npm - @openhands/agent-canvas - Versions diffs - 1.1.0 → 1.2.1 - Mend

@openhands/agent-canvas 1.1.0 → 1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1390) hide show

package/dist/api/mcp-service/mcp-redacted-credentials.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-redacted-credentials.js","names":[],"sources":["../../../src/api/mcp-service/mcp-redacted-credentials.ts"],"sourcesContent":["import SettingsService from \"#/api/settings-service/settings-service.api\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { REDACTED_MCP_SECRET_VALUE } from \"#/utils/mcp-config\";\n\ntype StoredMcpServer = {\n url?: unknown;\n transport?: unknown;\n env?: unknown;\n headers?: unknown;\n};\n\ntype ~~StoredMcpServers~~ = Record<string, StoredMcpServer>;\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst stringRecord = (value: unknown): Record<string, string> \| undefined => {\n if (!isRecord(value)) return undefined;\n const entries = Object.entries(value).filter(\n (entry): entry is [string, string] => typeof entry[1] === \"string\",\n );\n return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n};\n\nconst hasRedactedValue = (values: Record<string, string> \| undefined) =>\n !!values &&\n Object.values(values).some((value) => value === REDACTED_MCP_SECRET_VALUE);\n\nconst remoteTransportMatches = (\n type: MCPServerConfig[\"type\"],\n transport: unknown,\n) => {\n if (type === \"sse\") return transport === \"sse\";\n if (type === \"shttp\") {\n return (\n transport === undefined \|\|\n transport === \"http\" \|\|\n transport === \"shttp\" \|\|\n transport === \"streamable-http\"\n );\n }\n return false;\n};\n\n// The editor assigns each stdio server an id of the form ``stdio-<i>`` matching\n// its position in ``parseMcpConfig``'s stdio array. That position is stable\n// across a rename because ``parseMcpConfig`` collects stdio entries (those\n// without a ``url``) in ``Object.entries`` order, identical for the redacted\n// and encrypted settings. Resolve the original stored entry by position so a\n// renamed stdio server still finds its stored encrypted env, instead of\n// looking it up by the new (no-longer-matching) display name.\nconst stdioIndexFromId = (id: string \| undefined): number \| undefined => {\n if (!id) return undefined;\n const match = /^stdio-(\\d+)$/.exec(id);\n return match ? Number.parseInt(match[1], 10) : undefined;\n};\n\nconst findStoredStdioByIndex = (\n id: string \| undefined,\n storedServers: ~~StoredMcpServers~~,\n): StoredMcpServer \| undefined => {\n const index = stdioIndexFromId(id);\n if (index === undefined) return undefined;\n const stdioEntries = Object.entries(storedServers).filter(\n ([, stored]) => !stored.url,\n );\n return stdioEntries[index]?.[1];\n};\n\nconst findStoredServer = (\n server: MCPServerConfig,\n storedServers: ~~StoredMcpServers~~,\n): StoredMcpServer \| undefined => {\n if (server.type === \"stdio\") {\n // Prefer the positional id: a rename changes the display name (the stored\n // dict key), and a rename onto an existing name would otherwise restore the\n // wrong server's secrets. Fall back to a name match only when no id-based\n // position is available (e.g. configs built without an editor-assigned id).\n return (\n findStoredStdioByIndex(server.id, storedServers) ??\n (server.name ? storedServers[server.name] : undefined)\n );\n }\n\n if (server.name && storedServers[server.name]) {\n return storedServers[server.name];\n }\n\n return Object.values(storedServers).find(\n (stored) =>\n stored.url === server.url &&\n remoteTransportMatches(server.type, stored.transport),\n );\n};\n\nasync function fetchEncryptedStoredServer(\n server: MCPServerConfig,\n): Promise<StoredMcpServer \| undefined> {\n const response = await SettingsService.fetchSettingsFromApi(\"encrypted\");\n const mcpConfig = response.agent_settings?.mcp_config;\n if (!isRecord(mcpConfig) ~~\|\| !isRecord(mcpConfig.mcpServers~~)) {\n return undefined;\n }\n return findStoredServer(server, mcpConfig~~.mcpServers~~ as ~~StoredMcpServers~~);\n}\n\n/*\n The MCP editor sees redacted settings (~~`<redacted>`~~). When the user leaves\n * a secret unchanged, replace that placeholder with the stored encrypted\n * env/header value so tests and saves round-trip the real credential without\n * exposing plaintext in the browser.\n */\nexport async function substituteRedactedMcpCredentials(\n server: MCPServerConfig,\n): Promise<MCPServerConfig> {\n const redactedStdioEnv =\n server.type === \"stdio\" && hasRedactedValue(server.env);\n const ~~redactedRemoteApiKey~~ =\n (server.type === \"sse\" \|\| server.type === \"shttp\") &&\n server.~~api_key === REDACTED_MCP_SECRET_VALUE~~;\n\n if (!redactedStdioEnv && !~~redactedRemoteApiKey~~) return server;\n\n try {\n const stored = await fetchEncryptedStoredServer(server);\n if (!stored) return server;\n\n if (redactedStdioEnv) {\n const storedEnv = stringRecord(stored.env) ?? {};\n const env = Object.fromEntries(\n Object.entries(server.env ?? {}).map(([key, value]) => [\n key,\n value === REDACTED_MCP_SECRET_VALUE &&\n typeof storedEnv[key] === \"string\"\n ? storedEnv[key]\n : value,\n ]),\n );\n return { ...server, env };\n }\n\n ~~const~~ ~~headers~~ = ~~stringRecord(stored.headers)~~;\n if (~~!headers~~) ~~return server;\~~n return { ...server, ~~api_key~~: ~~undefined,~~ ~~headers~~ };\n } catch {\n return server;\n }\n}\n"],"mappings":"~~;;;AAaA~~,IAAM,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,EAAM,EAEzD,KAAgB,MAAuD;AAC3E,KAAI,CAAC,EAAS,EAAM,CAAE;CACtB,IAAM,IAAU,OAAO,QAAQ,EAAM,CAAC,QACnC,MAAqC,OAAO,EAAM,MAAO,SAC3D;AACD,QAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,EAAQ,GAAG,KAAA;GAGtD,KAAoB,MACxB,CAAC,CAAC,KACF,OAAO,OAAO,EAAO,CAAC,MAAM,MAAU,MAAA,aAAoC,EAEtE,KACJ,GACA,MAEI,MAAS,QAAc,MAAc,QACrC,MAAS,UAET,MAAc,KAAA,KACd,MAAc,UACd,MAAc,WACd,MAAc,oBAGX,IAUH,KAAoB,MAA+C;AACvE,KAAI,CAAC,EAAI;CACT,IAAM,IAAQ,gBAAgB,KAAK,EAAG;AACtC,QAAO,IAAQ,OAAO,SAAS,EAAM,IAAI,GAAG,GAAG,KAAA;GAG3C,KACJ,GACA,MACgC;CAChC,IAAM,IAAQ,EAAiB,EAAG;AAC9B,WAAU,KAAA,EAId,QAHqB,OAAO,QAAQ,EAAc,CAAC,QAChD,GAAG,OAAY,CAAC,EAAO,IAEnB,CAAa,KAAS;GAGzB,KACJ,GACA,MAEI,EAAO,SAAS,UAMhB,EAAuB,EAAO,IAAI,EAAc,KAC/C,EAAO,OAAO,EAAc,EAAO,QAAQ,KAAA,KAI5C,EAAO,QAAQ,EAAc,EAAO,QAC/B,EAAc,EAAO,QAGvB,OAAO,OAAO,EAAc,CAAC,MACjC,MACC,EAAO,QAAQ,EAAO,OACtB,EAAuB,EAAO,MAAM,EAAO,UAAU,CACxD;AAGH,eAAe,EACb,GACsC;CAEtC,IAAM,KAAY,MADK,EAAgB,qBAAqB,YAAY,EAC7C,gBAAgB;~~AACvC~~,~~QAAC~~,~~EAAS,~~EAAU,~~IAAI~~,~~CAAC,EAAS,EAAU,WAAW,EAG3D,~~QAAO,EAAiB,GAAQ,~~EAAU,WAA+B~~;;~~AAS3E~~,eAAsB,EACpB,GAC0B;CAC1B,IAAM,IACJ,EAAO,SAAS,WAAW,EAAiB,EAAO,IAAI,EACnD,KACH,EAAO,SAAS,SAAS,EAAO,SAAS,YAC1C,EAAO,~~YAAA~~;~~AAET~~,KAAI,CAAC,KAAoB,CAAC,~~EAAsB~~,QAAO;~~AAEvD~~,KAAI;EACF,IAAM,IAAS,MAAM,EAA2B,EAAO;AACvD,MAAI,CAAC,EAAQ,QAAO;AAEpB,MAAI,GAAkB;GACpB,IAAM,IAAY,EAAa,EAAO,IAAI,IAAI,EAAE,EAC1C,IAAM,OAAO,YACjB,OAAO,QAAQ,EAAO,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAK,OAAW,CACrD,GACA,MAAA,gBACA,OAAO,EAAU,MAAS,WACtB,EAAU,KACV,EACL,CAAC,CACH;AACD,UAAO;IAAE,GAAG;IAAQ;IAAK;;~~EAG3B~~,~~IAAM~~,~~IAAU~~,~~EAAa~~,EAAO,~~QAAQ;AAE5C~~,~~SADK,IACE~~;GAAE,GAAG;GAAQ,~~SAAS~~,~~KAAA~~;~~GAAW;GAAS~~,~~GAD5B~~;~~SAEf~~;AACN,SAAO"}
1	+ {"version":3,"file":"mcp-redacted-credentials.js","names":[],"sources":["../../../src/api/mcp-service/mcp-redacted-credentials.ts"],"sourcesContent":["import SettingsService from \"#/api/settings-service/settings-service.api\";\nimport { isMcpAuthCredential } from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport {\n hasRedactedMcpSecretLeaf,\n REDACTED_MCP_SECRET_VALUE,\n} from \"#/utils/mcp-config\";\n\ntype StoredMcpServer = {\n url?: unknown;\n transport?: unknown;\n env?: unknown;\n auth?: unknown;\n headers?: unknown;\n};\n\ntype StoredMcpConfig = Record<string, StoredMcpServer>;\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst stringRecord = (value: unknown): Record<string, string> \| undefined => {\n if (!isRecord(value)) return undefined;\n const entries = Object.entries(value).filter(\n (entry): entry is [string, string] => typeof entry[1] === \"string\",\n );\n return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n};\n\nconst hasRedactedValue = (values: Record<string, string> \| undefined) =>\n !!values &&\n Object.values(values).some((value) => value === REDACTED_MCP_SECRET_VALUE);\n\nconst remoteTransportMatches = (\n type: MCPServerConfig[\"type\"],\n transport: unknown,\n) => {\n if (type === \"sse\") return transport === \"sse\";\n if (type === \"shttp\") {\n return (\n transport === undefined \|\|\n transport === \"http\" \|\|\n transport === \"shttp\" \|\|\n transport === \"streamable-http\"\n );\n }\n return false;\n};\n\n// The editor assigns each stdio server an id of the form ``stdio-<i>`` matching\n// its position in ``parseMcpConfig``'s stdio array. That position is stable\n// across a rename because ``parseMcpConfig`` collects stdio entries (those\n// without a ``url``) in ``Object.entries`` order, identical for the redacted\n// and encrypted settings. Resolve the original stored entry by position so a\n// renamed stdio server still finds its stored encrypted env, instead of\n// looking it up by the new (no-longer-matching) display name.\nconst stdioIndexFromId = (id: string \| undefined): number \| undefined => {\n if (!id) return undefined;\n const match = /^stdio-(\\d+)$/.exec(id);\n return match ? Number.parseInt(match[1], 10) : undefined;\n};\n\nconst findStoredStdioByIndex = (\n id: string \| undefined,\n storedServers: StoredMcpConfig,\n): StoredMcpServer \| undefined => {\n const index = stdioIndexFromId(id);\n if (index === undefined) return undefined;\n const stdioEntries = Object.entries(storedServers).filter(\n ([, stored]) => !stored.url,\n );\n return stdioEntries[index]?.[1];\n};\n\nconst findStoredServer = (\n server: MCPServerConfig,\n storedServers: StoredMcpConfig,\n): StoredMcpServer \| undefined => {\n if (server.type === \"stdio\") {\n // Prefer the positional id: a rename changes the display name (the stored\n // dict key), and a rename onto an existing name would otherwise restore the\n // wrong server's secrets. Fall back to a name match only when no id-based\n // position is available (e.g. configs built without an editor-assigned id).\n return (\n findStoredStdioByIndex(server.id, storedServers) ??\n (server.name ? storedServers[server.name] : undefined)\n );\n }\n\n if (server.name && storedServers[server.name]) {\n return storedServers[server.name];\n }\n\n return Object.values(storedServers).find(\n (stored) =>\n stored.url === server.url &&\n remoteTransportMatches(server.type, stored.transport),\n );\n};\n\nasync function fetchEncryptedStoredServer(\n server: MCPServerConfig,\n): Promise<StoredMcpServer \| undefined> {\n const response = await SettingsService.fetchSettingsFromApi(\"encrypted\");\n const mcpConfig = response.agent_settings?.mcp_config;\n if (!isRecord(mcpConfig)) {\n return undefined;\n }\n return findStoredServer(server, mcpConfig as StoredMcpConfig);\n}\n\n/*\n The MCP editor sees redacted settings (`*********`). When the user leaves\n a secret unchanged, replace that placeholder with the stored encrypted\n * env/header/OAuth state value so tests and saves round-trip the real\n * credential without exposing plaintext in the browser.\n */\nexport async function substituteRedactedMcpCredentials(\n server: MCPServerConfig,\n): Promise<MCPServerConfig> {\n const redactedStdioEnv =\n server.type === \"stdio\" && hasRedactedValue(server.env);\n const redactedRemoteAuth =\n (server.type === \"sse\" \|\| server.type === \"shttp\") &&\n hasRedactedMcpSecretLeaf(server.auth);\n\n if (!redactedStdioEnv && !redactedRemoteAuth) {\n return server;\n }\n\n try {\n const stored = await fetchEncryptedStoredServer(server);\n if (!stored) return server;\n\n if (redactedStdioEnv) {\n const storedEnv = stringRecord(stored.env) ?? {};\n const env = Object.fromEntries(\n Object.entries(server.env ?? {}).map(([key, value]) => [\n key,\n value === REDACTED_MCP_SECRET_VALUE &&\n typeof storedEnv[key] === \"string\"\n ? storedEnv[key]\n : value,\n ]),\n );\n return { ...server, env };\n }\n\n if (!redactedRemoteAuth) return server;\n if (isMcpAuthCredential(stored.auth)) {\n return { ...server, auth: stored.auth };\n }\n return server;\n } catch {\n return server;\n }\n}\n"],"mappings":";;;;AAkBA,IAAM,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,EAAM,EAEzD,KAAgB,MAAuD;AAC3E,KAAI,CAAC,EAAS,EAAM,CAAE;CACtB,IAAM,IAAU,OAAO,QAAQ,EAAM,CAAC,QACnC,MAAqC,OAAO,EAAM,MAAO,SAC3D;AACD,QAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,EAAQ,GAAG,KAAA;GAGtD,KAAoB,MACxB,CAAC,CAAC,KACF,OAAO,OAAO,EAAO,CAAC,MAAM,MAAU,MAAA,aAAoC,EAEtE,KACJ,GACA,MAEI,MAAS,QAAc,MAAc,QACrC,MAAS,UAET,MAAc,KAAA,KACd,MAAc,UACd,MAAc,WACd,MAAc,oBAGX,IAUH,KAAoB,MAA+C;AACvE,KAAI,CAAC,EAAI;CACT,IAAM,IAAQ,gBAAgB,KAAK,EAAG;AACtC,QAAO,IAAQ,OAAO,SAAS,EAAM,IAAI,GAAG,GAAG,KAAA;GAG3C,KACJ,GACA,MACgC;CAChC,IAAM,IAAQ,EAAiB,EAAG;AAC9B,WAAU,KAAA,EAId,QAHqB,OAAO,QAAQ,EAAc,CAAC,QAChD,GAAG,OAAY,CAAC,EAAO,IAEnB,CAAa,KAAS;GAGzB,KACJ,GACA,MAEI,EAAO,SAAS,UAMhB,EAAuB,EAAO,IAAI,EAAc,KAC/C,EAAO,OAAO,EAAc,EAAO,QAAQ,KAAA,KAI5C,EAAO,QAAQ,EAAc,EAAO,QAC/B,EAAc,EAAO,QAGvB,OAAO,OAAO,EAAc,CAAC,MACjC,MACC,EAAO,QAAQ,EAAO,OACtB,EAAuB,EAAO,MAAM,EAAO,UAAU,CACxD;AAGH,eAAe,EACb,GACsC;CAEtC,IAAM,KAAY,MADK,EAAgB,qBAAqB,YAAY,EAC7C,gBAAgB;AACtC,OAAS,EAAU,CAGxB,QAAO,EAAiB,GAAQ,EAA6B;;AAS/D,eAAsB,EACpB,GAC0B;CAC1B,IAAM,IACJ,EAAO,SAAS,WAAW,EAAiB,EAAO,IAAI,EACnD,KACH,EAAO,SAAS,SAAS,EAAO,SAAS,YAC1C,EAAyB,EAAO,KAAK;AAEvC,KAAI,CAAC,KAAoB,CAAC,EACxB,QAAO;AAGT,KAAI;EACF,IAAM,IAAS,MAAM,EAA2B,EAAO;AACvD,MAAI,CAAC,EAAQ,QAAO;AAEpB,MAAI,GAAkB;GACpB,IAAM,IAAY,EAAa,EAAO,IAAI,IAAI,EAAE,EAC1C,IAAM,OAAO,YACjB,OAAO,QAAQ,EAAO,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAK,OAAW,CACrD,GACA,MAAA,gBACA,OAAO,EAAU,MAAS,WACtB,EAAU,KACV,EACL,CAAC,CACH;AACD,UAAO;IAAE,GAAG;IAAQ;IAAK;;AAO3B,SAJK,KACD,EAAoB,EAAO,KAAK,GAC3B;GAAE,GAAG;GAAQ,MAAM,EAAO;GAAM,GAElC;SACD;AACN,SAAO"}

package/dist/api/mcp-service/mcp-service.api.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/mcp-client.cjs`),t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../../utils/mcp-credential-validation.cjs`),i=require(`./mcp-redacted-credentials.cjs`);function a(e){return e.type===`stdio`?{type:`stdio`,command:e.command,...e.args?.length&&{args:e.args},...e.env&&Object.keys(e.env).length>0&&{env:e.env}}:{type:e.type,url:e.url,...e.headers&&Object.keys(e.headers).length>0&&{headers:e.headers},...e.api_key?{api_key:e.api_key}:{}}}var o=class{static async testServer(o){if(t.getActiveBackend().backend.kind===`cloud`)return{ok:!0,tools:[]};let s=r.getCredentialValidationForServer(o),c=a(await i.substituteRedactedMcpCredentials(o)),{host:l,apiKey:u}=n.getAgentServerClientOptions(),d=new e.MCPClient({host:l,...u?{apiKey:u}:{}});try{let e={server:c,...o.name?{name:o.name}:{},...o.timeout?{timeout:o.timeout}:{},...s?{tool_call:s.toolCall}:{}},t=await d.testServer(e);if(t.ok&&s&&t.tool_result){let e=s.interpret(t.tool_result);if(e)return{ok:!1,error:e,error_kind:`credentials`}}return t}finally{d.close()}}};exports.default=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/mcp-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../../utils/mcp-credential-validation.cjs`),i=require(`./mcp-redacted-credentials.cjs`);var a=120;function o(e){return e.type===`stdio`?{transport:`stdio`,command:e.command,...e.args?.length&&{args:e.args},...e.env&&Object.keys(e.env).length>0&&{env:e.env}}:{transport:e.type===`sse`?`sse`:`http`,url:e.url,...e.headers&&Object.keys(e.headers).length>0&&{headers:e.headers},...e.auth?{auth:e.auth}:{}}}function s(e){return e.auth?.strategy===`oauth2`?a:e.timeout}async function c(e){let t=r.getCredentialValidationForServer(e),n=o(await i.substituteRedactedMcpCredentials(e)),a=s(e);return{server:n,...e.name?{name:e.name}:{},...a===void 0?{}:{timeout:a},...t?{tool_call:t.toolCall}:{}}}function l(){if(t.getActiveBackend().backend.kind===`local`){let{host:e,apiKey:t}=n.getAgentServerClientOptions();return{host:e,...t?{apiKey:t}:{}}}let e=t.getRegisteredBackends().find(e=>e.kind===`local`&&e.host);if(e)return{host:e.host.replace(/\/+$/,``),...e.apiKey?{apiKey:e.apiKey}:{}};throw Error(`OAuth authorization requires a reachable local backend.`)}function u(){let{host:t,apiKey:n}=l();return new e.MCPClient({host:t,...n?{apiKey:n}:{},timeout:a*1e3+5e3})}function d(e){return e.status===`succeeded`?{ok:!0,tools:e.tools??[],...e.tool_result!==void 0&&{tool_result:e.tool_result},...e.oauth_state!==void 0&&{oauth_state:e.oauth_state}}:{ok:!1,error:e.error||`OAuth authorization did not complete`,error_kind:e.error_kind||`unknown`}}var f=e=>new Promise(t=>{window.setTimeout(t,e)}),p=class i{static async testServer(i){if(t.getActiveBackend().backend.kind===`cloud`)return{ok:!0,tools:[]};let a=r.getCredentialValidationForServer(i),{host:o,apiKey:s}=n.getAgentServerClientOptions(),l=new e.MCPClient({host:o,...s?{apiKey:s}:{}});try{let e=await c(i),t=await l.testServer(e);if(t.ok&&a&&t.tool_result){let e=a.interpret(t.tool_result);if(e)return{ok:!1,error:e,error_kind:`credentials`}}return t}finally{l.close()}}static async startOAuth(e){let t=u();try{return await i.startOAuthWithClient(t,e)}finally{t.close()}}static async getOAuthStatus(e){let t=u();try{return await i.getOAuthStatusWithClient(t,e)}finally{t.close()}}static async submitOAuthCallback(e,t){let n=u();try{return await i.submitOAuthCallbackWithClient(n,e,t)}finally{n.close()}}static async authorizeOAuth(e){let t=window.open(`about:blank`,`_blank`),n=u();try{let r=await i.startOAuthWithClient(n,e);if(!r.ok||!r.job_id||!r.authorization_url)return t?.close(),{ok:!1,error:r.error||`Could not start OAuth authorization`,error_kind:r.error_kind||`unknown`};let o=await i.getOAuthStatusWithClient(n,r.job_id);for(let e=0;e<20;e+=1){if(o.status===`succeeded`||o.status===`failed`)return t?.close(),d(o);if(o.callback_ready)break;await f(250),o=await i.getOAuthStatusWithClient(n,r.job_id)}t&&(t.location.href=r.authorization_url);for(let e=0;e<a;e+=1)if(await f(1e3),o=await i.getOAuthStatusWithClient(n,r.job_id),o.status===`succeeded`||o.status===`failed`)return t?.close(),d(o);return{ok:!1,error:`OAuth authorization timed out`,error_kind:`timeout`}}finally{n.close()}}static async startOAuthWithClient(e,t){let n=await c(t);return e.startOAuth(n)}static async getOAuthStatusWithClient(e,t){return e.getOAuthStatus(t)}static async submitOAuthCallbackWithClient(e,t,n){return e.submitOAuthCallback(t,{callback_url:n})}};exports.default=p;
 //# sourceMappingURL=mcp-service.api.cjs.map

package/dist/api/mcp-service/mcp-service.api.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-service.api.cjs","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type {\n MCPServerSpec,\n MCPTestRequest,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport type {\n ExtendedMCPTestResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nfunction toMcpServerSpec(server: MCPServerConfig): MCPServerSpec {\n if (server.type === \"stdio\") {\n return {\n type: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n type: server.type,\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.api_key ? { api_key: server.api_key } : {}),\n } as MCPServerSpec;\n}\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const serverSpec = toMcpServerSpec(\n await substituteRedactedMcpCredentials(server),\n );\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n // `tool_call` / `tool_result` aren't in the published client types\n // yet; the client POSTs the request object and returns the response\n // body as-is, so the extra fields round-trip at runtime. Old agent\n // servers ignore `tool_call` and return no `tool_result`, in which\n // case the response passes through uninterpreted (legacy behavior).\n const request = {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(server.timeout ? { timeout: server.timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n };\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n if (result.ok && validation && result.tool_result) {\n const credentialError = validation.interpret(result.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return result;\n } finally {\n client.close();\n }\n }\n}\n\nexport default McpService;\n"],"mappings":"mVAcA,SAAS,EAAgB,EAAwC,CAU/D,OATI,EAAO,OAAS,QACX,CACL,KAAM,QACN,QAAS,EAAO,QAChB,GAAI,EAAO,MAAM,QAAU,CAAE,KAAM,EAAO,KAAM,CAChD,GAAI,EAAO,KACT,OAAO,KAAK,EAAO,IAAI,CAAC,OAAS,GAAK,CAAE,IAAK,EAAO,IAAK,CAC5D,CAEI,CACL,KAAM,EAAO,KACb,IAAK,EAAO,IACZ,GAAI,EAAO,SACT,OAAO,KAAK,EAAO,QAAQ,CAAC,OAAS,GAAK,CAAE,QAAS,EAAO,QAAS,CACvE,GAAI,EAAO,QAAU,CAAE,QAAS,EAAO,QAAS,CAAG,EAAE,CACtD,CAGH,IAAM,EAAN,KAAiB,CACf,aAAa,WACX,EACkC,CAWlC,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,MAAO,CAAE,GAAI,GAAM,MAAO,EAAE,CAAE,CAEhC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,EAAa,EACjB,MAAM,EAAA,iCAAiC,EAAO,CAC/C,CACK,CAAE,OAAM,UAAW,EAAA,6BAA6B,CAChD,EAAS,IAAI,EAAA,UAAU,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAAC,CACrE,GAAI,CAMF,IAAM,EAAU,CACd,OAAQ,EACR,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC5C,GAAI,EAAO,QAAU,CAAE,QAAS,EAAO,QAAS,CAAG,EAAE,CACrD,GAAI,EAAa,CAAE,UAAW,EAAW,SAAU,CAAG,EAAE,CACzD,CACK,EAAU,MAAM,EAAO,WAC3B,EACD,CACD,GAAI,EAAO,IAAM,GAAc,EAAO,YAAa,CACjD,IAAM,EAAkB,EAAW,UAAU,EAAO,YAAY,CAChE,GAAI,EACF,MAAO,CACL,GAAI,GACJ,MAAO,EACP,WAAY,cACb,CAGL,OAAO,SACC,CACR,EAAO,OAAO"}
1	+ {"version":3,"file":"mcp-service.api.cjs","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type { MCPTestRequest } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport {\n getActiveBackend,\n getRegisteredBackends,\n} from \"../backend-registry/active-store\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport type { MCPAuthCredential } from \"#/types/mcp-auth\";\nimport type {\n ExtendedMCPTestResponse,\n MCPOAuthStartResponse,\n MCPOAuthStatusResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nconst OAUTH_MCP_TEST_TIMEOUT_SECONDS = 120;\n\ntype MCPTestServer = {\n transport?: \"stdio\" \| \"http\" \| \"sse\";\n command?: string;\n args?: string[];\n env?: Record<string, string>;\n url?: string;\n headers?: Record<string, string>;\n auth?: MCPAuthCredential;\n};\n\ninterface ExtendedMCPTestRequest {\n server: MCPTestServer;\n name?: string;\n timeout?: number;\n tool_call?: {\n name: string;\n arguments: Record<string, unknown>;\n };\n}\n\nfunction toMcpServer(server: MCPServerConfig): MCPTestServer {\n if (server.type === \"stdio\") {\n return {\n transport: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n transport: server.type === \"sse\" ? \"sse\" : \"http\",\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.auth ? { auth: server.auth } : {}),\n };\n}\n\nfunction getMcpTestTimeout(server: MCPServerConfig): number \| undefined {\n if (server.auth?.strategy !== \"oauth2\") return server.timeout;\n return OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n}\n\nasync function buildMcpTestRequest(\n server: MCPServerConfig,\n): Promise<ExtendedMCPTestRequest> {\n const validation = getCredentialValidationForServer(server);\n const serverSpec = toMcpServer(\n await substituteRedactedMcpCredentials(server),\n );\n const timeout = getMcpTestTimeout(server);\n return {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(timeout !== undefined ? { timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n };\n}\n\nfunction getMcpProbeOptions(): { host: string; apiKey?: string } {\n const active = getActiveBackend().backend;\n if (active.kind === \"local\") {\n const { host, apiKey } = getAgentServerClientOptions();\n return { host, ...(apiKey ? { apiKey } : {}) };\n }\n\n const localBackend = getRegisteredBackends().find(\n (backend) => backend.kind === \"local\" && backend.host,\n );\n if (localBackend) {\n return {\n host: localBackend.host.replace(/\\/+$/, \"\"),\n ...(localBackend.apiKey ? { apiKey: localBackend.apiKey } : {}),\n };\n }\n throw new Error(\"OAuth authorization requires a reachable local backend.\");\n}\n\nfunction createMcpProbeClient(): MCPClient {\n const { host, apiKey } = getMcpProbeOptions();\n return new MCPClient({\n host,\n ...(apiKey ? { apiKey } : {}),\n timeout: OAUTH_MCP_TEST_TIMEOUT_SECONDS * 1000 + 5000,\n });\n}\n\nfunction oauthStatusToTestResponse(\n status: MCPOAuthStatusResponse,\n): ExtendedMCPTestResponse {\n if (status.status === \"succeeded\") {\n return {\n ok: true,\n tools: status.tools ?? [],\n ...(status.tool_result !== undefined && {\n tool_result: status.tool_result,\n }),\n ...(status.oauth_state !== undefined && {\n oauth_state: status.oauth_state,\n }),\n };\n }\n return {\n ok: false,\n error: status.error \|\| \"OAuth authorization did not complete\",\n error_kind: status.error_kind \|\| \"unknown\",\n };\n}\n\nconst sleep = (ms: number) =>\n new Promise<void>((resolve) => {\n window.setTimeout(resolve, ms);\n });\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n const request = await buildMcpTestRequest(server);\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n if (result.ok && validation && result.tool_result) {\n const credentialError = validation.interpret(result.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return result;\n } finally {\n client.close();\n }\n }\n\n static async startOAuth(\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.startOAuthWithClient(client, server);\n } finally {\n client.close();\n }\n }\n\n static async getOAuthStatus(jobId: string): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.getOAuthStatusWithClient(client, jobId);\n } finally {\n client.close();\n }\n }\n\n static async submitOAuthCallback(\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.submitOAuthCallbackWithClient(\n client,\n jobId,\n callbackUrl,\n );\n } finally {\n client.close();\n }\n }\n\n static async authorizeOAuth(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n const popup = window.open(\"about:blank\", \"_blank\");\n const client = createMcpProbeClient();\n try {\n const start = await McpService.startOAuthWithClient(client, server);\n if (!start.ok \|\| !start.job_id \|\| !start.authorization_url) {\n popup?.close();\n return {\n ok: false,\n error: start.error \|\| \"Could not start OAuth authorization\",\n error_kind: start.error_kind \|\| \"unknown\",\n };\n }\n\n let status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n for (let attempt = 0; attempt < 20; attempt += 1) {\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n if (status.callback_ready) break;\n await sleep(250);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n }\n\n if (popup) {\n popup.location.href = start.authorization_url;\n }\n\n for (\n let attempt = 0;\n attempt < OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n attempt += 1\n ) {\n await sleep(1000);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n }\n\n return {\n ok: false,\n error: \"OAuth authorization timed out\",\n error_kind: \"timeout\",\n };\n } finally {\n client.close();\n }\n }\n\n private static async startOAuthWithClient(\n client: MCPClient,\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const request = await buildMcpTestRequest(server);\n return client.startOAuth(request as MCPTestRequest);\n }\n\n private static async getOAuthStatusWithClient(\n client: MCPClient,\n jobId: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.getOAuthStatus(jobId);\n }\n\n private static async submitOAuthCallbackWithClient(\n client: MCPClient,\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.submitOAuthCallback(jobId, { callback_url: callbackUrl });\n }\n}\n\nexport default McpService;\n"],"mappings":"qaAiBA,IAAM,EAAiC,IAsBvC,SAAS,EAAY,EAAwC,CAU3D,OATI,EAAO,OAAS,QACX,CACL,UAAW,QACX,QAAS,EAAO,QAChB,GAAI,EAAO,MAAM,QAAU,CAAE,KAAM,EAAO,KAAM,CAChD,GAAI,EAAO,KACT,OAAO,KAAK,EAAO,IAAI,CAAC,OAAS,GAAK,CAAE,IAAK,EAAO,IAAK,CAC5D,CAEI,CACL,UAAW,EAAO,OAAS,MAAQ,MAAQ,OAC3C,IAAK,EAAO,IACZ,GAAI,EAAO,SACT,OAAO,KAAK,EAAO,QAAQ,CAAC,OAAS,GAAK,CAAE,QAAS,EAAO,QAAS,CACvE,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC7C,CAGH,SAAS,EAAkB,EAA6C,CAEtE,OADI,EAAO,MAAM,WAAa,SACvB,EADwC,EAAO,QAIxD,eAAe,EACb,EACiC,CACjC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,EAAa,EACjB,MAAM,EAAA,iCAAiC,EAAO,CAC/C,CACK,EAAU,EAAkB,EAAO,CACzC,MAAO,CACL,OAAQ,EACR,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC5C,GAAI,IAAY,IAAA,GAA0B,EAAE,CAAhB,CAAE,UAAS,CACvC,GAAI,EAAa,CAAE,UAAW,EAAW,SAAU,CAAG,EAAE,CACzD,CAGH,SAAS,GAAwD,CAE/D,GADe,EAAA,kBAAkB,CAAC,QACvB,OAAS,QAAS,CAC3B,GAAM,CAAE,OAAM,UAAW,EAAA,6BAA6B,CACtD,MAAO,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAGhD,IAAM,EAAe,EAAA,uBAAuB,CAAC,KAC1C,GAAY,EAAQ,OAAS,SAAW,EAAQ,KAClD,CACD,GAAI,EACF,MAAO,CACL,KAAM,EAAa,KAAK,QAAQ,OAAQ,GAAG,CAC3C,GAAI,EAAa,OAAS,CAAE,OAAQ,EAAa,OAAQ,CAAG,EAAE,CAC/D,CAEH,MAAU,MAAM,0DAA0D,CAG5E,SAAS,GAAkC,CACzC,GAAM,CAAE,OAAM,UAAW,GAAoB,CAC7C,OAAO,IAAI,EAAA,UAAU,CACnB,OACA,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAC5B,QAAS,EAAiC,IAAO,IAClD,CAAC,CAGJ,SAAS,EACP,EACyB,CAazB,OAZI,EAAO,SAAW,YACb,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,EAAE,CACzB,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACD,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACF,CAEI,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,uCACvB,WAAY,EAAO,YAAc,UAClC,CAGH,IAAM,EAAS,GACb,IAAI,QAAe,GAAY,CAC7B,OAAO,WAAW,EAAS,EAAG,EAC9B,CAEE,EAAN,MAAM,CAAW,CACf,aAAa,WACX,EACkC,CAWlC,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,MAAO,CAAE,GAAI,GAAM,MAAO,EAAE,CAAE,CAEhC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,CAAE,OAAM,UAAW,EAAA,6BAA6B,CAChD,EAAS,IAAI,EAAA,UAAU,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAAC,CACrE,GAAI,CACF,IAAM,EAAU,MAAM,EAAoB,EAAO,CAC3C,EAAU,MAAM,EAAO,WAC3B,EACD,CACD,GAAI,EAAO,IAAM,GAAc,EAAO,YAAa,CACjD,IAAM,EAAkB,EAAW,UAAU,EAAO,YAAY,CAChE,GAAI,EACF,MAAO,CACL,GAAI,GACJ,MAAO,EACP,WAAY,cACb,CAGL,OAAO,SACC,CACR,EAAO,OAAO,EAIlB,aAAa,WACX,EACgC,CAChC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,qBAAqB,EAAQ,EAAO,QACpD,CACR,EAAO,OAAO,EAIlB,aAAa,eAAe,EAAgD,CAC1E,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,yBAAyB,EAAQ,EAAM,QACvD,CACR,EAAO,OAAO,EAIlB,aAAa,oBACX,EACA,EACiC,CACjC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,8BACtB,EACA,EACA,EACD,QACO,CACR,EAAO,OAAO,EAIlB,aAAa,eACX,EACkC,CAClC,IAAM,EAAQ,OAAO,KAAK,cAAe,SAAS,CAC5C,EAAS,GAAsB,CACrC,GAAI,CACF,IAAM,EAAQ,MAAM,EAAW,qBAAqB,EAAQ,EAAO,CACnE,GAAI,CAAC,EAAM,IAAM,CAAC,EAAM,QAAU,CAAC,EAAM,kBAEvC,OADA,GAAO,OAAO,CACP,CACL,GAAI,GACJ,MAAO,EAAM,OAAS,sCACtB,WAAY,EAAM,YAAc,UACjC,CAGH,IAAI,EAAS,MAAM,EAAW,yBAC5B,EACA,EAAM,OACP,CACD,IAAK,IAAI,EAAU,EAAG,EAAU,GAAI,GAAW,EAAG,CAChD,GAAI,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAA0B,EAAO,CAE1C,GAAI,EAAO,eAAgB,MAC3B,MAAM,EAAM,IAAI,CAChB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CAGC,IACF,EAAM,SAAS,KAAO,EAAM,mBAG9B,IACE,IAAI,EAAU,EACd,EAAU,EACV,GAAW,EAOX,GALA,MAAM,EAAM,IAAK,CACjB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CACG,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAA0B,EAAO,CAI5C,MAAO,CACL,GAAI,GACJ,MAAO,gCACP,WAAY,UACb,QACO,CACR,EAAO,OAAO,EAIlB,aAAqB,qBACnB,EACA,EACgC,CAChC,IAAM,EAAU,MAAM,EAAoB,EAAO,CACjD,OAAO,EAAO,WAAW,EAA0B,CAGrD,aAAqB,yBACnB,EACA,EACiC,CACjC,OAAO,EAAO,eAAe,EAAM,CAGrC,aAAqB,8BACnB,EACA,EACA,EACiC,CACjC,OAAO,EAAO,oBAAoB,EAAO,CAAE,aAAc,EAAa,CAAC"}

package/dist/api/mcp-service/mcp-service.api.d.ts CHANGED Viewed

@@ -1,5 +1,12 @@
-import type { ExtendedMCPTestResponse, MCPServerConfig } from "#/types/mcp-server";
+import type { ExtendedMCPTestResponse, MCPOAuthStartResponse, MCPOAuthStatusResponse, MCPServerConfig } from "#/types/mcp-server";
 declare class McpService {
     static testServer(server: MCPServerConfig): Promise<ExtendedMCPTestResponse>;
+    static startOAuth(server: MCPServerConfig): Promise<MCPOAuthStartResponse>;
+    static getOAuthStatus(jobId: string): Promise<MCPOAuthStatusResponse>;
+    static submitOAuthCallback(jobId: string, callbackUrl: string): Promise<MCPOAuthStatusResponse>;
+    static authorizeOAuth(server: MCPServerConfig): Promise<ExtendedMCPTestResponse>;
+    private static startOAuthWithClient;
+    private static getOAuthStatusWithClient;
+    private static submitOAuthCallbackWithClient;
 }
 export default McpService;

package/dist/api/mcp-service/mcp-service.api.js CHANGED Viewed

@@ -1,41 +1,87 @@
 import { MCPClient as e } from "../../node_modules/@openhands/typescript-client/dist/client/mcp-client.js";
-import { getActiveBackend as t } from "../backend-registry/active-store.js";
-import { getAgentServerClientOptions as n } from "../agent-server-client-options.js";
-import { getCredentialValidationForServer as r } from "../../utils/mcp-credential-validation.js";
-import { substituteRedactedMcpCredentials as i } from "./mcp-redacted-credentials.js";
+import "../../node_modules/@openhands/typescript-client/dist/clients.js";
+import { getActiveBackend as t, getRegisteredBackends as n } from "../backend-registry/active-store.js";
+import { getAgentServerClientOptions as r } from "../agent-server-client-options.js";
+import { getCredentialValidationForServer as i } from "../../utils/mcp-credential-validation.js";
+import { substituteRedactedMcpCredentials as a } from "./mcp-redacted-credentials.js";
 //#region src/api/mcp-service/mcp-service.api.ts
-function a(e) {
+var o = 120;
+function s(e) {
 	return e.type === "stdio" ? {
-		type: "stdio",
+		transport: "stdio",
 		command: e.command,
 		...e.args?.length && { args: e.args },
 		...e.env && Object.keys(e.env).length > 0 && { env: e.env }
 	} : {
-		type: e.type,
+		transport: e.type === "sse" ? "sse" : "http",
 		url: e.url,
 		...e.headers && Object.keys(e.headers).length > 0 && { headers: e.headers },
-		...e.api_key ? { api_key: e.api_key } : {}
+		...e.auth ? { auth: e.auth } : {}
 	};
 }
-var o = class {
-	static async testServer(o) {
+function c(e) {
+	return e.auth?.strategy === "oauth2" ? o : e.timeout;
+}
+async function l(e) {
+	let t = i(e), n = s(await a(e)), r = c(e);
+	return {
+		server: n,
+		...e.name ? { name: e.name } : {},
+		...r === void 0 ? {} : { timeout: r },
+		...t ? { tool_call: t.toolCall } : {}
+	};
+}
+function u() {
+	if (t().backend.kind === "local") {
+		let { host: e, apiKey: t } = r();
+		return {
+			host: e,
+			...t ? { apiKey: t } : {}
+		};
+	}
+	let e = n().find((e) => e.kind === "local" && e.host);
+	if (e) return {
+		host: e.host.replace(/\/+$/, ""),
+		...e.apiKey ? { apiKey: e.apiKey } : {}
+	};
+	throw Error("OAuth authorization requires a reachable local backend.");
+}
+function d() {
+	let { host: t, apiKey: n } = u();
+	return new e({
+		host: t,
+		...n ? { apiKey: n } : {},
+		timeout: o * 1e3 + 5e3
+	});
+}
+function f(e) {
+	return e.status === "succeeded" ? {
+		ok: !0,
+		tools: e.tools ?? [],
+		...e.tool_result !== void 0 && { tool_result: e.tool_result },
+		...e.oauth_state !== void 0 && { oauth_state: e.oauth_state }
+	} : {
+		ok: !1,
+		error: e.error || "OAuth authorization did not complete",
+		error_kind: e.error_kind || "unknown"
+	};
+}
+var p = (e) => new Promise((t) => {
+	window.setTimeout(t, e);
+}), m = class n {
+	static async testServer(n) {
 		if (t().backend.kind === "cloud") return {
 			ok: !0,
 			tools: []
 		};
-		let s = r(o), c = a(await i(o)), { host: l, apiKey: u } = n(), d = new e({
-			host: l,
-			...u ? { apiKey: u } : {}
+		let a = i(n), { host: o, apiKey: s } = r(), c = new e({
+			host: o,
+			...s ? { apiKey: s } : {}
 		});
 		try {
-			let e = {
-				server: c,
-				...o.name ? { name: o.name } : {},
-				...o.timeout ? { timeout: o.timeout } : {},
-				...s ? { tool_call: s.toolCall } : {}
-			}, t = await d.testServer(e);
-			if (t.ok && s && t.tool_result) {
-				let e = s.interpret(t.tool_result);
+			let e = await l(n), t = await c.testServer(e);
+			if (t.ok && a && t.tool_result) {
+				let e = a.interpret(t.tool_result);
 				if (e) return {
 					ok: !1,
 					error: e,
@@ -44,11 +90,71 @@ var o = class {
 			}
 			return t;
 		} finally {
-			d.close();
+			c.close();
+		}
+	}
+	static async startOAuth(e) {
+		let t = d();
+		try {
+			return await n.startOAuthWithClient(t, e);
+		} finally {
+			t.close();
 		}
 	}
+	static async getOAuthStatus(e) {
+		let t = d();
+		try {
+			return await n.getOAuthStatusWithClient(t, e);
+		} finally {
+			t.close();
+		}
+	}
+	static async submitOAuthCallback(e, t) {
+		let r = d();
+		try {
+			return await n.submitOAuthCallbackWithClient(r, e, t);
+		} finally {
+			r.close();
+		}
+	}
+	static async authorizeOAuth(e) {
+		let t = window.open("about:blank", "_blank"), r = d();
+		try {
+			let i = await n.startOAuthWithClient(r, e);
+			if (!i.ok || !i.job_id || !i.authorization_url) return t?.close(), {
+				ok: !1,
+				error: i.error || "Could not start OAuth authorization",
+				error_kind: i.error_kind || "unknown"
+			};
+			let a = await n.getOAuthStatusWithClient(r, i.job_id);
+			for (let e = 0; e < 20; e += 1) {
+				if (a.status === "succeeded" || a.status === "failed") return t?.close(), f(a);
+				if (a.callback_ready) break;
+				await p(250), a = await n.getOAuthStatusWithClient(r, i.job_id);
+			}
+			t && (t.location.href = i.authorization_url);
+			for (let e = 0; e < o; e += 1) if (await p(1e3), a = await n.getOAuthStatusWithClient(r, i.job_id), a.status === "succeeded" || a.status === "failed") return t?.close(), f(a);
+			return {
+				ok: !1,
+				error: "OAuth authorization timed out",
+				error_kind: "timeout"
+			};
+		} finally {
+			r.close();
+		}
+	}
+	static async startOAuthWithClient(e, t) {
+		let n = await l(t);
+		return e.startOAuth(n);
+	}
+	static async getOAuthStatusWithClient(e, t) {
+		return e.getOAuthStatus(t);
+	}
+	static async submitOAuthCallbackWithClient(e, t, n) {
+		return e.submitOAuthCallback(t, { callback_url: n });
+	}
 };
 //#endregion
-export { o as default };
+export { m as default };
 //# sourceMappingURL=mcp-service.api.js.map

package/dist/api/mcp-service/mcp-service.api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-service.api.js","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type {\n MCPServerSpec,\n MCPTestRequest,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport type {\n ExtendedMCPTestResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nfunction toMcpServerSpec(server: MCPServerConfig): MCPServerSpec {\n if (server.type === \"stdio\") {\n return {\n type: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n type: server.type,\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.api_key ? { api_key: server.api_key } : {}),\n } as MCPServerSpec;\n}\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const serverSpec = toMcpServerSpec(\n await substituteRedactedMcpCredentials(server),\n );\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n // `tool_call` / `tool_result` aren't in the published client types\n // yet; the client POSTs the request object and returns the response\n // body as-is, so the extra fields round-trip at runtime. Old agent\n // servers ignore `tool_call` and return no `tool_result`, in which\n // case the response passes through uninterpreted (legacy behavior).\n const request = {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(server.timeout ? { timeout: server.timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n };\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n if (result.ok && validation && result.tool_result) {\n const credentialError = validation.interpret(result.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return result;\n } finally {\n client.close();\n }\n }\n}\n\nexport default McpService;\n"],"mappings":";;;;;;AAcA,SAAS,EAAgB,GAAwC;AAU/D,QATI,EAAO,SAAS,UACX;EACL,MAAM;EACN,SAAS,EAAO;EAChB,GAAI,EAAO,MAAM,UAAU,EAAE,MAAM,EAAO,MAAM;EAChD,GAAI,EAAO,OACT,OAAO,KAAK,EAAO,IAAI,CAAC,SAAS,KAAK,EAAE,KAAK,EAAO,KAAK;EAC5D,GAEI;EACL,MAAM,EAAO;EACb,KAAK,EAAO;EACZ,GAAI,EAAO,WACT,OAAO,KAAK,EAAO,QAAQ,CAAC,SAAS,KAAK,EAAE,SAAS,EAAO,SAAS;EACvE,GAAI,EAAO,UAAU,EAAE,SAAS,EAAO,SAAS,GAAG,EAAE;EACtD;;AAGH,IAAM,IAAN,MAAiB;CACf,aAAa,WACX,GACkC;AAWlC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,QAAO;GAAE,IAAI;GAAM,OAAO,EAAE;GAAE;EAEhC,IAAM,IAAa,EAAiC,EAAO,EACrD,IAAa,EACjB,MAAM,EAAiC,EAAO,CAC/C,EACK,EAAE,SAAM,cAAW,GAA6B,EAChD,IAAS,IAAI,EAAU;GAAE;GAAM,GAAI,IAAS,EAAE,WAAQ,GAAG,EAAE;GAAG,CAAC;AACrE,MAAI;GAMF,IAAM,IAAU;IACd,QAAQ;IACR,GAAI,EAAO,OAAO,EAAE,MAAM,EAAO,MAAM,GAAG,EAAE;IAC5C,GAAI,EAAO,UAAU,EAAE,SAAS,EAAO,SAAS,GAAG,EAAE;IACrD,GAAI,IAAa,EAAE,WAAW,EAAW,UAAU,GAAG,EAAE;IACzD,EACK,IAAU,MAAM,EAAO,WAC3B,EACD;AACD,OAAI,EAAO,MAAM,KAAc,EAAO,aAAa;IACjD,IAAM,IAAkB,EAAW,UAAU,EAAO,YAAY;AAChE,QAAI,EACF,QAAO;KACL,IAAI;KACJ,OAAO;KACP,YAAY;KACb;;AAGL,UAAO;YACC;AACR,KAAO,OAAO"}
1	+ {"version":3,"file":"mcp-service.api.js","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type { MCPTestRequest } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport {\n getActiveBackend,\n getRegisteredBackends,\n} from \"../backend-registry/active-store\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport type { MCPAuthCredential } from \"#/types/mcp-auth\";\nimport type {\n ExtendedMCPTestResponse,\n MCPOAuthStartResponse,\n MCPOAuthStatusResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nconst OAUTH_MCP_TEST_TIMEOUT_SECONDS = 120;\n\ntype MCPTestServer = {\n transport?: \"stdio\" \| \"http\" \| \"sse\";\n command?: string;\n args?: string[];\n env?: Record<string, string>;\n url?: string;\n headers?: Record<string, string>;\n auth?: MCPAuthCredential;\n};\n\ninterface ExtendedMCPTestRequest {\n server: MCPTestServer;\n name?: string;\n timeout?: number;\n tool_call?: {\n name: string;\n arguments: Record<string, unknown>;\n };\n}\n\nfunction toMcpServer(server: MCPServerConfig): MCPTestServer {\n if (server.type === \"stdio\") {\n return {\n transport: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n transport: server.type === \"sse\" ? \"sse\" : \"http\",\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.auth ? { auth: server.auth } : {}),\n };\n}\n\nfunction getMcpTestTimeout(server: MCPServerConfig): number \| undefined {\n if (server.auth?.strategy !== \"oauth2\") return server.timeout;\n return OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n}\n\nasync function buildMcpTestRequest(\n server: MCPServerConfig,\n): Promise<ExtendedMCPTestRequest> {\n const validation = getCredentialValidationForServer(server);\n const serverSpec = toMcpServer(\n await substituteRedactedMcpCredentials(server),\n );\n const timeout = getMcpTestTimeout(server);\n return {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(timeout !== undefined ? { timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n };\n}\n\nfunction getMcpProbeOptions(): { host: string; apiKey?: string } {\n const active = getActiveBackend().backend;\n if (active.kind === \"local\") {\n const { host, apiKey } = getAgentServerClientOptions();\n return { host, ...(apiKey ? { apiKey } : {}) };\n }\n\n const localBackend = getRegisteredBackends().find(\n (backend) => backend.kind === \"local\" && backend.host,\n );\n if (localBackend) {\n return {\n host: localBackend.host.replace(/\\/+$/, \"\"),\n ...(localBackend.apiKey ? { apiKey: localBackend.apiKey } : {}),\n };\n }\n throw new Error(\"OAuth authorization requires a reachable local backend.\");\n}\n\nfunction createMcpProbeClient(): MCPClient {\n const { host, apiKey } = getMcpProbeOptions();\n return new MCPClient({\n host,\n ...(apiKey ? { apiKey } : {}),\n timeout: OAUTH_MCP_TEST_TIMEOUT_SECONDS * 1000 + 5000,\n });\n}\n\nfunction oauthStatusToTestResponse(\n status: MCPOAuthStatusResponse,\n): ExtendedMCPTestResponse {\n if (status.status === \"succeeded\") {\n return {\n ok: true,\n tools: status.tools ?? [],\n ...(status.tool_result !== undefined && {\n tool_result: status.tool_result,\n }),\n ...(status.oauth_state !== undefined && {\n oauth_state: status.oauth_state,\n }),\n };\n }\n return {\n ok: false,\n error: status.error \|\| \"OAuth authorization did not complete\",\n error_kind: status.error_kind \|\| \"unknown\",\n };\n}\n\nconst sleep = (ms: number) =>\n new Promise<void>((resolve) => {\n window.setTimeout(resolve, ms);\n });\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n const request = await buildMcpTestRequest(server);\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n if (result.ok && validation && result.tool_result) {\n const credentialError = validation.interpret(result.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return result;\n } finally {\n client.close();\n }\n }\n\n static async startOAuth(\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.startOAuthWithClient(client, server);\n } finally {\n client.close();\n }\n }\n\n static async getOAuthStatus(jobId: string): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.getOAuthStatusWithClient(client, jobId);\n } finally {\n client.close();\n }\n }\n\n static async submitOAuthCallback(\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.submitOAuthCallbackWithClient(\n client,\n jobId,\n callbackUrl,\n );\n } finally {\n client.close();\n }\n }\n\n static async authorizeOAuth(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n const popup = window.open(\"about:blank\", \"_blank\");\n const client = createMcpProbeClient();\n try {\n const start = await McpService.startOAuthWithClient(client, server);\n if (!start.ok \|\| !start.job_id \|\| !start.authorization_url) {\n popup?.close();\n return {\n ok: false,\n error: start.error \|\| \"Could not start OAuth authorization\",\n error_kind: start.error_kind \|\| \"unknown\",\n };\n }\n\n let status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n for (let attempt = 0; attempt < 20; attempt += 1) {\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n if (status.callback_ready) break;\n await sleep(250);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n }\n\n if (popup) {\n popup.location.href = start.authorization_url;\n }\n\n for (\n let attempt = 0;\n attempt < OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n attempt += 1\n ) {\n await sleep(1000);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n }\n\n return {\n ok: false,\n error: \"OAuth authorization timed out\",\n error_kind: \"timeout\",\n };\n } finally {\n client.close();\n }\n }\n\n private static async startOAuthWithClient(\n client: MCPClient,\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const request = await buildMcpTestRequest(server);\n return client.startOAuth(request as MCPTestRequest);\n }\n\n private static async getOAuthStatusWithClient(\n client: MCPClient,\n jobId: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.getOAuthStatus(jobId);\n }\n\n private static async submitOAuthCallbackWithClient(\n client: MCPClient,\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.submitOAuthCallback(jobId, { callback_url: callbackUrl });\n }\n}\n\nexport default McpService;\n"],"mappings":";;;;;;;AAiBA,IAAM,IAAiC;AAsBvC,SAAS,EAAY,GAAwC;AAU3D,QATI,EAAO,SAAS,UACX;EACL,WAAW;EACX,SAAS,EAAO;EAChB,GAAI,EAAO,MAAM,UAAU,EAAE,MAAM,EAAO,MAAM;EAChD,GAAI,EAAO,OACT,OAAO,KAAK,EAAO,IAAI,CAAC,SAAS,KAAK,EAAE,KAAK,EAAO,KAAK;EAC5D,GAEI;EACL,WAAW,EAAO,SAAS,QAAQ,QAAQ;EAC3C,KAAK,EAAO;EACZ,GAAI,EAAO,WACT,OAAO,KAAK,EAAO,QAAQ,CAAC,SAAS,KAAK,EAAE,SAAS,EAAO,SAAS;EACvE,GAAI,EAAO,OAAO,EAAE,MAAM,EAAO,MAAM,GAAG,EAAE;EAC7C;;AAGH,SAAS,EAAkB,GAA6C;AAEtE,QADI,EAAO,MAAM,aAAa,WACvB,IADwC,EAAO;;AAIxD,eAAe,EACb,GACiC;CACjC,IAAM,IAAa,EAAiC,EAAO,EACrD,IAAa,EACjB,MAAM,EAAiC,EAAO,CAC/C,EACK,IAAU,EAAkB,EAAO;AACzC,QAAO;EACL,QAAQ;EACR,GAAI,EAAO,OAAO,EAAE,MAAM,EAAO,MAAM,GAAG,EAAE;EAC5C,GAAI,MAAY,KAAA,IAA0B,EAAE,GAAhB,EAAE,YAAS;EACvC,GAAI,IAAa,EAAE,WAAW,EAAW,UAAU,GAAG,EAAE;EACzD;;AAGH,SAAS,IAAwD;AAE/D,KADe,GAAkB,CAAC,QACvB,SAAS,SAAS;EAC3B,IAAM,EAAE,SAAM,cAAW,GAA6B;AACtD,SAAO;GAAE;GAAM,GAAI,IAAS,EAAE,WAAQ,GAAG,EAAE;GAAG;;CAGhD,IAAM,IAAe,GAAuB,CAAC,MAC1C,MAAY,EAAQ,SAAS,WAAW,EAAQ,KAClD;AACD,KAAI,EACF,QAAO;EACL,MAAM,EAAa,KAAK,QAAQ,QAAQ,GAAG;EAC3C,GAAI,EAAa,SAAS,EAAE,QAAQ,EAAa,QAAQ,GAAG,EAAE;EAC/D;AAEH,OAAU,MAAM,0DAA0D;;AAG5E,SAAS,IAAkC;CACzC,IAAM,EAAE,SAAM,cAAW,GAAoB;AAC7C,QAAO,IAAI,EAAU;EACnB;EACA,GAAI,IAAS,EAAE,WAAQ,GAAG,EAAE;EAC5B,SAAS,IAAiC,MAAO;EAClD,CAAC;;AAGJ,SAAS,EACP,GACyB;AAazB,QAZI,EAAO,WAAW,cACb;EACL,IAAI;EACJ,OAAO,EAAO,SAAS,EAAE;EACzB,GAAI,EAAO,gBAAgB,KAAA,KAAa,EACtC,aAAa,EAAO,aACrB;EACD,GAAI,EAAO,gBAAgB,KAAA,KAAa,EACtC,aAAa,EAAO,aACrB;EACF,GAEI;EACL,IAAI;EACJ,OAAO,EAAO,SAAS;EACvB,YAAY,EAAO,cAAc;EAClC;;AAGH,IAAM,KAAS,MACb,IAAI,SAAe,MAAY;AAC7B,QAAO,WAAW,GAAS,EAAG;EAC9B,EAEE,IAAN,MAAM,EAAW;CACf,aAAa,WACX,GACkC;AAWlC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,QAAO;GAAE,IAAI;GAAM,OAAO,EAAE;GAAE;EAEhC,IAAM,IAAa,EAAiC,EAAO,EACrD,EAAE,SAAM,cAAW,GAA6B,EAChD,IAAS,IAAI,EAAU;GAAE;GAAM,GAAI,IAAS,EAAE,WAAQ,GAAG,EAAE;GAAG,CAAC;AACrE,MAAI;GACF,IAAM,IAAU,MAAM,EAAoB,EAAO,EAC3C,IAAU,MAAM,EAAO,WAC3B,EACD;AACD,OAAI,EAAO,MAAM,KAAc,EAAO,aAAa;IACjD,IAAM,IAAkB,EAAW,UAAU,EAAO,YAAY;AAChE,QAAI,EACF,QAAO;KACL,IAAI;KACJ,OAAO;KACP,YAAY;KACb;;AAGL,UAAO;YACC;AACR,KAAO,OAAO;;;CAIlB,aAAa,WACX,GACgC;EAChC,IAAM,IAAS,GAAsB;AACrC,MAAI;AACF,UAAO,MAAM,EAAW,qBAAqB,GAAQ,EAAO;YACpD;AACR,KAAO,OAAO;;;CAIlB,aAAa,eAAe,GAAgD;EAC1E,IAAM,IAAS,GAAsB;AACrC,MAAI;AACF,UAAO,MAAM,EAAW,yBAAyB,GAAQ,EAAM;YACvD;AACR,KAAO,OAAO;;;CAIlB,aAAa,oBACX,GACA,GACiC;EACjC,IAAM,IAAS,GAAsB;AACrC,MAAI;AACF,UAAO,MAAM,EAAW,8BACtB,GACA,GACA,EACD;YACO;AACR,KAAO,OAAO;;;CAIlB,aAAa,eACX,GACkC;EAClC,IAAM,IAAQ,OAAO,KAAK,eAAe,SAAS,EAC5C,IAAS,GAAsB;AACrC,MAAI;GACF,IAAM,IAAQ,MAAM,EAAW,qBAAqB,GAAQ,EAAO;AACnE,OAAI,CAAC,EAAM,MAAM,CAAC,EAAM,UAAU,CAAC,EAAM,kBAEvC,QADA,GAAO,OAAO,EACP;IACL,IAAI;IACJ,OAAO,EAAM,SAAS;IACtB,YAAY,EAAM,cAAc;IACjC;GAGH,IAAI,IAAS,MAAM,EAAW,yBAC5B,GACA,EAAM,OACP;AACD,QAAK,IAAI,IAAU,GAAG,IAAU,IAAI,KAAW,GAAG;AAChD,QAAI,EAAO,WAAW,eAAe,EAAO,WAAW,SAErD,QADA,GAAO,OAAO,EACP,EAA0B,EAAO;AAE1C,QAAI,EAAO,eAAgB;AAE3B,IADA,MAAM,EAAM,IAAI,EAChB,IAAS,MAAM,EAAW,yBACxB,GACA,EAAM,OACP;;AAGH,GAAI,MACF,EAAM,SAAS,OAAO,EAAM;AAG9B,QACE,IAAI,IAAU,GACd,IAAU,GACV,KAAW,EAOX,KALA,MAAM,EAAM,IAAK,EACjB,IAAS,MAAM,EAAW,yBACxB,GACA,EAAM,OACP,EACG,EAAO,WAAW,eAAe,EAAO,WAAW,SAErD,QADA,GAAO,OAAO,EACP,EAA0B,EAAO;AAI5C,UAAO;IACL,IAAI;IACJ,OAAO;IACP,YAAY;IACb;YACO;AACR,KAAO,OAAO;;;CAIlB,aAAqB,qBACnB,GACA,GACgC;EAChC,IAAM,IAAU,MAAM,EAAoB,EAAO;AACjD,SAAO,EAAO,WAAW,EAA0B;;CAGrD,aAAqB,yBACnB,GACA,GACiC;AACjC,SAAO,EAAO,eAAe,EAAM;;CAGrC,aAAqB,8BACnB,GACA,GACA,GACiC;AACjC,SAAO,EAAO,oBAAoB,GAAO,EAAE,cAAc,GAAa,CAAC"}

package/dist/api/option-service/option-service.api.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/llm-client.cjs`),t=require(`../agent-server-client-options.cjs`),n=require(`../agent-server-compatibility.cjs`);var r=class{static async getModels(){let n=new e.LLMMetadataClient(t.getAgentServerClientOptions()),[r,i,a]=await Promise.all([n.getModels(),n.getVerifiedModels(),n.getProviders()]),o=Object.keys(i??{}).sort(),s=o.flatMap(e=>i[e]??[]);return{models:r??[],verified_models:s,verified_providers:a?.filter(e=>o.includes(e))??o,default_model:s[0]??r?.[0]??``}}static async getConfig(){return await n.loadAgentServerInfo(),{posthog_client_key:null,feature_flags:{hide_llm_settings:!1,hide_users_page:!0},providers_configured:[],maintenance_start_time:null,recaptcha_site_key:null,faulty_models:[],error_message:null,updated_at:new Date().toISOString()}}};exports.default=r;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/llm-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../agent-server-client-options.cjs`),n=require(`../agent-server-compatibility.cjs`);var r=class{static async getModels(){let n=new e.LLMMetadataClient(t.getAgentServerClientOptions()),[r,i,a]=await Promise.all([n.getModels(),n.getVerifiedModels(),n.getProviders()]),o=Object.keys(i??{}).sort(),s=o.flatMap(e=>i[e]??[]);return{models:r??[],verified_models:s,verified_providers:a?.filter(e=>o.includes(e))??o,default_model:s[0]??r?.[0]??``}}static async getConfig(){return await n.loadAgentServerInfo(),{posthog_client_key:null,feature_flags:{hide_llm_settings:!1,hide_users_page:!0},providers_configured:[],maintenance_start_time:null,recaptcha_site_key:null,faulty_models:[],error_message:null,updated_at:new Date().toISOString()}}};exports.default=r;
 //# sourceMappingURL=option-service.api.cjs.map

package/dist/api/option-service/option-service.api.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"option-service.api.cjs","names":[],"sources":["../../../src/api/option-service/option-service.api.ts"],"sourcesContent":["import { LLMMetadataClient } from \"@openhands/typescript-client/clients\";\nimport { loadAgentServerInfo } from \"../agent-server-compatibility\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { ModelsResponse, WebClientConfig } from \"./option.types\";\n\nclass OptionService {\n static async getModels(): Promise<ModelsResponse> {\n const llmClient = new LLMMetadataClient(getAgentServerClientOptions());\n const [models, verifiedByProvider, providers] = await Promise.all([\n llmClient.getModels(),\n llmClient.getVerifiedModels(),\n llmClient.getProviders(),\n ]);\n\n const verifiedProviders = Object.keys(verifiedByProvider ?? {}).sort();\n const verifiedModels = verifiedProviders.flatMap(\n (provider) => verifiedByProvider[provider] ?? [],\n );\n\n return {\n models: models ?? [],\n verified_models: verifiedModels,\n verified_providers:\n providers?.filter((provider) => verifiedProviders.includes(provider)) ??\n verifiedProviders,\n default_model: verifiedModels[0] ?? models?.[0] ?? \"\",\n };\n }\n\n static async getConfig(): Promise<WebClientConfig> {\n await loadAgentServerInfo();\n\n return {\n posthog_client_key:\n (import.meta.env.VITE_POSTHOG_CLIENT_KEY as string \| undefined) ?? null,\n feature_flags: {\n hide_llm_settings: false,\n hide_users_page: true,\n },\n providers_configured: [],\n maintenance_start_time: null,\n recaptcha_site_key: null,\n faulty_models: [],\n error_message: null,\n updated_at: new Date().toISOString(),\n };\n }\n}\n\nexport default OptionService;\n"],"mappings":"~~6OAKA~~,IAAM,EAAN,KAAoB,CAClB,aAAa,WAAqC,CAChD,IAAM,EAAY,IAAI,EAAA,kBAAkB,EAAA,6BAA6B,CAAC,CAChE,CAAC,EAAQ,EAAoB,GAAa,MAAM,QAAQ,IAAI,CAChE,EAAU,WAAW,CACrB,EAAU,mBAAmB,CAC7B,EAAU,cAAc,CACzB,CAAC,CAEI,EAAoB,OAAO,KAAK,GAAsB,EAAE,CAAC,CAAC,MAAM,CAChE,EAAiB,EAAkB,QACtC,GAAa,EAAmB,IAAa,EAAE,CACjD,CAED,MAAO,CACL,OAAQ,GAAU,EAAE,CACpB,gBAAiB,EACjB,mBACE,GAAW,OAAQ,GAAa,EAAkB,SAAS,EAAS,CAAC,EACrE,EACF,cAAe,EAAe,IAAM,IAAS,IAAM,GACpD,CAGH,aAAa,WAAsC,CAGjD,OAFA,MAAM,EAAA,qBAAqB,CAEpB,CACL,mBACqE,KACrE,cAAe,CACb,kBAAmB,GACnB,gBAAiB,GAClB,CACD,qBAAsB,EAAE,CACxB,uBAAwB,KACxB,mBAAoB,KACpB,cAAe,EAAE,CACjB,cAAe,KACf,WAAY,IAAI,MAAM,CAAC,aAAa,CACrC"}
1	+ {"version":3,"file":"option-service.api.cjs","names":[],"sources":["../../../src/api/option-service/option-service.api.ts"],"sourcesContent":["import { LLMMetadataClient } from \"@openhands/typescript-client/clients\";\nimport { loadAgentServerInfo } from \"../agent-server-compatibility\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { ModelsResponse, WebClientConfig } from \"./option.types\";\n\nclass OptionService {\n static async getModels(): Promise<ModelsResponse> {\n const llmClient = new LLMMetadataClient(getAgentServerClientOptions());\n const [models, verifiedByProvider, providers] = await Promise.all([\n llmClient.getModels(),\n llmClient.getVerifiedModels(),\n llmClient.getProviders(),\n ]);\n\n const verifiedProviders = Object.keys(verifiedByProvider ?? {}).sort();\n const verifiedModels = verifiedProviders.flatMap(\n (provider) => verifiedByProvider[provider] ?? [],\n );\n\n return {\n models: models ?? [],\n verified_models: verifiedModels,\n verified_providers:\n providers?.filter((provider) => verifiedProviders.includes(provider)) ??\n verifiedProviders,\n default_model: verifiedModels[0] ?? models?.[0] ?? \"\",\n };\n }\n\n static async getConfig(): Promise<WebClientConfig> {\n await loadAgentServerInfo();\n\n return {\n posthog_client_key:\n (import.meta.env.VITE_POSTHOG_CLIENT_KEY as string \| undefined) ?? null,\n feature_flags: {\n hide_llm_settings: false,\n hide_users_page: true,\n },\n providers_configured: [],\n maintenance_start_time: null,\n recaptcha_site_key: null,\n faulty_models: [],\n error_message: null,\n updated_at: new Date().toISOString(),\n };\n }\n}\n\nexport default OptionService;\n"],"mappings":"+TAKA,IAAM,EAAN,KAAoB,CAClB,aAAa,WAAqC,CAChD,IAAM,EAAY,IAAI,EAAA,kBAAkB,EAAA,6BAA6B,CAAC,CAChE,CAAC,EAAQ,EAAoB,GAAa,MAAM,QAAQ,IAAI,CAChE,EAAU,WAAW,CACrB,EAAU,mBAAmB,CAC7B,EAAU,cAAc,CACzB,CAAC,CAEI,EAAoB,OAAO,KAAK,GAAsB,EAAE,CAAC,CAAC,MAAM,CAChE,EAAiB,EAAkB,QACtC,GAAa,EAAmB,IAAa,EAAE,CACjD,CAED,MAAO,CACL,OAAQ,GAAU,EAAE,CACpB,gBAAiB,EACjB,mBACE,GAAW,OAAQ,GAAa,EAAkB,SAAS,EAAS,CAAC,EACrE,EACF,cAAe,EAAe,IAAM,IAAS,IAAM,GACpD,CAGH,aAAa,WAAsC,CAGjD,OAFA,MAAM,EAAA,qBAAqB,CAEpB,CACL,mBACqE,KACrE,cAAe,CACb,kBAAmB,GACnB,gBAAiB,GAClB,CACD,qBAAsB,EAAE,CACxB,uBAAwB,KACxB,mBAAoB,KACpB,cAAe,EAAE,CACjB,cAAe,KACf,WAAY,IAAI,MAAM,CAAC,aAAa,CACrC"}

package/dist/api/option-service/option-service.api.js CHANGED Viewed

@@ -1,4 +1,5 @@
 import { LLMMetadataClient as e } from "../../node_modules/@openhands/typescript-client/dist/client/llm-client.js";
+import "../../node_modules/@openhands/typescript-client/dist/clients.js";
 import { getAgentServerClientOptions as t } from "../agent-server-client-options.js";
 import { loadAgentServerInfo as n } from "../agent-server-compatibility.js";
 //#region src/api/option-service/option-service.api.ts

package/dist/api/option-service/option-service.api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"option-service.api.js","names":[],"sources":["../../../src/api/option-service/option-service.api.ts"],"sourcesContent":["import { LLMMetadataClient } from \"@openhands/typescript-client/clients\";\nimport { loadAgentServerInfo } from \"../agent-server-compatibility\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { ModelsResponse, WebClientConfig } from \"./option.types\";\n\nclass OptionService {\n static async getModels(): Promise<ModelsResponse> {\n const llmClient = new LLMMetadataClient(getAgentServerClientOptions());\n const [models, verifiedByProvider, providers] = await Promise.all([\n llmClient.getModels(),\n llmClient.getVerifiedModels(),\n llmClient.getProviders(),\n ]);\n\n const verifiedProviders = Object.keys(verifiedByProvider ?? {}).sort();\n const verifiedModels = verifiedProviders.flatMap(\n (provider) => verifiedByProvider[provider] ?? [],\n );\n\n return {\n models: models ?? [],\n verified_models: verifiedModels,\n verified_providers:\n providers?.filter((provider) => verifiedProviders.includes(provider)) ??\n verifiedProviders,\n default_model: verifiedModels[0] ?? models?.[0] ?? \"\",\n };\n }\n\n static async getConfig(): Promise<WebClientConfig> {\n await loadAgentServerInfo();\n\n return {\n posthog_client_key:\n (import.meta.env.VITE_POSTHOG_CLIENT_KEY as string \| undefined) ?? null,\n feature_flags: {\n hide_llm_settings: false,\n hide_users_page: true,\n },\n providers_configured: [],\n maintenance_start_time: null,\n recaptcha_site_key: null,\n faulty_models: [],\n error_message: null,\n updated_at: new Date().toISOString(),\n };\n }\n}\n\nexport default OptionService;\n"],"mappings":"~~;;;;~~AAKA,IAAM,IAAN,MAAoB;CAClB,aAAa,YAAqC;EAChD,IAAM,IAAY,IAAI,EAAkB,GAA6B,CAAC,EAChE,CAAC,GAAQ,GAAoB,KAAa,MAAM,QAAQ,IAAI;GAChE,EAAU,WAAW;GACrB,EAAU,mBAAmB;GAC7B,EAAU,cAAc;GACzB,CAAC,EAEI,IAAoB,OAAO,KAAK,KAAsB,EAAE,CAAC,CAAC,MAAM,EAChE,IAAiB,EAAkB,SACtC,MAAa,EAAmB,MAAa,EAAE,CACjD;AAED,SAAO;GACL,QAAQ,KAAU,EAAE;GACpB,iBAAiB;GACjB,oBACE,GAAW,QAAQ,MAAa,EAAkB,SAAS,EAAS,CAAC,IACrE;GACF,eAAe,EAAe,MAAM,IAAS,MAAM;GACpD;;CAGH,aAAa,YAAsC;AAGjD,SAFA,MAAM,GAAqB,EAEpB;GACL,oBACqE;GACrE,eAAe;IACb,mBAAmB;IACnB,iBAAiB;IAClB;GACD,sBAAsB,EAAE;GACxB,wBAAwB;GACxB,oBAAoB;GACpB,eAAe,EAAE;GACjB,eAAe;GACf,6BAAY,IAAI,MAAM,EAAC,aAAa;GACrC"}
1	+ {"version":3,"file":"option-service.api.js","names":[],"sources":["../../../src/api/option-service/option-service.api.ts"],"sourcesContent":["import { LLMMetadataClient } from \"@openhands/typescript-client/clients\";\nimport { loadAgentServerInfo } from \"../agent-server-compatibility\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { ModelsResponse, WebClientConfig } from \"./option.types\";\n\nclass OptionService {\n static async getModels(): Promise<ModelsResponse> {\n const llmClient = new LLMMetadataClient(getAgentServerClientOptions());\n const [models, verifiedByProvider, providers] = await Promise.all([\n llmClient.getModels(),\n llmClient.getVerifiedModels(),\n llmClient.getProviders(),\n ]);\n\n const verifiedProviders = Object.keys(verifiedByProvider ?? {}).sort();\n const verifiedModels = verifiedProviders.flatMap(\n (provider) => verifiedByProvider[provider] ?? [],\n );\n\n return {\n models: models ?? [],\n verified_models: verifiedModels,\n verified_providers:\n providers?.filter((provider) => verifiedProviders.includes(provider)) ??\n verifiedProviders,\n default_model: verifiedModels[0] ?? models?.[0] ?? \"\",\n };\n }\n\n static async getConfig(): Promise<WebClientConfig> {\n await loadAgentServerInfo();\n\n return {\n posthog_client_key:\n (import.meta.env.VITE_POSTHOG_CLIENT_KEY as string \| undefined) ?? null,\n feature_flags: {\n hide_llm_settings: false,\n hide_users_page: true,\n },\n providers_configured: [],\n maintenance_start_time: null,\n recaptcha_site_key: null,\n faulty_models: [],\n error_message: null,\n updated_at: new Date().toISOString(),\n };\n }\n}\n\nexport default OptionService;\n"],"mappings":";;;;;AAKA,IAAM,IAAN,MAAoB;CAClB,aAAa,YAAqC;EAChD,IAAM,IAAY,IAAI,EAAkB,GAA6B,CAAC,EAChE,CAAC,GAAQ,GAAoB,KAAa,MAAM,QAAQ,IAAI;GAChE,EAAU,WAAW;GACrB,EAAU,mBAAmB;GAC7B,EAAU,cAAc;GACzB,CAAC,EAEI,IAAoB,OAAO,KAAK,KAAsB,EAAE,CAAC,CAAC,MAAM,EAChE,IAAiB,EAAkB,SACtC,MAAa,EAAmB,MAAa,EAAE,CACjD;AAED,SAAO;GACL,QAAQ,KAAU,EAAE;GACpB,iBAAiB;GACjB,oBACE,GAAW,QAAQ,MAAa,EAAkB,SAAS,EAAS,CAAC,IACrE;GACF,eAAe,EAAe,MAAM,IAAS,MAAM;GACpD;;CAGH,aAAa,YAAsC;AAGjD,SAFA,MAAM,GAAqB,EAEpB;GACL,oBACqE;GACrE,eAAe;IACb,mBAAmB;IACnB,iBAAiB;IAClB;GACD,sBAAsB,EAAE;GACxB,wBAAwB;GACxB,oBAAoB;GACpB,eAAe,EAAE;GACjB,eAAe;GACf,6BAAY,IAAI,MAAM,EAAC,aAAa;GACrC"}

package/dist/api/plugins-management-service.cjs ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ require(`../_virtual/_rolldown/runtime.cjs`);const e=require(`../node_modules/@openhands/typescript-client/dist/client/plugins-client.cjs`);require(`../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`./backend-registry/active-store.cjs`),n=require(`./agent-server-client-options.cjs`);function r(){return t.getActiveBackend().backend.kind===`cloud`}function i(){return new e.PluginsClient(n.getAgentServerClientOptions())}var a=class{static async listInstalledPlugins(){if(r())return[];try{return(await i().listInstalledPlugins()).plugins??[]}catch{return[]}}static async installPlugin(e){if(r())throw Error(`Installing plugins is only available on a local backend.`);return i().installPlugin(e)}static async setPluginEnabled(e,t){if(r())throw Error(`Enabling and disabling plugins is only available on a local backend.`);return i().setPluginEnabled(e,t)}static async uninstallPlugin(e){if(r())throw Error(`Uninstalling plugins is only available on a local backend.`);return i().uninstallPlugin(e)}static async refreshPlugin(e){if(r())throw Error(`Refreshing plugins is only available on a local backend.`);return i().refreshPlugin(e)}};exports.default=a;
2	+ //# sourceMappingURL=plugins-management-service.cjs.map

package/dist/api/plugins-management-service.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"plugins-management-service.cjs","names":[],"sources":["../../src/api/plugins-management-service.ts"],"sourcesContent":["import { PluginsClient } from \"@openhands/typescript-client/clients\";\nimport { getActiveBackend } from \"./backend-registry/active-store\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\n\n/**\n * An installed plugin, as returned by the agent-server management router\n * (`GET /api/plugins/installed`). Matches the typescript-client\n * `InstalledPluginInfo`.\n */\nexport interface InstalledPluginInfo {\n name: string;\n version: string;\n description: string | null;\n enabled: boolean;\n source: string;\n resolved_ref?: string | null;\n repo_path?: string | null;\n installed_at: string;\n install_path: string;\n}\n\n/** Coordinates for installing a plugin from a git source or local path. */\nexport interface InstallPluginRequest {\n source: string;\n ref?: string | null;\n repo_path?: string | null;\n force?: boolean;\n}\n\n/**\n * The slice of the typescript-client `PluginsClient` this service drives. The\n * installed `@openhands/typescript-client` package does not yet export these\n * management methods (they ship in typescript-client PRs #222/#223); narrowing\n * to this local interface keeps `vitest` (types stripped) and `eslint` green\n * until the client is republished, at which point the cast below can be dropped.\n */\ninterface PluginsManagementClient {\n listInstalledPlugins(): Promise<{ plugins: InstalledPluginInfo[] }>;\n installPlugin(request: InstallPluginRequest): Promise<InstalledPluginInfo>;\n setPluginEnabled(\n name: string,\n enabled: boolean,\n ): Promise<{ name: string; enabled: boolean }>;\n uninstallPlugin(name: string): Promise<{ message: string }>;\n refreshPlugin(\n name: string,\n ): Promise<{ message: string; plugin: InstalledPluginInfo }>;\n}\n\nfunction isCloudBackend(): boolean {\n return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction getManagementClient(): PluginsManagementClient {\n return new PluginsClient(\n getAgentServerClientOptions(),\n ) as unknown as PluginsManagementClient;\n}\n\n/**\n * Front-end management layer for installed plugins: list / install / enable /\n * disable / uninstall / refresh. Kept separate from the read-only catalog\n * service (`plugins-service.ts`), exactly as skills separate the marketplace\n * catalog from install actions.\n *\n * Local backend only for now (per Appendix C Q5): installed plugins live on the\n * local agent-server's `~/.openhands/plugins/installed/`. A cloud backend has no\n * per-user installed store yet, so reads return an empty list and mutating\n * actions throw (the UI also disables them on cloud).\n */\nclass PluginsManagementService {\n static async listInstalledPlugins(): Promise<InstalledPluginInfo[]> {\n if (isCloudBackend()) {\n return [];\n }\n\n try {\n const response = await getManagementClient().listInstalledPlugins();\n return response.plugins ?? [];\n } catch {\n // Agent-server may predate the plugins router or be unreachable; surface\n // an empty list rather than throwing (mirrors the catalog service).\n return [];\n }\n }\n\n static async installPlugin(\n request: InstallPluginRequest,\n ): Promise<InstalledPluginInfo> {\n if (isCloudBackend()) {\n throw new Error(\n \"Installing plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().installPlugin(request);\n }\n\n static async setPluginEnabled(\n name: string,\n enabled: boolean,\n ): Promise<{ name: string; enabled: boolean }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Enabling and disabling plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().setPluginEnabled(name, enabled);\n }\n\n static async uninstallPlugin(name: string): Promise<{ message: string }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Uninstalling plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().uninstallPlugin(name);\n }\n\n static async refreshPlugin(\n name: string,\n ): Promise<{ message: string; plugin: InstalledPluginInfo }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Refreshing plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().refreshPlugin(name);\n }\n}\n\nexport default PluginsManagementService;\n"],"mappings":"2TAiDA,SAAS,GAA0B,CACjC,OAAO,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAG7C,SAAS,GAA+C,CACtD,OAAO,IAAI,EAAA,cACT,EAAA,6BAA6B,CAC9B,CAcH,IAAM,EAAN,KAA+B,CAC7B,aAAa,sBAAuD,CAClE,GAAI,GAAgB,CAClB,MAAO,EAAE,CAGX,GAAI,CAEF,OAAO,MADgB,GAAqB,CAAC,sBAAsB,EACnD,SAAW,EAAE,MACvB,CAGN,MAAO,EAAE,EAIb,aAAa,cACX,EAC8B,CAC9B,GAAI,GAAgB,CAClB,MAAU,MACR,2DACD,CAEH,OAAO,GAAqB,CAAC,cAAc,EAAQ,CAGrD,aAAa,iBACX,EACA,EAC6C,CAC7C,GAAI,GAAgB,CAClB,MAAU,MACR,uEACD,CAEH,OAAO,GAAqB,CAAC,iBAAiB,EAAM,EAAQ,CAG9D,aAAa,gBAAgB,EAA4C,CACvE,GAAI,GAAgB,CAClB,MAAU,MACR,6DACD,CAEH,OAAO,GAAqB,CAAC,gBAAgB,EAAK,CAGpD,aAAa,cACX,EAC2D,CAC3D,GAAI,GAAgB,CAClB,MAAU,MACR,2DACD,CAEH,OAAO,GAAqB,CAAC,cAAc,EAAK"}

package/dist/api/plugins-management-service.d.ts ADDED Viewed

@@ -0,0 +1,50 @@
+/**
+ * An installed plugin, as returned by the agent-server management router
+ * (`GET /api/plugins/installed`). Matches the typescript-client
+ * `InstalledPluginInfo`.
+ */
+export interface InstalledPluginInfo {
+    name: string;
+    version: string;
+    description: string | null;
+    enabled: boolean;
+    source: string;
+    resolved_ref?: string | null;
+    repo_path?: string | null;
+    installed_at: string;
+    install_path: string;
+}
+/** Coordinates for installing a plugin from a git source or local path. */
+export interface InstallPluginRequest {
+    source: string;
+    ref?: string | null;
+    repo_path?: string | null;
+    force?: boolean;
+}
+/**
+ * Front-end management layer for installed plugins: list / install / enable /
+ * disable / uninstall / refresh. Kept separate from the read-only catalog
+ * service (`plugins-service.ts`), exactly as skills separate the marketplace
+ * catalog from install actions.
+ *
+ * Local backend only for now (per Appendix C Q5): installed plugins live on the
+ * local agent-server's `~/.openhands/plugins/installed/`. A cloud backend has no
+ * per-user installed store yet, so reads return an empty list and mutating
+ * actions throw (the UI also disables them on cloud).
+ */
+declare class PluginsManagementService {
+    static listInstalledPlugins(): Promise<InstalledPluginInfo[]>;
+    static installPlugin(request: InstallPluginRequest): Promise<InstalledPluginInfo>;
+    static setPluginEnabled(name: string, enabled: boolean): Promise<{
+        name: string;
+        enabled: boolean;
+    }>;
+    static uninstallPlugin(name: string): Promise<{
+        message: string;
+    }>;
+    static refreshPlugin(name: string): Promise<{
+        message: string;
+        plugin: InstalledPluginInfo;
+    }>;
+}
+export default PluginsManagementService;

package/dist/api/plugins-management-service.js ADDED Viewed

@@ -0,0 +1,41 @@
+import { PluginsClient as e } from "../node_modules/@openhands/typescript-client/dist/client/plugins-client.js";
+import "../node_modules/@openhands/typescript-client/dist/clients.js";
+import { getActiveBackend as t } from "./backend-registry/active-store.js";
+import { getAgentServerClientOptions as n } from "./agent-server-client-options.js";
+//#region src/api/plugins-management-service.ts
+function r() {
+	return t().backend.kind === "cloud";
+}
+function i() {
+	return new e(n());
+}
+var a = class {
+	static async listInstalledPlugins() {
+		if (r()) return [];
+		try {
+			return (await i().listInstalledPlugins()).plugins ?? [];
+		} catch {
+			return [];
+		}
+	}
+	static async installPlugin(e) {
+		if (r()) throw Error("Installing plugins is only available on a local backend.");
+		return i().installPlugin(e);
+	}
+	static async setPluginEnabled(e, t) {
+		if (r()) throw Error("Enabling and disabling plugins is only available on a local backend.");
+		return i().setPluginEnabled(e, t);
+	}
+	static async uninstallPlugin(e) {
+		if (r()) throw Error("Uninstalling plugins is only available on a local backend.");
+		return i().uninstallPlugin(e);
+	}
+	static async refreshPlugin(e) {
+		if (r()) throw Error("Refreshing plugins is only available on a local backend.");
+		return i().refreshPlugin(e);
+	}
+};
+//#endregion
+export { a as default };
+//# sourceMappingURL=plugins-management-service.js.map

package/dist/api/plugins-management-service.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"plugins-management-service.js","names":[],"sources":["../../src/api/plugins-management-service.ts"],"sourcesContent":["import { PluginsClient } from \"@openhands/typescript-client/clients\";\nimport { getActiveBackend } from \"./backend-registry/active-store\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\n\n/**\n * An installed plugin, as returned by the agent-server management router\n * (`GET /api/plugins/installed`). Matches the typescript-client\n * `InstalledPluginInfo`.\n */\nexport interface InstalledPluginInfo {\n name: string;\n version: string;\n description: string | null;\n enabled: boolean;\n source: string;\n resolved_ref?: string | null;\n repo_path?: string | null;\n installed_at: string;\n install_path: string;\n}\n\n/** Coordinates for installing a plugin from a git source or local path. */\nexport interface InstallPluginRequest {\n source: string;\n ref?: string | null;\n repo_path?: string | null;\n force?: boolean;\n}\n\n/**\n * The slice of the typescript-client `PluginsClient` this service drives. The\n * installed `@openhands/typescript-client` package does not yet export these\n * management methods (they ship in typescript-client PRs #222/#223); narrowing\n * to this local interface keeps `vitest` (types stripped) and `eslint` green\n * until the client is republished, at which point the cast below can be dropped.\n */\ninterface PluginsManagementClient {\n listInstalledPlugins(): Promise<{ plugins: InstalledPluginInfo[] }>;\n installPlugin(request: InstallPluginRequest): Promise<InstalledPluginInfo>;\n setPluginEnabled(\n name: string,\n enabled: boolean,\n ): Promise<{ name: string; enabled: boolean }>;\n uninstallPlugin(name: string): Promise<{ message: string }>;\n refreshPlugin(\n name: string,\n ): Promise<{ message: string; plugin: InstalledPluginInfo }>;\n}\n\nfunction isCloudBackend(): boolean {\n return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction getManagementClient(): PluginsManagementClient {\n return new PluginsClient(\n getAgentServerClientOptions(),\n ) as unknown as PluginsManagementClient;\n}\n\n/**\n * Front-end management layer for installed plugins: list / install / enable /\n * disable / uninstall / refresh. Kept separate from the read-only catalog\n * service (`plugins-service.ts`), exactly as skills separate the marketplace\n * catalog from install actions.\n *\n * Local backend only for now (per Appendix C Q5): installed plugins live on the\n * local agent-server's `~/.openhands/plugins/installed/`. A cloud backend has no\n * per-user installed store yet, so reads return an empty list and mutating\n * actions throw (the UI also disables them on cloud).\n */\nclass PluginsManagementService {\n static async listInstalledPlugins(): Promise<InstalledPluginInfo[]> {\n if (isCloudBackend()) {\n return [];\n }\n\n try {\n const response = await getManagementClient().listInstalledPlugins();\n return response.plugins ?? [];\n } catch {\n // Agent-server may predate the plugins router or be unreachable; surface\n // an empty list rather than throwing (mirrors the catalog service).\n return [];\n }\n }\n\n static async installPlugin(\n request: InstallPluginRequest,\n ): Promise<InstalledPluginInfo> {\n if (isCloudBackend()) {\n throw new Error(\n \"Installing plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().installPlugin(request);\n }\n\n static async setPluginEnabled(\n name: string,\n enabled: boolean,\n ): Promise<{ name: string; enabled: boolean }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Enabling and disabling plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().setPluginEnabled(name, enabled);\n }\n\n static async uninstallPlugin(name: string): Promise<{ message: string }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Uninstalling plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().uninstallPlugin(name);\n }\n\n static async refreshPlugin(\n name: string,\n ): Promise<{ message: string; plugin: InstalledPluginInfo }> {\n if (isCloudBackend()) {\n throw new Error(\n \"Refreshing plugins is only available on a local backend.\",\n );\n }\n return getManagementClient().refreshPlugin(name);\n }\n}\n\nexport default PluginsManagementService;\n"],"mappings":";;;;;AAiDA,SAAS,IAA0B;AACjC,QAAO,GAAkB,CAAC,QAAQ,SAAS;;AAG7C,SAAS,IAA+C;AACtD,QAAO,IAAI,EACT,GAA6B,CAC9B;;AAcH,IAAM,IAAN,MAA+B;CAC7B,aAAa,uBAAuD;AAClE,MAAI,GAAgB,CAClB,QAAO,EAAE;AAGX,MAAI;AAEF,WAAO,MADgB,GAAqB,CAAC,sBAAsB,EACnD,WAAW,EAAE;UACvB;AAGN,UAAO,EAAE;;;CAIb,aAAa,cACX,GAC8B;AAC9B,MAAI,GAAgB,CAClB,OAAU,MACR,2DACD;AAEH,SAAO,GAAqB,CAAC,cAAc,EAAQ;;CAGrD,aAAa,iBACX,GACA,GAC6C;AAC7C,MAAI,GAAgB,CAClB,OAAU,MACR,uEACD;AAEH,SAAO,GAAqB,CAAC,iBAAiB,GAAM,EAAQ;;CAG9D,aAAa,gBAAgB,GAA4C;AACvE,MAAI,GAAgB,CAClB,OAAU,MACR,6DACD;AAEH,SAAO,GAAqB,CAAC,gBAAgB,EAAK;;CAGpD,aAAa,cACX,GAC2D;AAC3D,MAAI,GAAgB,CAClB,OAAU,MACR,2DACD;AAEH,SAAO,GAAqB,CAAC,cAAc,EAAK"}

package/dist/api/plugins-service.d.ts ADDED Viewed

@@ -0,0 +1,49 @@
+/**
+ * A plugin in the dynamic marketplace catalog, with attachable coordinates and
+ * install state. Matches the agent-server `MarketplacePluginInfo` / the
+ * typescript-client `MarketplacePlugin`.
+ */
+export interface MarketplacePlugin {
+    name: string;
+    description: string | null;
+    source: string;
+    ref?: string | null;
+    repo_path?: string | null;
+    installed: boolean;
+}
+/**
+ * A locally-discovered ("ambient") plugin reported by the agent-server — one
+ * found in the user's local plugin directories (e.g. `~/.agents/plugins`).
+ * These auto-load into conversations and are not managed via install/uninstall,
+ * so the Plugins page renders them as a read-only "Local" group. Matches the
+ * typescript-client `PluginInfo`.
+ */
+export interface LocalPlugin {
+    name: string;
+    version: string;
+    description: string;
+}
+declare class PluginsService {
+    /**
+     * Fetch the dynamic plugins marketplace catalog.
+     *
+     * Local backend only for now: the catalog is fetched at run time from the
+     * agent-server via the typed client (no bundled catalog, so the list stays
+     * dynamic). On a cloud backend an empty catalog is returned — there is no
+     * cloud plugins-marketplace endpoint yet (tracked as a follow-up ticket).
+     */
+    static getPluginsMarketplace(): Promise<MarketplacePlugin[]>;
+    /**
+     * Fetch the locally-discovered ("ambient") plugins from the agent-server.
+     *
+     * Only user-level plugins are requested (`~/.agents/plugins`,
+     * `~/.openhands/plugins`, plus enabled installed plugins): the Plugins page is
+     * global, so there is no project workspace to scope project plugins to.
+     *
+     * Local backend only — a cloud backend has no local plugin directories, so an
+     * empty list is returned. Errors surface as an empty list (mirrors the
+     * catalog) rather than throwing.
+     */
+    static getLocalPlugins(): Promise<LocalPlugin[]>;
+}
+export default PluginsService;

package/dist/api/profiles-service/profiles-service.api.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/profiles-client.cjs`),t=require(`../agent-server-client-options.cjs`);var n=class{static async listProfiles(){return new e.ProfilesClient(t.getAgentServerClientOptions()).listProfiles()}static async getProfile(n,r){let i=r?{exposeSecrets:r}:{};return new e.ProfilesClient(t.getAgentServerClientOptions()).getProfile(n,i)}static async saveProfile(n,r){return new e.ProfilesClient(t.getAgentServerClientOptions()).saveProfile(n,r)}static async deleteProfile(n){return new e.ProfilesClient(t.getAgentServerClientOptions()).deleteProfile(n)}static async renameProfile(n,r){return new e.ProfilesClient(t.getAgentServerClientOptions()).renameProfile(n,r)}static async activateProfile(n){return new e.ProfilesClient(t.getAgentServerClientOptions()).activateProfile(n)}};exports.default=n;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/profiles-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../cloud/profiles-service.api.cjs`);function i(){return t.getActiveBackend().backend.kind===`cloud`}var a=class{static async listProfiles(){return i()?r.fetchCloudProfiles():new e.ProfilesClient(n.getAgentServerClientOptions()).listProfiles()}static async getProfile(t,a){if(i())return r.fetchCloudProfile(t);let o=a?{exposeSecrets:a}:{};return new e.ProfilesClient(n.getAgentServerClientOptions()).getProfile(t,o)}static async saveProfile(t,a){return i()?r.saveCloudProfile(t,a):new e.ProfilesClient(n.getAgentServerClientOptions()).saveProfile(t,a)}static async deleteProfile(t){return i()?r.deleteCloudProfile(t):new e.ProfilesClient(n.getAgentServerClientOptions()).deleteProfile(t)}static async renameProfile(t,a){return i()?r.renameCloudProfile(t,a):new e.ProfilesClient(n.getAgentServerClientOptions()).renameProfile(t,a)}static async activateProfile(t){return i()?r.activateCloudProfile(t):new e.ProfilesClient(n.getAgentServerClientOptions()).activateProfile(t)}};exports.default=a;
 //# sourceMappingURL=profiles-service.api.cjs.map

package/dist/api/profiles-service/profiles-service.api.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"profiles-service.api.cjs","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/*\n ProfilesService ~~provides~~ a ~~thin~~ ~~wrapper~~ ~~around~~ the SDK's ProfilesClient,\n * ~~creating a client~~ per-call to pick up current backend configuration.\n \n Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n \n Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n ProfilesClient,\n type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n ProfileInfo,\n ProfileListResponse,\n ProfileDetailResponse,\n ProfileMutationResponse,\n ActivateProfileResponse,\n SaveProfileRequest,\n ExposeSecretsMode,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n// Re-export SDK types for consumers\nexport type {\n ProfileInfo,\n ProfileListResponse,\n ProfileDetailResponse,\n ProfileMutationResponse,\n ActivateProfileResponse,\n SaveProfileRequest,\n ExposeSecretsMode,\n};\n\nclass ProfilesService {\n static async listProfiles(): Promise<ProfileListResponse> {\n return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n }\n\n static async getProfile(\n name: string,\n exposeSecrets?: ExposeSecretsMode,\n ): Promise<ProfileDetailResponse> {\n const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n name,\n options,\n );\n }\n\n static async saveProfile(\n name: string,\n request: SaveProfileRequest,\n ): Promise<ProfileMutationResponse> {\n return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n name,\n request,\n );\n }\n\n static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n name,\n );\n }\n\n static async renameProfile(\n name: string,\n newName: string,\n ): Promise<ProfileMutationResponse> {\n return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n name,\n newName,\n );\n }\n\n static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n name,\n );\n }\n}\n\nexport default ProfilesService;\n"],"mappings":"~~mMAsCA~~,IAAM,EAAN,KAAsB,CACpB,aAAa,cAA6C,~~CACxD~~,~~OAAO~~,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cAAc,CAGzE,aAAa,WACX,EACA,EACgC,~~CAChC~~,IAAM,EAA6B,EAAgB,CAAE,gBAAe,CAAG,EAAE,CACzE,OAAO,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,WACvD,EACA,EACD,CAGH,aAAa,YACX,EACA,EACkC,~~CAClC~~,~~OAAO~~,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,YACvD,EACA,EACD,CAGH,aAAa,cAAc,EAAgD,~~CACzE~~,~~OAAO~~,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cACvD,EACD,CAGH,aAAa,cACX,EACA,EACkC,~~CAClC~~,~~OAAO~~,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cACvD,EACA,EACD,CAGH,aAAa,gBAAgB,EAAgD,~~CAC3E~~,~~OAAO~~,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,gBACvD,EACD"}
1	+ {"version":3,"file":"profiles-service.api.cjs","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/*\n ProfilesService is the single entry point for LLM-profile CRUD, routing per\n * active backend so callers (hooks, the settings manager) stay backend-agnostic:\n * - local agent-server: the SDK's ProfilesClient (`/api/profiles`), created\n * per-call to pick up current backend configuration;\n * - cloud app-server: `src/api/cloud/profiles-service.api.ts` (the org-gated\n * `/api/organizations/{orgId}/profiles` routes, or the per-user settings\n * route as a fallback) via the org-scoped cloud proxy.\n * This mirrors how SettingsService branches to fetchCloudSettings().\n \n Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n \n Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n ProfilesClient,\n type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n ProfileInfo,\n ProfileListResponse,\n ProfileDetailResponse,\n ProfileMutationResponse,\n ActivateProfileResponse,\n SaveProfileRequest,\n ExposeSecretsMode,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n activateCloudProfile,\n deleteCloudProfile,\n fetchCloudProfile,\n fetchCloudProfiles,\n renameCloudProfile,\n saveCloudProfile,\n} from \"../cloud/profiles-service.api\";\n\n// Re-export SDK types for consumers\nexport type {\n ProfileInfo,\n ProfileListResponse,\n ProfileDetailResponse,\n ProfileMutationResponse,\n ActivateProfileResponse,\n SaveProfileRequest,\n ExposeSecretsMode,\n};\n\nfunction isCloudBackend(): boolean {\n return getActiveBackend().backend.kind === \"cloud\";\n}\n\nclass ProfilesService {\n static async listProfiles(): Promise<ProfileListResponse> {\n if (isCloudBackend()) return fetchCloudProfiles();\n return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n }\n\n static async getProfile(\n name: string,\n exposeSecrets?: ExposeSecretsMode,\n ): Promise<ProfileDetailResponse> {\n // Cloud never exposes profile secrets (api_key is always nulled with an\n // api_key_set flag), so `exposeSecrets` is local-only.\n if (isCloudBackend()) return fetchCloudProfile(name);\n const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n name,\n options,\n );\n }\n\n static async saveProfile(\n name: string,\n request: SaveProfileRequest,\n ): Promise<ProfileMutationResponse> {\n if (isCloudBackend()) return saveCloudProfile(name, request);\n return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n name,\n request,\n );\n }\n\n static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n if (isCloudBackend()) return deleteCloudProfile(name);\n return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n name,\n );\n }\n\n static async renameProfile(\n name: string,\n newName: string,\n ): Promise<ProfileMutationResponse> {\n if (isCloudBackend()) return renameCloudProfile(name, newName);\n return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n name,\n newName,\n );\n }\n\n static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n if (isCloudBackend()) return activateCloudProfile(name);\n return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n name,\n );\n }\n}\n\nexport default ProfilesService;\n"],"mappings":"sXAqDA,SAAS,GAA0B,CACjC,OAAO,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAG7C,IAAM,EAAN,KAAsB,CACpB,aAAa,cAA6C,CAExD,OADI,GAAgB,CAAS,EAAA,oBAAoB,CAC1C,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cAAc,CAGzE,aAAa,WACX,EACA,EACgC,CAGhC,GAAI,GAAgB,CAAE,OAAO,EAAA,kBAAkB,EAAK,CACpD,IAAM,EAA6B,EAAgB,CAAE,gBAAe,CAAG,EAAE,CACzE,OAAO,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,WACvD,EACA,EACD,CAGH,aAAa,YACX,EACA,EACkC,CAElC,OADI,GAAgB,CAAS,EAAA,iBAAiB,EAAM,EAAQ,CACrD,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,YACvD,EACA,EACD,CAGH,aAAa,cAAc,EAAgD,CAEzE,OADI,GAAgB,CAAS,EAAA,mBAAmB,EAAK,CAC9C,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cACvD,EACD,CAGH,aAAa,cACX,EACA,EACkC,CAElC,OADI,GAAgB,CAAS,EAAA,mBAAmB,EAAM,EAAQ,CACvD,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,cACvD,EACA,EACD,CAGH,aAAa,gBAAgB,EAAgD,CAE3E,OADI,GAAgB,CAAS,EAAA,qBAAqB,EAAK,CAChD,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,gBACvD,EACD"}