettingsSchema=s,exports.saveCloudSettings=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`./proxy.cjs`);function n(){let t=e.getActiveBackend().backend;if(t.kind!==`cloud`)throw Error(`Cloud settings call requires a cloud backend.`);return t}function r(e){if(e.agent_settings&&Object.keys(e.agent_settings).length>0)return e.agent_settings;let t={},n={};typeof e.llm_model==`string`&&(n.model=e.llm_model),typeof e.llm_base_url==`string`&&(n.base_url=e.llm_base_url),typeof e.llm_api_key==`string`&&(n.api_key=e.llm_api_key),Object.keys(n).length>0&&(t.llm=n);let r={};return typeof e.enable_default_condenser==`boolean`&&(r.enabled=e.enable_default_condenser),typeof e.condenser_max_size==`number`&&(r.max_size=e.condenser_max_size),Object.keys(r).length>0&&(t.condenser=r),typeof e.agent==`string`&&(t.agent=e.agent),e.mcp_config&&Object.keys(e.mcp_config).length>0&&(t.mcp_config=e.mcp_config),t}function i(e){if(e.conversation_settings&&Object.keys(e.conversation_settings).length>0)return e.conversation_settings;let t={};return typeof e.confirmation_mode==`boolean`&&(t.confirmation_mode=e.confirmation_mode),(typeof e.security_analyzer==`string`||e.security_analyzer===null)&&(t.security_analyzer=e.security_analyzer),typeof e.max_iterations==`number`&&(t.max_iterations=e.max_iterations),t}async function a(){let e=await t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings`});return{...e,agent_settings:r(e),conversation_settings:i(e),llm_api_key_set:!!e.llm_api_key_set,search_api_key_set:!!e.search_api_key_set,provider_tokens_set:e.provider_tokens_set}}async function o(e){let r=n(),i={};if(e.agent_settings_diff){let t={...e.agent_settings_diff};t.agent_context===null&&delete t.agent_context,Object.keys(t).length>0&&(i.agent_settings_diff=t)}if(e.conversation_settings_diff&&Object.keys(e.conversation_settings_diff).length>0&&(i.conversation_settings_diff=e.conversation_settings_diff),e.app_preferences)for(let[t,n]of Object.entries(e.app_preferences))n!==void 0&&(i[t]=n);await t.callCloudProxy({backend:r,method:`POST`,path:`/api/v1/settings`,body:i})}async function s(){return t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings/agent-schema`})}async function c(){return t.callCloudProxy({backend:n(),method:`GET`,path:`/api/v1/settings/conversation-schema`})}exports.fetchCloudConversationSettingsSchema=c,exports.fetchCloudSettings=a,exports.fetchCloudSettingsSchema=s,exports.saveCloudSettings=o;
 //# sourceMappingURL=settings-service.api.cjs.map