@openhands/agent-canvas 1.1.0 → 1.2.1

package/dist/utils/mcp-config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-config.cjs","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"<redacted>\";\n\nconst LINEAR_DEPRECATED_SSE_URL = \"https://mcp.linear.app/sse\";\nconst LINEAR_SHTTP_URL = \"https://mcp.linear.app/mcp\";\n\n/**\n * Linear removed its MCP SSE transport (the /sse endpoint rejects every\n * call since 2026-04-08). Detect persisted configs that still point at\n * the dead endpoint so they can be migrated to streamable HTTP at the\n * /mcp replacement. Matches only the exact deprecated URL (tolerating a\n * trailing slash or query string) — nothing else is rewritten.\n */\nfunction isDeprecatedLinearSse(\n  url: string,\n  transport: string | undefined,\n): boolean {\n  if (transport !== \"sse\") return false;\n  const normalized = url.split(\"?\")[0].replace(/\\/+$/, \"\");\n  return normalized === LINEAR_DEPRECATED_SSE_URL;\n}\n\ntype SdkMcpServerConfig = Record<string, SettingsValue>;\ntype SdkMcpConfig = { mcpServers: Record<string, SdkMcpServerConfig> };\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction apiKeyFromAuthorizationHeader(value: unknown): string | undefined {\n  if (Array.isArray(value)) {\n    return value\n      .map(apiKeyFromAuthorizationHeader)\n      .find((apiKey) => apiKey !== undefined);\n  }\n\n  if (typeof value !== \"string\" || value.length === 0) return undefined;\n  const bearer = value.match(/^Bearer\\s+(.+)$/i);\n  return bearer ? bearer[1] : value;\n}\n\nfunction apiKeyFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): string | undefined {\n  const headers = serverConfig.headers;\n  const authorization =\n    headers && typeof headers === \"object\"\n      ? ((headers as Record<string, unknown>).Authorization ??\n        (headers as Record<string, unknown>).authorization)\n      : undefined;\n  const headerApiKey = apiKeyFromAuthorizationHeader(authorization);\n  if (headerApiKey) return headerApiKey;\n\n  const auth = serverConfig.auth;\n  return typeof auth === \"string\" && auth !== \"oauth\" ? auth : undefined;\n}\n\nfunction getAuthorizationHeaders(apiKey: string | undefined) {\n  if (!apiKey) return {};\n  return {\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n    },\n  };\n}\n\nfunction getRemoteCredentialFields(entry: {\n  api_key?: string;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  if (entry.api_key && entry.api_key !== REDACTED_MCP_SECRET_VALUE) {\n    return getAuthorizationHeaders(entry.api_key);\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    return { headers: entry.headers };\n  }\n  return {};\n}\n\n/**\n * Parse an SDK mcp_config value ({ mcpServers: { ... } }) and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  if (!value || typeof value !== \"object\") {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const obj = value as Record<string, unknown>;\n\n  if (\n    !(\"mcpServers\" in obj) ||\n    !obj.mcpServers ||\n    typeof obj.mcpServers !== \"object\"\n  ) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n  // Legacy Linear SSE entries rewritten to the /mcp endpoint. Collected\n  // separately and merged after the loop so an existing hand-added /mcp\n  // entry (with its own api_key/timeout) wins over the migrated one.\n  const migratedShttpServers: MCPSHTTPServer[] = [];\n\n  const mcpServers = obj.mcpServers as Record<string, Record<string, unknown>>;\n\n  for (const [serverName, serverConfig] of Object.entries(mcpServers)) {\n    if (!serverConfig || typeof serverConfig !== \"object\") continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const apiKey = apiKeyFromServerConfig(serverConfig);\n\n      if (isDeprecatedLinearSse(url, transport)) {\n        const server: MCPSHTTPServer = { url: LINEAR_SHTTP_URL };\n        if (apiKey) server.api_key = apiKey;\n        migratedShttpServers.push(server);\n      } else if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (apiKey) server.api_key = apiKey;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (apiKey) server.api_key = apiKey;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        shttpServers.push(server);\n      }\n    } else {\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command as string,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  const normalizeUrl = (u: string) => u.replace(/\\/+$/, \"\");\n  for (const migrated of migratedShttpServers) {\n    const alreadyPresent = shttpServers.some((entry) => {\n      const entryUrl = typeof entry === \"string\" ? entry : entry.url;\n      return normalizeUrl(entryUrl) === normalizeUrl(migrated.url);\n    });\n    if (!alreadyPresent) shttpServers.push(migrated);\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK { mcpServers: { ... } }\n * shape expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpServers: Record<string, SdkMcpServerConfig> = {};\n\n  const reserve = (base: string): string => {\n    if (!(base in mcpServers)) return base;\n    let i = 1;\n    while (`${base}_${i}` in mcpServers) i += 1;\n    return `${base}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteCredentialFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpServers[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteCredentialFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpServers[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpServers[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpServers).length > 0 ? { mcpServers } : null;\n}\n"],"mappings":"6CAQA,IAAM,EAA8B,CAClC,YAAa,EAAE,CACf,cAAe,EAAE,CACjB,cAAe,EAAE,CAClB,CAEY,EAA4B,aAEnC,EAA4B,6BAC5B,EAAmB,6BASzB,SAAS,EACP,EACA,EACS,CAGT,OAFI,IAAc,MACC,EAAI,MAAM,IAAI,CAAC,GAAG,QAAQ,OAAQ,GAC9C,GAAe,EAFU,GAgBlC,SAAS,EACP,EACA,EACoB,CAEpB,OAD0B,OAAO,IAAI,EAAK,WACnC,CAAc,KAAK,EAAW,CAAG,IAAA,GAAY,EAGtD,SAAS,EAA8B,EAAoC,CACzE,GAAI,MAAM,QAAQ,EAAM,CACtB,OAAO,EACJ,IAAI,EAA8B,CAClC,KAAM,GAAW,IAAW,IAAA,GAAU,CAG3C,GAAI,OAAO,GAAU,UAAY,EAAM,SAAW,EAAG,OACrD,IAAM,EAAS,EAAM,MAAM,mBAAmB,CAC9C,OAAO,EAAS,EAAO,GAAK,EAG9B,SAAS,EACP,EACoB,CACpB,IAAM,EAAU,EAAa,QAMvB,EAAe,EAJnB,GAAW,OAAO,GAAY,SACxB,EAAoC,eACrC,EAAoC,cACrC,IAAA,GAC2D,CACjE,GAAI,EAAc,OAAO,EAEzB,IAAM,EAAO,EAAa,KAC1B,OAAO,OAAO,GAAS,UAAY,IAAS,QAAU,EAAO,IAAA,GAG/D,SAAS,EAAwB,EAA4B,CAE3D,OADK,EACE,CACL,QAAS,CACP,cAAe,UAAU,IAC1B,CACF,CALmB,EAAE,CAQxB,SAAS,EAA0B,EAGH,CAO9B,OANI,EAAM,SAAW,EAAM,UAAA,aAClB,EAAwB,EAAM,QAAQ,CAE3C,EAAM,SAAW,OAAO,KAAK,EAAM,QAAQ,CAAC,OAAS,EAChD,CAAE,QAAS,EAAM,QAAS,CAE5B,EAAE,CAOX,SAAgB,EAAe,EAA2B,CACxD,GAAI,CAAC,GAAS,OAAO,GAAU,SAC7B,MAAO,CAAE,GAAG,EAAkB,CAGhC,IAAM,EAAM,EAEZ,GACE,EAAE,eAAgB,IAClB,CAAC,EAAI,YACL,OAAO,EAAI,YAAe,SAE1B,MAAO,CAAE,GAAG,EAAkB,CAGhC,IAAM,EAAwC,EAAE,CAC1C,EAAiC,EAAE,CACnC,EAA4C,EAAE,CAI9C,EAAyC,EAAE,CAE3C,EAAa,EAAI,WAEvB,IAAK,GAAM,CAAC,EAAY,KAAiB,OAAO,QAAQ,EAAW,CAAE,CACnE,GAAI,CAAC,GAAgB,OAAO,GAAiB,SAAU,SAEvD,IAAM,EAAM,EAAa,IAEzB,GAAI,EAAK,CACP,IAAM,EAAY,EAAa,UACzB,EAAS,EAAuB,EAAa,CAEnD,GAAI,EAAsB,EAAK,EAAU,CAAE,CACzC,IAAM,EAAyB,CAAE,IAAK,EAAkB,CACpD,IAAQ,EAAO,QAAU,GAC7B,EAAqB,KAAK,EAAO,SACxB,IAAc,MAAO,CAC9B,IAAM,EAAO,EAAoB,EAAY,MAAM,CAC7C,EAAuB,CAAE,MAAK,CAChC,IAAM,EAAO,KAAO,GACpB,IAAQ,EAAO,QAAU,GAC7B,EAAW,KAAK,EAAO,KAClB,CACL,IAAM,EAAO,EAAoB,EAAY,QAAQ,CAC/C,EAAyB,CAAE,MAAK,CAClC,IAAM,EAAO,KAAO,GACpB,IAAQ,EAAO,QAAU,GACzB,EAAa,SAAW,OAC1B,EAAO,QAAU,EAAa,SAEhC,EAAa,KAAK,EAAO,MAEtB,CACL,IAAM,EAA8B,CAClC,KAAM,EACN,QAAS,EAAa,QACvB,CACG,EAAa,OACf,EAAY,KAAO,EAAa,MAE9B,EAAa,MACf,EAAY,IAAM,EAAa,KAEjC,EAAa,KAAK,EAAY,EAIlC,IAAM,EAAgB,GAAc,EAAE,QAAQ,OAAQ,GAAG,CACzD,IAAK,IAAM,KAAY,EACE,EAAa,KAAM,GAEjC,EADU,OAAO,GAAU,SAAW,EAAQ,EAAM,IAC9B,GAAK,EAAa,EAAS,IAAI,CAEzD,EAAgB,EAAa,KAAK,EAAS,CAGlD,MAAO,CACL,YAAa,EACb,cAAe,EACf,cAAe,EAChB,CAeH,SAAgB,EAAe,EAAwC,CACrE,IAAM,EAAiD,EAAE,CAEnD,EAAW,GAAyB,CACxC,GAAI,EAAE,KAAQ,GAAa,OAAO,EAClC,IAAI,EAAI,EACR,KAAO,GAAG,EAAK,GAAG,MAAO,GAAY,GAAK,EAC1C,MAAO,GAAG,EAAK,GAAG,KAGpB,IAAK,IAAM,KAAS,EAAO,YAAa,CACtC,IAAM,EAA6B,EAAE,CACjC,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAA0B,EAAM,CAAC,EAEzD,EAAO,UAAY,MACnB,EAAW,EAAQ,GAAQ,MAAM,EAAI,EAGvC,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,EAAE,CACjC,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAA0B,EAAM,CAAC,CACnD,EAAM,SAAW,OAAM,EAAO,QAAU,EAAM,UAEpD,EAAW,EAAQ,GAAQ,QAAQ,EAAI,EAGzC,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CACjC,QAAS,EAAM,QAChB,CACG,EAAM,OAAM,EAAO,KAAO,EAAM,MAChC,EAAM,MAAK,EAAO,IAAM,EAAM,KAClC,EAAW,EAAQ,EAAM,MAAQ,QAAQ,EAAI,EAG/C,OAAO,OAAO,KAAK,EAAW,CAAC,OAAS,EAAI,CAAE,aAAY,CAAG"}
+{"version":3,"file":"mcp-config.cjs","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":"sFAgBA,IAAM,EAA8B,CAClC,YAAa,EAAE,CACf,cAAe,EAAE,CACjB,cAAe,EAAE,CAClB,CAEY,EAA4B,aAazC,SAAS,EACP,EACA,EACoB,CAEpB,OAD0B,OAAO,IAAI,EAAK,WACnC,CAAc,KAAK,EAAW,CAAG,IAAA,GAAY,EAGtD,SAAS,EAAS,EAAkD,CAClE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,EAAM,CAGtE,SAAgB,EACd,EACgC,CAChC,GAAI,CAAC,EAAS,EAAM,CAAE,OAAO,KAE7B,IAAM,EAAa,EAAM,WASzB,OAPE,EAAS,EAAW,EACpB,EAAE,QAAS,IACX,EAAE,YAAa,GAER,EAGF,EAGT,SAAgB,EACd,EACoC,CACpC,GAAI,CAAC,EAAS,EAAM,CAAE,OACtB,IAAM,EAAU,OAAO,QAAQ,EAAM,CAAC,OACnC,GAAqC,OAAO,EAAM,IAAO,SAC3D,CACD,OAAO,EAAQ,OAAS,EAAI,OAAO,YAAY,EAAQ,CAAG,IAAA,GAG5D,SAAgB,EAAyB,EAAyB,CAKhE,OAJI,IAAA,aAA4C,GAC5C,MAAM,QAAQ,EAAM,CAAS,EAAM,KAAK,EAAyB,CACjE,EAAS,EAAM,CACV,OAAO,OAAO,EAAM,CAAC,KAAK,EAAyB,CACrD,GAGT,SAAS,EAAc,EAA2C,CAChE,GAAI,CAAC,EAAS,EAAM,CAAE,OACtB,IAAM,EAAuB,EAAE,CAe/B,OAdI,EAAS,EAAM,OAAO,GACxB,EAAM,OAAS,EAAM,QAEnB,EAAS,EAAM,YAAY,GAC7B,EAAM,YAAc,EAAM,cAK1B,OAAO,EAAM,kBAAqB,UAClC,EAAM,mBAAqB,QAE3B,EAAM,iBAAmB,EAAM,kBAE1B,OAAO,KAAK,EAAM,CAAC,OAAS,EAAI,EAAQ,IAAA,GAGjD,SAAS,EACP,EAC+B,CAC1B,KAAS,EAAM,CACpB,OAAQ,EAAM,SAAd,CACE,IAAK,OACH,MAAO,CAAE,SAAU,OAAQ,CAC7B,IAAK,UAEH,OADI,OAAO,EAAM,OAAU,SACpB,CACL,SAAU,UACV,MAAO,EAAM,MACb,GAAI,OAAO,EAAM,aAAgB,UAAY,CAC3C,YAAa,EAAM,YACpB,CACF,CAPoC,OAQvC,IAAK,SAEH,OADI,OAAO,EAAM,OAAU,SACpB,CAAE,SAAU,SAAU,MAAO,EAAM,MAAO,CADZ,OAEvC,IAAK,QAOH,OALE,OAAO,EAAM,UAAa,UAC1B,OAAO,EAAM,UAAa,SAE1B,OAEK,CACL,SAAU,QACV,SAAU,EAAM,SAChB,SAAU,EAAM,SACjB,CACH,IAAK,SAAU,CACb,IAAM,EAAU,EAAa,EAAM,QAAQ,CAC3C,OAAO,EAAU,CAAE,SAAU,SAAU,UAAS,CAAG,IAAA,GAErD,IAAK,SAAU,CACb,IAAM,EAAiB,EAAwB,EAAM,eAAe,CAC9D,EAAQ,EAAc,EAAM,MAAM,CACxC,MAAO,CACL,SAAU,SACV,GAAI,GAAkB,CAAE,iBAAgB,CACxC,GAAI,GAAS,CAAE,QAAO,CACvB,CAEH,QACE,QAIN,SAAS,EACP,EAC+B,CAC/B,OAAO,EAA8B,EAAa,KAAK,CAGzD,SAAS,EAAsB,EAGC,CAC9B,IAAM,EAAsC,EAAE,CAO9C,OANI,EAAM,MAAQ,CAAC,EAAyB,EAAM,KAAK,GACrD,EAAO,KAAO,EAAM,MAElB,EAAM,SAAW,OAAO,KAAK,EAAM,QAAQ,CAAC,OAAS,IACvD,EAAO,QAAU,EAAM,SAElB,EAGT,SAAS,EAAsB,EAAyB,CACtD,MAAO,CACL,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,KAAM,CACxC,IAAK,EAAO,IACZ,GAAI,EAAO,SAAW,CAAE,QAAS,EAAO,QAAS,CACjD,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,KAAM,CACzC,CAGH,SAAgB,EAAe,EAAuC,CACpE,OAAO,EAAsB,EAAO,CAGtC,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,GAAG,EAAsB,EAAO,CAChC,GAAI,EAAO,UAAY,IAAA,IAAa,CAAE,QAAS,EAAO,QAAS,CAChE,CAGH,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,KAAM,CACxC,GAAI,EAAO,KAAO,CAAE,IAAK,EAAO,IAAK,CACtC,CAGH,SAAS,EACP,EACqC,CACrC,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,OACzC,IAAM,EAAS,EACf,GAAI,EAAO,OAAS,QAAS,OAC7B,IAAM,EAA0C,CAAE,KAAM,QAAS,CAqCjE,OAnCE,EAAO,qBAAuB,QAC9B,EAAO,qBAAuB,sBAC9B,EAAO,qBAAuB,uBAC9B,EAAO,qBAAuB,qBAE9B,EAAe,mBAAqB,EAAO,qBAEzC,OAAO,EAAO,QAAW,UAG3B,MAAM,QAAQ,EAAO,OAAO,EAC5B,EAAO,OAAO,MAAO,GAAU,OAAO,GAAU,SAAS,IAHzD,EAAe,OAAS,EAAO,QAO7B,OAAO,EAAO,aAAgB,WAChC,EAAe,YAAc,EAAO,aAElC,OAAO,EAAO,qBAAwB,WACxC,EAAe,oBAAsB,EAAO,qBAE1C,OAAO,EAAO,WAAc,WAC9B,EAAe,UAAY,EAAO,WAEhC,OAAO,EAAO,eAAkB,WAClC,EAAe,cAAgB,EAAO,eAGtC,EAAO,4BACP,OAAO,EAAO,4BAA+B,UAC7C,CAAC,MAAM,QAAQ,EAAO,2BAA2B,GAEjD,EAAe,2BACb,EAAO,4BAEJ,EAOT,SAAgB,EAAe,EAA2B,CACxD,IAAM,EAAY,EAAmB,EAAM,CAC3C,GAAI,CAAC,EACH,MAAO,CAAE,GAAG,EAAkB,CAGhC,IAAM,EAAwC,EAAE,CAC1C,EAAiC,EAAE,CACnC,EAA4C,EAAE,CAEpD,IAAK,GAAM,CAAC,EAAY,KAAiB,OAAO,QAAQ,EAAU,CAAE,CAClE,GAAI,CAAC,EAAS,EAAa,CAAE,SAE7B,IAAM,EAAM,EAAa,IAEzB,GAAI,EAAK,CACP,IAAM,EAAY,EAAa,UACzB,EAAO,EAA+B,EAAa,CACnD,EAAU,EAAa,EAAa,QAAQ,CAElD,GAAI,IAAc,MAAO,CACvB,IAAM,EAAO,EAAoB,EAAY,MAAM,CAC7C,EAAuB,CAAE,MAAK,CAChC,IAAM,EAAO,KAAO,GACpB,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC9B,EAAW,KAAK,EAAO,KAClB,CACL,IAAM,EAAO,EAAoB,EAAY,QAAQ,CAC/C,EAAyB,CAAE,MAAK,CAClC,IAAM,EAAO,KAAO,GACpB,EAAa,SAAW,OAC1B,EAAO,QAAU,EAAa,SAE5B,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC9B,EAAa,KAAK,EAAO,MAEtB,CACL,GAAI,OAAO,EAAa,SAAY,SAAU,SAC9C,IAAM,EAA8B,CAClC,KAAM,EACN,QAAS,EAAa,QACvB,CACG,EAAa,OACf,EAAY,KAAO,EAAa,MAE9B,EAAa,MACf,EAAY,IAAM,EAAa,KAEjC,EAAa,KAAK,EAAY,EAIlC,MAAO,CACL,YAAa,EACb,cAAe,EACf,cAAe,EAChB,CAeH,SAAgB,EAAe,EAAwC,CACrE,IAAM,EAA0B,EAAE,CAE5B,EAAW,GAAyB,CACxC,IAAM,EAAW,EAAA,gBAAgB,EAAK,CACtC,GAAI,EAAE,KAAY,GAAY,OAAO,EACrC,IAAI,EAAI,EACR,KAAO,GAAG,EAAS,GAAG,MAAO,GAAW,GAAK,EAC7C,MAAO,GAAG,EAAS,GAAG,KAGxB,IAAK,IAAM,KAAS,EAAO,YAAa,CACtC,IAAM,EAA6B,EAAE,CACjC,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,EAAM,CAAC,EAErD,EAAO,UAAY,MACnB,EAAU,EAAQ,GAAQ,MAAM,EAAI,EAGtC,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CAAE,UAAW,OAAQ,CACpD,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,EAAM,CAAC,CAC/C,EAAM,SAAW,OAAM,EAAO,QAAU,EAAM,UAEpD,EAAU,EAAQ,GAAQ,QAAQ,EAAI,EAGxC,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CACjC,QAAS,EAAM,QAChB,CACG,EAAM,OAAM,EAAO,KAAO,EAAM,MAChC,EAAM,MAAK,EAAO,IAAM,EAAM,KAClC,EAAU,EAAQ,EAAM,MAAQ,QAAQ,EAAI,EAG9C,OAAO,OAAO,KAAK,EAAU,CAAC,OAAS,EAAI,EAAY"}

package/dist/utils/mcp-config.d.ts

@@ -1,17 +1,23 @@
-import { MCPConfig, SettingsValue } from "#/types/settings";
-export declare const REDACTED_MCP_SECRET_VALUE = "<redacted>";
-type SdkMcpServerConfig = Record<string, SettingsValue>;
-type SdkMcpConfig = {
-    mcpServers: Record<string, SdkMcpServerConfig>;
-};
+import { MCPConfig, MCPSSEServer, MCPSHTTPServer, MCPStdioServer, SettingsValue } from "#/types/settings";
+import type { MCPAuthCredential } from "#/types/mcp-auth";
+import type { MCPServerConfig } from "#/types/mcp-server";
+export declare const REDACTED_MCP_SECRET_VALUE = "**********";
+type SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;
+type SdkMcpConfig = Record<string, SdkMcpServerConfig>;
+export declare function getSdkMcpServerMap(value: unknown): Record<string, unknown> | null;
+export declare function stringRecord(value: unknown): Record<string, string> | undefined;
+export declare function hasRedactedMcpSecretLeaf(value: unknown): boolean;
+export declare function toMcpSseServer(server: MCPServerConfig): MCPSSEServer;
+export declare function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer;
+export declare function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer;
 /**
- * Parse an SDK mcp_config value ({ mcpServers: { ... } }) and convert it
+ * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it
  * to the frontend MCPConfig format used by UI components.
  */
 export declare function parseMcpConfig(value: unknown): MCPConfig;
 /**
- * Convert the frontend MCPConfig format back to the SDK { mcpServers: { ... } }
- * shape expected by agent_settings.mcp_config on the backend.
+ * Convert the frontend MCPConfig format back to the SDK-native server map
+ * expected by agent_settings.mcp_config on the backend.
  *
  * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has
  * already claimed the bare base name. We intentionally do NOT use a single

package/dist/utils/mcp-config.js

@@ -1,54 +1,126 @@
+import { toMcpServerName as e } from "./mcp-server-name.js";
 //#region src/utils/mcp-config.ts
-var e = {
+var t = {
 	sse_servers: [],
 	stdio_servers: [],
 	shttp_servers: []
-}, t = "<redacted>", n = "https://mcp.linear.app/sse", r = "https://mcp.linear.app/mcp";
-function i(e, t) {
-	return t === "sse" ? e.split("?")[0].replace(/\/+$/, "") === n : !1;
-}
-function a(e, t) {
+}, n = "**********";
+function r(e, t) {
 	return RegExp(`^${t}(_\\d+)?$`).test(e) ? void 0 : e;
 }
+function i(e) {
+	return !!e && typeof e == "object" && !Array.isArray(e);
+}
+function a(e) {
+	if (!i(e)) return null;
+	let t = e.mcpServers;
+	return i(t) && !("url" in t) && !("command" in t) ? t : e;
+}
 function o(e) {
-	if (Array.isArray(e)) return e.map(o).find((e) => e !== void 0);
-	if (typeof e != "string" || e.length === 0) return;
-	let t = e.match(/^Bearer\s+(.+)$/i);
-	return t ? t[1] : e;
+	if (!i(e)) return;
+	let t = Object.entries(e).filter((e) => typeof e[1] == "string");
+	return t.length > 0 ? Object.fromEntries(t) : void 0;
 }
 function s(e) {
-	let t = e.headers, n = o(t && typeof t == "object" ? t.Authorization ?? t.authorization : void 0);
-	if (n) return n;
-	let r = e.auth;
-	return typeof r == "string" && r !== "oauth" ? r : void 0;
+	return e === "**********" ? !0 : Array.isArray(e) ? e.some(s) : i(e) ? Object.values(e).some(s) : !1;
 }
 function c(e) {
-	return e ? { headers: { Authorization: `Bearer ${e}` } } : {};
+	if (!i(e)) return;
+	let t = {};
+	return i(e.tokens) && (t.tokens = e.tokens), i(e.client_info) && (t.client_info = e.client_info), (typeof e.token_expires_at == "number" || e.token_expires_at === null) && (t.token_expires_at = e.token_expires_at), Object.keys(t).length > 0 ? t : void 0;
 }
 function l(e) {
-	return e.api_key && e.api_key !== "<redacted>" ? c(e.api_key) : e.headers && Object.keys(e.headers).length > 0 ? { headers: e.headers } : {};
-}
-function u(t) {
-	if (!t || typeof t != "object") return { ...e };
-	let n = t;
-	if (!("mcpServers" in n) || !n.mcpServers || typeof n.mcpServers != "object") return { ...e };
-	let o = [], c = [], l = [], u = [], d = n.mcpServers;
-	for (let [e, t] of Object.entries(d)) {
-		if (!t || typeof t != "object") continue;
+	if (i(e)) switch (e.strategy) {
+		case "none": return { strategy: "none" };
+		case "api_key": return typeof e.value == "string" ? {
+			strategy: "api_key",
+			value: e.value,
+			...typeof e.header_name == "string" && { header_name: e.header_name }
+		} : void 0;
+		case "bearer": return typeof e.value == "string" ? {
+			strategy: "bearer",
+			value: e.value
+		} : void 0;
+		case "basic": return typeof e.username != "string" || typeof e.password != "string" ? void 0 : {
+			strategy: "basic",
+			username: e.username,
+			password: e.password
+		};
+		case "header": {
+			let t = o(e.headers);
+			return t ? {
+				strategy: "header",
+				headers: t
+			} : void 0;
+		}
+		case "oauth2": {
+			let t = g(e.authentication), n = c(e.state);
+			return {
+				strategy: "oauth2",
+				...t && { authentication: t },
+				...n && { state: n }
+			};
+		}
+		default: return;
+	}
+}
+function u(e) {
+	return l(e.auth);
+}
+function d(e) {
+	let t = {};
+	return e.auth && !s(e.auth) && (t.auth = e.auth), e.headers && Object.keys(e.headers).length > 0 && (t.headers = e.headers), t;
+}
+function f(e) {
+	return {
+		...e.name && { name: e.name },
+		url: e.url,
+		...e.headers && { headers: e.headers },
+		...e.auth && { auth: e.auth }
+	};
+}
+function p(e) {
+	return f(e);
+}
+function m(e) {
+	return {
+		...f(e),
+		...e.timeout !== void 0 && { timeout: e.timeout }
+	};
+}
+function h(e) {
+	return {
+		name: e.name,
+		command: e.command,
+		...e.args && { args: e.args },
+		...e.env && { env: e.env }
+	};
+}
+function g(e) {
+	if (!e || typeof e != "object") return;
+	let t = e;
+	if (t.type !== "oauth") return;
+	let n = { type: "oauth" };
+	return (t.client_auth_method === "none" || t.client_auth_method === "client_secret_post" || t.client_auth_method === "client_secret_basic" || t.client_auth_method === "private_key_jwt") && (n.client_auth_method = t.client_auth_method), (typeof t.scopes == "string" || Array.isArray(t.scopes) && t.scopes.every((e) => typeof e == "string")) && (n.scopes = t.scopes), typeof t.client_name == "string" && (n.client_name = t.client_name), typeof t.client_metadata_url == "string" && (n.client_metadata_url = t.client_metadata_url), typeof t.client_id == "string" && (n.client_id = t.client_id), typeof t.client_secret == "string" && (n.client_secret = t.client_secret), t.additional_client_metadata && typeof t.additional_client_metadata == "object" && !Array.isArray(t.additional_client_metadata) && (n.additional_client_metadata = t.additional_client_metadata), n;
+}
+function _(e) {
+	let n = a(e);
+	if (!n) return { ...t };
+	let s = [], c = [], l = [];
+	for (let [e, t] of Object.entries(n)) {
+		if (!i(t)) continue;
 		let n = t.url;
 		if (n) {
-			let c = t.transport, d = s(t);
-			if (i(n, c)) {
-				let e = { url: r };
-				d && (e.api_key = d), u.push(e);
-			} else if (c === "sse") {
-				let t = a(e, "sse"), r = { url: n };
-				t && (r.name = t), d && (r.api_key = d), o.push(r);
+			let i = t.transport, a = u(t), c = o(t.headers);
+			if (i === "sse") {
+				let t = r(e, "sse"), i = { url: n };
+				t && (i.name = t), a && (i.auth = a), c && (i.headers = c), s.push(i);
 			} else {
-				let r = a(e, "shttp"), i = { url: n };
-				r && (i.name = r), d && (i.api_key = d), t.timeout != null && (i.timeout = t.timeout), l.push(i);
+				let i = r(e, "shttp"), o = { url: n };
+				i && (o.name = i), t.timeout != null && (o.timeout = t.timeout), a && (o.auth = a), c && (o.headers = c), l.push(o);
 			}
 		} else {
+			if (typeof t.command != "string") continue;
 			let n = {
 				name: e,
 				command: t.command
@@ -56,36 +128,35 @@ function u(t) {
 			t.args && (n.args = t.args), t.env && (n.env = t.env), c.push(n);
 		}
 	}
-	let f = (e) => e.replace(/\/+$/, "");
-	for (let e of u) l.some((t) => f(typeof t == "string" ? t : t.url) === f(e.url)) || l.push(e);
 	return {
-		sse_servers: o,
+		sse_servers: s,
 		stdio_servers: c,
 		shttp_servers: l
 	};
 }
-function d(e) {
-	let t = {}, n = (e) => {
-		if (!(e in t)) return e;
-		let n = 1;
-		for (; `${e}_${n}` in t;) n += 1;
-		return `${e}_${n}`;
+function v(t) {
+	let n = {}, r = (t) => {
+		let r = e(t);
+		if (!(r in n)) return r;
+		let i = 1;
+		for (; `${r}_${i}` in n;) i += 1;
+		return `${r}_${i}`;
 	};
-	for (let r of e.sse_servers) {
-		let e = {}, i;
-		typeof r == "string" ? e.url = r : (i = r.name, e.url = r.url, Object.assign(e, l(r))), e.transport = "sse", t[n(i || "sse")] = e;
+	for (let e of t.sse_servers) {
+		let t = {}, i;
+		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e))), t.transport = "sse", n[r(i || "sse")] = t;
 	}
-	for (let r of e.shttp_servers) {
-		let e = {}, i;
-		typeof r == "string" ? e.url = r : (i = r.name, e.url = r.url, Object.assign(e, l(r)), r.timeout != null && (e.timeout = r.timeout)), t[n(i || "shttp")] = e;
+	for (let e of t.shttp_servers) {
+		let t = { transport: "http" }, i;
+		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e)), e.timeout != null && (t.timeout = e.timeout)), n[r(i || "shttp")] = t;
 	}
-	for (let r of e.stdio_servers) {
-		let e = { command: r.command };
-		r.args && (e.args = r.args), r.env && (e.env = r.env), t[n(r.name || "stdio")] = e;
+	for (let e of t.stdio_servers) {
+		let t = { command: e.command };
+		e.args && (t.args = e.args), e.env && (t.env = e.env), n[r(e.name || "stdio")] = t;
 	}
-	return Object.keys(t).length > 0 ? { mcpServers: t } : null;
+	return Object.keys(n).length > 0 ? n : null;
 }
 //#endregion
-export { t as REDACTED_MCP_SECRET_VALUE, u as parseMcpConfig, d as toSdkMcpConfig };
+export { n as REDACTED_MCP_SECRET_VALUE, a as getSdkMcpServerMap, s as hasRedactedMcpSecretLeaf, _ as parseMcpConfig, o as stringRecord, m as toMcpShttpServer, p as toMcpSseServer, h as toMcpStdioServer, v as toSdkMcpConfig };
 
 //# sourceMappingURL=mcp-config.js.map

package/dist/utils/mcp-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"<redacted>\";\n\nconst LINEAR_DEPRECATED_SSE_URL = \"https://mcp.linear.app/sse\";\nconst LINEAR_SHTTP_URL = \"https://mcp.linear.app/mcp\";\n\n/**\n * Linear removed its MCP SSE transport (the /sse endpoint rejects every\n * call since 2026-04-08). Detect persisted configs that still point at\n * the dead endpoint so they can be migrated to streamable HTTP at the\n * /mcp replacement. Matches only the exact deprecated URL (tolerating a\n * trailing slash or query string) — nothing else is rewritten.\n */\nfunction isDeprecatedLinearSse(\n  url: string,\n  transport: string | undefined,\n): boolean {\n  if (transport !== \"sse\") return false;\n  const normalized = url.split(\"?\")[0].replace(/\\/+$/, \"\");\n  return normalized === LINEAR_DEPRECATED_SSE_URL;\n}\n\ntype SdkMcpServerConfig = Record<string, SettingsValue>;\ntype SdkMcpConfig = { mcpServers: Record<string, SdkMcpServerConfig> };\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction apiKeyFromAuthorizationHeader(value: unknown): string | undefined {\n  if (Array.isArray(value)) {\n    return value\n      .map(apiKeyFromAuthorizationHeader)\n      .find((apiKey) => apiKey !== undefined);\n  }\n\n  if (typeof value !== \"string\" || value.length === 0) return undefined;\n  const bearer = value.match(/^Bearer\\s+(.+)$/i);\n  return bearer ? bearer[1] : value;\n}\n\nfunction apiKeyFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): string | undefined {\n  const headers = serverConfig.headers;\n  const authorization =\n    headers && typeof headers === \"object\"\n      ? ((headers as Record<string, unknown>).Authorization ??\n        (headers as Record<string, unknown>).authorization)\n      : undefined;\n  const headerApiKey = apiKeyFromAuthorizationHeader(authorization);\n  if (headerApiKey) return headerApiKey;\n\n  const auth = serverConfig.auth;\n  return typeof auth === \"string\" && auth !== \"oauth\" ? auth : undefined;\n}\n\nfunction getAuthorizationHeaders(apiKey: string | undefined) {\n  if (!apiKey) return {};\n  return {\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n    },\n  };\n}\n\nfunction getRemoteCredentialFields(entry: {\n  api_key?: string;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  if (entry.api_key && entry.api_key !== REDACTED_MCP_SECRET_VALUE) {\n    return getAuthorizationHeaders(entry.api_key);\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    return { headers: entry.headers };\n  }\n  return {};\n}\n\n/**\n * Parse an SDK mcp_config value ({ mcpServers: { ... } }) and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  if (!value || typeof value !== \"object\") {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const obj = value as Record<string, unknown>;\n\n  if (\n    !(\"mcpServers\" in obj) ||\n    !obj.mcpServers ||\n    typeof obj.mcpServers !== \"object\"\n  ) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n  // Legacy Linear SSE entries rewritten to the /mcp endpoint. Collected\n  // separately and merged after the loop so an existing hand-added /mcp\n  // entry (with its own api_key/timeout) wins over the migrated one.\n  const migratedShttpServers: MCPSHTTPServer[] = [];\n\n  const mcpServers = obj.mcpServers as Record<string, Record<string, unknown>>;\n\n  for (const [serverName, serverConfig] of Object.entries(mcpServers)) {\n    if (!serverConfig || typeof serverConfig !== \"object\") continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const apiKey = apiKeyFromServerConfig(serverConfig);\n\n      if (isDeprecatedLinearSse(url, transport)) {\n        const server: MCPSHTTPServer = { url: LINEAR_SHTTP_URL };\n        if (apiKey) server.api_key = apiKey;\n        migratedShttpServers.push(server);\n      } else if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (apiKey) server.api_key = apiKey;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (apiKey) server.api_key = apiKey;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        shttpServers.push(server);\n      }\n    } else {\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command as string,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  const normalizeUrl = (u: string) => u.replace(/\\/+$/, \"\");\n  for (const migrated of migratedShttpServers) {\n    const alreadyPresent = shttpServers.some((entry) => {\n      const entryUrl = typeof entry === \"string\" ? entry : entry.url;\n      return normalizeUrl(entryUrl) === normalizeUrl(migrated.url);\n    });\n    if (!alreadyPresent) shttpServers.push(migrated);\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK { mcpServers: { ... } }\n * shape expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpServers: Record<string, SdkMcpServerConfig> = {};\n\n  const reserve = (base: string): string => {\n    if (!(base in mcpServers)) return base;\n    let i = 1;\n    while (`${base}_${i}` in mcpServers) i += 1;\n    return `${base}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteCredentialFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpServers[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteCredentialFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpServers[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpServers[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpServers).length > 0 ? { mcpServers } : null;\n}\n"],"mappings":";AAQA,IAAM,IAA8B;CAClC,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,eAAe,EAAE;CAClB,EAEY,IAA4B,cAEnC,IAA4B,8BAC5B,IAAmB;AASzB,SAAS,EACP,GACA,GACS;AAGT,QAFI,MAAc,QACC,EAAI,MAAM,IAAI,CAAC,GAAG,QAAQ,QAAQ,GAC9C,KAAe,IAFU;;AAgBlC,SAAS,EACP,GACA,GACoB;AAEpB,QAD0B,OAAO,IAAI,EAAK,WACnC,CAAc,KAAK,EAAW,GAAG,KAAA,IAAY;;AAGtD,SAAS,EAA8B,GAAoC;AACzE,KAAI,MAAM,QAAQ,EAAM,CACtB,QAAO,EACJ,IAAI,EAA8B,CAClC,MAAM,MAAW,MAAW,KAAA,EAAU;AAG3C,KAAI,OAAO,KAAU,YAAY,EAAM,WAAW,EAAG;CACrD,IAAM,IAAS,EAAM,MAAM,mBAAmB;AAC9C,QAAO,IAAS,EAAO,KAAK;;AAG9B,SAAS,EACP,GACoB;CACpB,IAAM,IAAU,EAAa,SAMvB,IAAe,EAJnB,KAAW,OAAO,KAAY,WACxB,EAAoC,iBACrC,EAAoC,gBACrC,KAAA,EAC2D;AACjE,KAAI,EAAc,QAAO;CAEzB,IAAM,IAAO,EAAa;AAC1B,QAAO,OAAO,KAAS,YAAY,MAAS,UAAU,IAAO,KAAA;;AAG/D,SAAS,EAAwB,GAA4B;AAE3D,QADK,IACE,EACL,SAAS,EACP,eAAe,UAAU,KAC1B,EACF,GALmB,EAAE;;AAQxB,SAAS,EAA0B,GAGH;AAO9B,QANI,EAAM,WAAW,EAAM,YAAA,eAClB,EAAwB,EAAM,QAAQ,GAE3C,EAAM,WAAW,OAAO,KAAK,EAAM,QAAQ,CAAC,SAAS,IAChD,EAAE,SAAS,EAAM,SAAS,GAE5B,EAAE;;AAOX,SAAgB,EAAe,GAA2B;AACxD,KAAI,CAAC,KAAS,OAAO,KAAU,SAC7B,QAAO,EAAE,GAAG,GAAkB;CAGhC,IAAM,IAAM;AAEZ,KACE,EAAE,gBAAgB,MAClB,CAAC,EAAI,cACL,OAAO,EAAI,cAAe,SAE1B,QAAO,EAAE,GAAG,GAAkB;CAGhC,IAAM,IAAwC,EAAE,EAC1C,IAAiC,EAAE,EACnC,IAA4C,EAAE,EAI9C,IAAyC,EAAE,EAE3C,IAAa,EAAI;AAEvB,MAAK,IAAM,CAAC,GAAY,MAAiB,OAAO,QAAQ,EAAW,EAAE;AACnE,MAAI,CAAC,KAAgB,OAAO,KAAiB,SAAU;EAEvD,IAAM,IAAM,EAAa;AAEzB,MAAI,GAAK;GACP,IAAM,IAAY,EAAa,WACzB,IAAS,EAAuB,EAAa;AAEnD,OAAI,EAAsB,GAAK,EAAU,EAAE;IACzC,IAAM,IAAyB,EAAE,KAAK,GAAkB;AAExD,IADI,MAAQ,EAAO,UAAU,IAC7B,EAAqB,KAAK,EAAO;cACxB,MAAc,OAAO;IAC9B,IAAM,IAAO,EAAoB,GAAY,MAAM,EAC7C,IAAuB,EAAE,QAAK;AAGpC,IAFI,MAAM,EAAO,OAAO,IACpB,MAAQ,EAAO,UAAU,IAC7B,EAAW,KAAK,EAAO;UAClB;IACL,IAAM,IAAO,EAAoB,GAAY,QAAQ,EAC/C,IAAyB,EAAE,QAAK;AAMtC,IALI,MAAM,EAAO,OAAO,IACpB,MAAQ,EAAO,UAAU,IACzB,EAAa,WAAW,SAC1B,EAAO,UAAU,EAAa,UAEhC,EAAa,KAAK,EAAO;;SAEtB;GACL,IAAM,IAA8B;IAClC,MAAM;IACN,SAAS,EAAa;IACvB;AAOD,GANI,EAAa,SACf,EAAY,OAAO,EAAa,OAE9B,EAAa,QACf,EAAY,MAAM,EAAa,MAEjC,EAAa,KAAK,EAAY;;;CAIlC,IAAM,KAAgB,MAAc,EAAE,QAAQ,QAAQ,GAAG;AACzD,MAAK,IAAM,KAAY,EAKrB,CAJuB,EAAa,MAAM,MAEjC,EADU,OAAO,KAAU,WAAW,IAAQ,EAAM,IAC9B,KAAK,EAAa,EAAS,IAAI,CAEzD,IAAgB,EAAa,KAAK,EAAS;AAGlD,QAAO;EACL,aAAa;EACb,eAAe;EACf,eAAe;EAChB;;AAeH,SAAgB,EAAe,GAAwC;CACrE,IAAM,IAAiD,EAAE,EAEnD,KAAW,MAAyB;AACxC,MAAI,EAAE,KAAQ,GAAa,QAAO;EAClC,IAAI,IAAI;AACR,SAAO,GAAG,EAAK,GAAG,OAAO,GAAY,MAAK;AAC1C,SAAO,GAAG,EAAK,GAAG;;AAGpB,MAAK,IAAM,KAAS,EAAO,aAAa;EACtC,IAAM,IAA6B,EAAE,EACjC;AASJ,EARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAA0B,EAAM,CAAC,GAEzD,EAAO,YAAY,OACnB,EAAW,EAAQ,KAAQ,MAAM,IAAI;;AAGvC,MAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EAAE,EACjC;AASJ,EARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAA0B,EAAM,CAAC,EACnD,EAAM,WAAW,SAAM,EAAO,UAAU,EAAM,WAEpD,EAAW,EAAQ,KAAQ,QAAQ,IAAI;;AAGzC,MAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EACjC,SAAS,EAAM,SAChB;AAGD,EAFI,EAAM,SAAM,EAAO,OAAO,EAAM,OAChC,EAAM,QAAK,EAAO,MAAM,EAAM,MAClC,EAAW,EAAQ,EAAM,QAAQ,QAAQ,IAAI;;AAG/C,QAAO,OAAO,KAAK,EAAW,CAAC,SAAS,IAAI,EAAE,eAAY,GAAG"}
+{"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":";;AAgBA,IAAM,IAA8B;CAClC,aAAa,EAAE;CACf,eAAe,EAAE;CACjB,eAAe,EAAE;CAClB,EAEY,IAA4B;AAazC,SAAS,EACP,GACA,GACoB;AAEpB,QAD0B,OAAO,IAAI,EAAK,WACnC,CAAc,KAAK,EAAW,GAAG,KAAA,IAAY;;AAGtD,SAAS,EAAS,GAAkD;AAClE,QAAO,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,EAAM;;AAGtE,SAAgB,EACd,GACgC;AAChC,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAE7B,IAAM,IAAa,EAAM;AASzB,QAPE,EAAS,EAAW,IACpB,EAAE,SAAS,MACX,EAAE,aAAa,KAER,IAGF;;AAGT,SAAgB,EACd,GACoC;AACpC,KAAI,CAAC,EAAS,EAAM,CAAE;CACtB,IAAM,IAAU,OAAO,QAAQ,EAAM,CAAC,QACnC,MAAqC,OAAO,EAAM,MAAO,SAC3D;AACD,QAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,EAAQ,GAAG,KAAA;;AAG5D,SAAgB,EAAyB,GAAyB;AAKhE,QAJI,MAAA,eAA4C,KAC5C,MAAM,QAAQ,EAAM,GAAS,EAAM,KAAK,EAAyB,GACjE,EAAS,EAAM,GACV,OAAO,OAAO,EAAM,CAAC,KAAK,EAAyB,GACrD;;AAGT,SAAS,EAAc,GAA2C;AAChE,KAAI,CAAC,EAAS,EAAM,CAAE;CACtB,IAAM,IAAuB,EAAE;AAe/B,QAdI,EAAS,EAAM,OAAO,KACxB,EAAM,SAAS,EAAM,SAEnB,EAAS,EAAM,YAAY,KAC7B,EAAM,cAAc,EAAM,eAK1B,OAAO,EAAM,oBAAqB,YAClC,EAAM,qBAAqB,UAE3B,EAAM,mBAAmB,EAAM,mBAE1B,OAAO,KAAK,EAAM,CAAC,SAAS,IAAI,IAAQ,KAAA;;AAGjD,SAAS,EACP,GAC+B;AAC1B,OAAS,EAAM,CACpB,SAAQ,EAAM,UAAd;EACE,KAAK,OACH,QAAO,EAAE,UAAU,QAAQ;EAC7B,KAAK,UAEH,QADI,OAAO,EAAM,SAAU,WACpB;GACL,UAAU;GACV,OAAO,EAAM;GACb,GAAI,OAAO,EAAM,eAAgB,YAAY,EAC3C,aAAa,EAAM,aACpB;GACF,GAPoC;EAQvC,KAAK,SAEH,QADI,OAAO,EAAM,SAAU,WACpB;GAAE,UAAU;GAAU,OAAO,EAAM;GAAO,GADZ;EAEvC,KAAK,QAOH,QALE,OAAO,EAAM,YAAa,YAC1B,OAAO,EAAM,YAAa,WAE1B,SAEK;GACL,UAAU;GACV,UAAU,EAAM;GAChB,UAAU,EAAM;GACjB;EACH,KAAK,UAAU;GACb,IAAM,IAAU,EAAa,EAAM,QAAQ;AAC3C,UAAO,IAAU;IAAE,UAAU;IAAU;IAAS,GAAG,KAAA;;EAErD,KAAK,UAAU;GACb,IAAM,IAAiB,EAAwB,EAAM,eAAe,EAC9D,IAAQ,EAAc,EAAM,MAAM;AACxC,UAAO;IACL,UAAU;IACV,GAAI,KAAkB,EAAE,mBAAgB;IACxC,GAAI,KAAS,EAAE,UAAO;IACvB;;EAEH,QACE;;;AAIN,SAAS,EACP,GAC+B;AAC/B,QAAO,EAA8B,EAAa,KAAK;;AAGzD,SAAS,EAAsB,GAGC;CAC9B,IAAM,IAAsC,EAAE;AAO9C,QANI,EAAM,QAAQ,CAAC,EAAyB,EAAM,KAAK,KACrD,EAAO,OAAO,EAAM,OAElB,EAAM,WAAW,OAAO,KAAK,EAAM,QAAQ,CAAC,SAAS,MACvD,EAAO,UAAU,EAAM,UAElB;;AAGT,SAAS,EAAsB,GAAyB;AACtD,QAAO;EACL,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,MAAM;EACxC,KAAK,EAAO;EACZ,GAAI,EAAO,WAAW,EAAE,SAAS,EAAO,SAAS;EACjD,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,MAAM;EACzC;;AAGH,SAAgB,EAAe,GAAuC;AACpE,QAAO,EAAsB,EAAO;;AAGtC,SAAgB,EAAiB,GAAyC;AACxE,QAAO;EACL,GAAG,EAAsB,EAAO;EAChC,GAAI,EAAO,YAAY,KAAA,KAAa,EAAE,SAAS,EAAO,SAAS;EAChE;;AAGH,SAAgB,EAAiB,GAAyC;AACxE,QAAO;EACL,MAAM,EAAO;EACb,SAAS,EAAO;EAChB,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,MAAM;EACxC,GAAI,EAAO,OAAO,EAAE,KAAK,EAAO,KAAK;EACtC;;AAGH,SAAS,EACP,GACqC;AACrC,KAAI,CAAC,KAAS,OAAO,KAAU,SAAU;CACzC,IAAM,IAAS;AACf,KAAI,EAAO,SAAS,QAAS;CAC7B,IAAM,IAA0C,EAAE,MAAM,SAAS;AAqCjE,SAnCE,EAAO,uBAAuB,UAC9B,EAAO,uBAAuB,wBAC9B,EAAO,uBAAuB,yBAC9B,EAAO,uBAAuB,uBAE9B,EAAe,qBAAqB,EAAO,sBAEzC,OAAO,EAAO,UAAW,YAG3B,MAAM,QAAQ,EAAO,OAAO,IAC5B,EAAO,OAAO,OAAO,MAAU,OAAO,KAAU,SAAS,MAHzD,EAAe,SAAS,EAAO,SAO7B,OAAO,EAAO,eAAgB,aAChC,EAAe,cAAc,EAAO,cAElC,OAAO,EAAO,uBAAwB,aACxC,EAAe,sBAAsB,EAAO,sBAE1C,OAAO,EAAO,aAAc,aAC9B,EAAe,YAAY,EAAO,YAEhC,OAAO,EAAO,iBAAkB,aAClC,EAAe,gBAAgB,EAAO,gBAGtC,EAAO,8BACP,OAAO,EAAO,8BAA+B,YAC7C,CAAC,MAAM,QAAQ,EAAO,2BAA2B,KAEjD,EAAe,6BACb,EAAO,6BAEJ;;AAOT,SAAgB,EAAe,GAA2B;CACxD,IAAM,IAAY,EAAmB,EAAM;AAC3C,KAAI,CAAC,EACH,QAAO,EAAE,GAAG,GAAkB;CAGhC,IAAM,IAAwC,EAAE,EAC1C,IAAiC,EAAE,EACnC,IAA4C,EAAE;AAEpD,MAAK,IAAM,CAAC,GAAY,MAAiB,OAAO,QAAQ,EAAU,EAAE;AAClE,MAAI,CAAC,EAAS,EAAa,CAAE;EAE7B,IAAM,IAAM,EAAa;AAEzB,MAAI,GAAK;GACP,IAAM,IAAY,EAAa,WACzB,IAAO,EAA+B,EAAa,EACnD,IAAU,EAAa,EAAa,QAAQ;AAElD,OAAI,MAAc,OAAO;IACvB,IAAM,IAAO,EAAoB,GAAY,MAAM,EAC7C,IAAuB,EAAE,QAAK;AAIpC,IAHI,MAAM,EAAO,OAAO,IACpB,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC9B,EAAW,KAAK,EAAO;UAClB;IACL,IAAM,IAAO,EAAoB,GAAY,QAAQ,EAC/C,IAAyB,EAAE,QAAK;AAOtC,IANI,MAAM,EAAO,OAAO,IACpB,EAAa,WAAW,SAC1B,EAAO,UAAU,EAAa,UAE5B,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC9B,EAAa,KAAK,EAAO;;SAEtB;AACL,OAAI,OAAO,EAAa,WAAY,SAAU;GAC9C,IAAM,IAA8B;IAClC,MAAM;IACN,SAAS,EAAa;IACvB;AAOD,GANI,EAAa,SACf,EAAY,OAAO,EAAa,OAE9B,EAAa,QACf,EAAY,MAAM,EAAa,MAEjC,EAAa,KAAK,EAAY;;;AAIlC,QAAO;EACL,aAAa;EACb,eAAe;EACf,eAAe;EAChB;;AAeH,SAAgB,EAAe,GAAwC;CACrE,IAAM,IAA0B,EAAE,EAE5B,KAAW,MAAyB;EACxC,IAAM,IAAW,EAAgB,EAAK;AACtC,MAAI,EAAE,KAAY,GAAY,QAAO;EACrC,IAAI,IAAI;AACR,SAAO,GAAG,EAAS,GAAG,OAAO,GAAW,MAAK;AAC7C,SAAO,GAAG,EAAS,GAAG;;AAGxB,MAAK,IAAM,KAAS,EAAO,aAAa;EACtC,IAAM,IAA6B,EAAE,EACjC;AASJ,EARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,EAAM,CAAC,GAErD,EAAO,YAAY,OACnB,EAAU,EAAQ,KAAQ,MAAM,IAAI;;AAGtC,MAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EAAE,WAAW,QAAQ,EACpD;AASJ,EARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,EAAM,CAAC,EAC/C,EAAM,WAAW,SAAM,EAAO,UAAU,EAAM,WAEpD,EAAU,EAAQ,KAAQ,QAAQ,IAAI;;AAGxC,MAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EACjC,SAAS,EAAM,SAChB;AAGD,EAFI,EAAM,SAAM,EAAO,OAAO,EAAM,OAChC,EAAM,QAAK,EAAO,MAAM,EAAM,MAClC,EAAU,EAAQ,EAAM,QAAQ,QAAQ,IAAI;;AAG9C,QAAO,OAAO,KAAK,EAAU,CAAC,SAAS,IAAI,IAAY"}

package/dist/utils/mcp-installed-server-display.cjs

@@ -0,0 +1,2 @@
+require(`../_virtual/_rolldown/runtime.cjs`);function e(e){return e.name?.trim()||void 0}function t(t,n){let r=e(t);return r&&r!==n?.id?r:n?.name?n.name:t.type===`stdio`?r??t.command??``:t.url??``}exports.getInstalledServerTitle=t;
+//# sourceMappingURL=mcp-installed-server-display.cjs.map

package/dist/utils/mcp-installed-server-display.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-installed-server-display.cjs","names":[],"sources":["../../src/utils/mcp-installed-server-display.ts"],"sourcesContent":["import type { IntegrationCatalogEntry as MarketplaceEntry } from \"@openhands/extensions/integrations\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\n\nfunction configuredServerName(server: MCPServerConfig): string | undefined {\n  const name = server.name?.trim();\n  return name ? name : undefined;\n}\n\n/**\n * Marketplace installs persist the catalog slug as the MCP server name so the\n * backend has a stable reference key. Treat that implicit slug as metadata,\n * while still honoring names the user entered explicitly.\n */\nexport function getInstalledServerTitle(\n  server: MCPServerConfig,\n  catalog?: MarketplaceEntry,\n): string {\n  const name = configuredServerName(server);\n  if (name && name !== catalog?.id) {\n    return name;\n  }\n\n  if (catalog?.name) {\n    return catalog.name;\n  }\n\n  if (server.type === \"stdio\") {\n    return name ?? server.command ?? \"\";\n  }\n\n  return server.url ?? \"\";\n}\n"],"mappings":"6CAGA,SAAS,EAAqB,EAA6C,CAEzE,OADa,EAAO,MAAM,MAAM,EACX,IAAA,GAQvB,SAAgB,EACd,EACA,EACQ,CACR,IAAM,EAAO,EAAqB,EAAO,CAazC,OAZI,GAAQ,IAAS,GAAS,GACrB,EAGL,GAAS,KACJ,EAAQ,KAGb,EAAO,OAAS,QACX,GAAQ,EAAO,SAAW,GAG5B,EAAO,KAAO"}

package/dist/utils/mcp-installed-server-display.d.ts

@@ -0,0 +1,8 @@
+import type { IntegrationCatalogEntry as MarketplaceEntry } from "@openhands/extensions/integrations";
+import type { MCPServerConfig } from "#/types/mcp-server";
+/**
+ * Marketplace installs persist the catalog slug as the MCP server name so the
+ * backend has a stable reference key. Treat that implicit slug as metadata,
+ * while still honoring names the user entered explicitly.
+ */
+export declare function getInstalledServerTitle(server: MCPServerConfig, catalog?: MarketplaceEntry): string;

package/dist/utils/mcp-installed-server-display.js

@@ -0,0 +1,12 @@
+//#region src/utils/mcp-installed-server-display.ts
+function e(e) {
+	return e.name?.trim() || void 0;
+}
+function t(t, n) {
+	let r = e(t);
+	return r && r !== n?.id ? r : n?.name ? n.name : t.type === "stdio" ? r ?? t.command ?? "" : t.url ?? "";
+}
+//#endregion
+export { t as getInstalledServerTitle };
+
+//# sourceMappingURL=mcp-installed-server-display.js.map

package/dist/utils/mcp-installed-server-display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-installed-server-display.js","names":[],"sources":["../../src/utils/mcp-installed-server-display.ts"],"sourcesContent":["import type { IntegrationCatalogEntry as MarketplaceEntry } from \"@openhands/extensions/integrations\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\n\nfunction configuredServerName(server: MCPServerConfig): string | undefined {\n  const name = server.name?.trim();\n  return name ? name : undefined;\n}\n\n/**\n * Marketplace installs persist the catalog slug as the MCP server name so the\n * backend has a stable reference key. Treat that implicit slug as metadata,\n * while still honoring names the user entered explicitly.\n */\nexport function getInstalledServerTitle(\n  server: MCPServerConfig,\n  catalog?: MarketplaceEntry,\n): string {\n  const name = configuredServerName(server);\n  if (name && name !== catalog?.id) {\n    return name;\n  }\n\n  if (catalog?.name) {\n    return catalog.name;\n  }\n\n  if (server.type === \"stdio\") {\n    return name ?? server.command ?? \"\";\n  }\n\n  return server.url ?? \"\";\n}\n"],"mappings":";AAGA,SAAS,EAAqB,GAA6C;AAEzE,QADa,EAAO,MAAM,MAAM,IACX,KAAA;;AAQvB,SAAgB,EACd,GACA,GACQ;CACR,IAAM,IAAO,EAAqB,EAAO;AAazC,QAZI,KAAQ,MAAS,GAAS,KACrB,IAGL,GAAS,OACJ,EAAQ,OAGb,EAAO,SAAS,UACX,KAAQ,EAAO,WAAW,KAG5B,EAAO,OAAO"}

package/dist/utils/mcp-installed-servers.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);function e(e){return[...e.sse_servers.map((e,t)=>({id:`sse-${t}`,type:`sse`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,api_key:typeof e==`object`?e.api_key:void 0,headers:typeof e==`object`?e.headers:void 0})),...e.stdio_servers.map((e,t)=>({id:`stdio-${t}`,type:`stdio`,name:e.name,command:e.command,args:e.args,env:e.env})),...e.shttp_servers.map((e,t)=>({id:`shttp-${t}`,type:`shttp`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,api_key:typeof e==`object`?e.api_key:void 0,headers:typeof e==`object`?e.headers:void 0,timeout:typeof e==`object`?e.timeout:void 0}))]}exports.flattenMcpConfig=e;
+require(`../_virtual/_rolldown/runtime.cjs`);function e(e){return[...e.sse_servers.map((e,t)=>({id:`sse-${t}`,type:`sse`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,auth:typeof e==`object`?e.auth:void 0})),...e.stdio_servers.map((e,t)=>({id:`stdio-${t}`,type:`stdio`,name:e.name,command:e.command,args:e.args,env:e.env})),...e.shttp_servers.map((e,t)=>({id:`shttp-${t}`,type:`shttp`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,timeout:typeof e==`object`?e.timeout:void 0,auth:typeof e==`object`?e.auth:void 0}))]}exports.flattenMcpConfig=e;
 //# sourceMappingURL=mcp-installed-servers.cjs.map

package/dist/utils/mcp-installed-servers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      api_key: typeof server === \"object\" ? server.api_key : undefined,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      api_key: typeof server === \"object\" ? server.api_key : undefined,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n    })),\n  ];\n}\n"],"mappings":"6CAGA,SAAgB,EAAiB,EAAsC,CACrE,MAAO,CACL,GAAG,EAAO,YAAY,KAAK,EAAQ,KAAW,CAC5C,GAAI,OAAO,IACX,KAAM,MACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACxD,EAAE,CACH,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,KAAM,EAAO,KACb,IAAK,EAAO,IACb,EAAE,CACH,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACxD,EAAE,CACJ"}
+{"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n  ];\n}\n"],"mappings":"6CAGA,SAAgB,EAAiB,EAAsC,CACrE,MAAO,CACL,GAAG,EAAO,YAAY,KAAK,EAAQ,KAAW,CAC5C,GAAI,OAAO,IACX,KAAM,MACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GAClD,EAAE,CACH,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,KAAM,EAAO,KACb,IAAK,EAAO,IACb,EAAE,CACH,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GAClD,EAAE,CACJ"}

package/dist/utils/mcp-installed-servers.js

@@ -6,8 +6,8 @@ function e(e) {
 			type: "sse",
 			name: typeof e == "object" ? e.name : void 0,
 			url: typeof e == "string" ? e : e.url,
-			api_key: typeof e == "object" ? e.api_key : void 0,
-			headers: typeof e == "object" ? e.headers : void 0
+			headers: typeof e == "object" ? e.headers : void 0,
+			auth: typeof e == "object" ? e.auth : void 0
 		})),
 		...e.stdio_servers.map((e, t) => ({
 			id: `stdio-${t}`,
@@ -22,9 +22,9 @@ function e(e) {
 			type: "shttp",
 			name: typeof e == "object" ? e.name : void 0,
 			url: typeof e == "string" ? e : e.url,
-			api_key: typeof e == "object" ? e.api_key : void 0,
 			headers: typeof e == "object" ? e.headers : void 0,
-			timeout: typeof e == "object" ? e.timeout : void 0
+			timeout: typeof e == "object" ? e.timeout : void 0,
+			auth: typeof e == "object" ? e.auth : void 0
 		}))
 	];
 }

package/dist/utils/mcp-installed-servers.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      api_key: typeof server === \"object\" ? server.api_key : undefined,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      api_key: typeof server === \"object\" ? server.api_key : undefined,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n    })),\n  ];\n}\n"],"mappings":";AAGA,SAAgB,EAAiB,GAAsC;AACrE,QAAO;EACL,GAAG,EAAO,YAAY,KAAK,GAAQ,OAAW;GAC5C,IAAI,OAAO;GACX,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACxD,EAAE;EACH,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,EAAO;GACb,SAAS,EAAO;GAChB,MAAM,EAAO;GACb,KAAK,EAAO;GACb,EAAE;EACH,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACxD,EAAE;EACJ"}
+{"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n  ];\n}\n"],"mappings":";AAGA,SAAgB,EAAiB,GAAsC;AACrE,QAAO;EACL,GAAG,EAAO,YAAY,KAAK,GAAQ,OAAW;GAC5C,IAAI,OAAO;GACX,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GAClD,EAAE;EACH,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,EAAO;GACb,SAAS,EAAO;GAChB,MAAM,EAAO;GACb,KAAK,EAAO;GACb,EAAE;EACH,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GAClD,EAAE;EACJ"}

package/dist/utils/mcp-marketplace-utils.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);function e(e){return e.connectionOptions.filter(e=>e.provider===`mcp`&&!!e.transport)}function t(t){return e(t)[0]}function n(e){return e.auth.strategy!==`oauth2`}function r(t){return e(t).find(n)}function i(e){return t(e)?.transport}function a(e){return e.filter(e=>!!t(e))}var o=e=>{try{return new URL(e)}catch{return null}};function s(e,t){let n=typeof e==`string`?e:``,r=typeof t==`string`?t:``;if(!n||!r)return!1;let i=o(n),a=o(r);return!i||!a?n.replace(/\/+$/,``)===r.replace(/\/+$/,``):i.protocol===a.protocol&&i.host===a.host&&i.pathname.replace(/\/+$/,``)===a.pathname.replace(/\/+$/,``)}function c(e,t){if(e.kind===`shttp`){let n=e.url;return t.type===`shttp`&&!!t.url&&s(t.url,n)}if(e.kind===`sse`){let n=e.url;return t.type===`sse`&&!!t.url&&s(t.url,n)}return t.type===`stdio`&&t.name===e.serverName}function l(e){return e.trim().toLowerCase()}function u(e){return e.map((e,t)=>({entry:e,index:t})).sort((e,t)=>(t.entry.popularityRank??0)-(e.entry.popularityRank??0)||e.index-t.index).map(({entry:e})=>e)}function d(e,t){let n=l(t);return n?[e.name,e.description,e.id,...e.keywords??[]].join(` `).toLowerCase().includes(n):!0}function f(e,t,n){let r=l(n);return r?[e.type,`name`in e?e.name:void 0,`command`in e?e.command:void 0,`args`in e?e.args?.join(` `):void 0,`url`in e?e.url:void 0,t?.name,t?.description,t?.id,...t?.keywords??[]].filter(Boolean).join(` `).toLowerCase().includes(r):!0}function p(t,n){return n.find(n=>e(n).some(e=>c(e.transport,t)))}exports.findCatalogEntryForServer=p,exports.getDefaultMcpTransport=i,exports.getInstallableMcpConnectionOption=r,exports.getMarketplaceEntriesByPopularity=u,exports.getMcpMarketplaceCatalog=a,exports.installedServerMatchesQuery=f,exports.marketplaceEntryMatchesQuery=d;
+require(`../_virtual/_rolldown/runtime.cjs`);function e(e){return e.connectionOptions.filter(e=>e.provider===`mcp`&&!!e.transport)}function t(t){return e(t)[0]}function n(e){if(e.auth.strategy!==`oauth2`)return!0;let t=e.auth.oauth;return t?!t.authorizationUrl&&!t.tokenUrl&&!t.registrationUrl&&!t.additionalAuthorizationParams&&!t.additionalTokenParams:!1}function r(t){return e(t).find(n)}function i(e){return t(e)?.transport}function a(e){switch(e){case`none`:return`none`;case`body`:return`client_secret_post`;case`basic`:return`client_secret_basic`;default:return}}function o(e){if(e.auth.strategy!==`oauth2`)return;let t={type:`oauth`},n=a(e.auth.oauth?.clientAuthentication);return n&&(t.client_auth_method=n),e.auth.oauth?.scopes?.length&&(t.scopes=e.auth.oauth.scopes),Object.keys(t).length>1?t:void 0}function s(e){return e.filter(e=>!!t(e))}var c=e=>{try{return new URL(e)}catch{return null}};function l(e,t){let n=typeof e==`string`?e:``,r=typeof t==`string`?t:``;if(!n||!r)return!1;let i=c(n),a=c(r);return!i||!a?n.replace(/\/+$/,``)===r.replace(/\/+$/,``):i.protocol===a.protocol&&i.host===a.host&&i.pathname.replace(/\/+$/,``)===a.pathname.replace(/\/+$/,``)}function u(e,t){if(e.kind===`shttp`){let n=e.url;return t.type===`shttp`&&!!t.url&&l(t.url,n)}if(e.kind===`sse`){let n=e.url;return t.type===`sse`&&!!t.url&&l(t.url,n)}return t.type===`stdio`&&t.name===e.serverName}function d(e){return e.trim().toLowerCase()}function f(e){return e.map((e,t)=>({entry:e,index:t})).sort((e,t)=>(t.entry.popularityRank??0)-(e.entry.popularityRank??0)||e.index-t.index).map(({entry:e})=>e)}function p(e,t){let n=d(t);return n?[e.name,e.description,e.id,...e.keywords??[]].join(` `).toLowerCase().includes(n):!0}function m(e,t,n){let r=d(n);return r?[e.type,`name`in e?e.name:void 0,`command`in e?e.command:void 0,`args`in e?e.args?.join(` `):void 0,`url`in e?e.url:void 0,t?.name,t?.description,t?.id,...t?.keywords??[]].filter(Boolean).join(` `).toLowerCase().includes(r):!0}function h(t,n){return n.find(n=>e(n).some(e=>u(e.transport,t)))}exports.findCatalogEntryForServer=h,exports.getDefaultMcpTransport=i,exports.getInstallableMcpConnectionOption=r,exports.getMarketplaceEntriesByPopularity=f,exports.getMcpMarketplaceCatalog=s,exports.getMcpOAuthAuthenticationConfig=o,exports.installedServerMatchesQuery=m,exports.marketplaceEntryMatchesQuery=p;
 //# sourceMappingURL=mcp-marketplace-utils.cjs.map

package/dist/utils/mcp-marketplace-utils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-marketplace-utils.cjs","names":[],"sources":["../../src/utils/mcp-marketplace-utils.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport type {\n  IntegrationAuthConfig,\n  IntegrationCatalogEntry as MarketplaceEntry,\n  IntegrationConnectionOption,\n  IntegrationTransport,\n} from \"@openhands/extensions/integrations\";\n\nexport type { MarketplaceEntry };\n\ntype McpIntegrationAuthConfig = IntegrationAuthConfig & {\n  credentialSecretName?: string;\n  saveCredentialAsSecretByDefault?: boolean;\n};\n\nexport type McpMarketplaceConnectionOption = Omit<\n  IntegrationConnectionOption,\n  \"auth\" | \"provider\" | \"transport\"\n> & {\n  provider: \"mcp\";\n  transport: IntegrationTransport;\n  auth: McpIntegrationAuthConfig;\n};\n\nexport function getMcpConnectionOptions(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption[] {\n  return entry.connectionOptions.filter(\n    (option): option is McpMarketplaceConnectionOption =>\n      option.provider === \"mcp\" && !!option.transport,\n  );\n}\n\nexport function getDefaultMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry)[0];\n}\n\nfunction isLocallyInstallableMcpOption(\n  option: McpMarketplaceConnectionOption,\n): boolean {\n  // The local install modal writes static MCP server config. OAuth options\n  // describe hosted redirect flows, so prefer an API/stdio fallback when one\n  // exists and leave OAuth as the default connection for hosted integrations.\n  return option.auth.strategy !== \"oauth2\";\n}\n\nexport function getInstallableMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry).find(isLocallyInstallableMcpOption);\n}\n\nexport function getDefaultMcpTransport(\n  entry: MarketplaceEntry,\n): IntegrationTransport | undefined {\n  return getDefaultMcpConnectionOption(entry)?.transport;\n}\n\nexport function getMcpMarketplaceCatalog(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog.filter((entry) => !!getDefaultMcpConnectionOption(entry));\n}\n\nconst tryUrl = (raw: string): URL | null => {\n  try {\n    return new URL(raw);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * Loose URL match that ignores query strings, trailing slashes, and\n * default ports. We want clicking \"Linear\" to flag the entry as\n * installed even if the user pasted the URL with extra trailing slash\n * or a different port-equivalent variant.\n *\n * Defensive against runtime data that doesn't match the static type:\n * if either input is not a string (e.g. parsed from an older settings\n * blob), we fall through the URL parsing path and the safe trim\n * fallback below, never calling `.replace` on undefined.\n */\nexport function urlsMatch(a: unknown, b: unknown): boolean {\n  const aStr = typeof a === \"string\" ? a : \"\";\n  const bStr = typeof b === \"string\" ? b : \"\";\n  if (!aStr || !bStr) return false;\n  const left = tryUrl(aStr);\n  const right = tryUrl(bStr);\n  if (!left || !right) {\n    return aStr.replace(/\\/+$/, \"\") === bStr.replace(/\\/+$/, \"\");\n  }\n  return (\n    left.protocol === right.protocol &&\n    left.host === right.host &&\n    left.pathname.replace(/\\/+$/, \"\") === right.pathname.replace(/\\/+$/, \"\")\n  );\n}\n\n/**\n * Decide whether a marketplace template is already represented by one\n * of the installed MCP servers. Used to render an \"Installed\" badge on\n * the marketplace tile. Returns the first matching server, or null.\n */\nexport function findInstalledMatch(\n  transport: IntegrationTransport,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  return (\n    servers.find((server) => transportMatchesServer(transport, server)) ?? null\n  );\n}\n\nexport function findInstalledEntryMatch(\n  entry: MarketplaceEntry,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  for (const option of getMcpConnectionOptions(entry)) {\n    const match = findInstalledMatch(option.transport, servers);\n    if (match) return match;\n  }\n  return null;\n}\n\nfunction transportMatchesServer(\n  transport: IntegrationTransport,\n  server: MCPServerConfig,\n): boolean {\n  if (transport.kind === \"shttp\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"shttp\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  if (transport.kind === \"sse\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"sse\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  // stdio: match on the registered server name.\n  return server.type === \"stdio\" && server.name === transport.serverName;\n}\n\nfunction normalize(query: string): string {\n  return query.trim().toLowerCase();\n}\n\n/**\n * Case-insensitive substring match against the catalog entry's\n * user-visible identity (name, description, id, keywords). Empty\n * queries always match.\n */\nexport function getMarketplaceEntriesByPopularity(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog\n    .map((entry, index) => ({ entry, index }))\n    .sort((a, b) => {\n      const byPopularity =\n        (b.entry.popularityRank ?? 0) - (a.entry.popularityRank ?? 0);\n      return byPopularity || a.index - b.index;\n    })\n    .map(({ entry }) => entry);\n}\n\nexport function getMarketplaceEntryById(\n  id: string,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => entry.id === id);\n}\n\nexport function marketplaceEntryMatchesQuery(\n  entry: MarketplaceEntry,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    entry.name,\n    entry.description,\n    entry.id,\n    ...(entry.keywords ?? []),\n  ]\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Search match for an installed (already-configured) server. We\n * search the server's own identifying fields and — if it's a catalog\n * entry — its catalog name/keywords too, so typing \"Slack\" matches\n * the installed Slack tile even though the persisted server is just\n * `{ type: \"stdio\", name: \"slack\", ... }`.\n */\nexport function installedServerMatchesQuery(\n  server: MCPServerConfig,\n  catalogEntry: MarketplaceEntry | undefined,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    server.type,\n    \"name\" in server ? server.name : undefined,\n    \"command\" in server ? server.command : undefined,\n    \"args\" in server ? server.args?.join(\" \") : undefined,\n    \"url\" in server ? server.url : undefined,\n    catalogEntry?.name,\n    catalogEntry?.description,\n    catalogEntry?.id,\n    ...(catalogEntry?.keywords ?? []),\n  ]\n    .filter(Boolean)\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Look up the catalog entry that best matches an installed server.\n * Mirrors the lookup used in `installed-server-card.tsx` for\n * rendering the friendly icon.\n */\nexport function findCatalogEntryForServer(\n  server: MCPServerConfig,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => {\n    // Check every MCP option rather than only the default. Some unified\n    // integration entries default to OAuth-hosted MCP while still exposing\n    // an API/stdio option; existing installed servers should match either.\n    return getMcpConnectionOptions(entry).some((option) =>\n      transportMatchesServer(option.transport, server),\n    );\n  });\n}\n"],"mappings":"6CAwBA,SAAgB,EACd,EACkC,CAClC,OAAO,EAAM,kBAAkB,OAC5B,GACC,EAAO,WAAa,OAAS,CAAC,CAAC,EAAO,UACzC,CAGH,SAAgB,EACd,EAC4C,CAC5C,OAAO,EAAwB,EAAM,CAAC,GAGxC,SAAS,EACP,EACS,CAIT,OAAO,EAAO,KAAK,WAAa,SAGlC,SAAgB,EACd,EAC4C,CAC5C,OAAO,EAAwB,EAAM,CAAC,KAAK,EAA8B,CAG3E,SAAgB,EACd,EACkC,CAClC,OAAO,EAA8B,EAAM,EAAE,UAG/C,SAAgB,EACd,EACoB,CACpB,OAAO,EAAQ,OAAQ,GAAU,CAAC,CAAC,EAA8B,EAAM,CAAC,CAG1E,IAAM,EAAU,GAA4B,CAC1C,GAAI,CACF,OAAO,IAAI,IAAI,EAAI,MACb,CACN,OAAO,OAeX,SAAgB,EAAU,EAAY,EAAqB,CACzD,IAAM,EAAO,OAAO,GAAM,SAAW,EAAI,GACnC,EAAO,OAAO,GAAM,SAAW,EAAI,GACzC,GAAI,CAAC,GAAQ,CAAC,EAAM,MAAO,GAC3B,IAAM,EAAO,EAAO,EAAK,CACnB,EAAQ,EAAO,EAAK,CAI1B,MAHI,CAAC,GAAQ,CAAC,EACL,EAAK,QAAQ,OAAQ,GAAG,GAAK,EAAK,QAAQ,OAAQ,GAAG,CAG5D,EAAK,WAAa,EAAM,UACxB,EAAK,OAAS,EAAM,MACpB,EAAK,SAAS,QAAQ,OAAQ,GAAG,GAAK,EAAM,SAAS,QAAQ,OAAQ,GAAG,CA6B5E,SAAS,EACP,EACA,EACS,CACT,GAAI,EAAU,OAAS,QAAS,CAC9B,IAAM,EAAS,EAAU,IACzB,OACE,EAAO,OAAS,SAAW,CAAC,CAAC,EAAO,KAAO,EAAU,EAAO,IAAK,EAAO,CAI5E,GAAI,EAAU,OAAS,MAAO,CAC5B,IAAM,EAAS,EAAU,IACzB,OACE,EAAO,OAAS,OAAS,CAAC,CAAC,EAAO,KAAO,EAAU,EAAO,IAAK,EAAO,CAK1E,OAAO,EAAO,OAAS,SAAW,EAAO,OAAS,EAAU,WAG9D,SAAS,EAAU,EAAuB,CACxC,OAAO,EAAM,MAAM,CAAC,aAAa,CAQnC,SAAgB,EACd,EACoB,CACpB,OAAO,EACJ,KAAK,EAAO,KAAW,CAAE,QAAO,QAAO,EAAE,CACzC,MAAM,EAAG,KAEL,EAAE,MAAM,gBAAkB,IAAM,EAAE,MAAM,gBAAkB,IACtC,EAAE,MAAQ,EAAE,MACnC,CACD,KAAK,CAAE,WAAY,EAAM,CAU9B,SAAgB,EACd,EACA,EACS,CACT,IAAM,EAAI,EAAU,EAAS,CAU7B,OATK,EACY,CACf,EAAM,KACN,EAAM,YACN,EAAM,GACN,GAAI,EAAM,UAAY,EAAE,CACzB,CACE,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,CATZ,GAmBjB,SAAgB,EACd,EACA,EACA,EACS,CACT,IAAM,EAAI,EAAU,EAAS,CAgB7B,OAfK,EACY,CACf,EAAO,KACP,SAAU,EAAS,EAAO,KAAO,IAAA,GACjC,YAAa,EAAS,EAAO,QAAU,IAAA,GACvC,SAAU,EAAS,EAAO,MAAM,KAAK,IAAI,CAAG,IAAA,GAC5C,QAAS,EAAS,EAAO,IAAM,IAAA,GAC/B,GAAc,KACd,GAAc,YACd,GAAc,GACd,GAAI,GAAc,UAAY,EAAE,CACjC,CACE,OAAO,QAAQ,CACf,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,CAfZ,GAuBjB,SAAgB,EACd,EACA,EAC8B,CAC9B,OAAO,EAAQ,KAAM,GAIZ,EAAwB,EAAM,CAAC,KAAM,GAC1C,EAAuB,EAAO,UAAW,EAAO,CACjD,CACD"}
+{"version":3,"file":"mcp-marketplace-utils.cjs","names":[],"sources":["../../src/utils/mcp-marketplace-utils.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport type {\n  MCPAuthenticationConfig,\n  MCPOAuthClientAuthMethod,\n} from \"#/types/mcp-auth\";\nimport type {\n  IntegrationAuthConfig,\n  IntegrationCatalogEntry as MarketplaceEntry,\n  IntegrationConnectionOption,\n  IntegrationOAuthConfig,\n  IntegrationTransport,\n} from \"@openhands/extensions/integrations\";\n\nexport type { MarketplaceEntry };\n\ntype McpIntegrationAuthConfig = IntegrationAuthConfig & {\n  credentialSecretName?: string;\n  saveCredentialAsSecretByDefault?: boolean;\n};\n\nexport type McpMarketplaceConnectionOption = Omit<\n  IntegrationConnectionOption,\n  \"auth\" | \"provider\" | \"transport\"\n> & {\n  provider: \"mcp\";\n  transport: IntegrationTransport;\n  auth: McpIntegrationAuthConfig;\n};\n\nexport function getMcpConnectionOptions(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption[] {\n  return entry.connectionOptions.filter(\n    (option): option is McpMarketplaceConnectionOption =>\n      option.provider === \"mcp\" && !!option.transport,\n  );\n}\n\nexport function getDefaultMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry)[0];\n}\n\nfunction isLocallyInstallableMcpOption(\n  option: McpMarketplaceConnectionOption,\n): boolean {\n  if (option.auth.strategy !== \"oauth2\") return true;\n\n  const oauth = option.auth.oauth;\n  if (!oauth) return false;\n\n  // Local agent-server installs only support OAuth flows initiated by the MCP\n  // server itself through fastmcp. Catalog entries that specify provider OAuth\n  // endpoints still need the hosted integration-auth flow and should not be\n  // exposed as locally installable static MCP configs.\n  return (\n    !oauth.authorizationUrl &&\n    !oauth.tokenUrl &&\n    !oauth.registrationUrl &&\n    !oauth.additionalAuthorizationParams &&\n    !oauth.additionalTokenParams\n  );\n}\n\nexport function getInstallableMcpConnectionOption(\n  entry: MarketplaceEntry,\n): McpMarketplaceConnectionOption | undefined {\n  return getMcpConnectionOptions(entry).find(isLocallyInstallableMcpOption);\n}\n\nexport function getDefaultMcpTransport(\n  entry: MarketplaceEntry,\n): IntegrationTransport | undefined {\n  return getDefaultMcpConnectionOption(entry)?.transport;\n}\n\nfunction toMcpOAuthClientAuthMethod(\n  value: IntegrationOAuthConfig[\"clientAuthentication\"] | undefined,\n): MCPOAuthClientAuthMethod | undefined {\n  switch (value) {\n    case \"none\":\n      return \"none\";\n    case \"body\":\n      return \"client_secret_post\";\n    case \"basic\":\n      return \"client_secret_basic\";\n    default:\n      return undefined;\n  }\n}\n\nexport function getMcpOAuthAuthenticationConfig(\n  option: McpMarketplaceConnectionOption,\n): MCPAuthenticationConfig | undefined {\n  if (option.auth.strategy !== \"oauth2\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  const clientAuthMethod = toMcpOAuthClientAuthMethod(\n    option.auth.oauth?.clientAuthentication,\n  );\n  if (clientAuthMethod) {\n    authentication.client_auth_method = clientAuthMethod;\n  }\n  if (option.auth.oauth?.scopes?.length) {\n    authentication.scopes = option.auth.oauth.scopes;\n  }\n  return Object.keys(authentication).length > 1 ? authentication : undefined;\n}\n\nexport function getMcpMarketplaceCatalog(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog.filter((entry) => !!getDefaultMcpConnectionOption(entry));\n}\n\nconst tryUrl = (raw: string): URL | null => {\n  try {\n    return new URL(raw);\n  } catch {\n    return null;\n  }\n};\n\n/**\n * Loose URL match that ignores query strings, trailing slashes, and\n * default ports. We want clicking \"Linear\" to flag the entry as\n * installed even if the user pasted the URL with extra trailing slash\n * or a different port-equivalent variant.\n *\n * Defensive against runtime data that doesn't match the static type:\n * if either input is not a string (e.g. parsed from an older settings\n * blob), we fall through the URL parsing path and the safe trim\n * fallback below, never calling `.replace` on undefined.\n */\nexport function urlsMatch(a: unknown, b: unknown): boolean {\n  const aStr = typeof a === \"string\" ? a : \"\";\n  const bStr = typeof b === \"string\" ? b : \"\";\n  if (!aStr || !bStr) return false;\n  const left = tryUrl(aStr);\n  const right = tryUrl(bStr);\n  if (!left || !right) {\n    return aStr.replace(/\\/+$/, \"\") === bStr.replace(/\\/+$/, \"\");\n  }\n  return (\n    left.protocol === right.protocol &&\n    left.host === right.host &&\n    left.pathname.replace(/\\/+$/, \"\") === right.pathname.replace(/\\/+$/, \"\")\n  );\n}\n\n/**\n * Decide whether a marketplace template is already represented by one\n * of the installed MCP servers. Used to render an \"Installed\" badge on\n * the marketplace tile. Returns the first matching server, or null.\n */\nexport function findInstalledMatch(\n  transport: IntegrationTransport,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  return (\n    servers.find((server) => transportMatchesServer(transport, server)) ?? null\n  );\n}\n\nexport function findInstalledEntryMatch(\n  entry: MarketplaceEntry,\n  servers: MCPServerConfig[],\n): MCPServerConfig | null {\n  for (const option of getMcpConnectionOptions(entry)) {\n    const match = findInstalledMatch(option.transport, servers);\n    if (match) return match;\n  }\n  return null;\n}\n\nfunction transportMatchesServer(\n  transport: IntegrationTransport,\n  server: MCPServerConfig,\n): boolean {\n  if (transport.kind === \"shttp\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"shttp\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  if (transport.kind === \"sse\") {\n    const tplUrl = transport.url;\n    return (\n      server.type === \"sse\" && !!server.url && urlsMatch(server.url, tplUrl)\n    );\n  }\n\n  // stdio: match on the registered server name.\n  return server.type === \"stdio\" && server.name === transport.serverName;\n}\n\nfunction normalize(query: string): string {\n  return query.trim().toLowerCase();\n}\n\n/**\n * Case-insensitive substring match against the catalog entry's\n * user-visible identity (name, description, id, keywords). Empty\n * queries always match.\n */\nexport function getMarketplaceEntriesByPopularity(\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry[] {\n  return catalog\n    .map((entry, index) => ({ entry, index }))\n    .sort((a, b) => {\n      const byPopularity =\n        (b.entry.popularityRank ?? 0) - (a.entry.popularityRank ?? 0);\n      return byPopularity || a.index - b.index;\n    })\n    .map(({ entry }) => entry);\n}\n\nexport function getMarketplaceEntryById(\n  id: string,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => entry.id === id);\n}\n\nexport function marketplaceEntryMatchesQuery(\n  entry: MarketplaceEntry,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    entry.name,\n    entry.description,\n    entry.id,\n    ...(entry.keywords ?? []),\n  ]\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Search match for an installed (already-configured) server. We\n * search the server's own identifying fields and — if it's a catalog\n * entry — its catalog name/keywords too, so typing \"Slack\" matches\n * the installed Slack tile even though the persisted server is just\n * `{ type: \"stdio\", name: \"slack\", ... }`.\n */\nexport function installedServerMatchesQuery(\n  server: MCPServerConfig,\n  catalogEntry: MarketplaceEntry | undefined,\n  rawQuery: string,\n): boolean {\n  const q = normalize(rawQuery);\n  if (!q) return true;\n  const haystack = [\n    server.type,\n    \"name\" in server ? server.name : undefined,\n    \"command\" in server ? server.command : undefined,\n    \"args\" in server ? server.args?.join(\" \") : undefined,\n    \"url\" in server ? server.url : undefined,\n    catalogEntry?.name,\n    catalogEntry?.description,\n    catalogEntry?.id,\n    ...(catalogEntry?.keywords ?? []),\n  ]\n    .filter(Boolean)\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(q);\n}\n\n/**\n * Look up the catalog entry that best matches an installed server.\n * Mirrors the lookup used in `installed-server-card.tsx` for\n * rendering the friendly icon.\n */\nexport function findCatalogEntryForServer(\n  server: MCPServerConfig,\n  catalog: MarketplaceEntry[],\n): MarketplaceEntry | undefined {\n  return catalog.find((entry) => {\n    // Check every MCP option rather than only the default. Some unified\n    // integration entries default to OAuth-hosted MCP while still exposing\n    // an API/stdio option; existing installed servers should match either.\n    return getMcpConnectionOptions(entry).some((option) =>\n      transportMatchesServer(option.transport, server),\n    );\n  });\n}\n"],"mappings":"6CA6BA,SAAgB,EACd,EACkC,CAClC,OAAO,EAAM,kBAAkB,OAC5B,GACC,EAAO,WAAa,OAAS,CAAC,CAAC,EAAO,UACzC,CAGH,SAAgB,EACd,EAC4C,CAC5C,OAAO,EAAwB,EAAM,CAAC,GAGxC,SAAS,EACP,EACS,CACT,GAAI,EAAO,KAAK,WAAa,SAAU,MAAO,GAE9C,IAAM,EAAQ,EAAO,KAAK,MAO1B,OANK,EAOH,CAAC,EAAM,kBACP,CAAC,EAAM,UACP,CAAC,EAAM,iBACP,CAAC,EAAM,+BACP,CAAC,EAAM,sBAXU,GAerB,SAAgB,EACd,EAC4C,CAC5C,OAAO,EAAwB,EAAM,CAAC,KAAK,EAA8B,CAG3E,SAAgB,EACd,EACkC,CAClC,OAAO,EAA8B,EAAM,EAAE,UAG/C,SAAS,EACP,EACsC,CACtC,OAAQ,EAAR,CACE,IAAK,OACH,MAAO,OACT,IAAK,OACH,MAAO,qBACT,IAAK,QACH,MAAO,sBACT,QACE,QAIN,SAAgB,EACd,EACqC,CACrC,GAAI,EAAO,KAAK,WAAa,SAAU,OACvC,IAAM,EAA0C,CAAE,KAAM,QAAS,CAC3D,EAAmB,EACvB,EAAO,KAAK,OAAO,qBACpB,CAOD,OANI,IACF,EAAe,mBAAqB,GAElC,EAAO,KAAK,OAAO,QAAQ,SAC7B,EAAe,OAAS,EAAO,KAAK,MAAM,QAErC,OAAO,KAAK,EAAe,CAAC,OAAS,EAAI,EAAiB,IAAA,GAGnE,SAAgB,EACd,EACoB,CACpB,OAAO,EAAQ,OAAQ,GAAU,CAAC,CAAC,EAA8B,EAAM,CAAC,CAG1E,IAAM,EAAU,GAA4B,CAC1C,GAAI,CACF,OAAO,IAAI,IAAI,EAAI,MACb,CACN,OAAO,OAeX,SAAgB,EAAU,EAAY,EAAqB,CACzD,IAAM,EAAO,OAAO,GAAM,SAAW,EAAI,GACnC,EAAO,OAAO,GAAM,SAAW,EAAI,GACzC,GAAI,CAAC,GAAQ,CAAC,EAAM,MAAO,GAC3B,IAAM,EAAO,EAAO,EAAK,CACnB,EAAQ,EAAO,EAAK,CAI1B,MAHI,CAAC,GAAQ,CAAC,EACL,EAAK,QAAQ,OAAQ,GAAG,GAAK,EAAK,QAAQ,OAAQ,GAAG,CAG5D,EAAK,WAAa,EAAM,UACxB,EAAK,OAAS,EAAM,MACpB,EAAK,SAAS,QAAQ,OAAQ,GAAG,GAAK,EAAM,SAAS,QAAQ,OAAQ,GAAG,CA6B5E,SAAS,EACP,EACA,EACS,CACT,GAAI,EAAU,OAAS,QAAS,CAC9B,IAAM,EAAS,EAAU,IACzB,OACE,EAAO,OAAS,SAAW,CAAC,CAAC,EAAO,KAAO,EAAU,EAAO,IAAK,EAAO,CAI5E,GAAI,EAAU,OAAS,MAAO,CAC5B,IAAM,EAAS,EAAU,IACzB,OACE,EAAO,OAAS,OAAS,CAAC,CAAC,EAAO,KAAO,EAAU,EAAO,IAAK,EAAO,CAK1E,OAAO,EAAO,OAAS,SAAW,EAAO,OAAS,EAAU,WAG9D,SAAS,EAAU,EAAuB,CACxC,OAAO,EAAM,MAAM,CAAC,aAAa,CAQnC,SAAgB,EACd,EACoB,CACpB,OAAO,EACJ,KAAK,EAAO,KAAW,CAAE,QAAO,QAAO,EAAE,CACzC,MAAM,EAAG,KAEL,EAAE,MAAM,gBAAkB,IAAM,EAAE,MAAM,gBAAkB,IACtC,EAAE,MAAQ,EAAE,MACnC,CACD,KAAK,CAAE,WAAY,EAAM,CAU9B,SAAgB,EACd,EACA,EACS,CACT,IAAM,EAAI,EAAU,EAAS,CAU7B,OATK,EACY,CACf,EAAM,KACN,EAAM,YACN,EAAM,GACN,GAAI,EAAM,UAAY,EAAE,CACzB,CACE,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,CATZ,GAmBjB,SAAgB,EACd,EACA,EACA,EACS,CACT,IAAM,EAAI,EAAU,EAAS,CAgB7B,OAfK,EACY,CACf,EAAO,KACP,SAAU,EAAS,EAAO,KAAO,IAAA,GACjC,YAAa,EAAS,EAAO,QAAU,IAAA,GACvC,SAAU,EAAS,EAAO,MAAM,KAAK,IAAI,CAAG,IAAA,GAC5C,QAAS,EAAS,EAAO,IAAM,IAAA,GAC/B,GAAc,KACd,GAAc,YACd,GAAc,GACd,GAAI,GAAc,UAAY,EAAE,CACjC,CACE,OAAO,QAAQ,CACf,KAAK,IAAI,CACT,aACI,CAAS,SAAS,EAAE,CAfZ,GAuBjB,SAAgB,EACd,EACA,EAC8B,CAC9B,OAAO,EAAQ,KAAM,GAIZ,EAAwB,EAAM,CAAC,KAAM,GAC1C,EAAuB,EAAO,UAAW,EAAO,CACjD,CACD"}

package/dist/utils/mcp-marketplace-utils.d.ts

@@ -1,4 +1,5 @@
 import { MCPServerConfig } from "#/types/mcp-server";
+import type { MCPAuthenticationConfig } from "#/types/mcp-auth";
 import type { IntegrationAuthConfig, IntegrationCatalogEntry as MarketplaceEntry, IntegrationConnectionOption, IntegrationTransport } from "@openhands/extensions/integrations";
 export type { MarketplaceEntry };
 type McpIntegrationAuthConfig = IntegrationAuthConfig & {
@@ -14,6 +15,7 @@ export declare function getMcpConnectionOptions(entry: MarketplaceEntry): McpMar
 export declare function getDefaultMcpConnectionOption(entry: MarketplaceEntry): McpMarketplaceConnectionOption | undefined;
 export declare function getInstallableMcpConnectionOption(entry: MarketplaceEntry): McpMarketplaceConnectionOption | undefined;
 export declare function getDefaultMcpTransport(entry: MarketplaceEntry): IntegrationTransport | undefined;
+export declare function getMcpOAuthAuthenticationConfig(option: McpMarketplaceConnectionOption): MCPAuthenticationConfig | undefined;
 export declare function getMcpMarketplaceCatalog(catalog: MarketplaceEntry[]): MarketplaceEntry[];
 /**
  * Loose URL match that ignores query strings, trailing slashes, and