@openhands/agent-canvas 1.15.0 → 1.17.0

package/dist/api/agent-server-compatibility.js

@@ -6,14 +6,14 @@ import { getActiveBackend as r, getEffectiveLocalBackend as i, isNoBackend as a
 import { getAgentServerClientOptions as o } from "./agent-server-client-options.js";
 import s from "../config/defaults.js";
 //#region src/api/agent-server-compatibility.ts
-var c = 5e3, l = "unknown", u = s.compatibility.minimumAgentServer, d = "AGENT_SERVER_UNSUPPORTED_VERSION", f = "AGENT_SERVER_UNKNOWN_VERSION", p = null, m = null, h = (e) => Array.isArray(e?.usable_tools) ? e.usable_tools : null, g = class extends Error {
+var c = 5e3, l = "unknown", u = s.compatibility.minimumAgentServer, d = "AGENT_SERVER_UNSUPPORTED_VERSION", f = "AGENT_SERVER_UNKNOWN_VERSION", p = "Invalid API key", m = null, h = null, g = (e) => Array.isArray(e?.usable_tools) ? e.usable_tools : null, _ = class extends Error {
 	details;
 	noBackendConfigured;
 	constructor(e, t) {
 		let n = t?.noBackendConfigured ?? !1;
 		super(n ? "No agent server backend is configured yet. Add a backend to get started." : "Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page."), this.name = "AgentServerUnavailableError", this.details = e ?? null, this.noBackendConfigured = n;
 	}
-}, _ = (e) => e instanceof g || typeof e == "object" && !!e && "name" in e && (e.name === "AgentServerUnavailableError" || e.name === "AgentServerUnsupportedVersionError" || e.name === "AgentServerUnknownVersionError"), v = class extends g {
+}, v = (e) => e instanceof _ || typeof e == "object" && !!e && "name" in e && (e.name === "AgentServerUnavailableError" || e.name === "AgentServerUnsupportedVersionError" || e.name === "AgentServerUnknownVersionError"), y = class extends _ {
 	code = d;
 	actualVersion;
 	requiredVersion = u;
@@ -21,7 +21,7 @@ var c = 5e3, l = "unknown", u = s.compatibility.minimumAgentServer, d = "AGENT_S
 		let t = `Agent Canvas requires agent-server ${u} or newer; this backend is running ${e}. Please upgrade the agent-server backend.`;
 		super(t), this.name = "AgentServerUnsupportedVersionError", this.message = t, this.actualVersion = e;
 	}
-}, y = class extends g {
+}, b = class extends _ {
 	code = f;
 	actualVersion;
 	requiredVersion = u;
@@ -29,45 +29,45 @@ var c = 5e3, l = "unknown", u = s.compatibility.minimumAgentServer, d = "AGENT_S
 		let t = `Could not determine this backend's agent-server version.${e ? ` It reported "${e}".` : ""} Agent Canvas requires agent-server ${u} or newer, but this backend did not return a valid version from /server_info. Restart or rebuild the agent-server backend, then try again.`;
 		super(t), this.name = "AgentServerUnknownVersionError", this.message = t, this.actualVersion = e;
 	}
-}, b = (e) => n() && T(e, 401);
-function x() {
-	p = null, m = null;
-}
-function S(e) {
-	return e?.host && e.host !== m ? null : p;
+}, x = (e) => n() && E(e, 401);
+function S() {
+	m = null, h = null;
 }
 function C(e) {
-	let t = h(p);
-	return Array.isArray(t) ? t.includes(e) : !0;
+	return e?.host && e.host !== h ? null : m;
 }
 function w(e) {
+	let t = g(m);
+	return Array.isArray(t) ? t.includes(e) : !0;
+}
+function T(e) {
 	return e instanceof Error && e.name === "HttpError" && "status" in e && typeof e.status == "number";
 }
-function T(e, t) {
-	return w(e) && e.status === t;
-}
-function E(e) {
-	return typeof e == "string" && e.trim() || null;
+function E(e, t) {
+	return T(e) && e.status === t;
 }
 function D(e) {
-	return E(e.sdk_version);
+	return typeof e == "string" && e.trim() || null;
 }
 function O(e) {
-	return E(e.version) ?? D(e);
+	return D(e.sdk_version);
 }
 function k(e) {
-	let t = O(e);
-	return !t || t.toLowerCase() === l ? null : t;
+	return D(e.version) ?? O(e);
 }
 function A(e) {
 	let t = k(e);
-	return !t || !N(t) ? null : t;
+	return !t || t.toLowerCase() === l ? null : t;
 }
 function j(e) {
-	return !p || e && i()?.host !== e ? null : A(p);
+	let t = A(e);
+	return !t || !P(t) ? null : t;
 }
-function M(e, t) {
-	let n = N(e), r = N(t);
+function M(e) {
+	return !m || e && i()?.host !== e ? null : j(m);
+}
+function N(e, t) {
+	let n = P(e), r = P(t);
 	if (!n || !r) return null;
 	for (let e of [
 		"major",
@@ -79,7 +79,7 @@ function M(e, t) {
 	}
 	return n.prerelease && !r.prerelease ? -1 : !n.prerelease && r.prerelease ? 1 : n.prerelease && r.prerelease ? n.prerelease.localeCompare(r.prerelease) : 0;
 }
-function N(e) {
+function P(e) {
 	let [t] = e.trim().replace(/^v/, "").split("+"), [n, r] = t.split("-", 2), i = n.split(".");
 	if (i.length !== 3) return null;
 	let [a, o, s] = i.map((e) => Number(e));
@@ -94,17 +94,31 @@ function N(e) {
 		prerelease: r
 	} : null;
 }
-function P(e) {
-	let t = k(e);
-	if (!t) throw x(), new y(O(e));
-	let n = M(t, u);
-	if (n === null) throw x(), new y(t);
-	if (n < 0) throw x(), new v(t);
+function F(e) {
+	let t = A(e);
+	if (!t) throw S(), new b(k(e));
+	let n = N(t, u);
+	if (n === null) throw S(), new b(t);
+	if (n < 0) throw S(), new y(t);
+}
+async function I(n, r) {
+	let i = o({
+		host: n.host,
+		sessionApiKey: n.apiKey || null,
+		timeout: r
+	});
+	try {
+		await new t(i).getSettings();
+		let n = await new e(i).getServerInfo();
+		return F(n), j(n);
+	} catch (e) {
+		throw E(e, 401) ? Error(p) : e;
+	}
 }
-async function F() {
+async function L() {
 	let s = i();
 	if (!s) {
-		if (x(), a(r().backend)) throw new g("No backend configured", { noBackendConfigured: !0 });
+		if (S(), a(r().backend)) throw new _("No backend configured", { noBackendConfigured: !0 });
 		return null;
 	}
 	let l = o({
@@ -115,17 +129,17 @@ async function F() {
 	try {
 		u = await new e(l).getServerInfo();
 	} catch (e) {
-		throw x(), T(e, 401) ? e : new g(e instanceof Error ? e.message : null);
+		throw S(), E(e, 401) ? e : new _(e instanceof Error ? e.message : null);
 	}
-	if (P(u), n()) try {
+	if (F(u), n()) try {
 		await new t(l).getSettings();
 	} catch (e) {
-		if (T(e, 401)) throw e;
+		if (E(e, 401)) throw e;
 		console.warn("[agent-server] getSettings() probe failed (non-401):", e);
 	}
-	return p = u, m = l.host, u;
+	return m = u, h = l.host, u;
 }
 //#endregion
-export { P as assertAgentServerVersionIsSupported, x as clearCachedAgentServerInfo, M as compareAgentServerVersions, S as getCachedAgentServerInfo, j as getCachedAgentServerVersion, A as getDisplayAgentServerVersion, b as isAgentServerAuthError, C as isAgentServerToolAvailable, _ as isAgentServerUnavailableError, T as isSdkHttpStatusError, F as loadAgentServerInfo };
+export { p as INVALID_BACKEND_API_KEY_ERROR, S as clearCachedAgentServerInfo, N as compareAgentServerVersions, C as getCachedAgentServerInfo, M as getCachedAgentServerVersion, j as getDisplayAgentServerVersion, x as isAgentServerAuthError, w as isAgentServerToolAvailable, v as isAgentServerUnavailableError, E as isSdkHttpStatusError, L as loadAgentServerInfo, I as validateLocalBackend };
 
 //# sourceMappingURL=agent-server-compatibility.js.map

package/dist/api/agent-server-compatibility.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  sdk_version?: string;\n  usable_tools?: string[] | null;\n  runtime_services?: unknown;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\nlet cachedAgentServerInfoHost: string | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    (error.name === \"AgentServerUnavailableError\" ||\n      error.name === \"AgentServerUnsupportedVersionError\" ||\n      error.name === \"AgentServerUnknownVersionError\"));\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n  cachedAgentServerInfoHost = null;\n}\n\nexport function getCachedAgentServerInfo(options?: {\n  host?: string | null;\n}): AgentServerInfo | null {\n  if (options?.host && options.host !== cachedAgentServerInfoHost) {\n    return null;\n  }\n  return cachedAgentServerInfo;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction normalizeAgentServerInfoVersion(version: unknown): string | null {\n  if (typeof version !== \"string\") return null;\n  const trimmed = version.trim();\n  return trimmed || null;\n}\n\nfunction getRawAgentServerSdkVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  return normalizeAgentServerInfoVersion(serverInfo.sdk_version);\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  return (\n    normalizeAgentServerInfoVersion(serverInfo.version) ??\n    getRawAgentServerSdkVersion(serverInfo)\n  );\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerSdkVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version =\n    getRawAgentServerSdkVersion(serverInfo) ??\n    getComparableAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getCachedAgentServerSdkVersion(\n  host?: string | null,\n): string | null {\n  if (!cachedAgentServerInfo) return null;\n  if (host && getEffectiveLocalBackend()?.host !== host) return null;\n  return getDisplayAgentServerSdkVersion(cachedAgentServerInfo);\n}\n\nexport function getCachedAgentServerVersion(\n  host?: string | null,\n): string | null {\n  if (!cachedAgentServerInfo) return null;\n  if (host && getEffectiveLocalBackend()?.host !== host) return null;\n  return getDisplayAgentServerVersion(cachedAgentServerInfo);\n}\n\nexport function compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  cachedAgentServerInfoHost = clientOptions.host;\n  return serverInfo;\n}\n"],"mappings":";;;;;;;;AAcA,IAAM,IAA+B,KAC/B,IAA+B,WAExB,IACX,EAAS,cAAc,oBACZ,IACX,oCACW,IACX,gCAQE,IAAgD,MAChD,IAA2C,MAEzC,KAAsB,MACtB,MAAM,QAAQ,GAAY,YAAY,IACjC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CACA;CAEA,YACE,GACA,GACA;EACA,IAAM,IAAsB,GAAS,uBAAuB;EAQ5D,AAPA,MACE,IACI,6EACA,gHACN,GACA,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW,MAC1B,KAAK,sBAAsB;CAC7B;AACF,GAEa,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,MACT,EAAM,SAAS,iCACd,EAAM,SAAS,wCACf,EAAM,SAAS,mCAER,IAAb,cAAwD,EAA4B;CAClF,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAAuB;EACjC,IAAM,IAAU,sCAAsC,EAAwC,qCAAqC,EAAc;EAIjJ,AAHA,MAAM,CAAO,GACb,KAAK,OAAO,sCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;CACvB;AACF,GAEa,IAAb,cAAoD,EAA4B;CAC9E,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAA8B;EAExC,IAAM,IACJ,2DAFe,IAAgB,iBAAiB,EAAc,MAAM,GAEA,sCAC9B,EAAwC;EAMhF,AAHA,MAAM,CAAO,GACb,KAAK,OAAO,kCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;CACvB;AACF,GA6Ba,KAA0B,MACrC,EAAe,KAAK,EAAqB,GAAO,GAAG;AAErD,SAAgB,IAA6B;CAE3C,AADA,IAAwB,MACxB,IAA4B;AAC9B;AAEA,SAAgB,EAAyB,GAEd;CAIzB,OAHI,GAAS,QAAQ,EAAQ,SAAS,IAC7B,OAEF;AACT;AAEA,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,CAAqB;CAI/D,OAHK,MAAM,QAAQ,CAAc,IAG1B,EAAe,SAAS,CAAQ,IAF9B;AAGX;AAEA,SAAgB,EAAe,GAAgB;CAC7C,OACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;AAE5B;AAMA,SAAgB,EAAqB,GAAgB,GAAyB;CAC5E,OACE,EAAe,CAAK,KAAM,EAA6B,WAAW;AAEtE;AAEA,SAAS,EAAgC,GAAiC;CAGxE,OAFI,OAAO,KAAY,YACP,EAAQ,KACjB,KAFiC;AAG1C;AAEA,SAAS,EACP,GACe;CACf,OAAO,EAAgC,EAAW,WAAW;AAC/D;AAEA,SAAS,EAAyB,GAA4C;CAC5E,OACE,EAAgC,EAAW,OAAO,KAClD,EAA4B,CAAU;AAE1C;AAEA,SAAS,EACP,GACe;CACf,IAAM,IAAU,EAAyB,CAAU;CAInD,OAHI,CAAC,KAAW,EAAQ,YAAY,MAAM,IACjC,OAEF;AACT;AAEA,SAAgB,EACd,GACe;CACf,IAAM,IAAU,EAAgC,CAAU;CAI1D,OAHI,CAAC,KAAW,CAAC,EAAwB,CAAO,IACvC,OAEF;AACT;AAsBA,SAAgB,EACd,GACe;CAGf,OAFI,CAAC,KACD,KAAQ,EAAyB,GAAG,SAAS,IAAa,OACvD,EAA6B,CAAqB;AAC3D;AAEA,SAAgB,EAA2B,GAAgB,GAAkB;CAC3E,IAAM,IAAe,EAAwB,CAAM,GAC7C,IAAiB,EAAwB,CAAQ;CAEvD,IAAI,CAAC,KAAgB,CAAC,GACpB,OAAO;CAGT,KAAK,IAAM,KAAO;EAAC;EAAS;EAAS;CAAO,GAAY;EACtD,IAAI,EAAa,KAAO,EAAe,IACrC,OAAO;EAET,IAAI,EAAa,KAAO,EAAe,IACrC,OAAO;CAEX;CAYA,OAVI,EAAa,cAAc,CAAC,EAAe,aACtC,KAEL,CAAC,EAAa,cAAc,EAAe,aACtC,IAEL,EAAa,cAAc,EAAe,aACrC,EAAa,WAAW,cAAc,EAAe,UAAU,IAGjE;AACT;AAEA,SAAS,EAAwB,GAAiB;CAEhD,IAAM,CAAC,KADS,EAAQ,KAAK,EAAE,QAAQ,MAAM,EACtB,EAAQ,MAAM,GAAG,GAClC,CAAC,GAAM,KAAc,EAAa,MAAM,KAAK,CAAC,GAC9C,IAAQ,EAAK,MAAM,GAAG;CAE5B,IAAI,EAAM,WAAW,GACnB,OAAO;CAGT,IAAM,CAAC,GAAO,GAAO,KAAS,EAAM,KAAK,MAAS,OAAO,CAAI,CAAC;CAO9D,OALG;EAAC;EAAO;EAAO;CAAK,EAAE,OAAO,MAAS,OAAO,UAAU,CAAI,KAAK,KAAQ,CAAC,IAKrE;EAAE;EAAO;EAAO;EAAO;CAAW,IAHhC;AAIX;AAEA,SAAgB,EACd,GACA;CACA,IAAM,IAAgB,EAAgC,CAAU;CAChE,IAAI,CAAC,GAEH,MADA,EAA2B,GACrB,IAAI,EACR,EAAyB,CAAU,CACrC;CAGF,IAAM,IAAa,EACjB,GACA,CACF;CAEA,IAAI,MAAe,MAEjB,MADA,EAA2B,GACrB,IAAI,EAA+B,CAAa;CAGxD,IAAI,IAAa,GAEf,MADA,EAA2B,GACrB,IAAI,EAAmC,CAAa;AAE9D;AAEA,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,EAAyB;CACvC,IAAI,CAAC,GAAO;EAMV,IALA,EAA2B,GAKvB,EAAY,EAAiB,EAAE,OAAO,GACxC,MAAM,IAAI,EAA4B,yBAAyB,EAC7D,qBAAqB,GACvB,CAAC;EAIH,OAAO;CACT;CAEA,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;CACX,CAAC,GACG;CAEJ,IAAI;EACF,IAAc,MAAM,IAAI,EACtB,CACF,EAAE,cAAc;CAClB,SAAS,GAAO;EAUd,MATA,EAA2B,GAIvB,EAAqB,GAAO,GAAG,IAC3B,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,IACZ;CAC/C;CAQA,IANA,EAAoC,CAAU,GAM1C,EAAe,GACjB,IAAI;EACF,MAAM,IAAI,EAAe,CAAa,EAAE,YAAY;CACtD,SAAS,GAAO;EAWd,IAAI,EAAqB,GAAO,GAAG,GACjC,MAAM;EAGR,QAAQ,KACN,wDACA,CACF;CACF;CAKF,OAFA,IAAwB,GACxB,IAA4B,EAAc,MACnC;AACT"}
+{"version":3,"file":"agent-server-compatibility.js","names":[],"sources":["../../src/api/agent-server-compatibility.ts"],"sourcesContent":["import {\n  ServerClient,\n  SettingsClient,\n} from \"@openhands/typescript-client/clients\";\nimport type { ServerInfo as BaseServerInfo } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"#/api/agent-server-client-options\";\nimport { isAuthRequired } from \"#/api/agent-server-config\";\nimport {\n  getActiveBackend,\n  getEffectiveLocalBackend,\n  isNoBackend,\n} from \"#/api/backend-registry/active-store\";\nimport type { Backend } from \"#/api/backend-registry/types\";\nimport defaults from \"../../config/defaults.json\";\n\nconst AGENT_SERVER_INFO_TIMEOUT_MS = 5000;\nconst UNKNOWN_AGENT_SERVER_VERSION = \"unknown\";\n\nexport const MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION =\n  defaults.compatibility.minimumAgentServer;\nexport const AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNSUPPORTED_VERSION\";\nexport const AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE =\n  \"AGENT_SERVER_UNKNOWN_VERSION\";\n\n/**\n * Sentinel string thrown (as an Error message) when a local backend\n * rejects the configured session API key with HTTP 401.\n * Shared between the backend health probe ({@link validateLocalBackend})\n * and any consumer that needs to detect this specific failure.\n */\nexport const INVALID_BACKEND_API_KEY_ERROR = \"Invalid API key\";\n\nexport interface AgentServerInfo extends BaseServerInfo {\n  sdk_version?: string;\n  usable_tools?: string[] | null;\n  runtime_services?: unknown;\n}\n\nlet cachedAgentServerInfo: AgentServerInfo | null = null;\nlet cachedAgentServerInfoHost: string | null = null;\n\nconst getAdvertisedTools = (serverInfo: AgentServerInfo | null) => {\n  if (Array.isArray(serverInfo?.usable_tools)) {\n    return serverInfo.usable_tools;\n  }\n  return null;\n};\n\nexport class AgentServerUnavailableError extends Error {\n  readonly details: string | null;\n  readonly noBackendConfigured: boolean;\n\n  constructor(\n    details?: string | null,\n    options?: { noBackendConfigured?: boolean },\n  ) {\n    const noBackendConfigured = options?.noBackendConfigured ?? false;\n    super(\n      noBackendConfigured\n        ? \"No agent server backend is configured yet. Add a backend to get started.\"\n        : \"Could not connect to the configured agent server. Make sure it is running and reachable, then reload the page.\",\n    );\n    this.name = \"AgentServerUnavailableError\";\n    this.details = details ?? null;\n    this.noBackendConfigured = noBackendConfigured;\n  }\n}\n\nexport const isAgentServerUnavailableError = (\n  error: unknown,\n): error is AgentServerUnavailableError =>\n  error instanceof AgentServerUnavailableError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"name\" in error &&\n    (error.name === \"AgentServerUnavailableError\" ||\n      error.name === \"AgentServerUnsupportedVersionError\" ||\n      error.name === \"AgentServerUnknownVersionError\"));\n\nexport class AgentServerUnsupportedVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE;\n  readonly actualVersion: string;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string) {\n    const message = `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} or newer; this backend is running ${actualVersion}. Please upgrade the agent-server backend.`;\n    super(message);\n    this.name = \"AgentServerUnsupportedVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport class AgentServerUnknownVersionError extends AgentServerUnavailableError {\n  readonly code = AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE;\n  readonly actualVersion: string | null;\n  readonly requiredVersion = MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION;\n\n  constructor(actualVersion: string | null) {\n    const reported = actualVersion ? ` It reported \"${actualVersion}\".` : \"\";\n    const message =\n      `Could not determine this backend's agent-server version.${reported} ` +\n      `Agent Canvas requires agent-server ${MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION} ` +\n      \"or newer, but this backend did not return a valid version from \" +\n      \"/server_info. Restart or rebuild the agent-server backend, then try again.\";\n    super(message);\n    this.name = \"AgentServerUnknownVersionError\";\n    this.message = message;\n    this.actualVersion = actualVersion;\n  }\n}\n\nexport const isAgentServerUnsupportedVersionError = (\n  error: unknown,\n): error is AgentServerUnsupportedVersionError =>\n  error instanceof AgentServerUnsupportedVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNSUPPORTED_VERSION_ERROR_CODE);\n\nexport const isAgentServerUnknownVersionError = (\n  error: unknown,\n): error is AgentServerUnknownVersionError =>\n  error instanceof AgentServerUnknownVersionError ||\n  (typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    error.code === AGENT_SERVER_UNKNOWN_VERSION_ERROR_CODE);\n\n/**\n * Returns true when the agent-server probe failed with HTTP 401.\n * In public mode this means the stored key is stale (server restarted\n * with a different `LOCAL_BACKEND_API_KEY`). Only meaningful when\n * auth is required — a 401 in local mode is a misconfiguration, not a\n * key-rotation event. Uses {@link isAuthRequired} so both the build-time\n * `VITE_AUTH_REQUIRED` flag and the runtime `window.__AGENT_CANVAS_AUTH_REQUIRED__`\n * injection (used by pre-built static binaries) are honoured.\n */\nexport const isAgentServerAuthError = (error: unknown): boolean =>\n  isAuthRequired() && isSdkHttpStatusError(error, 401);\n\nexport function clearCachedAgentServerInfo() {\n  cachedAgentServerInfo = null;\n  cachedAgentServerInfoHost = null;\n}\n\nexport function getCachedAgentServerInfo(options?: {\n  host?: string | null;\n}): AgentServerInfo | null {\n  if (options?.host && options.host !== cachedAgentServerInfoHost) {\n    return null;\n  }\n  return cachedAgentServerInfo;\n}\n\nexport function isAgentServerToolAvailable(toolName: string) {\n  const availableTools = getAdvertisedTools(cachedAgentServerInfo);\n  if (!Array.isArray(availableTools)) {\n    return true;\n  }\n  return availableTools.includes(toolName);\n}\n\nexport function isSdkHttpError(error: unknown) {\n  return (\n    error instanceof Error &&\n    error.name === \"HttpError\" &&\n    \"status\" in error &&\n    typeof error.status === \"number\"\n  );\n}\n\n/**\n * Narrows an SDK HTTP error to a specific status code.\n * Use instead of manually casting `(err as { status: number }).status`.\n */\nexport function isSdkHttpStatusError(error: unknown, status: number): boolean {\n  return (\n    isSdkHttpError(error) && (error as { status: number }).status === status\n  );\n}\n\nfunction normalizeAgentServerInfoVersion(version: unknown): string | null {\n  if (typeof version !== \"string\") return null;\n  const trimmed = version.trim();\n  return trimmed || null;\n}\n\nfunction getRawAgentServerSdkVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  return normalizeAgentServerInfoVersion(serverInfo.sdk_version);\n}\n\nfunction getRawAgentServerVersion(serverInfo: AgentServerInfo): string | null {\n  return (\n    normalizeAgentServerInfoVersion(serverInfo.version) ??\n    getRawAgentServerSdkVersion(serverInfo)\n  );\n}\n\nfunction getComparableAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getRawAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version = getComparableAgentServerVersion(serverInfo);\n  if (!version || !parseAgentServerVersion(version)) {\n    return null;\n  }\n  return version;\n}\n\nexport function getDisplayAgentServerSdkVersion(\n  serverInfo: AgentServerInfo,\n): string | null {\n  const version =\n    getRawAgentServerSdkVersion(serverInfo) ??\n    getComparableAgentServerVersion(serverInfo);\n  if (!version || version.toLowerCase() === UNKNOWN_AGENT_SERVER_VERSION) {\n    return null;\n  }\n  return version;\n}\n\nexport function getCachedAgentServerSdkVersion(\n  host?: string | null,\n): string | null {\n  if (!cachedAgentServerInfo) return null;\n  if (host && getEffectiveLocalBackend()?.host !== host) return null;\n  return getDisplayAgentServerSdkVersion(cachedAgentServerInfo);\n}\n\nexport function getCachedAgentServerVersion(\n  host?: string | null,\n): string | null {\n  if (!cachedAgentServerInfo) return null;\n  if (host && getEffectiveLocalBackend()?.host !== host) return null;\n  return getDisplayAgentServerVersion(cachedAgentServerInfo);\n}\n\nexport function compareAgentServerVersions(actual: string, required: string) {\n  const parsedActual = parseAgentServerVersion(actual);\n  const parsedRequired = parseAgentServerVersion(required);\n\n  if (!parsedActual || !parsedRequired) {\n    return null;\n  }\n\n  for (const key of [\"major\", \"minor\", \"patch\"] as const) {\n    if (parsedActual[key] > parsedRequired[key]) {\n      return 1;\n    }\n    if (parsedActual[key] < parsedRequired[key]) {\n      return -1;\n    }\n  }\n\n  if (parsedActual.prerelease && !parsedRequired.prerelease) {\n    return -1;\n  }\n  if (!parsedActual.prerelease && parsedRequired.prerelease) {\n    return 1;\n  }\n  if (parsedActual.prerelease && parsedRequired.prerelease) {\n    return parsedActual.prerelease.localeCompare(parsedRequired.prerelease);\n  }\n\n  return 0;\n}\n\nfunction parseAgentServerVersion(version: string) {\n  const trimmed = version.trim().replace(/^v/, \"\");\n  const [withoutBuild] = trimmed.split(\"+\");\n  const [core, prerelease] = withoutBuild.split(\"-\", 2);\n  const parts = core.split(\".\");\n\n  if (parts.length !== 3) {\n    return null;\n  }\n\n  const [major, minor, patch] = parts.map((part) => Number(part));\n  if (\n    ![major, minor, patch].every((part) => Number.isInteger(part) && part >= 0)\n  ) {\n    return null;\n  }\n\n  return { major, minor, patch, prerelease };\n}\n\nexport function assertAgentServerVersionIsSupported(\n  serverInfo: AgentServerInfo,\n) {\n  const actualVersion = getComparableAgentServerVersion(serverInfo);\n  if (!actualVersion) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(\n      getRawAgentServerVersion(serverInfo),\n    );\n  }\n\n  const comparison = compareAgentServerVersions(\n    actualVersion,\n    MINIMUM_COMPATIBLE_AGENT_SERVER_VERSION,\n  );\n\n  if (comparison === null) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnknownVersionError(actualVersion);\n  }\n\n  if (comparison < 0) {\n    clearCachedAgentServerInfo();\n    throw new AgentServerUnsupportedVersionError(actualVersion);\n  }\n}\n\n/**\n * Validates a local agent-server backend with a two-step probe:\n *  1. GET /api/settings — authenticates the configured session API key;\n *     a 401 throws an Error with message {@link INVALID_BACKEND_API_KEY_ERROR}.\n *  2. GET /server_info  — asserts the server meets the minimum version floor.\n *\n * Returns the display version string reported by the server, or `null` when\n * the server does not report a parseable version. Throws on any failure.\n *\n * Used by both the backend health poller and the backend-form connection test\n * so that auth-check semantics (status codes, error messages) stay in one place.\n */\nexport async function validateLocalBackend(\n  backend: Pick<Backend, \"host\" | \"apiKey\">,\n  timeout: number,\n): Promise<string | null> {\n  const clientOptions = getAgentServerClientOptions({\n    host: backend.host,\n    sessionApiKey: backend.apiKey || null,\n    timeout,\n  });\n\n  try {\n    await new SettingsClient(clientOptions).getSettings();\n    const serverInfo = await new ServerClient(clientOptions).getServerInfo();\n    assertAgentServerVersionIsSupported(serverInfo);\n    return getDisplayAgentServerVersion(serverInfo);\n  } catch (error) {\n    if (isSdkHttpStatusError(error, 401)) {\n      throw new Error(INVALID_BACKEND_API_KEY_ERROR);\n    }\n    throw error;\n  }\n}\n\nexport async function loadAgentServerInfo() {\n  // The probe is a *local* agent-server concern — it verifies the runtime\n  // hosting the GUI is reachable. It must NEVER run against the active\n  // backend when that backend is cloud, because cloud hosts don't\n  // expose /api/server_info and would fail with a CORS error besides.\n  const local = getEffectiveLocalBackend();\n  if (!local) {\n    clearCachedAgentServerInfo();\n\n    // Empty registry (NO_BACKEND sentinel) — the user has no backend\n    // configured at all.  Throw so root.tsx shows the manage-backends\n    // modal instead of silently rendering a broken home page.\n    if (isNoBackend(getActiveBackend().backend)) {\n      throw new AgentServerUnavailableError(\"No backend configured\", {\n        noBackendConfigured: true,\n      });\n    }\n\n    // Active backend is cloud — no local probe needed.\n    return null;\n  }\n\n  const clientOptions = getAgentServerClientOptions({\n    host: local.host,\n    sessionApiKey: local.apiKey || null,\n    timeout: AGENT_SERVER_INFO_TIMEOUT_MS,\n  });\n  let serverInfo: AgentServerInfo;\n\n  try {\n    serverInfo = (await new ServerClient(\n      clientOptions,\n    ).getServerInfo()) as AgentServerInfo;\n  } catch (error) {\n    clearCachedAgentServerInfo();\n    // Preserve 401 so root.tsx can show the auth screen (public mode).\n    // All other HTTP errors (502, 503, etc.) mean the server is unreachable\n    // or misconfigured — treat them as unavailable.\n    if (isSdkHttpStatusError(error, 401)) {\n      throw error;\n    }\n\n    const details = error instanceof Error ? error.message : null;\n    throw new AgentServerUnavailableError(details);\n  }\n\n  assertAgentServerVersionIsSupported(serverInfo);\n\n  // /server_info is unprotected, so a stale session key still gets 200.\n  // In public mode, validate the key against a protected endpoint so a\n  // server restart with a new LOCAL_BACKEND_API_KEY surfaces immediately\n  // instead of letting the app load and fail on every subsequent call.\n  if (isAuthRequired()) {\n    try {\n      await new SettingsClient(clientOptions).getSettings();\n    } catch (error) {\n      // Only rethrow 401 — that means the stored key is invalid /\n      // rotated.  Other HTTP errors (403, 5xx) and non-HTTP errors\n      // (network, timeout) are swallowed: the server *is* up (we just\n      // reached /server_info), so let the app proceed with an\n      // unvalidated key rather than blocking the UI.\n      // NOTE: If the connection drops between the /server_info and\n      // getSettings() probes, the app loads with an unvalidated key and\n      // subsequent 401s won't trigger the auth screen (they come from\n      // React Query hooks, not this bootstrap path). Acceptable for now\n      // since the window is narrow and a page refresh recovers.\n      if (isSdkHttpStatusError(error, 401)) {\n        throw error;\n      }\n\n      console.warn(\n        \"[agent-server] getSettings() probe failed (non-401):\",\n        error,\n      );\n    }\n  }\n\n  cachedAgentServerInfo = serverInfo;\n  cachedAgentServerInfoHost = clientOptions.host;\n  return serverInfo;\n}\n"],"mappings":";;;;;;;;AAeA,IAAM,IAA+B,KAC/B,IAA+B,WAExB,IACX,EAAS,cAAc,oBACZ,IACX,oCACW,IACX,gCAQW,IAAgC,mBAQzC,IAAgD,MAChD,IAA2C,MAEzC,KAAsB,MACtB,MAAM,QAAQ,GAAY,YAAY,IACjC,EAAW,eAEb,MAGI,IAAb,cAAiD,MAAM;CACrD;CACA;CAEA,YACE,GACA,GACA;EACA,IAAM,IAAsB,GAAS,uBAAuB;EAQ5D,AAPA,MACE,IACI,6EACA,gHACN,GACA,KAAK,OAAO,+BACZ,KAAK,UAAU,KAAW,MAC1B,KAAK,sBAAsB;CAC7B;AACF,GAEa,KACX,MAEA,aAAiB,KAChB,OAAO,KAAU,cAChB,KACA,UAAU,MACT,EAAM,SAAS,iCACd,EAAM,SAAS,wCACf,EAAM,SAAS,mCAER,IAAb,cAAwD,EAA4B;CAClF,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAAuB;EACjC,IAAM,IAAU,sCAAsC,EAAwC,qCAAqC,EAAc;EAIjJ,AAHA,MAAM,CAAO,GACb,KAAK,OAAO,sCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;CACvB;AACF,GAEa,IAAb,cAAoD,EAA4B;CAC9E,OAAgB;CAChB;CACA,kBAA2B;CAE3B,YAAY,GAA8B;EAExC,IAAM,IACJ,2DAFe,IAAgB,iBAAiB,EAAc,MAAM,GAEA,sCAC9B,EAAwC;EAMhF,AAHA,MAAM,CAAO,GACb,KAAK,OAAO,kCACZ,KAAK,UAAU,GACf,KAAK,gBAAgB;CACvB;AACF,GA6Ba,KAA0B,MACrC,EAAe,KAAK,EAAqB,GAAO,GAAG;AAErD,SAAgB,IAA6B;CAE3C,AADA,IAAwB,MACxB,IAA4B;AAC9B;AAEA,SAAgB,EAAyB,GAEd;CAIzB,OAHI,GAAS,QAAQ,EAAQ,SAAS,IAC7B,OAEF;AACT;AAEA,SAAgB,EAA2B,GAAkB;CAC3D,IAAM,IAAiB,EAAmB,CAAqB;CAI/D,OAHK,MAAM,QAAQ,CAAc,IAG1B,EAAe,SAAS,CAAQ,IAF9B;AAGX;AAEA,SAAgB,EAAe,GAAgB;CAC7C,OACE,aAAiB,SACjB,EAAM,SAAS,eACf,YAAY,KACZ,OAAO,EAAM,UAAW;AAE5B;AAMA,SAAgB,EAAqB,GAAgB,GAAyB;CAC5E,OACE,EAAe,CAAK,KAAM,EAA6B,WAAW;AAEtE;AAEA,SAAS,EAAgC,GAAiC;CAGxE,OAFI,OAAO,KAAY,YACP,EAAQ,KACjB,KAFiC;AAG1C;AAEA,SAAS,EACP,GACe;CACf,OAAO,EAAgC,EAAW,WAAW;AAC/D;AAEA,SAAS,EAAyB,GAA4C;CAC5E,OACE,EAAgC,EAAW,OAAO,KAClD,EAA4B,CAAU;AAE1C;AAEA,SAAS,EACP,GACe;CACf,IAAM,IAAU,EAAyB,CAAU;CAInD,OAHI,CAAC,KAAW,EAAQ,YAAY,MAAM,IACjC,OAEF;AACT;AAEA,SAAgB,EACd,GACe;CACf,IAAM,IAAU,EAAgC,CAAU;CAI1D,OAHI,CAAC,KAAW,CAAC,EAAwB,CAAO,IACvC,OAEF;AACT;AAsBA,SAAgB,EACd,GACe;CAGf,OAFI,CAAC,KACD,KAAQ,EAAyB,GAAG,SAAS,IAAa,OACvD,EAA6B,CAAqB;AAC3D;AAEA,SAAgB,EAA2B,GAAgB,GAAkB;CAC3E,IAAM,IAAe,EAAwB,CAAM,GAC7C,IAAiB,EAAwB,CAAQ;CAEvD,IAAI,CAAC,KAAgB,CAAC,GACpB,OAAO;CAGT,KAAK,IAAM,KAAO;EAAC;EAAS;EAAS;CAAO,GAAY;EACtD,IAAI,EAAa,KAAO,EAAe,IACrC,OAAO;EAET,IAAI,EAAa,KAAO,EAAe,IACrC,OAAO;CAEX;CAYA,OAVI,EAAa,cAAc,CAAC,EAAe,aACtC,KAEL,CAAC,EAAa,cAAc,EAAe,aACtC,IAEL,EAAa,cAAc,EAAe,aACrC,EAAa,WAAW,cAAc,EAAe,UAAU,IAGjE;AACT;AAEA,SAAS,EAAwB,GAAiB;CAEhD,IAAM,CAAC,KADS,EAAQ,KAAK,EAAE,QAAQ,MAAM,EACtB,EAAQ,MAAM,GAAG,GAClC,CAAC,GAAM,KAAc,EAAa,MAAM,KAAK,CAAC,GAC9C,IAAQ,EAAK,MAAM,GAAG;CAE5B,IAAI,EAAM,WAAW,GACnB,OAAO;CAGT,IAAM,CAAC,GAAO,GAAO,KAAS,EAAM,KAAK,MAAS,OAAO,CAAI,CAAC;CAO9D,OALG;EAAC;EAAO;EAAO;CAAK,EAAE,OAAO,MAAS,OAAO,UAAU,CAAI,KAAK,KAAQ,CAAC,IAKrE;EAAE;EAAO;EAAO;EAAO;CAAW,IAHhC;AAIX;AAEA,SAAgB,EACd,GACA;CACA,IAAM,IAAgB,EAAgC,CAAU;CAChE,IAAI,CAAC,GAEH,MADA,EAA2B,GACrB,IAAI,EACR,EAAyB,CAAU,CACrC;CAGF,IAAM,IAAa,EACjB,GACA,CACF;CAEA,IAAI,MAAe,MAEjB,MADA,EAA2B,GACrB,IAAI,EAA+B,CAAa;CAGxD,IAAI,IAAa,GAEf,MADA,EAA2B,GACrB,IAAI,EAAmC,CAAa;AAE9D;AAcA,eAAsB,EACpB,GACA,GACwB;CACxB,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAQ;EACd,eAAe,EAAQ,UAAU;EACjC;CACF,CAAC;CAED,IAAI;EACF,MAAM,IAAI,EAAe,CAAa,EAAE,YAAY;EACpD,IAAM,IAAa,MAAM,IAAI,EAAa,CAAa,EAAE,cAAc;EAEvE,OADA,EAAoC,CAAU,GACvC,EAA6B,CAAU;CAChD,SAAS,GAAO;EAId,MAHI,EAAqB,GAAO,GAAG,IACvB,MAAM,CAA6B,IAEzC;CACR;AACF;AAEA,eAAsB,IAAsB;CAK1C,IAAM,IAAQ,EAAyB;CACvC,IAAI,CAAC,GAAO;EAMV,IALA,EAA2B,GAKvB,EAAY,EAAiB,EAAE,OAAO,GACxC,MAAM,IAAI,EAA4B,yBAAyB,EAC7D,qBAAqB,GACvB,CAAC;EAIH,OAAO;CACT;CAEA,IAAM,IAAgB,EAA4B;EAChD,MAAM,EAAM;EACZ,eAAe,EAAM,UAAU;EAC/B,SAAS;CACX,CAAC,GACG;CAEJ,IAAI;EACF,IAAc,MAAM,IAAI,EACtB,CACF,EAAE,cAAc;CAClB,SAAS,GAAO;EAUd,MATA,EAA2B,GAIvB,EAAqB,GAAO,GAAG,IAC3B,IAIF,IAAI,EADM,aAAiB,QAAQ,EAAM,UAAU,IACZ;CAC/C;CAQA,IANA,EAAoC,CAAU,GAM1C,EAAe,GACjB,IAAI;EACF,MAAM,IAAI,EAAe,CAAa,EAAE,YAAY;CACtD,SAAS,GAAO;EAWd,IAAI,EAAqB,GAAO,GAAG,GACjC,MAAM;EAGR,QAAQ,KACN,wDACA,CACF;CACF;CAKF,OAFA,IAAwB,GACxB,IAA4B,EAAc,MACnC;AACT"}

package/dist/api/agent-server-config.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");var e=`workspace/project`,t=`__AGENT_CANVAS_LOCK_TO_CLOUD__`,n=`all-hands.dev`,r=`openhands.dev`,i=`app.${n}`,a=r,o=`app.${r}`;function s(e){return e?.trim()||null}function c(e){if(!e)return null;let t=e.trim().replace(/\/$/,``);return t?/^https?:\/\//i.test(t)?t:typeof window<`u`?`${window.location.protocol}//${t}`:`http://${t}`:null}function l(e){if(!e)return null;let t=e.trim().replace(/\/+$/,``);return t?/^https?:\/\//i.test(t)?t:`https://${t}`:null}function u(e){let t=e.toLowerCase();return t===i||t===o?a:t===n?r:t.endsWith(`.${n}`)?`${t.slice(0,-13)}${r}`:t}function d(e){let t=l(e);if(!t)return null;try{let e=new URL(t),n=e.port?`:${e.port}`:``;return`${e.protocol}//${u(e.hostname)}${n}`}catch{return t.toLowerCase()}}function f(){let e=h();return!e||typeof window>`u`||!g(window.location.origin,e)?null:window.location.origin}function p(){return c(void 0)}function m(){let e=s(void 0);if(e)return e;if(typeof window<`u`){let e=window.__AGENT_CANVAS_SESSION_API_KEY__;if(typeof e==`string`)return s(e)}return null}function h(){let e=l(void 0);if(e)return e;if(typeof window<`u`){let e=window[t];if(typeof e==`string`)return l(e)}return null}function g(e,t){let n=d(e),r=d(t);return!n||!r?!1:n===r}function _(){return f()?`cookie`:`api-key`}function v(){return p()||(typeof window<`u`?window.location.origin:null)}function y(){return m()}function b(){return e}function x(e){return`${b().replace(/\/+$/,``)}/${e.replace(/-/g,``)}`}function S(){let e=y();return e?{"X-Session-API-Key":e}:{}}function C(){return typeof window<`u`&&window.__AGENT_CANVAS_AUTH_REQUIRED__===!0}exports.DEFAULT_WORKING_DIR=e,exports.buildConversationWorkingDir=x,exports.getAgentServerBaseUrl=v,exports.getAgentServerHeaders=S,exports.getAgentServerSessionApiKey=y,exports.getAgentServerWorkingDir=b,exports.getCookieAuthCloudHost=f,exports.getLockedCloudAuthMode=_,exports.getLockedCloudHost=h,exports.isAuthRequired=C;
+require("../_virtual/_rolldown/runtime.cjs");var e=`workspace/project`,t=`__AGENT_CANVAS_LOCK_TO_CLOUD__`,n=`all-hands.dev`,r=`openhands.dev`,i=`app.${n}`,a=r,o=`app.${r}`;function s(e){return e?.trim()||null}function c(e){if(!e)return null;let t=e.trim().replace(/\/$/,``);return t?/^https?:\/\//i.test(t)?t:typeof window<`u`?`${window.location.protocol}//${t}`:`http://${t}`:null}function l(e){if(!e)return null;let t=e.trim().replace(/\/+$/,``);return t?/^https?:\/\//i.test(t)?t:`https://${t}`:null}function u(e){let t=e.toLowerCase();return t===i||t===o?a:t===n?r:t.endsWith(`.${n}`)?`${t.slice(0,-13)}${r}`:t}function d(e){let t=l(e);if(!t)return null;try{let e=new URL(t),n=e.port?`:${e.port}`:``;return`${e.protocol}//${u(e.hostname)}${n}`}catch{return t.toLowerCase()}}function f(){let e=h();return!e||typeof window>`u`||!g(window.location.origin,e)?null:window.location.origin}function p(){return c(void 0)}function m(){let e=s(void 0);if(e)return e;if(typeof window<`u`){let e=window.__AGENT_CANVAS_SESSION_API_KEY__;if(typeof e==`string`)return s(e)}return null}function h(){let e=l(void 0);if(e)return e;if(typeof window<`u`){let e=window[t];if(typeof e==`string`)return l(e)}return null}function g(e,t){let n=d(e),r=d(t);return!n||!r?!1:n===r}function _(){return f()?`cookie`:`api-key`}function v(){return p()||(typeof window<`u`?window.location.origin:null)}function y(){return m()}function b(){return e}function x(e,t){return`${e.replace(/\/+$/,``)}/${t.replace(/-/g,``)}`}function S(e){return x(b(),e)}function C(t){return x(e,t)}function w(e){let t=c(v()),n=c(e);return!t||!n?!1:t===n}function T(e,t){return w(t)?S(e):C(e)}function E(t){return w(t)?b():e}function D(){let e=y();return e?{"X-Session-API-Key":e}:{}}function O(){return typeof window<`u`&&window.__AGENT_CANVAS_AUTH_REQUIRED__===!0}exports.DEFAULT_WORKING_DIR=e,exports.buildConversationWorkingDirForBackend=T,exports.getAgentServerBaseUrl=v,exports.getAgentServerHeaders=D,exports.getAgentServerSessionApiKey=y,exports.getAgentServerWorkingDir=b,exports.getCookieAuthCloudHost=f,exports.getLockedCloudAuthMode=_,exports.getLockedCloudHost=h,exports.getWorkspaceRootForBackend=E,exports.isAuthRequired=O;
 //# sourceMappingURL=agent-server-config.cjs.map

package/dist/api/agent-server-config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-config.cjs","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport type LockedCloudAuthMode = \"api-key\" | \"cookie\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\n// Window-global key the static server injects `--lock-to-cloud` into; kept\n// module-private because only `getLockedCloudHost()` reads it. The static\n// server (`scripts/static-server.mjs`) and its tests reference the literal\n// string directly, not this constant.\nconst LOCK_TO_CLOUD_WINDOW_KEY = \"__AGENT_CANVAS_LOCK_TO_CLOUD__\";\nconst LEGACY_CLOUD_DOMAIN = \"all-hands.dev\";\nconst CURRENT_CLOUD_DOMAIN = \"openhands.dev\";\nconst LEGACY_PRODUCTION_APP_HOST = `app.${LEGACY_CLOUD_DOMAIN}`;\nconst CURRENT_PRODUCTION_APP_HOST = CURRENT_CLOUD_DOMAIN;\nconst PRODUCTION_APP_HOST_ALIAS = `app.${CURRENT_CLOUD_DOMAIN}`;\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction normalizeCloudHost(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/+$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  return `https://${trimmed}`;\n}\n\nfunction canonicalizeCloudHostname(hostname: string): string {\n  const lower = hostname.toLowerCase();\n  if (\n    lower === LEGACY_PRODUCTION_APP_HOST ||\n    lower === PRODUCTION_APP_HOST_ALIAS\n  ) {\n    return CURRENT_PRODUCTION_APP_HOST;\n  }\n\n  if (lower === LEGACY_CLOUD_DOMAIN) return CURRENT_CLOUD_DOMAIN;\n  if (lower.endsWith(`.${LEGACY_CLOUD_DOMAIN}`)) {\n    return `${lower.slice(0, -LEGACY_CLOUD_DOMAIN.length)}${CURRENT_CLOUD_DOMAIN}`;\n  }\n\n  return lower;\n}\n\nfunction getCloudHostComparisonKey(value?: string | null): string | null {\n  const normalized = normalizeCloudHost(value);\n  if (!normalized) return null;\n\n  try {\n    const url = new URL(normalized);\n    const port = url.port ? `:${url.port}` : \"\";\n    return `${url.protocol}//${canonicalizeCloudHostname(url.hostname)}${port}`;\n  } catch {\n    return normalized.toLowerCase();\n  }\n}\n\nexport function getCookieAuthCloudHost(): string | null {\n  const lockedHost = getLockedCloudHost();\n  if (\n    !lockedHost ||\n    typeof window === \"undefined\" ||\n    !isSameCloudHost(window.location.origin, lockedHost)\n  ) {\n    return null;\n  }\n\n  return window.location.origin;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getLockedCloudHost(): string | null {\n  const envHost = normalizeCloudHost(import.meta.env.VITE_LOCK_TO_CLOUD);\n  if (envHost) return envHost;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)[\n      LOCK_TO_CLOUD_WINDOW_KEY\n    ];\n    if (typeof injected === \"string\") {\n      return normalizeCloudHost(injected);\n    }\n  }\n\n  return null;\n}\n\n/**\n * Compare a backend host against the locked Cloud host, normalizing\n * trailing slashes, protocol, and case so that e.g.\n * `https://app.all-hands.dev/` matches `https://app.all-hands.dev`.\n *\n * Used by the locked-to-Cloud gates (`root.tsx`,\n * `onboarding-modal.tsx`) to decide whether the active backend is the\n * configured locked Cloud host — a Cloud backend on a *different* host\n * (or a stale Local backend) must not be treated as the locked backend.\n */\nexport function isSameCloudHost(\n  host: string | null | undefined,\n  lockedHost: string | null | undefined,\n): boolean {\n  const a = getCloudHostComparisonKey(host);\n  const b = getCloudHostComparisonKey(lockedHost);\n  if (!a || !b) return false;\n  return a === b;\n}\n\nexport function getLockedCloudAuthMode(): LockedCloudAuthMode {\n  return getCookieAuthCloudHost() ? \"cookie\" : \"api-key\";\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":"6CAAA,IAAa,EAAsB,oBAa7B,EAA2B,iCAC3B,EAAsB,gBACtB,EAAuB,gBACvB,EAA6B,OAAO,IACpC,EAA8B,EAC9B,EAA4B,OAAO,IAEzC,SAAS,EAAW,EAAsC,CACxD,OAAO,GAAO,KAAK,GAAK,IAC1B,CAEA,SAAS,EAAiB,EAAsC,CAC9D,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,KAAK,EAAE,QAAQ,MAAO,EAAE,EAW9C,OAVK,EAED,gBAAgB,KAAK,CAAO,EACvB,EAGL,OAAO,OAAW,IACb,GAAG,OAAO,SAAS,SAAS,IAAI,IAGlC,UAAU,IAVI,IAWvB,CAEA,SAAS,EAAmB,EAAsC,CAChE,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,KAAK,EAAE,QAAQ,OAAQ,EAAE,EAO/C,OANK,EAED,gBAAgB,KAAK,CAAO,EACvB,EAGF,WAAW,IANG,IAOvB,CAEA,SAAS,EAA0B,EAA0B,CAC3D,IAAM,EAAQ,EAAS,YAAY,EAanC,OAXE,IAAU,GACV,IAAU,EAEH,EAGL,IAAU,EAA4B,EACtC,EAAM,SAAS,IAAI,GAAqB,EACnC,GAAG,EAAM,MAAM,EAAG,GAA2B,IAAI,IAGnD,CACT,CAEA,SAAS,EAA0B,EAAsC,CACvE,IAAM,EAAa,EAAmB,CAAK,EAC3C,GAAI,CAAC,EAAY,OAAO,KAExB,GAAI,CACF,IAAM,EAAM,IAAI,IAAI,CAAU,EACxB,EAAO,EAAI,KAAO,IAAI,EAAI,OAAS,GACzC,MAAO,GAAG,EAAI,SAAS,IAAI,EAA0B,EAAI,QAAQ,IAAI,GACvE,MAAQ,CACN,OAAO,EAAW,YAAY,CAChC,CACF,CAEA,SAAgB,GAAwC,CACtD,IAAM,EAAa,EAAmB,EAStC,MAPE,CAAC,GACD,OAAO,OAAW,KAClB,CAAC,EAAgB,OAAO,SAAS,OAAQ,CAAU,EAE5C,KAGF,OAAO,SAAS,MACzB,CAEA,SAAS,GAAsC,CAC7C,OAAO,EAAA,IAAA,EAAsD,CAC/D,CAmBA,SAAgB,GAAuC,CACrD,IAAM,EAAS,EAAA,IAAA,EAA+C,EAC9D,GAAI,EAAQ,OAAO,EAEnB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OACf,iCACH,GAAI,OAAO,GAAa,SACtB,OAAO,EAAW,CAAQ,CAE9B,CAEA,OAAO,IACT,CASA,SAAgB,GAAoC,CAClD,IAAM,EAAU,EAAA,IAAA,EAAqD,EACrE,GAAI,EAAS,OAAO,EAEpB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OAChB,GAEF,GAAI,OAAO,GAAa,SACtB,OAAO,EAAmB,CAAQ,CAEtC,CAEA,OAAO,IACT,CAYA,SAAgB,EACd,EACA,EACS,CACT,IAAM,EAAI,EAA0B,CAAI,EAClC,EAAI,EAA0B,CAAU,EAE9C,MADI,CAAC,GAAK,CAAC,EAAU,GACd,IAAM,CACf,CAEA,SAAgB,GAA8C,CAC5D,OAAO,EAAuB,EAAI,SAAW,SAC/C,CAEA,SAAgB,GAAuC,CAQrD,OAPsB,EAClB,IAEA,OAAO,OAAW,IACb,OAAO,SAAS,OAGlB,KACT,CAEA,SAAgB,GAA6C,CAC3D,OAAO,EAAsB,CAC/B,CAEA,SAAgB,GAAmC,CAIjD,OAAO,CACT,CAEA,SAAgB,EAA4B,EAAgC,CAG1E,MAAO,GAFM,EAAyB,EAAE,QAAQ,OAAQ,EAE9C,EAAK,GADH,EAAe,QAAQ,KAAM,EACvB,GACpB,CAEA,SAAgB,GAAgD,CAC9D,IAAM,EAAgB,EAA4B,EAClD,OAAO,EAAgB,CAAE,oBAAqB,CAAc,EAAI,CAAC,CACnE,CAEA,SAAgB,GAA0B,CACxC,OAEG,OAAO,OAAW,KAChB,OACE,iCAAmC,EAE5C"}
+{"version":3,"file":"agent-server-config.cjs","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport type LockedCloudAuthMode = \"api-key\" | \"cookie\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\n// Window-global key the static server injects `--lock-to-cloud` into; kept\n// module-private because only `getLockedCloudHost()` reads it. The static\n// server (`scripts/static-server.mjs`) and its tests reference the literal\n// string directly, not this constant.\nconst LOCK_TO_CLOUD_WINDOW_KEY = \"__AGENT_CANVAS_LOCK_TO_CLOUD__\";\nconst LEGACY_CLOUD_DOMAIN = \"all-hands.dev\";\nconst CURRENT_CLOUD_DOMAIN = \"openhands.dev\";\nconst LEGACY_PRODUCTION_APP_HOST = `app.${LEGACY_CLOUD_DOMAIN}`;\nconst CURRENT_PRODUCTION_APP_HOST = CURRENT_CLOUD_DOMAIN;\nconst PRODUCTION_APP_HOST_ALIAS = `app.${CURRENT_CLOUD_DOMAIN}`;\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction normalizeCloudHost(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/+$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  return `https://${trimmed}`;\n}\n\nfunction canonicalizeCloudHostname(hostname: string): string {\n  const lower = hostname.toLowerCase();\n  if (\n    lower === LEGACY_PRODUCTION_APP_HOST ||\n    lower === PRODUCTION_APP_HOST_ALIAS\n  ) {\n    return CURRENT_PRODUCTION_APP_HOST;\n  }\n\n  if (lower === LEGACY_CLOUD_DOMAIN) return CURRENT_CLOUD_DOMAIN;\n  if (lower.endsWith(`.${LEGACY_CLOUD_DOMAIN}`)) {\n    return `${lower.slice(0, -LEGACY_CLOUD_DOMAIN.length)}${CURRENT_CLOUD_DOMAIN}`;\n  }\n\n  return lower;\n}\n\nfunction getCloudHostComparisonKey(value?: string | null): string | null {\n  const normalized = normalizeCloudHost(value);\n  if (!normalized) return null;\n\n  try {\n    const url = new URL(normalized);\n    const port = url.port ? `:${url.port}` : \"\";\n    return `${url.protocol}//${canonicalizeCloudHostname(url.hostname)}${port}`;\n  } catch {\n    return normalized.toLowerCase();\n  }\n}\n\nexport function getCookieAuthCloudHost(): string | null {\n  const lockedHost = getLockedCloudHost();\n  if (\n    !lockedHost ||\n    typeof window === \"undefined\" ||\n    !isSameCloudHost(window.location.origin, lockedHost)\n  ) {\n    return null;\n  }\n\n  return window.location.origin;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getLockedCloudHost(): string | null {\n  const envHost = normalizeCloudHost(import.meta.env.VITE_LOCK_TO_CLOUD);\n  if (envHost) return envHost;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)[\n      LOCK_TO_CLOUD_WINDOW_KEY\n    ];\n    if (typeof injected === \"string\") {\n      return normalizeCloudHost(injected);\n    }\n  }\n\n  return null;\n}\n\n/**\n * Compare a backend host against the locked Cloud host, normalizing\n * trailing slashes, protocol, and case so that e.g.\n * `https://app.all-hands.dev/` matches `https://app.all-hands.dev`.\n *\n * Used by the locked-to-Cloud gates (`root.tsx`,\n * `onboarding-modal.tsx`) to decide whether the active backend is the\n * configured locked Cloud host — a Cloud backend on a *different* host\n * (or a stale Local backend) must not be treated as the locked backend.\n */\nexport function isSameCloudHost(\n  host: string | null | undefined,\n  lockedHost: string | null | undefined,\n): boolean {\n  const a = getCloudHostComparisonKey(host);\n  const b = getCloudHostComparisonKey(lockedHost);\n  if (!a || !b) return false;\n  return a === b;\n}\n\nexport function getLockedCloudAuthMode(): LockedCloudAuthMode {\n  return getCookieAuthCloudHost() ? \"cookie\" : \"api-key\";\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nfunction buildWorkingDir(base: string, conversationId: string): string {\n  const trimmed = base.replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${trimmed}/${hex}`;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  return buildWorkingDir(getAgentServerWorkingDir(), conversationId);\n}\n\n/**\n * Conversation working dir under the backend-relative default\n * (`workspace/project/<hex>`), deliberately ignoring any baked absolute\n * `VITE_WORKING_DIR`. `resolveAbsoluteAgentServerPath()` anchors this to the\n * active backend's own home via `GET /api/file/home`, so it resolves to a\n * writable path on whichever backend actually runs the conversation.\n */\nexport function buildRelativeConversationWorkingDir(\n  conversationId: string,\n): string {\n  return buildWorkingDir(DEFAULT_WORKING_DIR, conversationId);\n}\n\n/**\n * Whether `backendHost` is the same host that served this frontend.\n *\n * A launcher-baked `VITE_WORKING_DIR` is an absolute path on the serving\n * host's filesystem, so it is only valid on that exact backend. The seeded\n * `default-local` entry starts life pointing at the served origin, but its\n * `host` is mutable — the user can edit it to a remote backend while its id\n * stays `default-local`. Matching on the host (not the stable id) keeps the\n * real invariant: the baked path is only safe for the host it was baked for.\n */\nexport function isServedOriginHost(\n  backendHost: string | null | undefined,\n): boolean {\n  const served = normalizeBaseUrl(getAgentServerBaseUrl());\n  const candidate = normalizeBaseUrl(backendHost);\n  if (!served || !candidate) return false;\n  return served === candidate;\n}\n\n/**\n * Base working dir for a new conversation on the backend at `backendHost`.\n * The baked (possibly absolute) default is used only for the served-origin\n * backend; every other backend gets the relative default, anchored to its\n * own home by `resolveAbsoluteAgentServerPath()`.\n */\nexport function buildConversationWorkingDirForBackend(\n  conversationId: string,\n  backendHost: string | null | undefined,\n): string {\n  return isServedOriginHost(backendHost)\n    ? buildConversationWorkingDir(conversationId)\n    : buildRelativeConversationWorkingDir(conversationId);\n}\n\n/**\n * Workspace root for `backendHost` — the dir each conversation's `<root>/<hex>`\n * working dir is created under. Same per-backend rule as\n * `buildConversationWorkingDirForBackend()`.\n */\nexport function getWorkspaceRootForBackend(\n  backendHost: string | null | undefined,\n): string {\n  return isServedOriginHost(backendHost)\n    ? getAgentServerWorkingDir()\n    : DEFAULT_WORKING_DIR;\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":"6CAAA,IAAa,EAAsB,oBAa7B,EAA2B,iCAC3B,EAAsB,gBACtB,EAAuB,gBACvB,EAA6B,OAAO,IACpC,EAA8B,EAC9B,EAA4B,OAAO,IAEzC,SAAS,EAAW,EAAsC,CACxD,OAAO,GAAO,KAAK,GAAK,IAC1B,CAEA,SAAS,EAAiB,EAAsC,CAC9D,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,KAAK,EAAE,QAAQ,MAAO,EAAE,EAW9C,OAVK,EAED,gBAAgB,KAAK,CAAO,EACvB,EAGL,OAAO,OAAW,IACb,GAAG,OAAO,SAAS,SAAS,IAAI,IAGlC,UAAU,IAVI,IAWvB,CAEA,SAAS,EAAmB,EAAsC,CAChE,GAAI,CAAC,EAAO,OAAO,KAEnB,IAAM,EAAU,EAAM,KAAK,EAAE,QAAQ,OAAQ,EAAE,EAO/C,OANK,EAED,gBAAgB,KAAK,CAAO,EACvB,EAGF,WAAW,IANG,IAOvB,CAEA,SAAS,EAA0B,EAA0B,CAC3D,IAAM,EAAQ,EAAS,YAAY,EAanC,OAXE,IAAU,GACV,IAAU,EAEH,EAGL,IAAU,EAA4B,EACtC,EAAM,SAAS,IAAI,GAAqB,EACnC,GAAG,EAAM,MAAM,EAAG,GAA2B,IAAI,IAGnD,CACT,CAEA,SAAS,EAA0B,EAAsC,CACvE,IAAM,EAAa,EAAmB,CAAK,EAC3C,GAAI,CAAC,EAAY,OAAO,KAExB,GAAI,CACF,IAAM,EAAM,IAAI,IAAI,CAAU,EACxB,EAAO,EAAI,KAAO,IAAI,EAAI,OAAS,GACzC,MAAO,GAAG,EAAI,SAAS,IAAI,EAA0B,EAAI,QAAQ,IAAI,GACvE,MAAQ,CACN,OAAO,EAAW,YAAY,CAChC,CACF,CAEA,SAAgB,GAAwC,CACtD,IAAM,EAAa,EAAmB,EAStC,MAPE,CAAC,GACD,OAAO,OAAW,KAClB,CAAC,EAAgB,OAAO,SAAS,OAAQ,CAAU,EAE5C,KAGF,OAAO,SAAS,MACzB,CAEA,SAAS,GAAsC,CAC7C,OAAO,EAAA,IAAA,EAAsD,CAC/D,CAmBA,SAAgB,GAAuC,CACrD,IAAM,EAAS,EAAA,IAAA,EAA+C,EAC9D,GAAI,EAAQ,OAAO,EAEnB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OACf,iCACH,GAAI,OAAO,GAAa,SACtB,OAAO,EAAW,CAAQ,CAE9B,CAEA,OAAO,IACT,CASA,SAAgB,GAAoC,CAClD,IAAM,EAAU,EAAA,IAAA,EAAqD,EACrE,GAAI,EAAS,OAAO,EAEpB,GAAI,OAAO,OAAW,IAAa,CACjC,IAAM,EAAY,OAChB,GAEF,GAAI,OAAO,GAAa,SACtB,OAAO,EAAmB,CAAQ,CAEtC,CAEA,OAAO,IACT,CAYA,SAAgB,EACd,EACA,EACS,CACT,IAAM,EAAI,EAA0B,CAAI,EAClC,EAAI,EAA0B,CAAU,EAE9C,MADI,CAAC,GAAK,CAAC,EAAU,GACd,IAAM,CACf,CAEA,SAAgB,GAA8C,CAC5D,OAAO,EAAuB,EAAI,SAAW,SAC/C,CAEA,SAAgB,GAAuC,CAQrD,OAPsB,EAClB,IAEA,OAAO,OAAW,IACb,OAAO,SAAS,OAGlB,KACT,CAEA,SAAgB,GAA6C,CAC3D,OAAO,EAAsB,CAC/B,CAEA,SAAgB,GAAmC,CAIjD,OAAO,CACT,CAEA,SAAS,EAAgB,EAAc,EAAgC,CAGrE,MAAO,GAFS,EAAK,QAAQ,OAAQ,EAE3B,EAAQ,GADN,EAAe,QAAQ,KAAM,EACpB,GACvB,CAEA,SAAgB,EAA4B,EAAgC,CAC1E,OAAO,EAAgB,EAAyB,EAAG,CAAc,CACnE,CASA,SAAgB,EACd,EACQ,CACR,OAAO,EAAgB,EAAqB,CAAc,CAC5D,CAYA,SAAgB,EACd,EACS,CACT,IAAM,EAAS,EAAiB,EAAsB,CAAC,EACjD,EAAY,EAAiB,CAAW,EAE9C,MADI,CAAC,GAAU,CAAC,EAAkB,GAC3B,IAAW,CACpB,CAQA,SAAgB,EACd,EACA,EACQ,CACR,OAAO,EAAmB,CAAW,EACjC,EAA4B,CAAc,EAC1C,EAAoC,CAAc,CACxD,CAOA,SAAgB,EACd,EACQ,CACR,OAAO,EAAmB,CAAW,EACjC,EAAyB,EACzB,CACN,CAEA,SAAgB,GAAgD,CAC9D,IAAM,EAAgB,EAA4B,EAClD,OAAO,EAAgB,CAAE,oBAAqB,CAAc,EAAI,CAAC,CACnE,CAEA,SAAgB,GAA0B,CACxC,OAEG,OAAO,OAAW,KAChB,OACE,iCAAmC,EAE5C"}

package/dist/api/agent-server-config.d.ts

@@ -41,6 +41,38 @@ export declare function getAgentServerBaseUrl(): string | null;
 export declare function getAgentServerSessionApiKey(): string | null;
 export declare function getAgentServerWorkingDir(): string;
 export declare function buildConversationWorkingDir(conversationId: string): string;
+/**
+ * Conversation working dir under the backend-relative default
+ * (`workspace/project/<hex>`), deliberately ignoring any baked absolute
+ * `VITE_WORKING_DIR`. `resolveAbsoluteAgentServerPath()` anchors this to the
+ * active backend's own home via `GET /api/file/home`, so it resolves to a
+ * writable path on whichever backend actually runs the conversation.
+ */
+export declare function buildRelativeConversationWorkingDir(conversationId: string): string;
+/**
+ * Whether `backendHost` is the same host that served this frontend.
+ *
+ * A launcher-baked `VITE_WORKING_DIR` is an absolute path on the serving
+ * host's filesystem, so it is only valid on that exact backend. The seeded
+ * `default-local` entry starts life pointing at the served origin, but its
+ * `host` is mutable — the user can edit it to a remote backend while its id
+ * stays `default-local`. Matching on the host (not the stable id) keeps the
+ * real invariant: the baked path is only safe for the host it was baked for.
+ */
+export declare function isServedOriginHost(backendHost: string | null | undefined): boolean;
+/**
+ * Base working dir for a new conversation on the backend at `backendHost`.
+ * The baked (possibly absolute) default is used only for the served-origin
+ * backend; every other backend gets the relative default, anchored to its
+ * own home by `resolveAbsoluteAgentServerPath()`.
+ */
+export declare function buildConversationWorkingDirForBackend(conversationId: string, backendHost: string | null | undefined): string;
+/**
+ * Workspace root for `backendHost` — the dir each conversation's `<root>/<hex>`
+ * working dir is created under. Same per-backend rule as
+ * `buildConversationWorkingDirForBackend()`.
+ */
+export declare function getWorkspaceRootForBackend(backendHost: string | null | undefined): string;
 export declare function getAgentServerHeaders(): Record<string, string>;
 export declare function isAuthRequired(): boolean;
 export declare function isAuthRequiredAndMissing(): boolean;

package/dist/api/agent-server-config.js

@@ -68,17 +68,33 @@ function y() {
 function b() {
 	return e;
 }
-function x(e) {
-	return `${b().replace(/\/+$/, "")}/${e.replace(/-/g, "")}`;
+function x(e, t) {
+	return `${e.replace(/\/+$/, "")}/${t.replace(/-/g, "")}`;
 }
-function S() {
+function S(e) {
+	return x(b(), e);
+}
+function C(t) {
+	return x(e, t);
+}
+function w(e) {
+	let t = c(v()), n = c(e);
+	return !t || !n ? !1 : t === n;
+}
+function T(e, t) {
+	return w(t) ? S(e) : C(e);
+}
+function E(t) {
+	return w(t) ? b() : e;
+}
+function D() {
 	let e = y();
 	return e ? { "X-Session-API-Key": e } : {};
 }
-function C() {
+function O() {
 	return typeof window < "u" && window.__AGENT_CANVAS_AUTH_REQUIRED__ === !0;
 }
 //#endregion
-export { e as DEFAULT_WORKING_DIR, x as buildConversationWorkingDir, v as getAgentServerBaseUrl, S as getAgentServerHeaders, y as getAgentServerSessionApiKey, b as getAgentServerWorkingDir, f as getCookieAuthCloudHost, _ as getLockedCloudAuthMode, h as getLockedCloudHost, C as isAuthRequired };
+export { e as DEFAULT_WORKING_DIR, T as buildConversationWorkingDirForBackend, v as getAgentServerBaseUrl, D as getAgentServerHeaders, y as getAgentServerSessionApiKey, b as getAgentServerWorkingDir, f as getCookieAuthCloudHost, _ as getLockedCloudAuthMode, h as getLockedCloudHost, E as getWorkspaceRootForBackend, O as isAuthRequired };
 
 //# sourceMappingURL=agent-server-config.js.map

package/dist/api/agent-server-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-config.js","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport type LockedCloudAuthMode = \"api-key\" | \"cookie\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\n// Window-global key the static server injects `--lock-to-cloud` into; kept\n// module-private because only `getLockedCloudHost()` reads it. The static\n// server (`scripts/static-server.mjs`) and its tests reference the literal\n// string directly, not this constant.\nconst LOCK_TO_CLOUD_WINDOW_KEY = \"__AGENT_CANVAS_LOCK_TO_CLOUD__\";\nconst LEGACY_CLOUD_DOMAIN = \"all-hands.dev\";\nconst CURRENT_CLOUD_DOMAIN = \"openhands.dev\";\nconst LEGACY_PRODUCTION_APP_HOST = `app.${LEGACY_CLOUD_DOMAIN}`;\nconst CURRENT_PRODUCTION_APP_HOST = CURRENT_CLOUD_DOMAIN;\nconst PRODUCTION_APP_HOST_ALIAS = `app.${CURRENT_CLOUD_DOMAIN}`;\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction normalizeCloudHost(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/+$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  return `https://${trimmed}`;\n}\n\nfunction canonicalizeCloudHostname(hostname: string): string {\n  const lower = hostname.toLowerCase();\n  if (\n    lower === LEGACY_PRODUCTION_APP_HOST ||\n    lower === PRODUCTION_APP_HOST_ALIAS\n  ) {\n    return CURRENT_PRODUCTION_APP_HOST;\n  }\n\n  if (lower === LEGACY_CLOUD_DOMAIN) return CURRENT_CLOUD_DOMAIN;\n  if (lower.endsWith(`.${LEGACY_CLOUD_DOMAIN}`)) {\n    return `${lower.slice(0, -LEGACY_CLOUD_DOMAIN.length)}${CURRENT_CLOUD_DOMAIN}`;\n  }\n\n  return lower;\n}\n\nfunction getCloudHostComparisonKey(value?: string | null): string | null {\n  const normalized = normalizeCloudHost(value);\n  if (!normalized) return null;\n\n  try {\n    const url = new URL(normalized);\n    const port = url.port ? `:${url.port}` : \"\";\n    return `${url.protocol}//${canonicalizeCloudHostname(url.hostname)}${port}`;\n  } catch {\n    return normalized.toLowerCase();\n  }\n}\n\nexport function getCookieAuthCloudHost(): string | null {\n  const lockedHost = getLockedCloudHost();\n  if (\n    !lockedHost ||\n    typeof window === \"undefined\" ||\n    !isSameCloudHost(window.location.origin, lockedHost)\n  ) {\n    return null;\n  }\n\n  return window.location.origin;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getLockedCloudHost(): string | null {\n  const envHost = normalizeCloudHost(import.meta.env.VITE_LOCK_TO_CLOUD);\n  if (envHost) return envHost;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)[\n      LOCK_TO_CLOUD_WINDOW_KEY\n    ];\n    if (typeof injected === \"string\") {\n      return normalizeCloudHost(injected);\n    }\n  }\n\n  return null;\n}\n\n/**\n * Compare a backend host against the locked Cloud host, normalizing\n * trailing slashes, protocol, and case so that e.g.\n * `https://app.all-hands.dev/` matches `https://app.all-hands.dev`.\n *\n * Used by the locked-to-Cloud gates (`root.tsx`,\n * `onboarding-modal.tsx`) to decide whether the active backend is the\n * configured locked Cloud host — a Cloud backend on a *different* host\n * (or a stale Local backend) must not be treated as the locked backend.\n */\nexport function isSameCloudHost(\n  host: string | null | undefined,\n  lockedHost: string | null | undefined,\n): boolean {\n  const a = getCloudHostComparisonKey(host);\n  const b = getCloudHostComparisonKey(lockedHost);\n  if (!a || !b) return false;\n  return a === b;\n}\n\nexport function getLockedCloudAuthMode(): LockedCloudAuthMode {\n  return getCookieAuthCloudHost() ? \"cookie\" : \"api-key\";\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  const base = getAgentServerWorkingDir().replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${base}/${hex}`;\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":";AAAA,IAAa,IAAsB,qBAa7B,IAA2B,kCAC3B,IAAsB,iBACtB,IAAuB,iBACvB,IAA6B,OAAO,KACpC,IAA8B,GAC9B,IAA4B,OAAO;AAEzC,SAAS,EAAW,GAAsC;CACxD,OAAO,GAAO,KAAK,KAAK;AAC1B;AAEA,SAAS,EAAiB,GAAsC;CAC9D,IAAI,CAAC,GAAO,OAAO;CAEnB,IAAM,IAAU,EAAM,KAAK,EAAE,QAAQ,OAAO,EAAE;CAW9C,OAVK,IAED,gBAAgB,KAAK,CAAO,IACvB,IAGL,OAAO,SAAW,MACb,GAAG,OAAO,SAAS,SAAS,IAAI,MAGlC,UAAU,MAVI;AAWvB;AAEA,SAAS,EAAmB,GAAsC;CAChE,IAAI,CAAC,GAAO,OAAO;CAEnB,IAAM,IAAU,EAAM,KAAK,EAAE,QAAQ,QAAQ,EAAE;CAO/C,OANK,IAED,gBAAgB,KAAK,CAAO,IACvB,IAGF,WAAW,MANG;AAOvB;AAEA,SAAS,EAA0B,GAA0B;CAC3D,IAAM,IAAQ,EAAS,YAAY;CAanC,OAXE,MAAU,KACV,MAAU,IAEH,IAGL,MAAU,IAA4B,IACtC,EAAM,SAAS,IAAI,GAAqB,IACnC,GAAG,EAAM,MAAM,GAAG,GAA2B,IAAI,MAGnD;AACT;AAEA,SAAS,EAA0B,GAAsC;CACvE,IAAM,IAAa,EAAmB,CAAK;CAC3C,IAAI,CAAC,GAAY,OAAO;CAExB,IAAI;EACF,IAAM,IAAM,IAAI,IAAI,CAAU,GACxB,IAAO,EAAI,OAAO,IAAI,EAAI,SAAS;EACzC,OAAO,GAAG,EAAI,SAAS,IAAI,EAA0B,EAAI,QAAQ,IAAI;CACvE,QAAQ;EACN,OAAO,EAAW,YAAY;CAChC;AACF;AAEA,SAAgB,IAAwC;CACtD,IAAM,IAAa,EAAmB;CAStC,OAPE,CAAC,KACD,OAAO,SAAW,OAClB,CAAC,EAAgB,OAAO,SAAS,QAAQ,CAAU,IAE5C,OAGF,OAAO,SAAS;AACzB;AAEA,SAAS,IAAsC;CAC7C,OAAO,EAAA,KAAA,CAAsD;AAC/D;AAmBA,SAAgB,IAAuC;CACrD,IAAM,IAAS,EAAA,KAAA,CAA+C;CAC9D,IAAI,GAAQ,OAAO;CAEnB,IAAI,OAAO,SAAW,KAAa;EACjC,IAAM,IAAY,OACf;EACH,IAAI,OAAO,KAAa,UACtB,OAAO,EAAW,CAAQ;CAE9B;CAEA,OAAO;AACT;AASA,SAAgB,IAAoC;CAClD,IAAM,IAAU,EAAA,KAAA,CAAqD;CACrE,IAAI,GAAS,OAAO;CAEpB,IAAI,OAAO,SAAW,KAAa;EACjC,IAAM,IAAY,OAChB;EAEF,IAAI,OAAO,KAAa,UACtB,OAAO,EAAmB,CAAQ;CAEtC;CAEA,OAAO;AACT;AAYA,SAAgB,EACd,GACA,GACS;CACT,IAAM,IAAI,EAA0B,CAAI,GAClC,IAAI,EAA0B,CAAU;CAE9C,OADI,CAAC,KAAK,CAAC,IAAU,KACd,MAAM;AACf;AAEA,SAAgB,IAA8C;CAC5D,OAAO,EAAuB,IAAI,WAAW;AAC/C;AAEA,SAAgB,IAAuC;CAQrD,OAPsB,EAClB,MAEA,OAAO,SAAW,MACb,OAAO,SAAS,SAGlB;AACT;AAEA,SAAgB,IAA6C;CAC3D,OAAO,EAAsB;AAC/B;AAEA,SAAgB,IAAmC;CAIjD,OAAO;AACT;AAEA,SAAgB,EAA4B,GAAgC;CAG1E,OAAO,GAFM,EAAyB,EAAE,QAAQ,QAAQ,EAE9C,EAAK,GADH,EAAe,QAAQ,MAAM,EACvB;AACpB;AAEA,SAAgB,IAAgD;CAC9D,IAAM,IAAgB,EAA4B;CAClD,OAAO,IAAgB,EAAE,qBAAqB,EAAc,IAAI,CAAC;AACnE;AAEA,SAAgB,IAA0B;CACxC,OAEG,OAAO,SAAW,OAChB,OACE,mCAAmC;AAE5C"}
+{"version":3,"file":"agent-server-config.js","names":[],"sources":["../../src/api/agent-server-config.ts"],"sourcesContent":["export const DEFAULT_WORKING_DIR = \"workspace/project\";\n\nexport type LockedCloudAuthMode = \"api-key\" | \"cookie\";\n\nexport interface AgentServerFormDefaults {\n  baseUrl: string;\n  sessionApiKey: string;\n}\n\n// Window-global key the static server injects `--lock-to-cloud` into; kept\n// module-private because only `getLockedCloudHost()` reads it. The static\n// server (`scripts/static-server.mjs`) and its tests reference the literal\n// string directly, not this constant.\nconst LOCK_TO_CLOUD_WINDOW_KEY = \"__AGENT_CANVAS_LOCK_TO_CLOUD__\";\nconst LEGACY_CLOUD_DOMAIN = \"all-hands.dev\";\nconst CURRENT_CLOUD_DOMAIN = \"openhands.dev\";\nconst LEGACY_PRODUCTION_APP_HOST = `app.${LEGACY_CLOUD_DOMAIN}`;\nconst CURRENT_PRODUCTION_APP_HOST = CURRENT_CLOUD_DOMAIN;\nconst PRODUCTION_APP_HOST_ALIAS = `app.${CURRENT_CLOUD_DOMAIN}`;\n\nfunction trimToNull(value?: string | null): string | null {\n  return value?.trim() || null;\n}\n\nfunction normalizeBaseUrl(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  if (typeof window !== \"undefined\") {\n    return `${window.location.protocol}//${trimmed}`;\n  }\n\n  return `http://${trimmed}`;\n}\n\nfunction normalizeCloudHost(value?: string | null): string | null {\n  if (!value) return null;\n\n  const trimmed = value.trim().replace(/\\/+$/, \"\");\n  if (!trimmed) return null;\n\n  if (/^https?:\\/\\//i.test(trimmed)) {\n    return trimmed;\n  }\n\n  return `https://${trimmed}`;\n}\n\nfunction canonicalizeCloudHostname(hostname: string): string {\n  const lower = hostname.toLowerCase();\n  if (\n    lower === LEGACY_PRODUCTION_APP_HOST ||\n    lower === PRODUCTION_APP_HOST_ALIAS\n  ) {\n    return CURRENT_PRODUCTION_APP_HOST;\n  }\n\n  if (lower === LEGACY_CLOUD_DOMAIN) return CURRENT_CLOUD_DOMAIN;\n  if (lower.endsWith(`.${LEGACY_CLOUD_DOMAIN}`)) {\n    return `${lower.slice(0, -LEGACY_CLOUD_DOMAIN.length)}${CURRENT_CLOUD_DOMAIN}`;\n  }\n\n  return lower;\n}\n\nfunction getCloudHostComparisonKey(value?: string | null): string | null {\n  const normalized = normalizeCloudHost(value);\n  if (!normalized) return null;\n\n  try {\n    const url = new URL(normalized);\n    const port = url.port ? `:${url.port}` : \"\";\n    return `${url.protocol}//${canonicalizeCloudHostname(url.hostname)}${port}`;\n  } catch {\n    return normalized.toLowerCase();\n  }\n}\n\nexport function getCookieAuthCloudHost(): string | null {\n  const lockedHost = getLockedCloudHost();\n  if (\n    !lockedHost ||\n    typeof window === \"undefined\" ||\n    !isSameCloudHost(window.location.origin, lockedHost)\n  ) {\n    return null;\n  }\n\n  return window.location.origin;\n}\n\nfunction getConfiguredBaseUrl(): string | null {\n  return normalizeBaseUrl(import.meta.env.VITE_BACKEND_BASE_URL);\n}\n\n/**\n * Return the session API key supplied by the deployment host.\n *\n * Two sources are consulted, in order:\n *   1. `VITE_SESSION_API_KEY` — baked into the bundle at build time (used by\n *      `npm run dev` so the dev server has the key without a round-trip).\n *   2. `window.__AGENT_CANVAS_SESSION_API_KEY__` — injected into `index.html`\n *      at serve time by `scripts/static-server.mjs --session-api-key <key>`.\n *      This is the path used by the published `agent-canvas` binary, where\n *      `VITE_SESSION_API_KEY` is empty in the prebuilt bundle and the\n *      runtime key is generated when the user launches the CLI.\n *\n * Without the window-global fallback, the published binary cannot construct a\n * default local backend (`makeDefaultLocalBackend()` returns null), the\n * registry is left empty, and the user sees the Manage Backends modal\n * instead of the onboarding flow.\n */\nexport function getBakedSessionApiKey(): string | null {\n  const envKey = trimToNull(import.meta.env.VITE_SESSION_API_KEY);\n  if (envKey) return envKey;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)\n      .__AGENT_CANVAS_SESSION_API_KEY__;\n    if (typeof injected === \"string\") {\n      return trimToNull(injected);\n    }\n  }\n\n  return null;\n}\n\nexport function getAgentServerFormDefaults(): AgentServerFormDefaults {\n  return {\n    baseUrl: getAgentServerBaseUrl() ?? \"\",\n    sessionApiKey: getAgentServerSessionApiKey() ?? \"\",\n  };\n}\n\nexport function getLockedCloudHost(): string | null {\n  const envHost = normalizeCloudHost(import.meta.env.VITE_LOCK_TO_CLOUD);\n  if (envHost) return envHost;\n\n  if (typeof window !== \"undefined\") {\n    const injected = (window as unknown as Record<string, unknown>)[\n      LOCK_TO_CLOUD_WINDOW_KEY\n    ];\n    if (typeof injected === \"string\") {\n      return normalizeCloudHost(injected);\n    }\n  }\n\n  return null;\n}\n\n/**\n * Compare a backend host against the locked Cloud host, normalizing\n * trailing slashes, protocol, and case so that e.g.\n * `https://app.all-hands.dev/` matches `https://app.all-hands.dev`.\n *\n * Used by the locked-to-Cloud gates (`root.tsx`,\n * `onboarding-modal.tsx`) to decide whether the active backend is the\n * configured locked Cloud host — a Cloud backend on a *different* host\n * (or a stale Local backend) must not be treated as the locked backend.\n */\nexport function isSameCloudHost(\n  host: string | null | undefined,\n  lockedHost: string | null | undefined,\n): boolean {\n  const a = getCloudHostComparisonKey(host);\n  const b = getCloudHostComparisonKey(lockedHost);\n  if (!a || !b) return false;\n  return a === b;\n}\n\nexport function getLockedCloudAuthMode(): LockedCloudAuthMode {\n  return getCookieAuthCloudHost() ? \"cookie\" : \"api-key\";\n}\n\nexport function getAgentServerBaseUrl(): string | null {\n  const configuredUrl = getConfiguredBaseUrl();\n  if (configuredUrl) return configuredUrl;\n\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n\n  return null;\n}\n\nexport function getAgentServerSessionApiKey(): string | null {\n  return getBakedSessionApiKey();\n}\n\nexport function getAgentServerWorkingDir(): string {\n  const envDir = import.meta.env.VITE_WORKING_DIR?.trim();\n  if (envDir) return envDir;\n\n  return DEFAULT_WORKING_DIR;\n}\n\nfunction buildWorkingDir(base: string, conversationId: string): string {\n  const trimmed = base.replace(/\\/+$/, \"\");\n  const hex = conversationId.replace(/-/g, \"\");\n  return `${trimmed}/${hex}`;\n}\n\nexport function buildConversationWorkingDir(conversationId: string): string {\n  return buildWorkingDir(getAgentServerWorkingDir(), conversationId);\n}\n\n/**\n * Conversation working dir under the backend-relative default\n * (`workspace/project/<hex>`), deliberately ignoring any baked absolute\n * `VITE_WORKING_DIR`. `resolveAbsoluteAgentServerPath()` anchors this to the\n * active backend's own home via `GET /api/file/home`, so it resolves to a\n * writable path on whichever backend actually runs the conversation.\n */\nexport function buildRelativeConversationWorkingDir(\n  conversationId: string,\n): string {\n  return buildWorkingDir(DEFAULT_WORKING_DIR, conversationId);\n}\n\n/**\n * Whether `backendHost` is the same host that served this frontend.\n *\n * A launcher-baked `VITE_WORKING_DIR` is an absolute path on the serving\n * host's filesystem, so it is only valid on that exact backend. The seeded\n * `default-local` entry starts life pointing at the served origin, but its\n * `host` is mutable — the user can edit it to a remote backend while its id\n * stays `default-local`. Matching on the host (not the stable id) keeps the\n * real invariant: the baked path is only safe for the host it was baked for.\n */\nexport function isServedOriginHost(\n  backendHost: string | null | undefined,\n): boolean {\n  const served = normalizeBaseUrl(getAgentServerBaseUrl());\n  const candidate = normalizeBaseUrl(backendHost);\n  if (!served || !candidate) return false;\n  return served === candidate;\n}\n\n/**\n * Base working dir for a new conversation on the backend at `backendHost`.\n * The baked (possibly absolute) default is used only for the served-origin\n * backend; every other backend gets the relative default, anchored to its\n * own home by `resolveAbsoluteAgentServerPath()`.\n */\nexport function buildConversationWorkingDirForBackend(\n  conversationId: string,\n  backendHost: string | null | undefined,\n): string {\n  return isServedOriginHost(backendHost)\n    ? buildConversationWorkingDir(conversationId)\n    : buildRelativeConversationWorkingDir(conversationId);\n}\n\n/**\n * Workspace root for `backendHost` — the dir each conversation's `<root>/<hex>`\n * working dir is created under. Same per-backend rule as\n * `buildConversationWorkingDirForBackend()`.\n */\nexport function getWorkspaceRootForBackend(\n  backendHost: string | null | undefined,\n): string {\n  return isServedOriginHost(backendHost)\n    ? getAgentServerWorkingDir()\n    : DEFAULT_WORKING_DIR;\n}\n\nexport function getAgentServerHeaders(): Record<string, string> {\n  const sessionApiKey = getAgentServerSessionApiKey();\n  return sessionApiKey ? { \"X-Session-API-Key\": sessionApiKey } : {};\n}\n\nexport function isAuthRequired(): boolean {\n  return (\n    import.meta.env.VITE_AUTH_REQUIRED === \"true\" ||\n    (typeof window !== \"undefined\" &&\n      (window as unknown as Record<string, unknown>)\n        .__AGENT_CANVAS_AUTH_REQUIRED__ === true)\n  );\n}\n\nexport function isAuthRequiredAndMissing(): boolean {\n  if (!isAuthRequired()) return false;\n  return !getAgentServerSessionApiKey();\n}\n"],"mappings":";AAAA,IAAa,IAAsB,qBAa7B,IAA2B,kCAC3B,IAAsB,iBACtB,IAAuB,iBACvB,IAA6B,OAAO,KACpC,IAA8B,GAC9B,IAA4B,OAAO;AAEzC,SAAS,EAAW,GAAsC;CACxD,OAAO,GAAO,KAAK,KAAK;AAC1B;AAEA,SAAS,EAAiB,GAAsC;CAC9D,IAAI,CAAC,GAAO,OAAO;CAEnB,IAAM,IAAU,EAAM,KAAK,EAAE,QAAQ,OAAO,EAAE;CAW9C,OAVK,IAED,gBAAgB,KAAK,CAAO,IACvB,IAGL,OAAO,SAAW,MACb,GAAG,OAAO,SAAS,SAAS,IAAI,MAGlC,UAAU,MAVI;AAWvB;AAEA,SAAS,EAAmB,GAAsC;CAChE,IAAI,CAAC,GAAO,OAAO;CAEnB,IAAM,IAAU,EAAM,KAAK,EAAE,QAAQ,QAAQ,EAAE;CAO/C,OANK,IAED,gBAAgB,KAAK,CAAO,IACvB,IAGF,WAAW,MANG;AAOvB;AAEA,SAAS,EAA0B,GAA0B;CAC3D,IAAM,IAAQ,EAAS,YAAY;CAanC,OAXE,MAAU,KACV,MAAU,IAEH,IAGL,MAAU,IAA4B,IACtC,EAAM,SAAS,IAAI,GAAqB,IACnC,GAAG,EAAM,MAAM,GAAG,GAA2B,IAAI,MAGnD;AACT;AAEA,SAAS,EAA0B,GAAsC;CACvE,IAAM,IAAa,EAAmB,CAAK;CAC3C,IAAI,CAAC,GAAY,OAAO;CAExB,IAAI;EACF,IAAM,IAAM,IAAI,IAAI,CAAU,GACxB,IAAO,EAAI,OAAO,IAAI,EAAI,SAAS;EACzC,OAAO,GAAG,EAAI,SAAS,IAAI,EAA0B,EAAI,QAAQ,IAAI;CACvE,QAAQ;EACN,OAAO,EAAW,YAAY;CAChC;AACF;AAEA,SAAgB,IAAwC;CACtD,IAAM,IAAa,EAAmB;CAStC,OAPE,CAAC,KACD,OAAO,SAAW,OAClB,CAAC,EAAgB,OAAO,SAAS,QAAQ,CAAU,IAE5C,OAGF,OAAO,SAAS;AACzB;AAEA,SAAS,IAAsC;CAC7C,OAAO,EAAA,KAAA,CAAsD;AAC/D;AAmBA,SAAgB,IAAuC;CACrD,IAAM,IAAS,EAAA,KAAA,CAA+C;CAC9D,IAAI,GAAQ,OAAO;CAEnB,IAAI,OAAO,SAAW,KAAa;EACjC,IAAM,IAAY,OACf;EACH,IAAI,OAAO,KAAa,UACtB,OAAO,EAAW,CAAQ;CAE9B;CAEA,OAAO;AACT;AASA,SAAgB,IAAoC;CAClD,IAAM,IAAU,EAAA,KAAA,CAAqD;CACrE,IAAI,GAAS,OAAO;CAEpB,IAAI,OAAO,SAAW,KAAa;EACjC,IAAM,IAAY,OAChB;EAEF,IAAI,OAAO,KAAa,UACtB,OAAO,EAAmB,CAAQ;CAEtC;CAEA,OAAO;AACT;AAYA,SAAgB,EACd,GACA,GACS;CACT,IAAM,IAAI,EAA0B,CAAI,GAClC,IAAI,EAA0B,CAAU;CAE9C,OADI,CAAC,KAAK,CAAC,IAAU,KACd,MAAM;AACf;AAEA,SAAgB,IAA8C;CAC5D,OAAO,EAAuB,IAAI,WAAW;AAC/C;AAEA,SAAgB,IAAuC;CAQrD,OAPsB,EAClB,MAEA,OAAO,SAAW,MACb,OAAO,SAAS,SAGlB;AACT;AAEA,SAAgB,IAA6C;CAC3D,OAAO,EAAsB;AAC/B;AAEA,SAAgB,IAAmC;CAIjD,OAAO;AACT;AAEA,SAAS,EAAgB,GAAc,GAAgC;CAGrE,OAAO,GAFS,EAAK,QAAQ,QAAQ,EAE3B,EAAQ,GADN,EAAe,QAAQ,MAAM,EACpB;AACvB;AAEA,SAAgB,EAA4B,GAAgC;CAC1E,OAAO,EAAgB,EAAyB,GAAG,CAAc;AACnE;AASA,SAAgB,EACd,GACQ;CACR,OAAO,EAAgB,GAAqB,CAAc;AAC5D;AAYA,SAAgB,EACd,GACS;CACT,IAAM,IAAS,EAAiB,EAAsB,CAAC,GACjD,IAAY,EAAiB,CAAW;CAE9C,OADI,CAAC,KAAU,CAAC,IAAkB,KAC3B,MAAW;AACpB;AAQA,SAAgB,EACd,GACA,GACQ;CACR,OAAO,EAAmB,CAAW,IACjC,EAA4B,CAAc,IAC1C,EAAoC,CAAc;AACxD;AAOA,SAAgB,EACd,GACQ;CACR,OAAO,EAAmB,CAAW,IACjC,EAAyB,IACzB;AACN;AAEA,SAAgB,IAAgD;CAC9D,IAAM,IAAgB,EAA4B;CAClD,OAAO,IAAgB,EAAE,qBAAqB,EAAc,IAAI,CAAC;AACnE;AAEA,SAAgB,IAA0B;CACxC,OAEG,OAAO,SAAW,OAChB,OACE,mCAAmC;AAE5C"}

package/dist/api/automation-service/automation-service.api.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("../backend-registry/active-store.cjs"),t=require("../agent-server-client-options.cjs"),n=require("../../node_modules/axios/lib/axios.cjs"),r=require("../client-source.cjs"),i=require("../../services/telemetry.cjs"),a=require("../cloud/proxy.cjs"),o=require("../../manifests/automation-interface.cjs"),s=require("../../manifests/automation-setup.cjs");var c=`/api/automation`,l=n.default.create();async function u(e={}){let t=await i.getTelemetryDistinctId();return{...r.AGENT_CANVAS_CLIENT_HEADERS,...t?{[r.OPENHANDS_TELEMETRY_DISTINCT_ID_HEADER]:t}:{},...e}}l.interceptors.request.use(async n=>{let r=await u();if(Object.entries(r).forEach(([e,t])=>{n.headers.set(e,t)}),n.baseURL)return n;let i=e.getEffectiveLocalBackend();if(!i)throw new t.NoBackendAvailableError;n.baseURL=i.host;let a=i.apiKey?.trim();return a&&n.headers.set(`X-Session-API-Key`,a),n});function d(e){return typeof e==`string`&&e.trim()||null}function f(e){return typeof e==`string`?d(e):d(e.sdk_version)??d(e.version)}function p(e,t){let n=new URLSearchParams;return n.set(`limit`,String(e)),n.set(`offset`,String(t)),n.toString()}function m(e){return e.trigger.type===`event`?{type:`event`,source:e.trigger.source,on:e.trigger.on,...e.trigger.filter&&{filter:e.trigger.filter}}:{type:`cron`,schedule:e.trigger.schedule,timezone:e.timezone??e.trigger.timezone??`UTC`}}function h(){return typeof crypto<`u`&&typeof crypto.randomUUID==`function`?`pending.${crypto.randomUUID()}`:`pending.${Date.now()}.${Math.random().toString(36).slice(2,10)}`}function g(e){if(!e.prompt)throw Error(`An automation prompt is required for import.`);let{importDefaults:t}=o.getImportExportSpec(),n=e.repository?[{url:e.repository,...e.branch&&{ref:e.branch},...!e.repository.includes(`://`)&&!e.repository.startsWith(`git@`)&&{provider:t.repoProvider}}]:void 0;return{path:`${c}${o.getAutomationEndpoint(e.plugins?.length?`createPlugin`:`createPrompt`)}`,body:{name:e.name,prompt:e.prompt,trigger:{type:`event`,source:t.placeholderEventSource,on:h()},...e.model&&{model:e.model},...n&&{repos:n},...e.plugins?.length&&{plugins:e.plugins.map(e=>({source:e}))},...e.timeout!=null&&{timeout:e.timeout}}}}async function _(e){let t=e.apiKey.trim();return{baseURL:e.host,headers:await u(t?{"X-Session-API-Key":t}:{})}}async function v(e){return u(e.orgId?{"X-Org-Id":e.orgId}:{})}var y=class t{static async syncTelemetryConsent(t=i.getTelemetryConsent()){if(e.getActiveBackend().backend.kind!==`local`)return;let n=await i.getTelemetryDistinctIdForConsentSync();await l.post(`${c}/v1/telemetry/consent`,{consent_granted:t===`granted`,frontend_distinct_id:n},{timeout:5e3}),t!==`granted`&&n&&i.clearPendingLocalTelemetryRevocation(n)}static async getSdkVersion(){let t=e.getActiveBackend(),n=`${c}/sdk-version`;try{let e;if(t.backend.kind===`cloud`)e=await a.callCloudProxy({backend:t.backend,method:`GET`,path:n,headers:await v(t),timeoutSeconds:5});else{let{data:t}=await l.get(n,{timeout:5e3});e=t}return f(e)}catch{return null}}static async listAutomations(t={}){let{limit:n=50,offset:r=0}=t,i=e.getActiveBackend().backend;if(i.kind===`cloud`)return a.callCloudProxy({backend:i,method:`GET`,path:`${c}${o.getAutomationEndpoint(`list`)}?${p(n,r)}`,headers:await u()});let{data:s}=await l.get(`${c}${o.getAutomationEndpoint(`list`)}`,{params:{limit:n,offset:r}});return s}static async getAutomations(e=50,n=0){return t.listAutomations({limit:e,offset:n})}static async getAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`GET`,path:r,headers:await u()});let{data:i}=await l.get(r);return i}static async createAutomation(t){let n=e.getActiveBackend(),{path:r,body:i}=g(t),s;if(n.backend.kind===`cloud`)s=await a.callCloudProxy({backend:n.backend,method:`POST`,path:r,body:i,headers:await v(n)});else{let{data:e}=await l.post(r,i,await _(n.backend));s=e}let u=`${c}${o.getAutomationIdEndpoint(`detail`,s.id)}`,d={trigger:m(t),enabled:!1};try{if(n.backend.kind===`cloud`)return await a.callCloudProxy({backend:n.backend,method:`PATCH`,path:u,body:d,headers:await v(n)});let{data:e}=await l.patch(u,d,await _(n.backend));return e}catch(e){try{n.backend.kind===`cloud`?await a.callCloudProxy({backend:n.backend,method:`DELETE`,path:u,headers:await v(n)}):await l.delete(u,await _(n.backend))}catch(t){throw AggregateError([e,t],`Failed to disable the imported automation and clean it up.`)}throw e}}static async updateAutomation(t,n){let r=e.getActiveBackend().backend,i=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(r.kind===`cloud`)return a.callCloudProxy({backend:r,method:`PATCH`,path:i,body:n,headers:await u()});let{data:s}=await l.patch(i,n);return s}static async deleteAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(n.kind===`cloud`){await a.callCloudProxy({backend:n,method:`DELETE`,path:r,headers:await u()});return}await l.delete(r)}static async dispatchAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`dispatch`,t)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,headers:await u()});let{data:i}=await l.post(r);return i}static async cancelAutomationRun(t){let n=e.getActiveBackend().backend,r=`${c}/v1/runs/${encodeURIComponent(t)}/cancel`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,headers:await u()});let{data:i}=await l.post(r);return i}static async listAutomationRuns(t,n={}){let{limit:r=50,offset:i=0}=n,s=e.getActiveBackend().backend,d=`${c}${o.getAutomationIdEndpoint(`runs`,t)}`;if(s.kind===`cloud`)return a.callCloudProxy({backend:s,method:`GET`,path:`${d}?${p(r,i)}`,headers:await u()});let{data:f}=await l.get(d,{params:{limit:r,offset:i}});return f}static async getAutomationRuns(e,n=50,r=0){return t.listAutomationRuns(e,{limit:n,offset:r})}static async toggleAutomation(e,n){return t.updateAutomation(e,{enabled:n})}static async downloadTarball(t,n){let r=e.getActiveBackend().backend,i=`${c}${o.getAutomationIdEndpoint(`tarball`,t)}`,s;if(r.kind===`cloud`)s=await a.callCloudProxy({backend:r,method:`GET`,path:i,responseType:`blob`,headers:await u()});else{let{data:e}=await l.get(i,{responseType:`blob`});s=e}let d=URL.createObjectURL(s),f=document.createElement(`a`);f.href=d,f.download=`${n}.tar`,f.click(),URL.revokeObjectURL(d)}static async getCapabilities(){let t=e.getActiveBackend().backend,n=`${c}${o.getAutomationEndpoint(`capabilities`)}`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`GET`,path:n,headers:await u()});let{data:r}=await l.get(n);return r}static async validateDraft(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationEndpoint(`validate`)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,body:t,headers:await u()});let{data:i}=await l.post(r,t);return i}static async createAutomationDraft(t,n){let r=e.getActiveBackend().backend,i=`${c}${s.automationCreateEndpoint(n)}`;if(r.kind===`cloud`)return a.callCloudProxy({backend:r,method:`POST`,path:i,body:t,headers:await u()});let{data:o}=await l.post(i,t);return o}static async uploadAutomationTarball(t,r){let i=e.getActiveBackend().backend,a=`${c}${s.automationUploadEndpoint()}?name=${encodeURIComponent(t)}`,o={"Content-Type":`application/gzip`},d;if(i.kind===`cloud`){let{orgId:t}=e.getActiveBackend();d=(await n.default.post(`${i.host.replace(/\/+$/,``)}${a}`,r,{headers:{...await u(),...o,...i.apiKey?{Authorization:`Bearer ${i.apiKey}`}:{},...t?{"X-Org-Id":t}:{}}})).data}else d=(await l.post(a,r,{headers:o})).data;let f=d.tarball_path;if(typeof f!=`string`||!f)throw Error(`The upload returned no tarball path.`);return f}static async getGitSyncStatus(){let t=e.getActiveBackend().backend,n=`${c}/v1/git-sync/status`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`GET`,path:n});let{data:r}=await l.get(n);return r}static async updateGitSyncConfig(t){let n=e.getActiveBackend().backend,r=`${c}/v1/git-sync/config`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`PUT`,path:r,body:t});let{data:i}=await l.put(r,t);return i}static async checkGitSyncConfig(t){let n=e.getActiveBackend().backend,r=`${c}/v1/git-sync/check`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,body:t});let{data:i}=await l.post(r,t);return i}static async triggerGitSync(){let t=e.getActiveBackend().backend,n=`${c}/v1/git-sync/sync`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`POST`,path:n});let{data:r}=await l.post(n);return r}static async checkHealth(){let t=e.getActiveBackend().backend,n=`${c}${o.getAutomationEndpoint(`health`)}`;try{if(t.kind===`cloud`)return await a.callCloudProxy({backend:t,method:`GET`,path:n,timeoutSeconds:5,headers:await u()});let{data:e}=await l.get(n,{timeout:5e3});return e}catch{return{status:`error`}}}};exports.default=y;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../backend-registry/active-store.cjs"),t=require("../agent-server-client-options.cjs"),n=require("../../node_modules/axios/lib/axios.cjs"),r=require("../client-source.cjs"),i=require("../../services/telemetry.cjs"),a=require("../cloud/proxy.cjs"),o=require("../../manifests/automation-interface.cjs"),s=require("../../manifests/automation-setup.cjs");var c=`/api/automation`,l=n.default.create();async function u(e={}){let t=await i.getTelemetryDistinctId();return{...r.AGENT_CANVAS_CLIENT_HEADERS,...t?{[r.OPENHANDS_TELEMETRY_DISTINCT_ID_HEADER]:t}:{},...e}}l.interceptors.request.use(async n=>{let r=await u();if(Object.entries(r).forEach(([e,t])=>{n.headers.set(e,t)}),n.baseURL)return n;let i=e.getEffectiveLocalBackend();if(!i)throw new t.NoBackendAvailableError;n.baseURL=i.host;let a=i.apiKey?.trim();return a&&n.headers.set(`X-Session-API-Key`,a),n});function d(e){return typeof e==`string`&&e.trim()||null}function f(e){return typeof e==`string`?d(e):d(e.sdk_version)??d(e.version)}function p(e,t){let n=new URLSearchParams;return n.set(`limit`,String(e)),n.set(`offset`,String(t)),n.toString()}function m(e){return e.trigger.type===`event`?{type:`event`,source:e.trigger.source,on:e.trigger.on,...e.trigger.filter&&{filter:e.trigger.filter}}:{type:`cron`,schedule:e.trigger.schedule,timezone:e.timezone??e.trigger.timezone??`UTC`}}function h(){return typeof crypto<`u`&&typeof crypto.randomUUID==`function`?`pending.${crypto.randomUUID()}`:`pending.${Date.now()}.${Math.random().toString(36).slice(2,10)}`}function g(e){if(!e.prompt)throw Error(`An automation prompt is required for import.`);let{importDefaults:t}=o.getImportExportSpec(),n=e.repository?[{url:e.repository,...e.branch&&{ref:e.branch},...!e.repository.includes(`://`)&&!e.repository.startsWith(`git@`)&&{provider:t.repoProvider}}]:void 0;return{path:`${c}${o.getAutomationEndpoint(e.plugins?.length?`createPlugin`:`createPrompt`)}`,body:{name:e.name,prompt:e.prompt,trigger:{type:`event`,source:t.placeholderEventSource,on:h()},...e.model&&{model:e.model},...n&&{repos:n},...e.plugins?.length&&{plugins:e.plugins.map(e=>({source:e}))},...e.timeout!=null&&{timeout:e.timeout}}}}async function _(e){let t=e.apiKey.trim();return{baseURL:e.host,headers:await u(t?{"X-Session-API-Key":t}:{})}}async function v(e){return u(e.orgId?{"X-Org-Id":e.orgId}:{})}var y=class t{static async syncTelemetryConsent(t=i.getTelemetryConsent()){if(e.getActiveBackend().backend.kind!==`local`)return;let n=await i.getTelemetryDistinctIdForConsentSync();await l.post(`${c}/v1/telemetry/consent`,{consent_granted:t===`granted`,frontend_distinct_id:n},{timeout:5e3}),t!==`granted`&&n&&i.clearPendingLocalTelemetryRevocation(n)}static async getSdkVersion(){let t=e.getActiveBackend(),n=`${c}/sdk-version`;try{let e;if(t.backend.kind===`cloud`)e=await a.callCloudProxy({backend:t.backend,method:`GET`,path:n,headers:await v(t),timeoutSeconds:5});else{let{data:t}=await l.get(n,{timeout:5e3});e=t}return f(e)}catch{return null}}static async listAutomations(t={}){let{limit:n=50,offset:r=0}=t,i=e.getActiveBackend().backend;if(i.kind===`cloud`)return a.callCloudProxy({backend:i,method:`GET`,path:`${c}${o.getAutomationEndpoint(`list`)}?${p(n,r)}`,headers:await u()});let{data:s}=await l.get(`${c}${o.getAutomationEndpoint(`list`)}`,{params:{limit:n,offset:r}});return s}static async getAutomations(e=50,n=0){return t.listAutomations({limit:e,offset:n})}static async getAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`GET`,path:r,headers:await u()});let{data:i}=await l.get(r);return i}static async createAutomation(t){let n=e.getActiveBackend(),{path:r,body:i}=g(t),s;if(n.backend.kind===`cloud`)s=await a.callCloudProxy({backend:n.backend,method:`POST`,path:r,body:i,headers:await v(n)});else{let{data:e}=await l.post(r,i,await _(n.backend));s=e}let u=`${c}${o.getAutomationIdEndpoint(`detail`,s.id)}`,d={trigger:m(t),enabled:!1};try{if(n.backend.kind===`cloud`)return await a.callCloudProxy({backend:n.backend,method:`PATCH`,path:u,body:d,headers:await v(n)});let{data:e}=await l.patch(u,d,await _(n.backend));return e}catch(e){try{n.backend.kind===`cloud`?await a.callCloudProxy({backend:n.backend,method:`DELETE`,path:u,headers:await v(n)}):await l.delete(u,await _(n.backend))}catch(t){throw AggregateError([e,t],`Failed to disable the imported automation and clean it up.`)}throw e}}static async updateAutomation(t,n){let r=e.getActiveBackend().backend,i=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(r.kind===`cloud`)return a.callCloudProxy({backend:r,method:`PATCH`,path:i,body:n,headers:await u()});let{data:s}=await l.patch(i,n);return s}static async deleteAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`detail`,t)}`;if(n.kind===`cloud`){await a.callCloudProxy({backend:n,method:`DELETE`,path:r,headers:await u()});return}await l.delete(r)}static async dispatchAutomation(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationIdEndpoint(`dispatch`,t)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,headers:await u()});let{data:i}=await l.post(r);return i}static async cancelAutomationRun(t){let n=e.getActiveBackend().backend,r=`${c}/v1/runs/${encodeURIComponent(t)}/cancel`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,headers:await u()});let{data:i}=await l.post(r);return i}static async listAutomationRuns(t,n={}){let{limit:r=50,offset:i=0}=n,s=e.getActiveBackend().backend,d=`${c}${o.getAutomationIdEndpoint(`runs`,t)}`;if(s.kind===`cloud`)return a.callCloudProxy({backend:s,method:`GET`,path:`${d}?${p(r,i)}`,headers:await u()});let{data:f}=await l.get(d,{params:{limit:r,offset:i}});return f}static async getAutomationRuns(e,n=50,r=0){return t.listAutomationRuns(e,{limit:n,offset:r})}static async toggleAutomation(e,n){return t.updateAutomation(e,{enabled:n})}static async downloadTarball(t,n){let r=e.getActiveBackend().backend,i=`${c}${o.getAutomationIdEndpoint(`tarball`,t)}`,s;if(r.kind===`cloud`)s=await a.callCloudProxy({backend:r,method:`GET`,path:i,responseType:`blob`,headers:await u()});else{let{data:e}=await l.get(i,{responseType:`blob`});s=e}let d=URL.createObjectURL(s),f=document.createElement(`a`);f.href=d,f.download=`${n}.tar`,f.click(),URL.revokeObjectURL(d)}static async getCapabilities(){let t=e.getActiveBackend().backend,n=`${c}${o.getAutomationEndpoint(`capabilities`)}`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`GET`,path:n,headers:await u()});let{data:r}=await l.get(n);return r}static async validateDraft(t){let n=e.getActiveBackend().backend,r=`${c}${o.getAutomationEndpoint(`validate`)}`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,body:t,headers:await u()});let{data:i}=await l.post(r,t);return i}static async createAutomationDraft(t,n,r){let i=e.getActiveBackend().backend,o=`${c}${s.automationCreateEndpoint(n,r)}`;if(i.kind===`cloud`)return a.callCloudProxy({backend:i,method:`POST`,path:o,body:t,headers:await u()});let{data:d}=await l.post(o,t);return d}static async uploadAutomationTarball(t,r){let i=e.getActiveBackend().backend,a=`${c}${s.automationUploadEndpoint()}?name=${encodeURIComponent(t)}`,o={"Content-Type":`application/gzip`},d;if(i.kind===`cloud`){let{orgId:t}=e.getActiveBackend();d=(await n.default.post(`${i.host.replace(/\/+$/,``)}${a}`,r,{headers:{...await u(),...o,...i.apiKey?{Authorization:`Bearer ${i.apiKey}`}:{},...t?{"X-Org-Id":t}:{}}})).data}else d=(await l.post(a,r,{headers:o})).data;let f=d.tarball_path;if(typeof f!=`string`||!f)throw Error(`The upload returned no tarball path.`);return f}static async getGitSyncStatus(){let t=e.getActiveBackend().backend,n=`${c}/v1/git-sync/status`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`GET`,path:n});let{data:r}=await l.get(n);return r}static async updateGitSyncConfig(t){let n=e.getActiveBackend().backend,r=`${c}/v1/git-sync/config`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`PUT`,path:r,body:t});let{data:i}=await l.put(r,t);return i}static async checkGitSyncConfig(t){let n=e.getActiveBackend().backend,r=`${c}/v1/git-sync/check`;if(n.kind===`cloud`)return a.callCloudProxy({backend:n,method:`POST`,path:r,body:t});let{data:i}=await l.post(r,t);return i}static async triggerGitSync(){let t=e.getActiveBackend().backend,n=`${c}/v1/git-sync/sync`;if(t.kind===`cloud`)return a.callCloudProxy({backend:t,method:`POST`,path:n});let{data:r}=await l.post(n);return r}static async checkHealth(){let t=e.getActiveBackend().backend,n=`${c}${o.getAutomationEndpoint(`health`)}`;try{if(t.kind===`cloud`)return await a.callCloudProxy({backend:t,method:`GET`,path:n,timeoutSeconds:5,headers:await u()});let{data:e}=await l.get(n,{timeout:5e3});return e}catch{return{status:`error`}}}};exports.default=y;
 //# sourceMappingURL=automation-service.api.cjs.map