@openhands/agent-canvas 1.14.0 → 1.16.0

package/dist/manifests/automation-interface.d.ts

@@ -1,48 +1,70 @@
 /**
  * The automation interface seam.
  *
- * Every automation-specific datum the host's surfaces render — routes,
- * navigation and page copy, the settable attributes, the import/export
- * envelope, endpoint paths, the featured and responder id lists — is served
- * from here.
- * The published interface manifest supplies it when the pinned
- * `@openhands/extensions` ships one and it passes admission; otherwise the
- * host's own defaults do, which reproduce today's behavior exactly. Copy
- * defaults are null, meaning "render the host's own translation".
+ * Every automation-specific datum the host's surfaces render — navigation and
+ * page copy, the settable attributes, the import/export envelope, endpoint
+ * paths, the featured and responder id lists, the sub-page surface — is served
+ * from the interface manifest the pinned `@openhands/extensions` publishes.
+ * The host holds none of it. When the package publishes no manifest, or the
+ * published one fails admission, there is nothing to serve: the nav entries do
+ * not render and the routes 404. `hasAutomationInterface()` is that gate, and
+ * every accessor that needs the manifest is reachable only from behind it.
  *
- * The sub-page surface (navigation, overview tiles, filters, sort, run
- * insights, templates page) is the exception: the host holds no definitions
- * of its own, so its accessors return null until an admitted manifest
- * declares it, and the sub-pages simply do not render.
+ * Routes are the exception, and they are not a definition: `src/routes.ts`
+ * mounts them, so the host states them here and admission checks a manifest's
+ * routes against them. That check is what keeps a published deep link
+ * resolving to the page it named.
  */
 import type { AutomationAttributeName, InterfaceDashboardFilter, InterfaceDashboardSort, InterfaceEndpointName, InterfaceIconSlug, InterfaceImportExport, InterfaceListInsights, InterfaceOverview, InterfaceSubPageId, InterfaceTemplatesPage } from "./types";
-export interface AttributeSpec {
-    present: boolean;
-    /** Null means "render the host's own translation". */
-    label: string | null;
-    help: string | null;
-    required: boolean;
-    min: number | null;
-    max: number | null;
-}
+/**
+ * File-format section for portable `.automation.json` export/import. A docs
+ * pointer for the host's import picker, not interface data — the manifest's
+ * `importExport` block has no docs field.
+ */
+export declare const AUTOMATION_FILE_FORMAT_DOCS_URL = "https://docs.openhands.dev/openhands/usage/agent-canvas/managing-automations#exported-file-format";
+/**
+ * Whether this deployment has an automation interface at all. The nav entries
+ * and the route loaders ask before rendering; nothing else has to.
+ */
+export declare function hasAutomationInterface(): boolean;
 export declare function automationListPath(): string;
 export declare function automationSetupPath(id: string): string;
 export declare function automationDetailPath(id: string): string;
 export declare function automationTemplatesPath(): string;
+/**
+ * Whether `path` (a location pathname) is inside the automation surface: the
+ * list route itself or anything nested under it (detail, setup, templates,
+ * git-sync). Prefix-safe: "/automations-foo" does not match.
+ */
+export declare function isAutomationsRoute(path: string): boolean;
+/**
+ * A declared endpoint path. Empty for one the manifest may omit - the two a
+ * bundle needs were added after the block shipped - so a caller that needs one
+ * says so rather than reading a host-held default that does not exist.
+ */
 export declare function getAutomationEndpoint(name: InterfaceEndpointName): string;
 /** An id-parameterized endpoint with `{id}` substituted, encoded. */
 export declare function getAutomationIdEndpoint(name: "detail" | "dispatch" | "runs" | "tarball", id: string): string;
 export interface InterfaceCopy {
-    sidebarLabel: string | null;
-    commandMenuTitle: string | null;
-    commandMenuDescription: string | null;
-    commandMenuKeywords: string | null;
-    listTitle: string | null;
-    listSubtitle: string | null;
-    detailBackLabel: string | null;
-    editTitle: string | null;
+    sidebarLabel: string;
+    commandMenuTitle: string;
+    commandMenuDescription: string;
+    commandMenuKeywords: string;
+    listTitle: string;
+    listSubtitle: string;
+    detailBackLabel: string;
+    editTitle: string;
 }
 export declare function getInterfaceCopy(): InterfaceCopy;
+export interface AttributeSpec {
+    present: boolean;
+    label: string;
+    /** Null when the manifest states no help text for the attribute. */
+    help: string | null;
+    required: boolean;
+    min: number | null;
+    max: number | null;
+}
 export declare function getAttributeSpec(name: AutomationAttributeName): AttributeSpec;
 export declare function getImportExportSpec(): InterfaceImportExport;
 export declare function getAutomationsDocsUrl(): string;
@@ -50,14 +72,14 @@ export declare function getFeaturedAutomationIds(): readonly string[];
 export declare function getResponderIntegrationIds(): readonly string[];
 export interface SubPageNavSpec {
     page: InterfaceSubPageId;
-    /** The page's route, resolved through the manifest. */
+    /** The page's route, resolved through the host's route table. */
     to: string;
     label: string;
     icon: InterfaceIconSlug;
 }
 /**
  * The sub-page navigation, or null when the manifest does not declare the
- * sub-page surface. No manifest, no sub-pages — there is no host default.
+ * sub-page surface.
  */
 export declare function getSubPagesSpec(): SubPageNavSpec[] | null;
 export interface DashboardSpec {

package/dist/manifests/automation-interface.js

@@ -7,76 +7,73 @@ var r = {
 	setup: "/automations/new/:automationId",
 	detail: "/automations/:automationId",
 	templates: "/automations/templates"
-}, i = {
-	list: "/v1",
-	detail: "/v1/{id}",
-	dispatch: "/v1/{id}/dispatch",
-	runs: "/v1/{id}/runs",
-	tarball: "/v1/{id}/tarball",
-	health: "/health",
-	capabilities: "/v1/capabilities",
-	validate: "/v1/validate",
-	createPrompt: "/v1/preset/prompt",
-	createPlugin: "/v1/preset/plugin"
-}, a = {
-	fileKind: "automation",
-	fileVersion: 1,
-	filenameSuffix: ".automation.json",
-	importDefaults: {
-		repoProvider: "github",
-		placeholderEventSource: "agent-canvas-import"
-	}
 };
-function o(e) {
+function i(e) {
 	return typeof e == "object" && !!e && !Array.isArray(e);
 }
-function s() {
-	return new Set(e.flatMap((e) => o(e) && typeof e.id == "string" ? [e.id] : []));
+function a() {
+	return new Set(e.flatMap((e) => i(e) && typeof e.id == "string" ? [e.id] : []));
 }
-function c(e) {
+function o(e) {
 	if (e === void 0) return null;
 	let n = t(e, {
-		catalogIds: s(),
+		catalogIds: a(),
 		mountedRoutes: r
 	});
 	return n.valid ? e : (console.warn("Rejected the automation interface manifest:", n.errors.join("; ")), null);
 }
-var l = c(n);
-function u() {
-	return (l?.routes ?? r).list;
-}
-function d(e) {
-	return (l?.endpoints ?? i)[e];
-}
-function f(e, t) {
-	return d(e).replace("{id}", encodeURIComponent(t));
-}
-var p = {
-	sidebarLabel: null,
-	commandMenuTitle: null,
-	commandMenuDescription: null,
-	commandMenuKeywords: null,
-	listTitle: null,
-	listSubtitle: null,
-	detailBackLabel: null,
-	editTitle: null
-};
-function m() {
-	return l ? {
-		sidebarLabel: l.navigation.sidebar.label,
-		commandMenuTitle: l.navigation.commandMenu.title,
-		commandMenuDescription: l.navigation.commandMenu.description,
-		commandMenuKeywords: l.navigation.commandMenu.keywords,
-		listTitle: l.pages.list.title,
-		listSubtitle: l.pages.list.subtitle,
-		detailBackLabel: l.pages.detail.backLabel,
-		editTitle: l.pages.edit.title
-	} : p;
-}
-function h() {
-	return l?.importExport ?? a;
+var s = o(n);
+function c() {
+	return s !== null;
+}
+function l() {
+	if (!s) throw Error("No automation interface manifest is admitted, so this surface should not have rendered.");
+	return s;
+}
+function u(e, t) {
+	return e.replace(":automationId", encodeURIComponent(t));
+}
+function d() {
+	return r.list;
+}
+function f(e) {
+	return u(r.setup, e);
+}
+function p(e) {
+	return e === r.list || e.startsWith(`${r.list}/`);
+}
+function m(e) {
+	return l().endpoints[e] ?? "";
+}
+function h(e, t) {
+	return m(e).replace("{id}", encodeURIComponent(t));
+}
+function g() {
+	let e = l();
+	return {
+		sidebarLabel: e.navigation.sidebar.label,
+		commandMenuTitle: e.navigation.commandMenu.title,
+		commandMenuDescription: e.navigation.commandMenu.description,
+		commandMenuKeywords: e.navigation.commandMenu.keywords,
+		listTitle: e.pages.list.title,
+		listSubtitle: e.pages.list.subtitle,
+		detailBackLabel: e.pages.detail.backLabel,
+		editTitle: e.pages.edit.title
+	};
+}
+function _() {
+	return l().importExport;
+}
+function v() {
+	return l().docsUrl;
+}
+function y() {
+	return l().featuredAutomationIds;
+}
+function b() {
+	return l().responderIntegrationIds;
 }
 //#endregion
-export { u as automationListPath, d as getAutomationEndpoint, f as getAutomationIdEndpoint, h as getImportExportSpec, m as getInterfaceCopy };
+export { d as automationListPath, f as automationSetupPath, m as getAutomationEndpoint, h as getAutomationIdEndpoint, v as getAutomationsDocsUrl, y as getFeaturedAutomationIds, _ as getImportExportSpec, g as getInterfaceCopy, b as getResponderIntegrationIds, c as hasAutomationInterface, p as isAutomationsRoute };
 
 //# sourceMappingURL=automation-interface.js.map

package/dist/manifests/automation-interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"automation-interface.js","names":[],"sources":["../../src/manifests/automation-interface.ts"],"sourcesContent":["/**\n * The automation interface seam.\n *\n * Every automation-specific datum the host's surfaces render — routes,\n * navigation and page copy, the settable attributes, the import/export\n * envelope, endpoint paths, the featured and responder id lists — is served\n * from here.\n * The published interface manifest supplies it when the pinned\n * `@openhands/extensions` ships one and it passes admission; otherwise the\n * host's own defaults do, which reproduce today's behavior exactly. Copy\n * defaults are null, meaning \"render the host's own translation\".\n *\n * The sub-page surface (navigation, overview tiles, filters, sort, run\n * insights, templates page) is the exception: the host holds no definitions\n * of its own, so its accessors return null until an admitted manifest\n * declares it, and the sub-pages simply do not render.\n */\n\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { validateInterfaceManifest } from \"./interface-validation\";\nimport { AUTOMATION_INTERFACE_CANDIDATE } from \"./manifest-sources\";\nimport type {\n  AutomationAttributeName,\n  InterfaceDashboardFilter,\n  InterfaceDashboardSort,\n  InterfaceEndpointName,\n  InterfaceIconSlug,\n  InterfaceImportExport,\n  InterfaceListInsights,\n  InterfaceManifest,\n  InterfaceOverview,\n  InterfaceRoutes,\n  InterfaceSubPageId,\n  InterfaceTemplatesPage,\n} from \"./types\";\n\n/** The routes this host has registrations for, in `src/routes.ts`. */\nconst MOUNTED_ROUTES = {\n  list: \"/automations\",\n  setup: \"/automations/new/:automationId\",\n  detail: \"/automations/:automationId\",\n  templates: \"/automations/templates\",\n} satisfies InterfaceRoutes;\n\nconst DEFAULT_ENDPOINTS: InterfaceManifest[\"endpoints\"] = {\n  list: \"/v1\",\n  detail: \"/v1/{id}\",\n  dispatch: \"/v1/{id}/dispatch\",\n  runs: \"/v1/{id}/runs\",\n  tarball: \"/v1/{id}/tarball\",\n  health: \"/health\",\n  capabilities: \"/v1/capabilities\",\n  validate: \"/v1/validate\",\n  createPrompt: \"/v1/preset/prompt\",\n  createPlugin: \"/v1/preset/plugin\",\n};\n\nconst DEFAULT_IMPORT_EXPORT: InterfaceImportExport = {\n  fileKind: \"automation\",\n  fileVersion: 1,\n  filenameSuffix: \".automation.json\",\n  importDefaults: {\n    repoProvider: \"github\",\n    placeholderEventSource: \"agent-canvas-import\",\n  },\n};\n\nconst DEFAULT_DOCS_URL =\n  \"https://docs.openhands.dev/openhands/usage/automations/overview\";\n\n/**\n * Proven automations featured above the Beta group. NOT derived from\n * popularityRank (slack-standup-digest@94 outranks slack-channel-monitor@92\n * yet is Beta).\n */\nconst DEFAULT_FEATURED_AUTOMATION_IDS: readonly string[] = [\n  \"github-pr-reviewer\",\n  \"github-repo-monitor\",\n  \"slack-channel-monitor\",\n];\n\n/**\n * Integrations whose automations are treated as event responders that poll\n * continuously, and so get the deployment-choice dialog.\n */\nconst DEFAULT_RESPONDER_INTEGRATION_IDS: readonly string[] = [\n  \"github\",\n  \"slack\",\n];\n\nexport interface AttributeSpec {\n  present: boolean;\n  /** Null means \"render the host's own translation\". */\n  label: string | null;\n  help: string | null;\n  required: boolean;\n  min: number | null;\n  max: number | null;\n}\n\nconst ABSENT_ATTRIBUTE: AttributeSpec = {\n  present: false,\n  label: null,\n  help: null,\n  required: false,\n  min: null,\n  max: null,\n};\n\n/** Today's edit dialog, restated as specs so absence of a manifest changes nothing. */\nconst DEFAULT_ATTRIBUTES: Record<AutomationAttributeName, AttributeSpec> = {\n  name: {\n    present: true,\n    label: null,\n    help: null,\n    required: true,\n    min: null,\n    max: null,\n  },\n  prompt: {\n    present: true,\n    label: null,\n    help: null,\n    required: false,\n    min: null,\n    max: null,\n  },\n  model: {\n    present: true,\n    label: null,\n    help: null,\n    required: false,\n    min: null,\n    max: null,\n  },\n  timeout: {\n    present: true,\n    label: null,\n    help: null,\n    required: false,\n    min: 1,\n    max: null,\n  },\n  schedule: {\n    present: true,\n    label: null,\n    help: null,\n    required: false,\n    min: null,\n    max: null,\n  },\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction getCatalogIds(): ReadonlySet<string> {\n  return new Set(\n    (AUTOMATION_CATALOG as readonly unknown[]).flatMap((entry) =>\n      isRecord(entry) && typeof entry.id === \"string\" ? [entry.id] : [],\n    ),\n  );\n}\n\nfunction admitInterfaceManifest(candidate: unknown): InterfaceManifest | null {\n  if (candidate === undefined) return null;\n\n  const result = validateInterfaceManifest(candidate, {\n    catalogIds: getCatalogIds(),\n    mountedRoutes: MOUNTED_ROUTES,\n  });\n  if (!result.valid) {\n    // Mirrors the setup registry: a rejected manifest is skipped loudly, and\n    // the host's defaults stand.\n    console.warn(\n      \"Rejected the automation interface manifest:\",\n      result.errors.join(\"; \"),\n    );\n    return null;\n  }\n  return candidate as InterfaceManifest;\n}\n\nconst ADMITTED = admitInterfaceManifest(AUTOMATION_INTERFACE_CANDIDATE);\n\nfunction substituteRouteParam(pattern: string, id: string): string {\n  return pattern.replace(\":automationId\", encodeURIComponent(id));\n}\n\nexport function automationListPath(): string {\n  return (ADMITTED?.routes ?? MOUNTED_ROUTES).list;\n}\n\nexport function automationSetupPath(id: string): string {\n  return substituteRouteParam((ADMITTED?.routes ?? MOUNTED_ROUTES).setup, id);\n}\n\nexport function automationDetailPath(id: string): string {\n  return substituteRouteParam((ADMITTED?.routes ?? MOUNTED_ROUTES).detail, id);\n}\n\nexport function automationTemplatesPath(): string {\n  return ADMITTED?.routes.templates ?? MOUNTED_ROUTES.templates;\n}\n\nexport function getAutomationEndpoint(name: InterfaceEndpointName): string {\n  return (ADMITTED?.endpoints ?? DEFAULT_ENDPOINTS)[name];\n}\n\n/** An id-parameterized endpoint with `{id}` substituted, encoded. */\nexport function getAutomationIdEndpoint(\n  name: \"detail\" | \"dispatch\" | \"runs\" | \"tarball\",\n  id: string,\n): string {\n  return getAutomationEndpoint(name).replace(\"{id}\", encodeURIComponent(id));\n}\n\nexport interface InterfaceCopy {\n  sidebarLabel: string | null;\n  commandMenuTitle: string | null;\n  commandMenuDescription: string | null;\n  commandMenuKeywords: string | null;\n  listTitle: string | null;\n  listSubtitle: string | null;\n  detailBackLabel: string | null;\n  editTitle: string | null;\n}\n\nconst HOST_COPY: InterfaceCopy = {\n  sidebarLabel: null,\n  commandMenuTitle: null,\n  commandMenuDescription: null,\n  commandMenuKeywords: null,\n  listTitle: null,\n  listSubtitle: null,\n  detailBackLabel: null,\n  editTitle: null,\n};\n\nexport function getInterfaceCopy(): InterfaceCopy {\n  if (!ADMITTED) return HOST_COPY;\n  return {\n    sidebarLabel: ADMITTED.navigation.sidebar.label,\n    commandMenuTitle: ADMITTED.navigation.commandMenu.title,\n    commandMenuDescription: ADMITTED.navigation.commandMenu.description,\n    commandMenuKeywords: ADMITTED.navigation.commandMenu.keywords,\n    listTitle: ADMITTED.pages.list.title,\n    listSubtitle: ADMITTED.pages.list.subtitle,\n    detailBackLabel: ADMITTED.pages.detail.backLabel,\n    editTitle: ADMITTED.pages.edit.title,\n  };\n}\n\nexport function getAttributeSpec(name: AutomationAttributeName): AttributeSpec {\n  if (!ADMITTED) return DEFAULT_ATTRIBUTES[name];\n\n  const attribute = ADMITTED.attributes[name];\n  if (!attribute) return ABSENT_ATTRIBUTE;\n  return {\n    present: true,\n    label: attribute.label,\n    help: attribute.help ?? null,\n    required: attribute.required,\n    min: attribute.constraints?.min ?? null,\n    max: attribute.constraints?.max ?? null,\n  };\n}\n\nexport function getImportExportSpec(): InterfaceImportExport {\n  return ADMITTED?.importExport ?? DEFAULT_IMPORT_EXPORT;\n}\n\nexport function getAutomationsDocsUrl(): string {\n  return ADMITTED?.docsUrl ?? DEFAULT_DOCS_URL;\n}\n\nexport function getFeaturedAutomationIds(): readonly string[] {\n  return ADMITTED?.featuredAutomationIds ?? DEFAULT_FEATURED_AUTOMATION_IDS;\n}\n\nexport function getResponderIntegrationIds(): readonly string[] {\n  return ADMITTED?.responderIntegrationIds ?? DEFAULT_RESPONDER_INTEGRATION_IDS;\n}\n\nexport interface SubPageNavSpec {\n  page: InterfaceSubPageId;\n  /** The page's route, resolved through the manifest. */\n  to: string;\n  label: string;\n  icon: InterfaceIconSlug;\n}\n\n/**\n * The sub-page navigation, or null when the manifest does not declare the\n * sub-page surface. No manifest, no sub-pages — there is no host default.\n */\nexport function getSubPagesSpec(): SubPageNavSpec[] | null {\n  const subPages = ADMITTED?.navigation.subPages;\n  if (!subPages) return null;\n  return subPages.map((item) => ({\n    page: item.page,\n    to:\n      item.page === \"templates\"\n        ? automationTemplatesPath()\n        : automationListPath(),\n    label: item.label,\n    icon: item.icon,\n  }));\n}\n\nexport interface DashboardSpec {\n  overview: InterfaceOverview;\n  filters: InterfaceDashboardFilter[];\n  sort: InterfaceDashboardSort;\n  insights: InterfaceListInsights;\n}\n\n/**\n * The list page's dashboard composition, or null when the manifest does not\n * declare it. Admission accepts the sub-page surface whole or not at all, so\n * these four are present together.\n */\nexport function getDashboardSpec(): DashboardSpec | null {\n  const list = ADMITTED?.pages.list;\n  if (!list?.overview || !list.filters || !list.sort || !list.insights) {\n    return null;\n  }\n  return {\n    overview: list.overview,\n    filters: list.filters,\n    sort: list.sort,\n    insights: list.insights,\n  };\n}\n\n/** The templates page identity, or null when the manifest does not declare it. */\nexport function getTemplatesPageSpec(): InterfaceTemplatesPage | null {\n  return ADMITTED?.pages.templates ?? null;\n}\n"],"mappings":";;;;AAqCA,IAAM,IAAiB;CACrB,MAAM;CACN,OAAO;CACP,QAAQ;CACR,WAAW;AACb,GAEM,IAAoD;CACxD,MAAM;CACN,QAAQ;CACR,UAAU;CACV,MAAM;CACN,SAAS;CACT,QAAQ;CACR,cAAc;CACd,UAAU;CACV,cAAc;CACd,cAAc;AAChB,GAEM,IAA+C;CACnD,UAAU;CACV,aAAa;CACb,gBAAgB;CAChB,gBAAgB;EACd,cAAc;EACd,wBAAwB;CAC1B;AACF;AAwFA,SAAS,EAAS,GAAkD;CAClE,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,SAAS,IAAqC;CAC5C,OAAO,IAAI,IACR,EAA0C,SAAS,MAClD,EAAS,CAAK,KAAK,OAAO,EAAM,MAAO,WAAW,CAAC,EAAM,EAAE,IAAI,CAAC,CAClE,CACF;AACF;AAEA,SAAS,EAAuB,GAA8C;CAC5E,IAAI,MAAc,KAAA,GAAW,OAAO;CAEpC,IAAM,IAAS,EAA0B,GAAW;EAClD,YAAY,EAAc;EAC1B,eAAe;CACjB,CAAC;CAUD,OATK,EAAO,QASL,KANL,QAAQ,KACN,+CACA,EAAO,OAAO,KAAK,IAAI,CACzB,GACO;AAGX;AAEA,IAAM,IAAW,EAAuB,CAA8B;AAMtE,SAAgB,IAA6B;CAC3C,QAAQ,GAAU,UAAU,GAAgB;AAC9C;AAcA,SAAgB,EAAsB,GAAqC;CACzE,QAAQ,GAAU,aAAa,GAAmB;AACpD;AAGA,SAAgB,EACd,GACA,GACQ;CACR,OAAO,EAAsB,CAAI,EAAE,QAAQ,QAAQ,mBAAmB,CAAE,CAAC;AAC3E;AAaA,IAAM,IAA2B;CAC/B,cAAc;CACd,kBAAkB;CAClB,wBAAwB;CACxB,qBAAqB;CACrB,WAAW;CACX,cAAc;CACd,iBAAiB;CACjB,WAAW;AACb;AAEA,SAAgB,IAAkC;CAEhD,OADK,IACE;EACL,cAAc,EAAS,WAAW,QAAQ;EAC1C,kBAAkB,EAAS,WAAW,YAAY;EAClD,wBAAwB,EAAS,WAAW,YAAY;EACxD,qBAAqB,EAAS,WAAW,YAAY;EACrD,WAAW,EAAS,MAAM,KAAK;EAC/B,cAAc,EAAS,MAAM,KAAK;EAClC,iBAAiB,EAAS,MAAM,OAAO;EACvC,WAAW,EAAS,MAAM,KAAK;CACjC,IAVsB;AAWxB;AAiBA,SAAgB,IAA6C;CAC3D,OAAO,GAAU,gBAAgB;AACnC"}
+{"version":3,"file":"automation-interface.js","names":[],"sources":["../../src/manifests/automation-interface.ts"],"sourcesContent":["/**\n * The automation interface seam.\n *\n * Every automation-specific datum the host's surfaces render — navigation and\n * page copy, the settable attributes, the import/export envelope, endpoint\n * paths, the featured and responder id lists, the sub-page surface — is served\n * from the interface manifest the pinned `@openhands/extensions` publishes.\n * The host holds none of it. When the package publishes no manifest, or the\n * published one fails admission, there is nothing to serve: the nav entries do\n * not render and the routes 404. `hasAutomationInterface()` is that gate, and\n * every accessor that needs the manifest is reachable only from behind it.\n *\n * Routes are the exception, and they are not a definition: `src/routes.ts`\n * mounts them, so the host states them here and admission checks a manifest's\n * routes against them. That check is what keeps a published deep link\n * resolving to the page it named.\n */\n\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { validateInterfaceManifest } from \"./interface-validation\";\nimport { AUTOMATION_INTERFACE_CANDIDATE } from \"./manifest-sources\";\nimport type {\n  AutomationAttributeName,\n  InterfaceDashboardFilter,\n  InterfaceDashboardSort,\n  InterfaceEndpointName,\n  InterfaceIconSlug,\n  InterfaceImportExport,\n  InterfaceListInsights,\n  InterfaceManifest,\n  InterfaceOverview,\n  InterfaceRoutes,\n  InterfaceSubPageId,\n  InterfaceTemplatesPage,\n} from \"./types\";\n\n/** The routes this host has registrations for, in `src/routes.ts`. */\nconst MOUNTED_ROUTES = {\n  list: \"/automations\",\n  setup: \"/automations/new/:automationId\",\n  detail: \"/automations/:automationId\",\n  templates: \"/automations/templates\",\n} satisfies InterfaceRoutes;\n\n/**\n * File-format section for portable `.automation.json` export/import. A docs\n * pointer for the host's import picker, not interface data — the manifest's\n * `importExport` block has no docs field.\n */\nexport const AUTOMATION_FILE_FORMAT_DOCS_URL =\n  \"https://docs.openhands.dev/openhands/usage/agent-canvas/managing-automations#exported-file-format\";\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction getCatalogIds(): ReadonlySet<string> {\n  return new Set(\n    (AUTOMATION_CATALOG as readonly unknown[]).flatMap((entry) =>\n      isRecord(entry) && typeof entry.id === \"string\" ? [entry.id] : [],\n    ),\n  );\n}\n\nfunction admitInterfaceManifest(candidate: unknown): InterfaceManifest | null {\n  if (candidate === undefined) return null;\n\n  const result = validateInterfaceManifest(candidate, {\n    catalogIds: getCatalogIds(),\n    mountedRoutes: MOUNTED_ROUTES,\n  });\n  if (!result.valid) {\n    // Mirrors the setup registry: a rejected manifest is skipped loudly, and\n    // the surfaces it would have described stay unrendered.\n    console.warn(\n      \"Rejected the automation interface manifest:\",\n      result.errors.join(\"; \"),\n    );\n    return null;\n  }\n  return candidate as InterfaceManifest;\n}\n\nconst ADMITTED = admitInterfaceManifest(AUTOMATION_INTERFACE_CANDIDATE);\n\n/**\n * Whether this deployment has an automation interface at all. The nav entries\n * and the route loaders ask before rendering; nothing else has to.\n */\nexport function hasAutomationInterface(): boolean {\n  return ADMITTED !== null;\n}\n\n/**\n * The admitted manifest, for the accessors that cannot answer without one.\n * Reaching one of those without a manifest means a surface rendered past its\n * gate — a wiring mistake, not a state to render.\n */\nfunction requireInterface(): InterfaceManifest {\n  if (!ADMITTED) {\n    throw new Error(\n      \"No automation interface manifest is admitted, so this surface should not have rendered.\",\n    );\n  }\n  return ADMITTED;\n}\n\nfunction substituteRouteParam(pattern: string, id: string): string {\n  return pattern.replace(\":automationId\", encodeURIComponent(id));\n}\n\nexport function automationListPath(): string {\n  return MOUNTED_ROUTES.list;\n}\n\nexport function automationSetupPath(id: string): string {\n  return substituteRouteParam(MOUNTED_ROUTES.setup, id);\n}\n\nexport function automationDetailPath(id: string): string {\n  return substituteRouteParam(MOUNTED_ROUTES.detail, id);\n}\n\nexport function automationTemplatesPath(): string {\n  return MOUNTED_ROUTES.templates;\n}\n\n/**\n * Whether `path` (a location pathname) is inside the automation surface: the\n * list route itself or anything nested under it (detail, setup, templates,\n * git-sync). Prefix-safe: \"/automations-foo\" does not match.\n */\nexport function isAutomationsRoute(path: string): boolean {\n  return (\n    path === MOUNTED_ROUTES.list || path.startsWith(`${MOUNTED_ROUTES.list}/`)\n  );\n}\n\n/**\n * A declared endpoint path. Empty for one the manifest may omit - the two a\n * bundle needs were added after the block shipped - so a caller that needs one\n * says so rather than reading a host-held default that does not exist.\n */\nexport function getAutomationEndpoint(name: InterfaceEndpointName): string {\n  return requireInterface().endpoints[name] ?? \"\";\n}\n\n/** An id-parameterized endpoint with `{id}` substituted, encoded. */\nexport function getAutomationIdEndpoint(\n  name: \"detail\" | \"dispatch\" | \"runs\" | \"tarball\",\n  id: string,\n): string {\n  return getAutomationEndpoint(name).replace(\"{id}\", encodeURIComponent(id));\n}\n\nexport interface InterfaceCopy {\n  sidebarLabel: string;\n  commandMenuTitle: string;\n  commandMenuDescription: string;\n  commandMenuKeywords: string;\n  listTitle: string;\n  listSubtitle: string;\n  detailBackLabel: string;\n  editTitle: string;\n}\n\nexport function getInterfaceCopy(): InterfaceCopy {\n  const manifest = requireInterface();\n  return {\n    sidebarLabel: manifest.navigation.sidebar.label,\n    commandMenuTitle: manifest.navigation.commandMenu.title,\n    commandMenuDescription: manifest.navigation.commandMenu.description,\n    commandMenuKeywords: manifest.navigation.commandMenu.keywords,\n    listTitle: manifest.pages.list.title,\n    listSubtitle: manifest.pages.list.subtitle,\n    detailBackLabel: manifest.pages.detail.backLabel,\n    editTitle: manifest.pages.edit.title,\n  };\n}\n\nexport interface AttributeSpec {\n  present: boolean;\n  label: string;\n  /** Null when the manifest states no help text for the attribute. */\n  help: string | null;\n  required: boolean;\n  min: number | null;\n  max: number | null;\n}\n\n/** An attribute the manifest does not declare is not offered at all. */\nconst ABSENT_ATTRIBUTE: AttributeSpec = {\n  present: false,\n  label: \"\",\n  help: null,\n  required: false,\n  min: null,\n  max: null,\n};\n\nexport function getAttributeSpec(name: AutomationAttributeName): AttributeSpec {\n  const attribute = requireInterface().attributes[name];\n  if (!attribute) return ABSENT_ATTRIBUTE;\n  return {\n    present: true,\n    label: attribute.label,\n    help: attribute.help ?? null,\n    required: attribute.required,\n    min: attribute.constraints?.min ?? null,\n    max: attribute.constraints?.max ?? null,\n  };\n}\n\nexport function getImportExportSpec(): InterfaceImportExport {\n  return requireInterface().importExport;\n}\n\nexport function getAutomationsDocsUrl(): string {\n  return requireInterface().docsUrl;\n}\n\nexport function getFeaturedAutomationIds(): readonly string[] {\n  return requireInterface().featuredAutomationIds;\n}\n\nexport function getResponderIntegrationIds(): readonly string[] {\n  return requireInterface().responderIntegrationIds;\n}\n\nexport interface SubPageNavSpec {\n  page: InterfaceSubPageId;\n  /** The page's route, resolved through the host's route table. */\n  to: string;\n  label: string;\n  icon: InterfaceIconSlug;\n}\n\n/**\n * The sub-page navigation, or null when the manifest does not declare the\n * sub-page surface.\n */\nexport function getSubPagesSpec(): SubPageNavSpec[] | null {\n  const subPages = ADMITTED?.navigation.subPages;\n  if (!subPages) return null;\n  return subPages.map((item) => ({\n    page: item.page,\n    to:\n      item.page === \"templates\"\n        ? automationTemplatesPath()\n        : automationListPath(),\n    label: item.label,\n    icon: item.icon,\n  }));\n}\n\nexport interface DashboardSpec {\n  overview: InterfaceOverview;\n  filters: InterfaceDashboardFilter[];\n  sort: InterfaceDashboardSort;\n  insights: InterfaceListInsights;\n}\n\n/**\n * The list page's dashboard composition, or null when the manifest does not\n * declare it. Admission accepts the sub-page surface whole or not at all, so\n * these four are present together.\n */\nexport function getDashboardSpec(): DashboardSpec | null {\n  const list = ADMITTED?.pages.list;\n  if (!list?.overview || !list.filters || !list.sort || !list.insights) {\n    return null;\n  }\n  return {\n    overview: list.overview,\n    filters: list.filters,\n    sort: list.sort,\n    insights: list.insights,\n  };\n}\n\n/** The templates page identity, or null when the manifest does not declare it. */\nexport function getTemplatesPageSpec(): InterfaceTemplatesPage | null {\n  return ADMITTED?.pages.templates ?? null;\n}\n"],"mappings":";;;;AAqCA,IAAM,IAAiB;CACrB,MAAM;CACN,OAAO;CACP,QAAQ;CACR,WAAW;AACb;AAUA,SAAS,EAAS,GAAkD;CAClE,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,SAAS,IAAqC;CAC5C,OAAO,IAAI,IACR,EAA0C,SAAS,MAClD,EAAS,CAAK,KAAK,OAAO,EAAM,MAAO,WAAW,CAAC,EAAM,EAAE,IAAI,CAAC,CAClE,CACF;AACF;AAEA,SAAS,EAAuB,GAA8C;CAC5E,IAAI,MAAc,KAAA,GAAW,OAAO;CAEpC,IAAM,IAAS,EAA0B,GAAW;EAClD,YAAY,EAAc;EAC1B,eAAe;CACjB,CAAC;CAUD,OATK,EAAO,QASL,KANL,QAAQ,KACN,+CACA,EAAO,OAAO,KAAK,IAAI,CACzB,GACO;AAGX;AAEA,IAAM,IAAW,EAAuB,CAA8B;AAMtE,SAAgB,IAAkC;CAChD,OAAO,MAAa;AACtB;AAOA,SAAS,IAAsC;CAC7C,IAAI,CAAC,GACH,MAAU,MACR,yFACF;CAEF,OAAO;AACT;AAEA,SAAS,EAAqB,GAAiB,GAAoB;CACjE,OAAO,EAAQ,QAAQ,iBAAiB,mBAAmB,CAAE,CAAC;AAChE;AAEA,SAAgB,IAA6B;CAC3C,OAAO,EAAe;AACxB;AAEA,SAAgB,EAAoB,GAAoB;CACtD,OAAO,EAAqB,EAAe,OAAO,CAAE;AACtD;AAeA,SAAgB,EAAmB,GAAuB;CACxD,OACE,MAAS,EAAe,QAAQ,EAAK,WAAW,GAAG,EAAe,KAAK,EAAE;AAE7E;AAOA,SAAgB,EAAsB,GAAqC;CACzE,OAAO,EAAiB,EAAE,UAAU,MAAS;AAC/C;AAGA,SAAgB,EACd,GACA,GACQ;CACR,OAAO,EAAsB,CAAI,EAAE,QAAQ,QAAQ,mBAAmB,CAAE,CAAC;AAC3E;AAaA,SAAgB,IAAkC;CAChD,IAAM,IAAW,EAAiB;CAClC,OAAO;EACL,cAAc,EAAS,WAAW,QAAQ;EAC1C,kBAAkB,EAAS,WAAW,YAAY;EAClD,wBAAwB,EAAS,WAAW,YAAY;EACxD,qBAAqB,EAAS,WAAW,YAAY;EACrD,WAAW,EAAS,MAAM,KAAK;EAC/B,cAAc,EAAS,MAAM,KAAK;EAClC,iBAAiB,EAAS,MAAM,OAAO;EACvC,WAAW,EAAS,MAAM,KAAK;CACjC;AACF;AAmCA,SAAgB,IAA6C;CAC3D,OAAO,EAAiB,EAAE;AAC5B;AAEA,SAAgB,IAAgC;CAC9C,OAAO,EAAiB,EAAE;AAC5B;AAEA,SAAgB,IAA8C;CAC5D,OAAO,EAAiB,EAAE;AAC5B;AAEA,SAAgB,IAAgD;CAC9D,OAAO,EAAiB,EAAE;AAC5B"}

package/dist/manifests/automation-setup.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs"),require("../utils/automation-catalog.cjs");var e=require("./automation-interface.cjs").getAutomationEndpoint(`createPrompt`);exports.AUTOMATION_CREATE_ENDPOINT=e;
+require("../_virtual/_rolldown/runtime.cjs"),require("../i18n/index.cjs"),require("../utils/automation-catalog.cjs");const e=require("./automation-interface.cjs");function t(t){return t&&i(t)?r(`createBundle`):e.getAutomationEndpoint(`createPrompt`)}function n(){return r(`uploads`)}function r(t){let n=e.getAutomationEndpoint(t);if(!n)throw Error(`The published automation interface declares no '${t}' endpoint, so this deployment cannot create an automation from a script bundle.`);return n}function i(e){return e.setup.mode===`direct`&&e.setup.bundle!==void 0}exports.automationCreateEndpoint=t,exports.automationUploadEndpoint=n;
 //# sourceMappingURL=automation-setup.cjs.map

package/dist/manifests/automation-setup.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"automation-setup.cjs","names":[],"sources":["../../src/manifests/automation-setup.ts"],"sourcesContent":["/**\n * The only module that knows a setup entry configures an *automation*.\n *\n * The published contract states just what varies between entries; everything\n * derivable is the host's to generate. That derivation is here, and nowhere\n * else, so the rest of `src/manifests/` stays about forms rather than about\n * automations.\n *\n * The algorithm mirrors `tests/test_automation_setup.py::_render_payload` in\n * `OpenHands/extensions`, which is the authoritative reference: it produces the\n * request bodies published in that repository's contract fixtures, and those\n * were verified against the live service. The create model is `extra=\"forbid\"`,\n * so any divergence is a hard 422 rather than a dropped field.\n */\n\nimport { findAutomationCommand } from \"#/utils/automation-catalog\";\nimport { getAutomationEndpoint } from \"./automation-interface\";\nimport { collectFields } from \"./manifest-local-validation\";\nimport { interpolateText } from \"./manifest-template\";\nimport type {\n  SetupBlock,\n  SetupEntry,\n  SetupFormValues,\n  SetupRequestBody,\n  SetupTriggerKind,\n} from \"./types\";\n\n/** The creation endpoint a derived draft would be posted to. */\nexport const AUTOMATION_CREATE_ENDPOINT = getAutomationEndpoint(\"createPrompt\");\n\n/**\n * Trigger properties a form field may fill, per trigger kind. A field under a\n * trigger kind whose name is listed here fills the trigger property of the same\n * name; anything else there, such as a phrase to match, is an input to `filter`.\n */\nconst TRIGGER_PROPERTIES: Record<SetupTriggerKind, readonly string[]> = {\n  cron: [\"schedule\", \"timezone\"],\n  event: [\"on\"],\n};\n\n/**\n * Repository properties a form field may fill, read the same way\n * {@link TRIGGER_PROPERTIES} is: a field whose name is listed here fills the\n * `repos[]` property of the same name. `url` and `provider` are absent because\n * neither is answered by a field of its own — they come from the repo-picker's\n * value and from its declared provider.\n *\n * These two lists are the only field names the derivation knows; everything\n * else it reads it finds by field type. An entry that wants a base branch in\n * its request therefore has to name that field `ref`.\n */\nconst REPO_PROPERTIES: readonly string[] = [\"ref\"];\n\nconst FORM_PLACEHOLDER_PATTERN = /\\{\\{form\\.([A-Za-z0-9_.]+)\\}\\}/g;\n\n/** The repository input, which supplies `repos` and an event trigger's source. */\nfunction findRepoPickerField(setup: SetupBlock) {\n  const match = Object.entries(collectFields(setup)).find(\n    ([, field]) => field.type === \"repo-picker\",\n  );\n  return match ? { name: match[0], field: match[1] } : null;\n}\n\n/** The single trigger kind a direct entry declares, with its fields. */\nfunction getTrigger(setup: SetupBlock) {\n  const entries = Object.entries(setup.form.triggers ?? {});\n  if (entries.length === 0) return null;\n  const [kind, fields] = entries[0];\n  return { kind: kind as SetupTriggerKind, fields: fields ?? {} };\n}\n\n/**\n * The create request body these form values produce.\n *\n * No entry declares it: `name` comes from the entry, `repos` from the\n * repo-picker field and its declared provider, and `trigger` from the key and\n * fields under `form.triggers`. Only `prompt` and an event `filter` are\n * declared, because only they cannot be read off the form.\n *\n * Returns null for an assisted entry, which hands setup to a conversation\n * instead of sending a body.\n */\nexport function buildCreatePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const { setup } = entry;\n  if (setup.mode !== \"direct\" || !setup.prompt) return null;\n\n  const scope = { form: values, automation: entry };\n  const repoPicker = findRepoPickerField(setup);\n  const repository = repoPicker ? values[repoPicker.name] : undefined;\n\n  const payload: SetupRequestBody = {\n    name: repository ? `${entry.name} - ${repository}` : entry.name,\n    prompt: interpolateText(setup.prompt, scope),\n  };\n\n  if (repository && repoPicker?.field.provider) {\n    const declared = REPO_PROPERTIES.filter((name) => name in values);\n    payload.repos = [\n      {\n        url: repository,\n        ...Object.fromEntries(declared.map((name) => [name, values[name]])),\n        provider: repoPicker.field.provider,\n      },\n    ];\n  }\n\n  const trigger = getTrigger(setup);\n  if (trigger) {\n    const properties = TRIGGER_PROPERTIES[trigger.kind];\n    const declared = Object.keys(trigger.fields).filter((name) =>\n      properties.includes(name),\n    );\n\n    payload.trigger = {\n      type: trigger.kind,\n      ...Object.fromEntries(declared.map((name) => [name, values[name] ?? \"\"])),\n      ...(trigger.kind === \"event\" && {\n        source: repoPicker?.field.provider ?? \"\",\n        // A filter is optional: an entry that declares none accepts every\n        // delivered event, so the key is left off rather than sent empty.\n        ...(setup.filter && { filter: interpolateText(setup.filter, scope) }),\n      }),\n    };\n  }\n\n  return payload;\n}\n\n/**\n * The preflight body the host sends. The same shape for every entry, so no\n * entry declares it.\n */\nexport function buildPreflightBody(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const draft = buildCreatePayload(entry, values);\n  if (!draft) return null;\n\n  return {\n    automationId: entry.id,\n    endpoint: AUTOMATION_CREATE_ENDPOINT,\n    draft,\n  };\n}\n\n/**\n * What an assisted entry sends into the conversation that finishes setup.\n *\n * The command is not declared either: it lives once, in the owning skill's own\n * `triggers` frontmatter, and the skill defaults to the entry's id. An entry\n * whose skill is invoked by description rather than by command contributes\n * nothing here, and the answers alone open the conversation.\n */\nexport function buildAssistedMessage(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): string {\n  const command = findAutomationCommand(entry);\n  const message = entry.setup.message\n    ? interpolateText(entry.setup.message, { form: values, automation: entry })\n    : \"\";\n\n  return [command, message].filter(Boolean).join(\"\\n\\n\");\n}\n\nfunction collectPlaceholderFields(value: string): string[] {\n  const names = Array.from(\n    value.matchAll(FORM_PLACEHOLDER_PATTERN),\n    (match) => match[1],\n  );\n  return Array.from(new Set(names));\n}\n\n/**\n * Which form fields built each payload path.\n *\n * Preflight and the create endpoint reject a draft by payload path, and the\n * host has to turn that back into a highlighted input. Building the body with\n * each field standing in for its own value recovers the mapping exactly, so an\n * entry does not declare it.\n */\nexport function deriveErrorMap(entry: SetupEntry): Record<string, string[]> {\n  const mapping: Record<string, string[]> = {};\n\n  const standIns = Object.fromEntries(\n    Object.keys(collectFields(entry.setup)).map((name) => [\n      name,\n      `{{form.${name}}}`,\n    ]),\n  );\n  const template = buildCreatePayload(entry, standIns);\n  if (!template) return mapping;\n\n  const walk = (node: unknown, path: string): void => {\n    if (Array.isArray(node)) {\n      node.forEach((item, index) => walk(item, `${path}[${index}]`));\n      return;\n    }\n    if (typeof node === \"object\" && node !== null) {\n      Object.entries(node).forEach(([key, item]) =>\n        walk(item, path ? `${path}.${key}` : key),\n      );\n      return;\n    }\n    if (typeof node === \"string\") {\n      const names = collectPlaceholderFields(node);\n      if (names.length > 0) mapping[path] = names;\n    }\n  };\n\n  walk(template, \"\");\n  return mapping;\n}\n"],"mappings":"wFA4BA,IAAa,sCAA6B,EAAA,sBAAsB,cAAc"}
+{"version":3,"file":"automation-setup.cjs","names":[],"sources":["../../src/manifests/automation-setup.ts"],"sourcesContent":["/**\n * The only module that knows a setup entry configures an *automation*.\n *\n * The published contract states just what varies between entries; everything\n * derivable is the host's to generate. That derivation is here, and nowhere\n * else, so the rest of `src/manifests/` stays about forms rather than about\n * automations.\n *\n * The algorithm mirrors `tests/test_automation_setup.py::_render_payload` in\n * `OpenHands/extensions`, which is the authoritative reference: it produces the\n * request bodies published in that repository's contract fixtures, and those\n * were verified against the live service. The create model is `extra=\"forbid\"`,\n * so any divergence is a hard 422 rather than a dropped field.\n */\n\nimport i18n from \"#/i18n\";\nimport { I18nKey } from \"#/i18n/declaration\";\nimport { findAutomationCommand } from \"#/utils/automation-catalog\";\nimport { getAutomationEndpoint } from \"./automation-interface\";\nimport {\n  collectFields,\n  fieldText,\n  fieldValues,\n} from \"./manifest-local-validation\";\nimport { interpolateText, interpolateValue } from \"./manifest-template\";\nimport type {\n  SetupBlock,\n  SetupBundleConfigValue,\n  SetupEntry,\n  SetupFormValues,\n  SetupRequestBody,\n  SetupTriggerKind,\n} from \"./types\";\n\n/**\n * The creation endpoint a derived draft would be posted to. Resolved on call\n * rather than at import, because the endpoint is the interface manifest's and\n * this module loads whether or not one was admitted.\n *\n * A bundle entry is created through the raw endpoint, because what it sends is\n * a tarball it uploaded rather than arguments to a preset. Called without an\n * entry - as the import path does - it answers for a prompt.\n */\nexport function automationCreateEndpoint(entry?: SetupEntry): string {\n  if (entry && isBundleEntry(entry)) {\n    return requireBundleEndpoint(\"createBundle\");\n  }\n  return getAutomationEndpoint(\"createPrompt\");\n}\n\n/** Where a bundle's tarball is uploaded, before the create call. */\nexport function automationUploadEndpoint(): string {\n  return requireBundleEndpoint(\"uploads\");\n}\n\n/** The endpoints a bundle entry cannot be created without. */\nconst BUNDLE_ENDPOINTS = [\"createBundle\", \"uploads\"] as const;\n\n/**\n * An endpoint only a bundle needs. The interface manifest may predate bundles,\n * and the host holds no path of its own to fall back to, so this is where that\n * runs out rather than somewhere deep in a request.\n */\nfunction requireBundleEndpoint(\n  name: (typeof BUNDLE_ENDPOINTS)[number],\n): string {\n  const path = getAutomationEndpoint(name);\n  if (!path) {\n    throw new Error(\n      `The published automation interface declares no '${name}' endpoint, ` +\n        \"so this deployment cannot create an automation from a script bundle.\",\n    );\n  }\n  return path;\n}\n\n/**\n * The endpoints this entry needs that the published interface does not declare.\n *\n * Asked before the form renders rather than discovered at the moment of\n * creating: a pinned package that predates bundles can never answer, and the\n * dialog can say so while nothing has been filled in yet. Empty for every\n * entry that is not a bundle, which needs nothing beyond what the block has\n * always declared.\n */\nexport function missingCreateEndpoints(entry: SetupEntry): string[] {\n  if (!isBundleEntry(entry)) return [];\n  return BUNDLE_ENDPOINTS.filter((name) => !getAutomationEndpoint(name));\n}\n\n/** Whether this entry ships a script tarball instead of a prompt. */\nexport function isBundleEntry(entry: SetupEntry): boolean {\n  return entry.setup.mode === \"direct\" && entry.setup.bundle !== undefined;\n}\n\n/**\n * The `tarball_path` a preflight draft carries.\n *\n * Preflight runs on every field blur and the upload happens once, at submit,\n * so there is no real path to send yet. The service checks this field's scheme\n * at preflight and its ownership only at creation, so a well-formed stand-in\n * validates exactly what preflight is for - the rest of the body - without\n * uploading an archive per keystroke.\n */\nexport const PREFLIGHT_TARBALL_PATH =\n  \"oh-internal://uploads/00000000-0000-0000-0000-000000000000\";\n\n/**\n * Trigger properties a form field may fill, per trigger kind. A field under a\n * trigger kind whose name is listed here fills the trigger property of the same\n * name; anything else there, such as a phrase to match, is an input to `filter`.\n */\nconst TRIGGER_PROPERTIES: Record<SetupTriggerKind, readonly string[]> = {\n  cron: [\"schedule\", \"timezone\"],\n  event: [\"on\"],\n};\n\n/**\n * Repository properties a form field may fill, read the same way\n * {@link TRIGGER_PROPERTIES} is: a field whose name is listed here fills the\n * `repos[]` property of the same name. `url` and `provider` are absent because\n * neither is answered by a field of its own — they come from the repo-picker's\n * value and from its declared provider.\n *\n * These two lists are the only field names the derivation knows; everything\n * else it reads it finds by field type. An entry that wants a base branch in\n * its request therefore has to name that field `ref`.\n */\nconst REPO_PROPERTIES: readonly string[] = [\"ref\"];\n\nconst FORM_PLACEHOLDER_PATTERN = /\\{\\{form\\.([A-Za-z0-9_.]+)\\}\\}/g;\n\n/** The repository input, which supplies `repos` and an event trigger's source. */\nfunction findRepoPickerField(setup: SetupBlock) {\n  const match = Object.entries(collectFields(setup)).find(\n    ([, field]) => field.type === \"repo-picker\",\n  );\n  return match ? { name: match[0], field: match[1] } : null;\n}\n\n/** Every repository the form collected, whether the picker takes one or many. */\nfunction repositories(setup: SetupBlock, values: SetupFormValues): string[] {\n  const picker = findRepoPickerField(setup);\n  return picker ? fieldValues(values[picker.name]) : [];\n}\n\n/**\n * The created automation's name.\n *\n * One repository is worth naming; several are not, so the count stands in\n * rather than a list of names that would not fit.\n */\nfunction deriveName(entry: SetupEntry, values: SetupFormValues): string {\n  const repos = repositories(entry.setup, values);\n  if (repos.length === 0) return entry.name;\n  if (repos.length === 1) return `${entry.name} - ${repos[0]}`;\n  // The count is the one word here the host writes rather than reads off the\n  // entry, so it is translated. There is no translator to pass in: the\n  // derivation runs from a memo, an upload and a test alike.\n  const count = i18n.t(I18nKey.SETUP$REPOSITORY_COUNT, {\n    total: repos.length,\n  });\n  return `${entry.name} - ${count}`;\n}\n\n/** The single trigger kind a direct entry declares, with its fields. */\nfunction getTrigger(setup: SetupBlock) {\n  const entries = Object.entries(setup.form.triggers ?? {});\n  if (entries.length === 0) return null;\n  const [kind, fields] = entries[0];\n  return { kind: kind as SetupTriggerKind, fields: fields ?? {} };\n}\n\n/**\n * The create request body these form values produce.\n *\n * No entry declares it: `name` comes from the entry, `repos` from the\n * repo-picker field and its declared provider, and `trigger` from the key and\n * fields under `form.triggers`. Only `prompt` and an event `filter` are\n * declared, because only they cannot be read off the form.\n *\n * Returns null for an assisted entry, which hands setup to a conversation\n * instead of sending a body.\n */\nexport function buildCreatePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n  /** Bundle entries only: what the upload returned. */\n  tarballPath: string = PREFLIGHT_TARBALL_PATH,\n): SetupRequestBody | null {\n  const { setup } = entry;\n  if (setup.mode !== \"direct\") return null;\n  if (setup.bundle) return buildBundlePayload(entry, values, tarballPath);\n  if (!setup.prompt) return null;\n\n  const scope = { form: values, automation: entry };\n  const repoPicker = findRepoPickerField(setup);\n  const repos = repositories(setup, values);\n\n  const payload: SetupRequestBody = {\n    name: deriveName(entry, values),\n    prompt: interpolateText(setup.prompt, scope),\n  };\n\n  if (repos.length > 0 && repoPicker?.field.provider) {\n    const declared = REPO_PROPERTIES.filter((name) => name in values);\n    payload.repos = repos.map((url) => ({\n      url,\n      ...Object.fromEntries(\n        declared.map((name) => [name, fieldText(values[name])]),\n      ),\n      provider: repoPicker.field.provider as string,\n    }));\n  }\n\n  // A filter is optional: an entry that declares none accepts every delivered\n  // event, so the key is left off rather than sent empty.\n  const trigger = buildTrigger(entry, values);\n  if (trigger) payload.trigger = trigger;\n\n  const template = buildTemplate(entry, values);\n  if (template) payload.template = template;\n\n  return payload;\n}\n\n/**\n * The `template` provenance a prompt entry sends, or undefined for one that\n * publishes no version.\n *\n * It is what lets the service recognise a second setup of the same entry as\n * the automation it already holds. The bundle path derives the same block from\n * the config the bundle declares; a prompt entry declares none, so the answer\n * to \"what was this created from\" is the form as submitted.\n */\nfunction buildTemplate(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | undefined {\n  if (!entry.version) return undefined;\n  return {\n    id: entry.id,\n    version: entry.version,\n    config: { ...values },\n  };\n}\n\n/**\n * The `trigger` object, read off the key and fields under `form.triggers`.\n *\n * Identical for both kinds of direct entry: only the create endpoint and what\n * the automation is told to do differ between a prompt and a bundle.\n */\nfunction buildTrigger(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | undefined {\n  const trigger = getTrigger(entry.setup);\n  if (!trigger) return undefined;\n\n  const properties = TRIGGER_PROPERTIES[trigger.kind];\n  const declared = Object.keys(trigger.fields).filter((name) =>\n    properties.includes(name),\n  );\n  const repoPicker = findRepoPickerField(entry.setup);\n\n  return {\n    type: trigger.kind,\n    ...Object.fromEntries(\n      declared.map((name) => [name, fieldText(values[name])]),\n    ),\n    ...(trigger.kind === \"event\" && {\n      source: repoPicker?.field.provider ?? \"\",\n      ...(entry.setup.filter && {\n        filter: interpolateText(entry.setup.filter, {\n          form: values,\n          automation: entry,\n        }),\n      }),\n    }),\n  };\n}\n\n/**\n * The raw create body a bundle entry produces.\n *\n * `tarball_path` is the one value neither declared nor derived: the host packs\n * and uploads the bundle first, and creates from what came back. `template` is\n * the provenance that makes enabling the same entry twice return the\n * automation that already exists rather than a second one.\n *\n * There is no `repos`: the raw endpoint has no such field, and a bundle's\n * script fetches what it needs itself.\n */\nfunction buildBundlePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n  tarballPath: string,\n): SetupRequestBody {\n  const bundle = entry.setup.bundle!;\n  const scope = { form: values, automation: entry };\n\n  const payload: SetupRequestBody = {\n    name: deriveName(entry, values),\n  };\n\n  const trigger = buildTrigger(entry, values);\n  if (trigger) payload.trigger = trigger;\n\n  payload.tarball_path = tarballPath;\n  payload.entrypoint = bundle.entrypoint;\n  if (bundle.setupScript) payload.setup_script_path = bundle.setupScript;\n  if (bundle.timeout !== undefined) payload.timeout = bundle.timeout;\n  payload.template = {\n    id: entry.id,\n    version: bundle.version,\n    config: interpolateConfig(bundle.config, scope) as SetupRequestBody,\n  };\n\n  return payload;\n}\n\n/**\n * Placeholder substitution over the config tree. Only string leaves are\n * templated; a number, a boolean or a null is written through as itself, so an\n * entry can state a value the script reads as the type it expects.\n */\nfunction interpolateConfig(\n  node: SetupBundleConfigValue,\n  scope: Parameters<typeof interpolateText>[1],\n): SetupBundleConfigValue {\n  if (typeof node === \"string\") {\n    return interpolateValue(node, scope);\n  }\n  if (Array.isArray(node)) {\n    return node.map((item) => interpolateConfig(item, scope));\n  }\n  if (typeof node === \"object\" && node !== null) {\n    return Object.fromEntries(\n      Object.entries(node).map(([key, value]) => [\n        key,\n        interpolateConfig(value, scope),\n      ]),\n    );\n  }\n  return node;\n}\n\n/**\n * The preflight body the host sends. The same shape for every entry, so no\n * entry declares it.\n */\nexport function buildPreflightBody(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const draft = buildCreatePayload(entry, values);\n  if (!draft) return null;\n\n  return {\n    automationId: entry.id,\n    endpoint: automationCreateEndpoint(entry),\n    draft,\n  };\n}\n\n/**\n * What an assisted entry sends into the conversation that finishes setup.\n *\n * The command is not declared either: it lives once, in the owning skill's own\n * `triggers` frontmatter, and the skill defaults to the entry's id. An entry\n * whose skill is invoked by description rather than by command contributes\n * nothing here, and the answers alone open the conversation.\n */\nexport function buildAssistedMessage(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): string {\n  const command = findAutomationCommand(entry);\n  const message = entry.setup.message\n    ? interpolateText(entry.setup.message, { form: values, automation: entry })\n    : \"\";\n\n  return [command, message].filter(Boolean).join(\"\\n\\n\");\n}\n\nfunction collectPlaceholderFields(value: string): string[] {\n  const names = Array.from(\n    value.matchAll(FORM_PLACEHOLDER_PATTERN),\n    (match) => match[1],\n  );\n  return Array.from(new Set(names));\n}\n\n/**\n * Which form fields built each payload path.\n *\n * Preflight and the create endpoint reject a draft by payload path, and the\n * host has to turn that back into a highlighted input. Building the body with\n * each field standing in for its own value recovers the mapping exactly, so an\n * entry does not declare it.\n */\nexport function deriveErrorMap(entry: SetupEntry): Record<string, string[]> {\n  const mapping: Record<string, string[]> = {};\n\n  const standIns = Object.fromEntries(\n    Object.keys(collectFields(entry.setup)).map((name) => [\n      name,\n      `{{form.${name}}}`,\n    ]),\n  );\n  const template = buildCreatePayload(entry, standIns);\n  if (!template) return mapping;\n\n  const walk = (node: unknown, path: string): void => {\n    if (Array.isArray(node)) {\n      node.forEach((item, index) => walk(item, `${path}[${index}]`));\n      return;\n    }\n    if (typeof node === \"object\" && node !== null) {\n      Object.entries(node).forEach(([key, item]) =>\n        walk(item, path ? `${path}.${key}` : key),\n      );\n      return;\n    }\n    if (typeof node === \"string\") {\n      const names = collectPlaceholderFields(node);\n      if (names.length > 0) mapping[path] = names;\n    }\n  };\n\n  walk(template, \"\");\n  return mapping;\n}\n"],"mappings":"mKA2CA,SAAgB,EAAyB,EAA4B,CAInE,OAHI,GAAS,EAAc,CAAK,EACvB,EAAsB,cAAc,EAEtC,EAAA,sBAAsB,cAAc,CAC7C,CAGA,SAAgB,GAAmC,CACjD,OAAO,EAAsB,SAAS,CACxC,CAUA,SAAS,EACP,EACQ,CACR,IAAM,EAAO,EAAA,sBAAsB,CAAI,EACvC,GAAI,CAAC,EACH,MAAU,MACR,mDAAmD,EAAK,iFAE1D,EAEF,OAAO,CACT,CAiBA,SAAgB,EAAc,EAA4B,CACxD,OAAO,EAAM,MAAM,OAAS,UAAY,EAAM,MAAM,SAAW,IAAA,EACjE"}

package/dist/manifests/automation-setup.d.ts

@@ -13,8 +13,40 @@
  * so any divergence is a hard 422 rather than a dropped field.
  */
 import type { SetupEntry, SetupFormValues, SetupRequestBody } from "./types";
-/** The creation endpoint a derived draft would be posted to. */
-export declare const AUTOMATION_CREATE_ENDPOINT: string;
+/**
+ * The creation endpoint a derived draft would be posted to. Resolved on call
+ * rather than at import, because the endpoint is the interface manifest's and
+ * this module loads whether or not one was admitted.
+ *
+ * A bundle entry is created through the raw endpoint, because what it sends is
+ * a tarball it uploaded rather than arguments to a preset. Called without an
+ * entry - as the import path does - it answers for a prompt.
+ */
+export declare function automationCreateEndpoint(entry?: SetupEntry): string;
+/** Where a bundle's tarball is uploaded, before the create call. */
+export declare function automationUploadEndpoint(): string;
+/**
+ * The endpoints this entry needs that the published interface does not declare.
+ *
+ * Asked before the form renders rather than discovered at the moment of
+ * creating: a pinned package that predates bundles can never answer, and the
+ * dialog can say so while nothing has been filled in yet. Empty for every
+ * entry that is not a bundle, which needs nothing beyond what the block has
+ * always declared.
+ */
+export declare function missingCreateEndpoints(entry: SetupEntry): string[];
+/** Whether this entry ships a script tarball instead of a prompt. */
+export declare function isBundleEntry(entry: SetupEntry): boolean;
+/**
+ * The `tarball_path` a preflight draft carries.
+ *
+ * Preflight runs on every field blur and the upload happens once, at submit,
+ * so there is no real path to send yet. The service checks this field's scheme
+ * at preflight and its ownership only at creation, so a well-formed stand-in
+ * validates exactly what preflight is for - the rest of the body - without
+ * uploading an archive per keystroke.
+ */
+export declare const PREFLIGHT_TARBALL_PATH = "oh-internal://uploads/00000000-0000-0000-0000-000000000000";
 /**
  * The create request body these form values produce.
  *
@@ -26,7 +58,9 @@ export declare const AUTOMATION_CREATE_ENDPOINT: string;
  * Returns null for an assisted entry, which hands setup to a conversation
  * instead of sending a body.
  */
-export declare function buildCreatePayload(entry: SetupEntry, values: SetupFormValues): SetupRequestBody | null;
+export declare function buildCreatePayload(entry: SetupEntry, values: SetupFormValues, 
+/** Bundle entries only: what the upload returned. */
+tarballPath?: string): SetupRequestBody | null;
 /**
  * The preflight body the host sends. The same shape for every entry, so no
  * entry declares it.

package/dist/manifests/automation-setup.js

@@ -1,8 +1,22 @@
+import "../i18n/index.js";
 import "../utils/automation-catalog.js";
 import { getAutomationEndpoint as e } from "./automation-interface.js";
 //#region src/manifests/automation-setup.ts
-var t = e("createPrompt");
+function t(t) {
+	return t && i(t) ? r("createBundle") : e("createPrompt");
+}
+function n() {
+	return r("uploads");
+}
+function r(t) {
+	let n = e(t);
+	if (!n) throw Error(`The published automation interface declares no '${t}' endpoint, so this deployment cannot create an automation from a script bundle.`);
+	return n;
+}
+function i(e) {
+	return e.setup.mode === "direct" && e.setup.bundle !== void 0;
+}
 //#endregion
-export { t as AUTOMATION_CREATE_ENDPOINT };
+export { t as automationCreateEndpoint, n as automationUploadEndpoint };
 
 //# sourceMappingURL=automation-setup.js.map

package/dist/manifests/automation-setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"automation-setup.js","names":[],"sources":["../../src/manifests/automation-setup.ts"],"sourcesContent":["/**\n * The only module that knows a setup entry configures an *automation*.\n *\n * The published contract states just what varies between entries; everything\n * derivable is the host's to generate. That derivation is here, and nowhere\n * else, so the rest of `src/manifests/` stays about forms rather than about\n * automations.\n *\n * The algorithm mirrors `tests/test_automation_setup.py::_render_payload` in\n * `OpenHands/extensions`, which is the authoritative reference: it produces the\n * request bodies published in that repository's contract fixtures, and those\n * were verified against the live service. The create model is `extra=\"forbid\"`,\n * so any divergence is a hard 422 rather than a dropped field.\n */\n\nimport { findAutomationCommand } from \"#/utils/automation-catalog\";\nimport { getAutomationEndpoint } from \"./automation-interface\";\nimport { collectFields } from \"./manifest-local-validation\";\nimport { interpolateText } from \"./manifest-template\";\nimport type {\n  SetupBlock,\n  SetupEntry,\n  SetupFormValues,\n  SetupRequestBody,\n  SetupTriggerKind,\n} from \"./types\";\n\n/** The creation endpoint a derived draft would be posted to. */\nexport const AUTOMATION_CREATE_ENDPOINT = getAutomationEndpoint(\"createPrompt\");\n\n/**\n * Trigger properties a form field may fill, per trigger kind. A field under a\n * trigger kind whose name is listed here fills the trigger property of the same\n * name; anything else there, such as a phrase to match, is an input to `filter`.\n */\nconst TRIGGER_PROPERTIES: Record<SetupTriggerKind, readonly string[]> = {\n  cron: [\"schedule\", \"timezone\"],\n  event: [\"on\"],\n};\n\n/**\n * Repository properties a form field may fill, read the same way\n * {@link TRIGGER_PROPERTIES} is: a field whose name is listed here fills the\n * `repos[]` property of the same name. `url` and `provider` are absent because\n * neither is answered by a field of its own — they come from the repo-picker's\n * value and from its declared provider.\n *\n * These two lists are the only field names the derivation knows; everything\n * else it reads it finds by field type. An entry that wants a base branch in\n * its request therefore has to name that field `ref`.\n */\nconst REPO_PROPERTIES: readonly string[] = [\"ref\"];\n\nconst FORM_PLACEHOLDER_PATTERN = /\\{\\{form\\.([A-Za-z0-9_.]+)\\}\\}/g;\n\n/** The repository input, which supplies `repos` and an event trigger's source. */\nfunction findRepoPickerField(setup: SetupBlock) {\n  const match = Object.entries(collectFields(setup)).find(\n    ([, field]) => field.type === \"repo-picker\",\n  );\n  return match ? { name: match[0], field: match[1] } : null;\n}\n\n/** The single trigger kind a direct entry declares, with its fields. */\nfunction getTrigger(setup: SetupBlock) {\n  const entries = Object.entries(setup.form.triggers ?? {});\n  if (entries.length === 0) return null;\n  const [kind, fields] = entries[0];\n  return { kind: kind as SetupTriggerKind, fields: fields ?? {} };\n}\n\n/**\n * The create request body these form values produce.\n *\n * No entry declares it: `name` comes from the entry, `repos` from the\n * repo-picker field and its declared provider, and `trigger` from the key and\n * fields under `form.triggers`. Only `prompt` and an event `filter` are\n * declared, because only they cannot be read off the form.\n *\n * Returns null for an assisted entry, which hands setup to a conversation\n * instead of sending a body.\n */\nexport function buildCreatePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const { setup } = entry;\n  if (setup.mode !== \"direct\" || !setup.prompt) return null;\n\n  const scope = { form: values, automation: entry };\n  const repoPicker = findRepoPickerField(setup);\n  const repository = repoPicker ? values[repoPicker.name] : undefined;\n\n  const payload: SetupRequestBody = {\n    name: repository ? `${entry.name} - ${repository}` : entry.name,\n    prompt: interpolateText(setup.prompt, scope),\n  };\n\n  if (repository && repoPicker?.field.provider) {\n    const declared = REPO_PROPERTIES.filter((name) => name in values);\n    payload.repos = [\n      {\n        url: repository,\n        ...Object.fromEntries(declared.map((name) => [name, values[name]])),\n        provider: repoPicker.field.provider,\n      },\n    ];\n  }\n\n  const trigger = getTrigger(setup);\n  if (trigger) {\n    const properties = TRIGGER_PROPERTIES[trigger.kind];\n    const declared = Object.keys(trigger.fields).filter((name) =>\n      properties.includes(name),\n    );\n\n    payload.trigger = {\n      type: trigger.kind,\n      ...Object.fromEntries(declared.map((name) => [name, values[name] ?? \"\"])),\n      ...(trigger.kind === \"event\" && {\n        source: repoPicker?.field.provider ?? \"\",\n        // A filter is optional: an entry that declares none accepts every\n        // delivered event, so the key is left off rather than sent empty.\n        ...(setup.filter && { filter: interpolateText(setup.filter, scope) }),\n      }),\n    };\n  }\n\n  return payload;\n}\n\n/**\n * The preflight body the host sends. The same shape for every entry, so no\n * entry declares it.\n */\nexport function buildPreflightBody(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const draft = buildCreatePayload(entry, values);\n  if (!draft) return null;\n\n  return {\n    automationId: entry.id,\n    endpoint: AUTOMATION_CREATE_ENDPOINT,\n    draft,\n  };\n}\n\n/**\n * What an assisted entry sends into the conversation that finishes setup.\n *\n * The command is not declared either: it lives once, in the owning skill's own\n * `triggers` frontmatter, and the skill defaults to the entry's id. An entry\n * whose skill is invoked by description rather than by command contributes\n * nothing here, and the answers alone open the conversation.\n */\nexport function buildAssistedMessage(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): string {\n  const command = findAutomationCommand(entry);\n  const message = entry.setup.message\n    ? interpolateText(entry.setup.message, { form: values, automation: entry })\n    : \"\";\n\n  return [command, message].filter(Boolean).join(\"\\n\\n\");\n}\n\nfunction collectPlaceholderFields(value: string): string[] {\n  const names = Array.from(\n    value.matchAll(FORM_PLACEHOLDER_PATTERN),\n    (match) => match[1],\n  );\n  return Array.from(new Set(names));\n}\n\n/**\n * Which form fields built each payload path.\n *\n * Preflight and the create endpoint reject a draft by payload path, and the\n * host has to turn that back into a highlighted input. Building the body with\n * each field standing in for its own value recovers the mapping exactly, so an\n * entry does not declare it.\n */\nexport function deriveErrorMap(entry: SetupEntry): Record<string, string[]> {\n  const mapping: Record<string, string[]> = {};\n\n  const standIns = Object.fromEntries(\n    Object.keys(collectFields(entry.setup)).map((name) => [\n      name,\n      `{{form.${name}}}`,\n    ]),\n  );\n  const template = buildCreatePayload(entry, standIns);\n  if (!template) return mapping;\n\n  const walk = (node: unknown, path: string): void => {\n    if (Array.isArray(node)) {\n      node.forEach((item, index) => walk(item, `${path}[${index}]`));\n      return;\n    }\n    if (typeof node === \"object\" && node !== null) {\n      Object.entries(node).forEach(([key, item]) =>\n        walk(item, path ? `${path}.${key}` : key),\n      );\n      return;\n    }\n    if (typeof node === \"string\") {\n      const names = collectPlaceholderFields(node);\n      if (names.length > 0) mapping[path] = names;\n    }\n  };\n\n  walk(template, \"\");\n  return mapping;\n}\n"],"mappings":";;;AA4BA,IAAa,IAA6B,EAAsB,cAAc"}
+{"version":3,"file":"automation-setup.js","names":[],"sources":["../../src/manifests/automation-setup.ts"],"sourcesContent":["/**\n * The only module that knows a setup entry configures an *automation*.\n *\n * The published contract states just what varies between entries; everything\n * derivable is the host's to generate. That derivation is here, and nowhere\n * else, so the rest of `src/manifests/` stays about forms rather than about\n * automations.\n *\n * The algorithm mirrors `tests/test_automation_setup.py::_render_payload` in\n * `OpenHands/extensions`, which is the authoritative reference: it produces the\n * request bodies published in that repository's contract fixtures, and those\n * were verified against the live service. The create model is `extra=\"forbid\"`,\n * so any divergence is a hard 422 rather than a dropped field.\n */\n\nimport i18n from \"#/i18n\";\nimport { I18nKey } from \"#/i18n/declaration\";\nimport { findAutomationCommand } from \"#/utils/automation-catalog\";\nimport { getAutomationEndpoint } from \"./automation-interface\";\nimport {\n  collectFields,\n  fieldText,\n  fieldValues,\n} from \"./manifest-local-validation\";\nimport { interpolateText, interpolateValue } from \"./manifest-template\";\nimport type {\n  SetupBlock,\n  SetupBundleConfigValue,\n  SetupEntry,\n  SetupFormValues,\n  SetupRequestBody,\n  SetupTriggerKind,\n} from \"./types\";\n\n/**\n * The creation endpoint a derived draft would be posted to. Resolved on call\n * rather than at import, because the endpoint is the interface manifest's and\n * this module loads whether or not one was admitted.\n *\n * A bundle entry is created through the raw endpoint, because what it sends is\n * a tarball it uploaded rather than arguments to a preset. Called without an\n * entry - as the import path does - it answers for a prompt.\n */\nexport function automationCreateEndpoint(entry?: SetupEntry): string {\n  if (entry && isBundleEntry(entry)) {\n    return requireBundleEndpoint(\"createBundle\");\n  }\n  return getAutomationEndpoint(\"createPrompt\");\n}\n\n/** Where a bundle's tarball is uploaded, before the create call. */\nexport function automationUploadEndpoint(): string {\n  return requireBundleEndpoint(\"uploads\");\n}\n\n/** The endpoints a bundle entry cannot be created without. */\nconst BUNDLE_ENDPOINTS = [\"createBundle\", \"uploads\"] as const;\n\n/**\n * An endpoint only a bundle needs. The interface manifest may predate bundles,\n * and the host holds no path of its own to fall back to, so this is where that\n * runs out rather than somewhere deep in a request.\n */\nfunction requireBundleEndpoint(\n  name: (typeof BUNDLE_ENDPOINTS)[number],\n): string {\n  const path = getAutomationEndpoint(name);\n  if (!path) {\n    throw new Error(\n      `The published automation interface declares no '${name}' endpoint, ` +\n        \"so this deployment cannot create an automation from a script bundle.\",\n    );\n  }\n  return path;\n}\n\n/**\n * The endpoints this entry needs that the published interface does not declare.\n *\n * Asked before the form renders rather than discovered at the moment of\n * creating: a pinned package that predates bundles can never answer, and the\n * dialog can say so while nothing has been filled in yet. Empty for every\n * entry that is not a bundle, which needs nothing beyond what the block has\n * always declared.\n */\nexport function missingCreateEndpoints(entry: SetupEntry): string[] {\n  if (!isBundleEntry(entry)) return [];\n  return BUNDLE_ENDPOINTS.filter((name) => !getAutomationEndpoint(name));\n}\n\n/** Whether this entry ships a script tarball instead of a prompt. */\nexport function isBundleEntry(entry: SetupEntry): boolean {\n  return entry.setup.mode === \"direct\" && entry.setup.bundle !== undefined;\n}\n\n/**\n * The `tarball_path` a preflight draft carries.\n *\n * Preflight runs on every field blur and the upload happens once, at submit,\n * so there is no real path to send yet. The service checks this field's scheme\n * at preflight and its ownership only at creation, so a well-formed stand-in\n * validates exactly what preflight is for - the rest of the body - without\n * uploading an archive per keystroke.\n */\nexport const PREFLIGHT_TARBALL_PATH =\n  \"oh-internal://uploads/00000000-0000-0000-0000-000000000000\";\n\n/**\n * Trigger properties a form field may fill, per trigger kind. A field under a\n * trigger kind whose name is listed here fills the trigger property of the same\n * name; anything else there, such as a phrase to match, is an input to `filter`.\n */\nconst TRIGGER_PROPERTIES: Record<SetupTriggerKind, readonly string[]> = {\n  cron: [\"schedule\", \"timezone\"],\n  event: [\"on\"],\n};\n\n/**\n * Repository properties a form field may fill, read the same way\n * {@link TRIGGER_PROPERTIES} is: a field whose name is listed here fills the\n * `repos[]` property of the same name. `url` and `provider` are absent because\n * neither is answered by a field of its own — they come from the repo-picker's\n * value and from its declared provider.\n *\n * These two lists are the only field names the derivation knows; everything\n * else it reads it finds by field type. An entry that wants a base branch in\n * its request therefore has to name that field `ref`.\n */\nconst REPO_PROPERTIES: readonly string[] = [\"ref\"];\n\nconst FORM_PLACEHOLDER_PATTERN = /\\{\\{form\\.([A-Za-z0-9_.]+)\\}\\}/g;\n\n/** The repository input, which supplies `repos` and an event trigger's source. */\nfunction findRepoPickerField(setup: SetupBlock) {\n  const match = Object.entries(collectFields(setup)).find(\n    ([, field]) => field.type === \"repo-picker\",\n  );\n  return match ? { name: match[0], field: match[1] } : null;\n}\n\n/** Every repository the form collected, whether the picker takes one or many. */\nfunction repositories(setup: SetupBlock, values: SetupFormValues): string[] {\n  const picker = findRepoPickerField(setup);\n  return picker ? fieldValues(values[picker.name]) : [];\n}\n\n/**\n * The created automation's name.\n *\n * One repository is worth naming; several are not, so the count stands in\n * rather than a list of names that would not fit.\n */\nfunction deriveName(entry: SetupEntry, values: SetupFormValues): string {\n  const repos = repositories(entry.setup, values);\n  if (repos.length === 0) return entry.name;\n  if (repos.length === 1) return `${entry.name} - ${repos[0]}`;\n  // The count is the one word here the host writes rather than reads off the\n  // entry, so it is translated. There is no translator to pass in: the\n  // derivation runs from a memo, an upload and a test alike.\n  const count = i18n.t(I18nKey.SETUP$REPOSITORY_COUNT, {\n    total: repos.length,\n  });\n  return `${entry.name} - ${count}`;\n}\n\n/** The single trigger kind a direct entry declares, with its fields. */\nfunction getTrigger(setup: SetupBlock) {\n  const entries = Object.entries(setup.form.triggers ?? {});\n  if (entries.length === 0) return null;\n  const [kind, fields] = entries[0];\n  return { kind: kind as SetupTriggerKind, fields: fields ?? {} };\n}\n\n/**\n * The create request body these form values produce.\n *\n * No entry declares it: `name` comes from the entry, `repos` from the\n * repo-picker field and its declared provider, and `trigger` from the key and\n * fields under `form.triggers`. Only `prompt` and an event `filter` are\n * declared, because only they cannot be read off the form.\n *\n * Returns null for an assisted entry, which hands setup to a conversation\n * instead of sending a body.\n */\nexport function buildCreatePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n  /** Bundle entries only: what the upload returned. */\n  tarballPath: string = PREFLIGHT_TARBALL_PATH,\n): SetupRequestBody | null {\n  const { setup } = entry;\n  if (setup.mode !== \"direct\") return null;\n  if (setup.bundle) return buildBundlePayload(entry, values, tarballPath);\n  if (!setup.prompt) return null;\n\n  const scope = { form: values, automation: entry };\n  const repoPicker = findRepoPickerField(setup);\n  const repos = repositories(setup, values);\n\n  const payload: SetupRequestBody = {\n    name: deriveName(entry, values),\n    prompt: interpolateText(setup.prompt, scope),\n  };\n\n  if (repos.length > 0 && repoPicker?.field.provider) {\n    const declared = REPO_PROPERTIES.filter((name) => name in values);\n    payload.repos = repos.map((url) => ({\n      url,\n      ...Object.fromEntries(\n        declared.map((name) => [name, fieldText(values[name])]),\n      ),\n      provider: repoPicker.field.provider as string,\n    }));\n  }\n\n  // A filter is optional: an entry that declares none accepts every delivered\n  // event, so the key is left off rather than sent empty.\n  const trigger = buildTrigger(entry, values);\n  if (trigger) payload.trigger = trigger;\n\n  const template = buildTemplate(entry, values);\n  if (template) payload.template = template;\n\n  return payload;\n}\n\n/**\n * The `template` provenance a prompt entry sends, or undefined for one that\n * publishes no version.\n *\n * It is what lets the service recognise a second setup of the same entry as\n * the automation it already holds. The bundle path derives the same block from\n * the config the bundle declares; a prompt entry declares none, so the answer\n * to \"what was this created from\" is the form as submitted.\n */\nfunction buildTemplate(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | undefined {\n  if (!entry.version) return undefined;\n  return {\n    id: entry.id,\n    version: entry.version,\n    config: { ...values },\n  };\n}\n\n/**\n * The `trigger` object, read off the key and fields under `form.triggers`.\n *\n * Identical for both kinds of direct entry: only the create endpoint and what\n * the automation is told to do differ between a prompt and a bundle.\n */\nfunction buildTrigger(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | undefined {\n  const trigger = getTrigger(entry.setup);\n  if (!trigger) return undefined;\n\n  const properties = TRIGGER_PROPERTIES[trigger.kind];\n  const declared = Object.keys(trigger.fields).filter((name) =>\n    properties.includes(name),\n  );\n  const repoPicker = findRepoPickerField(entry.setup);\n\n  return {\n    type: trigger.kind,\n    ...Object.fromEntries(\n      declared.map((name) => [name, fieldText(values[name])]),\n    ),\n    ...(trigger.kind === \"event\" && {\n      source: repoPicker?.field.provider ?? \"\",\n      ...(entry.setup.filter && {\n        filter: interpolateText(entry.setup.filter, {\n          form: values,\n          automation: entry,\n        }),\n      }),\n    }),\n  };\n}\n\n/**\n * The raw create body a bundle entry produces.\n *\n * `tarball_path` is the one value neither declared nor derived: the host packs\n * and uploads the bundle first, and creates from what came back. `template` is\n * the provenance that makes enabling the same entry twice return the\n * automation that already exists rather than a second one.\n *\n * There is no `repos`: the raw endpoint has no such field, and a bundle's\n * script fetches what it needs itself.\n */\nfunction buildBundlePayload(\n  entry: SetupEntry,\n  values: SetupFormValues,\n  tarballPath: string,\n): SetupRequestBody {\n  const bundle = entry.setup.bundle!;\n  const scope = { form: values, automation: entry };\n\n  const payload: SetupRequestBody = {\n    name: deriveName(entry, values),\n  };\n\n  const trigger = buildTrigger(entry, values);\n  if (trigger) payload.trigger = trigger;\n\n  payload.tarball_path = tarballPath;\n  payload.entrypoint = bundle.entrypoint;\n  if (bundle.setupScript) payload.setup_script_path = bundle.setupScript;\n  if (bundle.timeout !== undefined) payload.timeout = bundle.timeout;\n  payload.template = {\n    id: entry.id,\n    version: bundle.version,\n    config: interpolateConfig(bundle.config, scope) as SetupRequestBody,\n  };\n\n  return payload;\n}\n\n/**\n * Placeholder substitution over the config tree. Only string leaves are\n * templated; a number, a boolean or a null is written through as itself, so an\n * entry can state a value the script reads as the type it expects.\n */\nfunction interpolateConfig(\n  node: SetupBundleConfigValue,\n  scope: Parameters<typeof interpolateText>[1],\n): SetupBundleConfigValue {\n  if (typeof node === \"string\") {\n    return interpolateValue(node, scope);\n  }\n  if (Array.isArray(node)) {\n    return node.map((item) => interpolateConfig(item, scope));\n  }\n  if (typeof node === \"object\" && node !== null) {\n    return Object.fromEntries(\n      Object.entries(node).map(([key, value]) => [\n        key,\n        interpolateConfig(value, scope),\n      ]),\n    );\n  }\n  return node;\n}\n\n/**\n * The preflight body the host sends. The same shape for every entry, so no\n * entry declares it.\n */\nexport function buildPreflightBody(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): SetupRequestBody | null {\n  const draft = buildCreatePayload(entry, values);\n  if (!draft) return null;\n\n  return {\n    automationId: entry.id,\n    endpoint: automationCreateEndpoint(entry),\n    draft,\n  };\n}\n\n/**\n * What an assisted entry sends into the conversation that finishes setup.\n *\n * The command is not declared either: it lives once, in the owning skill's own\n * `triggers` frontmatter, and the skill defaults to the entry's id. An entry\n * whose skill is invoked by description rather than by command contributes\n * nothing here, and the answers alone open the conversation.\n */\nexport function buildAssistedMessage(\n  entry: SetupEntry,\n  values: SetupFormValues,\n): string {\n  const command = findAutomationCommand(entry);\n  const message = entry.setup.message\n    ? interpolateText(entry.setup.message, { form: values, automation: entry })\n    : \"\";\n\n  return [command, message].filter(Boolean).join(\"\\n\\n\");\n}\n\nfunction collectPlaceholderFields(value: string): string[] {\n  const names = Array.from(\n    value.matchAll(FORM_PLACEHOLDER_PATTERN),\n    (match) => match[1],\n  );\n  return Array.from(new Set(names));\n}\n\n/**\n * Which form fields built each payload path.\n *\n * Preflight and the create endpoint reject a draft by payload path, and the\n * host has to turn that back into a highlighted input. Building the body with\n * each field standing in for its own value recovers the mapping exactly, so an\n * entry does not declare it.\n */\nexport function deriveErrorMap(entry: SetupEntry): Record<string, string[]> {\n  const mapping: Record<string, string[]> = {};\n\n  const standIns = Object.fromEntries(\n    Object.keys(collectFields(entry.setup)).map((name) => [\n      name,\n      `{{form.${name}}}`,\n    ]),\n  );\n  const template = buildCreatePayload(entry, standIns);\n  if (!template) return mapping;\n\n  const walk = (node: unknown, path: string): void => {\n    if (Array.isArray(node)) {\n      node.forEach((item, index) => walk(item, `${path}[${index}]`));\n      return;\n    }\n    if (typeof node === \"object\" && node !== null) {\n      Object.entries(node).forEach(([key, item]) =>\n        walk(item, path ? `${path}.${key}` : key),\n      );\n      return;\n    }\n    if (typeof node === \"string\") {\n      const names = collectPlaceholderFields(node);\n      if (names.length > 0) mapping[path] = names;\n    }\n  };\n\n  walk(template, \"\");\n  return mapping;\n}\n"],"mappings":";;;;AA2CA,SAAgB,EAAyB,GAA4B;CAInE,OAHI,KAAS,EAAc,CAAK,IACvB,EAAsB,cAAc,IAEtC,EAAsB,cAAc;AAC7C;AAGA,SAAgB,IAAmC;CACjD,OAAO,EAAsB,SAAS;AACxC;AAUA,SAAS,EACP,GACQ;CACR,IAAM,IAAO,EAAsB,CAAI;CACvC,IAAI,CAAC,GACH,MAAU,MACR,mDAAmD,EAAK,iFAE1D;CAEF,OAAO;AACT;AAiBA,SAAgB,EAAc,GAA4B;CACxD,OAAO,EAAM,MAAM,SAAS,YAAY,EAAM,MAAM,WAAW,KAAA;AACjE"}

package/dist/manifests/interface-validation.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");const e=require("./types.cjs");var t=/<[A-Za-z/!]/,n=/^[a-z0-9]+(-[a-z0-9]+)*$/,r=`https://docs.openhands.dev/`,i=/^[a-z][a-z-]*$/,a=/^\.[a-z][a-z.]*json$/,o=/^[a-z0-9][a-z0-9.-]*$/,s=/^\/[A-Za-z0-9/{}_-]*$/,c=/^[^{}]*\{id\}[^{}]*$/,l=[`github`,`gitlab`,`bitbucket`],u={name:{type:`text`,required:!0},prompt:{type:`textarea`,required:!1},model:{type:`llm-profile`,required:!1},timeout:{type:`number`,required:!1},schedule:{type:`schedule`,required:!1}},d=Object.keys(u),f=[`list`,`health`,`capabilities`,`validate`,`createPrompt`,`createPlugin`],p=[`detail`,`dispatch`,`runs`,`tarball`];function m(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function h(e,t){return typeof e==`string`&&t.includes(e)}var g=class{errors=[];fail(e,t){return this.errors.push(`${e}: ${t}`),!1}copy(e,n){return typeof e!=`string`||e.length===0?this.fail(n,`must be a non-empty string`):t.test(e)?this.fail(n,`must not contain markup`):!0}closed(e,t,n){Object.keys(e).filter(e=>!t.includes(e)).forEach(e=>this.fail(`${n}.${e}`,`is not allowed`))}record(e,t){return m(e)?!0:(this.fail(t,`must be an object`),!1)}};function _(e,t,n){e.record(t,`routes`)&&(e.closed(t,[`list`,`setup`,`detail`,`templates`],`routes`),[`list`,`setup`,`detail`].forEach(r=>{t[r]!==n[r]&&e.fail(`routes.${r}`,`must be "${n[r]}"`)}),t.templates!==void 0&&t.templates!==n.templates&&e.fail(`routes.templates`,n.templates===void 0?`is not a route this host mounts`:`must be "${n.templates}"`))}function v(t,n){if(!Array.isArray(n)||n.length===0){t.fail(`navigation.subPages`,`must be a non-empty array`);return}let r=new Set;n.forEach((n,i)=>{let a=`navigation.subPages[${i}]`;if(!t.record(n,a))return;t.closed(n,[`page`,`label`,`icon`],a);let{page:o,label:s,icon:c}=n;h(o,e.INTERFACE_SUB_PAGE_IDS)?r.has(o)?t.fail(`${a}.page`,`repeats a page`):r.add(o):t.fail(`${a}.page`,`is not a sub-page this host serves`),t.copy(s,`${a}.label`),y(t,c,`${a}.icon`)})}function y(t,n,r){h(n,e.INTERFACE_ICON_SLUGS)||t.fail(r,`is not an icon this host ships`)}function b(e,t){if(e.record(t,`navigation`)){if(e.closed(t,[`sidebar`,`commandMenu`,`subPages`],`navigation`),e.record(t.sidebar,`navigation.sidebar`)&&(e.closed(t.sidebar,[`label`],`navigation.sidebar`),e.copy(t.sidebar.label,`navigation.sidebar.label`)),e.record(t.commandMenu,`navigation.commandMenu`)){let n=t.commandMenu;e.closed(n,[`title`,`description`,`keywords`],`navigation.commandMenu`),e.copy(n.title,`navigation.commandMenu.title`),e.copy(n.description,`navigation.commandMenu.description`),e.copy(n.keywords,`navigation.commandMenu.keywords`)}t.subPages!==void 0&&v(e,t.subPages)}}function x(e,t){e.record(t,`pages`)&&(e.closed(t,[`list`,`detail`,`edit`,`templates`],`pages`),e.record(t.list,`pages.list`)&&(e.closed(t.list,[`title`,`subtitle`,`overview`,`filters`,`sort`,`insights`],`pages.list`),e.copy(t.list.title,`pages.list.title`),e.copy(t.list.subtitle,`pages.list.subtitle`),t.list.overview!==void 0&&S(e,t.list.overview),t.list.filters!==void 0&&T(e,t.list.filters),t.list.sort!==void 0&&O(e,t.list.sort),t.list.insights!==void 0&&A(e,t.list.insights)),e.record(t.detail,`pages.detail`)&&(e.closed(t.detail,[`backLabel`],`pages.detail`),e.copy(t.detail.backLabel,`pages.detail.backLabel`)),e.record(t.edit,`pages.edit`)&&(e.closed(t.edit,[`title`],`pages.edit`),e.copy(t.edit.title,`pages.edit.title`)),t.templates!==void 0&&j(e,t.templates))}function S(e,t){let n=`pages.list.overview`;if(!e.record(t,n))return;e.closed(t,[`label`,`tiles`],n),e.copy(t.label,`${n}.label`);let{tiles:r}=t;if(!Array.isArray(r)||r.length===0){e.fail(`${n}.tiles`,`must be a non-empty array`);return}let i=new Set;r.forEach((t,r)=>{C(e,t,i,`${n}.tiles[${r}]`)})}function C(t,n,r,i){if(!t.record(n,i))return;t.closed(n,[`metric`,`label`,`detail`,`zeroDetail`,`icon`],i);let{metric:a,label:o,detail:s,zeroDetail:c,icon:l}=n;if(t.copy(o,`${i}.label`),y(t,l,`${i}.icon`),!h(a,e.OVERVIEW_METRICS)){t.fail(`${i}.metric`,`is not a metric this host computes`),t.copy(s,`${i}.detail`),c!==void 0&&t.copy(c,`${i}.zeroDetail`);return}r.has(a)?t.fail(`${i}.metric`,`repeats a metric`):r.add(a),w(t,s,a,`${i}.detail`),c!==void 0&&w(t,c,a,`${i}.zeroDetail`)}function w(t,n,r,i){if(!t.copy(n,i))return;let a=e.OVERVIEW_TILE_PLACEHOLDERS[r];(a.length===0?/\{\{/:RegExp(`\\{\\{(?!(?:${a.join(`|`)})\\}\\})`)).test(n)&&t.fail(i,`uses a placeholder this metric does not expose`)}function T(e,t){let n=`pages.list.filters`;if(!Array.isArray(t)||t.length===0){e.fail(n,`must be a non-empty array`);return}let r=new Set;t.forEach((t,i)=>{E(e,t,r,`${n}[${i}]`)})}function E(t,n,r,i){if(!t.record(n,i))return;t.closed(n,[`id`,`label`,`options`],i);let{id:a,label:o,options:s}=n;if(t.copy(o,`${i}.label`),!h(a,e.DASHBOARD_FILTER_IDS)){t.fail(`${i}.id`,`is not a filter this host implements`);return}r.has(a)?t.fail(`${i}.id`,`repeats a filter`):r.add(a),D(t,s,e.DASHBOARD_FILTER_VALUES[a],`${i}.options`)}function D(e,t,n,r){if(!Array.isArray(t)||t.length<2){e.fail(r,`must offer at least two options`);return}let i=new Set;t.forEach((t,a)=>{let o=`${r}[${a}]`;if(!e.record(t,o))return;e.closed(t,[`value`,`label`],o);let{value:s,label:c}=t;h(s,n)?i.has(s)?e.fail(`${o}.value`,`repeats a value`):i.add(s):e.fail(`${o}.value`,`is not a value this host implements`),e.copy(c,`${o}.label`)}),i.has(`all`)||e.fail(r,`must offer the "all" option`)}function O(t,n){let r=`pages.list.sort`;if(!t.record(n,r))return;t.closed(n,[`label`,`options`,`default`],r);let{label:i,options:a,default:o}=n;t.copy(i,`${r}.label`);let s=new Set;!Array.isArray(a)||a.length===0?t.fail(`${r}.options`,`must be a non-empty array`):a.forEach((n,i)=>{let a=`${r}.options[${i}]`;t.record(n,a)&&(t.closed(n,[`value`,`label`],a),h(n.value,e.DASHBOARD_SORT_VALUES)?s.has(n.value)?t.fail(`${a}.value`,`repeats a value`):s.add(n.value):t.fail(`${a}.value`,`is not a sort this host implements`),t.copy(n.label,`${a}.label`))}),(typeof o!=`string`||!s.has(o))&&t.fail(`${r}.default`,`must be one of the declared option values`)}var k={health:[`healthy`,`failing`,`running`,`disabled`,`neverRun`,`checking`],lastRun:[`label`,`never`,`justNow`],stats:[`runs`,`recentSuccess`,`averageDuration`]};function A(e,t){let n=`pages.list.insights`;e.record(t,n)&&(e.closed(t,Object.keys(k),n),Object.keys(k).forEach(r=>{let i=`${n}.${r}`,a=t[r];if(!e.record(a,i))return;let o=k[r];e.closed(a,o,i),o.forEach(t=>{e.copy(a[t],`${i}.${t}`)})}))}function j(e,t){let n=`pages.templates`;e.record(t,n)&&(e.closed(t,[`title`,`description`],n),e.copy(t.title,`${n}.title`),e.copy(t.description,`${n}.description`))}function M(e,t){let n=m(t.routes)?t.routes:{},r=m(t.navigation)?t.navigation:{},i=m(t.pages)?t.pages:{},a=m(i.list)?i.list:{},o=[[`routes.templates`,n.templates],[`navigation.subPages`,r.subPages],[`pages.templates`,i.templates],[`pages.list.overview`,a.overview],[`pages.list.filters`,a.filters],[`pages.list.sort`,a.sort],[`pages.list.insights`,a.insights]],s=o.filter(([,e])=>e===void 0).map(([e])=>e);s.length===0||s.length===o.length||e.fail(`interface`,`the sub-page surface must be declared whole; missing ${s.join(`, `)}`)}function N(e,t,n,r){if(!e.record(n,r))return;e.closed(n,[`type`,`label`,`help`,`required`,`constraints`],r);let{type:i,label:a,help:o,required:s,constraints:c}=n;if(i!==t.type&&e.fail(`${r}.type`,`must be "${t.type}", the control this host renders`),e.copy(a,`${r}.label`),o!==void 0&&e.copy(o,`${r}.help`),s!==t.required&&e.fail(`${r}.required`,`must be ${t.required}, what this host enforces`),c!==void 0){if(t.type!==`number`)e.fail(`${r}.constraints`,`is only allowed on a number attribute`);else if(e.record(c,`${r}.constraints`)){e.closed(c,[`min`,`max`],`${r}.constraints`);let{min:t,max:n}=c;t!==void 0&&t!==1&&e.fail(`${r}.constraints.min`,`must be the 1 this host enforces`),n!==void 0&&(!Number.isInteger(n)||n<1)&&e.fail(`${r}.constraints.max`,`must be a positive integer`)}}}function P(e,t){if(!e.record(t,`attributes`))return;let n=Object.keys(t);n.length===0&&e.fail(`attributes`,`must declare at least one attribute`),n.forEach(n=>{if(!d.includes(n)){e.fail(`attributes.${n}`,`is not a settable attribute`);return}N(e,u[n],t[n],`attributes.${n}`)})}function F(e,t){if(!e.record(t,`importExport`))return;e.closed(t,[`fileKind`,`fileVersion`,`filenameSuffix`,`importDefaults`],`importExport`);let{fileKind:n,fileVersion:r,filenameSuffix:s,importDefaults:c}=t;(typeof n!=`string`||!i.test(n))&&e.fail(`importExport.fileKind`,`must be a lowercase slug`),r!==1&&e.fail(`importExport.fileVersion`,`must be 1`),(typeof s!=`string`||!a.test(s))&&e.fail(`importExport.filenameSuffix`,`must be a .json suffix`),e.record(c,`importExport.importDefaults`)&&(e.closed(c,[`repoProvider`,`placeholderEventSource`],`importExport.importDefaults`),(typeof c.repoProvider!=`string`||!l.includes(c.repoProvider))&&e.fail(`importExport.importDefaults.repoProvider`,`is not a supported provider`),(typeof c.placeholderEventSource!=`string`||!o.test(c.placeholderEventSource))&&e.fail(`importExport.importDefaults.placeholderEventSource`,`must be a lowercase event source`))}function I(e,t){if(!e.record(t,`endpoints`))return;let n=[...f,...p];e.closed(t,n,`endpoints`);let r=n=>{let r=t[n];return typeof r!=`string`||!s.test(r)||r.includes(`//`)?(e.fail(`endpoints.${n}`,`must be a rooted service-relative path`),null):r};f.forEach(t=>{let n=r(t);n!==null&&/[{}]/.test(n)&&e.fail(`endpoints.${t}`,`must not carry a substitution`)}),p.forEach(t=>{let n=r(t);n!==null&&!c.test(n)&&e.fail(`endpoints.${t}`,`must carry exactly one {id}`)})}function L(e,t,r){if(!Array.isArray(t)||t.length===0)return e.fail(r,`must be a non-empty array`),[];let i=t.filter(t=>typeof t==`string`&&n.test(t)?!0:(e.fail(r,`must contain only lowercase slugs`),!1));return new Set(i).size!==i.length&&e.fail(r,`must not repeat an id`),i}var R=[`version`,`routes`,`navigation`,`pages`,`docsUrl`,`attributes`,`importExport`,`endpoints`,`featuredAutomationIds`,`responderIntegrationIds`];function z(e,t){if(!m(e))return{valid:!1,errors:[`interface: must be an object`]};if(e.version!==`1.0`)return{valid:!1,errors:[`interface.version: must be "1.0"`]};let n=new g;return n.closed(e,R,`interface`),_(n,e.routes,t.mountedRoutes),b(n,e.navigation),x(n,e.pages),(typeof e.docsUrl!=`string`||!e.docsUrl.startsWith(r))&&n.fail(`docsUrl`,`must start with ${r}`),P(n,e.attributes),F(n,e.importExport),I(n,e.endpoints),L(n,e.featuredAutomationIds,`featuredAutomationIds`).forEach(e=>{t.catalogIds.has(e)||n.fail(`featuredAutomationIds`,`${e} is not a catalog entry`)}),L(n,e.responderIntegrationIds,`responderIntegrationIds`),M(n,e),{valid:n.errors.length===0,errors:n.errors}}exports.validateInterfaceManifest=z;
+require("../_virtual/_rolldown/runtime.cjs");const e=require("./types.cjs");var t=/<[A-Za-z/!]/,n=/^[a-z0-9]+(-[a-z0-9]+)*$/,r=`https://docs.openhands.dev/`,i=/^[a-z][a-z-]*$/,a=/^\.[a-z][a-z.]*json$/,o=/^[a-z0-9][a-z0-9.-]*$/,s=/^\/[A-Za-z0-9/{}_-]*$/,c=/^[^{}]*\{id\}[^{}]*$/,l=[`github`,`gitlab`,`bitbucket`],u={name:{type:`text`,required:!0},prompt:{type:`textarea`,required:!1},model:{type:`llm-profile`,required:!1},timeout:{type:`number`,required:!1},schedule:{type:`schedule`,required:!1}},d=Object.keys(u),f=[`list`,`health`,`capabilities`,`validate`,`createPrompt`,`createPlugin`],p=[`createBundle`,`uploads`],m=[`detail`,`dispatch`,`runs`,`tarball`];function h(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function g(e,t){return typeof e==`string`&&t.includes(e)}var _=class{errors=[];fail(e,t){return this.errors.push(`${e}: ${t}`),!1}copy(e,n){return typeof e!=`string`||e.length===0?this.fail(n,`must be a non-empty string`):t.test(e)?this.fail(n,`must not contain markup`):!0}closed(e,t,n){Object.keys(e).filter(e=>!t.includes(e)).forEach(e=>this.fail(`${n}.${e}`,`is not allowed`))}record(e,t){return h(e)?!0:(this.fail(t,`must be an object`),!1)}};function v(e,t,n){e.record(t,`routes`)&&(e.closed(t,[`list`,`setup`,`detail`,`templates`],`routes`),[`list`,`setup`,`detail`].forEach(r=>{t[r]!==n[r]&&e.fail(`routes.${r}`,`must be "${n[r]}"`)}),t.templates!==void 0&&t.templates!==n.templates&&e.fail(`routes.templates`,n.templates===void 0?`is not a route this host mounts`:`must be "${n.templates}"`))}function y(t,n){if(!Array.isArray(n)||n.length===0){t.fail(`navigation.subPages`,`must be a non-empty array`);return}let r=new Set;n.forEach((n,i)=>{let a=`navigation.subPages[${i}]`;if(!t.record(n,a))return;t.closed(n,[`page`,`label`,`icon`],a);let{page:o,label:s,icon:c}=n;g(o,e.INTERFACE_SUB_PAGE_IDS)?r.has(o)?t.fail(`${a}.page`,`repeats a page`):r.add(o):t.fail(`${a}.page`,`is not a sub-page this host serves`),t.copy(s,`${a}.label`),b(t,c,`${a}.icon`)})}function b(t,n,r){g(n,e.INTERFACE_ICON_SLUGS)||t.fail(r,`is not an icon this host ships`)}function x(e,t){if(e.record(t,`navigation`)){if(e.closed(t,[`sidebar`,`commandMenu`,`subPages`],`navigation`),e.record(t.sidebar,`navigation.sidebar`)&&(e.closed(t.sidebar,[`label`],`navigation.sidebar`),e.copy(t.sidebar.label,`navigation.sidebar.label`)),e.record(t.commandMenu,`navigation.commandMenu`)){let n=t.commandMenu;e.closed(n,[`title`,`description`,`keywords`],`navigation.commandMenu`),e.copy(n.title,`navigation.commandMenu.title`),e.copy(n.description,`navigation.commandMenu.description`),e.copy(n.keywords,`navigation.commandMenu.keywords`)}t.subPages!==void 0&&y(e,t.subPages)}}function S(e,t){e.record(t,`pages`)&&(e.closed(t,[`list`,`detail`,`edit`,`templates`],`pages`),e.record(t.list,`pages.list`)&&(e.closed(t.list,[`title`,`subtitle`,`overview`,`filters`,`sort`,`insights`],`pages.list`),e.copy(t.list.title,`pages.list.title`),e.copy(t.list.subtitle,`pages.list.subtitle`),t.list.overview!==void 0&&C(e,t.list.overview),t.list.filters!==void 0&&E(e,t.list.filters),t.list.sort!==void 0&&k(e,t.list.sort),t.list.insights!==void 0&&j(e,t.list.insights)),e.record(t.detail,`pages.detail`)&&(e.closed(t.detail,[`backLabel`],`pages.detail`),e.copy(t.detail.backLabel,`pages.detail.backLabel`)),e.record(t.edit,`pages.edit`)&&(e.closed(t.edit,[`title`],`pages.edit`),e.copy(t.edit.title,`pages.edit.title`)),t.templates!==void 0&&M(e,t.templates))}function C(e,t){let n=`pages.list.overview`;if(!e.record(t,n))return;e.closed(t,[`label`,`tiles`],n),e.copy(t.label,`${n}.label`);let{tiles:r}=t;if(!Array.isArray(r)||r.length===0){e.fail(`${n}.tiles`,`must be a non-empty array`);return}let i=new Set;r.forEach((t,r)=>{w(e,t,i,`${n}.tiles[${r}]`)})}function w(t,n,r,i){if(!t.record(n,i))return;t.closed(n,[`metric`,`label`,`detail`,`zeroDetail`,`icon`],i);let{metric:a,label:o,detail:s,zeroDetail:c,icon:l}=n;if(t.copy(o,`${i}.label`),b(t,l,`${i}.icon`),!g(a,e.OVERVIEW_METRICS)){t.fail(`${i}.metric`,`is not a metric this host computes`),t.copy(s,`${i}.detail`),c!==void 0&&t.copy(c,`${i}.zeroDetail`);return}r.has(a)?t.fail(`${i}.metric`,`repeats a metric`):r.add(a),T(t,s,a,`${i}.detail`),c!==void 0&&T(t,c,a,`${i}.zeroDetail`)}function T(t,n,r,i){if(!t.copy(n,i))return;let a=e.OVERVIEW_TILE_PLACEHOLDERS[r];(a.length===0?/\{\{/:RegExp(`\\{\\{(?!(?:${a.join(`|`)})\\}\\})`)).test(n)&&t.fail(i,`uses a placeholder this metric does not expose`)}function E(e,t){let n=`pages.list.filters`;if(!Array.isArray(t)||t.length===0){e.fail(n,`must be a non-empty array`);return}let r=new Set;t.forEach((t,i)=>{D(e,t,r,`${n}[${i}]`)})}function D(t,n,r,i){if(!t.record(n,i))return;t.closed(n,[`id`,`label`,`options`],i);let{id:a,label:o,options:s}=n;if(t.copy(o,`${i}.label`),!g(a,e.DASHBOARD_FILTER_IDS)){t.fail(`${i}.id`,`is not a filter this host implements`);return}r.has(a)?t.fail(`${i}.id`,`repeats a filter`):r.add(a),O(t,s,e.DASHBOARD_FILTER_VALUES[a],`${i}.options`)}function O(e,t,n,r){if(!Array.isArray(t)||t.length<2){e.fail(r,`must offer at least two options`);return}let i=new Set;t.forEach((t,a)=>{let o=`${r}[${a}]`;if(!e.record(t,o))return;e.closed(t,[`value`,`label`],o);let{value:s,label:c}=t;g(s,n)?i.has(s)?e.fail(`${o}.value`,`repeats a value`):i.add(s):e.fail(`${o}.value`,`is not a value this host implements`),e.copy(c,`${o}.label`)}),i.has(`all`)||e.fail(r,`must offer the "all" option`)}function k(t,n){let r=`pages.list.sort`;if(!t.record(n,r))return;t.closed(n,[`label`,`options`,`default`],r);let{label:i,options:a,default:o}=n;t.copy(i,`${r}.label`);let s=new Set;!Array.isArray(a)||a.length===0?t.fail(`${r}.options`,`must be a non-empty array`):a.forEach((n,i)=>{let a=`${r}.options[${i}]`;t.record(n,a)&&(t.closed(n,[`value`,`label`],a),g(n.value,e.DASHBOARD_SORT_VALUES)?s.has(n.value)?t.fail(`${a}.value`,`repeats a value`):s.add(n.value):t.fail(`${a}.value`,`is not a sort this host implements`),t.copy(n.label,`${a}.label`))}),(typeof o!=`string`||!s.has(o))&&t.fail(`${r}.default`,`must be one of the declared option values`)}var A={health:[`healthy`,`failing`,`running`,`disabled`,`neverRun`,`checking`],lastRun:[`label`,`never`,`justNow`],stats:[`runs`,`recentSuccess`,`averageDuration`]};function j(e,t){let n=`pages.list.insights`;e.record(t,n)&&(e.closed(t,Object.keys(A),n),Object.keys(A).forEach(r=>{let i=`${n}.${r}`,a=t[r];if(!e.record(a,i))return;let o=A[r];e.closed(a,o,i),o.forEach(t=>{e.copy(a[t],`${i}.${t}`)})}))}function M(e,t){let n=`pages.templates`;e.record(t,n)&&(e.closed(t,[`title`,`description`],n),e.copy(t.title,`${n}.title`),e.copy(t.description,`${n}.description`))}function N(e,t){let n=h(t.routes)?t.routes:{},r=h(t.navigation)?t.navigation:{},i=h(t.pages)?t.pages:{},a=h(i.list)?i.list:{},o=[[`routes.templates`,n.templates],[`navigation.subPages`,r.subPages],[`pages.templates`,i.templates],[`pages.list.overview`,a.overview],[`pages.list.filters`,a.filters],[`pages.list.sort`,a.sort],[`pages.list.insights`,a.insights]],s=o.filter(([,e])=>e===void 0).map(([e])=>e);s.length===0||s.length===o.length||e.fail(`interface`,`the sub-page surface must be declared whole; missing ${s.join(`, `)}`)}function P(e,t,n,r){if(!e.record(n,r))return;e.closed(n,[`type`,`label`,`help`,`required`,`constraints`],r);let{type:i,label:a,help:o,required:s,constraints:c}=n;if(i!==t.type&&e.fail(`${r}.type`,`must be "${t.type}", the control this host renders`),e.copy(a,`${r}.label`),o!==void 0&&e.copy(o,`${r}.help`),s!==t.required&&e.fail(`${r}.required`,`must be ${t.required}, what this host enforces`),c!==void 0){if(t.type!==`number`)e.fail(`${r}.constraints`,`is only allowed on a number attribute`);else if(e.record(c,`${r}.constraints`)){e.closed(c,[`min`,`max`],`${r}.constraints`);let{min:t,max:n}=c;t!==void 0&&t!==1&&e.fail(`${r}.constraints.min`,`must be the 1 this host enforces`),n!==void 0&&(!Number.isInteger(n)||n<1)&&e.fail(`${r}.constraints.max`,`must be a positive integer`)}}}function F(e,t){if(!e.record(t,`attributes`))return;let n=Object.keys(t);n.length===0&&e.fail(`attributes`,`must declare at least one attribute`),n.forEach(n=>{if(!d.includes(n)){e.fail(`attributes.${n}`,`is not a settable attribute`);return}P(e,u[n],t[n],`attributes.${n}`)})}function I(e,t){if(!e.record(t,`importExport`))return;e.closed(t,[`fileKind`,`fileVersion`,`filenameSuffix`,`importDefaults`],`importExport`);let{fileKind:n,fileVersion:r,filenameSuffix:s,importDefaults:c}=t;(typeof n!=`string`||!i.test(n))&&e.fail(`importExport.fileKind`,`must be a lowercase slug`),r!==1&&e.fail(`importExport.fileVersion`,`must be 1`),(typeof s!=`string`||!a.test(s))&&e.fail(`importExport.filenameSuffix`,`must be a .json suffix`),e.record(c,`importExport.importDefaults`)&&(e.closed(c,[`repoProvider`,`placeholderEventSource`],`importExport.importDefaults`),(typeof c.repoProvider!=`string`||!l.includes(c.repoProvider))&&e.fail(`importExport.importDefaults.repoProvider`,`is not a supported provider`),(typeof c.placeholderEventSource!=`string`||!o.test(c.placeholderEventSource))&&e.fail(`importExport.importDefaults.placeholderEventSource`,`must be a lowercase event source`))}function L(e,t){if(!e.record(t,`endpoints`))return;let n=[...f,...p,...m];e.closed(t,n,`endpoints`);let r=n=>{let r=t[n];return typeof r!=`string`||!s.test(r)||r.includes(`//`)?(e.fail(`endpoints.${n}`,`must be a rooted service-relative path`),null):r};[...f,...p.filter(e=>e in t)].forEach(t=>{let n=r(t);n!==null&&/[{}]/.test(n)&&e.fail(`endpoints.${t}`,`must not carry a substitution`)}),m.forEach(t=>{let n=r(t);n!==null&&!c.test(n)&&e.fail(`endpoints.${t}`,`must carry exactly one {id}`)})}function R(e,t,r){if(!Array.isArray(t)||t.length===0)return e.fail(r,`must be a non-empty array`),[];let i=t.filter(t=>typeof t==`string`&&n.test(t)?!0:(e.fail(r,`must contain only lowercase slugs`),!1));return new Set(i).size!==i.length&&e.fail(r,`must not repeat an id`),i}var z=[`version`,`routes`,`navigation`,`pages`,`docsUrl`,`attributes`,`importExport`,`endpoints`,`featuredAutomationIds`,`responderIntegrationIds`];function B(e,t){if(!h(e))return{valid:!1,errors:[`interface: must be an object`]};if(e.version!==`1.0`)return{valid:!1,errors:[`interface.version: must be "1.0"`]};let n=new _;return n.closed(e,z,`interface`),v(n,e.routes,t.mountedRoutes),x(n,e.navigation),S(n,e.pages),(typeof e.docsUrl!=`string`||!e.docsUrl.startsWith(r))&&n.fail(`docsUrl`,`must start with ${r}`),F(n,e.attributes),I(n,e.importExport),L(n,e.endpoints),R(n,e.featuredAutomationIds,`featuredAutomationIds`).forEach(e=>{t.catalogIds.has(e)||n.fail(`featuredAutomationIds`,`${e} is not a catalog entry`)}),R(n,e.responderIntegrationIds,`responderIntegrationIds`),N(n,e),{valid:n.errors.length===0,errors:n.errors}}exports.validateInterfaceManifest=B;
 //# sourceMappingURL=interface-validation.cjs.map