@openhands/agent-canvas 1.14.0 → 1.16.0

package/dist/api/mcp-health/probe-mcp-server-health.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("./mcp-health-store.cjs"),t=require("../../utils/mcp-server-health-key.cjs"),n=require("../../utils/mcp-credential-validation.cjs"),r=require("../../utils/redact-mcp-secrets.cjs"),i=require("../mcp-service/mcp-service.api.cjs");var a=/\b(401|403)\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;function o(e,t){return{status:`failed`,kind:`unknown`,error:r.redactMcpSecrets(t instanceof Error?t.message:String(t),e),checkedAt:Date.now()}}function s(e,t){let r=Date.now();if(!t.ok)return{status:`failed`,kind:(t.error_kind===`connection`||t.error_kind===`unknown`)&&a.test(t.error)?`credentials`:t.error_kind,error:t.error,checkedAt:r};let i=n.getCredentialValidationForServer(e);return{status:`healthy`,verification:i&&t.tools.includes(i.toolCall.name)&&t.tool_result&&!t.tool_result.is_error?`verified`:`connectivity-only`,toolCount:t.tools.length,checkedAt:r}}async function c(n){let r=t.getMcpServerHealthKey(n),a=e.beginMcpHealthCheck(r),c;try{c=s(n,await i.default.testServer(n))}catch(e){c=o(n,e)}e.resolveMcpHealthCheck(r,a,c)}async function l(n){let r=t.getMcpServerHealthKey(n),a=e.beginMcpHealthCheck(r);try{let t=await i.default.authorizeOAuth(n);return e.resolveMcpHealthCheck(r,a,s(n,t)),t}catch(t){return e.resolveMcpHealthCheck(r,a,o(n,t)),null}}function u(n,r,i){let a=t.getMcpServerHealthKey(n);i.some(e=>t.getMcpServerHealthKey(e)===a)||e.setMcpServerHealth(a,s(n,r))}exports.probeMcpServerHealth=c,exports.reauthorizeMcpServerHealth=l,exports.seedMcpServerHealth=u;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../utils/mcp-credential-validation.cjs"),t=require("../../utils/redact-mcp-secrets.cjs"),n=require("../mcp-service/mcp-service.api.cjs"),r=require("../../utils/mcp-server-health-key.cjs"),i=require("./mcp-health-store.cjs");var a=/\b(401|403)\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;function o(e,n){return{status:`failed`,kind:`unknown`,error:t.redactMcpSecrets(n instanceof Error?n.message:String(n),e),checkedAt:Date.now()}}function s(t,n){let r=Date.now();if(!n.ok)return{status:`failed`,kind:(n.error_kind===`connection`||n.error_kind===`unknown`)&&a.test(n.error)?`credentials`:n.error_kind,error:n.error,checkedAt:r};let i=e.getCredentialValidationForServer(t);return{status:`healthy`,verification:i&&n.tools.includes(i.toolCall.name)&&n.tool_result&&!n.tool_result.is_error?`verified`:`connectivity-only`,toolCount:n.tools.length,checkedAt:r}}async function c(e){let t=r.getMcpServerHealthKey(e),a=i.beginMcpHealthCheck(t),c;try{c=s(e,await n.default.testServer(e))}catch(t){c=o(e,t)}i.resolveMcpHealthCheck(t,a,c)}async function l(e){let t=r.getMcpServerHealthKey(e),a=i.beginMcpHealthCheck(t);try{let r=await n.default.authorizeOAuth(e);return i.resolveMcpHealthCheck(t,a,s(e,r)),r}catch(n){return i.resolveMcpHealthCheck(t,a,o(e,n)),null}}function u(e,t,n){let a=r.getMcpServerHealthKey(e);n.some(e=>r.getMcpServerHealthKey(e)===a)||i.setMcpServerHealth(a,s(e,t))}exports.probeMcpServerHealth=c,exports.reauthorizeMcpServerHealth=l,exports.seedMcpServerHealth=u;
 //# sourceMappingURL=probe-mcp-server-health.cjs.map

package/dist/api/mcp-health/probe-mcp-server-health.js

@@ -1,55 +1,55 @@
-import { beginMcpHealthCheck as e, resolveMcpHealthCheck as t, setMcpServerHealth as n } from "./mcp-health-store.js";
+import { getCredentialValidationForServer as e } from "../../utils/mcp-credential-validation.js";
+import { redactMcpSecrets as t } from "../../utils/redact-mcp-secrets.js";
+import n from "../mcp-service/mcp-service.api.js";
 import { getMcpServerHealthKey as r } from "../../utils/mcp-server-health-key.js";
-import { getCredentialValidationForServer as i } from "../../utils/mcp-credential-validation.js";
-import { redactMcpSecrets as a } from "../../utils/redact-mcp-secrets.js";
-import o from "../mcp-service/mcp-service.api.js";
+import { beginMcpHealthCheck as i, resolveMcpHealthCheck as a, setMcpServerHealth as o } from "./mcp-health-store.js";
 //#region src/api/mcp-health/probe-mcp-server-health.ts
 var s = /\b(401|403)\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;
-function c(e, t) {
+function c(e, n) {
 	return {
 		status: "failed",
 		kind: "unknown",
-		error: a(t instanceof Error ? t.message : String(t), e),
+		error: t(n instanceof Error ? n.message : String(n), e),
 		checkedAt: Date.now()
 	};
 }
-function l(e, t) {
-	let n = Date.now();
-	if (!t.ok) return {
+function l(t, n) {
+	let r = Date.now();
+	if (!n.ok) return {
 		status: "failed",
-		kind: (t.error_kind === "connection" || t.error_kind === "unknown") && s.test(t.error) ? "credentials" : t.error_kind,
-		error: t.error,
-		checkedAt: n
+		kind: (n.error_kind === "connection" || n.error_kind === "unknown") && s.test(n.error) ? "credentials" : n.error_kind,
+		error: n.error,
+		checkedAt: r
 	};
-	let r = i(e);
+	let i = e(t);
 	return {
 		status: "healthy",
-		verification: r && t.tools.includes(r.toolCall.name) && t.tool_result && !t.tool_result.is_error ? "verified" : "connectivity-only",
-		toolCount: t.tools.length,
-		checkedAt: n
+		verification: i && n.tools.includes(i.toolCall.name) && n.tool_result && !n.tool_result.is_error ? "verified" : "connectivity-only",
+		toolCount: n.tools.length,
+		checkedAt: r
 	};
 }
-async function u(n) {
-	let i = r(n), a = e(i), s;
+async function u(e) {
+	let t = r(e), o = i(t), s;
 	try {
-		s = l(n, await o.testServer(n));
-	} catch (e) {
-		s = c(n, e);
+		s = l(e, await n.testServer(e));
+	} catch (t) {
+		s = c(e, t);
 	}
-	t(i, a, s);
+	a(t, o, s);
 }
-async function d(n) {
-	let i = r(n), a = e(i);
+async function d(e) {
+	let t = r(e), o = i(t);
 	try {
-		let e = await o.authorizeOAuth(n);
-		return t(i, a, l(n, e)), e;
-	} catch (e) {
-		return t(i, a, c(n, e)), null;
+		let r = await n.authorizeOAuth(e);
+		return a(t, o, l(e, r)), r;
+	} catch (n) {
+		return a(t, o, c(e, n)), null;
 	}
 }
-function f(e, t, i) {
-	let a = r(e);
-	i.some((e) => r(e) === a) || n(a, l(e, t));
+function f(e, t, n) {
+	let i = r(e);
+	n.some((e) => r(e) === i) || o(i, l(e, t));
 }
 //#endregion
 export { u as probeMcpServerHealth, d as reauthorizeMcpServerHealth, f as seedMcpServerHealth };

package/dist/api/open-hands.types.d.ts

@@ -100,29 +100,10 @@ export interface InputMetadata {
     name: string;
     description: string;
 }
-export interface Microagent {
-    name: string;
-    type: "repo" | "knowledge" | "agentskills";
-    content: string;
-    triggers: string[];
-}
-export interface GetMicroagentsResponse {
-    microagents: Microagent[];
-}
-export interface GetMicroagentPromptResponse {
-    status: string;
-    prompt: string;
-}
 export interface IOption<T> {
     label: string;
     value: T;
 }
-export interface MicroagentContentResponse {
-    content: string;
-    path: string;
-    git_provider: Provider;
-    triggers: string[];
-}
 export type GetFilesResponse = string[];
 export interface GetFileResponse {
     code: string;

package/dist/api/profiles-service/profiles-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"profiles-service.api.cjs","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/**\n * ProfilesService is the single entry point for LLM-profile CRUD, routing per\n * active backend so callers (hooks, the settings manager) stay backend-agnostic:\n * - local agent-server: the SDK's ProfilesClient (`/api/profiles`), created\n *   per-call to pick up current backend configuration;\n * - cloud app-server: `src/api/cloud/profiles-service.api.ts` (the org-gated\n *   `/api/organizations/{orgId}/profiles` routes, or the per-user settings\n *   route as a fallback) via the org-scoped cloud proxy.\n * This mirrors how SettingsService branches to fetchCloudSettings().\n *\n * Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n *\n * Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n  ProfilesClient,\n  type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport {\n  type ProfileInfo,\n  type ProfileListResponse,\n  type ProfileDetailResponse,\n  type ProfileMutationResponse,\n  type ActivateProfileResponse,\n  type SaveProfileRequest,\n  type ExposeSecretsMode,\n  type ValidateProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  activateCloudProfile,\n  deleteCloudProfile,\n  fetchCloudProfile,\n  fetchCloudProfiles,\n  renameCloudProfile,\n  saveCloudProfile,\n} from \"../cloud/profiles-service.api\";\n\n// Re-export SDK types for consumers\nexport type {\n  ProfileInfo,\n  ProfileListResponse,\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n};\n\nfunction isCloudBackend(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction isAbortLike(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const name = \"name\" in error ? error.name : undefined;\n  if (name === \"AbortError\" || name === \"TimeoutError\") return true;\n  const cause = \"cause\" in error ? error.cause : undefined;\n  return (\n    !!cause &&\n    typeof cause === \"object\" &&\n    \"name\" in cause &&\n    (cause.name === \"AbortError\" || cause.name === \"TimeoutError\")\n  );\n}\n\nclass ProfilesService {\n  static async listProfiles(): Promise<ProfileListResponse> {\n    if (isCloudBackend()) return fetchCloudProfiles();\n    return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<ProfileDetailResponse> {\n    // Cloud never exposes profile secrets (api_key is always nulled with an\n    // api_key_set flag), so `exposeSecrets` is local-only.\n    if (isCloudBackend()) return fetchCloudProfile(name);\n    const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n    return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n      name,\n      options,\n    );\n  }\n\n  static async saveProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return saveCloudProfile(name, request);\n    return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n      name,\n      request,\n    );\n  }\n\n  static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return deleteCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n      name,\n    );\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return renameCloudProfile(name, newName);\n    return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n      name,\n      newName,\n    );\n  }\n\n  static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n    if (isCloudBackend()) return activateCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n      name,\n    );\n  }\n\n  /**\n   * Pre-flight check: fire a minimal LLM completion to catch misconfigurations\n   * (invalid model names, missing provider prefixes, bad base URLs, invalid\n   * API keys) before a profile is saved.\n   *\n   * Returns `{ valid: true }` when the LLM responds, or\n   * `{ valid: false, error: { type, message } }` on a blocking error.\n   * Transient errors (rate limits, timeouts) are non-blocking.\n   *\n   * Cloud backends do not implement this endpoint; `null` signals\n   * \"no verdict\" so callers fall through to the normal save path.\n   */\n  static async validateProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ValidateProfileResponse | null> {\n    if (isCloudBackend()) return null;\n    const client = new ProfilesClient({\n      ...getAgentServerClientOptions(),\n      timeout: 30000,\n    });\n    try {\n      return await client.validateProfile(name, request);\n    } catch (error) {\n      // Older agent-server versions don't have the endpoint → 404\n      // Treat as \"no verdict\" rather than blocking the save.\n      const status =\n        error && typeof error === \"object\" && \"status\" in error\n          ? (error as { status?: unknown }).status\n          : undefined;\n      if (\n        status === 404 ||\n        status === 429 ||\n        (typeof status === \"number\" && status >= 500) ||\n        isAbortLike(error)\n      ) {\n        return null;\n      }\n      throw error;\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProfilesService;\n"],"mappings":"sXAuDA,SAAS,GAA0B,CACjC,OAAO,EAAA,iBAAiB,EAAE,QAAQ,OAAS,OAC7C,CAEA,SAAS,EAAY,EAAyB,CAC5C,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,MAAO,GAChD,IAAM,EAAO,SAAU,EAAQ,EAAM,KAAO,IAAA,GAC5C,GAAI,IAAS,cAAgB,IAAS,eAAgB,MAAO,GAC7D,IAAM,EAAQ,UAAW,EAAQ,EAAM,MAAQ,IAAA,GAC/C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,SAAU,IACT,EAAM,OAAS,cAAgB,EAAM,OAAS,eAEnD,CAEA,IAAM,EAAN,KAAsB,CACpB,aAAa,cAA6C,CAExD,OADI,EAAe,EAAU,EAAA,mBAAmB,EACzC,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,aAAa,CACxE,CAEA,aAAa,WACX,EACA,EACgC,CAGhC,GAAI,EAAe,EAAG,OAAO,EAAA,kBAAkB,CAAI,EACnD,IAAM,EAA6B,EAAgB,CAAE,eAAc,EAAI,CAAC,EACxE,OAAO,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,WACvD,EACA,CACF,CACF,CAEA,aAAa,YACX,EACA,EACkC,CAElC,OADI,EAAe,EAAU,EAAA,iBAAiB,EAAM,CAAO,EACpD,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,YACvD,EACA,CACF,CACF,CAEA,aAAa,cAAc,EAAgD,CAEzE,OADI,EAAe,EAAU,EAAA,mBAAmB,CAAI,EAC7C,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,cACvD,CACF,CACF,CAEA,aAAa,cACX,EACA,EACkC,CAElC,OADI,EAAe,EAAU,EAAA,mBAAmB,EAAM,CAAO,EACtD,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,cACvD,EACA,CACF,CACF,CAEA,aAAa,gBAAgB,EAAgD,CAE3E,OADI,EAAe,EAAU,EAAA,qBAAqB,CAAI,EAC/C,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBACvD,CACF,CACF,CAcA,aAAa,gBACX,EACA,EACyC,CACzC,GAAI,EAAe,EAAG,OAAO,KAC7B,IAAM,EAAS,IAAI,EAAA,eAAe,CAChC,GAAG,EAAA,4BAA4B,EAC/B,QAAS,GACX,CAAC,EACD,GAAI,CACF,OAAO,MAAM,EAAO,gBAAgB,EAAM,CAAO,CACnD,OAAS,EAAO,CAGd,IAAM,EACJ,GAAS,OAAO,GAAU,UAAY,WAAY,EAC7C,EAA+B,OAChC,IAAA,GACN,GACE,IAAW,KACX,IAAW,KACV,OAAO,GAAW,UAAY,GAAU,KACzC,EAAY,CAAK,EAEjB,OAAO,KAET,MAAM,CACR,QAAU,CACR,EAAO,MAAM,CACf,CACF,CACF"}
+{"version":3,"file":"profiles-service.api.cjs","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/**\n * ProfilesService is the single entry point for LLM-profile CRUD, routing per\n * active backend so callers (hooks, the settings manager) stay backend-agnostic:\n * - local agent-server: the SDK's ProfilesClient (`/api/profiles`), created\n *   per-call to pick up current backend configuration;\n * - cloud app-server: `src/api/cloud/profiles-service.api.ts` (the org-gated\n *   `/api/organizations/{orgId}/profiles` routes, or the per-user settings\n *   route as a fallback) via the org-scoped cloud proxy.\n * This mirrors how SettingsService branches to fetchCloudSettings().\n *\n * Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n *\n * Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n  ProfilesClient,\n  type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n  ProfileInfo as ClientProfileInfo,\n  ProfileListResponse as ClientProfileListResponse,\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  activateCloudProfile,\n  deleteCloudProfile,\n  fetchCloudProfile,\n  fetchCloudProfiles,\n  renameCloudProfile,\n  saveCloudProfile,\n} from \"../cloud/profiles-service.api\";\n\n/**\n * Profile summaries carry an optional `provider_connection_id` (the shared\n * provider connection a profile links to), but `@openhands/typescript-client`\n * predates that field. Widen the client types here so consumers can read it; it\n * stays optional, so a client response without the field is still assignable.\n */\nexport interface ProfileInfo extends ClientProfileInfo {\n  provider_connection_id?: string | null;\n  /** True when provider_connection_id is set but the referenced connection no longer exists. */\n  provider_connection_broken?: boolean;\n}\n\nexport interface ProfileListResponse extends Omit<\n  ClientProfileListResponse,\n  \"profiles\"\n> {\n  profiles: ProfileInfo[];\n}\n\n// Re-export SDK types for consumers\nexport type {\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n};\n\nfunction isCloudBackend(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction isAbortLike(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const name = \"name\" in error ? error.name : undefined;\n  if (name === \"AbortError\" || name === \"TimeoutError\") return true;\n  const cause = \"cause\" in error ? error.cause : undefined;\n  return (\n    !!cause &&\n    typeof cause === \"object\" &&\n    \"name\" in cause &&\n    (cause.name === \"AbortError\" || cause.name === \"TimeoutError\")\n  );\n}\n\nclass ProfilesService {\n  static async listProfiles(): Promise<ProfileListResponse> {\n    if (isCloudBackend()) return fetchCloudProfiles();\n    return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<ProfileDetailResponse> {\n    // Cloud never exposes profile secrets (api_key is always nulled with an\n    // api_key_set flag), so `exposeSecrets` is local-only.\n    if (isCloudBackend()) return fetchCloudProfile(name);\n    const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n    return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n      name,\n      options,\n    );\n  }\n\n  static async saveProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return saveCloudProfile(name, request);\n    return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n      name,\n      request,\n    );\n  }\n\n  static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return deleteCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n      name,\n    );\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return renameCloudProfile(name, newName);\n    return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n      name,\n      newName,\n    );\n  }\n\n  static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n    if (isCloudBackend()) return activateCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n      name,\n    );\n  }\n\n  /**\n   * Pre-flight check: fire a minimal LLM completion to catch misconfigurations\n   * (invalid model names, missing provider prefixes, bad base URLs, invalid\n   * API keys) before a profile is saved.\n   *\n   * Returns `{ valid: true }` when the LLM responds, or\n   * `{ valid: false, error: { type, message } }` on a blocking error.\n   * Transient errors (rate limits, timeouts) are non-blocking.\n   *\n   * Cloud backends do not implement this endpoint; `null` signals\n   * \"no verdict\" so callers fall through to the normal save path.\n   */\n  static async validateProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ValidateProfileResponse | null> {\n    if (isCloudBackend()) return null;\n    const client = new ProfilesClient({\n      ...getAgentServerClientOptions(),\n      timeout: 30000,\n    });\n    try {\n      return await client.validateProfile(name, request);\n    } catch (error) {\n      // Older agent-server versions don't have the endpoint → 404\n      // Treat as \"no verdict\" rather than blocking the save.\n      const status =\n        error && typeof error === \"object\" && \"status\" in error\n          ? (error as { status?: unknown }).status\n          : undefined;\n      if (\n        status === 404 ||\n        status === 429 ||\n        (typeof status === \"number\" && status >= 500) ||\n        isAbortLike(error)\n      ) {\n        return null;\n      }\n      throw error;\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProfilesService;\n"],"mappings":"sXAwEA,SAAS,GAA0B,CACjC,OAAO,EAAA,iBAAiB,EAAE,QAAQ,OAAS,OAC7C,CAEA,SAAS,EAAY,EAAyB,CAC5C,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,MAAO,GAChD,IAAM,EAAO,SAAU,EAAQ,EAAM,KAAO,IAAA,GAC5C,GAAI,IAAS,cAAgB,IAAS,eAAgB,MAAO,GAC7D,IAAM,EAAQ,UAAW,EAAQ,EAAM,MAAQ,IAAA,GAC/C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,SAAU,IACT,EAAM,OAAS,cAAgB,EAAM,OAAS,eAEnD,CAEA,IAAM,EAAN,KAAsB,CACpB,aAAa,cAA6C,CAExD,OADI,EAAe,EAAU,EAAA,mBAAmB,EACzC,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,aAAa,CACxE,CAEA,aAAa,WACX,EACA,EACgC,CAGhC,GAAI,EAAe,EAAG,OAAO,EAAA,kBAAkB,CAAI,EACnD,IAAM,EAA6B,EAAgB,CAAE,eAAc,EAAI,CAAC,EACxE,OAAO,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,WACvD,EACA,CACF,CACF,CAEA,aAAa,YACX,EACA,EACkC,CAElC,OADI,EAAe,EAAU,EAAA,iBAAiB,EAAM,CAAO,EACpD,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,YACvD,EACA,CACF,CACF,CAEA,aAAa,cAAc,EAAgD,CAEzE,OADI,EAAe,EAAU,EAAA,mBAAmB,CAAI,EAC7C,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,cACvD,CACF,CACF,CAEA,aAAa,cACX,EACA,EACkC,CAElC,OADI,EAAe,EAAU,EAAA,mBAAmB,EAAM,CAAO,EACtD,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,cACvD,EACA,CACF,CACF,CAEA,aAAa,gBAAgB,EAAgD,CAE3E,OADI,EAAe,EAAU,EAAA,qBAAqB,CAAI,EAC/C,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBACvD,CACF,CACF,CAcA,aAAa,gBACX,EACA,EACyC,CACzC,GAAI,EAAe,EAAG,OAAO,KAC7B,IAAM,EAAS,IAAI,EAAA,eAAe,CAChC,GAAG,EAAA,4BAA4B,EAC/B,QAAS,GACX,CAAC,EACD,GAAI,CACF,OAAO,MAAM,EAAO,gBAAgB,EAAM,CAAO,CACnD,OAAS,EAAO,CAGd,IAAM,EACJ,GAAS,OAAO,GAAU,UAAY,WAAY,EAC7C,EAA+B,OAChC,IAAA,GACN,GACE,IAAW,KACX,IAAW,KACV,OAAO,GAAW,UAAY,GAAU,KACzC,EAAY,CAAK,EAEjB,OAAO,KAET,MAAM,CACR,QAAU,CACR,EAAO,MAAM,CACf,CACF,CACF"}

package/dist/api/profiles-service/profiles-service.api.d.ts

@@ -1,5 +1,19 @@
-import { type ProfileInfo, type ProfileListResponse, type ProfileDetailResponse, type ProfileMutationResponse, type ActivateProfileResponse, type SaveProfileRequest, type ExposeSecretsMode, type ValidateProfileResponse } from "@openhands/typescript-client";
-export type { ProfileInfo, ProfileListResponse, ProfileDetailResponse, ProfileMutationResponse, ActivateProfileResponse, SaveProfileRequest, ExposeSecretsMode, ValidateProfileResponse, };
+import type { ProfileInfo as ClientProfileInfo, ProfileListResponse as ClientProfileListResponse, ProfileDetailResponse, ProfileMutationResponse, ActivateProfileResponse, SaveProfileRequest, ExposeSecretsMode, ValidateProfileResponse } from "@openhands/typescript-client";
+/**
+ * Profile summaries carry an optional `provider_connection_id` (the shared
+ * provider connection a profile links to), but `@openhands/typescript-client`
+ * predates that field. Widen the client types here so consumers can read it; it
+ * stays optional, so a client response without the field is still assignable.
+ */
+export interface ProfileInfo extends ClientProfileInfo {
+    provider_connection_id?: string | null;
+    /** True when provider_connection_id is set but the referenced connection no longer exists. */
+    provider_connection_broken?: boolean;
+}
+export interface ProfileListResponse extends Omit<ClientProfileListResponse, "profiles"> {
+    profiles: ProfileInfo[];
+}
+export type { ProfileDetailResponse, ProfileMutationResponse, ActivateProfileResponse, SaveProfileRequest, ExposeSecretsMode, ValidateProfileResponse, };
 declare class ProfilesService {
     static listProfiles(): Promise<ProfileListResponse>;
     static getProfile(name: string, exposeSecrets?: ExposeSecretsMode): Promise<ProfileDetailResponse>;

package/dist/api/profiles-service/profiles-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"profiles-service.api.js","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/**\n * ProfilesService is the single entry point for LLM-profile CRUD, routing per\n * active backend so callers (hooks, the settings manager) stay backend-agnostic:\n * - local agent-server: the SDK's ProfilesClient (`/api/profiles`), created\n *   per-call to pick up current backend configuration;\n * - cloud app-server: `src/api/cloud/profiles-service.api.ts` (the org-gated\n *   `/api/organizations/{orgId}/profiles` routes, or the per-user settings\n *   route as a fallback) via the org-scoped cloud proxy.\n * This mirrors how SettingsService branches to fetchCloudSettings().\n *\n * Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n *\n * Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n  ProfilesClient,\n  type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport {\n  type ProfileInfo,\n  type ProfileListResponse,\n  type ProfileDetailResponse,\n  type ProfileMutationResponse,\n  type ActivateProfileResponse,\n  type SaveProfileRequest,\n  type ExposeSecretsMode,\n  type ValidateProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  activateCloudProfile,\n  deleteCloudProfile,\n  fetchCloudProfile,\n  fetchCloudProfiles,\n  renameCloudProfile,\n  saveCloudProfile,\n} from \"../cloud/profiles-service.api\";\n\n// Re-export SDK types for consumers\nexport type {\n  ProfileInfo,\n  ProfileListResponse,\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n};\n\nfunction isCloudBackend(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction isAbortLike(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const name = \"name\" in error ? error.name : undefined;\n  if (name === \"AbortError\" || name === \"TimeoutError\") return true;\n  const cause = \"cause\" in error ? error.cause : undefined;\n  return (\n    !!cause &&\n    typeof cause === \"object\" &&\n    \"name\" in cause &&\n    (cause.name === \"AbortError\" || cause.name === \"TimeoutError\")\n  );\n}\n\nclass ProfilesService {\n  static async listProfiles(): Promise<ProfileListResponse> {\n    if (isCloudBackend()) return fetchCloudProfiles();\n    return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<ProfileDetailResponse> {\n    // Cloud never exposes profile secrets (api_key is always nulled with an\n    // api_key_set flag), so `exposeSecrets` is local-only.\n    if (isCloudBackend()) return fetchCloudProfile(name);\n    const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n    return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n      name,\n      options,\n    );\n  }\n\n  static async saveProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return saveCloudProfile(name, request);\n    return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n      name,\n      request,\n    );\n  }\n\n  static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return deleteCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n      name,\n    );\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return renameCloudProfile(name, newName);\n    return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n      name,\n      newName,\n    );\n  }\n\n  static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n    if (isCloudBackend()) return activateCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n      name,\n    );\n  }\n\n  /**\n   * Pre-flight check: fire a minimal LLM completion to catch misconfigurations\n   * (invalid model names, missing provider prefixes, bad base URLs, invalid\n   * API keys) before a profile is saved.\n   *\n   * Returns `{ valid: true }` when the LLM responds, or\n   * `{ valid: false, error: { type, message } }` on a blocking error.\n   * Transient errors (rate limits, timeouts) are non-blocking.\n   *\n   * Cloud backends do not implement this endpoint; `null` signals\n   * \"no verdict\" so callers fall through to the normal save path.\n   */\n  static async validateProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ValidateProfileResponse | null> {\n    if (isCloudBackend()) return null;\n    const client = new ProfilesClient({\n      ...getAgentServerClientOptions(),\n      timeout: 30000,\n    });\n    try {\n      return await client.validateProfile(name, request);\n    } catch (error) {\n      // Older agent-server versions don't have the endpoint → 404\n      // Treat as \"no verdict\" rather than blocking the save.\n      const status =\n        error && typeof error === \"object\" && \"status\" in error\n          ? (error as { status?: unknown }).status\n          : undefined;\n      if (\n        status === 404 ||\n        status === 429 ||\n        (typeof status === \"number\" && status >= 500) ||\n        isAbortLike(error)\n      ) {\n        return null;\n      }\n      throw error;\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProfilesService;\n"],"mappings":";;;;;;AAuDA,SAAS,IAA0B;CACjC,OAAO,EAAiB,EAAE,QAAQ,SAAS;AAC7C;AAEA,SAAS,EAAY,GAAyB;CAC5C,IAAI,CAAC,KAAS,OAAO,KAAU,UAAU,OAAO;CAChD,IAAM,IAAO,UAAU,IAAQ,EAAM,OAAO,KAAA;CAC5C,IAAI,MAAS,gBAAgB,MAAS,gBAAgB,OAAO;CAC7D,IAAM,IAAQ,WAAW,IAAQ,EAAM,QAAQ,KAAA;CAC/C,OACE,CAAC,CAAC,KACF,OAAO,KAAU,YACjB,UAAU,MACT,EAAM,SAAS,gBAAgB,EAAM,SAAS;AAEnD;AAEA,IAAM,IAAN,MAAsB;CACpB,aAAa,eAA6C;EAExD,OADI,EAAe,IAAU,EAAmB,IACzC,IAAI,EAAe,EAA4B,CAAC,EAAE,aAAa;CACxE;CAEA,aAAa,WACX,GACA,GACgC;EAGhC,IAAI,EAAe,GAAG,OAAO,EAAkB,CAAI;EACnD,IAAM,IAA6B,IAAgB,EAAE,iBAAc,IAAI,CAAC;EACxE,OAAO,IAAI,EAAe,EAA4B,CAAC,EAAE,WACvD,GACA,CACF;CACF;CAEA,aAAa,YACX,GACA,GACkC;EAElC,OADI,EAAe,IAAU,EAAiB,GAAM,CAAO,IACpD,IAAI,EAAe,EAA4B,CAAC,EAAE,YACvD,GACA,CACF;CACF;CAEA,aAAa,cAAc,GAAgD;EAEzE,OADI,EAAe,IAAU,EAAmB,CAAI,IAC7C,IAAI,EAAe,EAA4B,CAAC,EAAE,cACvD,CACF;CACF;CAEA,aAAa,cACX,GACA,GACkC;EAElC,OADI,EAAe,IAAU,EAAmB,GAAM,CAAO,IACtD,IAAI,EAAe,EAA4B,CAAC,EAAE,cACvD,GACA,CACF;CACF;CAEA,aAAa,gBAAgB,GAAgD;EAE3E,OADI,EAAe,IAAU,EAAqB,CAAI,IAC/C,IAAI,EAAe,EAA4B,CAAC,EAAE,gBACvD,CACF;CACF;CAcA,aAAa,gBACX,GACA,GACyC;EACzC,IAAI,EAAe,GAAG,OAAO;EAC7B,IAAM,IAAS,IAAI,EAAe;GAChC,GAAG,EAA4B;GAC/B,SAAS;EACX,CAAC;EACD,IAAI;GACF,OAAO,MAAM,EAAO,gBAAgB,GAAM,CAAO;EACnD,SAAS,GAAO;GAGd,IAAM,IACJ,KAAS,OAAO,KAAU,YAAY,YAAY,IAC7C,EAA+B,SAChC,KAAA;GACN,IACE,MAAW,OACX,MAAW,OACV,OAAO,KAAW,YAAY,KAAU,OACzC,EAAY,CAAK,GAEjB,OAAO;GAET,MAAM;EACR,UAAU;GACR,EAAO,MAAM;EACf;CACF;AACF"}
+{"version":3,"file":"profiles-service.api.js","names":[],"sources":["../../../src/api/profiles-service/profiles-service.api.ts"],"sourcesContent":["/**\n * ProfilesService is the single entry point for LLM-profile CRUD, routing per\n * active backend so callers (hooks, the settings manager) stay backend-agnostic:\n * - local agent-server: the SDK's ProfilesClient (`/api/profiles`), created\n *   per-call to pick up current backend configuration;\n * - cloud app-server: `src/api/cloud/profiles-service.api.ts` (the org-gated\n *   `/api/organizations/{orgId}/profiles` routes, or the per-user settings\n *   route as a fallback) via the org-scoped cloud proxy.\n * This mirrors how SettingsService branches to fetchCloudSettings().\n *\n * Uses ProfilesClient from @openhands/typescript-client v0.2.0+.\n * All types are re-exported from the SDK for consumer convenience.\n *\n * Note: Unlike some SDK clients, we don't call client.close() here for\n * consistency with other services (SettingsService, SecretsService) that\n * also create SDK clients without explicit cleanup. The SDK clients use\n * fetch-based HTTP which doesn't require connection cleanup.\n */\nimport {\n  ProfilesClient,\n  type GetProfileOptions,\n} from \"@openhands/typescript-client/clients\";\nimport type {\n  ProfileInfo as ClientProfileInfo,\n  ProfileListResponse as ClientProfileListResponse,\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n} from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  activateCloudProfile,\n  deleteCloudProfile,\n  fetchCloudProfile,\n  fetchCloudProfiles,\n  renameCloudProfile,\n  saveCloudProfile,\n} from \"../cloud/profiles-service.api\";\n\n/**\n * Profile summaries carry an optional `provider_connection_id` (the shared\n * provider connection a profile links to), but `@openhands/typescript-client`\n * predates that field. Widen the client types here so consumers can read it; it\n * stays optional, so a client response without the field is still assignable.\n */\nexport interface ProfileInfo extends ClientProfileInfo {\n  provider_connection_id?: string | null;\n  /** True when provider_connection_id is set but the referenced connection no longer exists. */\n  provider_connection_broken?: boolean;\n}\n\nexport interface ProfileListResponse extends Omit<\n  ClientProfileListResponse,\n  \"profiles\"\n> {\n  profiles: ProfileInfo[];\n}\n\n// Re-export SDK types for consumers\nexport type {\n  ProfileDetailResponse,\n  ProfileMutationResponse,\n  ActivateProfileResponse,\n  SaveProfileRequest,\n  ExposeSecretsMode,\n  ValidateProfileResponse,\n};\n\nfunction isCloudBackend(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\nfunction isAbortLike(error: unknown): boolean {\n  if (!error || typeof error !== \"object\") return false;\n  const name = \"name\" in error ? error.name : undefined;\n  if (name === \"AbortError\" || name === \"TimeoutError\") return true;\n  const cause = \"cause\" in error ? error.cause : undefined;\n  return (\n    !!cause &&\n    typeof cause === \"object\" &&\n    \"name\" in cause &&\n    (cause.name === \"AbortError\" || cause.name === \"TimeoutError\")\n  );\n}\n\nclass ProfilesService {\n  static async listProfiles(): Promise<ProfileListResponse> {\n    if (isCloudBackend()) return fetchCloudProfiles();\n    return new ProfilesClient(getAgentServerClientOptions()).listProfiles();\n  }\n\n  static async getProfile(\n    name: string,\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<ProfileDetailResponse> {\n    // Cloud never exposes profile secrets (api_key is always nulled with an\n    // api_key_set flag), so `exposeSecrets` is local-only.\n    if (isCloudBackend()) return fetchCloudProfile(name);\n    const options: GetProfileOptions = exposeSecrets ? { exposeSecrets } : {};\n    return new ProfilesClient(getAgentServerClientOptions()).getProfile(\n      name,\n      options,\n    );\n  }\n\n  static async saveProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return saveCloudProfile(name, request);\n    return new ProfilesClient(getAgentServerClientOptions()).saveProfile(\n      name,\n      request,\n    );\n  }\n\n  static async deleteProfile(name: string): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return deleteCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).deleteProfile(\n      name,\n    );\n  }\n\n  static async renameProfile(\n    name: string,\n    newName: string,\n  ): Promise<ProfileMutationResponse> {\n    if (isCloudBackend()) return renameCloudProfile(name, newName);\n    return new ProfilesClient(getAgentServerClientOptions()).renameProfile(\n      name,\n      newName,\n    );\n  }\n\n  static async activateProfile(name: string): Promise<ActivateProfileResponse> {\n    if (isCloudBackend()) return activateCloudProfile(name);\n    return new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n      name,\n    );\n  }\n\n  /**\n   * Pre-flight check: fire a minimal LLM completion to catch misconfigurations\n   * (invalid model names, missing provider prefixes, bad base URLs, invalid\n   * API keys) before a profile is saved.\n   *\n   * Returns `{ valid: true }` when the LLM responds, or\n   * `{ valid: false, error: { type, message } }` on a blocking error.\n   * Transient errors (rate limits, timeouts) are non-blocking.\n   *\n   * Cloud backends do not implement this endpoint; `null` signals\n   * \"no verdict\" so callers fall through to the normal save path.\n   */\n  static async validateProfile(\n    name: string,\n    request: SaveProfileRequest,\n  ): Promise<ValidateProfileResponse | null> {\n    if (isCloudBackend()) return null;\n    const client = new ProfilesClient({\n      ...getAgentServerClientOptions(),\n      timeout: 30000,\n    });\n    try {\n      return await client.validateProfile(name, request);\n    } catch (error) {\n      // Older agent-server versions don't have the endpoint → 404\n      // Treat as \"no verdict\" rather than blocking the save.\n      const status =\n        error && typeof error === \"object\" && \"status\" in error\n          ? (error as { status?: unknown }).status\n          : undefined;\n      if (\n        status === 404 ||\n        status === 429 ||\n        (typeof status === \"number\" && status >= 500) ||\n        isAbortLike(error)\n      ) {\n        return null;\n      }\n      throw error;\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProfilesService;\n"],"mappings":";;;;;;AAwEA,SAAS,IAA0B;CACjC,OAAO,EAAiB,EAAE,QAAQ,SAAS;AAC7C;AAEA,SAAS,EAAY,GAAyB;CAC5C,IAAI,CAAC,KAAS,OAAO,KAAU,UAAU,OAAO;CAChD,IAAM,IAAO,UAAU,IAAQ,EAAM,OAAO,KAAA;CAC5C,IAAI,MAAS,gBAAgB,MAAS,gBAAgB,OAAO;CAC7D,IAAM,IAAQ,WAAW,IAAQ,EAAM,QAAQ,KAAA;CAC/C,OACE,CAAC,CAAC,KACF,OAAO,KAAU,YACjB,UAAU,MACT,EAAM,SAAS,gBAAgB,EAAM,SAAS;AAEnD;AAEA,IAAM,IAAN,MAAsB;CACpB,aAAa,eAA6C;EAExD,OADI,EAAe,IAAU,EAAmB,IACzC,IAAI,EAAe,EAA4B,CAAC,EAAE,aAAa;CACxE;CAEA,aAAa,WACX,GACA,GACgC;EAGhC,IAAI,EAAe,GAAG,OAAO,EAAkB,CAAI;EACnD,IAAM,IAA6B,IAAgB,EAAE,iBAAc,IAAI,CAAC;EACxE,OAAO,IAAI,EAAe,EAA4B,CAAC,EAAE,WACvD,GACA,CACF;CACF;CAEA,aAAa,YACX,GACA,GACkC;EAElC,OADI,EAAe,IAAU,EAAiB,GAAM,CAAO,IACpD,IAAI,EAAe,EAA4B,CAAC,EAAE,YACvD,GACA,CACF;CACF;CAEA,aAAa,cAAc,GAAgD;EAEzE,OADI,EAAe,IAAU,EAAmB,CAAI,IAC7C,IAAI,EAAe,EAA4B,CAAC,EAAE,cACvD,CACF;CACF;CAEA,aAAa,cACX,GACA,GACkC;EAElC,OADI,EAAe,IAAU,EAAmB,GAAM,CAAO,IACtD,IAAI,EAAe,EAA4B,CAAC,EAAE,cACvD,GACA,CACF;CACF;CAEA,aAAa,gBAAgB,GAAgD;EAE3E,OADI,EAAe,IAAU,EAAqB,CAAI,IAC/C,IAAI,EAAe,EAA4B,CAAC,EAAE,gBACvD,CACF;CACF;CAcA,aAAa,gBACX,GACA,GACyC;EACzC,IAAI,EAAe,GAAG,OAAO;EAC7B,IAAM,IAAS,IAAI,EAAe;GAChC,GAAG,EAA4B;GAC/B,SAAS;EACX,CAAC;EACD,IAAI;GACF,OAAO,MAAM,EAAO,gBAAgB,GAAM,CAAO;EACnD,SAAS,GAAO;GAGd,IAAM,IACJ,KAAS,OAAO,KAAU,YAAY,YAAY,IAC7C,EAA+B,SAChC,KAAA;GACN,IACE,MAAW,OACX,MAAW,OACV,OAAO,KAAW,YAAY,KAAU,OACzC,EAAY,CAAK,GAEjB,OAAO;GAET,MAAM;EACR,UAAU;GACR,EAAO,MAAM;EACf;CACF;AACF"}

package/dist/api/provider-connections-service/provider-connections-service.api.cjs

@@ -0,0 +1,2 @@
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/openhands-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../agent-server-client-options.cjs");var n=`/api/llm/provider-connections`;function r(){let{host:n,apiKey:r}=t.getAgentServerClientOptions();return new e.AgentServerClient({host:n,...r?{apiKey:r}:{}})}var i=class{static async list(){let e=r();try{return await e.get(n,{responseType:`json`})}finally{e.close()}}static async create(e){let t=r();try{return await t.post(n,e,{responseType:`json`})}finally{t.close()}}static async update(e,t){let i=r();try{return await i.patch(`${n}/${encodeURIComponent(e)}`,t,{responseType:`json`})}finally{i.close()}}static async delete(e){let t=r();try{return await t.delete(`${n}/${encodeURIComponent(e)}`,{responseType:`json`})}finally{t.close()}}};exports.default=i;
+//# sourceMappingURL=provider-connections-service.api.cjs.map

package/dist/api/provider-connections-service/provider-connections-service.api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-connections-service.api.cjs","names":[],"sources":["../../../src/api/provider-connections-service/provider-connections-service.api.ts"],"sourcesContent":["/**\n * ProviderConnectionsService is a thin wrapper over the local agent-server's\n * `/api/llm/provider-connections` CRUD endpoints. A provider connection is a\n * shared `api_key` + optional `base_url` that one or more LLM profiles\n * reference by id; the agent-server resolves the credential into a runnable LLM\n * at profile-load time, so this service only manages the stored connections.\n *\n * These endpoints exist only on the agent-server (local backend). Cloud has no\n * equivalent yet, so callers must gate usage on `backend.kind === \"local\"`.\n *\n * There is no generated client for these routes in `@openhands/typescript-client`\n * yet, so requests go through the generic `AgentServerClient` verb helpers —\n * the same approach `LLMBalanceService` uses.\n */\nimport { AgentServerClient } from \"@openhands/typescript-client/clients\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\nconst PROVIDER_CONNECTIONS_PATH = \"/api/llm/provider-connections\";\n\nexport interface ProviderConnection {\n  id: string;\n  display_name: string;\n  provider: string;\n  base_url: string | null;\n  created_at: number;\n  updated_at: number;\n  /** Whether the stored connection currently holds a usable key. */\n  api_key_set: boolean;\n}\n\nexport interface CreateProviderConnectionRequest {\n  display_name: string;\n  provider: string;\n  api_key: string;\n  base_url?: string | null;\n}\n\n/**\n * Partial update. Only the provided fields change. `api_key` may be sent to\n * rotate the key; the agent-server rejects `api_key: null` (a connection must\n * always keep a key), so callers omit it to leave the key unchanged.\n */\nexport interface UpdateProviderConnectionRequest {\n  display_name?: string;\n  provider?: string;\n  api_key?: string;\n  base_url?: string | null;\n}\n\nfunction createClient(): AgentServerClient {\n  const { host, apiKey } = getAgentServerClientOptions();\n  return new AgentServerClient({ host, ...(apiKey ? { apiKey } : {}) });\n}\n\nclass ProviderConnectionsService {\n  static async list(): Promise<ProviderConnection[]> {\n    const client = createClient();\n    try {\n      return await client.get<ProviderConnection[]>(PROVIDER_CONNECTIONS_PATH, {\n        responseType: \"json\",\n      });\n    } finally {\n      client.close();\n    }\n  }\n\n  static async create(\n    request: CreateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.post<ProviderConnection>(\n        PROVIDER_CONNECTIONS_PATH,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async update(\n    id: string,\n    request: UpdateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.patch<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async delete(id: string): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.delete<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProviderConnectionsService;\n"],"mappings":"sRAiBA,IAAM,EAA4B,gCAgClC,SAAS,GAAkC,CACzC,GAAM,CAAE,OAAM,UAAW,EAAA,4BAA4B,EACrD,OAAO,IAAI,EAAA,kBAAkB,CAAE,OAAM,GAAI,EAAS,CAAE,QAAO,EAAI,CAAC,CAAG,CAAC,CACtE,CAEA,IAAM,EAAN,KAAiC,CAC/B,aAAa,MAAsC,CACjD,IAAM,EAAS,EAAa,EAC5B,GAAI,CACF,OAAO,MAAM,EAAO,IAA0B,EAA2B,CACvE,aAAc,MAChB,CAAC,CACH,QAAU,CACR,EAAO,MAAM,CACf,CACF,CAEA,aAAa,OACX,EAC6B,CAC7B,IAAM,EAAS,EAAa,EAC5B,GAAI,CACF,OAAO,MAAM,EAAO,KAClB,EACA,EACA,CAAE,aAAc,MAAO,CACzB,CACF,QAAU,CACR,EAAO,MAAM,CACf,CACF,CAEA,aAAa,OACX,EACA,EAC6B,CAC7B,IAAM,EAAS,EAAa,EAC5B,GAAI,CACF,OAAO,MAAM,EAAO,MAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,IACrD,EACA,CAAE,aAAc,MAAO,CACzB,CACF,QAAU,CACR,EAAO,MAAM,CACf,CACF,CAEA,aAAa,OAAO,EAAyC,CAC3D,IAAM,EAAS,EAAa,EAC5B,GAAI,CACF,OAAO,MAAM,EAAO,OAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,IACrD,CAAE,aAAc,MAAO,CACzB,CACF,QAAU,CACR,EAAO,MAAM,CACf,CACF,CACF"}

package/dist/api/provider-connections-service/provider-connections-service.api.d.ts

@@ -0,0 +1,34 @@
+export interface ProviderConnection {
+    id: string;
+    display_name: string;
+    provider: string;
+    base_url: string | null;
+    created_at: number;
+    updated_at: number;
+    /** Whether the stored connection currently holds a usable key. */
+    api_key_set: boolean;
+}
+export interface CreateProviderConnectionRequest {
+    display_name: string;
+    provider: string;
+    api_key: string;
+    base_url?: string | null;
+}
+/**
+ * Partial update. Only the provided fields change. `api_key` may be sent to
+ * rotate the key; the agent-server rejects `api_key: null` (a connection must
+ * always keep a key), so callers omit it to leave the key unchanged.
+ */
+export interface UpdateProviderConnectionRequest {
+    display_name?: string;
+    provider?: string;
+    api_key?: string;
+    base_url?: string | null;
+}
+declare class ProviderConnectionsService {
+    static list(): Promise<ProviderConnection[]>;
+    static create(request: CreateProviderConnectionRequest): Promise<ProviderConnection>;
+    static update(id: string, request: UpdateProviderConnectionRequest): Promise<ProviderConnection>;
+    static delete(id: string): Promise<ProviderConnection>;
+}
+export default ProviderConnectionsService;

package/dist/api/provider-connections-service/provider-connections-service.api.js

@@ -0,0 +1,50 @@
+import { AgentServerClient as e } from "../../node_modules/@openhands/typescript-client/dist/client/openhands-client.js";
+import "../../node_modules/@openhands/typescript-client/dist/clients.js";
+import { getAgentServerClientOptions as t } from "../agent-server-client-options.js";
+//#region src/api/provider-connections-service/provider-connections-service.api.ts
+var n = "/api/llm/provider-connections";
+function r() {
+	let { host: n, apiKey: r } = t();
+	return new e({
+		host: n,
+		...r ? { apiKey: r } : {}
+	});
+}
+var i = class {
+	static async list() {
+		let e = r();
+		try {
+			return await e.get(n, { responseType: "json" });
+		} finally {
+			e.close();
+		}
+	}
+	static async create(e) {
+		let t = r();
+		try {
+			return await t.post(n, e, { responseType: "json" });
+		} finally {
+			t.close();
+		}
+	}
+	static async update(e, t) {
+		let i = r();
+		try {
+			return await i.patch(`${n}/${encodeURIComponent(e)}`, t, { responseType: "json" });
+		} finally {
+			i.close();
+		}
+	}
+	static async delete(e) {
+		let t = r();
+		try {
+			return await t.delete(`${n}/${encodeURIComponent(e)}`, { responseType: "json" });
+		} finally {
+			t.close();
+		}
+	}
+};
+//#endregion
+export { i as default };
+
+//# sourceMappingURL=provider-connections-service.api.js.map

package/dist/api/provider-connections-service/provider-connections-service.api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-connections-service.api.js","names":[],"sources":["../../../src/api/provider-connections-service/provider-connections-service.api.ts"],"sourcesContent":["/**\n * ProviderConnectionsService is a thin wrapper over the local agent-server's\n * `/api/llm/provider-connections` CRUD endpoints. A provider connection is a\n * shared `api_key` + optional `base_url` that one or more LLM profiles\n * reference by id; the agent-server resolves the credential into a runnable LLM\n * at profile-load time, so this service only manages the stored connections.\n *\n * These endpoints exist only on the agent-server (local backend). Cloud has no\n * equivalent yet, so callers must gate usage on `backend.kind === \"local\"`.\n *\n * There is no generated client for these routes in `@openhands/typescript-client`\n * yet, so requests go through the generic `AgentServerClient` verb helpers —\n * the same approach `LLMBalanceService` uses.\n */\nimport { AgentServerClient } from \"@openhands/typescript-client/clients\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\nconst PROVIDER_CONNECTIONS_PATH = \"/api/llm/provider-connections\";\n\nexport interface ProviderConnection {\n  id: string;\n  display_name: string;\n  provider: string;\n  base_url: string | null;\n  created_at: number;\n  updated_at: number;\n  /** Whether the stored connection currently holds a usable key. */\n  api_key_set: boolean;\n}\n\nexport interface CreateProviderConnectionRequest {\n  display_name: string;\n  provider: string;\n  api_key: string;\n  base_url?: string | null;\n}\n\n/**\n * Partial update. Only the provided fields change. `api_key` may be sent to\n * rotate the key; the agent-server rejects `api_key: null` (a connection must\n * always keep a key), so callers omit it to leave the key unchanged.\n */\nexport interface UpdateProviderConnectionRequest {\n  display_name?: string;\n  provider?: string;\n  api_key?: string;\n  base_url?: string | null;\n}\n\nfunction createClient(): AgentServerClient {\n  const { host, apiKey } = getAgentServerClientOptions();\n  return new AgentServerClient({ host, ...(apiKey ? { apiKey } : {}) });\n}\n\nclass ProviderConnectionsService {\n  static async list(): Promise<ProviderConnection[]> {\n    const client = createClient();\n    try {\n      return await client.get<ProviderConnection[]>(PROVIDER_CONNECTIONS_PATH, {\n        responseType: \"json\",\n      });\n    } finally {\n      client.close();\n    }\n  }\n\n  static async create(\n    request: CreateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.post<ProviderConnection>(\n        PROVIDER_CONNECTIONS_PATH,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async update(\n    id: string,\n    request: UpdateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.patch<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async delete(id: string): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.delete<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProviderConnectionsService;\n"],"mappings":";;;;AAiBA,IAAM,IAA4B;AAgClC,SAAS,IAAkC;CACzC,IAAM,EAAE,SAAM,cAAW,EAA4B;CACrD,OAAO,IAAI,EAAkB;EAAE;EAAM,GAAI,IAAS,EAAE,UAAO,IAAI,CAAC;CAAG,CAAC;AACtE;AAEA,IAAM,IAAN,MAAiC;CAC/B,aAAa,OAAsC;EACjD,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,IAA0B,GAA2B,EACvE,cAAc,OAChB,CAAC;EACH,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GAC6B;EAC7B,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,KAClB,GACA,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GACA,GAC6B;EAC7B,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,MAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OAAO,GAAyC;EAC3D,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,OAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;AACF"}

package/dist/api/runtime-service/agent-server-runtime-service.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/file-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../../utils/websocket-url.cjs"),n=require("../backend-registry/active-store.cjs"),r=require("../agent-server-client-options.cjs"),i=require("../cloud/proxy.cjs"),a=require("../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.cjs");var o=class{static async executeCommand(e,o,s,c,l=30){let u=n.getActiveBackend().backend;if(u.kind===`cloud`&&e){let n=await i.callCloudProxy({backend:u,method:`POST`,hostOverride:t.buildHttpBaseUrl(e),path:`/api/bash/execute_bash_command`,body:{command:s,...c?{cwd:c}:{},timeout:Math.floor(l)},authMode:`session-api-key`,sessionApiKey:o,timeoutSeconds:l+10});return{exit_code:n.exit_code??-1,stdout:n.stdout??``,stderr:n.stderr??``}}let d=await new a.RemoteWorkspace(r.getAgentServerClientOptions({conversationUrl:e,sessionApiKey:o})).executeCommand(s,c,l);return{exit_code:d.exit_code,stdout:d.stdout,stderr:d.stderr}}static async downloadFile(a,o,s){let c=n.getActiveBackend().backend;return c.kind===`cloud`&&a?(await i.callCloudProxy({backend:c,method:`GET`,hostOverride:t.buildHttpBaseUrl(a),path:`/api/file/download?path=${encodeURIComponent(s)}`,authMode:`session-api-key`,sessionApiKey:o,responseType:`blob`})).arrayBuffer():new e.FileClient(r.getAgentServerClientOptions({conversationUrl:a,sessionApiKey:o})).downloadFile(s)}};exports.default=o;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/file-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../../utils/websocket-url.cjs"),n=require("../backend-registry/active-store.cjs"),r=require("../agent-server-client-options.cjs"),i=require("../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.cjs"),a=require("../cloud/proxy.cjs");var o=class{static async executeCommand(e,o,s,c,l=30){let u=n.getActiveBackend().backend;if(u.kind===`cloud`&&e){let n=await a.callCloudProxy({backend:u,method:`POST`,hostOverride:t.buildHttpBaseUrl(e),path:`/api/bash/execute_bash_command`,body:{command:s,...c?{cwd:c}:{},timeout:Math.floor(l)},authMode:`session-api-key`,sessionApiKey:o,timeoutSeconds:l+10});return{exit_code:n.exit_code??-1,stdout:n.stdout??``,stderr:n.stderr??``}}let d=await new i.RemoteWorkspace(r.getAgentServerClientOptions({conversationUrl:e,sessionApiKey:o})).executeCommand(s,c,l);return{exit_code:d.exit_code,stdout:d.stdout,stderr:d.stderr}}static async downloadFile(i,o,s){let c=n.getActiveBackend().backend;return c.kind===`cloud`&&i?(await a.callCloudProxy({backend:c,method:`GET`,hostOverride:t.buildHttpBaseUrl(i),path:`/api/file/download?path=${encodeURIComponent(s)}`,authMode:`session-api-key`,sessionApiKey:o,responseType:`blob`})).arrayBuffer():new e.FileClient(r.getAgentServerClientOptions({conversationUrl:i,sessionApiKey:o})).downloadFile(s)}};exports.default=o;
 //# sourceMappingURL=agent-server-runtime-service.cjs.map

package/dist/api/runtime-service/agent-server-runtime-service.js

@@ -3,14 +3,14 @@ import "../../node_modules/@openhands/typescript-client/dist/clients.js";
 import { buildHttpBaseUrl as t } from "../../utils/websocket-url.js";
 import { getActiveBackend as n } from "../backend-registry/active-store.js";
 import { getAgentServerClientOptions as r } from "../agent-server-client-options.js";
-import { callCloudProxy as i } from "../cloud/proxy.js";
-import { RemoteWorkspace as a } from "../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.js";
+import { RemoteWorkspace as i } from "../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.js";
+import { callCloudProxy as a } from "../cloud/proxy.js";
 //#region src/api/runtime-service/agent-server-runtime-service.ts
 var o = class {
 	static async executeCommand(e, o, s, c, l = 30) {
 		let u = n().backend;
 		if (u.kind === "cloud" && e) {
-			let n = await i({
+			let n = await a({
 				backend: u,
 				method: "POST",
 				hostOverride: t(e),
@@ -30,7 +30,7 @@ var o = class {
 				stderr: n.stderr ?? ""
 			};
 		}
-		let d = await new a(r({
+		let d = await new i(r({
 			conversationUrl: e,
 			sessionApiKey: o
 		})).executeCommand(s, c, l);
@@ -40,18 +40,18 @@ var o = class {
 			stderr: d.stderr
 		};
 	}
-	static async downloadFile(a, o, s) {
+	static async downloadFile(i, o, s) {
 		let c = n().backend;
-		return c.kind === "cloud" && a ? (await i({
+		return c.kind === "cloud" && i ? (await a({
 			backend: c,
 			method: "GET",
-			hostOverride: t(a),
+			hostOverride: t(i),
 			path: `/api/file/download?path=${encodeURIComponent(s)}`,
 			authMode: "session-api-key",
 			sessionApiKey: o,
 			responseType: "blob"
 		})).arrayBuffer() : new e(r({
-			conversationUrl: a,
+			conversationUrl: i,
 			sessionApiKey: o
 		})).downloadFile(s);
 	}

package/dist/api/settings-service/settings-service.api.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/settings-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../backend-registry/active-store.cjs"),n=require("../agent-server-client-options.cjs"),r=require("../../services/settings.cjs"),i=require("../../utils/mcp-config.cjs"),a=require("../cloud/settings-service.api.cjs");var o=[`language`,`user_consents_to_analytics`,`enable_sound_notifications`,`git_user_name`,`git_user_email`,`title_llm_profile`,`disabled_skills`],s=new Set(o),c=e=>s.has(e),l=e=>{let t={},n={};for(let[r,i]of Object.entries(e))c(r)?t[r]=i:n[r]=i;return{extracted:t,rest:n}},u=e=>JSON.parse(JSON.stringify(e)),d=(e,t)=>({...e??{},...t??{}});async function f(e,t=3,n=500){for(let r=0;r<t;r+=1)try{return await e()}catch(e){if(r>=t-1)throw e;let i=n*2**r;await new Promise(e=>{setTimeout(e,i)})}throw Error(`Retry attempts exhausted`)}var p={redacted:null,encrypted:null,timestamp:0},m=300*1e3,h=()=>Date.now()-p.timestamp<m,g=()=>{p={redacted:null,encrypted:null,timestamp:0}},_=e=>!!e&&typeof e==`object`&&!Array.isArray(e),v=(e,t)=>`Basic ${btoa(`${e}:${t}`)}`,y=e=>{switch(e.strategy){case`none`:return{};case`api_key`:{if(typeof e.value!=`string`||!e.value)return null;let t=typeof e.header_name==`string`&&e.header_name?e.header_name:`Authorization`,n=t===`Authorization`?`Bearer ${e.value}`:e.value;return{[t]:n}}case`bearer`:return typeof e.value!=`string`||!e.value?null:{Authorization:`Bearer ${e.value}`};case`basic`:return typeof e.username!=`string`||typeof e.password!=`string`?null:{Authorization:v(e.username,e.password)};case`header`:return i.stringRecord(e.headers)??{};case`oauth2`:{let t=_(e.state)?e.state.tokens:void 0;return!_(t)||typeof t.access_token!=`string`?null:{Authorization:`Bearer ${t.access_token}`}}default:return null}},b=async e=>{if(!_(e))return e;let n=_(e.mcpServers),r=n?e.mcpServers:e,o=Object.values(r).some(e=>_(e)&&_(e.auth)&&e.auth!==null)&&t.getActiveBackend().backend.kind===`cloud`,s=new Map;if(o)try{let e=await a.fetchCloudSettings(),t=_(e.mcp_config)?e.mcp_config:{};for(let[e,n]of Object.entries(t))if(_(n)){let t=i.stringRecord(n.headers);t&&s.set(e,t)}}catch{}let c=Object.fromEntries(Object.entries(r).map(([e,t])=>{if(!_(t))return[e,t];if(t.auth===null){let n={...t,headers:null};return delete n.auth,[e,n]}if(!_(t.auth))return[e,t];let n=y(t.auth);if(n===null)return[e,t];let r={...t},a={...i.stringRecord(t.headers)??{},...n},o=s.get(e);if(o)for(let e of Object.keys(o))e in a||(a[e]=null);return delete r.auth,Object.keys(a).length>0?r.headers=a:delete r.headers,[e,r]}));return n?{...e,mcpServers:c}:c},x=e=>{let t={agent_settings:e.agent_settings??{},conversation_settings:e.conversation_settings??{},llm_api_key_set:e.llm_api_key_is_set},n=e.misc_settings?.app_preferences;if(n)for(let e of o){let r=n[e];r!==void 0&&(t[e]=r)}return t},S=e=>{let t=d(r.DEFAULT_SETTINGS.agent_settings??{},e.agent_settings??{}),n=d(r.DEFAULT_SETTINGS.conversation_settings??{},e.conversation_settings??{}),i={...u(r.DEFAULT_SETTINGS),...e,provider_tokens_set:{...r.DEFAULT_SETTINGS.provider_tokens_set??{},...e.provider_tokens_set??{}},agent_settings:t,conversation_settings:n},a=t.llm,o=t.condenser;return typeof t.agent==`string`&&(i.agent=t.agent),typeof a?.model==`string`&&a.model.length>0&&(i.llm_model=a.model),typeof a?.base_url==`string`&&(i.llm_base_url=a.base_url),typeof o?.enabled==`boolean`&&(i.enable_default_condenser=o.enabled),typeof o?.max_size==`number`&&(i.condenser_max_size=o.max_size),typeof n.confirmation_mode==`boolean`&&(i.confirmation_mode=n.confirmation_mode),(typeof n.security_analyzer==`string`||n.security_analyzer===null)&&(i.security_analyzer=n.security_analyzer),typeof n.max_iterations==`number`&&(i.max_iterations=n.max_iterations),i.search_api_key_set=!!i.search_api_key,i},C=class r{static async fetchSettingsFromApi(t){return f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).getSettings({exposeSecrets:t}))}static async getSettings(){if(t.getActiveBackend().backend.kind===`cloud`)try{return S(await f(()=>a.fetchCloudSettings()))}catch(e){return console.warn(`Failed to fetch cloud settings, using defaults:`,e),S({})}if(h()&&p.redacted)return S(x(p.redacted));try{let e=await this.fetchSettingsFromApi();return p.redacted=e,p.timestamp=Date.now(),S(x(e))}catch(e){return console.warn(`Failed to fetch settings from API, using defaults:`,e),S({})}}static async getSettingsForConversation(){if(h()&&p.encrypted)return{agentSettings:p.encrypted.agent_settings,conversationSettings:p.encrypted.conversation_settings,secretsEncrypted:!0};let e=await this.fetchSettingsFromApi(`encrypted`);return p.encrypted=e,p.timestamp||=Date.now(),{agentSettings:e.agent_settings,conversationSettings:e.conversation_settings,secretsEncrypted:!0}}static async getSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getAgentSchema()}static async getConversationSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudConversationSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getConversationSchema()}static async patchMcpConfig(r){if(t.getActiveBackend().backend.kind===`cloud`){let e=await b(r);await f(()=>a.saveCloudSettings({agent_settings_diff:{mcp_config:e}}))}else await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings({agent_settings_diff:{mcp_config:r}}));return g(),!0}static async patchMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).patchMcpServer(i,a)),g(),!0)}static async createMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).createMcpServer(i,a)),g(),!0)}static async deleteMcpServer(i){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:null}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).deleteMcpServer(i)),g(),!0)}static async saveSettings(r){let{extracted:i,rest:o}=l(r),s=Object.keys(i).length>0,c={},u=o.agent_settings_diff;u&&Object.keys(u).length>0&&(c.agent_settings_diff=u);let d=o.conversation_settings_diff;if(d&&Object.keys(d).length>0&&(c.conversation_settings_diff=d),s&&(c.misc_settings_diff={app_preferences:i}),t.getActiveBackend().backend.kind===`cloud`){if(!(c.agent_settings_diff||c.conversation_settings_diff||s))return!0;let e={};c.agent_settings_diff&&(e.agent_settings_diff={...c.agent_settings_diff},`mcp_config`in e.agent_settings_diff&&(e.agent_settings_diff.mcp_config=await b(e.agent_settings_diff.mcp_config))),c.conversation_settings_diff&&(e.conversation_settings_diff=c.conversation_settings_diff),s&&(e.app_preferences=i),await f(()=>a.saveCloudSettings(e))}else{if(!(c.agent_settings_diff||c.conversation_settings_diff||c.misc_settings_diff))return!0;await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings(c))}return g(),!0}static invalidateCache(){g()}};exports.default=C;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/settings-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../backend-registry/active-store.cjs"),n=require("../agent-server-client-options.cjs"),r=require("../../services/settings.cjs"),i=require("../../utils/mcp-config.cjs"),a=require("../cloud/settings-service.api.cjs");var o=[`language`,`user_consents_to_analytics`,`enable_sound_notifications`,`git_user_name`,`git_user_email`,`title_llm_profile`,`disabled_skills`,`enabled_skills`],s=new Set(o),c=e=>s.has(e),l=e=>{let t={},n={};for(let[r,i]of Object.entries(e))c(r)?t[r]=i:n[r]=i;return{extracted:t,rest:n}},u=e=>JSON.parse(JSON.stringify(e)),d=(e,t)=>({...e??{},...t??{}});async function f(e,t=3,n=500){for(let r=0;r<t;r+=1)try{return await e()}catch(e){if(r>=t-1)throw e;let i=n*2**r;await new Promise(e=>{setTimeout(e,i)})}throw Error(`Retry attempts exhausted`)}var p={redacted:null,encrypted:null,timestamp:0},m=300*1e3,h=()=>Date.now()-p.timestamp<m,g=()=>{p={redacted:null,encrypted:null,timestamp:0}},_=e=>!!e&&typeof e==`object`&&!Array.isArray(e),v=(e,t)=>`Basic ${btoa(`${e}:${t}`)}`,y=e=>{switch(e.strategy){case`none`:return{};case`api_key`:{if(typeof e.value!=`string`||!e.value)return null;let t=typeof e.header_name==`string`&&e.header_name?e.header_name:`Authorization`,n=t===`Authorization`?`Bearer ${e.value}`:e.value;return{[t]:n}}case`bearer`:return typeof e.value!=`string`||!e.value?null:{Authorization:`Bearer ${e.value}`};case`basic`:return typeof e.username!=`string`||typeof e.password!=`string`?null:{Authorization:v(e.username,e.password)};case`header`:return i.stringRecord(e.headers)??{};case`oauth2`:{let t=_(e.state)?e.state.tokens:void 0;return!_(t)||typeof t.access_token!=`string`?null:{Authorization:`Bearer ${t.access_token}`}}default:return null}},b=async e=>{if(!_(e))return e;let n=_(e.mcpServers),r=n?e.mcpServers:e,o=Object.values(r).some(e=>_(e)&&_(e.auth)&&e.auth!==null)&&t.getActiveBackend().backend.kind===`cloud`,s=new Map;if(o)try{let e=await a.fetchCloudSettings(),t=_(e.mcp_config)?e.mcp_config:{};for(let[e,n]of Object.entries(t))if(_(n)){let t=i.stringRecord(n.headers);t&&s.set(e,t)}}catch{}let c=Object.fromEntries(Object.entries(r).map(([e,t])=>{if(!_(t))return[e,t];if(t.auth===null){let n={...t,headers:null};return delete n.auth,[e,n]}if(!_(t.auth))return[e,t];let n=y(t.auth);if(n===null)return[e,t];let r={...t},a={...i.stringRecord(t.headers)??{},...n},o=s.get(e);if(o)for(let e of Object.keys(o))e in a||(a[e]=null);return delete r.auth,Object.keys(a).length>0?r.headers=a:delete r.headers,[e,r]}));return n?{...e,mcpServers:c}:c},x=e=>{let t={agent_settings:e.agent_settings??{},conversation_settings:e.conversation_settings??{},llm_api_key_set:e.llm_api_key_is_set},n=e.misc_settings?.app_preferences;if(n)for(let e of o){let r=n[e];r!==void 0&&(t[e]=r)}return t},S=e=>{let t=d(r.DEFAULT_SETTINGS.agent_settings??{},e.agent_settings??{}),n=d(r.DEFAULT_SETTINGS.conversation_settings??{},e.conversation_settings??{}),i={...u(r.DEFAULT_SETTINGS),...e,provider_tokens_set:{...r.DEFAULT_SETTINGS.provider_tokens_set??{},...e.provider_tokens_set??{}},agent_settings:t,conversation_settings:n},a=t.llm,o=t.condenser;return typeof t.agent==`string`&&(i.agent=t.agent),typeof a?.model==`string`&&a.model.length>0&&(i.llm_model=a.model),typeof a?.base_url==`string`&&(i.llm_base_url=a.base_url),typeof o?.enabled==`boolean`&&(i.enable_default_condenser=o.enabled),typeof o?.max_size==`number`&&(i.condenser_max_size=o.max_size),typeof n.confirmation_mode==`boolean`&&(i.confirmation_mode=n.confirmation_mode),(typeof n.security_analyzer==`string`||n.security_analyzer===null)&&(i.security_analyzer=n.security_analyzer),typeof n.max_iterations==`number`&&(i.max_iterations=n.max_iterations),i.search_api_key_set=!!i.search_api_key,i},C=class r{static async fetchSettingsFromApi(t){return f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).getSettings({exposeSecrets:t}))}static async getSettings(){if(t.getActiveBackend().backend.kind===`cloud`)try{return S(await f(()=>a.fetchCloudSettings()))}catch(e){return console.warn(`Failed to fetch cloud settings, using defaults:`,e),S({})}if(h()&&p.redacted)return S(x(p.redacted));try{let e=await this.fetchSettingsFromApi();return p.redacted=e,p.timestamp=Date.now(),S(x(e))}catch(e){return console.warn(`Failed to fetch settings from API, using defaults:`,e),S({})}}static async getSettingsForConversation(){if(h()&&p.encrypted)return{agentSettings:p.encrypted.agent_settings,conversationSettings:p.encrypted.conversation_settings,secretsEncrypted:!0};let e=await this.fetchSettingsFromApi(`encrypted`);return p.encrypted=e,p.timestamp||=Date.now(),{agentSettings:e.agent_settings,conversationSettings:e.conversation_settings,secretsEncrypted:!0}}static async getSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getAgentSchema()}static async getConversationSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudConversationSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getConversationSchema()}static async patchMcpConfig(r){if(t.getActiveBackend().backend.kind===`cloud`){let e=await b(r);await f(()=>a.saveCloudSettings({agent_settings_diff:{mcp_config:e}}))}else await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings({agent_settings_diff:{mcp_config:r}}));return g(),!0}static async patchMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).patchMcpServer(i,a)),g(),!0)}static async createMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).createMcpServer(i,a)),g(),!0)}static async deleteMcpServer(i){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:null}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).deleteMcpServer(i)),g(),!0)}static async saveSettings(r){let{extracted:i,rest:o}=l(r),s=Object.keys(i).length>0,c={},u=o.agent_settings_diff;u&&Object.keys(u).length>0&&(c.agent_settings_diff=u);let d=o.conversation_settings_diff;if(d&&Object.keys(d).length>0&&(c.conversation_settings_diff=d),s&&(c.misc_settings_diff={app_preferences:i}),t.getActiveBackend().backend.kind===`cloud`){if(!(c.agent_settings_diff||c.conversation_settings_diff||s))return!0;let e={};c.agent_settings_diff&&(e.agent_settings_diff={...c.agent_settings_diff},`mcp_config`in e.agent_settings_diff&&(e.agent_settings_diff.mcp_config=await b(e.agent_settings_diff.mcp_config))),c.conversation_settings_diff&&(e.conversation_settings_diff=c.conversation_settings_diff),s&&(e.app_preferences=i),await f(()=>a.saveCloudSettings(e))}else{if(!(c.agent_settings_diff||c.conversation_settings_diff||c.misc_settings_diff))return!0;await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings(c))}return g(),!0}static invalidateCache(){g()}};exports.default=C;
 //# sourceMappingURL=settings-service.api.cjs.map