@openhands/agent-canvas 1.1.0 → 1.2.0

package/dist/utils/mcp-marketplace-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-marketplace-utils.js","names":[],"sources":["../../src/utils/mcp-marketplace-utils.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport type {\n  IntegrationAuthConfig,\n  IntegrationCatalogEntry as MarketplaceEntry,\n  IntegrationConnectionOption,\n  IntegrationTransport,\n} from \"@openhands/extensions/integrations\";\n\nexport type { MarketplaceEntry };\n\ntype McpIntegrationAuthConfig = IntegrationAuthConfig & {\n  credentialSecretName?: string;\n  saveCredentialAsSecretByDefault?: boolean;\n};\n\nexport type McpMarketplaceConnectionOption = Omit<\n  IntegrationConnectionOption,\n  \"auth\" | \"provider\" | \"transport\"\n> & {\n  provider: \"mcp\";\n  transport: IntegrationTransport;\n  auth: McpIntegrationAuthConfig;\n};\n\nexport function getMcpConnectionOptions(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption[] {\n  return entry.connectionOptions.filter(\n    (option): option is McpMarketplaceConnectionOption =>\n      option.provider === \"mcp\" && !!option.transport,\n  );\n}\n\nexport function getDefaultMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry)[0];\n}\n\nfunction isLocallyInstallableMcpOption(\n  option: McpMarketplaceConnectionOption,\n): boolean {\n  // The local install modal writes static MCP server config. OAuth options\n  // describe hosted redirect flows, so prefer an API/stdio fallback when one\n  // exists and leave OAuth as the default connection for hosted integrations.\n  return option.auth.strategy !== \"oauth2\";\n}\n\nexport function getInstallableMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry).find(isLocallyInstallableMcpOption);\n}\n\nexport function getDefaultMcpTransport(\n  entry: MarketplaceEntry,\n): IntegrationTransport | undefined {\n  return getDefaultMcpConnectionOption(entry)?.transport;\n}\n\nexport function getMcpMarketplaceCatalog(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog.filter((entry) => !!getDefaultMcpConnectionOption(entry));\n}\n\nconst tryUrl = (raw: string): URL | null => {\n  try {\n    return new URL(raw);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * Loose URL match that ignores query strings, trailing slashes, and\n * default ports. We want clicking \"Linear\" to flag the entry as\n * installed even if the user pasted the URL with extra trailing slash\n * or a different port-equivalent variant.\n *\n * Defensive against runtime data that doesn't match the static type:\n * if either input is not a string (e.g. parsed from an older settings\n * blob), we fall through the URL parsing path and the safe trim\n * fallback below, never calling `.replace` on undefined.\n */\nexport function urlsMatch(a: unknown, b: unknown): boolean {\n  const aStr = typeof a === \"string\" ? a : \"\";\n  const bStr = typeof b === \"string\" ? b : \"\";\n  if (!aStr || !bStr) return false;\n  const left = tryUrl(aStr);\n  const right = tryUrl(bStr);\n  if (!left || !right) {\n    return aStr.replace(/\\/+$/, \"\") === bStr.replace(/\\/+$/, \"\");\n  }\n  return (\n    left.protocol === right.protocol &&\n    left.host === right.host &&\n    left.pathname.replace(/\\/+$/, \"\") === right.pathname.replace(/\\/+$/, \"\")\n  );\n}\n\n/**\n * Decide whether a marketplace template is already represented by one\n * of the installed MCP servers. Used to render an \"Installed\" badge on\n * the marketplace tile. Returns the first matching server, or null.\n */\nexport function findInstalledMatch(\n  transport: IntegrationTransport,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  return (\n    servers.find((server) => transportMatchesServer(transport, server)) ?? null\n  );\n}\n\nexport function findInstalledEntryMatch(\n  entry: MarketplaceEntry,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  for (const option of getMcpConnectionOptions(entry)) {\n    const match = findInstalledMatch(option.transport, servers);\n    if (match) return match;\n  }\n  return null;\n}\n\nfunction transportMatchesServer(\n  transport: IntegrationTransport,\n  server: MCPServerConfig,\n): boolean {\n  if (transport.kind === \"shttp\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"shttp\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  if (transport.kind === \"sse\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"sse\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  // stdio: match on the registered server name.\n  return server.type === \"stdio\" && server.name === transport.serverName;\n}\n\nfunction normalize(query: string): string {\n  return query.trim().toLowerCase();\n}\n\n/**\n * Case-insensitive substring match against the catalog entry's\n * user-visible identity (name, description, id, keywords). Empty\n * queries always match.\n */\nexport function getMarketplaceEntriesByPopularity(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog\n    .map((entry, index) => ({ entry, index }))\n    .sort((a, b) => {\n      const byPopularity =\n        (b.entry.popularityRank ?? 0) - (a.entry.popularityRank ?? 0);\n      return byPopularity || a.index - b.index;\n    })\n    .map(({ entry }) => entry);\n}\n\nexport function getMarketplaceEntryById(\n  id: string,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => entry.id === id);\n}\n\nexport function marketplaceEntryMatchesQuery(\n  entry: MarketplaceEntry,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    entry.name,\n    entry.description,\n    entry.id,\n    ...(entry.keywords ?? []),\n  ]\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Search match for an installed (already-configured) server. We\n * search the server's own identifying fields and — if it's a catalog\n * entry — its catalog name/keywords too, so typing \"Slack\" matches\n * the installed Slack tile even though the persisted server is just\n * `{ type: \"stdio\", name: \"slack\", ... }`.\n */\nexport function installedServerMatchesQuery(\n  server: MCPServerConfig,\n  catalogEntry: MarketplaceEntry | undefined,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    server.type,\n    \"name\" in server ? server.name : undefined,\n    \"command\" in server ? server.command : undefined,\n    \"args\" in server ? server.args?.join(\" \") : undefined,\n    \"url\" in server ? server.url : undefined,\n    catalogEntry?.name,\n    catalogEntry?.description,\n    catalogEntry?.id,\n    ...(catalogEntry?.keywords ?? []),\n  ]\n    .filter(Boolean)\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Look up the catalog entry that best matches an installed server.\n * Mirrors the lookup used in `installed-server-card.tsx` for\n * rendering the friendly icon.\n */\nexport function findCatalogEntryForServer(\n  server: MCPServerConfig,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => {\n    // Check every MCP option rather than only the default. Some unified\n    // integration entries default to OAuth-hosted MCP while still exposing\n    // an API/stdio option; existing installed servers should match either.\n    return getMcpConnectionOptions(entry).some((option) =>\n      transportMatchesServer(option.transport, server),\n    );\n  });\n}\n"],"mappings":";AAwBA,SAAgB,EACd,GACkC;AAClC,QAAO,EAAM,kBAAkB,QAC5B,MACC,EAAO,aAAa,SAAS,CAAC,CAAC,EAAO,UACzC;;AAGH,SAAgB,EACd,GAC4C;AAC5C,QAAO,EAAwB,EAAM,CAAC;;AAGxC,SAAS,EACP,GACS;AAIT,QAAO,EAAO,KAAK,aAAa;;AAGlC,SAAgB,EACd,GAC4C;AAC5C,QAAO,EAAwB,EAAM,CAAC,KAAK,EAA8B;;AAG3E,SAAgB,EACd,GACkC;AAClC,QAAO,EAA8B,EAAM,EAAE;;AAG/C,SAAgB,EACd,GACoB;AACpB,QAAO,EAAQ,QAAQ,MAAU,CAAC,CAAC,EAA8B,EAAM,CAAC;;AAG1E,IAAM,KAAU,MAA4B;AAC1C,KAAI;AACF,SAAO,IAAI,IAAI,EAAI;SACb;AACN,SAAO;;;AAeX,SAAgB,EAAU,GAAY,GAAqB;CACzD,IAAM,IAAO,OAAO,KAAM,WAAW,IAAI,IACnC,IAAO,OAAO,KAAM,WAAW,IAAI;AACzC,KAAI,CAAC,KAAQ,CAAC,EAAM,QAAO;CAC3B,IAAM,IAAO,EAAO,EAAK,EACnB,IAAQ,EAAO,EAAK;AAI1B,QAHI,CAAC,KAAQ,CAAC,IACL,EAAK,QAAQ,QAAQ,GAAG,KAAK,EAAK,QAAQ,QAAQ,GAAG,GAG5D,EAAK,aAAa,EAAM,YACxB,EAAK,SAAS,EAAM,QACpB,EAAK,SAAS,QAAQ,QAAQ,GAAG,KAAK,EAAM,SAAS,QAAQ,QAAQ,GAAG;;AA6B5E,SAAS,EACP,GACA,GACS;AACT,KAAI,EAAU,SAAS,SAAS;EAC9B,IAAM,IAAS,EAAU;AACzB,SACE,EAAO,SAAS,WAAW,CAAC,CAAC,EAAO,OAAO,EAAU,EAAO,KAAK,EAAO;;AAI5E,KAAI,EAAU,SAAS,OAAO;EAC5B,IAAM,IAAS,EAAU;AACzB,SACE,EAAO,SAAS,SAAS,CAAC,CAAC,EAAO,OAAO,EAAU,EAAO,KAAK,EAAO;;AAK1E,QAAO,EAAO,SAAS,WAAW,EAAO,SAAS,EAAU;;AAG9D,SAAS,EAAU,GAAuB;AACxC,QAAO,EAAM,MAAM,CAAC,aAAa;;AAQnC,SAAgB,EACd,GACoB;AACpB,QAAO,EACJ,KAAK,GAAO,OAAW;EAAE;EAAO;EAAO,EAAE,CACzC,MAAM,GAAG,OAEL,EAAE,MAAM,kBAAkB,MAAM,EAAE,MAAM,kBAAkB,MACtC,EAAE,QAAQ,EAAE,MACnC,CACD,KAAK,EAAE,eAAY,EAAM;;AAU9B,SAAgB,EACd,GACA,GACS;CACT,IAAM,IAAI,EAAU,EAAS;AAU7B,QATK,IACY;EACf,EAAM;EACN,EAAM;EACN,EAAM;EACN,GAAI,EAAM,YAAY,EAAE;EACzB,CACE,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,GATZ;;AAmBjB,SAAgB,EACd,GACA,GACA,GACS;CACT,IAAM,IAAI,EAAU,EAAS;AAgB7B,QAfK,IACY;EACf,EAAO;EACP,UAAU,IAAS,EAAO,OAAO,KAAA;EACjC,aAAa,IAAS,EAAO,UAAU,KAAA;EACvC,UAAU,IAAS,EAAO,MAAM,KAAK,IAAI,GAAG,KAAA;EAC5C,SAAS,IAAS,EAAO,MAAM,KAAA;EAC/B,GAAc;EACd,GAAc;EACd,GAAc;EACd,GAAI,GAAc,YAAY,EAAE;EACjC,CACE,OAAO,QAAQ,CACf,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,GAfZ;;AAuBjB,SAAgB,EACd,GACA,GAC8B;AAC9B,QAAO,EAAQ,MAAM,MAIZ,EAAwB,EAAM,CAAC,MAAM,MAC1C,EAAuB,EAAO,WAAW,EAAO,CACjD,CACD"}
+{"version":3,"file":"mcp-marketplace-utils.js","names":[],"sources":["../../src/utils/mcp-marketplace-utils.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport type {\n  MCPAuthenticationConfig,\n  MCPOAuthClientAuthMethod,\n} from \"#/types/mcp-auth\";\nimport type {\n  IntegrationAuthConfig,\n  IntegrationCatalogEntry as MarketplaceEntry,\n  IntegrationConnectionOption,\n  IntegrationOAuthConfig,\n  IntegrationTransport,\n} from \"@openhands/extensions/integrations\";\n\nexport type { MarketplaceEntry };\n\ntype McpIntegrationAuthConfig = IntegrationAuthConfig & {\n  credentialSecretName?: string;\n  saveCredentialAsSecretByDefault?: boolean;\n};\n\nexport type McpMarketplaceConnectionOption = Omit<\n  IntegrationConnectionOption,\n  \"auth\" | \"provider\" | \"transport\"\n> & {\n  provider: \"mcp\";\n  transport: IntegrationTransport;\n  auth: McpIntegrationAuthConfig;\n};\n\nexport function getMcpConnectionOptions(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption[] {\n  return entry.connectionOptions.filter(\n    (option): option is McpMarketplaceConnectionOption =>\n      option.provider === \"mcp\" && !!option.transport,\n  );\n}\n\nexport function getDefaultMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry)[0];\n}\n\nfunction isLocallyInstallableMcpOption(\n  option: McpMarketplaceConnectionOption,\n): boolean {\n  if (option.auth.strategy !== \"oauth2\") return true;\n\n  const oauth = option.auth.oauth;\n  if (!oauth) return false;\n\n  // Local agent-server installs only support OAuth flows initiated by the MCP\n  // server itself through fastmcp. Catalog entries that specify provider OAuth\n  // endpoints still need the hosted integration-auth flow and should not be\n  // exposed as locally installable static MCP configs.\n  return (\n    !oauth.authorizationUrl &&\n    !oauth.tokenUrl &&\n    !oauth.registrationUrl &&\n    !oauth.additionalAuthorizationParams &&\n    !oauth.additionalTokenParams\n  );\n}\n\nexport function getInstallableMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry).find(isLocallyInstallableMcpOption);\n}\n\nexport function getDefaultMcpTransport(\n  entry: MarketplaceEntry,\n): IntegrationTransport | undefined {\n  return getDefaultMcpConnectionOption(entry)?.transport;\n}\n\nfunction toMcpOAuthClientAuthMethod(\n  value: IntegrationOAuthConfig[\"clientAuthentication\"] | undefined,\n): MCPOAuthClientAuthMethod | undefined {\n  switch (value) {\n    case \"none\":\n      return \"none\";\n    case \"body\":\n      return \"client_secret_post\";\n    case \"basic\":\n      return \"client_secret_basic\";\n    default:\n      return undefined;\n  }\n}\n\nexport function getMcpOAuthAuthenticationConfig(\n  option: McpMarketplaceConnectionOption,\n): MCPAuthenticationConfig | undefined {\n  if (option.auth.strategy !== \"oauth2\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  const clientAuthMethod = toMcpOAuthClientAuthMethod(\n    option.auth.oauth?.clientAuthentication,\n  );\n  if (clientAuthMethod) {\n    authentication.client_auth_method = clientAuthMethod;\n  }\n  if (option.auth.oauth?.scopes?.length) {\n    authentication.scopes = option.auth.oauth.scopes;\n  }\n  return Object.keys(authentication).length > 1 ? authentication : undefined;\n}\n\nexport function getMcpMarketplaceCatalog(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog.filter((entry) => !!getDefaultMcpConnectionOption(entry));\n}\n\nconst tryUrl = (raw: string): URL | null => {\n  try {\n    return new URL(raw);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * Loose URL match that ignores query strings, trailing slashes, and\n * default ports. We want clicking \"Linear\" to flag the entry as\n * installed even if the user pasted the URL with extra trailing slash\n * or a different port-equivalent variant.\n *\n * Defensive against runtime data that doesn't match the static type:\n * if either input is not a string (e.g. parsed from an older settings\n * blob), we fall through the URL parsing path and the safe trim\n * fallback below, never calling `.replace` on undefined.\n */\nexport function urlsMatch(a: unknown, b: unknown): boolean {\n  const aStr = typeof a === \"string\" ? a : \"\";\n  const bStr = typeof b === \"string\" ? b : \"\";\n  if (!aStr || !bStr) return false;\n  const left = tryUrl(aStr);\n  const right = tryUrl(bStr);\n  if (!left || !right) {\n    return aStr.replace(/\\/+$/, \"\") === bStr.replace(/\\/+$/, \"\");\n  }\n  return (\n    left.protocol === right.protocol &&\n    left.host === right.host &&\n    left.pathname.replace(/\\/+$/, \"\") === right.pathname.replace(/\\/+$/, \"\")\n  );\n}\n\n/**\n * Decide whether a marketplace template is already represented by one\n * of the installed MCP servers. Used to render an \"Installed\" badge on\n * the marketplace tile. Returns the first matching server, or null.\n */\nexport function findInstalledMatch(\n  transport: IntegrationTransport,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  return (\n    servers.find((server) => transportMatchesServer(transport, server)) ?? null\n  );\n}\n\nexport function findInstalledEntryMatch(\n  entry: MarketplaceEntry,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  for (const option of getMcpConnectionOptions(entry)) {\n    const match = findInstalledMatch(option.transport, servers);\n    if (match) return match;\n  }\n  return null;\n}\n\nfunction transportMatchesServer(\n  transport: IntegrationTransport,\n  server: MCPServerConfig,\n): boolean {\n  if (transport.kind === \"shttp\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"shttp\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  if (transport.kind === \"sse\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"sse\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  // stdio: match on the registered server name.\n  return server.type === \"stdio\" && server.name === transport.serverName;\n}\n\nfunction normalize(query: string): string {\n  return query.trim().toLowerCase();\n}\n\n/**\n * Case-insensitive substring match against the catalog entry's\n * user-visible identity (name, description, id, keywords). Empty\n * queries always match.\n */\nexport function getMarketplaceEntriesByPopularity(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog\n    .map((entry, index) => ({ entry, index }))\n    .sort((a, b) => {\n      const byPopularity =\n        (b.entry.popularityRank ?? 0) - (a.entry.popularityRank ?? 0);\n      return byPopularity || a.index - b.index;\n    })\n    .map(({ entry }) => entry);\n}\n\nexport function getMarketplaceEntryById(\n  id: string,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => entry.id === id);\n}\n\nexport function marketplaceEntryMatchesQuery(\n  entry: MarketplaceEntry,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    entry.name,\n    entry.description,\n    entry.id,\n    ...(entry.keywords ?? []),\n  ]\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Search match for an installed (already-configured) server. We\n * search the server's own identifying fields and — if it's a catalog\n * entry — its catalog name/keywords too, so typing \"Slack\" matches\n * the installed Slack tile even though the persisted server is just\n * `{ type: \"stdio\", name: \"slack\", ... }`.\n */\nexport function installedServerMatchesQuery(\n  server: MCPServerConfig,\n  catalogEntry: MarketplaceEntry | undefined,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    server.type,\n    \"name\" in server ? server.name : undefined,\n    \"command\" in server ? server.command : undefined,\n    \"args\" in server ? server.args?.join(\" \") : undefined,\n    \"url\" in server ? server.url : undefined,\n    catalogEntry?.name,\n    catalogEntry?.description,\n    catalogEntry?.id,\n    ...(catalogEntry?.keywords ?? []),\n  ]\n    .filter(Boolean)\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Look up the catalog entry that best matches an installed server.\n * Mirrors the lookup used in `installed-server-card.tsx` for\n * rendering the friendly icon.\n */\nexport function findCatalogEntryForServer(\n  server: MCPServerConfig,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => {\n    // Check every MCP option rather than only the default. Some unified\n    // integration entries default to OAuth-hosted MCP while still exposing\n    // an API/stdio option; existing installed servers should match either.\n    return getMcpConnectionOptions(entry).some((option) =>\n      transportMatchesServer(option.transport, server),\n    );\n  });\n}\n"],"mappings":";AA6BA,SAAgB,EACd,GACkC;AAClC,QAAO,EAAM,kBAAkB,QAC5B,MACC,EAAO,aAAa,SAAS,CAAC,CAAC,EAAO,UACzC;;AAGH,SAAgB,EACd,GAC4C;AAC5C,QAAO,EAAwB,EAAM,CAAC;;AAGxC,SAAS,EACP,GACS;AACT,KAAI,EAAO,KAAK,aAAa,SAAU,QAAO;CAE9C,IAAM,IAAQ,EAAO,KAAK;AAO1B,QANK,IAOH,CAAC,EAAM,oBACP,CAAC,EAAM,YACP,CAAC,EAAM,mBACP,CAAC,EAAM,iCACP,CAAC,EAAM,wBAXU;;AAerB,SAAgB,EACd,GAC4C;AAC5C,QAAO,EAAwB,EAAM,CAAC,KAAK,EAA8B;;AAG3E,SAAgB,EACd,GACkC;AAClC,QAAO,EAA8B,EAAM,EAAE;;AAG/C,SAAS,EACP,GACsC;AACtC,SAAQ,GAAR;EACE,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE;;;AAIN,SAAgB,EACd,GACqC;AACrC,KAAI,EAAO,KAAK,aAAa,SAAU;CACvC,IAAM,IAA0C,EAAE,MAAM,SAAS,EAC3D,IAAmB,EACvB,EAAO,KAAK,OAAO,qBACpB;AAOD,QANI,MACF,EAAe,qBAAqB,IAElC,EAAO,KAAK,OAAO,QAAQ,WAC7B,EAAe,SAAS,EAAO,KAAK,MAAM,SAErC,OAAO,KAAK,EAAe,CAAC,SAAS,IAAI,IAAiB,KAAA;;AAGnE,SAAgB,EACd,GACoB;AACpB,QAAO,EAAQ,QAAQ,MAAU,CAAC,CAAC,EAA8B,EAAM,CAAC;;AAG1E,IAAM,KAAU,MAA4B;AAC1C,KAAI;AACF,SAAO,IAAI,IAAI,EAAI;SACb;AACN,SAAO;;;AAeX,SAAgB,EAAU,GAAY,GAAqB;CACzD,IAAM,IAAO,OAAO,KAAM,WAAW,IAAI,IACnC,IAAO,OAAO,KAAM,WAAW,IAAI;AACzC,KAAI,CAAC,KAAQ,CAAC,EAAM,QAAO;CAC3B,IAAM,IAAO,EAAO,EAAK,EACnB,IAAQ,EAAO,EAAK;AAI1B,QAHI,CAAC,KAAQ,CAAC,IACL,EAAK,QAAQ,QAAQ,GAAG,KAAK,EAAK,QAAQ,QAAQ,GAAG,GAG5D,EAAK,aAAa,EAAM,YACxB,EAAK,SAAS,EAAM,QACpB,EAAK,SAAS,QAAQ,QAAQ,GAAG,KAAK,EAAM,SAAS,QAAQ,QAAQ,GAAG;;AA6B5E,SAAS,EACP,GACA,GACS;AACT,KAAI,EAAU,SAAS,SAAS;EAC9B,IAAM,IAAS,EAAU;AACzB,SACE,EAAO,SAAS,WAAW,CAAC,CAAC,EAAO,OAAO,EAAU,EAAO,KAAK,EAAO;;AAI5E,KAAI,EAAU,SAAS,OAAO;EAC5B,IAAM,IAAS,EAAU;AACzB,SACE,EAAO,SAAS,SAAS,CAAC,CAAC,EAAO,OAAO,EAAU,EAAO,KAAK,EAAO;;AAK1E,QAAO,EAAO,SAAS,WAAW,EAAO,SAAS,EAAU;;AAG9D,SAAS,EAAU,GAAuB;AACxC,QAAO,EAAM,MAAM,CAAC,aAAa;;AAQnC,SAAgB,EACd,GACoB;AACpB,QAAO,EACJ,KAAK,GAAO,OAAW;EAAE;EAAO;EAAO,EAAE,CACzC,MAAM,GAAG,OAEL,EAAE,MAAM,kBAAkB,MAAM,EAAE,MAAM,kBAAkB,MACtC,EAAE,QAAQ,EAAE,MACnC,CACD,KAAK,EAAE,eAAY,EAAM;;AAU9B,SAAgB,EACd,GACA,GACS;CACT,IAAM,IAAI,EAAU,EAAS;AAU7B,QATK,IACY;EACf,EAAM;EACN,EAAM;EACN,EAAM;EACN,GAAI,EAAM,YAAY,EAAE;EACzB,CACE,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,GATZ;;AAmBjB,SAAgB,EACd,GACA,GACA,GACS;CACT,IAAM,IAAI,EAAU,EAAS;AAgB7B,QAfK,IACY;EACf,EAAO;EACP,UAAU,IAAS,EAAO,OAAO,KAAA;EACjC,aAAa,IAAS,EAAO,UAAU,KAAA;EACvC,UAAU,IAAS,EAAO,MAAM,KAAK,IAAI,GAAG,KAAA;EAC5C,SAAS,IAAS,EAAO,MAAM,KAAA;EAC/B,GAAc;EACd,GAAc;EACd,GAAc;EACd,GAAI,GAAc,YAAY,EAAE;EACjC,CACE,OAAO,QAAQ,CACf,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,GAfZ;;AAuBjB,SAAgB,EACd,GACA,GAC8B;AAC9B,QAAO,EAAQ,MAAM,MAIZ,EAAwB,EAAM,CAAC,MAAM,MAC1C,EAAuB,EAAO,WAAW,EAAO,CACjD,CACD"}

package/dist/utils/mcp-server-name.cjs

@@ -0,0 +1,2 @@
+require(`../_virtual/_rolldown/runtime.cjs`);var e=/^[a-zA-Z0-9_]+$/;function t(t){return e.test(t)}function n(e,t=`mcp`){return e.trim().replace(/[^a-zA-Z0-9_]+/g,`_`).replace(/_+/g,`_`).replace(/^_+|_+$/g,``)||t}exports.MCP_SERVER_NAME_PATTERN=e,exports.isValidMcpServerName=t,exports.toMcpServerName=n;
+//# sourceMappingURL=mcp-server-name.cjs.map

package/dist/utils/mcp-server-name.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-name.cjs","names":[],"sources":["../../src/utils/mcp-server-name.ts"],"sourcesContent":["export const MCP_SERVER_NAME_PATTERN = /^[a-zA-Z0-9_]+$/;\n\nexport function isValidMcpServerName(name: string): boolean {\n  return MCP_SERVER_NAME_PATTERN.test(name);\n}\n\nexport function toMcpServerName(value: string, fallback = \"mcp\"): string {\n  const normalized = value\n    .trim()\n    .replace(/[^a-zA-Z0-9_]+/g, \"_\")\n    .replace(/_+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n\n  return normalized || fallback;\n}\n"],"mappings":"6CAAA,IAAa,EAA0B,kBAEvC,SAAgB,EAAqB,EAAuB,CAC1D,OAAO,EAAwB,KAAK,EAAK,CAG3C,SAAgB,EAAgB,EAAe,EAAW,MAAe,CAOvE,OANmB,EAChB,MAAM,CACN,QAAQ,kBAAmB,IAAI,CAC/B,QAAQ,MAAO,IAAI,CACnB,QAAQ,WAAY,GAEhB,EAAc"}

package/dist/utils/mcp-server-name.d.ts

@@ -0,0 +1,3 @@
+export declare const MCP_SERVER_NAME_PATTERN: RegExp;
+export declare function isValidMcpServerName(name: string): boolean;
+export declare function toMcpServerName(value: string, fallback?: string): string;

package/dist/utils/mcp-server-name.js

@@ -0,0 +1,12 @@
+//#region src/utils/mcp-server-name.ts
+var e = /^[a-zA-Z0-9_]+$/;
+function t(t) {
+	return e.test(t);
+}
+function n(e, t = "mcp") {
+	return e.trim().replace(/[^a-zA-Z0-9_]+/g, "_").replace(/_+/g, "_").replace(/^_+|_+$/g, "") || t;
+}
+//#endregion
+export { e as MCP_SERVER_NAME_PATTERN, t as isValidMcpServerName, n as toMcpServerName };
+
+//# sourceMappingURL=mcp-server-name.js.map

package/dist/utils/mcp-server-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-name.js","names":[],"sources":["../../src/utils/mcp-server-name.ts"],"sourcesContent":["export const MCP_SERVER_NAME_PATTERN = /^[a-zA-Z0-9_]+$/;\n\nexport function isValidMcpServerName(name: string): boolean {\n  return MCP_SERVER_NAME_PATTERN.test(name);\n}\n\nexport function toMcpServerName(value: string, fallback = \"mcp\"): string {\n  const normalized = value\n    .trim()\n    .replace(/[^a-zA-Z0-9_]+/g, \"_\")\n    .replace(/_+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n\n  return normalized || fallback;\n}\n"],"mappings":";AAAA,IAAa,IAA0B;AAEvC,SAAgB,EAAqB,GAAuB;AAC1D,QAAO,EAAwB,KAAK,EAAK;;AAG3C,SAAgB,EAAgB,GAAe,IAAW,OAAe;AAOvE,QANmB,EAChB,MAAM,CACN,QAAQ,mBAAmB,IAAI,CAC/B,QAAQ,OAAO,IAAI,CACnB,QAAQ,YAAY,GAEhB,IAAc"}

package/dist/utils/plugin-display.cjs

@@ -0,0 +1,2 @@
+require(`../_virtual/_rolldown/runtime.cjs`);function e(e){if(e.name)return e.name;if(e.repo_path){let t=e.repo_path.split(`/`).filter(Boolean);if(t.length>0)return t[t.length-1]}let{source:t}=e;return t.startsWith(`github:`)?t.replace(`github:`,``):t.includes(`/`)&&t.split(`/`).pop()?.replace(/\.git$/,``)||t}function t(e){let{source:t}=e;return!(t.startsWith(`github:`)||/^[a-z][a-z0-9+.-]*:\/\//i.test(t))}function n(e){let t=e.source.startsWith(`github:`)?e.source.replace(`github:`,``):e.source;return e.ref?`${t} @ ${e.ref}`:t}function r(e){return[e.source,e.ref??``,e.repo_path??``].join(` `)}exports.getPluginDisplayName=e,exports.getPluginSourceLabel=n,exports.isLocalPluginSource=t,exports.pluginReferenceKey=r;
+//# sourceMappingURL=plugin-display.cjs.map

package/dist/utils/plugin-display.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-display.cjs","names":[],"sources":["../../src/utils/plugin-display.ts"],"sourcesContent":["import type { PluginSpec } from \"#/api/conversation-service/agent-server-conversation-service.types\";\n\n/**\n * Friendly display name for a plugin reference: the explicit `name` when set\n * (e.g. an installed plugin's name), otherwise the last segment of `repo_path`,\n * otherwise the repo from the `source` coordinate. Mirrors the `/launch` modal's\n * naming so the same plugin reads consistently across surfaces.\n */\nexport function getPluginDisplayName(plugin: PluginSpec): string {\n  if (plugin.name) return plugin.name;\n  if (plugin.repo_path) {\n    const parts = plugin.repo_path.split(\"/\").filter(Boolean);\n    if (parts.length > 0) return parts[parts.length - 1];\n  }\n  const { source } = plugin;\n  if (source.startsWith(\"github:\")) return source.replace(\"github:\", \"\");\n  if (source.includes(\"/\")) {\n    return (\n      source\n        .split(\"/\")\n        .pop()\n        ?.replace(/\\.git$/, \"\") || source\n    );\n  }\n  return source;\n}\n\n/**\n * True when the plugin was installed from the local machine — the `\"local\"`\n * sentinel or a filesystem path — rather than a remote git source (`github:…`\n * or a URL). These read inconsistently (a bare `\"local\"` vs a long absolute\n * path that also leaks the home dir), so callers render one normalized label\n * for them instead of {@link getPluginSourceLabel}.\n */\nexport function isLocalPluginSource(plugin: PluginSpec): boolean {\n  const { source } = plugin;\n  if (source.startsWith(\"github:\")) return false;\n  if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(source)) return false; // git URL\n  return true;\n}\n\n/** Source coordinate with an optional `@ref`, e.g. \"OpenHands/extensions @ main\". */\nexport function getPluginSourceLabel(plugin: PluginSpec): string {\n  const base = plugin.source.startsWith(\"github:\")\n    ? plugin.source.replace(\"github:\", \"\")\n    : plugin.source;\n  return plugin.ref ? `${base} @ ${plugin.ref}` : base;\n}\n\n/** Stable key for a plugin reference (coordinates only). */\nexport function pluginReferenceKey(plugin: PluginSpec): string {\n  return [plugin.source, plugin.ref ?? \"\", plugin.repo_path ?? \"\"].join(\" \");\n}\n"],"mappings":"6CAQA,SAAgB,EAAqB,EAA4B,CAC/D,GAAI,EAAO,KAAM,OAAO,EAAO,KAC/B,GAAI,EAAO,UAAW,CACpB,IAAM,EAAQ,EAAO,UAAU,MAAM,IAAI,CAAC,OAAO,QAAQ,CACzD,GAAI,EAAM,OAAS,EAAG,OAAO,EAAM,EAAM,OAAS,GAEpD,GAAM,CAAE,UAAW,EAUnB,OATI,EAAO,WAAW,UAAU,CAAS,EAAO,QAAQ,UAAW,GAAG,CAClE,EAAO,SAAS,IAAI,EAEpB,EACG,MAAM,IAAI,CACV,KAAK,EACJ,QAAQ,SAAU,GAAG,EAGtB,EAUT,SAAgB,EAAoB,EAA6B,CAC/D,GAAM,CAAE,UAAW,EAGnB,MADA,EADI,EAAO,WAAW,UAAU,EAC5B,2BAA2B,KAAK,EAAO,EAK7C,SAAgB,EAAqB,EAA4B,CAC/D,IAAM,EAAO,EAAO,OAAO,WAAW,UAAU,CAC5C,EAAO,OAAO,QAAQ,UAAW,GAAG,CACpC,EAAO,OACX,OAAO,EAAO,IAAM,GAAG,EAAK,KAAK,EAAO,MAAQ,EAIlD,SAAgB,EAAmB,EAA4B,CAC7D,MAAO,CAAC,EAAO,OAAQ,EAAO,KAAO,GAAI,EAAO,WAAa,GAAG,CAAC,KAAK,IAAI"}

package/dist/utils/plugin-display.d.ts

@@ -0,0 +1,20 @@
+import type { PluginSpec } from "#/api/conversation-service/agent-server-conversation-service.types";
+/**
+ * Friendly display name for a plugin reference: the explicit `name` when set
+ * (e.g. an installed plugin's name), otherwise the last segment of `repo_path`,
+ * otherwise the repo from the `source` coordinate. Mirrors the `/launch` modal's
+ * naming so the same plugin reads consistently across surfaces.
+ */
+export declare function getPluginDisplayName(plugin: PluginSpec): string;
+/**
+ * True when the plugin was installed from the local machine — the `"local"`
+ * sentinel or a filesystem path — rather than a remote git source (`github:…`
+ * or a URL). These read inconsistently (a bare `"local"` vs a long absolute
+ * path that also leaks the home dir), so callers render one normalized label
+ * for them instead of {@link getPluginSourceLabel}.
+ */
+export declare function isLocalPluginSource(plugin: PluginSpec): boolean;
+/** Source coordinate with an optional `@ref`, e.g. "OpenHands/extensions @ main". */
+export declare function getPluginSourceLabel(plugin: PluginSpec): string;
+/** Stable key for a plugin reference (coordinates only). */
+export declare function pluginReferenceKey(plugin: PluginSpec): string;

package/dist/utils/plugin-display.js

@@ -0,0 +1,29 @@
+//#region src/utils/plugin-display.ts
+function e(e) {
+	if (e.name) return e.name;
+	if (e.repo_path) {
+		let t = e.repo_path.split("/").filter(Boolean);
+		if (t.length > 0) return t[t.length - 1];
+	}
+	let { source: t } = e;
+	return t.startsWith("github:") ? t.replace("github:", "") : t.includes("/") && t.split("/").pop()?.replace(/\.git$/, "") || t;
+}
+function t(e) {
+	let { source: t } = e;
+	return !(t.startsWith("github:") || /^[a-z][a-z0-9+.-]*:\/\//i.test(t));
+}
+function n(e) {
+	let t = e.source.startsWith("github:") ? e.source.replace("github:", "") : e.source;
+	return e.ref ? `${t} @ ${e.ref}` : t;
+}
+function r(e) {
+	return [
+		e.source,
+		e.ref ?? "",
+		e.repo_path ?? ""
+	].join(" ");
+}
+//#endregion
+export { e as getPluginDisplayName, n as getPluginSourceLabel, t as isLocalPluginSource, r as pluginReferenceKey };
+
+//# sourceMappingURL=plugin-display.js.map

package/dist/utils/plugin-display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-display.js","names":[],"sources":["../../src/utils/plugin-display.ts"],"sourcesContent":["import type { PluginSpec } from \"#/api/conversation-service/agent-server-conversation-service.types\";\n\n/**\n * Friendly display name for a plugin reference: the explicit `name` when set\n * (e.g. an installed plugin's name), otherwise the last segment of `repo_path`,\n * otherwise the repo from the `source` coordinate. Mirrors the `/launch` modal's\n * naming so the same plugin reads consistently across surfaces.\n */\nexport function getPluginDisplayName(plugin: PluginSpec): string {\n  if (plugin.name) return plugin.name;\n  if (plugin.repo_path) {\n    const parts = plugin.repo_path.split(\"/\").filter(Boolean);\n    if (parts.length > 0) return parts[parts.length - 1];\n  }\n  const { source } = plugin;\n  if (source.startsWith(\"github:\")) return source.replace(\"github:\", \"\");\n  if (source.includes(\"/\")) {\n    return (\n      source\n        .split(\"/\")\n        .pop()\n        ?.replace(/\\.git$/, \"\") || source\n    );\n  }\n  return source;\n}\n\n/**\n * True when the plugin was installed from the local machine — the `\"local\"`\n * sentinel or a filesystem path — rather than a remote git source (`github:…`\n * or a URL). These read inconsistently (a bare `\"local\"` vs a long absolute\n * path that also leaks the home dir), so callers render one normalized label\n * for them instead of {@link getPluginSourceLabel}.\n */\nexport function isLocalPluginSource(plugin: PluginSpec): boolean {\n  const { source } = plugin;\n  if (source.startsWith(\"github:\")) return false;\n  if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(source)) return false; // git URL\n  return true;\n}\n\n/** Source coordinate with an optional `@ref`, e.g. \"OpenHands/extensions @ main\". */\nexport function getPluginSourceLabel(plugin: PluginSpec): string {\n  const base = plugin.source.startsWith(\"github:\")\n    ? plugin.source.replace(\"github:\", \"\")\n    : plugin.source;\n  return plugin.ref ? `${base} @ ${plugin.ref}` : base;\n}\n\n/** Stable key for a plugin reference (coordinates only). */\nexport function pluginReferenceKey(plugin: PluginSpec): string {\n  return [plugin.source, plugin.ref ?? \"\", plugin.repo_path ?? \"\"].join(\" \");\n}\n"],"mappings":";AAQA,SAAgB,EAAqB,GAA4B;AAC/D,KAAI,EAAO,KAAM,QAAO,EAAO;AAC/B,KAAI,EAAO,WAAW;EACpB,IAAM,IAAQ,EAAO,UAAU,MAAM,IAAI,CAAC,OAAO,QAAQ;AACzD,MAAI,EAAM,SAAS,EAAG,QAAO,EAAM,EAAM,SAAS;;CAEpD,IAAM,EAAE,cAAW;AAUnB,QATI,EAAO,WAAW,UAAU,GAAS,EAAO,QAAQ,WAAW,GAAG,GAClE,EAAO,SAAS,IAAI,IAEpB,EACG,MAAM,IAAI,CACV,KAAK,EACJ,QAAQ,UAAU,GAAG,IAGtB;;AAUT,SAAgB,EAAoB,GAA6B;CAC/D,IAAM,EAAE,cAAW;AAGnB,QADA,EADI,EAAO,WAAW,UAAU,IAC5B,2BAA2B,KAAK,EAAO;;AAK7C,SAAgB,EAAqB,GAA4B;CAC/D,IAAM,IAAO,EAAO,OAAO,WAAW,UAAU,GAC5C,EAAO,OAAO,QAAQ,WAAW,GAAG,GACpC,EAAO;AACX,QAAO,EAAO,MAAM,GAAG,EAAK,KAAK,EAAO,QAAQ;;AAIlD,SAAgB,EAAmB,GAA4B;AAC7D,QAAO;EAAC,EAAO;EAAQ,EAAO,OAAO;EAAI,EAAO,aAAa;EAAG,CAAC,KAAK,IAAI"}

package/dist/utils/settings-utils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-utils.cjs","names":[],"sources":["../../src/utils/settings-utils.ts"],"sourcesContent":["import { WebClientFeatureFlags } from \"#/api/option-service/option.types\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport { getProviderId } from \"#/utils/map-provider\";\n\nconst extractBasicFormData = (formData: FormData) => {\n  const providerDisplay = formData.get(\"llm-provider-input\")?.toString();\n  const provider = providerDisplay ? getProviderId(providerDisplay) : undefined;\n  const model = formData.get(\"llm-model-input\")?.toString();\n\n  return {\n    llmModel: provider && model ? `${provider}/${model}` : undefined,\n    llmApiKey: formData.get(\"llm-api-key-input\")?.toString(),\n    agent: formData.get(\"agent\")?.toString(),\n    language: formData.get(\"language\")?.toString(),\n  };\n};\n\nexport const parseMaxBudgetPerTask = (value: string): number | null => {\n  if (!value) {\n    return null;\n  }\n\n  const parsedValue = parseFloat(value);\n  return parsedValue && parsedValue >= 1 && Number.isFinite(parsedValue)\n    ? parsedValue\n    : null;\n};\n\nexport const extractSettings = (\n  formData: FormData,\n): Partial<Settings> & Record<string, unknown> => {\n  const { llmModel, llmApiKey, agent, language } =\n    extractBasicFormData(formData);\n\n  const llm: Record<string, unknown> = {};\n  if (llmModel) llm.model = llmModel;\n  if (llmApiKey !== undefined) llm.api_key = llmApiKey;\n\n  const agentSettings: Record<string, SettingsValue> = {};\n  if (Object.keys(llm).length > 0)\n    agentSettings.llm = llm as Record<string, SettingsValue>;\n  if (agent) agentSettings.agent = agent;\n\n  return {\n    ...(Object.keys(agentSettings).length > 0\n      ? { agent_settings_diff: agentSettings }\n      : {}),\n    ...(language ? { language } : {}),\n  };\n};\n\nexport function isSettingsPageHidden(\n  path: string,\n  featureFlags: WebClientFeatureFlags | undefined,\n): boolean {\n  if (featureFlags?.hide_llm_settings && path === \"/settings/llm\") return true;\n  return false;\n}\n\nexport function getFirstAvailablePath(\n  featureFlags: WebClientFeatureFlags | undefined,\n): string | null {\n  // ``/settings/agent`` always wins: it is the single place to switch\n  // agent kinds (OpenHands / ACP) and the only sub-page that is always\n  // available regardless of feature flags. Landing here keeps the\n  // routing simple — ACP users no longer have to bounce through\n  // ``/settings/llm`` (which is disabled for them), and OpenHands users\n  // are one nav-click away from the LLM page.\n  const fallbackOrder = [\n    { path: \"/settings/agent\", hidden: false },\n    { path: \"/settings/llm\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings/app\", hidden: false },\n    { path: \"/settings/secrets\", hidden: false },\n  ];\n\n  const firstAvailable = fallbackOrder.find((item) => !item.hidden);\n  return firstAvailable?.path ?? null;\n}\n"],"mappings":"mFAIA,IAAM,EAAwB,GAAuB,CACnD,IAAM,EAAkB,EAAS,IAAI,qBAAqB,EAAE,UAAU,CAChE,EAAW,EAAkB,EAAA,cAAc,EAAgB,CAAG,IAAA,GAC9D,EAAQ,EAAS,IAAI,kBAAkB,EAAE,UAAU,CAEzD,MAAO,CACL,SAAU,GAAY,EAAQ,GAAG,EAAS,GAAG,IAAU,IAAA,GACvD,UAAW,EAAS,IAAI,oBAAoB,EAAE,UAAU,CACxD,MAAO,EAAS,IAAI,QAAQ,EAAE,UAAU,CACxC,SAAU,EAAS,IAAI,WAAW,EAAE,UAAU,CAC/C,EAcU,EACX,GACgD,CAChD,GAAM,CAAE,WAAU,YAAW,QAAO,YAClC,EAAqB,EAAS,CAE1B,EAA+B,EAAE,CACnC,IAAU,EAAI,MAAQ,GACtB,IAAc,IAAA,KAAW,EAAI,QAAU,GAE3C,IAAM,EAA+C,EAAE,CAKvD,OAJI,OAAO,KAAK,EAAI,CAAC,OAAS,IAC5B,EAAc,IAAM,GAClB,IAAO,EAAc,MAAQ,GAE1B,CACL,GAAI,OAAO,KAAK,EAAc,CAAC,OAAS,EACpC,CAAE,oBAAqB,EAAe,CACtC,EAAE,CACN,GAAI,EAAW,CAAE,WAAU,CAAG,EAAE,CACjC,EAGH,SAAgB,EACd,EACA,EACS,CAET,MADA,GAAI,GAAc,mBAAqB,IAAS"}
+{"version":3,"file":"settings-utils.cjs","names":[],"sources":["../../src/utils/settings-utils.ts"],"sourcesContent":["import { WebClientFeatureFlags } from \"#/api/option-service/option.types\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport { getProviderId } from \"#/utils/map-provider\";\n\nconst extractBasicFormData = (formData: FormData) => {\n  const providerDisplay = formData.get(\"llm-provider-input\")?.toString();\n  const provider = providerDisplay ? getProviderId(providerDisplay) : undefined;\n  const model = formData.get(\"llm-model-input\")?.toString();\n\n  return {\n    llmModel: provider && model ? `${provider}/${model}` : undefined,\n    llmApiKey: formData.get(\"llm-api-key-input\")?.toString(),\n    agent: formData.get(\"agent\")?.toString(),\n    language: formData.get(\"language\")?.toString(),\n  };\n};\n\nexport const parseMaxBudgetPerTask = (value: string): number | null => {\n  if (!value) {\n    return null;\n  }\n\n  const parsedValue = parseFloat(value);\n  return parsedValue && parsedValue >= 1 && Number.isFinite(parsedValue)\n    ? parsedValue\n    : null;\n};\n\nexport const extractSettings = (\n  formData: FormData,\n): Partial<Settings> & Record<string, unknown> => {\n  const { llmModel, llmApiKey, agent, language } =\n    extractBasicFormData(formData);\n\n  const llm: Record<string, unknown> = {};\n  if (llmModel) llm.model = llmModel;\n  if (llmApiKey !== undefined) llm.api_key = llmApiKey;\n\n  const agentSettings: Record<string, SettingsValue> = {};\n  if (Object.keys(llm).length > 0)\n    agentSettings.llm = llm as Record<string, SettingsValue>;\n  if (agent) agentSettings.agent = agent;\n\n  return {\n    ...(Object.keys(agentSettings).length > 0\n      ? { agent_settings_diff: agentSettings }\n      : {}),\n    ...(language ? { language } : {}),\n  };\n};\n\nexport function isSettingsPageHidden(\n  path: string,\n  featureFlags: WebClientFeatureFlags | undefined,\n): boolean {\n  if (featureFlags?.hide_llm_settings && path === \"/settings/llm\") return true;\n  return false;\n}\n\nexport function getFirstAvailablePath(\n  featureFlags: WebClientFeatureFlags | undefined,\n): string | null {\n  // ``/settings/agents`` (the Agent Profile library — the \"Agent\" page) always\n  // wins: it is where the agent is defined (OpenHands / ACP, via the active\n  // profile) and is always available regardless of feature flags. Landing here\n  // keeps routing simple — ACP users no longer have to bounce through\n  // ``/settings/llm`` (which is disabled for them), and OpenHands users are one\n  // nav-click away from the LLM page.\n  const fallbackOrder = [\n    { path: \"/settings/agents\", hidden: false },\n    { path: \"/settings/llm\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings/app\", hidden: false },\n    { path: \"/settings/secrets\", hidden: false },\n  ];\n\n  const firstAvailable = fallbackOrder.find((item) => !item.hidden);\n  return firstAvailable?.path ?? null;\n}\n"],"mappings":"mFAIA,IAAM,EAAwB,GAAuB,CACnD,IAAM,EAAkB,EAAS,IAAI,qBAAqB,EAAE,UAAU,CAChE,EAAW,EAAkB,EAAA,cAAc,EAAgB,CAAG,IAAA,GAC9D,EAAQ,EAAS,IAAI,kBAAkB,EAAE,UAAU,CAEzD,MAAO,CACL,SAAU,GAAY,EAAQ,GAAG,EAAS,GAAG,IAAU,IAAA,GACvD,UAAW,EAAS,IAAI,oBAAoB,EAAE,UAAU,CACxD,MAAO,EAAS,IAAI,QAAQ,EAAE,UAAU,CACxC,SAAU,EAAS,IAAI,WAAW,EAAE,UAAU,CAC/C,EAcU,EACX,GACgD,CAChD,GAAM,CAAE,WAAU,YAAW,QAAO,YAClC,EAAqB,EAAS,CAE1B,EAA+B,EAAE,CACnC,IAAU,EAAI,MAAQ,GACtB,IAAc,IAAA,KAAW,EAAI,QAAU,GAE3C,IAAM,EAA+C,EAAE,CAKvD,OAJI,OAAO,KAAK,EAAI,CAAC,OAAS,IAC5B,EAAc,IAAM,GAClB,IAAO,EAAc,MAAQ,GAE1B,CACL,GAAI,OAAO,KAAK,EAAc,CAAC,OAAS,EACpC,CAAE,oBAAqB,EAAe,CACtC,EAAE,CACN,GAAI,EAAW,CAAE,WAAU,CAAG,EAAE,CACjC,EAGH,SAAgB,EACd,EACA,EACS,CAET,MADA,GAAI,GAAc,mBAAqB,IAAS"}

package/dist/utils/settings-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-utils.js","names":[],"sources":["../../src/utils/settings-utils.ts"],"sourcesContent":["import { WebClientFeatureFlags } from \"#/api/option-service/option.types\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport { getProviderId } from \"#/utils/map-provider\";\n\nconst extractBasicFormData = (formData: FormData) => {\n  const providerDisplay = formData.get(\"llm-provider-input\")?.toString();\n  const provider = providerDisplay ? getProviderId(providerDisplay) : undefined;\n  const model = formData.get(\"llm-model-input\")?.toString();\n\n  return {\n    llmModel: provider && model ? `${provider}/${model}` : undefined,\n    llmApiKey: formData.get(\"llm-api-key-input\")?.toString(),\n    agent: formData.get(\"agent\")?.toString(),\n    language: formData.get(\"language\")?.toString(),\n  };\n};\n\nexport const parseMaxBudgetPerTask = (value: string): number | null => {\n  if (!value) {\n    return null;\n  }\n\n  const parsedValue = parseFloat(value);\n  return parsedValue && parsedValue >= 1 && Number.isFinite(parsedValue)\n    ? parsedValue\n    : null;\n};\n\nexport const extractSettings = (\n  formData: FormData,\n): Partial<Settings> & Record<string, unknown> => {\n  const { llmModel, llmApiKey, agent, language } =\n    extractBasicFormData(formData);\n\n  const llm: Record<string, unknown> = {};\n  if (llmModel) llm.model = llmModel;\n  if (llmApiKey !== undefined) llm.api_key = llmApiKey;\n\n  const agentSettings: Record<string, SettingsValue> = {};\n  if (Object.keys(llm).length > 0)\n    agentSettings.llm = llm as Record<string, SettingsValue>;\n  if (agent) agentSettings.agent = agent;\n\n  return {\n    ...(Object.keys(agentSettings).length > 0\n      ? { agent_settings_diff: agentSettings }\n      : {}),\n    ...(language ? { language } : {}),\n  };\n};\n\nexport function isSettingsPageHidden(\n  path: string,\n  featureFlags: WebClientFeatureFlags | undefined,\n): boolean {\n  if (featureFlags?.hide_llm_settings && path === \"/settings/llm\") return true;\n  return false;\n}\n\nexport function getFirstAvailablePath(\n  featureFlags: WebClientFeatureFlags | undefined,\n): string | null {\n  // ``/settings/agent`` always wins: it is the single place to switch\n  // agent kinds (OpenHands / ACP) and the only sub-page that is always\n  // available regardless of feature flags. Landing here keeps the\n  // routing simple — ACP users no longer have to bounce through\n  // ``/settings/llm`` (which is disabled for them), and OpenHands users\n  // are one nav-click away from the LLM page.\n  const fallbackOrder = [\n    { path: \"/settings/agent\", hidden: false },\n    { path: \"/settings/llm\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings/app\", hidden: false },\n    { path: \"/settings/secrets\", hidden: false },\n  ];\n\n  const firstAvailable = fallbackOrder.find((item) => !item.hidden);\n  return firstAvailable?.path ?? null;\n}\n"],"mappings":";;AAIA,IAAM,KAAwB,MAAuB;CACnD,IAAM,IAAkB,EAAS,IAAI,qBAAqB,EAAE,UAAU,EAChE,IAAW,IAAkB,EAAc,EAAgB,GAAG,KAAA,GAC9D,IAAQ,EAAS,IAAI,kBAAkB,EAAE,UAAU;AAEzD,QAAO;EACL,UAAU,KAAY,IAAQ,GAAG,EAAS,GAAG,MAAU,KAAA;EACvD,WAAW,EAAS,IAAI,oBAAoB,EAAE,UAAU;EACxD,OAAO,EAAS,IAAI,QAAQ,EAAE,UAAU;EACxC,UAAU,EAAS,IAAI,WAAW,EAAE,UAAU;EAC/C;GAcU,KACX,MACgD;CAChD,IAAM,EAAE,aAAU,cAAW,UAAO,gBAClC,EAAqB,EAAS,EAE1B,IAA+B,EAAE;AAEvC,CADI,MAAU,EAAI,QAAQ,IACtB,MAAc,KAAA,MAAW,EAAI,UAAU;CAE3C,IAAM,IAA+C,EAAE;AAKvD,QAJI,OAAO,KAAK,EAAI,CAAC,SAAS,MAC5B,EAAc,MAAM,IAClB,MAAO,EAAc,QAAQ,IAE1B;EACL,GAAI,OAAO,KAAK,EAAc,CAAC,SAAS,IACpC,EAAE,qBAAqB,GAAe,GACtC,EAAE;EACN,GAAI,IAAW,EAAE,aAAU,GAAG,EAAE;EACjC;;AAGH,SAAgB,EACd,GACA,GACS;AAET,QADA,GAAI,GAAc,qBAAqB,MAAS"}
+{"version":3,"file":"settings-utils.js","names":[],"sources":["../../src/utils/settings-utils.ts"],"sourcesContent":["import { WebClientFeatureFlags } from \"#/api/option-service/option.types\";\nimport { Settings, SettingsValue } from \"#/types/settings\";\nimport { getProviderId } from \"#/utils/map-provider\";\n\nconst extractBasicFormData = (formData: FormData) => {\n  const providerDisplay = formData.get(\"llm-provider-input\")?.toString();\n  const provider = providerDisplay ? getProviderId(providerDisplay) : undefined;\n  const model = formData.get(\"llm-model-input\")?.toString();\n\n  return {\n    llmModel: provider && model ? `${provider}/${model}` : undefined,\n    llmApiKey: formData.get(\"llm-api-key-input\")?.toString(),\n    agent: formData.get(\"agent\")?.toString(),\n    language: formData.get(\"language\")?.toString(),\n  };\n};\n\nexport const parseMaxBudgetPerTask = (value: string): number | null => {\n  if (!value) {\n    return null;\n  }\n\n  const parsedValue = parseFloat(value);\n  return parsedValue && parsedValue >= 1 && Number.isFinite(parsedValue)\n    ? parsedValue\n    : null;\n};\n\nexport const extractSettings = (\n  formData: FormData,\n): Partial<Settings> & Record<string, unknown> => {\n  const { llmModel, llmApiKey, agent, language } =\n    extractBasicFormData(formData);\n\n  const llm: Record<string, unknown> = {};\n  if (llmModel) llm.model = llmModel;\n  if (llmApiKey !== undefined) llm.api_key = llmApiKey;\n\n  const agentSettings: Record<string, SettingsValue> = {};\n  if (Object.keys(llm).length > 0)\n    agentSettings.llm = llm as Record<string, SettingsValue>;\n  if (agent) agentSettings.agent = agent;\n\n  return {\n    ...(Object.keys(agentSettings).length > 0\n      ? { agent_settings_diff: agentSettings }\n      : {}),\n    ...(language ? { language } : {}),\n  };\n};\n\nexport function isSettingsPageHidden(\n  path: string,\n  featureFlags: WebClientFeatureFlags | undefined,\n): boolean {\n  if (featureFlags?.hide_llm_settings && path === \"/settings/llm\") return true;\n  return false;\n}\n\nexport function getFirstAvailablePath(\n  featureFlags: WebClientFeatureFlags | undefined,\n): string | null {\n  // ``/settings/agents`` (the Agent Profile library — the \"Agent\" page) always\n  // wins: it is where the agent is defined (OpenHands / ACP, via the active\n  // profile) and is always available regardless of feature flags. Landing here\n  // keeps routing simple — ACP users no longer have to bounce through\n  // ``/settings/llm`` (which is disabled for them), and OpenHands users are one\n  // nav-click away from the LLM page.\n  const fallbackOrder = [\n    { path: \"/settings/agents\", hidden: false },\n    { path: \"/settings/llm\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings\", hidden: !!featureFlags?.hide_llm_settings },\n    { path: \"/settings/app\", hidden: false },\n    { path: \"/settings/secrets\", hidden: false },\n  ];\n\n  const firstAvailable = fallbackOrder.find((item) => !item.hidden);\n  return firstAvailable?.path ?? null;\n}\n"],"mappings":";;AAIA,IAAM,KAAwB,MAAuB;CACnD,IAAM,IAAkB,EAAS,IAAI,qBAAqB,EAAE,UAAU,EAChE,IAAW,IAAkB,EAAc,EAAgB,GAAG,KAAA,GAC9D,IAAQ,EAAS,IAAI,kBAAkB,EAAE,UAAU;AAEzD,QAAO;EACL,UAAU,KAAY,IAAQ,GAAG,EAAS,GAAG,MAAU,KAAA;EACvD,WAAW,EAAS,IAAI,oBAAoB,EAAE,UAAU;EACxD,OAAO,EAAS,IAAI,QAAQ,EAAE,UAAU;EACxC,UAAU,EAAS,IAAI,WAAW,EAAE,UAAU;EAC/C;GAcU,KACX,MACgD;CAChD,IAAM,EAAE,aAAU,cAAW,UAAO,gBAClC,EAAqB,EAAS,EAE1B,IAA+B,EAAE;AAEvC,CADI,MAAU,EAAI,QAAQ,IACtB,MAAc,KAAA,MAAW,EAAI,UAAU;CAE3C,IAAM,IAA+C,EAAE;AAKvD,QAJI,OAAO,KAAK,EAAI,CAAC,SAAS,MAC5B,EAAc,MAAM,IAClB,MAAO,EAAc,QAAQ,IAE1B;EACL,GAAI,OAAO,KAAK,EAAc,CAAC,SAAS,IACpC,EAAE,qBAAqB,GAAe,GACtC,EAAE;EACN,GAAI,IAAW,EAAE,aAAU,GAAG,EAAE;EACjC;;AAGH,SAAgB,EACd,GACA,GACS;AAET,QADA,GAAI,GAAc,qBAAqB,MAAS"}

package/dist/utils/workspaces-compatibility.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../i18n/declaration.cjs`),t=require(`../node_modules/@openhands/typescript-client/dist/client/agent-server-compatibility.cjs`);function n(n,r){return t.isAgentServerVersionError(n)?r(e.I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER,{actualVersion:n.actualVersion,requiredVersion:n.requiredVersion}):null}exports.getWorkspacesUnsupportedMessage=n;
+require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../i18n/declaration.cjs`),t=require(`../node_modules/@openhands/typescript-client/dist/client/agent-server-compatibility.cjs`);require(`../node_modules/@openhands/typescript-client/dist/clients.cjs`);function n(n,r){return t.isAgentServerVersionError(n)?r(e.I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER,{actualVersion:n.actualVersion,requiredVersion:n.requiredVersion}):null}exports.getWorkspacesUnsupportedMessage=n;
 //# sourceMappingURL=workspaces-compatibility.cjs.map

package/dist/utils/workspaces-compatibility.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces-compatibility.cjs","names":[],"sources":["../../src/utils/workspaces-compatibility.ts"],"sourcesContent":["import type { TFunction } from \"i18next\";\nimport { isAgentServerVersionError } from \"@openhands/typescript-client/clients\";\n\nimport { I18nKey } from \"#/i18n/declaration\";\n\nexport function getWorkspacesUnsupportedMessage(\n  error: unknown,\n  t: TFunction<\"openhands\">,\n) {\n  if (!isAgentServerVersionError(error)) {\n    return null;\n  }\n\n  return t(I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER, {\n    actualVersion: error.actualVersion,\n    requiredVersion: error.requiredVersion,\n  });\n}\n"],"mappings":"6LAKA,SAAgB,EACd,EACA,EACA,CAKA,OAJK,EAAA,0BAA0B,EAAM,CAI9B,EAAE,EAAA,QAAQ,yCAA0C,CACzD,cAAe,EAAM,cACrB,gBAAiB,EAAM,gBACxB,CAAC,CANO"}
+{"version":3,"file":"workspaces-compatibility.cjs","names":[],"sources":["../../src/utils/workspaces-compatibility.ts"],"sourcesContent":["import type { TFunction } from \"i18next\";\nimport { isAgentServerVersionError } from \"@openhands/typescript-client/clients\";\n\nimport { I18nKey } from \"#/i18n/declaration\";\n\nexport function getWorkspacesUnsupportedMessage(\n  error: unknown,\n  t: TFunction<\"openhands\">,\n) {\n  if (!isAgentServerVersionError(error)) {\n    return null;\n  }\n\n  return t(I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER, {\n    actualVersion: error.actualVersion,\n    requiredVersion: error.requiredVersion,\n  });\n}\n"],"mappings":"sQAKA,SAAgB,EACd,EACA,EACA,CAKA,OAJK,EAAA,0BAA0B,EAAM,CAI9B,EAAE,EAAA,QAAQ,yCAA0C,CACzD,cAAe,EAAM,cACrB,gBAAiB,EAAM,gBACxB,CAAC,CANO"}

package/dist/utils/workspaces-compatibility.js

@@ -1,5 +1,6 @@
 import { I18nKey as e } from "../i18n/declaration.js";
 import { isAgentServerVersionError as t } from "../node_modules/@openhands/typescript-client/dist/client/agent-server-compatibility.js";
+import "../node_modules/@openhands/typescript-client/dist/clients.js";
 //#region src/utils/workspaces-compatibility.ts
 function n(n, r) {
 	return t(n) ? r(e.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER, {

package/dist/utils/workspaces-compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces-compatibility.js","names":[],"sources":["../../src/utils/workspaces-compatibility.ts"],"sourcesContent":["import type { TFunction } from \"i18next\";\nimport { isAgentServerVersionError } from \"@openhands/typescript-client/clients\";\n\nimport { I18nKey } from \"#/i18n/declaration\";\n\nexport function getWorkspacesUnsupportedMessage(\n  error: unknown,\n  t: TFunction<\"openhands\">,\n) {\n  if (!isAgentServerVersionError(error)) {\n    return null;\n  }\n\n  return t(I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER, {\n    actualVersion: error.actualVersion,\n    requiredVersion: error.requiredVersion,\n  });\n}\n"],"mappings":";;;AAKA,SAAgB,EACd,GACA,GACA;AAKA,QAJK,EAA0B,EAAM,GAI9B,EAAE,EAAQ,0CAA0C;EACzD,eAAe,EAAM;EACrB,iBAAiB,EAAM;EACxB,CAAC,GANO"}
+{"version":3,"file":"workspaces-compatibility.js","names":[],"sources":["../../src/utils/workspaces-compatibility.ts"],"sourcesContent":["import type { TFunction } from \"i18next\";\nimport { isAgentServerVersionError } from \"@openhands/typescript-client/clients\";\n\nimport { I18nKey } from \"#/i18n/declaration\";\n\nexport function getWorkspacesUnsupportedMessage(\n  error: unknown,\n  t: TFunction<\"openhands\">,\n) {\n  if (!isAgentServerVersionError(error)) {\n    return null;\n  }\n\n  return t(I18nKey.HOME$WORKSPACES_UNSUPPORTED_AGENT_SERVER, {\n    actualVersion: error.actualVersion,\n    requiredVersion: error.requiredVersion,\n  });\n}\n"],"mappings":";;;;AAKA,SAAgB,EACd,GACA,GACA;AAKA,QAJK,EAA0B,EAAM,GAI9B,EAAE,EAAQ,0CAA0C;EACzD,eAAe,EAAM;EACrB,iBAAiB,EAAM;EACxB,CAAC,GANO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openhands/agent-canvas",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Agent Canvas UI for OpenHands - run AI coding agents with a visual interface",
   "license": "MIT",
   "private": false,
@@ -23,8 +23,8 @@
     "@heroui/react": "2.8.10",
     "@microlink/react-json-view": "1.31.20",
     "@monaco-editor/react": "4.7.0",
-    "@openhands/extensions": "0.6.0",
-    "@openhands/typescript-client": "1.27.0",
+    "@openhands/extensions": "0.8.0",
+    "@openhands/typescript-client": "1.32.1",
     "@react-router/node": "7.17.0",
     "@react-router/serve": "7.17.0",
     "@tailwindcss/vite": "4.2.4",
@@ -38,6 +38,7 @@
     "clsx": "2.1.1",
     "downshift": "9.3.2",
     "framer-motion": "12.38.0",
+    "httpxy": "0.5.3",
     "i18next": "26.0.8",
     "i18next-browser-languagedetector": "8.2.1",
     "i18next-http-backend": "4.0.0",
@@ -58,6 +59,7 @@
     "remark-breaks": "4.0.0",
     "remark-gfm": "4.0.1",
     "shell-quote": "1.8.4",
+    "sirv": "3.0.2",
     "sirv-cli": "3.0.1",
     "socket.io-client": "4.8.3",
     "tailwind-merge": "3.5.0",
@@ -97,7 +99,8 @@
     "check-translation-completeness": "node scripts/check-translation-completeness.cjs",
     "build:app": "npm run make-i18n && react-router build",
     "build:lib": "npm run make-i18n && react-router typegen && cross-env BUILD_LIB=true VITE_APP_ENV=production vite build && tsc -p tsconfig.lib.json",
-    "build:docker": "node scripts/docker-build.mjs"
+    "build:docker": "node scripts/docker-build.mjs",
+    "example:acp-docker:env": "node scripts/gen-acp-docker-env.mjs"
   },
   "lint-staged": {
     "src/**/*.{ts,tsx,js}": [

package/scripts/check-sdk-version-sync.mjs

@@ -19,7 +19,7 @@
  *
  * Usage:
  *   node scripts/check-sdk-version-sync.mjs
- *   EXPECTED_SDK_VERSION=1.29.0 node scripts/check-sdk-version-sync.mjs
+ *   EXPECTED_SDK_VERSION=1.33.0 node scripts/check-sdk-version-sync.mjs
  *   node scripts/check-sdk-version-sync.mjs --check-pypi
  *
  * Environment variables:
@@ -78,7 +78,7 @@ Triggering from other repos:
     -H "Authorization: token \$GITHUB_TOKEN" \\
     -H "Accept: application/vnd.github.v3+json" \\
     https://api.github.com/repos/OpenHands/agent-canvas/dispatches \\
-    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.29.0"}}'
+    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.33.0"}}'
 `);
   process.exit(0);
 }
@@ -260,9 +260,9 @@ async function fetchPyPIDependencies(packageName, version) {
  * Parse PyPI requires_dist array and extract SDK package versions
  *
  * PyPI returns dependencies in PEP 508 format like:
- *   "openhands-sdk>=1.29.0,<2.0.0"
- *   "openhands-tools==1.29.0"
- *   "openhands-workspace (>=1.29.0)"
+ *   "openhands-sdk>=1.33.0,<2.0.0"
+ *   "openhands-tools==1.33.0"
+ *   "openhands-workspace (>=1.33.0)"
  */
 function parseSdkVersionsFromRequiresDist(requiresDist) {
   const versions = {};
@@ -276,7 +276,7 @@ function parseSdkVersionsFromRequiresDist(requiresDist) {
       }
 
       // Extract the version number - look for patterns like:
-      // ">=1.29.0", "==1.29.0", "(>=1.29.0)", "~=1.29.0"
+      // ">=1.33.0", "==1.33.0", "(>=1.33.0)", "~=1.33.0"
       // After the package name and before any comma or closing paren
       const versionPattern = /[><=~!]+\s*([0-9]+(?:\.[0-9]+)*)/;
       const match = dep.match(versionPattern);

package/scripts/check-translation-completeness.cjs

@@ -20,6 +20,7 @@ const IDENTICAL_VALUE_ALLOWLIST = new Set([
   'BACKEND$CLOUD_TITLE',
   'BACKEND$VERSION_LABEL',
   'BRANDING$OPENHANDS',
+  'COMMAND_MENU$SHORTCUT',
   'CONVERSATION$ACP_AGENT_GENERIC',
   'CONVERSATION$BUDGET_USAGE_FORMAT',
   'FILES$VSCODE',
@@ -37,7 +38,12 @@ const IDENTICAL_VALUE_ALLOWLIST = new Set([
   'SETTINGS$CLOUD_SETTINGS_LINK',
   'SETTINGS$GITHUB',
   'SETTINGS$GITLAB',
+  'SETTINGS$MCP_AUTH_MODE_OAUTH',
   'SETTINGS$MCP_DEFAULT_CONFIG',
+  'SETTINGS$MCP_HEADERS_PLACEHOLDER',
+  'SETTINGS$MCP_OAUTH_CLIENT_ID_PLACEHOLDER',
+  'SETTINGS$MCP_OAUTH_CLIENT_SECRET_PLACEHOLDER',
+  'SETTINGS$MCP_OAUTH_SCOPES_PLACEHOLDER',
   'SETTINGS$MCP_SERVER_TYPE_SHTTP',
   'SETTINGS$MCP_SERVER_TYPE_SSE',
   'SETTINGS$MCP_SERVER_TYPE_STDIO',

package/scripts/dev-safe.mjs

@@ -48,6 +48,11 @@ const LOCAL_AGENT_SERVER_SUBDIRS = [
   "openhands-workspace",
 ];
 const DEFAULT_AGENT_SERVER_VERSION = SHARED_DEFAULTS.versions.agentServer;
+// Temporary transitive-dep pin: openhands-sdk 1.33.0 leaves agent-client-protocol
+// unbounded (>=0.10.1), but acp 0.11.0 reordered the ACP prompt() args and breaks
+// the SDK's ACP client. Hold acp <0.11 until a fixed SDK ships. See config/defaults.json.
+const AGENT_CLIENT_PROTOCOL_CONSTRAINT =
+  SHARED_DEFAULTS.constraints?.agentClientProtocol;
 const FRONTEND_REQUIRED_BINS = ["cross-env", "react-router"];
 
 /**
@@ -394,7 +399,7 @@ export function validateFrontendDependencies(
  *   edits are picked up without a manual reinstall. The agent-server itself
  *   is rebuilt from local source on each invocation (--reinstall).
  * - OH_AGENT_SERVER_GIT_REF: Git commit SHA or branch name
- * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.29.0")
+ * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.33.0")
  *
  * If none are set, defaults to the released version specified by
  * DEFAULT_AGENT_SERVER_VERSION. Set OH_AGENT_SERVER_GIT_REF to use a
@@ -467,8 +472,11 @@ export function buildAgentServerCommand(env = process.env) {
       `openhands-tools==${version}`,
       "--with",
       `openhands-workspace==${version}`,
-      "agent-server",
     );
+    if (AGENT_CLIENT_PROTOCOL_CONSTRAINT) {
+      uvxArgs.push("--with", AGENT_CLIENT_PROTOCOL_CONSTRAINT);
+    }
+    uvxArgs.push("agent-server");
     source = `PyPI (${version})`;
   } else {
     // Default to released PyPI version
@@ -482,8 +490,11 @@ export function buildAgentServerCommand(env = process.env) {
       `openhands-tools==${DEFAULT_AGENT_SERVER_VERSION}`,
       "--with",
       `openhands-workspace==${DEFAULT_AGENT_SERVER_VERSION}`,
-      "agent-server",
     );
+    if (AGENT_CLIENT_PROTOCOL_CONSTRAINT) {
+      uvxArgs.push("--with", AGENT_CLIENT_PROTOCOL_CONSTRAINT);
+    }
+    uvxArgs.push("agent-server");
     source = `PyPI (${DEFAULT_AGENT_SERVER_VERSION}, default)`;
   }
 

package/scripts/dev-with-automation.mjs

@@ -748,6 +748,8 @@ function startAgentServer(config) {
   const agentServerEnv = {
     ...buildAgentServerEnv(safeConfig),
     ...buildAgentServerAutomationEnv(config),
+    OPENHANDS_REMOTE_WS_READY_REQUIRED:
+      process.env.OPENHANDS_REMOTE_WS_READY_REQUIRED || "false",
     // Ensure the agent-server uses the resolved key from config. This is
     // LOCAL_BACKEND_API_KEY when set, or the auto-generated persisted key.
     OH_SESSION_API_KEYS_0: config.sessionApiKey,
@@ -803,6 +805,8 @@ function startAutomationBackend(config) {
         // Force UTF-8 for all Python file I/O (same reason as agent-server;
         // see buildAgentServerEnv in dev-safe.mjs).
         PYTHONUTF8: "1",
+        OPENHANDS_REMOTE_WS_READY_REQUIRED:
+          process.env.OPENHANDS_REMOTE_WS_READY_REQUIRED || "false",
         // The URL the automation backend itself uses to call the
         // agent-server's REST API (tarball upload + bash dispatch).
         //

package/scripts/gen-acp-docker-env.mjs

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * Generate examples/acp-docker/.env from the single source of truth.
+ *
+ * Reads the version pins in config/defaults.json and writes the
+ * `AGENT_SERVER_IMAGE=` line into examples/acp-docker/.env, pinning the
+ * example to the exact `versions.agentServer` release. This keeps the
+ * reproducible quickstart path on the SoT version instead of a hardcoded
+ * tag that silently drifts below the Canvas compatibility floor
+ * (compatibility.minimumAgentServer) and renders "Disconnected".
+ *
+ * The no-config `docker compose up` path uses the compose fallback
+ * (`latest-python`, always >= the floor); running this script first pins the
+ * example to the reproducible SoT version instead.
+ *
+ * Idempotent: re-running upserts the AGENT_SERVER_IMAGE line and leaves any
+ * other lines in an existing .env untouched.
+ *
+ * Usage:
+ *   node scripts/gen-acp-docker-env.mjs        # or: npm run example:acp-docker:env
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { dirname, join } from "node:path";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const projectRoot = join(__dirname, "..");
+
+/**
+ * @param {{ images: { agentServer: string }, versions: { agentServer: string } }} config
+ * @returns {string} e.g. "ghcr.io/openhands/agent-server:1.28.1-python"
+ */
+export function computeAgentServerImage(config) {
+  return `${config.images.agentServer}:${config.versions.agentServer}-python`;
+}
+
+/**
+ * @param {{ images: { agentServer: string }, versions: { agentServer: string } }} config
+ * @returns {string} the `AGENT_SERVER_IMAGE=<image>` line
+ */
+export function renderEnvLine(config) {
+  return `AGENT_SERVER_IMAGE=${computeAgentServerImage(config)}`;
+}
+
+/**
+ * Upsert the AGENT_SERVER_IMAGE line into an existing .env body, preserving
+ * every other line. Appends the line if absent.
+ * @param {string} existing prior .env contents ("" if the file is absent)
+ * @param {string} line the `AGENT_SERVER_IMAGE=...` line to set
+ * @returns {string} the updated .env contents
+ */
+export function upsertEnvLine(existing, line) {
+  const eq = line.indexOf("=");
+  if (eq <= 0) {
+    // A keyless line ("", "novalue", "=value") would make `key` empty and
+    // match every line — refuse rather than silently rewrite the whole file.
+    throw new Error(
+      `upsertEnvLine: expected a "KEY=value" line, got "${line}"`,
+    );
+  }
+  const key = line.slice(0, eq + 1); // "AGENT_SERVER_IMAGE="
+  const lines = existing.length ? existing.replace(/\n+$/, "").split("\n") : [];
+  let replaced = false;
+  const next = lines.map((l) => {
+    if (l.startsWith(key)) {
+      replaced = true;
+      return line;
+    }
+    return l;
+  });
+  if (!replaced) next.push(line);
+  return next.join("\n") + "\n";
+}
+
+function loadConfig() {
+  return JSON.parse(
+    readFileSync(join(projectRoot, "config", "defaults.json"), "utf-8"),
+  );
+}
+
+function main() {
+  const config = loadConfig();
+  const line = renderEnvLine(config);
+  const envPath = join(projectRoot, "examples", "acp-docker", ".env");
+
+  let existing = "";
+  try {
+    existing = readFileSync(envPath, "utf-8");
+  } catch {
+    // no .env yet — create it
+  }
+
+  const updated = upsertEnvLine(existing, line);
+  writeFileSync(envPath, updated);
+  console.log(`Wrote ${line} to examples/acp-docker/.env`);
+}
+
+// Run main() only when invoked as a CLI. process.argv[1] is undefined in some
+// ESM contexts (e.g. `node --input-type=module -e "import(...)"`), so guard it
+// before pathToFileURL — otherwise importing this module for its exports throws
+// ERR_INVALID_ARG_TYPE.
+if (
+  process.argv[1] &&
+  import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+  main();
+}