@openhands/agent-canvas 1.10.0 → 1.11.0

package/dist/api/agent-server-adapter.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport { ServerClient } from \"@openhands/typescript-client/clients\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { AgentKind, Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport {\n  getCachedAgentServerInfo,\n  isAgentServerToolAvailable,\n} from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\nimport {\n  CANVAS_UI_CLIENT_TOOL,\n  CANVAS_UI_CLIENT_TOOL_NAME,\n  LEGACY_CANVAS_UI_TOOL_NAME,\n  type ClientToolSpec,\n} from \"./canvas-ui-client-tool\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    /**\n     * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the\n     * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the\n     * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag\n     * client-side and the server may not repopulate it. Read by {@link toAppConversation}.\n     */\n    acp_server?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n  launched_agent_profile?: {\n    agent_profile_id: string;\n    revision: number;\n  } | null;\n}\n\nconst DEFAULT_TOOL_NAMES = [\"terminal\", \"file_editor\", \"task_tracker\"];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info served by Agent Canvas backends in\n * `/server_info.runtime_services`. All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's reachable\n * from inside its sandbox without having to probe.\n */\nexport interface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\nexport function parseRuntimeServicesInfo(\n  value: unknown,\n): RuntimeServicesInfo | null {\n  if (typeof value === \"string\") {\n    const raw = value.trim();\n    if (!raw) return null;\n    try {\n      return parseRuntimeServicesInfo(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  }\n\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  const parsed = value as RuntimeServicesInfo;\n  if (!parsed.services || typeof parsed.services !== \"object\") return null;\n  return parsed;\n}\n\nexport async function fetchBackendRuntimeServicesInfo(): Promise<RuntimeServicesInfo | null> {\n  let clientOptions: ReturnType<typeof getAgentServerClientOptions>;\n  try {\n    clientOptions = getAgentServerClientOptions({ timeout: 3000 });\n  } catch {\n    return null;\n  }\n\n  const cached = parseRuntimeServicesInfo(\n    getCachedAgentServerInfo({ host: clientOptions.host })?.runtime_services,\n  );\n  if (cached) return cached;\n\n  try {\n    const serverInfo = await new ServerClient(clientOptions).getServerInfo();\n    return parseRuntimeServicesInfo(\n      (serverInfo as { runtime_services?: unknown }).runtime_services,\n    );\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is supplied.\n */\nexport function getDeploymentMode(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | null {\n  return runtimeServicesInfo?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is available, so callers can safely\n * omit the field when the selected backend does not advertise runtime services.\n */\nexport function buildRuntimeServicesSystemSuffix(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | undefined {\n  const info = parseRuntimeServicesInfo(runtimeServicesInfo);\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie. Fall back to the\n  // agent's own ``acp_server`` (#3692) when the tag is missing — a profile\n  // launch doesn't stamp the tag, so tag-only reads would drop the ACP model\n  // picker and degrade the chip to a generic \"ACP\" (#1571).\n  const acpServer = isAcp\n    ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? info.agent?.acp_server ?? null)\n    : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    tags: info.tags ?? null,\n    launched_agent_profile: info.launched_agent_profile ?? null,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : null,\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items.map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\n\n/**\n * Conversation tag keys Canvas itself stamps/consumes for internal routing.\n * They are already surfaced through dedicated UI (the ACP provider chip), so\n * the generic tag-chip display filters them out.\n */\nexport const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string> = new Set([\n  ACP_SERVER_TAG_KEY,\n]);\n\n/**\n * User-facing subset of a conversation's server-side tags: everything except\n * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries\n * sorted by key so chip order doesn't shuffle between refetches.\n */\nexport function getDisplayConversationTags(\n  tags: Record<string, string> | null | undefined,\n): Array<[string, string]> {\n  if (!tags) {\n    return [];\n  }\n  return Object.entries(tags)\n    .filter(([key]) => !RESERVED_CONVERSATION_TAG_KEYS.has(key))\n    .sort(([a], [b]) => a.localeCompare(b));\n}\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedString(value: unknown): boolean {\n  if (typeof value === \"string\") {\n    return value.startsWith(FERNET_TOKEN_PREFIX);\n  }\n  if (Array.isArray(value)) {\n    return value.some(hasEncryptedString);\n  }\n  if (isPlainRecord(value)) {\n    return Object.values(value).some(hasEncryptedString);\n  }\n  return false;\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig).some(hasEncryptedString);\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(\n  agentSettings: SettingsRecord,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  disabledSkills: string[] = [],\n): SettingsRecord {\n  const runtimeServicesSuffix =\n    buildRuntimeServicesSystemSuffix(runtimeServicesInfo);\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const disabledSkillNames = new Set(disabledSkills);\n  const mergedSkills = [...existingSkills, ...buildBundledSkills()].filter(\n    (skill) =>\n      typeof skill.name !== \"string\" || !disabledSkillNames.has(skill.name),\n  );\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      settings.disabled_skills,\n    ),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a shared field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = toRecord(agentSettings.llm);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n    delete llm.base_url;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      settings.disabled_skills,\n    ),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings, runtimeServicesInfo)\n    : buildConfiguredOpenHandsAgentSettings(settings, runtimeServicesInfo);\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\ntype StartConversationPayload = Record<string, unknown> & {\n  // Omitted when launching via ``agent_profile_id`` — the two are mutually\n  // exclusive agent sources; the server resolves the profile server-side.\n  agent_settings?: AgentSettingsPayload;\n  agent_profile_id?: string;\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: true;\n  title_llm_profile?: string;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  client_tools: ClientToolSpec[];\n  tool_module_qualnames?: Record<string, string>;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: Array<{ name: string; description?: string }>;\n  // When set, the conversation launches from this AgentProfile (resolved\n  // server-side) instead of an inline ``agent_settings`` dump (#3727).\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n  runtimeServicesInfo?: RuntimeServicesInfo | null;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): StartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const launchAgentKind = options.agentProfileId\n    ? options.agentProfileKind\n    : acpMode\n      ? \"acp\"\n      : \"openhands\";\n  const agentSettings = buildConfiguredAgentSettings(\n    sourceAgentSettings,\n    options.runtimeServicesInfo,\n  );\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: StartConversationPayload = {\n    // ``agent_profile_id`` and ``agent_settings`` are mutually exclusive agent\n    // sources; the profile path lets the server resolve the profile (#3727).\n    //\n    // Enrichment boundary: on the profile path the server rebuilds the agent\n    // purely from the stored profile fields, so the client-owned enrichments\n    // this adapter folds into ``agent_settings`` do NOT apply. The exec toolset\n    // (terminal/file_editor/task_tracker) and public-skill loading are the\n    // server/SDK's responsibility to restore on the profile path — tracked in\n    // software-agent-sdk#3967 (profile resolution must attach the default\n    // toolset + public skills, else a profile-launched OpenHands agent has only\n    // Finish/Think). The dev ``RUNTIME_SERVICES`` system-message suffix remains\n    // agent-settings-only; the Canvas UI tool is a top-level client tool and\n    // therefore works on both inline-agent and profile launch paths.\n    //\n    // Persistent memory is NOT on that boundary: ``load_memory`` is a global\n    // user preference, so the agent-server stamps the stored\n    // ``agent_settings.agent_context.load_memory`` onto the profile-resolved\n    // agent the same way it already applies the global ``mcp_config``. The\n    // toggle therefore applies to both launch paths, and the client must not\n    // re-send it here (``agent_profile_id`` and ``agent_settings`` are\n    // mutually exclusive).\n    ...(options.agentProfileId\n      ? { agent_profile_id: options.agentProfileId }\n      : { agent_settings: agentSettings }),\n    workspace: conversationSettings.workspace,\n    client_tools:\n      launchAgentKind === \"openhands\" ? [CANVAS_UI_CLIENT_TOOL] : [],\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations:\n      typeof conversationSettings.max_iterations === \"number\"\n        ? conversationSettings.max_iterations\n        : 500,\n    stuck_detection: true,\n    autotitle: true,\n    ...(options.titleLlmProfile\n      ? { title_llm_profile: options.titleLlmProfile }\n      : {}),\n    worktree: options.worktree ?? true,\n  };\n\n  // A profile launch resolves the ACP server server-side, so don't stamp the\n  // tag from current settings (it may not match the launched profile).\n  if (!options.agentProfileId && acpServerTag) {\n    payload.tags = { [ACP_SERVER_TAG_KEY]: acpServerTag };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config secrets as Fernet tokens,\n  // and ACP forwards mcp_config directly to the subprocess.\n  if (\n    !options.agentProfileId &&\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  }\n\n  const toolModuleQualnames = {\n    ...((conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {}),\n  };\n  delete toolModuleQualnames[LEGACY_CANVAS_UI_TOOL_NAME];\n  delete toolModuleQualnames[CANVAS_UI_CLIENT_TOOL_NAME];\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  // Every saved secret rides as a LookupSecret the agent-server resolves back\n  // from its own store at spawn time — ``request.secrets`` is the sole channel,\n  // uniform for ACP and non-ACP (agent-canvas#1039). For ACP the resolution\n  // runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the loopback\n  // fetch can't deadlock.\n  if (options.customSecrets && options.customSecrets.length > 0) {\n    const backend = getEffectiveLocalBackend();\n    const headers = backend ? buildAuthHeaders(backend) : {};\n\n    const secrets: Record<string, LookupSecret> = {};\n    for (const secret of options.customSecrets) {\n      const lookupSecret: LookupSecret = {\n        kind: \"LookupSecret\",\n        url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n        description: secret.description,\n      };\n\n      if (Object.keys(headers).length > 0) {\n        lookupSecret.headers = headers;\n      }\n\n      secrets[secret.name] = lookupSecret;\n    }\n\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n}): Promise<Record<string, unknown>> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets, runtimeServicesInfo] =\n    await Promise.all([\n      SettingsService.getSettingsForConversation(),\n      SecretsService.getSecrets(),\n      fetchBackendRuntimeServicesInfo(),\n    ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  // A profile launch resolves the LLM server-side, so the current-settings\n  // subscription check doesn't apply (and can't see the profile's LLM).\n  if (!options.agentProfileId) {\n    await assertSubscriptionAuthReady(agentSettings);\n  }\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n    runtimeServicesInfo,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"qjCAoGA,IAAM,EAAqB,CAAC,WAAY,cAAe,cAAc,EAC/D,EAAwB,mBACxB,EAAqB,gBAE3B,SAAS,GAAsB,CAC7B,MAAO,EACT,CAkCA,SAAgB,EACd,EAC4B,CAC5B,GAAI,OAAO,GAAU,SAAU,CAC7B,IAAM,EAAM,EAAM,KAAK,EACvB,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,EAAyB,KAAK,MAAM,CAAG,CAAC,CACjD,MAAQ,CACN,OAAO,IACT,CACF,CAEA,GAAI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EAC5D,OAAO,KAGT,IAAM,EAAS,EAEf,MADI,CAAC,EAAO,UAAY,OAAO,EAAO,UAAa,SAAiB,KAC7D,CACT,CAEA,eAAsB,GAAuE,CAC3F,IAAI,EACJ,GAAI,CACF,EAAgB,EAAA,4BAA4B,CAAE,QAAS,GAAK,CAAC,CAC/D,MAAQ,CACN,OAAO,IACT,CAEA,IAAM,EAAS,EACb,EAAA,yBAAyB,CAAE,KAAM,EAAc,IAAK,CAAC,GAAG,gBAC1D,EACA,GAAI,EAAQ,OAAO,EAEnB,GAAI,CAEF,OAAO,GACJ,MAFsB,IAAI,EAAA,aAAa,CAAa,EAAE,cAAc,GAEtB,gBACjD,CACF,MAAQ,CACN,OAAO,IACT,CACF,CAmBA,SAAgB,EACd,EACoB,CACpB,IAAM,EAAO,EAAyB,CAAmB,EACzD,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,CAAC,EACzB,EAAM,KAAK,oBAAoB,EAC3B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,QAC5E,EAEA,EAAM,KAAK,mDAAmD,EAEhE,EAAM,KACJ,2EACA,iEACA,EACF,EAEA,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,6CACrC,EAEE,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,mDAChC,EAEE,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,wBACjC,EAEE,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,kCACnC,EACI,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,UAAU,EAE9C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,aAAa,EAEjD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,EACtE,GAGF,EAAM,KACJ,kFACF,EAQF,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,2EACF,EACI,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,yDACF,EAEF,EAAM,KAAK,qBAAqB,EAEzB,EAAM,KAAK;CAAI,CACxB,CAEA,SAAgB,EAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,4BAA4B,EAC7C,MAAO,GAAG,EAAK,qBAAqB,GACtC,CAKA,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,CAAC,GAClD,CAEA,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,EAAE,EAKhD,EAAQ,EAAK,OAAO,OAAS,WAQ7B,EAAY,EACb,EAAK,MAAA,WAA8B,EAAK,OAAO,YAAc,KAC9D,KACJ,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,KAAK,EACpB,EAAK,MACL,EAA4B,EAAK,EAAE,EACvC,QAAS,KACT,UAAW,CAAC,EACZ,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EACZ,KAAM,EAAK,MAAQ,KACnB,uBAAwB,EAAK,wBAA0B,KAKvD,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,KAC3B,CAAC,EACA,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,CAC3D,EACA,IACN,EACA,KACJ,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,EAAkB,EAAK,EAAE,EAC3C,gBAAiB,EAAA,4BAA4B,EAAE,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,yBAAyB,CACvE,EACA,OAAQ,GACR,qBAAsB,CAAC,CACzB,CACF,CAEA,SAAgB,GAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MAAM,IAAI,CAAiB,EACvC,aAAc,EAAK,cAAgB,IACrC,CACF,CA+BA,IAAa,EAAqB,YAOrB,EAAsD,IAAI,IAAI,CACzE,CACF,CAAC,EAOD,SAAgB,EACd,EACyB,CAIzB,OAHK,EAGE,OAAO,QAAQ,CAAI,EACvB,QAAQ,CAAC,KAAS,CAAC,EAA+B,IAAI,CAAG,CAAC,EAC1D,MAAM,CAAC,GAAI,CAAC,KAAO,EAAE,cAAc,CAAC,CAAC,EAJ/B,CAAC,CAKZ,CAEA,IAAM,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,SACF,CAAC,EAED,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EACrD,CAAC,EAGH,gBAAgB,CAAuB,CAChD,CAEA,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,KAAK,EAC3B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,EACxC,CAEA,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAS,EAAmB,EAAyB,CAUnD,OATI,OAAO,GAAU,SACZ,EAAM,WAAW,CAAmB,EAEzC,MAAM,QAAQ,CAAK,EACd,EAAM,KAAK,CAAkB,EAElC,EAAc,CAAK,EACd,OAAO,OAAO,CAAK,EAAE,KAAK,CAAkB,EAE9C,EACT,CAEA,SAAS,EAAuB,EAA6B,CAK3D,OAJK,EAAc,CAAS,EAIrB,OAAO,OAAO,CAAS,EAAE,KAAK,CAAkB,EAH9C,EAIX,CAEA,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,EAAK,EAGnE,CAAE,KAAM,eAAgB,EAPtB,CAAE,KAAM,cAAe,CAQlC,CAEA,SAAS,EAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,qBAAsB,EACvC,IAAK,UACH,MAAO,CAAE,KAAM,yBAA0B,EAC3C,IAAK,cACH,MAAO,CAAE,KAAM,4BAA6B,EAC9C,QACE,MACJ,CACF,CAEA,SAAS,EACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,CAAK,GACpB,OAAQ,EAA6B,MAAS,QAElD,CAEA,SAAS,EAAkB,EAAc,EAA+B,CAYtE,OAXI,IAAS,EACJ,EAAoB,GAAK,EAAA,2BAA2B,CAAI,EAG7D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,CAAI,EAI5B,EACT,CAEA,SAAS,EAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,EACb,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAK,IAAM,IAAQ,CAAC,EAAuB,CAAkB,EACvD,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,CAAe,GAC7B,EAAgB,MAAO,GAAS,EAAa,CAAI,CAAC,MAE7C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,CAAa,GAC5C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,MAAM,CAC9B,CAAC,EAKP,OAAO,MAAM,KAAK,EAAM,OAAO,CAAC,CAClC,CAEA,SAAS,EACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,KAAK,EAAG,GAA0B,KAAK,CAAC,EAAE,OAC9D,OACF,EAKA,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;CAAM,CAAE,CAAC,EACpD,IAAK,EACP,CACF,CA2BA,SAAS,GAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,QAAS,EAC5C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,OAAQ,EAAI,CAAC,EAClD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,aAAc,EAAI,CAAC,CACtE,CACF,CAAC,CACH,CAEA,SAAS,EACP,EACA,EACA,EAA2B,CAAC,EACZ,CAChB,IAAM,EACJ,EAAiC,CAAmB,EAChD,EAAkB,EAAS,EAAc,aAAa,EAItD,EAAiB,MAAM,QAAQ,EAAgB,MAAM,EACtD,EAAgB,OACjB,CAAC,EACC,EAAqB,IAAI,IAAI,CAAc,EAC3C,EAAe,CAAC,GAAG,EAAgB,GAAG,EAAmB,CAAC,EAAE,OAC/D,GACC,OAAO,EAAM,MAAS,UAAY,CAAC,EAAmB,IAAI,EAAM,IAAI,CACxE,EAEA,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GACrB,GAAI,EACA,CAAE,sBAAuB,CAAsB,EAC/C,CAAC,CACP,CACF,CAEA,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,cACjC,EAAc,aAAe,KACtC,CAEA,SAAS,EAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,cAC1B,EAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,EACjE,CAEA,SAAS,EAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,CAAG,GAAK,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,EACmC,EACzC,OAAO,EAAW,CAAC,GAAG,EAAS,eAAe,EAAI,CACpD,CAEA,SAAS,EACP,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAgC,CACpC,WAAY,MACZ,cAAe,EACb,EACA,EACA,EAAS,eACX,CACF,EASA,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,EAAkB,CAAa,EAC/B,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,EAEnB,CAMA,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,OAAS,IAClC,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,CAAS,CACxD,CAAC,EAKD,OAJI,IACF,EAAQ,UAAY,GAGf,CACT,CAEA,SAAS,EACP,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAM,EAAS,EAAc,GAAG,EAEtC,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,KAAK,EAAE,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAIvB,EAAI,OAAS,GAEb,IAAM,EAAS,EAAsB,EAAI,OAAO,EAC5C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,QAAQ,EAC9C,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,CAAG,GAC7B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,QACX,OAAO,EAAI,WAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGb,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,SAAW,GACpC,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EACb,EACA,EACA,EAAS,eACX,EACA,MAAO,EAAc,CAAa,CACpC,CACF,CAEA,SAAS,EACP,EACA,EACsB,CACtB,OAAO,EAAW,CAAQ,EACtB,EAAgC,EAAU,CAAmB,EAC7D,EAAsC,EAAU,CAAmB,CACzE,CAEA,SAAS,EAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,qBAAqB,EAC9D,EAAiB,EAAoB,EAAO,CAAwB,EAwB1E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,EACvC,EAoBO,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,yBAAyB,CACtD,EACA,GAAI,EAAiB,CAAE,gBAAiB,CAAe,EAAI,CAAC,EAC5D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,GAAI,EAAI,CAAC,EACxC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,SAAU,EAAI,CAAC,CAC5D,EAAE,CACJ,EACA,CAAC,CAGA,CACT,CAmDA,SAAgB,EACd,EAC0B,CAC1B,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,sBAAuB,EACtE,EAAQ,SAEN,EAAU,EAAW,CAAmB,EACxC,EAAkB,EAAQ,eAC5B,EAAQ,iBACR,EACE,MACA,YACA,EAAgB,EACpB,EACA,EAAQ,mBACV,EACM,EAAe,EACjB,EAAgB,CAAmB,EACnC,IAAA,GAYE,EAAuB,EAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,6BACjC,CACF,EACA,CAIJ,EAEM,EAAoC,CAsBxC,GAAI,EAAQ,eACR,CAAE,iBAAkB,EAAQ,cAAe,EAC3C,CAAE,eAAgB,CAAc,EACpC,UAAW,EAAqB,UAChC,aACE,IAAoB,YAAc,CAAC,EAAA,qBAAqB,EAAI,CAAC,EAC/D,oBACE,EAAkC,CAAoB,EACxD,eACE,OAAO,EAAqB,gBAAmB,SAC3C,EAAqB,eACrB,IACN,gBAAiB,GACjB,UAAW,GACX,GAAI,EAAQ,gBACR,CAAE,kBAAmB,EAAQ,eAAgB,EAC7C,CAAC,EACL,SAAU,EAAQ,UAAY,EAChC,EAII,CAAC,EAAQ,gBAAkB,IAC7B,EAAQ,KAAO,EAAG,GAAqB,CAAa,GAUpD,CAAC,EAAQ,gBACT,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,UAAU,KAE5D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGpC,IAAM,EACJ,EAAgC,CAAoB,EAClD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,cACvB,EAAQ,YAAc,EAAqB,aAG7C,IAAM,EAAsB,CAC1B,GAAK,EAAqB,uBAER,CAAC,CACrB,EAgBA,GAfA,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,4BACvB,OAAO,KAAK,CAAmB,EAAE,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAQ/C,EAAQ,eAAiB,EAAQ,cAAc,OAAS,EAAG,CAC7D,IAAM,EAAU,EAAA,yBAAyB,EACnC,EAAU,EAAU,EAAA,iBAAiB,CAAO,EAAI,CAAC,EAEjD,EAAwC,CAAC,EAC/C,IAAK,IAAM,KAAU,EAAQ,cAAe,CAC1C,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,IAAI,IAC5D,YAAa,EAAO,WACtB,EAEI,OAAO,KAAK,CAAO,EAAE,OAAS,IAChC,EAAa,QAAU,GAGzB,EAAQ,EAAO,MAAQ,CACzB,CAEA,EAAQ,QAAU,CACpB,CAEA,OAAO,CACT,CAEA,IAAa,GACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,GACN,CAAG,GAG5B,EAAC,MADgB,EAAA,QAAuB,gBAAgB,GAChD,UACV,MAAU,MAAM,EAAiC,CAErD,CAEA,eAAsB,GAAmD,EAWpC,CACnC,GAAM,CAAE,kBAAmB,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,uBAAA,CAAA,EAE3B,CAAC,EAAgB,EAAe,GACpC,MAAM,QAAQ,IAAI,CAChB,EAAA,QAAgB,2BAA2B,EAC3C,EAAe,WAAW,EAC1B,EAAgC,CAClC,CAAC,EAEG,CAAE,gBAAe,uBAAsB,oBAC3C,EAQF,OAJK,EAAQ,gBACX,MAAM,EAA4B,CAAa,EAG1C,EAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACA,qBACF,CAAC,CACH,CAEA,SAAgB,IAAuC,CACrD,MAAO,CAAE,MAAO,CAAC,CAAE,CACrB"}
+{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport { ServerClient } from \"@openhands/typescript-client/clients\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { AgentKind, Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport {\n  getCachedAgentServerInfo,\n  isAgentServerToolAvailable,\n} from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\nimport {\n  CANVAS_UI_CLIENT_TOOL,\n  CANVAS_UI_CLIENT_TOOL_NAME,\n  LEGACY_CANVAS_UI_TOOL_NAME,\n  type ClientToolSpec,\n} from \"./canvas-ui-client-tool\";\nimport {\n  LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL,\n  LAUNCH_CHILD_CONVERSATION_TOOL_NAME,\n} from \"./launch-child-conversation-client-tool\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    /**\n     * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the\n     * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the\n     * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag\n     * client-side and the server may not repopulate it. Read by {@link toAppConversation}.\n     */\n    acp_server?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n  launched_agent_profile?: {\n    agent_profile_id: string;\n    revision: number;\n  } | null;\n}\n\nconst DEFAULT_TOOL_NAMES = [\"terminal\", \"file_editor\", \"task_tracker\"];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info served by Agent Canvas backends in\n * `/server_info.runtime_services`. All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's reachable\n * from inside its sandbox without having to probe.\n */\nexport interface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\nexport function parseRuntimeServicesInfo(\n  value: unknown,\n): RuntimeServicesInfo | null {\n  if (typeof value === \"string\") {\n    const raw = value.trim();\n    if (!raw) return null;\n    try {\n      return parseRuntimeServicesInfo(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  }\n\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  const parsed = value as RuntimeServicesInfo;\n  if (!parsed.services || typeof parsed.services !== \"object\") return null;\n  return parsed;\n}\n\nexport async function fetchBackendRuntimeServicesInfo(): Promise<RuntimeServicesInfo | null> {\n  let clientOptions: ReturnType<typeof getAgentServerClientOptions>;\n  try {\n    clientOptions = getAgentServerClientOptions({ timeout: 3000 });\n  } catch {\n    return null;\n  }\n\n  const cached = parseRuntimeServicesInfo(\n    getCachedAgentServerInfo({ host: clientOptions.host })?.runtime_services,\n  );\n  if (cached) return cached;\n\n  try {\n    const serverInfo = await new ServerClient(clientOptions).getServerInfo();\n    return parseRuntimeServicesInfo(\n      (serverInfo as { runtime_services?: unknown }).runtime_services,\n    );\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is supplied.\n */\nexport function getDeploymentMode(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | null {\n  return runtimeServicesInfo?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is available, so callers can safely\n * omit the field when the selected backend does not advertise runtime services.\n */\nexport function buildRuntimeServicesSystemSuffix(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | undefined {\n  const info = parseRuntimeServicesInfo(runtimeServicesInfo);\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie. Fall back to the\n  // agent's own ``acp_server`` (#3692) when the tag is missing — a profile\n  // launch doesn't stamp the tag, so tag-only reads would drop the ACP model\n  // picker and degrade the chip to a generic \"ACP\" (#1571).\n  const acpServer = isAcp\n    ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? info.agent?.acp_server ?? null)\n    : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    tags: info.tags ?? null,\n    launched_agent_profile: info.launched_agent_profile ?? null,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : null,\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items.map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\n\nexport const AUTOMATION_TRIGGER_TAG_KEY = \"automationtrigger\";\nexport const AUTOMATION_ID_TAG_KEY = \"automationid\";\nexport const AUTOMATION_NAME_TAG_KEY = \"automationname\";\nexport const AUTOMATION_RUN_ID_TAG_KEY = \"automationrunid\";\n\n/**\n * Tag keys stamped on conversations created by automation runs (see the SDK's\n * `RemoteWorkspace.default_conversation_tags`). The presence of any of these\n * marks a conversation as automation-born.\n */\nexport const AUTOMATION_TAG_KEYS: readonly string[] = [\n  AUTOMATION_TRIGGER_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_NAME_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n];\n\n/**\n * Conversation tag keys that must not appear as generic chips / hovercard\n * rows. Each is either already surfaced by a first-class UI source or is\n * internal routing data:\n * - ``acpserver`` → ACP provider chip\n * - ``title`` → conversation card heading\n * - git / repo / branch / workspace stamps → repo-branch metadata + directory\n *   footer / hovercard rows (``selected_repository``, ``selected_branch``,\n *   ``git_provider``, ``workspace.working_dir``)\n * - ``automationid`` / ``automationrunid`` → raw UUIDs consumed by the\n *   conversation panel's automation filter (chip noise), while\n *   ``automationname`` / ``automationtrigger`` stay visible\n */\nexport const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string> = new Set([\n  ACP_SERVER_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n  \"title\",\n  \"git_provider\",\n  \"repo_name\",\n  \"repo\",\n  \"repository\",\n  \"selected_branch\",\n  \"branch\",\n  \"archiveworkspacepath\",\n  \"workspace\",\n  \"working_dir\",\n]);\n\n/**\n * High-signal tag keys shown first in the chip row (before A–Z). Automations\n * often stamp ``origin``; remaining free-form tags sort alphabetically.\n */\nexport const PRIORITY_CONVERSATION_TAG_KEYS: readonly string[] = [\"origin\"];\n\n/**\n * User-facing subset of a conversation's server-side tags: everything except\n * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries.\n * Priority keys come first (in {@link PRIORITY_CONVERSATION_TAG_KEYS} order);\n * the rest sort A–Z so chip order doesn't shuffle between refetches.\n */\nexport function getDisplayConversationTags(\n  tags: Record<string, string> | null | undefined,\n): Array<[string, string]> {\n  if (!tags) {\n    return [];\n  }\n  // Both the reserved-key check and the priority lookup must see the same\n  // normalized key: a cloud backend can stamp ``Origin`` / `` origin``, and\n  // ranking those off the raw key would silently drop them out of first place.\n  const priorityRank = (key: string): number => {\n    const index = PRIORITY_CONVERSATION_TAG_KEYS.indexOf(\n      key.trim().toLowerCase(),\n    );\n    return index === -1 ? Number.POSITIVE_INFINITY : index;\n  };\n\n  return Object.entries(tags)\n    .filter(\n      ([key, value]) =>\n        !RESERVED_CONVERSATION_TAG_KEYS.has(key.trim().toLowerCase()) &&\n        typeof value === \"string\" &&\n        value.trim().length > 0,\n    )\n    .sort(([a], [b]) => {\n      const aRank = priorityRank(a);\n      const bRank = priorityRank(b);\n      if (aRank !== bRank) {\n        return aRank - bRank;\n      }\n      return a.localeCompare(b);\n    });\n}\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedString(value: unknown): boolean {\n  if (typeof value === \"string\") {\n    return value.startsWith(FERNET_TOKEN_PREFIX);\n  }\n  if (Array.isArray(value)) {\n    return value.some(hasEncryptedString);\n  }\n  if (isPlainRecord(value)) {\n    return Object.values(value).some(hasEncryptedString);\n  }\n  return false;\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig).some(hasEncryptedString);\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(\n  agentSettings: SettingsRecord,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  disabledSkills: string[] = [],\n): SettingsRecord {\n  const runtimeServicesSuffix =\n    buildRuntimeServicesSystemSuffix(runtimeServicesInfo);\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const disabledSkillNames = new Set(disabledSkills);\n  const mergedSkills = [...existingSkills, ...buildBundledSkills()].filter(\n    (skill) =>\n      typeof skill.name !== \"string\" || !disabledSkillNames.has(skill.name),\n  );\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      settings.disabled_skills,\n    ),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a shared field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = toRecord(agentSettings.llm);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n    delete llm.base_url;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      settings.disabled_skills,\n    ),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings, runtimeServicesInfo)\n    : buildConfiguredOpenHandsAgentSettings(settings, runtimeServicesInfo);\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\ntype StartConversationPayload = Record<string, unknown> & {\n  // Omitted when launching via ``agent_profile_id`` — the two are mutually\n  // exclusive agent sources; the server resolves the profile server-side.\n  agent_settings?: AgentSettingsPayload;\n  agent_profile_id?: string;\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: true;\n  title_llm_profile?: string;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  parent_conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  client_tools: ClientToolSpec[];\n  tool_module_qualnames?: Record<string, string>;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  // Links the new conversation to an existing one as its child. The\n  // agent-server requires the parent to exist and to share this\n  // conversation's requested `workspace.working_dir` (software-agent-sdk\n  // #4188, agent-server >= 1.37.1); older servers ignore the field.\n  parentConversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: Array<{ name: string; description?: string }>;\n  // When set, the conversation launches from this AgentProfile (resolved\n  // server-side) instead of an inline ``agent_settings`` dump (#3727).\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n  runtimeServicesInfo?: RuntimeServicesInfo | null;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): StartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const launchAgentKind = options.agentProfileId\n    ? options.agentProfileKind\n    : acpMode\n      ? \"acp\"\n      : \"openhands\";\n  const agentSettings = buildConfiguredAgentSettings(\n    sourceAgentSettings,\n    options.runtimeServicesInfo,\n  );\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: StartConversationPayload = {\n    // ``agent_profile_id`` and ``agent_settings`` are mutually exclusive agent\n    // sources; the profile path lets the server resolve the profile (#3727).\n    //\n    // Enrichment boundary: on the profile path the server rebuilds the agent\n    // purely from the stored profile fields, so the client-owned enrichments\n    // this adapter folds into ``agent_settings`` do NOT apply. The exec toolset\n    // (terminal/file_editor/task_tracker) and public-skill loading are the\n    // server/SDK's responsibility to restore on the profile path — tracked in\n    // software-agent-sdk#3967 (profile resolution must attach the default\n    // toolset + public skills, else a profile-launched OpenHands agent has only\n    // Finish/Think). The dev ``RUNTIME_SERVICES`` system-message suffix remains\n    // agent-settings-only; the Canvas UI tool is a top-level client tool and\n    // therefore works on both inline-agent and profile launch paths.\n    //\n    // Persistent memory is NOT on that boundary: ``load_memory`` is a global\n    // user preference, so the agent-server stamps the stored\n    // ``agent_settings.agent_context.load_memory`` onto the profile-resolved\n    // agent the same way it already applies the global ``mcp_config``. The\n    // toggle therefore applies to both launch paths, and the client must not\n    // re-send it here (``agent_profile_id`` and ``agent_settings`` are\n    // mutually exclusive).\n    ...(options.agentProfileId\n      ? { agent_profile_id: options.agentProfileId }\n      : { agent_settings: agentSettings }),\n    workspace: conversationSettings.workspace,\n    // The agent-server caches each client tool's schema per tool *name* for the\n    // life of the process and rejects a re-registration with a different schema\n    // (`ClientToolSchemaConflictError`). Editing either schema below therefore\n    // requires restarting a long-running dev agent-server before new\n    // conversations can start.\n    client_tools:\n      launchAgentKind === \"openhands\"\n        ? [CANVAS_UI_CLIENT_TOOL, LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL]\n        : [],\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations:\n      typeof conversationSettings.max_iterations === \"number\"\n        ? conversationSettings.max_iterations\n        : 500,\n    stuck_detection: true,\n    autotitle: true,\n    ...(options.titleLlmProfile\n      ? { title_llm_profile: options.titleLlmProfile }\n      : {}),\n    worktree: options.worktree ?? true,\n  };\n\n  // A profile launch resolves the ACP server server-side, so don't stamp the\n  // tag from current settings (it may not match the launched profile).\n  if (!options.agentProfileId && acpServerTag) {\n    payload.tags = { [ACP_SERVER_TAG_KEY]: acpServerTag };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config secrets as Fernet tokens,\n  // and ACP forwards mcp_config directly to the subprocess.\n  if (\n    !options.agentProfileId &&\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  if (options.parentConversationId) {\n    payload.parent_conversation_id = options.parentConversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  }\n\n  const toolModuleQualnames = {\n    ...((conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {}),\n  };\n  delete toolModuleQualnames[LEGACY_CANVAS_UI_TOOL_NAME];\n  delete toolModuleQualnames[CANVAS_UI_CLIENT_TOOL_NAME];\n  delete toolModuleQualnames[LAUNCH_CHILD_CONVERSATION_TOOL_NAME];\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  // Every saved secret rides as a LookupSecret the agent-server resolves back\n  // from its own store at spawn time — ``request.secrets`` is the sole channel,\n  // uniform for ACP and non-ACP (agent-canvas#1039). For ACP the resolution\n  // runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the loopback\n  // fetch can't deadlock.\n  if (options.customSecrets && options.customSecrets.length > 0) {\n    const backend = getEffectiveLocalBackend();\n    const headers = backend ? buildAuthHeaders(backend) : {};\n\n    const secrets: Record<string, LookupSecret> = {};\n    for (const secret of options.customSecrets) {\n      const lookupSecret: LookupSecret = {\n        kind: \"LookupSecret\",\n        url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n        description: secret.description,\n      };\n\n      if (Object.keys(headers).length > 0) {\n        lookupSecret.headers = headers;\n      }\n\n      secrets[secret.name] = lookupSecret;\n    }\n\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  parentConversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n}): Promise<Record<string, unknown>> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets, runtimeServicesInfo] =\n    await Promise.all([\n      SettingsService.getSettingsForConversation(),\n      SecretsService.getSecrets(),\n      fetchBackendRuntimeServicesInfo(),\n    ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  // A profile launch resolves the LLM server-side, so the current-settings\n  // subscription check doesn't apply (and can't see the profile's LLM).\n  if (!options.agentProfileId) {\n    await assertSubscriptionAuthReady(agentSettings);\n  }\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n    runtimeServicesInfo,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"+pCAwGA,IAAM,GAAqB,CAAC,WAAY,cAAe,cAAc,EAC/D,EAAwB,mBACxB,EAAqB,gBAE3B,SAAS,GAAsB,CAC7B,MAAO,EACT,CAkCA,SAAgB,EACd,EAC4B,CAC5B,GAAI,OAAO,GAAU,SAAU,CAC7B,IAAM,EAAM,EAAM,KAAK,EACvB,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,EAAyB,KAAK,MAAM,CAAG,CAAC,CACjD,MAAQ,CACN,OAAO,IACT,CACF,CAEA,GAAI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EAC5D,OAAO,KAGT,IAAM,EAAS,EAEf,MADI,CAAC,EAAO,UAAY,OAAO,EAAO,UAAa,SAAiB,KAC7D,CACT,CAEA,eAAsB,GAAuE,CAC3F,IAAI,EACJ,GAAI,CACF,EAAgB,EAAA,4BAA4B,CAAE,QAAS,GAAK,CAAC,CAC/D,MAAQ,CACN,OAAO,IACT,CAEA,IAAM,EAAS,EACb,EAAA,yBAAyB,CAAE,KAAM,EAAc,IAAK,CAAC,GAAG,gBAC1D,EACA,GAAI,EAAQ,OAAO,EAEnB,GAAI,CAEF,OAAO,GACJ,MAFsB,IAAI,EAAA,aAAa,CAAa,EAAE,cAAc,GAEtB,gBACjD,CACF,MAAQ,CACN,OAAO,IACT,CACF,CAmBA,SAAgB,EACd,EACoB,CACpB,IAAM,EAAO,EAAyB,CAAmB,EACzD,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,CAAC,EACzB,EAAM,KAAK,oBAAoB,EAC3B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,QAC5E,EAEA,EAAM,KAAK,mDAAmD,EAEhE,EAAM,KACJ,2EACA,iEACA,EACF,EAEA,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,6CACrC,EAEE,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,mDAChC,EAEE,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,wBACjC,EAEE,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,kCACnC,EACI,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,UAAU,EAE9C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,aAAa,EAEjD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,EACtE,GAGF,EAAM,KACJ,kFACF,EAQF,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,2EACF,EACI,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,yDACF,EAEF,EAAM,KAAK,qBAAqB,EAEzB,EAAM,KAAK;CAAI,CACxB,CAEA,SAAgB,EAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,4BAA4B,EAC7C,MAAO,GAAG,EAAK,qBAAqB,GACtC,CAKA,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,CAAC,GAClD,CAEA,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,EAAE,EAKhD,EAAQ,EAAK,OAAO,OAAS,WAQ7B,EAAY,EACb,EAAK,MAAA,WAA8B,EAAK,OAAO,YAAc,KAC9D,KACJ,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,KAAK,EACpB,EAAK,MACL,EAA4B,EAAK,EAAE,EACvC,QAAS,KACT,UAAW,CAAC,EACZ,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EACZ,KAAM,EAAK,MAAQ,KACnB,uBAAwB,EAAK,wBAA0B,KAKvD,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,KAC3B,CAAC,EACA,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,CAC3D,EACA,IACN,EACA,KACJ,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,EAAkB,EAAK,EAAE,EAC3C,gBAAiB,EAAA,4BAA4B,EAAE,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,yBAAyB,CACvE,EACA,OAAQ,GACR,qBAAsB,CAAC,CACzB,CACF,CAEA,SAAgB,EAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MAAM,IAAI,CAAiB,EACvC,aAAc,EAAK,cAAgB,IACrC,CACF,CA+BA,IAAa,EAAqB,YAErB,GAA6B,oBAC7B,EAAwB,eACxB,EAA0B,iBAC1B,EAA4B,kBAO5B,EAAyC,CACpD,GACA,EACA,EACA,CACF,EAea,EAAsD,IAAI,IAAI,CACzE,EACA,EACA,EACA,QACA,eACA,YACA,OACA,aACA,kBACA,SACA,uBACA,YACA,aACF,CAAC,EAMY,EAAoD,CAAC,QAAQ,EAQ1E,SAAgB,EACd,EACyB,CACzB,GAAI,CAAC,EACH,MAAO,CAAC,EAKV,IAAM,EAAgB,GAAwB,CAC5C,IAAM,EAAQ,EAA+B,QAC3C,EAAI,KAAK,EAAE,YAAY,CACzB,EACA,OAAO,IAAU,GAAK,IAA2B,CACnD,EAEA,OAAO,OAAO,QAAQ,CAAI,EACvB,QACE,CAAC,EAAK,KACL,CAAC,EAA+B,IAAI,EAAI,KAAK,EAAE,YAAY,CAAC,GAC5D,OAAO,GAAU,UACjB,EAAM,KAAK,EAAE,OAAS,CAC1B,EACC,MAAM,CAAC,GAAI,CAAC,KAAO,CAClB,IAAM,EAAQ,EAAa,CAAC,EACtB,EAAQ,EAAa,CAAC,EAI5B,OAHI,IAAU,EAGP,EAAE,cAAc,CAAC,EAFf,EAAQ,CAGnB,CAAC,CACL,CAEA,IAAM,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,SACF,CAAC,EAED,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EACrD,CAAC,EAGH,gBAAgB,CAAuB,CAChD,CAEA,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,KAAK,EAC3B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,EACxC,CAEA,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAS,EAAmB,EAAyB,CAUnD,OATI,OAAO,GAAU,SACZ,EAAM,WAAW,CAAmB,EAEzC,MAAM,QAAQ,CAAK,EACd,EAAM,KAAK,CAAkB,EAElC,EAAc,CAAK,EACd,OAAO,OAAO,CAAK,EAAE,KAAK,CAAkB,EAE9C,EACT,CAEA,SAAS,EAAuB,EAA6B,CAK3D,OAJK,EAAc,CAAS,EAIrB,OAAO,OAAO,CAAS,EAAE,KAAK,CAAkB,EAH9C,EAIX,CAEA,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,EAAK,EAGnE,CAAE,KAAM,eAAgB,EAPtB,CAAE,KAAM,cAAe,CAQlC,CAEA,SAAS,EAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,qBAAsB,EACvC,IAAK,UACH,MAAO,CAAE,KAAM,yBAA0B,EAC3C,IAAK,cACH,MAAO,CAAE,KAAM,4BAA6B,EAC9C,QACE,MACJ,CACF,CAEA,SAAS,GACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,CAAK,GACpB,OAAQ,EAA6B,MAAS,QAElD,CAEA,SAAS,EAAkB,EAAc,EAA+B,CAYtE,OAXI,IAAS,EACJ,EAAoB,GAAK,EAAA,2BAA2B,CAAI,EAG7D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,CAAI,EAI5B,EACT,CAEA,SAAS,EAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,GACb,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAK,IAAM,IAAQ,CAAC,EAAuB,CAAkB,EACvD,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,CAAe,GAC7B,EAAgB,MAAO,GAAS,GAAa,CAAI,CAAC,MAE7C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,CAAa,GAC5C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,MAAM,CAC9B,CAAC,EAKP,OAAO,MAAM,KAAK,EAAM,OAAO,CAAC,CAClC,CAEA,SAAS,EACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,KAAK,EAAG,GAA0B,KAAK,CAAC,EAAE,OAC9D,OACF,EAKA,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;CAAM,CAAE,CAAC,EACpD,IAAK,EACP,CACF,CA2BA,SAAS,GAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,QAAS,EAC5C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,OAAQ,EAAI,CAAC,EAClD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,aAAc,EAAI,CAAC,CACtE,CACF,CAAC,CACH,CAEA,SAAS,EACP,EACA,EACA,EAA2B,CAAC,EACZ,CAChB,IAAM,EACJ,EAAiC,CAAmB,EAChD,EAAkB,EAAS,EAAc,aAAa,EAItD,EAAiB,MAAM,QAAQ,EAAgB,MAAM,EACtD,EAAgB,OACjB,CAAC,EACC,EAAqB,IAAI,IAAI,CAAc,EAC3C,EAAe,CAAC,GAAG,EAAgB,GAAG,EAAmB,CAAC,EAAE,OAC/D,GACC,OAAO,EAAM,MAAS,UAAY,CAAC,EAAmB,IAAI,EAAM,IAAI,CACxE,EAEA,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GACrB,GAAI,EACA,CAAE,sBAAuB,CAAsB,EAC/C,CAAC,CACP,CACF,CAEA,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,cACjC,EAAc,aAAe,KACtC,CAEA,SAAS,GAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,cAC1B,EAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,EACjE,CAEA,SAAS,GAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,CAAG,GAAK,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,EACmC,EACzC,OAAO,EAAW,CAAC,GAAG,EAAS,eAAe,EAAI,CACpD,CAEA,SAAS,GACP,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAgC,CACpC,WAAY,MACZ,cAAe,EACb,EACA,EACA,EAAS,eACX,CACF,EASA,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,GAAkB,CAAa,EAC/B,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,EAEnB,CAMA,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,OAAS,IAClC,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,CAAS,CACxD,CAAC,EAKD,OAJI,IACF,EAAQ,UAAY,GAGf,CACT,CAEA,SAAS,GACP,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAM,EAAS,EAAc,GAAG,EAEtC,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,KAAK,EAAE,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAIvB,EAAI,OAAS,GAEb,IAAM,EAAS,EAAsB,EAAI,OAAO,EAC5C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,QAAQ,EAC9C,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,CAAG,GAC7B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,QACX,OAAO,EAAI,WAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGb,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,SAAW,GACpC,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EACb,EACA,EACA,EAAS,eACX,EACA,MAAO,EAAc,CAAa,CACpC,CACF,CAEA,SAAS,GACP,EACA,EACsB,CACtB,OAAO,EAAW,CAAQ,EACtB,GAAgC,EAAU,CAAmB,EAC7D,GAAsC,EAAU,CAAmB,CACzE,CAEA,SAAS,EAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,qBAAqB,EAC9D,EAAiB,EAAoB,EAAO,CAAwB,EAwB1E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,EACvC,EAoBO,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,yBAAyB,CACtD,EACA,GAAI,EAAiB,CAAE,gBAAiB,CAAe,EAAI,CAAC,EAC5D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,GAAI,EAAI,CAAC,EACxC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,SAAU,EAAI,CAAC,CAC5D,EAAE,CACJ,EACA,CAAC,CAGA,CACT,CAyDA,SAAgB,GACd,EAC0B,CAC1B,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,sBAAuB,EACtE,EAAQ,SAEN,EAAU,EAAW,CAAmB,EACxC,EAAkB,EAAQ,eAC5B,EAAQ,iBACR,EACE,MACA,YACA,EAAgB,GACpB,EACA,EAAQ,mBACV,EACM,EAAe,EACjB,GAAgB,CAAmB,EACnC,IAAA,GAYE,EAAuB,EAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,6BACjC,CACF,EACA,CAIJ,EAEM,EAAoC,CAsBxC,GAAI,EAAQ,eACR,CAAE,iBAAkB,EAAQ,cAAe,EAC3C,CAAE,eAAgB,CAAc,EACpC,UAAW,EAAqB,UAMhC,aACE,IAAoB,YAChB,CAAC,EAAA,sBAAuB,EAAA,qCAAqC,EAC7D,CAAC,EACP,oBACE,EAAkC,CAAoB,EACxD,eACE,OAAO,EAAqB,gBAAmB,SAC3C,EAAqB,eACrB,IACN,gBAAiB,GACjB,UAAW,GACX,GAAI,EAAQ,gBACR,CAAE,kBAAmB,EAAQ,eAAgB,EAC7C,CAAC,EACL,SAAU,EAAQ,UAAY,EAChC,EAII,CAAC,EAAQ,gBAAkB,IAC7B,EAAQ,KAAO,EAAG,GAAqB,CAAa,GAUpD,CAAC,EAAQ,gBACT,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,UAAU,KAE5D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGhC,EAAQ,uBACV,EAAQ,uBAAyB,EAAQ,sBAG3C,IAAM,EACJ,EAAgC,CAAoB,EAClD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,cACvB,EAAQ,YAAc,EAAqB,aAG7C,IAAM,EAAsB,CAC1B,GAAK,EAAqB,uBAER,CAAC,CACrB,EAiBA,GAhBA,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,qCACvB,OAAO,KAAK,CAAmB,EAAE,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAQ/C,EAAQ,eAAiB,EAAQ,cAAc,OAAS,EAAG,CAC7D,IAAM,EAAU,EAAA,yBAAyB,EACnC,EAAU,EAAU,EAAA,iBAAiB,CAAO,EAAI,CAAC,EAEjD,EAAwC,CAAC,EAC/C,IAAK,IAAM,KAAU,EAAQ,cAAe,CAC1C,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,IAAI,IAC5D,YAAa,EAAO,WACtB,EAEI,OAAO,KAAK,CAAO,EAAE,OAAS,IAChC,EAAa,QAAU,GAGzB,EAAQ,EAAO,MAAQ,CACzB,CAEA,EAAQ,QAAU,CACpB,CAEA,OAAO,CACT,CAEA,IAAa,GACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,GACN,CAAG,GAG5B,EAAC,MADgB,EAAA,QAAuB,gBAAgB,GAChD,UACV,MAAU,MAAM,EAAiC,CAErD,CAEA,eAAsB,GAAmD,EAYpC,CACnC,GAAM,CAAE,kBAAmB,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,uBAAA,CAAA,EAE3B,CAAC,EAAgB,EAAe,GACpC,MAAM,QAAQ,IAAI,CAChB,EAAA,QAAgB,2BAA2B,EAC3C,EAAe,WAAW,EAC1B,EAAgC,CAClC,CAAC,EAEG,CAAE,gBAAe,uBAAsB,oBAC3C,EAQF,OAJK,EAAQ,gBACX,MAAM,EAA4B,CAAa,EAG1C,GAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACA,qBACF,CAAC,CACH,CAEA,SAAgB,IAAuC,CACrD,MAAO,CAAE,MAAO,CAAC,CAAE,CACrB"}

package/dist/api/agent-server-adapter.d.ts

@@ -142,16 +142,40 @@ interface InitialMessagePayload {
     run: true;
 }
 export declare const ACP_SERVER_TAG_KEY = "acpserver";
+export declare const AUTOMATION_TRIGGER_TAG_KEY = "automationtrigger";
+export declare const AUTOMATION_ID_TAG_KEY = "automationid";
+export declare const AUTOMATION_NAME_TAG_KEY = "automationname";
+export declare const AUTOMATION_RUN_ID_TAG_KEY = "automationrunid";
 /**
- * Conversation tag keys Canvas itself stamps/consumes for internal routing.
- * They are already surfaced through dedicated UI (the ACP provider chip), so
- * the generic tag-chip display filters them out.
+ * Tag keys stamped on conversations created by automation runs (see the SDK's
+ * `RemoteWorkspace.default_conversation_tags`). The presence of any of these
+ * marks a conversation as automation-born.
+ */
+export declare const AUTOMATION_TAG_KEYS: readonly string[];
+/**
+ * Conversation tag keys that must not appear as generic chips / hovercard
+ * rows. Each is either already surfaced by a first-class UI source or is
+ * internal routing data:
+ * - ``acpserver`` → ACP provider chip
+ * - ``title`` → conversation card heading
+ * - git / repo / branch / workspace stamps → repo-branch metadata + directory
+ *   footer / hovercard rows (``selected_repository``, ``selected_branch``,
+ *   ``git_provider``, ``workspace.working_dir``)
+ * - ``automationid`` / ``automationrunid`` → raw UUIDs consumed by the
+ *   conversation panel's automation filter (chip noise), while
+ *   ``automationname`` / ``automationtrigger`` stay visible
  */
 export declare const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string>;
+/**
+ * High-signal tag keys shown first in the chip row (before A–Z). Automations
+ * often stamp ``origin``; remaining free-form tags sort alphabetically.
+ */
+export declare const PRIORITY_CONVERSATION_TAG_KEYS: readonly string[];
 /**
  * User-facing subset of a conversation's server-side tags: everything except
- * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries
- * sorted by key so chip order doesn't shuffle between refetches.
+ * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries.
+ * Priority keys come first (in {@link PRIORITY_CONVERSATION_TAG_KEYS} order);
+ * the rest sort A–Z so chip order doesn't shuffle between refetches.
  */
 export declare function getDisplayConversationTags(tags: Record<string, string> | null | undefined): Array<[string, string]>;
 interface LookupSecret {
@@ -174,6 +198,7 @@ type StartConversationPayload = Record<string, unknown> & {
     worktree: boolean;
     secrets_encrypted?: true;
     conversation_id?: string;
+    parent_conversation_id?: string;
     secrets?: Record<string, LookupSecret>;
     tags?: Record<string, string>;
     client_tools: ClientToolSpec[];
@@ -185,6 +210,7 @@ export interface StartConversationOptions {
     conversationInstructions?: string;
     plugins?: PluginSpec[];
     conversationId?: string;
+    parentConversationId?: string;
     workingDir?: string;
     worktree?: boolean;
     encryptedAgentSettings?: Record<string, SettingsValue>;
@@ -214,6 +240,7 @@ export declare function buildStartConversationRequestWithEncryptedSettings(optio
     conversationInstructions?: string;
     plugins?: PluginSpec[];
     conversationId?: string;
+    parentConversationId?: string;
     workingDir?: string;
     worktree?: boolean;
     agentProfileId?: string;