@openhands/agent-canvas 1.1.0 → 1.2.0

package/dist/node_modules/@openhands/extensions/integrations/catalog-index.js

@@ -6,82 +6,72 @@ import i from "./catalog/notion.js";
 import a from "./catalog/ordinal.js";
 import o from "./catalog/elevenlabs.js";
 import s from "./catalog/bitbucket.js";
-import c from "./catalog/gitlab.js";
-import l from "./catalog/xero.js";
-import u from "./catalog/quickbooks.js";
-import d from "./catalog/mailchimp.js";
-import f from "./catalog/pipedrive.js";
-import p from "./catalog/freshdesk.js";
-import m from "./catalog/servicenow.js";
-import h from "./catalog/okta.js";
-import g from "./catalog/plaid.js";
-import _ from "./catalog/netlify.js";
-import v from "./catalog/vercel.js";
-import y from "./catalog/supabase.js";
-import b from "./catalog/posthog.js";
-import x from "./catalog/sentry.js";
-import S from "./catalog/datadog.js";
-import C from "./catalog/canva.js";
-import w from "./catalog/miro.js";
-import T from "./catalog/webflow.js";
-import E from "./catalog/zoom.js";
-import D from "./catalog/discord.js";
-import O from "./catalog/shopify.js";
-import k from "./catalog/stripe.js";
-import A from "./catalog/intercom.js";
-import j from "./catalog/zendesk.js";
-import M from "./catalog/hubspot.js";
-import N from "./catalog/salesforce.js";
-import P from "./catalog/sharepoint.js";
-import F from "./catalog/onedrive.js";
-import I from "./catalog/microsoft-teams.js";
-import L from "./catalog/microsoft-outlook.js";
-import R from "./catalog/box.js";
-import z from "./catalog/dropbox.js";
-import B from "./catalog/airtable.js";
-import V from "./catalog/monday.js";
-import H from "./catalog/clickup.js";
-import U from "./catalog/trello.js";
-import W from "./catalog/asana.js";
-import G from "./catalog/confluence.js";
-import K from "./catalog/jira.js";
-import q from "./catalog/google-calendar.js";
-import J from "./catalog/gmail.js";
-import Y from "./catalog/google-sheets.js";
-import X from "./catalog/google-drive.js";
-import Z from "./catalog/figma.js";
-import Q from "./catalog/google-docs.js";
-import $ from "./catalog/apify.js";
-import ee from "./catalog/atlassian.js";
-import te from "./catalog/brave-search.js";
-import ne from "./catalog/browser-mcp.js";
-import re from "./catalog/clickhouse.js";
-import ie from "./catalog/cloudflare-bindings.js";
-import ae from "./catalog/cloudflare-browser-rendering.js";
-import oe from "./catalog/cloudflare-builds.js";
-import se from "./catalog/cloudflare-docs.js";
-import ce from "./catalog/cloudflare-observability.js";
-import le from "./catalog/deepwiki.js";
-import ue from "./catalog/everything.js";
-import de from "./catalog/exa.js";
-import fe from "./catalog/fetch.js";
-import pe from "./catalog/filesystem.js";
-import me from "./catalog/firecrawl.js";
-import he from "./catalog/git.js";
-import ge from "./catalog/huggingface.js";
-import _e from "./catalog/kagi.js";
-import ve from "./catalog/memory.js";
-import ye from "./catalog/mongodb.js";
-import be from "./catalog/neon.js";
-import xe from "./catalog/obsidian.js";
-import Se from "./catalog/paypal.js";
-import Ce from "./catalog/playwright.js";
-import we from "./catalog/redis.js";
-import Te from "./catalog/resend.js";
-import Ee from "./catalog/sequential-thinking.js";
-import De from "./catalog/time.js";
+import c from "./catalog/xero.js";
+import l from "./catalog/quickbooks.js";
+import u from "./catalog/okta.js";
+import d from "./catalog/netlify.js";
+import f from "./catalog/vercel.js";
+import p from "./catalog/supabase.js";
+import m from "./catalog/posthog.js";
+import h from "./catalog/sentry.js";
+import g from "./catalog/datadog.js";
+import _ from "./catalog/canva.js";
+import v from "./catalog/miro.js";
+import y from "./catalog/webflow.js";
+import b from "./catalog/zoom.js";
+import x from "./catalog/discord.js";
+import S from "./catalog/stripe.js";
+import C from "./catalog/intercom.js";
+import w from "./catalog/hubspot.js";
+import T from "./catalog/salesforce.js";
+import E from "./catalog/sharepoint.js";
+import D from "./catalog/onedrive.js";
+import O from "./catalog/microsoft-teams.js";
+import k from "./catalog/microsoft-outlook.js";
+import A from "./catalog/box.js";
+import j from "./catalog/airtable.js";
+import M from "./catalog/monday.js";
+import N from "./catalog/trello.js";
+import P from "./catalog/asana.js";
+import F from "./catalog/confluence.js";
+import I from "./catalog/jira.js";
+import L from "./catalog/google-calendar.js";
+import R from "./catalog/gmail.js";
+import z from "./catalog/google-sheets.js";
+import B from "./catalog/google-drive.js";
+import V from "./catalog/figma.js";
+import H from "./catalog/google-docs.js";
+import U from "./catalog/apify.js";
+import W from "./catalog/atlassian.js";
+import G from "./catalog/brave-search.js";
+import K from "./catalog/browser-mcp.js";
+import q from "./catalog/clickhouse.js";
+import J from "./catalog/cloudflare-bindings.js";
+import Y from "./catalog/cloudflare-browser-rendering.js";
+import X from "./catalog/cloudflare-builds.js";
+import Z from "./catalog/cloudflare-docs.js";
+import Q from "./catalog/cloudflare-observability.js";
+import $ from "./catalog/deepwiki.js";
+import ee from "./catalog/everything.js";
+import te from "./catalog/exa.js";
+import ne from "./catalog/fetch.js";
+import re from "./catalog/filesystem.js";
+import ie from "./catalog/firecrawl.js";
+import ae from "./catalog/git.js";
+import oe from "./catalog/huggingface.js";
+import se from "./catalog/kagi.js";
+import ce from "./catalog/memory.js";
+import le from "./catalog/mongodb.js";
+import ue from "./catalog/neon.js";
+import de from "./catalog/obsidian.js";
+import fe from "./catalog/paypal.js";
+import pe from "./catalog/playwright.js";
+import me from "./catalog/redis.js";
+import he from "./catalog/resend.js";
+import ge from "./catalog/sequential-thinking.js";
+import _e from "./catalog/time.js";
 //#region node_modules/@openhands/extensions/integrations/catalog-index.js
-var Oe = [
+var ve = [
 	e,
 	t,
 	n,
@@ -153,19 +143,9 @@ var Oe = [
 	me,
 	he,
 	ge,
-	_e,
-	ve,
-	ye,
-	be,
-	xe,
-	Se,
-	Ce,
-	we,
-	Te,
-	Ee,
-	De
+	_e
 ];
 //#endregion
-export { Oe as INTEGRATION_CATALOG_ENTRIES };
+export { ve as INTEGRATION_CATALOG_ENTRIES };
 
 //# sourceMappingURL=catalog-index.js.map

package/dist/node_modules/@openhands/extensions/integrations/catalog-index.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-index.js","names":["entry0","entry1","entry2","entry3","entry4","entry5","entry6","entry7","entry8","entry9","entry10","entry11","entry12","entry13","entry14","entry15","entry16","entry17","entry18","entry19","entry20","entry21","entry22","entry23","entry24","entry25","entry26","entry27","entry28","entry29","entry30","entry31","entry32","entry33","entry34","entry35","entry36","entry37","entry38","entry39","entry40","entry41","entry42","entry43","entry44","entry45","entry46","entry47","entry48","entry49","entry50","entry51","entry52","entry53","entry54","entry55","entry56","entry57","entry58","entry59","entry60","entry61","entry62","entry63","entry64","entry65","entry66","entry67","entry68","entry69","entry70","entry71","entry72","entry73","entry74","entry75","entry76","entry77","entry78","entry79","entry80","entry81"],"sources":["../../../../../node_modules/@openhands/extensions/integrations/catalog-index.js"],"sourcesContent":["// This file is auto-generated by scripts/build-integration-catalog.mjs.\n// Do not edit it manually. To update it after changing integrations/catalog/*.json,\n// run: npm run build:integrations\n\nimport entry0 from \"./catalog/github.json\" with { type: \"json\" };\nimport entry1 from \"./catalog/slack.json\" with { type: \"json\" };\nimport entry2 from \"./catalog/tavily.json\" with { type: \"json\" };\nimport entry3 from \"./catalog/linear.json\" with { type: \"json\" };\nimport entry4 from \"./catalog/notion.json\" with { type: \"json\" };\nimport entry5 from \"./catalog/ordinal.json\" with { type: \"json\" };\nimport entry6 from \"./catalog/elevenlabs.json\" with { type: \"json\" };\nimport entry7 from \"./catalog/bitbucket.json\" with { type: \"json\" };\nimport entry8 from \"./catalog/gitlab.json\" with { type: \"json\" };\nimport entry9 from \"./catalog/xero.json\" with { type: \"json\" };\nimport entry10 from \"./catalog/quickbooks.json\" with { type: \"json\" };\nimport entry11 from \"./catalog/mailchimp.json\" with { type: \"json\" };\nimport entry12 from \"./catalog/pipedrive.json\" with { type: \"json\" };\nimport entry13 from \"./catalog/freshdesk.json\" with { type: \"json\" };\nimport entry14 from \"./catalog/servicenow.json\" with { type: \"json\" };\nimport entry15 from \"./catalog/okta.json\" with { type: \"json\" };\nimport entry16 from \"./catalog/plaid.json\" with { type: \"json\" };\nimport entry17 from \"./catalog/netlify.json\" with { type: \"json\" };\nimport entry18 from \"./catalog/vercel.json\" with { type: \"json\" };\nimport entry19 from \"./catalog/supabase.json\" with { type: \"json\" };\nimport entry20 from \"./catalog/posthog.json\" with { type: \"json\" };\nimport entry21 from \"./catalog/sentry.json\" with { type: \"json\" };\nimport entry22 from \"./catalog/datadog.json\" with { type: \"json\" };\nimport entry23 from \"./catalog/canva.json\" with { type: \"json\" };\nimport entry24 from \"./catalog/miro.json\" with { type: \"json\" };\nimport entry25 from \"./catalog/webflow.json\" with { type: \"json\" };\nimport entry26 from \"./catalog/zoom.json\" with { type: \"json\" };\nimport entry27 from \"./catalog/discord.json\" with { type: \"json\" };\nimport entry28 from \"./catalog/shopify.json\" with { type: \"json\" };\nimport entry29 from \"./catalog/stripe.json\" with { type: \"json\" };\nimport entry30 from \"./catalog/intercom.json\" with { type: \"json\" };\nimport entry31 from \"./catalog/zendesk.json\" with { type: \"json\" };\nimport entry32 from \"./catalog/hubspot.json\" with { type: \"json\" };\nimport entry33 from \"./catalog/salesforce.json\" with { type: \"json\" };\nimport entry34 from \"./catalog/sharepoint.json\" with { type: \"json\" };\nimport entry35 from \"./catalog/onedrive.json\" with { type: \"json\" };\nimport entry36 from \"./catalog/microsoft-teams.json\" with { type: \"json\" };\nimport entry37 from \"./catalog/microsoft-outlook.json\" with { type: \"json\" };\nimport entry38 from \"./catalog/box.json\" with { type: \"json\" };\nimport entry39 from \"./catalog/dropbox.json\" with { type: \"json\" };\nimport entry40 from \"./catalog/airtable.json\" with { type: \"json\" };\nimport entry41 from \"./catalog/monday.json\" with { type: \"json\" };\nimport entry42 from \"./catalog/clickup.json\" with { type: \"json\" };\nimport entry43 from \"./catalog/trello.json\" with { type: \"json\" };\nimport entry44 from \"./catalog/asana.json\" with { type: \"json\" };\nimport entry45 from \"./catalog/confluence.json\" with { type: \"json\" };\nimport entry46 from \"./catalog/jira.json\" with { type: \"json\" };\nimport entry47 from \"./catalog/google-calendar.json\" with { type: \"json\" };\nimport entry48 from \"./catalog/gmail.json\" with { type: \"json\" };\nimport entry49 from \"./catalog/google-sheets.json\" with { type: \"json\" };\nimport entry50 from \"./catalog/google-drive.json\" with { type: \"json\" };\nimport entry51 from \"./catalog/figma.json\" with { type: \"json\" };\nimport entry52 from \"./catalog/google-docs.json\" with { type: \"json\" };\nimport entry53 from \"./catalog/apify.json\" with { type: \"json\" };\nimport entry54 from \"./catalog/atlassian.json\" with { type: \"json\" };\nimport entry55 from \"./catalog/brave-search.json\" with { type: \"json\" };\nimport entry56 from \"./catalog/browser-mcp.json\" with { type: \"json\" };\nimport entry57 from \"./catalog/clickhouse.json\" with { type: \"json\" };\nimport entry58 from \"./catalog/cloudflare-bindings.json\" with { type: \"json\" };\nimport entry59 from \"./catalog/cloudflare-browser-rendering.json\" with { type: \"json\" };\nimport entry60 from \"./catalog/cloudflare-builds.json\" with { type: \"json\" };\nimport entry61 from \"./catalog/cloudflare-docs.json\" with { type: \"json\" };\nimport entry62 from \"./catalog/cloudflare-observability.json\" with { type: \"json\" };\nimport entry63 from \"./catalog/deepwiki.json\" with { type: \"json\" };\nimport entry64 from \"./catalog/everything.json\" with { type: \"json\" };\nimport entry65 from \"./catalog/exa.json\" with { type: \"json\" };\nimport entry66 from \"./catalog/fetch.json\" with { type: \"json\" };\nimport entry67 from \"./catalog/filesystem.json\" with { type: \"json\" };\nimport entry68 from \"./catalog/firecrawl.json\" with { type: \"json\" };\nimport entry69 from \"./catalog/git.json\" with { type: \"json\" };\nimport entry70 from \"./catalog/huggingface.json\" with { type: \"json\" };\nimport entry71 from \"./catalog/kagi.json\" with { type: \"json\" };\nimport entry72 from \"./catalog/memory.json\" with { type: \"json\" };\nimport entry73 from \"./catalog/mongodb.json\" with { type: \"json\" };\nimport entry74 from \"./catalog/neon.json\" with { type: \"json\" };\nimport entry75 from \"./catalog/obsidian.json\" with { type: \"json\" };\nimport entry76 from \"./catalog/paypal.json\" with { type: \"json\" };\nimport entry77 from \"./catalog/playwright.json\" with { type: \"json\" };\nimport entry78 from \"./catalog/redis.json\" with { type: \"json\" };\nimport entry79 from \"./catalog/resend.json\" with { type: \"json\" };\nimport entry80 from \"./catalog/sequential-thinking.json\" with { type: \"json\" };\nimport entry81 from \"./catalog/time.json\" with { type: \"json\" };\n\nexport const INTEGRATION_CATALOG_ENTRIES = [\n  entry0,\n  entry1,\n  entry2,\n  entry3,\n  entry4,\n  entry5,\n  entry6,\n  entry7,\n  entry8,\n  entry9,\n  entry10,\n  entry11,\n  entry12,\n  entry13,\n  entry14,\n  entry15,\n  entry16,\n  entry17,\n  entry18,\n  entry19,\n  entry20,\n  entry21,\n  entry22,\n  entry23,\n  entry24,\n  entry25,\n  entry26,\n  entry27,\n  entry28,\n  entry29,\n  entry30,\n  entry31,\n  entry32,\n  entry33,\n  entry34,\n  entry35,\n  entry36,\n  entry37,\n  entry38,\n  entry39,\n  entry40,\n  entry41,\n  entry42,\n  entry43,\n  entry44,\n  entry45,\n  entry46,\n  entry47,\n  entry48,\n  entry49,\n  entry50,\n  entry51,\n  entry52,\n  entry53,\n  entry54,\n  entry55,\n  entry56,\n  entry57,\n  entry58,\n  entry59,\n  entry60,\n  entry61,\n  entry62,\n  entry63,\n  entry64,\n  entry65,\n  entry66,\n  entry67,\n  entry68,\n  entry69,\n  entry70,\n  entry71,\n  entry72,\n  entry73,\n  entry74,\n  entry75,\n  entry76,\n  entry77,\n  entry78,\n  entry79,\n  entry80,\n  entry81,\n];\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFA,IAAa,KAA8B;CACzCA;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACD"}
+{"version":3,"file":"catalog-index.js","names":["entry0","entry1","entry2","entry3","entry4","entry5","entry6","entry7","entry8","entry9","entry10","entry11","entry12","entry13","entry14","entry15","entry16","entry17","entry18","entry19","entry20","entry21","entry22","entry23","entry24","entry25","entry26","entry27","entry28","entry29","entry30","entry31","entry32","entry33","entry34","entry35","entry36","entry37","entry38","entry39","entry40","entry41","entry42","entry43","entry44","entry45","entry46","entry47","entry48","entry49","entry50","entry51","entry52","entry53","entry54","entry55","entry56","entry57","entry58","entry59","entry60","entry61","entry62","entry63","entry64","entry65","entry66","entry67","entry68","entry69","entry70","entry71"],"sources":["../../../../../node_modules/@openhands/extensions/integrations/catalog-index.js"],"sourcesContent":["// This file is auto-generated by scripts/build-integration-catalog.mjs.\n// Do not edit it manually. To update it after changing integrations/catalog/*.json,\n// run: npm run build:integrations\n\nimport entry0 from \"./catalog/github.json\" with { type: \"json\" };\nimport entry1 from \"./catalog/slack.json\" with { type: \"json\" };\nimport entry2 from \"./catalog/tavily.json\" with { type: \"json\" };\nimport entry3 from \"./catalog/linear.json\" with { type: \"json\" };\nimport entry4 from \"./catalog/notion.json\" with { type: \"json\" };\nimport entry5 from \"./catalog/ordinal.json\" with { type: \"json\" };\nimport entry6 from \"./catalog/elevenlabs.json\" with { type: \"json\" };\nimport entry7 from \"./catalog/bitbucket.json\" with { type: \"json\" };\nimport entry8 from \"./catalog/xero.json\" with { type: \"json\" };\nimport entry9 from \"./catalog/quickbooks.json\" with { type: \"json\" };\nimport entry10 from \"./catalog/okta.json\" with { type: \"json\" };\nimport entry11 from \"./catalog/netlify.json\" with { type: \"json\" };\nimport entry12 from \"./catalog/vercel.json\" with { type: \"json\" };\nimport entry13 from \"./catalog/supabase.json\" with { type: \"json\" };\nimport entry14 from \"./catalog/posthog.json\" with { type: \"json\" };\nimport entry15 from \"./catalog/sentry.json\" with { type: \"json\" };\nimport entry16 from \"./catalog/datadog.json\" with { type: \"json\" };\nimport entry17 from \"./catalog/canva.json\" with { type: \"json\" };\nimport entry18 from \"./catalog/miro.json\" with { type: \"json\" };\nimport entry19 from \"./catalog/webflow.json\" with { type: \"json\" };\nimport entry20 from \"./catalog/zoom.json\" with { type: \"json\" };\nimport entry21 from \"./catalog/discord.json\" with { type: \"json\" };\nimport entry22 from \"./catalog/stripe.json\" with { type: \"json\" };\nimport entry23 from \"./catalog/intercom.json\" with { type: \"json\" };\nimport entry24 from \"./catalog/hubspot.json\" with { type: \"json\" };\nimport entry25 from \"./catalog/salesforce.json\" with { type: \"json\" };\nimport entry26 from \"./catalog/sharepoint.json\" with { type: \"json\" };\nimport entry27 from \"./catalog/onedrive.json\" with { type: \"json\" };\nimport entry28 from \"./catalog/microsoft-teams.json\" with { type: \"json\" };\nimport entry29 from \"./catalog/microsoft-outlook.json\" with { type: \"json\" };\nimport entry30 from \"./catalog/box.json\" with { type: \"json\" };\nimport entry31 from \"./catalog/airtable.json\" with { type: \"json\" };\nimport entry32 from \"./catalog/monday.json\" with { type: \"json\" };\nimport entry33 from \"./catalog/trello.json\" with { type: \"json\" };\nimport entry34 from \"./catalog/asana.json\" with { type: \"json\" };\nimport entry35 from \"./catalog/confluence.json\" with { type: \"json\" };\nimport entry36 from \"./catalog/jira.json\" with { type: \"json\" };\nimport entry37 from \"./catalog/google-calendar.json\" with { type: \"json\" };\nimport entry38 from \"./catalog/gmail.json\" with { type: \"json\" };\nimport entry39 from \"./catalog/google-sheets.json\" with { type: \"json\" };\nimport entry40 from \"./catalog/google-drive.json\" with { type: \"json\" };\nimport entry41 from \"./catalog/figma.json\" with { type: \"json\" };\nimport entry42 from \"./catalog/google-docs.json\" with { type: \"json\" };\nimport entry43 from \"./catalog/apify.json\" with { type: \"json\" };\nimport entry44 from \"./catalog/atlassian.json\" with { type: \"json\" };\nimport entry45 from \"./catalog/brave-search.json\" with { type: \"json\" };\nimport entry46 from \"./catalog/browser-mcp.json\" with { type: \"json\" };\nimport entry47 from \"./catalog/clickhouse.json\" with { type: \"json\" };\nimport entry48 from \"./catalog/cloudflare-bindings.json\" with { type: \"json\" };\nimport entry49 from \"./catalog/cloudflare-browser-rendering.json\" with { type: \"json\" };\nimport entry50 from \"./catalog/cloudflare-builds.json\" with { type: \"json\" };\nimport entry51 from \"./catalog/cloudflare-docs.json\" with { type: \"json\" };\nimport entry52 from \"./catalog/cloudflare-observability.json\" with { type: \"json\" };\nimport entry53 from \"./catalog/deepwiki.json\" with { type: \"json\" };\nimport entry54 from \"./catalog/everything.json\" with { type: \"json\" };\nimport entry55 from \"./catalog/exa.json\" with { type: \"json\" };\nimport entry56 from \"./catalog/fetch.json\" with { type: \"json\" };\nimport entry57 from \"./catalog/filesystem.json\" with { type: \"json\" };\nimport entry58 from \"./catalog/firecrawl.json\" with { type: \"json\" };\nimport entry59 from \"./catalog/git.json\" with { type: \"json\" };\nimport entry60 from \"./catalog/huggingface.json\" with { type: \"json\" };\nimport entry61 from \"./catalog/kagi.json\" with { type: \"json\" };\nimport entry62 from \"./catalog/memory.json\" with { type: \"json\" };\nimport entry63 from \"./catalog/mongodb.json\" with { type: \"json\" };\nimport entry64 from \"./catalog/neon.json\" with { type: \"json\" };\nimport entry65 from \"./catalog/obsidian.json\" with { type: \"json\" };\nimport entry66 from \"./catalog/paypal.json\" with { type: \"json\" };\nimport entry67 from \"./catalog/playwright.json\" with { type: \"json\" };\nimport entry68 from \"./catalog/redis.json\" with { type: \"json\" };\nimport entry69 from \"./catalog/resend.json\" with { type: \"json\" };\nimport entry70 from \"./catalog/sequential-thinking.json\" with { type: \"json\" };\nimport entry71 from \"./catalog/time.json\" with { type: \"json\" };\n\nexport const INTEGRATION_CATALOG_ENTRIES = [\n  entry0,\n  entry1,\n  entry2,\n  entry3,\n  entry4,\n  entry5,\n  entry6,\n  entry7,\n  entry8,\n  entry9,\n  entry10,\n  entry11,\n  entry12,\n  entry13,\n  entry14,\n  entry15,\n  entry16,\n  entry17,\n  entry18,\n  entry19,\n  entry20,\n  entry21,\n  entry22,\n  entry23,\n  entry24,\n  entry25,\n  entry26,\n  entry27,\n  entry28,\n  entry29,\n  entry30,\n  entry31,\n  entry32,\n  entry33,\n  entry34,\n  entry35,\n  entry36,\n  entry37,\n  entry38,\n  entry39,\n  entry40,\n  entry41,\n  entry42,\n  entry43,\n  entry44,\n  entry45,\n  entry46,\n  entry47,\n  entry48,\n  entry49,\n  entry50,\n  entry51,\n  entry52,\n  entry53,\n  entry54,\n  entry55,\n  entry56,\n  entry57,\n  entry58,\n  entry59,\n  entry60,\n  entry61,\n  entry62,\n  entry63,\n  entry64,\n  entry65,\n  entry66,\n  entry67,\n  entry68,\n  entry69,\n  entry70,\n  entry71,\n];\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6EA,IAAa,KAA8B;CACzCA;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACAC;CACD"}

package/dist/node_modules/@openhands/extensions/integrations/index.cjs

@@ -1,2 +1,2 @@
-require(`../../../../_virtual/_rolldown/runtime.cjs`);var e=require(`./catalog-index.cjs`).INTEGRATION_CATALOG_ENTRIES;new Map(e.map(e=>[e.id,e]));var t=e;exports.default=t;
+require(`../../../../_virtual/_rolldown/runtime.cjs`);const e=require(`./catalog-index.cjs`);var t=e=>JSON.parse(JSON.stringify(e)),n=e.INTEGRATION_CATALOG_ENTRIES;new Map(n.map(e=>[e.id,e]));var r=t(n);exports.default=r;
 //# sourceMappingURL=index.cjs.map

package/dist/node_modules/@openhands/extensions/integrations/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["INTEGRATION_CATALOG_ENTRIES"],"sources":["../../../../../node_modules/@openhands/extensions/integrations/index.js"],"sourcesContent":["/**\n * Runtime integration catalog.\n *\n * The source of truth is the hand-authored `integrations/catalog/<id>.json`\n * directory. `catalog-index.js` is generated from that directory so the JS\n * package can statically import each JSON file without an aggregate JSON asset.\n */\nimport { INTEGRATION_CATALOG_ENTRIES } from \"./catalog-index.js\";\n\nconst INTEGRATIONS = INTEGRATION_CATALOG_ENTRIES;\nconst INTEGRATION_BY_ID = new Map(INTEGRATIONS.map((entry) => [entry.id, entry]));\n\nconst entrySupportsMcp = (entry) =>\n  entry.connectionOptions.some((option) => option.provider === \"mcp\");\n\nconst entrySupportsOauth = (entry) =>\n  entry.connectionOptions.some((option) => option.auth?.strategy === \"oauth2\");\n\nexport const listIntegrationCatalog = (filter) => {\n  if (!filter) return INTEGRATIONS;\n  const { mcp, oauth } = filter;\n  if (mcp === undefined && oauth === undefined) return INTEGRATIONS;\n  return INTEGRATIONS.filter((entry) => {\n    const mcpOk = mcp === undefined || entrySupportsMcp(entry) === mcp;\n    const oauthOk = oauth === undefined || entrySupportsOauth(entry) === oauth;\n    return mcpOk && oauthOk;\n  });\n};\n\nexport const getIntegrationCatalogEntry = (id) => INTEGRATION_BY_ID.get(id);\n\nexport const INTEGRATION_CATALOG = INTEGRATIONS;\n\nexport default INTEGRATION_CATALOG;\n"],"x_google_ignoreList":[0],"mappings":"sDASA,IAAM,gCAAeA,CAAAA,4BACK,IAAI,IAAI,EAAa,IAAK,GAAU,CAAC,EAAM,GAAI,EAAM,CAAC,CAAC,CAqBjF,IAAa,EAAsB"}
+{"version":3,"file":"index.cjs","names":["INTEGRATION_CATALOG_ENTRIES"],"sources":["../../../../../node_modules/@openhands/extensions/integrations/index.js"],"sourcesContent":["/**\n * Runtime integration catalog.\n *\n * The source of truth is the hand-authored `integrations/catalog/<id>.json`\n * directory. `catalog-index.js` is generated from that directory so the JS\n * package can statically import each JSON file without an aggregate JSON asset.\n */\nimport { INTEGRATION_CATALOG_ENTRIES } from \"./catalog-index.js\";\n\nconst clone = (value) => JSON.parse(JSON.stringify(value));\nconst INTEGRATIONS = INTEGRATION_CATALOG_ENTRIES;\nconst INTEGRATION_BY_ID = new Map(INTEGRATIONS.map((entry) => [entry.id, entry]));\n\nconst entrySupportsMcp = (entry) =>\n  entry.connectionOptions.some((option) => option.provider === \"mcp\");\n\nconst entrySupportsOauth = (entry) =>\n  entry.connectionOptions.some((option) => option.auth?.strategy === \"oauth2\");\n\nexport const listIntegrationCatalog = (filter) => {\n  const entries =\n    !filter || (filter.mcp === undefined && filter.oauth === undefined)\n      ? INTEGRATIONS\n      : INTEGRATIONS.filter((entry) => {\n          const mcpOk =\n            filter.mcp === undefined || entrySupportsMcp(entry) === filter.mcp;\n          const oauthOk =\n            filter.oauth === undefined ||\n            entrySupportsOauth(entry) === filter.oauth;\n          return mcpOk && oauthOk;\n        });\n  return clone(entries);\n};\n\nexport const getIntegrationCatalogEntry = (id) => {\n  const entry = INTEGRATION_BY_ID.get(id);\n  return entry ? clone(entry) : undefined;\n};\n\nexport const INTEGRATION_CATALOG = clone(INTEGRATIONS);\n\nexport default INTEGRATION_CATALOG;\n"],"x_google_ignoreList":[0],"mappings":"6FASA,IAAM,EAAS,GAAU,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,CACpD,EAAeA,EAAAA,4BACK,IAAI,IAAI,EAAa,IAAK,GAAU,CAAC,EAAM,GAAI,EAAM,CAAC,CAAC,CA4BjF,IAAa,EAAsB,EAAM,EAAa"}

package/dist/node_modules/@openhands/extensions/integrations/index.js

@@ -1,9 +1,9 @@
 import { INTEGRATION_CATALOG_ENTRIES as e } from "./catalog-index.js";
 //#region node_modules/@openhands/extensions/integrations/index.js
-var t = e;
-new Map(t.map((e) => [e.id, e]));
-var n = t;
+var t = (e) => JSON.parse(JSON.stringify(e)), n = e;
+new Map(n.map((e) => [e.id, e]));
+var r = t(n);
 //#endregion
-export { n as default };
+export { r as default };
 
 //# sourceMappingURL=index.js.map

package/dist/node_modules/@openhands/extensions/integrations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../../node_modules/@openhands/extensions/integrations/index.js"],"sourcesContent":["/**\n * Runtime integration catalog.\n *\n * The source of truth is the hand-authored `integrations/catalog/<id>.json`\n * directory. `catalog-index.js` is generated from that directory so the JS\n * package can statically import each JSON file without an aggregate JSON asset.\n */\nimport { INTEGRATION_CATALOG_ENTRIES } from \"./catalog-index.js\";\n\nconst INTEGRATIONS = INTEGRATION_CATALOG_ENTRIES;\nconst INTEGRATION_BY_ID = new Map(INTEGRATIONS.map((entry) => [entry.id, entry]));\n\nconst entrySupportsMcp = (entry) =>\n  entry.connectionOptions.some((option) => option.provider === \"mcp\");\n\nconst entrySupportsOauth = (entry) =>\n  entry.connectionOptions.some((option) => option.auth?.strategy === \"oauth2\");\n\nexport const listIntegrationCatalog = (filter) => {\n  if (!filter) return INTEGRATIONS;\n  const { mcp, oauth } = filter;\n  if (mcp === undefined && oauth === undefined) return INTEGRATIONS;\n  return INTEGRATIONS.filter((entry) => {\n    const mcpOk = mcp === undefined || entrySupportsMcp(entry) === mcp;\n    const oauthOk = oauth === undefined || entrySupportsOauth(entry) === oauth;\n    return mcpOk && oauthOk;\n  });\n};\n\nexport const getIntegrationCatalogEntry = (id) => INTEGRATION_BY_ID.get(id);\n\nexport const INTEGRATION_CATALOG = INTEGRATIONS;\n\nexport default INTEGRATION_CATALOG;\n"],"x_google_ignoreList":[0],"mappings":";;AASA,IAAM,IAAe;AACK,IAAI,IAAI,EAAa,KAAK,MAAU,CAAC,EAAM,IAAI,EAAM,CAAC,CAAC;AAqBjF,IAAa,IAAsB"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../../node_modules/@openhands/extensions/integrations/index.js"],"sourcesContent":["/**\n * Runtime integration catalog.\n *\n * The source of truth is the hand-authored `integrations/catalog/<id>.json`\n * directory. `catalog-index.js` is generated from that directory so the JS\n * package can statically import each JSON file without an aggregate JSON asset.\n */\nimport { INTEGRATION_CATALOG_ENTRIES } from \"./catalog-index.js\";\n\nconst clone = (value) => JSON.parse(JSON.stringify(value));\nconst INTEGRATIONS = INTEGRATION_CATALOG_ENTRIES;\nconst INTEGRATION_BY_ID = new Map(INTEGRATIONS.map((entry) => [entry.id, entry]));\n\nconst entrySupportsMcp = (entry) =>\n  entry.connectionOptions.some((option) => option.provider === \"mcp\");\n\nconst entrySupportsOauth = (entry) =>\n  entry.connectionOptions.some((option) => option.auth?.strategy === \"oauth2\");\n\nexport const listIntegrationCatalog = (filter) => {\n  const entries =\n    !filter || (filter.mcp === undefined && filter.oauth === undefined)\n      ? INTEGRATIONS\n      : INTEGRATIONS.filter((entry) => {\n          const mcpOk =\n            filter.mcp === undefined || entrySupportsMcp(entry) === filter.mcp;\n          const oauthOk =\n            filter.oauth === undefined ||\n            entrySupportsOauth(entry) === filter.oauth;\n          return mcpOk && oauthOk;\n        });\n  return clone(entries);\n};\n\nexport const getIntegrationCatalogEntry = (id) => {\n  const entry = INTEGRATION_BY_ID.get(id);\n  return entry ? clone(entry) : undefined;\n};\n\nexport const INTEGRATION_CATALOG = clone(INTEGRATIONS);\n\nexport default INTEGRATION_CATALOG;\n"],"x_google_ignoreList":[0],"mappings":";;AASA,IAAM,KAAS,MAAU,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,EACpD,IAAe;AACK,IAAI,IAAI,EAAa,KAAK,MAAU,CAAC,EAAM,IAAI,EAAM,CAAC,CAAC;AA4BjF,IAAa,IAAsB,EAAM,EAAa"}

package/dist/node_modules/@openhands/extensions/skills/index.cjs

@@ -101,12 +101,28 @@ HTTP \`200\` means the backend and key work.
 
 Use \`POST /api/conversations\` with:
 
-- current \`/api/settings\` as the base agent profile
+- the **encrypted** \`agent_settings\` from \`GET /api/settings\` (with \`X-Expose-Secrets: encrypted\`), which carries the real Fernet-encrypted \`llm.api_key\`, the existing \`agent_context\`, and the agent kind — so you never handle plaintext credentials and you don't drop the caller's skill/context config
+- \`secrets_encrypted: true\` so the agent-server decrypts that \`api_key\` server-side
+- the exec tool set merged into \`agent_settings.tools\` (and \`task_tool_set\` when you enable sub-agents)
+- \`tool_module_qualnames\` for any non-SDK tools (e.g. \`canvas_ui\`)
+- \`agent_context.load_public_skills\`/\`load_user_skills\`/\`load_project_skills\` set to \`true\` if the delegated agent should inherit bundled/user/project skills
 - a fresh absolute workspace directory
 - \`initial_message.run: true\`
 - \`worktree: false\` when the workspace is already isolated
 
-Template:
+### Credential handling — important
+
+\`GET /api/settings\` (default) **masks** every credential — \`llm.api_key\` comes back as the literal string \`"**********"\`. If you forward that verbatim, the new conversation authenticates with the placeholder and fails immediately with \`LLMAuthenticationError\` (\`You must provide an API key\`).
+
+The supported way to obtain forwardable credentials is the **\`X-Expose-Secrets: encrypted\`** request header. With it, \`/api/settings\` returns the real \`llm.api_key\` as a **Fernet-encrypted token** (starts with \`gAAAAA\`) intended to be sent back to the server with \`secrets_encrypted: true\`; the agent-server's \`decrypt_incoming_llm_secrets\` decrypts it server-side. Do **not** read \`~/.openhands/profiles/*.json\` directly — that is brittle (the caller may not share the backend's home directory, \`active_profile\` may be null, the profile store may live elsewhere).
+
+Two working approaches:
+
+1. **\`agent_profile_id\` (simplest, but no tools)** — send only \`agent_profile_id: "<uuid>"\` (from \`GET /api/agent-profiles\` → the profile whose \`id\` equals \`active_agent_profile_id\` from \`/api/settings\`). The server resolves the LLM key + agent kind from the profile. Mutually exclusive with \`agent\`/\`agent_settings\`, and the \`openhands\` agent-profile schema forbids \`tools\`/\`include_default_tools\`, so the conversation gets **zero exec tools** this way. Use only when the task needs no tools.
+
+2. **Encrypted \`agent_settings\` (full tools, preserves context)** — start from the encrypted \`/api/settings\` \`agent_settings\` payload, drop \`schema_version\` and \`mcp_config\` (to avoid MCP-connection failures at creation time), merge in the exec tool set and \`load_*_skills\` flags, and send with \`secrets_encrypted: true\`. This is the pattern for real delegated work.
+
+Template (full tools, preserves context):
 
 \`\`\`bash
 set -euo pipefail
@@ -121,26 +137,57 @@ test -n "$KEY" || { echo "No Agent Canvas session API key found" >&2; exit 1; }
 WORKDIR="\${WORKDIR:-$HOME/workspace/delegated/$(date +%Y%m%d-%H%M%S)}"
 mkdir -p "$WORKDIR"
 
-SETTINGS_JSON="$(curl -sS -H "X-Session-API-Key: $KEY" "$BASE/api/settings")"
+# Fetch the agent_settings with ENCRYPTED secrets exposed. This returns the
+# real llm.api_key as a Fernet token (gAAAAA...) plus the existing
+# agent_context/agent kind, so we preserve the caller's config and never
+# handle plaintext credentials.
+SETTINGS_JSON="$(curl -sS -H "X-Session-API-Key: $KEY" -H "X-Expose-Secrets: encrypted" "$BASE/api/settings")"
+
 PROMPT='Write a complete, task-specific prompt here. Include repo, branch, constraints, validation, and expected report.'
 
 PAYLOAD="$(jq -n --argjson settings "$SETTINGS_JSON" --arg prompt "$PROMPT" --arg workdir "$WORKDIR" '
-  def agent_settings:
+  # Start from the encrypted agent_settings so llm.api_key (Fernet token),
+  # agent_kind, and agent_context are preserved. Drop schema_version and
+  # mcp_config (MCP servers can fail to connect at creation time; the profile
+  # can be re-resolved later if needed).
+  def base_agent_settings:
     ($settings.agent_settings // {})
     | del(.schema_version)
-    | . + {
-        agent_context: ((.agent_context // {}) + {
-          load_public_skills: true,
-          load_user_skills: true,
-          load_project_skills: true
-        })
-      };
+    | del(.mcp_config);
+
+  # Merge the exec tool set into the existing tools list. Include task_tool_set
+  # when sub-agents are enabled — enable_sub_agents alone does not expose the
+  # delegation tool; Agent Canvas adds task_tool_set for that.
+  def with_tools:
+    .tools = ((.tools // []) + [
+      {name: "terminal", params: {}},
+      {name: "file_editor", params: {}},
+      {name: "task_tracker", params: {}},
+      {name: "browser_tool_set", params: {}},
+      {name: "canvas_ui", params: {}}
+    ] + (if .enable_sub_agents then [{name: "task_tool_set", params: {}}] else [] end)
+    | unique_by(.name));
+
+  # Preserve the existing agent_context and enable skill loading for the
+  # delegated agent (defaults are false, so set these explicitly).
+  def with_skill_loading:
+    .agent_context = ((.agent_context // {}) + {
+      load_public_skills: true,
+      load_user_skills: true,
+      load_project_skills: true
+    });
+
   ($settings.conversation_settings // {}) as $conv |
   {
-    agent_settings: agent_settings,
+    secrets_encrypted: true,
+    agent_settings: (base_agent_settings | with_tools | with_skill_loading),
+    tool_module_qualnames: { canvas_ui: "canvas_ui_tool" },
     workspace: {kind: "LocalWorkspace", working_dir: $workdir},
     confirmation_policy: {kind: "NeverConfirm"},
-    max_iterations: (($conv.max_iterations // 80) | if . == null then 80 else . end),
+    # Delegated tasks usually need more than the SDK default of 80 iterations;
+    # default to the caller's conversation_settings value (1000 in Agent Canvas)
+    # so long-running tasks aren't cut off prematurely. Override per-task if needed.
+    max_iterations: (($conv.max_iterations // 1000) | if . == null then 1000 else . end),
     stuck_detection: true,
     autotitle: true,
     worktree: false,
@@ -158,6 +205,20 @@ curl -sS -X POST "$BASE/api/conversations" \\
   --data-binary "$PAYLOAD" | jq '{id, title, execution_status, workspace}'
 \`\`\`
 
+Verify the new conversation actually has tools and is running (not errored):
+
+\`\`\`bash
+CID="<conversation_id>"
+curl -sS -H "X-Session-API-Key: $KEY" "$BASE/api/conversations/$CID" \\
+  | jq '{execution_status, tools: [.agent.tools[]?.name]}'
+curl -sS -H "X-Session-API-Key: $KEY" "$BASE/api/conversations/$CID/events/search?limit=20" \\
+  | jq '[.events[]? | select(.kind=="ConversationErrorEvent") | .code] // []'
+\`\`\`
+
+\`execution_status\` should be \`running\`/\`idle\`/\`finished\` (not \`error\`), \`tools\` should list the exec tools, and there should be no \`ConversationErrorEvent\`.
+
+If MCP servers configured in the profile are unreachable, conversation creation can fail with \`MCP Connection Failure\`; the template drops \`mcp_config\` from the forwarded \`agent_settings\` to avoid that.
+
 Report both links:
 
 - UI: \`http://localhost:8000/conversations/<conversation_id>\`
@@ -456,7 +517,102 @@ Common API endpoints:
 - List repositories: \`https://dev.azure.com/{organization}/{project}/_apis/git/repositories?api-version=7.1\`
 - Get repository details: \`https://dev.azure.com/{organization}/{project}/_apis/git/repositories/{repositoryId}?api-version=7.1\`
 - List pull requests: \`https://dev.azure.com/{organization}/{project}/_apis/git/pullrequests?api-version=7.1\`
-- Create pull request: \`https://dev.azure.com/{organization}/{project}/_apis/git/repositories/{repositoryId}/pullrequests?api-version=7.1\` (POST)`},{name:`bitbucket`,description:`Interact with Bitbucket repositories and pull requests using the BITBUCKET_TOKEN environment variable. Use when working with code hosted on Bitbucket or managing Bitbucket resources via API.`,triggers:[`bitbucket`,`git`],content:'You have access to an environment variable, `BITBUCKET_TOKEN`, which allows you to interact with\nthe Bitbucket API.\n\n<IMPORTANT>\nYou can use `curl` with the `BITBUCKET_TOKEN` to interact with Bitbucket\'s API.\nALWAYS use the Bitbucket API for operations instead of a web browser.\nALWAYS use the `create_bitbucket_pr` tool to open a pull request\n</IMPORTANT>\n\nOnly rewrite the Bitbucket remote if a push actually fails with authentication errors and the user has asked you to push. Do not proactively rewrite `origin`. OpenHands OSS commonly stores `BITBUCKET_TOKEN` in the same unencoded `user:token` form used by commands such as `curl --user "$BITBUCKET_TOKEN" ...`, so keep it in that form unless you truly need to embed it in a Git remote URL.\n\nIf you need a non-interactive HTTPS remote URL, split `BITBUCKET_TOKEN` on the first `:` and URL-encode each part before calling `git remote set-url`. This avoids breaking usernames or emails that contain reserved URL characters such as `@`:\n\n```bash\nBB_USER="${BITBUCKET_TOKEN%%:*}" && \\\nBB_PASS="${BITBUCKET_TOKEN#*:}" && \\\nENCODED_USER=$(python3 -c \'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))\' "$BB_USER") && \\\nENCODED_PASS=$(python3 -c \'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))\' "$BB_PASS") && \\\ngit remote set-url origin "https://${ENCODED_USER}:${ENCODED_PASS}@bitbucket.org/username/repo.git"\n```\n\nAtlassian\'s Bitbucket Cloud docs recommend avoiding long-lived credentials in the remote URL when possible. Their API token examples use either `https://{bitbucket_username}:{api_token}@...` or `https://x-bitbucket-api-token-auth:{api_token}@...`; OpenHands users should only construct those URLs on demand, with proper URL encoding.\n\nHere are some instructions for pushing, but ONLY do this if the user asks you to:\n* NEVER push directly to the `main` or `master` branch\n* Git config (username and email) is pre-set. Do not modify.\n* You may already be on a branch starting with `openhands-workspace`. Create a new branch with a better name before pushing.\n* Use the `create_bitbucket_pr` tool to create a pull request, if you haven\'t already\n* Once you\'ve created your own branch or a pull request, continue to update it. Do NOT create a new one unless you are explicitly asked to. Update the PR title and description as necessary, but don\'t change the branch name.\n* Use the main branch as the base branch, unless the user requests otherwise\n* After opening or updating a pull request, send the user a short message with a link to the pull request.\n* Do NOT mark a pull request as ready to review unless the user explicitly says so\n* Do all of the above in as few steps as possible. E.g. you could push changes with one step by running the following bash commands:\n```bash\ngit remote -v && git branch # to find the current org, repo and branch\ngit checkout -b create-widget && git add . && git commit -m "Create widget" && git push -u origin create-widget\n```'},{name:`code-review`,description:`Rigorous code review focusing on data structures, simplicity, security, pragmatism, and risk/safety evaluation. Provides brutally honest, actionable feedback on pull requests or merge requests, including a risk assessment for every review. Use when reviewing code changes.`,triggers:[`/codereview`,`/codereview-roasted`],content:`PERSONA:
+- Create pull request: \`https://dev.azure.com/{organization}/{project}/_apis/git/repositories/{repositoryId}/pullrequests?api-version=7.1\` (POST)`},{name:`bitbucket`,description:`Bitbucket integration hub. Detects whether the repository is on Bitbucket Cloud or Bitbucket Data Center and directs you to the matching detailed skill (bitbucket-cloud or bitbucket-data-center). Use for any Bitbucket repository or pull request task.`,triggers:[`bitbucket`,`git`],content:`You are working with **Bitbucket**, which ships as two distinct products that behave
+differently:
+
+- **Bitbucket Cloud** (\`bitbucket.org\`) — authenticates with the \`BITBUCKET_TOKEN\`
+  environment variable.
+- **Bitbucket Data Center** (self-hosted Bitbucket Server) — authenticates with the
+  \`BITBUCKET_DATA_CENTER_TOKEN\` environment variable.
+
+They use different REST APIs, repository identifiers, git remote URL formats, and pull
+request tools, so you must first determine which one you are on, then load the matching
+detailed skill for full instructions.
+
+## Step 1 — Detect which Bitbucket you are on
+
+Check which token environment variable is present. Environment variable names are
+case-sensitive, so look for it case-insensitively:
+
+\`\`\`bash
+env | grep -i 'bitbucket' || echo "no bitbucket token found"
+\`\`\`
+
+- If a **\`BITBUCKET_DATA_CENTER_TOKEN\`** variable is set (in any letter case) → you are on
+  **Bitbucket Data Center**.
+- Otherwise, if a **\`BITBUCKET_TOKEN\`** variable is set → you are on **Bitbucket Cloud**.
+- If neither is set, ask the user how they authenticate to Bitbucket before proceeding.
+
+When you reference the token later, use the exact variable name (and letter case) that
+actually exists in the environment.
+
+## Step 2 — Load the detailed skill
+
+Once you know the environment, use the \`invoke_skill\` tool to load the matching skill for
+full instructions on API calls, authenticated git remotes, and opening pull requests:
+
+- Bitbucket Cloud → invoke the **\`bitbucket-cloud\`** skill.
+- Bitbucket Data Center → invoke the **\`bitbucket-data-center\`** skill.
+
+## Quick reference (fallback)
+
+If you are unable to load the detailed skill, these are the essentials. Always use the
+Bitbucket API (not a web browser) and always use the listed PR tool to open a pull request.
+
+| | Bitbucket Cloud | Bitbucket Data Center |
+|---|---|---|
+| Token env var | \`BITBUCKET_TOKEN\` | \`BITBUCKET_DATA_CENTER_TOKEN\` |
+| Host | \`bitbucket.org\` | self-hosted domain |
+| REST API base | \`https://api.bitbucket.org/2.0\` | \`https://<host>/rest/api/1.0\` |
+| Repository identifier | \`workspace/repo_slug\` | \`PROJECT/repo_slug\` (project key) |
+| Pull request tool | \`create_bitbucket_pr\` | \`create_bitbucket_data_center_pr\` |`},{name:`bitbucket-cloud`,description:`Bitbucket Cloud (bitbucket.org) specifics — authenticate with BITBUCKET_TOKEN, use the REST API v2, workspace/repo_slug repositories, and the create_bitbucket_pr tool. Loaded on demand by the bitbucket skill once a Cloud environment is detected.`,triggers:[],content:'You are working with **Bitbucket Cloud** (`bitbucket.org`). You have access to an\nenvironment variable, `BITBUCKET_TOKEN`, which allows you to interact with the Bitbucket\nCloud API.\n\n- REST API base URL: `https://api.bitbucket.org/2.0`\n- Repository identifier format: `workspace/repo_slug`\n\n<IMPORTANT>\nYou can use `curl` with the `BITBUCKET_TOKEN` to interact with Bitbucket\'s API.\nALWAYS use the Bitbucket API for operations instead of a web browser.\nALWAYS use the `create_bitbucket_pr` tool to open a pull request\n</IMPORTANT>\n\nOnly rewrite the Bitbucket remote if a push actually fails with authentication errors and the user has asked you to push. Do not proactively rewrite `origin`. OpenHands OSS commonly stores `BITBUCKET_TOKEN` in the same unencoded `user:token` form used by commands such as `curl --user "$BITBUCKET_TOKEN" ...`, so keep it in that form unless you truly need to embed it in a Git remote URL.\n\nIf you need a non-interactive HTTPS remote URL, split `BITBUCKET_TOKEN` on the first `:` and URL-encode each part before calling `git remote set-url`. This avoids breaking usernames or emails that contain reserved URL characters such as `@`:\n\n```bash\nBB_USER="${BITBUCKET_TOKEN%%:*}" && \\\nBB_PASS="${BITBUCKET_TOKEN#*:}" && \\\nENCODED_USER=$(python3 -c \'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))\' "$BB_USER") && \\\nENCODED_PASS=$(python3 -c \'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))\' "$BB_PASS") && \\\ngit remote set-url origin "https://${ENCODED_USER}:${ENCODED_PASS}@bitbucket.org/username/repo.git"\n```\n\nAtlassian\'s Bitbucket Cloud docs recommend avoiding long-lived credentials in the remote URL when possible. Their API token examples use either `https://{bitbucket_username}:{api_token}@...` or `https://x-bitbucket-api-token-auth:{api_token}@...`; OpenHands users should only construct those URLs on demand, with proper URL encoding.\n\nHere are some instructions for pushing, but ONLY do this if the user asks you to:\n* NEVER push directly to the `main` or `master` branch\n* Git config (username and email) is pre-set. Do not modify.\n* You may already be on a branch starting with `openhands-workspace`. Create a new branch with a better name before pushing.\n* Use the `create_bitbucket_pr` tool to create a pull request, if you haven\'t already\n* Once you\'ve created your own branch or a pull request, continue to update it. Do NOT create a new one unless you are explicitly asked to. Update the PR title and description as necessary, but don\'t change the branch name.\n* Use the main branch as the base branch, unless the user requests otherwise\n* After opening or updating a pull request, send the user a short message with a link to the pull request.\n* Do NOT mark a pull request as ready to review unless the user explicitly says so\n* Do all of the above in as few steps as possible. E.g. you could push changes with one step by running the following bash commands:\n```bash\ngit remote -v && git branch # to find the current org, repo and branch\ngit checkout -b create-widget && git add . && git commit -m "Create widget" && git push -u origin create-widget\n```'},{name:`bitbucket-data-center`,description:`Bitbucket Data Center (self-hosted Bitbucket Server) specifics — authenticate with BITBUCKET_DATA_CENTER_TOKEN, use the REST API 1.0, PROJECT/repo_slug repositories, scm/ git remotes, and the create_bitbucket_data_center_pr tool. Loaded on demand by the bitbucket skill once a Data Center environment is detected.`,triggers:[],content:`You are working with **Bitbucket Data Center** (self-hosted Bitbucket Server). You have
+access to an environment variable, \`BITBUCKET_DATA_CENTER_TOKEN\`, which contains a basic
+auth token in the format \`username:your-token\` that allows you to interact with the git
+repository and the REST API.
+
+> Environment variable names are case-sensitive. If \`BITBUCKET_DATA_CENTER_TOKEN\` is not
+> present, use whichever case variant actually exists (for example
+> \`bitbucket_data_center_token\`). Run \`env | grep -i 'bitbucket_data_center'\` to find it.
+
+- REST API base URL: \`https://{domain}/rest/api/1.0\`
+- Repository identifier format: \`PROJECT/repo_slug\` (project key, slash, repo slug)
+
+You can use this token to interact with the Bitbucket Data Center REST API:
+\`\`\`bash
+curl -u "\${BITBUCKET_DATA_CENTER_TOKEN}" https://{domain}/rest/api/1.0/...
+\`\`\`
+
+<IMPORTANT>
+ALWAYS use the Bitbucket Data Center API for operations instead of a web browser.
+ALWAYS use the \`create_bitbucket_data_center_pr\` tool to open a pull request
+</IMPORTANT>
+
+If you encounter authentication issues when pushing to Bitbucket Data Center (such as password prompts or permission errors), the old token may have expired. In such case, update the remote URL to include the current token: \`git remote set-url origin https://\${BITBUCKET_DATA_CENTER_TOKEN}@{domain}/scm/{project_lower}/{repo}.git\`
+
+The token is a \`username:token\` pair, so if the username or token contains characters that are reserved in URLs (such as \`@\`), split on the first \`:\` and URL-encode each part before embedding it in a remote:
+
+\`\`\`bash
+BB_USER="\${BITBUCKET_DATA_CENTER_TOKEN%%:*}" && \\
+BB_PASS="\${BITBUCKET_DATA_CENTER_TOKEN#*:}" && \\
+ENCODED_USER=$(python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))' "$BB_USER") && \\
+ENCODED_PASS=$(python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.argv[1], safe=""))' "$BB_PASS") && \\
+git remote set-url origin "https://\${ENCODED_USER}:\${ENCODED_PASS}@{domain}/scm/{project_lower}/{repo}.git"
+\`\`\`
+
+Here are some instructions for pushing, but ONLY do this if the user asks you to:
+* NEVER push directly to the \`main\` or \`master\` branch
+* Git config (username and email) is pre-set. Do not modify.
+* You may already be on a branch starting with \`openhands-workspace\`. Create a new branch with a better name before pushing.
+* Use the \`create_bitbucket_data_center_pr\` tool to create a pull request, if you haven't already
+* Once you've created your own branch or a pull request, continue to update it. Do NOT create a new one unless you are explicitly asked to. Update the PR title and description as necessary, but don't change the branch name.
+* Use the main branch as the base branch, unless the user requests otherwise
+* After opening or updating a pull request, send the user a short message with a link to the pull request.
+* Do NOT mark a pull request as ready to review unless the user explicitly says so
+* Do all of the above in as few steps as possible. E.g. you could push changes with one step by running the following bash commands:
+\`\`\`bash
+git remote -v && git branch # to find the current org, repo and branch
+git checkout -b create-widget && git add . && git commit -m "Create widget" && git push -u origin create-widget
+\`\`\``},{name:`code-review`,description:`Rigorous code review focusing on data structures, simplicity, security, pragmatism, and risk/safety evaluation. Provides brutally honest, actionable feedback on pull requests or merge requests, including a risk assessment for every review. Use when reviewing code changes.`,triggers:[`/codereview`,`/codereview-roasted`],content:`PERSONA:
 You are a critical code reviewer. Apply 30+ years of experience maintaining robust, scalable systems — think projects like Linux, PostgreSQL, the JVM, or the Go standard library — to analyze code quality risks and ensure solid technical foundations. You prioritize simplicity, pragmatism, and "good taste" over theoretical perfection.
 
 CORE PHILOSOPHY:
@@ -565,7 +721,7 @@ Require:
 8. **Dependency Changes**
 If dependency lock changes have downgraded a dependency, comment pointing that out to make sure it was intentional.
 
-When a PR adds a new dependency or bumps an existing one, review the upstream release for supply chain risk. If any target version was published less than 7 days ago, do **NOT** approve the PR yet — leave a blocking review comment and wait until the version is at least 7 days old. Read \`references/supply-chain-security.md\` for the full verification checklist including risk-based scrutiny tiers, concrete commands for checking release provenance, and escalation guidance.
+When a PR adds a new dependency or bumps an existing one, review the upstream release for supply chain risk. If any target version was published less than 7 days ago, do **NOT** approve the PR yet — leave a blocking review comment and wait until the version is at least 7 days old. First-party packages maintained by the same organization as the reviewed repository are intentionally excluded from the 7-day waiting rule, but still scrutinize them for supply-chain risk using the checklist. Read \`references/supply-chain-security.md\` for the full verification checklist including risk-based scrutiny tiers, concrete commands for checking release provenance, and escalation guidance.
 
 9. **Risk and Safety Evaluation**
 Read \`references/risk-evaluation.md\` for the full risk evaluation framework including risk levels (🟢 Low / 🟡 Medium / 🔴 High), risk factors, escalation guidance, and repo-specific risk rules.
@@ -4519,7 +4675,6 @@ print("All done!")
 - [Send Message While Running](https://docs.openhands.dev/sdk/guides/convo-send-message-while-running.md): Interrupt running agents to provide additional context or corrections.
 - [Software Agent SDK](https://docs.openhands.dev/sdk.md): Build AI agents that write software. A clean, modular SDK with production-ready tools.
 - [Stuck Detector](https://docs.openhands.dev/sdk/guides/agent-stuck-detector.md): Detect and handle stuck agents automatically with timeout mechanisms.
-- [Sub-Agent Delegation](https://docs.openhands.dev/sdk/guides/agent-delegation.md): Enable parallel task execution by delegating work to multiple sub-agents that run independently and return consolidated results.
 - [Task Tool Set](https://docs.openhands.dev/sdk/guides/task-tool-set.md): Delegate complex work to specialized sub-agents that run synchronously and return results to the parent agent.
 - [Theory of Mind (TOM) Agent](https://docs.openhands.dev/sdk/guides/agent-tom-agent.md): Enable your agent to understand user intent and preferences through Theory of Mind capabilities, providing personalized guidance based on user modeling.
 - [TODO Management](https://docs.openhands.dev/sdk/guides/github-workflows/todo-management.md): Implement TODOs using OpenHands Agent
@@ -4649,7 +4804,71 @@ Once installed as above, you may be able to create PDF files from latex sources
 pdflatex latex_source_name.tex
 \`\`\`
 
-Ref: http://kkpradeeban.blogspot.com/2014/04/installing-latexpdflatex-on-ubuntu.html`},{name:`prd`,description:`"Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD."`,triggers:[`create a prd`,`write prd`,`plan this feature`,`requirements for`,`spec out`,`/prd`],content:`# PRD Generator
+Ref: http://kkpradeeban.blogspot.com/2014/04/installing-latexpdflatex-on-ubuntu.html`},{name:`plain-english-content`,description:`This skill should be used when the user asks to "write in plain English", "make this easier to read", "rewrite guidance", "improve report clarity", or produce accessible public-facing prose. It applies plain English content design principles: active voice, front-loaded content, sentence case, and no bold or italics for emphasis.`,triggers:[`plain English`],content:`Open content up so anyone can understand it the first time they read it, without losing substance, nuance or precision. Aim to open up, not dumb down. Apply the GOV.UK style guide approach: plain English, user needs first, active voice, front-loaded structure and accessible formatting.
+
+Use this skill for reports, research write-ups, guidance, documentation, summaries, and public-facing prose where clarity and accessibility matter. When writing a report, default to this style. When briefing a research agent, pass this skill so the report follows the same style.
+
+## Content design principles
+
+- Start from the user need. Write what the reader needs to know to do or decide something, not what the writer wants to say.
+- Front-load everything. Put the most important point first in the document, each section, each paragraph and each sentence. Use the inverted pyramid: conclusion first, then detail, then background.
+- Keep one idea per sentence and one topic per paragraph. Split sentences that contain more than one idea.
+- Be specific and concrete. Give the number, name and date. Cut vague abstractions like "a range of", "going forward" and "in terms of".
+- Cut everything that does not add meaning. Shorter is clearer. Remove duplication.
+
+## Plain English
+
+- Open content up, do not dumb it down. Keep the substance, nuance and precision. Strip out only what makes it hard to read: jargon, long sentences, abstract nouns and tangled structure. Make the content clear enough for a non-specialist and precise enough for an expert.
+- Use the active voice. Say who does what. Write "We reviewed the data", not "The data was reviewed".
+- Keep sentences short: about 15 to 20 words, and rarely more than 25. Keep paragraphs short.
+- Use everyday words. Replace jargon and formal wording with plain alternatives:
+  - use, not utilise or leverage
+  - help, not facilitate or empower
+  - work with, not collaborate, liaise or engage with
+  - make or provide, not deliver
+  - about, not in relation to or with regard to
+  - so, not in order to
+  - start, not commence
+  - end, not terminate
+  - buy, not purchase
+  - enough, not sufficient
+  - solve, fix or deal with, not tackle or combat
+  - effect on, not impact on
+- Do not use impact as a verb.
+- Avoid metaphors and cliches: drive, unlock, deep dive, robust, key, ring-fence, hub, portal, landscape, ecosystem and going forward.
+- Address the reader as "you". Write about the organisation as "we". Use "they", "them" and "their" rather than gendered pronouns. Write "disabled people", not "the disabled".
+- Use contractions for a warmer tone when appropriate, such as "we'll" and "you'll". Avoid negative contractions: write "cannot", not "can't". Avoid "should've", "could've" and "would've".
+
+## Formatting
+
+- Do not use bold or italics for emphasis. Plain words and good structure carry the meaning. Use bold only for a literal interface element in an instruction, for example: select Save. Use single quotation marks for the titles of schemes or documents, not italics.
+- Use sentence case everywhere: headings, titles and table headers. Capitalise only proper nouns.
+- Front-load headings, keep them under about 65 characters, and make them unique and descriptive. Do not use a full stop, dash, slash or question mark in headings. Use headings to help readers skim.
+- Introduce bullet lists with a lead-in line that ends in a colon. Start each bullet lowercase. Keep each bullet to one idea. Do not put "and" or "or" after each bullet. Do not use semicolons. Do not use a full stop after the last bullet unless the bullet is a full sentence.
+- Use a numbered list only for steps readers must follow in order. Write steps as full sentences that end with a full stop. Do not use a lead-in colon.
+- Use descriptive link text that says where the link goes and front-loads the key words. Never write "click here" or "read more". Make link text understandable out of context.
+- Do not use Latin abbreviations. Write "for example" not "eg", "that is" not "ie", and "and so on" or "such as" not "etc". Latin abbreviations confuse some readers and screen readers.
+- Write "and", not "&", except in a registered name or logo.
+- Write "one", but use numerals from 2 upwards. Use the % symbol with numerals, such as 50%. Use £ with no decimals unless there are pence: £75, £75.50. Spell out millions and billions, such as £5 million. Write ranges with "to", not a hyphen: 10 to 20, Monday to Friday.
+- Write dates as "4 June 2026" with no comma or ordinal suffix. Use "to" for ranges, such as "4 to 8 June". Write times as "10am to 11.30am". Use "midday" and "midnight".
+- Do not use FAQs when the content can meet the user need directly. Do not use exclamation marks. Do not use all caps for emphasis.
+
+## Before finishing: self-check
+
+- Is the single most important thing first?
+- Could a non-expert understand every sentence on first read?
+- Is every sentence active, short and focused on one idea?
+- Have all bold or italic emphasis, jargon, Latin abbreviations and marketing language been removed?
+- Is everything in sentence case, with descriptive headings and links?
+- Can any more words be cut without losing meaning? If yes, cut them.
+
+## Scope note
+
+The no-bold and formatting rules apply to produced prose, such as reports, guidance and summaries. Keep the conventions of code, data tables and direct quotations. Markdown headings and lists are acceptable because they provide structure, not emphasis.
+
+## Source
+
+Imported and adapted from the public gist at https://gist.github.com/fofr/505e225f9bf5e839d30c12ba6bfa0be2.`,license:`MIT`},{name:`prd`,description:`"Generate a Product Requirements Document (PRD) for a new feature. Use when planning a feature, starting a new project, or when asked to create a PRD."`,triggers:[`create a prd`,`write prd`,`plan this feature`,`requirements for`,`spec out`,`/prd`],content:`# PRD Generator
 
 Create detailed Product Requirements Documents that are clear, actionable, and suitable for implementation.