@openhands/agent-canvas 1.15.0 → 1.17.0

package/dist/api/provider-connections-service/provider-connections-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-connections-service.api.js","names":[],"sources":["../../../src/api/provider-connections-service/provider-connections-service.api.ts"],"sourcesContent":["/**\n * ProviderConnectionsService is a thin wrapper over the local agent-server's\n * `/api/llm/provider-connections` CRUD endpoints. A provider connection is a\n * shared `api_key` + optional `base_url` that one or more LLM profiles\n * reference by id; the agent-server resolves the credential into a runnable LLM\n * at profile-load time, so this service only manages the stored connections.\n *\n * These endpoints exist only on the agent-server (local backend). Cloud has no\n * equivalent yet, so callers must gate usage on `backend.kind === \"local\"`.\n *\n * There is no generated client for these routes in `@openhands/typescript-client`\n * yet, so requests go through the generic `AgentServerClient` verb helpers —\n * the same approach `LLMBalanceService` uses.\n */\nimport { AgentServerClient } from \"@openhands/typescript-client/clients\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\nconst PROVIDER_CONNECTIONS_PATH = \"/api/llm/provider-connections\";\n\nexport interface ProviderConnection {\n  id: string;\n  display_name: string;\n  provider: string;\n  base_url: string | null;\n  created_at: number;\n  updated_at: number;\n  /** Whether the stored connection currently holds a usable key. */\n  api_key_set: boolean;\n}\n\nexport interface CreateProviderConnectionRequest {\n  display_name: string;\n  provider: string;\n  api_key: string;\n  base_url?: string | null;\n}\n\n/**\n * Partial update. Only the provided fields change. `api_key` may be sent to\n * rotate the key; the agent-server rejects `api_key: null` (a connection must\n * always keep a key), so callers omit it to leave the key unchanged.\n */\nexport interface UpdateProviderConnectionRequest {\n  display_name?: string;\n  provider?: string;\n  api_key?: string;\n  base_url?: string | null;\n}\n\nfunction createClient(): AgentServerClient {\n  const { host, apiKey } = getAgentServerClientOptions();\n  return new AgentServerClient({ host, ...(apiKey ? { apiKey } : {}) });\n}\n\nclass ProviderConnectionsService {\n  static async list(): Promise<ProviderConnection[]> {\n    const client = createClient();\n    try {\n      return await client.get<ProviderConnection[]>(PROVIDER_CONNECTIONS_PATH, {\n        responseType: \"json\",\n      });\n    } finally {\n      client.close();\n    }\n  }\n\n  static async create(\n    request: CreateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.post<ProviderConnection>(\n        PROVIDER_CONNECTIONS_PATH,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async update(\n    id: string,\n    request: UpdateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.patch<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async delete(id: string): Promise<ProviderConnection> {\n    const client = createClient();\n    try {\n      return await client.delete<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProviderConnectionsService;\n"],"mappings":";;;;AAiBA,IAAM,IAA4B;AAgClC,SAAS,IAAkC;CACzC,IAAM,EAAE,SAAM,cAAW,EAA4B;CACrD,OAAO,IAAI,EAAkB;EAAE;EAAM,GAAI,IAAS,EAAE,UAAO,IAAI,CAAC;CAAG,CAAC;AACtE;AAEA,IAAM,IAAN,MAAiC;CAC/B,aAAa,OAAsC;EACjD,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,IAA0B,GAA2B,EACvE,cAAc,OAChB,CAAC;EACH,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GAC6B;EAC7B,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,KAClB,GACA,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GACA,GAC6B;EAC7B,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,MAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OAAO,GAAyC;EAC3D,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,OAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;AACF"}
+{"version":3,"file":"provider-connections-service.api.js","names":[],"sources":["../../../src/api/provider-connections-service/provider-connections-service.api.ts"],"sourcesContent":["/**\n * ProviderConnectionsService is the single entry point for provider-connection\n * CRUD, routing per active backend so callers (hooks, the settings manager)\n * stay backend-agnostic. A provider connection is a shared `api_key` + optional\n * `base_url` that one or more LLM profiles reference by id; the backend resolves\n * the credential into a runnable LLM at profile-load time, so this service only\n * manages the stored connections.\n *\n * - local agent-server: the `/api/llm/provider-connections` CRUD endpoints via\n *   the generic `AgentServerClient` verb helpers (the same approach\n *   `LLMBalanceService` uses; there is no generated client for these routes in\n *   `@openhands/typescript-client` yet);\n * - cloud app-server: `src/api/cloud/provider-connections-service.api.ts` (the\n *   org-gated `/api/organizations/{orgId}/provider-connections` routes) via the\n *   org-scoped cloud proxy.\n *\n * This mirrors how `ProfilesService` branches to the cloud profile service.\n */\nimport { AgentServerClient } from \"@openhands/typescript-client/clients\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudProviderConnections,\n  createCloudProviderConnection,\n  updateCloudProviderConnection,\n  deleteCloudProviderConnection,\n} from \"../cloud/provider-connections-service.api\";\n\nconst PROVIDER_CONNECTIONS_PATH = \"/api/llm/provider-connections\";\n\nfunction isCloudBackend(): boolean {\n  return getActiveBackend().backend.kind === \"cloud\";\n}\n\nexport interface ProviderConnection {\n  id: string;\n  display_name: string;\n  provider: string;\n  base_url: string | null;\n  created_at: number;\n  updated_at: number;\n  /** Whether the stored connection currently holds a usable key. */\n  api_key_set: boolean;\n}\n\nexport interface CreateProviderConnectionRequest {\n  display_name: string;\n  provider: string;\n  api_key: string;\n  base_url?: string | null;\n}\n\n/**\n * Partial update. Only the provided fields change. `api_key` may be sent to\n * rotate the key; the agent-server rejects `api_key: null` (a connection must\n * always keep a key), so callers omit it to leave the key unchanged.\n */\nexport interface UpdateProviderConnectionRequest {\n  display_name?: string;\n  provider?: string;\n  api_key?: string;\n  base_url?: string | null;\n}\n\nfunction createClient(): AgentServerClient {\n  const { host, apiKey } = getAgentServerClientOptions();\n  return new AgentServerClient({ host, ...(apiKey ? { apiKey } : {}) });\n}\n\nclass ProviderConnectionsService {\n  static async list(): Promise<ProviderConnection[]> {\n    if (isCloudBackend()) return fetchCloudProviderConnections();\n    const client = createClient();\n    try {\n      return await client.get<ProviderConnection[]>(PROVIDER_CONNECTIONS_PATH, {\n        responseType: \"json\",\n      });\n    } finally {\n      client.close();\n    }\n  }\n\n  static async create(\n    request: CreateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    if (isCloudBackend()) return createCloudProviderConnection(request);\n    const client = createClient();\n    try {\n      return await client.post<ProviderConnection>(\n        PROVIDER_CONNECTIONS_PATH,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async update(\n    id: string,\n    request: UpdateProviderConnectionRequest,\n  ): Promise<ProviderConnection> {\n    if (isCloudBackend()) return updateCloudProviderConnection(id, request);\n    const client = createClient();\n    try {\n      return await client.patch<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        request,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n\n  static async delete(id: string): Promise<ProviderConnection> {\n    if (isCloudBackend()) return deleteCloudProviderConnection(id);\n    const client = createClient();\n    try {\n      return await client.delete<ProviderConnection>(\n        `${PROVIDER_CONNECTIONS_PATH}/${encodeURIComponent(id)}`,\n        { responseType: \"json\" },\n      );\n    } finally {\n      client.close();\n    }\n  }\n}\n\nexport default ProviderConnectionsService;\n"],"mappings":";;;;;;AA4BA,IAAM,IAA4B;AAElC,SAAS,IAA0B;CACjC,OAAO,EAAiB,EAAE,QAAQ,SAAS;AAC7C;AAgCA,SAAS,IAAkC;CACzC,IAAM,EAAE,SAAM,cAAW,EAA4B;CACrD,OAAO,IAAI,EAAkB;EAAE;EAAM,GAAI,IAAS,EAAE,UAAO,IAAI,CAAC;CAAG,CAAC;AACtE;AAEA,IAAM,IAAN,MAAiC;CAC/B,aAAa,OAAsC;EACjD,IAAI,EAAe,GAAG,OAAO,EAA8B;EAC3D,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,IAA0B,GAA2B,EACvE,cAAc,OAChB,CAAC;EACH,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GAC6B;EAC7B,IAAI,EAAe,GAAG,OAAO,EAA8B,CAAO;EAClE,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,KAClB,GACA,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OACX,GACA,GAC6B;EAC7B,IAAI,EAAe,GAAG,OAAO,EAA8B,GAAI,CAAO;EACtE,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,MAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,GACA,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;CAEA,aAAa,OAAO,GAAyC;EAC3D,IAAI,EAAe,GAAG,OAAO,EAA8B,CAAE;EAC7D,IAAM,IAAS,EAAa;EAC5B,IAAI;GACF,OAAO,MAAM,EAAO,OAClB,GAAG,EAA0B,GAAG,mBAAmB,CAAE,KACrD,EAAE,cAAc,OAAO,CACzB;EACF,UAAU;GACR,EAAO,MAAM;EACf;CACF;AACF"}

package/dist/api/runtime-service/agent-server-runtime-service.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/file-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../../utils/websocket-url.cjs"),n=require("../backend-registry/active-store.cjs"),r=require("../agent-server-client-options.cjs"),i=require("../cloud/proxy.cjs"),a=require("../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.cjs");var o=class{static async executeCommand(e,o,s,c,l=30){let u=n.getActiveBackend().backend;if(u.kind===`cloud`&&e){let n=await i.callCloudProxy({backend:u,method:`POST`,hostOverride:t.buildHttpBaseUrl(e),path:`/api/bash/execute_bash_command`,body:{command:s,...c?{cwd:c}:{},timeout:Math.floor(l)},authMode:`session-api-key`,sessionApiKey:o,timeoutSeconds:l+10});return{exit_code:n.exit_code??-1,stdout:n.stdout??``,stderr:n.stderr??``}}let d=await new a.RemoteWorkspace(r.getAgentServerClientOptions({conversationUrl:e,sessionApiKey:o})).executeCommand(s,c,l);return{exit_code:d.exit_code,stdout:d.stdout,stderr:d.stderr}}static async downloadFile(a,o,s){let c=n.getActiveBackend().backend;return c.kind===`cloud`&&a?(await i.callCloudProxy({backend:c,method:`GET`,hostOverride:t.buildHttpBaseUrl(a),path:`/api/file/download?path=${encodeURIComponent(s)}`,authMode:`session-api-key`,sessionApiKey:o,responseType:`blob`})).arrayBuffer():new e.FileClient(r.getAgentServerClientOptions({conversationUrl:a,sessionApiKey:o})).downloadFile(s)}};exports.default=o;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/file-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../../utils/websocket-url.cjs"),n=require("../backend-registry/active-store.cjs"),r=require("../agent-server-client-options.cjs"),i=require("../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.cjs"),a=require("../cloud/proxy.cjs");var o=class{static async executeCommand(e,o,s,c,l=30){let u=n.getActiveBackend().backend;if(u.kind===`cloud`&&e){let n=await a.callCloudProxy({backend:u,method:`POST`,hostOverride:t.buildHttpBaseUrl(e),path:`/api/bash/execute_bash_command`,body:{command:s,...c?{cwd:c}:{},timeout:Math.floor(l)},authMode:`session-api-key`,sessionApiKey:o,timeoutSeconds:l+10});return{exit_code:n.exit_code??-1,stdout:n.stdout??``,stderr:n.stderr??``}}let d=await new i.RemoteWorkspace(r.getAgentServerClientOptions({conversationUrl:e,sessionApiKey:o})).executeCommand(s,c,l);return{exit_code:d.exit_code,stdout:d.stdout,stderr:d.stderr}}static async downloadFile(i,o,s){let c=n.getActiveBackend().backend;return c.kind===`cloud`&&i?(await a.callCloudProxy({backend:c,method:`GET`,hostOverride:t.buildHttpBaseUrl(i),path:`/api/file/download?path=${encodeURIComponent(s)}`,authMode:`session-api-key`,sessionApiKey:o,responseType:`blob`})).arrayBuffer():new e.FileClient(r.getAgentServerClientOptions({conversationUrl:i,sessionApiKey:o})).downloadFile(s)}};exports.default=o;
 //# sourceMappingURL=agent-server-runtime-service.cjs.map

package/dist/api/runtime-service/agent-server-runtime-service.js

@@ -3,14 +3,14 @@ import "../../node_modules/@openhands/typescript-client/dist/clients.js";
 import { buildHttpBaseUrl as t } from "../../utils/websocket-url.js";
 import { getActiveBackend as n } from "../backend-registry/active-store.js";
 import { getAgentServerClientOptions as r } from "../agent-server-client-options.js";
-import { callCloudProxy as i } from "../cloud/proxy.js";
-import { RemoteWorkspace as a } from "../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.js";
+import { RemoteWorkspace as i } from "../../node_modules/@openhands/typescript-client/dist/workspace/remote-workspace.js";
+import { callCloudProxy as a } from "../cloud/proxy.js";
 //#region src/api/runtime-service/agent-server-runtime-service.ts
 var o = class {
 	static async executeCommand(e, o, s, c, l = 30) {
 		let u = n().backend;
 		if (u.kind === "cloud" && e) {
-			let n = await i({
+			let n = await a({
 				backend: u,
 				method: "POST",
 				hostOverride: t(e),
@@ -30,7 +30,7 @@ var o = class {
 				stderr: n.stderr ?? ""
 			};
 		}
-		let d = await new a(r({
+		let d = await new i(r({
 			conversationUrl: e,
 			sessionApiKey: o
 		})).executeCommand(s, c, l);
@@ -40,18 +40,18 @@ var o = class {
 			stderr: d.stderr
 		};
 	}
-	static async downloadFile(a, o, s) {
+	static async downloadFile(i, o, s) {
 		let c = n().backend;
-		return c.kind === "cloud" && a ? (await i({
+		return c.kind === "cloud" && i ? (await a({
 			backend: c,
 			method: "GET",
-			hostOverride: t(a),
+			hostOverride: t(i),
 			path: `/api/file/download?path=${encodeURIComponent(s)}`,
 			authMode: "session-api-key",
 			sessionApiKey: o,
 			responseType: "blob"
 		})).arrayBuffer() : new e(r({
-			conversationUrl: a,
+			conversationUrl: i,
 			sessionApiKey: o
 		})).downloadFile(s);
 	}

package/dist/api/settings-service/settings-service.api.cjs

@@ -1,2 +1,2 @@
-require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/settings-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../backend-registry/active-store.cjs"),n=require("../agent-server-client-options.cjs"),r=require("../../services/settings.cjs"),i=require("../../utils/mcp-config.cjs"),a=require("../cloud/settings-service.api.cjs");var o=[`language`,`user_consents_to_analytics`,`enable_sound_notifications`,`git_user_name`,`git_user_email`,`title_llm_profile`,`disabled_skills`],s=new Set(o),c=e=>s.has(e),l=e=>{let t={},n={};for(let[r,i]of Object.entries(e))c(r)?t[r]=i:n[r]=i;return{extracted:t,rest:n}},u=e=>JSON.parse(JSON.stringify(e)),d=(e,t)=>({...e??{},...t??{}});async function f(e,t=3,n=500){for(let r=0;r<t;r+=1)try{return await e()}catch(e){if(r>=t-1)throw e;let i=n*2**r;await new Promise(e=>{setTimeout(e,i)})}throw Error(`Retry attempts exhausted`)}var p={redacted:null,encrypted:null,timestamp:0},m=300*1e3,h=()=>Date.now()-p.timestamp<m,g=()=>{p={redacted:null,encrypted:null,timestamp:0}},_=e=>!!e&&typeof e==`object`&&!Array.isArray(e),v=(e,t)=>`Basic ${btoa(`${e}:${t}`)}`,y=e=>{switch(e.strategy){case`none`:return{};case`api_key`:{if(typeof e.value!=`string`||!e.value)return null;let t=typeof e.header_name==`string`&&e.header_name?e.header_name:`Authorization`,n=t===`Authorization`?`Bearer ${e.value}`:e.value;return{[t]:n}}case`bearer`:return typeof e.value!=`string`||!e.value?null:{Authorization:`Bearer ${e.value}`};case`basic`:return typeof e.username!=`string`||typeof e.password!=`string`?null:{Authorization:v(e.username,e.password)};case`header`:return i.stringRecord(e.headers)??{};case`oauth2`:{let t=_(e.state)?e.state.tokens:void 0;return!_(t)||typeof t.access_token!=`string`?null:{Authorization:`Bearer ${t.access_token}`}}default:return null}},b=async e=>{if(!_(e))return e;let n=_(e.mcpServers),r=n?e.mcpServers:e,o=Object.values(r).some(e=>_(e)&&_(e.auth)&&e.auth!==null)&&t.getActiveBackend().backend.kind===`cloud`,s=new Map;if(o)try{let e=await a.fetchCloudSettings(),t=_(e.mcp_config)?e.mcp_config:{};for(let[e,n]of Object.entries(t))if(_(n)){let t=i.stringRecord(n.headers);t&&s.set(e,t)}}catch{}let c=Object.fromEntries(Object.entries(r).map(([e,t])=>{if(!_(t))return[e,t];if(t.auth===null){let n={...t,headers:null};return delete n.auth,[e,n]}if(!_(t.auth))return[e,t];let n=y(t.auth);if(n===null)return[e,t];let r={...t},a={...i.stringRecord(t.headers)??{},...n},o=s.get(e);if(o)for(let e of Object.keys(o))e in a||(a[e]=null);return delete r.auth,Object.keys(a).length>0?r.headers=a:delete r.headers,[e,r]}));return n?{...e,mcpServers:c}:c},x=e=>{let t={agent_settings:e.agent_settings??{},conversation_settings:e.conversation_settings??{},llm_api_key_set:e.llm_api_key_is_set},n=e.misc_settings?.app_preferences;if(n)for(let e of o){let r=n[e];r!==void 0&&(t[e]=r)}return t},S=e=>{let t=d(r.DEFAULT_SETTINGS.agent_settings??{},e.agent_settings??{}),n=d(r.DEFAULT_SETTINGS.conversation_settings??{},e.conversation_settings??{}),i={...u(r.DEFAULT_SETTINGS),...e,provider_tokens_set:{...r.DEFAULT_SETTINGS.provider_tokens_set??{},...e.provider_tokens_set??{}},agent_settings:t,conversation_settings:n},a=t.llm,o=t.condenser;return typeof t.agent==`string`&&(i.agent=t.agent),typeof a?.model==`string`&&a.model.length>0&&(i.llm_model=a.model),typeof a?.base_url==`string`&&(i.llm_base_url=a.base_url),typeof o?.enabled==`boolean`&&(i.enable_default_condenser=o.enabled),typeof o?.max_size==`number`&&(i.condenser_max_size=o.max_size),typeof n.confirmation_mode==`boolean`&&(i.confirmation_mode=n.confirmation_mode),(typeof n.security_analyzer==`string`||n.security_analyzer===null)&&(i.security_analyzer=n.security_analyzer),typeof n.max_iterations==`number`&&(i.max_iterations=n.max_iterations),i.search_api_key_set=!!i.search_api_key,i},C=class r{static async fetchSettingsFromApi(t){return f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).getSettings({exposeSecrets:t}))}static async getSettings(){if(t.getActiveBackend().backend.kind===`cloud`)try{return S(await f(()=>a.fetchCloudSettings()))}catch(e){return console.warn(`Failed to fetch cloud settings, using defaults:`,e),S({})}if(h()&&p.redacted)return S(x(p.redacted));try{let e=await this.fetchSettingsFromApi();return p.redacted=e,p.timestamp=Date.now(),S(x(e))}catch(e){return console.warn(`Failed to fetch settings from API, using defaults:`,e),S({})}}static async getSettingsForConversation(){if(h()&&p.encrypted)return{agentSettings:p.encrypted.agent_settings,conversationSettings:p.encrypted.conversation_settings,secretsEncrypted:!0};let e=await this.fetchSettingsFromApi(`encrypted`);return p.encrypted=e,p.timestamp||=Date.now(),{agentSettings:e.agent_settings,conversationSettings:e.conversation_settings,secretsEncrypted:!0}}static async getSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getAgentSchema()}static async getConversationSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudConversationSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getConversationSchema()}static async patchMcpConfig(r){if(t.getActiveBackend().backend.kind===`cloud`){let e=await b(r);await f(()=>a.saveCloudSettings({agent_settings_diff:{mcp_config:e}}))}else await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings({agent_settings_diff:{mcp_config:r}}));return g(),!0}static async patchMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).patchMcpServer(i,a)),g(),!0)}static async createMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).createMcpServer(i,a)),g(),!0)}static async deleteMcpServer(i){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:null}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).deleteMcpServer(i)),g(),!0)}static async saveSettings(r){let{extracted:i,rest:o}=l(r),s=Object.keys(i).length>0,c={},u=o.agent_settings_diff;u&&Object.keys(u).length>0&&(c.agent_settings_diff=u);let d=o.conversation_settings_diff;if(d&&Object.keys(d).length>0&&(c.conversation_settings_diff=d),s&&(c.misc_settings_diff={app_preferences:i}),t.getActiveBackend().backend.kind===`cloud`){if(!(c.agent_settings_diff||c.conversation_settings_diff||s))return!0;let e={};c.agent_settings_diff&&(e.agent_settings_diff={...c.agent_settings_diff},`mcp_config`in e.agent_settings_diff&&(e.agent_settings_diff.mcp_config=await b(e.agent_settings_diff.mcp_config))),c.conversation_settings_diff&&(e.conversation_settings_diff=c.conversation_settings_diff),s&&(e.app_preferences=i),await f(()=>a.saveCloudSettings(e))}else{if(!(c.agent_settings_diff||c.conversation_settings_diff||c.misc_settings_diff))return!0;await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings(c))}return g(),!0}static invalidateCache(){g()}};exports.default=C;
+require("../../_virtual/_rolldown/runtime.cjs");const e=require("../../node_modules/@openhands/typescript-client/dist/client/settings-client.cjs");require("../../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("../backend-registry/active-store.cjs"),n=require("../agent-server-client-options.cjs"),r=require("../../services/settings.cjs"),i=require("../../utils/mcp-config.cjs"),a=require("../cloud/settings-service.api.cjs");var o=[`language`,`user_consents_to_analytics`,`enable_sound_notifications`,`git_user_name`,`git_user_email`,`title_llm_profile`,`disabled_skills`,`enabled_skills`],s=new Set(o),c=e=>s.has(e),l=e=>{let t={},n={};for(let[r,i]of Object.entries(e))c(r)?t[r]=i:n[r]=i;return{extracted:t,rest:n}},u=e=>JSON.parse(JSON.stringify(e)),d=(e,t)=>({...e??{},...t??{}});async function f(e,t=3,n=500){for(let r=0;r<t;r+=1)try{return await e()}catch(e){if(r>=t-1)throw e;let i=n*2**r;await new Promise(e=>{setTimeout(e,i)})}throw Error(`Retry attempts exhausted`)}var p={redacted:null,encrypted:null,timestamp:0},m=300*1e3,h=()=>Date.now()-p.timestamp<m,g=()=>{p={redacted:null,encrypted:null,timestamp:0}},_=e=>!!e&&typeof e==`object`&&!Array.isArray(e),v=(e,t)=>`Basic ${btoa(`${e}:${t}`)}`,y=e=>{switch(e.strategy){case`none`:return{};case`api_key`:{if(typeof e.value!=`string`||!e.value)return null;let t=typeof e.header_name==`string`&&e.header_name?e.header_name:`Authorization`,n=t===`Authorization`?`Bearer ${e.value}`:e.value;return{[t]:n}}case`bearer`:return typeof e.value!=`string`||!e.value?null:{Authorization:`Bearer ${e.value}`};case`basic`:return typeof e.username!=`string`||typeof e.password!=`string`?null:{Authorization:v(e.username,e.password)};case`header`:return i.stringRecord(e.headers)??{};case`oauth2`:{let t=_(e.state)?e.state.tokens:void 0;return!_(t)||typeof t.access_token!=`string`?null:{Authorization:`Bearer ${t.access_token}`}}default:return null}},b=async e=>{if(!_(e))return e;let n=_(e.mcpServers),r=n?e.mcpServers:e,o=Object.values(r).some(e=>_(e)&&_(e.auth)&&e.auth!==null)&&t.getActiveBackend().backend.kind===`cloud`,s=new Map;if(o)try{let e=await a.fetchCloudSettings(),t=_(e.mcp_config)?e.mcp_config:{};for(let[e,n]of Object.entries(t))if(_(n)){let t=i.stringRecord(n.headers);t&&s.set(e,t)}}catch{}let c=Object.fromEntries(Object.entries(r).map(([e,t])=>{if(!_(t))return[e,t];if(t.auth===null){let n={...t,headers:null};return delete n.auth,[e,n]}if(!_(t.auth))return[e,t];let n=y(t.auth);if(n===null)return[e,t];let r={...t},a={...i.stringRecord(t.headers)??{},...n},o=s.get(e);if(o)for(let e of Object.keys(o))e in a||(a[e]=null);return delete r.auth,Object.keys(a).length>0?r.headers=a:delete r.headers,[e,r]}));return n?{...e,mcpServers:c}:c},x=e=>{let t=e.misc_settings?.app_preferences,n=t?.disabled_skills,r=t?.enabled_skills;return{disabledSkills:Array.isArray(n)?n:[],enabledSkills:Array.isArray(r)?r:void 0}},S=e=>{let t={agent_settings:e.agent_settings??{},conversation_settings:e.conversation_settings??{},llm_api_key_set:e.llm_api_key_is_set},n=e.misc_settings?.app_preferences;if(n)for(let e of o){let r=n[e];r!==void 0&&(t[e]=r)}return t},C=e=>{let t=d(r.DEFAULT_SETTINGS.agent_settings??{},e.agent_settings??{}),n=d(r.DEFAULT_SETTINGS.conversation_settings??{},e.conversation_settings??{}),i={...u(r.DEFAULT_SETTINGS),...e,provider_tokens_set:{...r.DEFAULT_SETTINGS.provider_tokens_set??{},...e.provider_tokens_set??{}},agent_settings:t,conversation_settings:n},a=t.llm,o=t.condenser;return typeof t.agent==`string`&&(i.agent=t.agent),typeof a?.model==`string`&&a.model.length>0&&(i.llm_model=a.model),typeof a?.base_url==`string`&&(i.llm_base_url=a.base_url),typeof o?.enabled==`boolean`&&(i.enable_default_condenser=o.enabled),typeof o?.max_size==`number`&&(i.condenser_max_size=o.max_size),typeof n.confirmation_mode==`boolean`&&(i.confirmation_mode=n.confirmation_mode),(typeof n.security_analyzer==`string`||n.security_analyzer===null)&&(i.security_analyzer=n.security_analyzer),typeof n.max_iterations==`number`&&(i.max_iterations=n.max_iterations),i.search_api_key_set=!!i.search_api_key,i},w=class r{static async fetchSettingsFromApi(t){return f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).getSettings({exposeSecrets:t}))}static async getSettings(){if(t.getActiveBackend().backend.kind===`cloud`)try{return C(await f(()=>a.fetchCloudSettings()))}catch(e){return console.warn(`Failed to fetch cloud settings, using defaults:`,e),C({})}if(h()&&p.redacted)return C(S(p.redacted));try{let e=await this.fetchSettingsFromApi();return p.redacted=e,p.timestamp=Date.now(),C(S(e))}catch(e){return console.warn(`Failed to fetch settings from API, using defaults:`,e),C({})}}static async getSettingsForConversation(){if(h()&&p.encrypted)return{agentSettings:p.encrypted.agent_settings,conversationSettings:p.encrypted.conversation_settings,secretsEncrypted:!0,skillEnablement:x(p.encrypted)};let e=await this.fetchSettingsFromApi(`encrypted`);return p.encrypted=e,p.timestamp||=Date.now(),{agentSettings:e.agent_settings,conversationSettings:e.conversation_settings,secretsEncrypted:!0,skillEnablement:x(e)}}static async getSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getAgentSchema()}static async getConversationSettingsSchema(){return t.getActiveBackend().backend.kind===`cloud`?await a.fetchCloudConversationSettingsSchema():await new e.SettingsClient(n.getAgentServerClientOptions()).getConversationSchema()}static async patchMcpConfig(r){if(t.getActiveBackend().backend.kind===`cloud`){let e=await b(r);await f(()=>a.saveCloudSettings({agent_settings_diff:{mcp_config:e}}))}else await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings({agent_settings_diff:{mcp_config:r}}));return g(),!0}static async patchMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).patchMcpServer(i,a)),g(),!0)}static async createMcpServer(i,a){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:a}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).createMcpServer(i,a)),g(),!0)}static async deleteMcpServer(i){return t.getActiveBackend().backend.kind===`cloud`?r.patchMcpConfig({[i]:null}):(await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).deleteMcpServer(i)),g(),!0)}static async saveSettings(r){let{extracted:i,rest:o}=l(r),s=Object.keys(i).length>0,c={},u=o.agent_settings_diff;u&&Object.keys(u).length>0&&(c.agent_settings_diff=u);let d=o.conversation_settings_diff;if(d&&Object.keys(d).length>0&&(c.conversation_settings_diff=d),s&&(c.misc_settings_diff={app_preferences:i}),t.getActiveBackend().backend.kind===`cloud`){if(!(c.agent_settings_diff||c.conversation_settings_diff||s))return!0;let e={};c.agent_settings_diff&&(e.agent_settings_diff={...c.agent_settings_diff},`mcp_config`in e.agent_settings_diff&&(e.agent_settings_diff.mcp_config=await b(e.agent_settings_diff.mcp_config))),c.conversation_settings_diff&&(e.conversation_settings_diff=c.conversation_settings_diff),s&&(e.app_preferences=i),await f(()=>a.saveCloudSettings(e))}else{if(!(c.agent_settings_diff||c.conversation_settings_diff||c.misc_settings_diff))return!0;await f(()=>new e.SettingsClient(n.getAgentServerClientOptions()).updateSettings(c))}return g(),!0}static invalidateCache(){g()}};exports.default=w;
 //# sourceMappingURL=settings-service.api.cjs.map

package/dist/api/settings-service/settings-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-service.api.cjs","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport type {\n  MCPConfigPatch,\n  MCPServer,\n  MCPServerPatch,\n} from \"@openhands/typescript-client\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport { stringRecord } from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\n/**\n * Convert SDK `auth` credentials to the cloud's header-only storage shape.\n *\n * The cloud settings endpoint applies `mcp_config` as a merge patch, so a\n * credential change must also tombstone the headers the previous credential\n * produced — otherwise stale secrets survive a strategy switch (e.g. an\n * api_key's custom header after moving to bearer). Stored headers that the\n * new credential still produces (via the patch's carried `headers` or the\n * converted auth) are left untouched; any other stored header is cleared.\n */\nconst cloudCompatibleMcpConfig = async (value: unknown): Promise<unknown> => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const needsStoredCredential =\n    Object.values(serverMap).some(\n      (server) =>\n        isRecord(server) && isRecord(server.auth) && server.auth !== null,\n    ) && getActiveBackend().backend.kind === \"cloud\";\n\n  const storedHeadersByServer = new Map<string, Record<string, string>>();\n  if (needsStoredCredential) {\n    try {\n      const stored = await fetchCloudSettings();\n      const storedMcp = isRecord(stored.mcp_config) ? stored.mcp_config : {};\n      for (const [name, server] of Object.entries(storedMcp)) {\n        if (isRecord(server)) {\n          const headers = stringRecord(\n            (server as Record<string, unknown>).headers,\n          );\n          if (headers) storedHeadersByServer.set(name, headers);\n        }\n      }\n    } catch {\n      // Fall back to the patch-only conversion; a transient fetch failure\n      // must not block saving the user's explicit edits.\n    }\n  }\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server)) return [name, server];\n      if (server.auth === null) {\n        const nextServer: Record<string, unknown> = {\n          ...server,\n          headers: null,\n        };\n        delete nextServer.auth;\n        return [name, nextServer];\n      }\n      if (!isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders: Record<string, string | null> = {\n        ...existingHeaders,\n        ...authHeaders,\n      };\n\n      const storedHeaders = storedHeadersByServer.get(name);\n      if (storedHeaders) {\n        for (const key of Object.keys(storedHeaders)) {\n          if (!(key in mergedHeaders)) mergedHeaders[key] = null;\n        }\n      }\n\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Apply one name-keyed MCP merge patch in exactly one request. The server\n   * owns the stored catalog and secret preservation; Canvas never rebuilds\n   * the catalog from redacted display settings.\n   */\n  static async patchMcpConfig(patch: MCPConfigPatch): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      const mcpConfig = await cloudCompatibleMcpConfig(patch);\n      await withRetry(() =>\n        saveCloudSettings({\n          agent_settings_diff: { mcp_config: mcpConfig as SettingsValue },\n        }),\n      );\n    } else {\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings({\n          agent_settings_diff: { mcp_config: patch },\n        }),\n      );\n    }\n    clearCache();\n    return true;\n  }\n\n  static async patchMcpServer(\n    settingsKey: string,\n    patch: MCPServerPatch,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: patch });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).patchMcpServer(\n        settingsKey,\n        patch,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async createMcpServer(\n    settingsKey: string,\n    server: MCPServer,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: server });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).createMcpServer(\n        settingsKey,\n        server,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async deleteMcpServer(settingsKey: string): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: null });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).deleteMcpServer(\n        settingsKey,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            (await cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            )) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      await withRetry(() => saveCloudSettings(cloudPayload));\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings(\n          payload,\n        ),\n      );\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":"ucAwBA,IAAa,EAAwB,CACnC,WACA,6BACA,6BACA,gBACA,iBACA,oBACA,iBACF,EAsDM,EAAgD,IAAI,IACxD,CACF,EAEM,EAAwB,GAC5B,EAAyB,IAAI,CAAG,EAQ5B,EACJ,GACiE,CACjE,IAAM,EAA4B,CAAC,EAC7B,EAAgC,CAAC,EACvC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAK,EACzC,EAAqB,CAAG,EAC1B,EAAuC,GAAO,EAE9C,EAAK,GAAO,EAGhB,MAAO,CAAE,YAAW,MAAK,CAC3B,EAWM,EAAgB,GAAgB,KAAK,MAAM,KAAK,UAAU,CAAK,CAAC,EAEhE,GACJ,EACA,KACI,CAAE,GAAI,GAAQ,CAAC,EAAI,GAAI,GAAQ,CAAC,CAAG,GAKzC,eAAe,EACb,EACA,EAAqB,EACrB,EAAsB,IACV,CACZ,IAAK,IAAI,EAAU,EAAG,EAAU,EAAY,GAAW,EACrD,GAAI,CACF,OAAO,MAAM,EAAG,CAClB,OAAS,EAAO,CACd,GAAI,GAAW,EAAa,EAC1B,MAAM,EAGR,IAAM,EAAQ,EAAc,GAAK,EAEjC,MAAM,IAAI,QAAe,GAAY,CACnC,WAAW,EAAS,CAAK,CAC3B,CAAC,CACH,CAGF,MAAU,MAAM,0BAA0B,CAC5C,CAMA,IAAI,EAOA,CACF,SAAU,KACV,UAAW,KACX,UAAW,CACb,EAEM,EAAe,IAAS,IAExB,MAAqB,KAAK,IAAI,EAAI,EAAc,UAAY,EAE5D,MAAmB,CACvB,EAAgB,CAAE,SAAU,KAAM,UAAW,KAAM,UAAW,CAAE,CAClE,EAEM,EAAY,GAChB,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,EAExD,GAAmB,EAAkB,IAElC,SADO,KAAK,GAAG,EAAS,GAAG,GAClB,IAGZ,EACJ,GACkC,CAClC,OAAQ,EAAK,SAAb,CACE,IAAK,OACH,MAAO,CAAC,EACV,IAAK,UAAW,CACd,GAAI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAO,OAAO,KAC1D,IAAM,EACJ,OAAO,EAAK,aAAgB,UAAY,EAAK,YACzC,EAAK,YACL,gBACA,EACJ,IAAW,gBAAkB,UAAU,EAAK,QAAU,EAAK,MAC7D,MAAO,EAAG,GAAS,CAAM,CAC3B,CACA,IAAK,SAEH,OADI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAc,KACnD,CAAE,cAAe,UAAU,EAAK,OAAQ,EACjD,IAAK,QAOH,OALE,OAAO,EAAK,UAAa,UACzB,OAAO,EAAK,UAAa,SAElB,KAEF,CAAE,cAAe,EAAgB,EAAK,SAAU,EAAK,QAAQ,CAAE,EACxE,IAAK,SACH,OAAO,EAAA,aAAa,EAAK,OAAO,GAAK,CAAC,EACxC,IAAK,SAAU,CACb,IAAM,EAAS,EAAS,EAAK,KAAK,EAAI,EAAK,MAAM,OAAS,IAAA,GAI1D,MAHI,CAAC,EAAS,CAAM,GAAK,OAAO,EAAO,cAAiB,SAC/C,KAEF,CAAE,cAAe,UAAU,EAAO,cAAe,CAC1D,CACA,QACE,OAAO,IACX,CACF,EAYM,EAA2B,KAAO,IAAqC,CAC3E,GAAI,CAAC,EAAS,CAAK,EAAG,OAAO,EAE7B,IAAM,EAAa,EAAS,EAAM,UAAU,EACtC,EAAqC,EACtC,EAAM,WACP,EAEE,EACJ,OAAO,OAAO,CAAS,EAAE,KACtB,GACC,EAAS,CAAM,GAAK,EAAS,EAAO,IAAI,GAAK,EAAO,OAAS,IACjE,GAAK,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAErC,EAAwB,IAAI,IAClC,GAAI,EACF,GAAI,CACF,IAAM,EAAS,MAAM,EAAA,mBAAmB,EAClC,EAAY,EAAS,EAAO,UAAU,EAAI,EAAO,WAAa,CAAC,EACrE,IAAK,GAAM,CAAC,EAAM,KAAW,OAAO,QAAQ,CAAS,EACnD,GAAI,EAAS,CAAM,EAAG,CACpB,IAAM,EAAU,EAAA,aACb,EAAmC,OACtC,EACI,GAAS,EAAsB,IAAI,EAAM,CAAO,CACtD,CAEJ,MAAQ,CAGR,CAGF,IAAM,EAAY,OAAO,YACvB,OAAO,QAAQ,CAAS,EAAE,KAAK,CAAC,EAAM,KAAY,CAChD,GAAI,CAAC,EAAS,CAAM,EAAG,MAAO,CAAC,EAAM,CAAM,EAC3C,GAAI,EAAO,OAAS,KAAM,CACxB,IAAM,EAAsC,CAC1C,GAAG,EACH,QAAS,IACX,EAEA,OADA,OAAO,EAAW,KACX,CAAC,EAAM,CAAU,CAC1B,CACA,GAAI,CAAC,EAAS,EAAO,IAAI,EAAG,MAAO,CAAC,EAAM,CAAM,EAEhD,IAAM,EAAc,EAAmB,EAAO,IAAI,EAClD,GAAI,IAAgB,KAAM,MAAO,CAAC,EAAM,CAAM,EAE9C,IAAM,EAAa,CAAE,GAAG,CAAO,EAEzB,EAA+C,CACnD,GAFsB,EAAA,aAAa,EAAO,OAAO,GAAK,CAAC,EAGvD,GAAG,CACL,EAEM,EAAgB,EAAsB,IAAI,CAAI,EACpD,GAAI,MACG,IAAM,KAAO,OAAO,KAAK,CAAa,EACnC,KAAO,IAAgB,EAAc,GAAO,MAUtD,OANA,OAAO,EAAW,KACd,OAAO,KAAK,CAAa,EAAE,OAAS,EACtC,EAAW,QAAU,EAErB,OAAO,EAAW,QAEb,CAAC,EAAM,CAAU,CAC1B,CAAC,CACH,EAEA,OAAO,EAAa,CAAE,GAAG,EAAO,WAAY,CAAU,EAAI,CAC5D,EAKM,EACJ,GACsB,CAItB,IAAM,EAA6B,CACjC,eAJoB,EAAS,gBAAkB,CAAC,EAKhD,sBAJ2B,EAAS,uBAAyB,CAAC,EAK9D,gBAAiB,EAAS,kBAC5B,EAUM,EAAQ,EAAS,eAAe,gBACtC,GAAI,EACF,IAAK,IAAM,KAAO,EAAuB,CACvC,IAAM,EAAQ,EAAM,GAChB,IAAU,IAAA,KACZ,EAAqC,GAAO,EAEhD,CAGF,OAAO,CACT,EAMM,EAAuB,GAA0C,CACrE,IAAM,EAAgB,EACpB,EAAA,iBAAiB,gBAAkB,CAAC,EACpC,EAAS,gBAAkB,CAAC,CAC9B,EACM,EAAuB,EAC3B,EAAA,iBAAiB,uBAAyB,CAAC,EAC3C,EAAS,uBAAyB,CAAC,CACrC,EAEM,EAAS,CACb,GAAG,EAAU,EAAA,gBAAgB,EAC7B,GAAG,EACH,oBAAqB,CACnB,GAAI,EAAA,iBAAiB,qBAAuB,CAAC,EAC7C,GAAI,EAAS,qBAAuB,CAAC,CACvC,EACA,eAAgB,EAChB,sBAAuB,CACzB,EAEM,EAAM,EAAc,IACpB,EAAY,EAAc,UAsChC,OAlCI,OAAO,EAAc,OAAU,WACjC,EAAO,MAAQ,EAAc,OAE3B,OAAO,GAAK,OAAU,UAAY,EAAI,MAAM,OAAS,IACvD,EAAO,UAAY,EAAI,OAErB,OAAO,GAAK,UAAa,WAC3B,EAAO,aAAe,EAAI,UAIxB,OAAO,GAAW,SAAY,YAChC,EAAO,yBAA2B,EAAU,SAE1C,OAAO,GAAW,UAAa,WACjC,EAAO,mBAAqB,EAAU,UAEpC,OAAO,EAAqB,mBAAsB,YACpD,EAAO,kBAAoB,EAAqB,oBAGhD,OAAO,EAAqB,mBAAsB,UAClD,EAAqB,oBAAsB,QAE3C,EAAO,kBAAoB,EAAqB,mBAI9C,OAAO,EAAqB,gBAAmB,WACjD,EAAO,eAAiB,EAAqB,gBAG/C,EAAO,mBAAqB,CAAC,CAAC,EAAO,eAE9B,CACT,EAEM,EAAN,MAAM,CAAgB,CASpB,aAAa,qBACX,EAC8B,CAC9B,OAAO,MACL,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,YAAY,CAC5D,eACF,CAAC,CACH,CACF,CAMA,aAAa,aAAiC,CAO5C,GAAI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QACtC,GAAI,CAEF,OAAO,EAAoB,MADP,MAAgB,EAAA,mBAAmB,CAAC,CACxB,CAClC,OAAS,EAAO,CAEd,OADA,QAAQ,KAAK,kDAAmD,CAAK,EAC9D,EAAoB,CAAC,CAAC,CAC/B,CAIF,GAAI,EAAa,GAAK,EAAc,SAClC,OAAO,EAAoB,EAAqB,EAAc,QAAQ,CAAC,EAGzE,GAAI,CACF,IAAM,EAAW,MAAM,KAAK,qBAAqB,EAGjD,MAFA,GAAc,SAAW,EACzB,EAAc,UAAY,KAAK,IAAI,EAC5B,EAAoB,EAAqB,CAAQ,CAAC,CAC3D,OAAS,EAAO,CAGd,OADA,QAAQ,KAAK,qDAAsD,CAAK,EACjE,EAAoB,CAAC,CAAC,CAC/B,CACF,CAUA,aAAa,4BAIV,CAED,GAAI,EAAa,GAAK,EAAc,UAClC,MAAO,CACL,cAAe,EAAc,UAAU,eACvC,qBAAsB,EAAc,UAAU,sBAC9C,iBAAkB,EACpB,EAKF,IAAM,EAAW,MAAM,KAAK,qBAAqB,WAAW,EAK5D,MAJA,GAAc,UAAY,EAC1B,AACE,EAAc,YAAY,KAAK,IAAI,EAE9B,CACL,cAAe,EAAS,eACxB,qBAAsB,EAAS,sBAC/B,iBAAkB,EACpB,CACF,CAEA,aAAa,mBAA6C,CAIxD,OAHI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC9B,MAAM,EAAA,yBAAyB,EAEjC,MAAM,IAAI,EAAA,eAChB,EAAA,4BAA4B,CAC9B,EAAE,eAAe,CACnB,CAEA,aAAa,+BAAyD,CAIpE,OAHI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC9B,MAAM,EAAA,qCAAqC,EAE7C,MAAM,IAAI,EAAA,eAChB,EAAA,4BAA4B,CAC9B,EAAE,sBAAsB,CAC1B,CAOA,aAAa,eAAe,EAAyC,CACnE,GAAI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAAS,CAC/C,IAAM,EAAY,MAAM,EAAyB,CAAK,EACtD,MAAM,MACJ,EAAA,kBAAkB,CAChB,oBAAqB,CAAE,WAAY,CAA2B,CAChE,CAAC,CACH,CACF,MACE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAAe,CAC/D,oBAAqB,CAAE,WAAY,CAAM,CAC3C,CAAC,CACH,EAGF,OADA,EAAW,EACJ,EACT,CAEA,aAAa,eACX,EACA,EACkB,CAWlB,OAVI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,CAAM,CAAC,GAEhE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAChD,EACA,CACF,CACF,EACA,EAAW,EACJ,GACT,CAEA,aAAa,gBACX,EACA,EACkB,CAWlB,OAVI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,CAAO,CAAC,GAEjE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBAChD,EACA,CACF,CACF,EACA,EAAW,EACJ,GACT,CAEA,aAAa,gBAAgB,EAAuC,CAUlE,OATI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,IAAK,CAAC,GAE/D,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBAChD,CACF,CACF,EACA,EAAW,EACJ,GACT,CAMA,aAAa,aACX,EACkB,CAOlB,GAAM,CAAE,UAAW,EAAgB,QAAS,EAC1C,CACF,EACM,EAAoB,OAAO,KAAK,CAAc,EAAE,OAAS,EAEzD,EAAiC,CAAC,EAGlC,EAAoB,EAAK,oBAG3B,GAAqB,OAAO,KAAK,CAAiB,EAAE,OAAS,IAC/D,EAAQ,oBAAsB,GAIhC,IAAM,EAA2B,EAAK,2BAetC,GAXE,GACA,OAAO,KAAK,CAAwB,EAAE,OAAS,IAE/C,EAAQ,2BAA6B,GAGnC,IACF,EAAQ,mBAAqB,CAAE,gBAAiB,CAAe,GAGjD,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QACvC,CAKX,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACV,GAEA,MAAO,GAKT,IAAM,EAAwD,CAAC,EAC3D,EAAQ,sBACV,EAAa,oBAAsB,CAAE,GAAG,EAAQ,mBAAoB,EAChE,eAAgB,EAAa,sBAC/B,EAAa,oBAAoB,WAC9B,MAAM,EACL,EAAa,oBAAoB,UACnC,IAGF,EAAQ,6BACV,EAAa,2BACX,EAAQ,4BAER,IAIF,EAAa,gBAAkB,GAEjC,MAAM,MAAgB,EAAA,kBAAkB,CAAY,CAAC,CACvD,KAAO,CAOL,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACR,EAAQ,oBAEV,MAAO,GAET,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAChD,CACF,CACF,CACF,CAKA,OAFA,EAAW,EAEJ,EACT,CAMA,OAAO,iBAAwB,CAC7B,EAAW,CACb,CACF"}
+{"version":3,"file":"settings-service.api.cjs","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport type {\n  MCPConfigPatch,\n  MCPServer,\n  MCPServerPatch,\n} from \"@openhands/typescript-client\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport { stringRecord } from \"#/utils/mcp-config\";\nimport type { SkillEnablement } from \"#/utils/skill-enablement\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n  \"enabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`, `enabled_skills`) are replaced wholesale rather than\n * merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\n/**\n * Convert SDK `auth` credentials to the cloud's header-only storage shape.\n *\n * The cloud settings endpoint applies `mcp_config` as a merge patch, so a\n * credential change must also tombstone the headers the previous credential\n * produced — otherwise stale secrets survive a strategy switch (e.g. an\n * api_key's custom header after moving to bearer). Stored headers that the\n * new credential still produces (via the patch's carried `headers` or the\n * converted auth) are left untouched; any other stored header is cleared.\n */\nconst cloudCompatibleMcpConfig = async (value: unknown): Promise<unknown> => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const needsStoredCredential =\n    Object.values(serverMap).some(\n      (server) =>\n        isRecord(server) && isRecord(server.auth) && server.auth !== null,\n    ) && getActiveBackend().backend.kind === \"cloud\";\n\n  const storedHeadersByServer = new Map<string, Record<string, string>>();\n  if (needsStoredCredential) {\n    try {\n      const stored = await fetchCloudSettings();\n      const storedMcp = isRecord(stored.mcp_config) ? stored.mcp_config : {};\n      for (const [name, server] of Object.entries(storedMcp)) {\n        if (isRecord(server)) {\n          const headers = stringRecord(\n            (server as Record<string, unknown>).headers,\n          );\n          if (headers) storedHeadersByServer.set(name, headers);\n        }\n      }\n    } catch {\n      // Fall back to the patch-only conversion; a transient fetch failure\n      // must not block saving the user's explicit edits.\n    }\n  }\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server)) return [name, server];\n      if (server.auth === null) {\n        const nextServer: Record<string, unknown> = {\n          ...server,\n          headers: null,\n        };\n        delete nextServer.auth;\n        return [name, nextServer];\n      }\n      if (!isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders: Record<string, string | null> = {\n        ...existingHeaders,\n        ...authHeaders,\n      };\n\n      const storedHeaders = storedHeadersByServer.get(name);\n      if (storedHeaders) {\n        for (const key of Object.keys(storedHeaders)) {\n          if (!(key in mergedHeaders)) mergedHeaders[key] = null;\n        }\n      }\n\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\n/**\n * Read the skill allow-/deny-lists off a raw API response — for\n * `getSettingsForConversation`, which returns the encrypted dump as-is rather\n * than a normalized `Settings` object (so `toSkillEnablement` can't be used).\n *\n * `enabledSkills` stays `undefined` when absent: that is the \"never migrated\"\n * signal `resolveEnabledCatalogSkills` reads, and an empty array would instead\n * mean \"every catalog skill off\".\n */\nconst getSkillEnablement = (response: SettingsApiResponse): SkillEnablement => {\n  const prefs = response.misc_settings?.app_preferences;\n  const disabled = prefs?.disabled_skills;\n  const enabled = prefs?.enabled_skills;\n  return {\n    disabledSkills: Array.isArray(disabled) ? disabled : [],\n    enabledSkills: Array.isArray(enabled) ? enabled : undefined,\n  };\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n    skillEnablement: SkillEnablement;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n        skillEnablement: getSkillEnablement(settingsCache.encrypted),\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n      skillEnablement: getSkillEnablement(response),\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Apply one name-keyed MCP merge patch in exactly one request. The server\n   * owns the stored catalog and secret preservation; Canvas never rebuilds\n   * the catalog from redacted display settings.\n   */\n  static async patchMcpConfig(patch: MCPConfigPatch): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      const mcpConfig = await cloudCompatibleMcpConfig(patch);\n      await withRetry(() =>\n        saveCloudSettings({\n          agent_settings_diff: { mcp_config: mcpConfig as SettingsValue },\n        }),\n      );\n    } else {\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings({\n          agent_settings_diff: { mcp_config: patch },\n        }),\n      );\n    }\n    clearCache();\n    return true;\n  }\n\n  static async patchMcpServer(\n    settingsKey: string,\n    patch: MCPServerPatch,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: patch });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).patchMcpServer(\n        settingsKey,\n        patch,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async createMcpServer(\n    settingsKey: string,\n    server: MCPServer,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: server });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).createMcpServer(\n        settingsKey,\n        server,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async deleteMcpServer(settingsKey: string): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: null });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).deleteMcpServer(\n        settingsKey,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            (await cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            )) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      await withRetry(() => saveCloudSettings(cloudPayload));\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings(\n          payload,\n        ),\n      );\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":"ucAyBA,IAAa,EAAwB,CACnC,WACA,6BACA,6BACA,gBACA,iBACA,oBACA,kBACA,gBACF,EAuDM,EAAgD,IAAI,IACxD,CACF,EAEM,EAAwB,GAC5B,EAAyB,IAAI,CAAG,EAQ5B,EACJ,GACiE,CACjE,IAAM,EAA4B,CAAC,EAC7B,EAAgC,CAAC,EACvC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAK,EACzC,EAAqB,CAAG,EAC1B,EAAuC,GAAO,EAE9C,EAAK,GAAO,EAGhB,MAAO,CAAE,YAAW,MAAK,CAC3B,EAWM,EAAgB,GAAgB,KAAK,MAAM,KAAK,UAAU,CAAK,CAAC,EAEhE,GACJ,EACA,KACI,CAAE,GAAI,GAAQ,CAAC,EAAI,GAAI,GAAQ,CAAC,CAAG,GAKzC,eAAe,EACb,EACA,EAAqB,EACrB,EAAsB,IACV,CACZ,IAAK,IAAI,EAAU,EAAG,EAAU,EAAY,GAAW,EACrD,GAAI,CACF,OAAO,MAAM,EAAG,CAClB,OAAS,EAAO,CACd,GAAI,GAAW,EAAa,EAC1B,MAAM,EAGR,IAAM,EAAQ,EAAc,GAAK,EAEjC,MAAM,IAAI,QAAe,GAAY,CACnC,WAAW,EAAS,CAAK,CAC3B,CAAC,CACH,CAGF,MAAU,MAAM,0BAA0B,CAC5C,CAMA,IAAI,EAOA,CACF,SAAU,KACV,UAAW,KACX,UAAW,CACb,EAEM,EAAe,IAAS,IAExB,MAAqB,KAAK,IAAI,EAAI,EAAc,UAAY,EAE5D,MAAmB,CACvB,EAAgB,CAAE,SAAU,KAAM,UAAW,KAAM,UAAW,CAAE,CAClE,EAEM,EAAY,GAChB,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,EAExD,GAAmB,EAAkB,IAElC,SADO,KAAK,GAAG,EAAS,GAAG,GAClB,IAGZ,EACJ,GACkC,CAClC,OAAQ,EAAK,SAAb,CACE,IAAK,OACH,MAAO,CAAC,EACV,IAAK,UAAW,CACd,GAAI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAO,OAAO,KAC1D,IAAM,EACJ,OAAO,EAAK,aAAgB,UAAY,EAAK,YACzC,EAAK,YACL,gBACA,EACJ,IAAW,gBAAkB,UAAU,EAAK,QAAU,EAAK,MAC7D,MAAO,EAAG,GAAS,CAAM,CAC3B,CACA,IAAK,SAEH,OADI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAc,KACnD,CAAE,cAAe,UAAU,EAAK,OAAQ,EACjD,IAAK,QAOH,OALE,OAAO,EAAK,UAAa,UACzB,OAAO,EAAK,UAAa,SAElB,KAEF,CAAE,cAAe,EAAgB,EAAK,SAAU,EAAK,QAAQ,CAAE,EACxE,IAAK,SACH,OAAO,EAAA,aAAa,EAAK,OAAO,GAAK,CAAC,EACxC,IAAK,SAAU,CACb,IAAM,EAAS,EAAS,EAAK,KAAK,EAAI,EAAK,MAAM,OAAS,IAAA,GAI1D,MAHI,CAAC,EAAS,CAAM,GAAK,OAAO,EAAO,cAAiB,SAC/C,KAEF,CAAE,cAAe,UAAU,EAAO,cAAe,CAC1D,CACA,QACE,OAAO,IACX,CACF,EAYM,EAA2B,KAAO,IAAqC,CAC3E,GAAI,CAAC,EAAS,CAAK,EAAG,OAAO,EAE7B,IAAM,EAAa,EAAS,EAAM,UAAU,EACtC,EAAqC,EACtC,EAAM,WACP,EAEE,EACJ,OAAO,OAAO,CAAS,EAAE,KACtB,GACC,EAAS,CAAM,GAAK,EAAS,EAAO,IAAI,GAAK,EAAO,OAAS,IACjE,GAAK,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAErC,EAAwB,IAAI,IAClC,GAAI,EACF,GAAI,CACF,IAAM,EAAS,MAAM,EAAA,mBAAmB,EAClC,EAAY,EAAS,EAAO,UAAU,EAAI,EAAO,WAAa,CAAC,EACrE,IAAK,GAAM,CAAC,EAAM,KAAW,OAAO,QAAQ,CAAS,EACnD,GAAI,EAAS,CAAM,EAAG,CACpB,IAAM,EAAU,EAAA,aACb,EAAmC,OACtC,EACI,GAAS,EAAsB,IAAI,EAAM,CAAO,CACtD,CAEJ,MAAQ,CAGR,CAGF,IAAM,EAAY,OAAO,YACvB,OAAO,QAAQ,CAAS,EAAE,KAAK,CAAC,EAAM,KAAY,CAChD,GAAI,CAAC,EAAS,CAAM,EAAG,MAAO,CAAC,EAAM,CAAM,EAC3C,GAAI,EAAO,OAAS,KAAM,CACxB,IAAM,EAAsC,CAC1C,GAAG,EACH,QAAS,IACX,EAEA,OADA,OAAO,EAAW,KACX,CAAC,EAAM,CAAU,CAC1B,CACA,GAAI,CAAC,EAAS,EAAO,IAAI,EAAG,MAAO,CAAC,EAAM,CAAM,EAEhD,IAAM,EAAc,EAAmB,EAAO,IAAI,EAClD,GAAI,IAAgB,KAAM,MAAO,CAAC,EAAM,CAAM,EAE9C,IAAM,EAAa,CAAE,GAAG,CAAO,EAEzB,EAA+C,CACnD,GAFsB,EAAA,aAAa,EAAO,OAAO,GAAK,CAAC,EAGvD,GAAG,CACL,EAEM,EAAgB,EAAsB,IAAI,CAAI,EACpD,GAAI,MACG,IAAM,KAAO,OAAO,KAAK,CAAa,EACnC,KAAO,IAAgB,EAAc,GAAO,MAUtD,OANA,OAAO,EAAW,KACd,OAAO,KAAK,CAAa,EAAE,OAAS,EACtC,EAAW,QAAU,EAErB,OAAO,EAAW,QAEb,CAAC,EAAM,CAAU,CAC1B,CAAC,CACH,EAEA,OAAO,EAAa,CAAE,GAAG,EAAO,WAAY,CAAU,EAAI,CAC5D,EAWM,EAAsB,GAAmD,CAC7E,IAAM,EAAQ,EAAS,eAAe,gBAChC,EAAW,GAAO,gBAClB,EAAU,GAAO,eACvB,MAAO,CACL,eAAgB,MAAM,QAAQ,CAAQ,EAAI,EAAW,CAAC,EACtD,cAAe,MAAM,QAAQ,CAAO,EAAI,EAAU,IAAA,EACpD,CACF,EAKM,EACJ,GACsB,CAItB,IAAM,EAA6B,CACjC,eAJoB,EAAS,gBAAkB,CAAC,EAKhD,sBAJ2B,EAAS,uBAAyB,CAAC,EAK9D,gBAAiB,EAAS,kBAC5B,EAUM,EAAQ,EAAS,eAAe,gBACtC,GAAI,EACF,IAAK,IAAM,KAAO,EAAuB,CACvC,IAAM,EAAQ,EAAM,GAChB,IAAU,IAAA,KACZ,EAAqC,GAAO,EAEhD,CAGF,OAAO,CACT,EAMM,EAAuB,GAA0C,CACrE,IAAM,EAAgB,EACpB,EAAA,iBAAiB,gBAAkB,CAAC,EACpC,EAAS,gBAAkB,CAAC,CAC9B,EACM,EAAuB,EAC3B,EAAA,iBAAiB,uBAAyB,CAAC,EAC3C,EAAS,uBAAyB,CAAC,CACrC,EAEM,EAAS,CACb,GAAG,EAAU,EAAA,gBAAgB,EAC7B,GAAG,EACH,oBAAqB,CACnB,GAAI,EAAA,iBAAiB,qBAAuB,CAAC,EAC7C,GAAI,EAAS,qBAAuB,CAAC,CACvC,EACA,eAAgB,EAChB,sBAAuB,CACzB,EAEM,EAAM,EAAc,IACpB,EAAY,EAAc,UAsChC,OAlCI,OAAO,EAAc,OAAU,WACjC,EAAO,MAAQ,EAAc,OAE3B,OAAO,GAAK,OAAU,UAAY,EAAI,MAAM,OAAS,IACvD,EAAO,UAAY,EAAI,OAErB,OAAO,GAAK,UAAa,WAC3B,EAAO,aAAe,EAAI,UAIxB,OAAO,GAAW,SAAY,YAChC,EAAO,yBAA2B,EAAU,SAE1C,OAAO,GAAW,UAAa,WACjC,EAAO,mBAAqB,EAAU,UAEpC,OAAO,EAAqB,mBAAsB,YACpD,EAAO,kBAAoB,EAAqB,oBAGhD,OAAO,EAAqB,mBAAsB,UAClD,EAAqB,oBAAsB,QAE3C,EAAO,kBAAoB,EAAqB,mBAI9C,OAAO,EAAqB,gBAAmB,WACjD,EAAO,eAAiB,EAAqB,gBAG/C,EAAO,mBAAqB,CAAC,CAAC,EAAO,eAE9B,CACT,EAEM,EAAN,MAAM,CAAgB,CASpB,aAAa,qBACX,EAC8B,CAC9B,OAAO,MACL,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,YAAY,CAC5D,eACF,CAAC,CACH,CACF,CAMA,aAAa,aAAiC,CAO5C,GAAI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QACtC,GAAI,CAEF,OAAO,EAAoB,MADP,MAAgB,EAAA,mBAAmB,CAAC,CACxB,CAClC,OAAS,EAAO,CAEd,OADA,QAAQ,KAAK,kDAAmD,CAAK,EAC9D,EAAoB,CAAC,CAAC,CAC/B,CAIF,GAAI,EAAa,GAAK,EAAc,SAClC,OAAO,EAAoB,EAAqB,EAAc,QAAQ,CAAC,EAGzE,GAAI,CACF,IAAM,EAAW,MAAM,KAAK,qBAAqB,EAGjD,MAFA,GAAc,SAAW,EACzB,EAAc,UAAY,KAAK,IAAI,EAC5B,EAAoB,EAAqB,CAAQ,CAAC,CAC3D,OAAS,EAAO,CAGd,OADA,QAAQ,KAAK,qDAAsD,CAAK,EACjE,EAAoB,CAAC,CAAC,CAC/B,CACF,CAUA,aAAa,4BAKV,CAED,GAAI,EAAa,GAAK,EAAc,UAClC,MAAO,CACL,cAAe,EAAc,UAAU,eACvC,qBAAsB,EAAc,UAAU,sBAC9C,iBAAkB,GAClB,gBAAiB,EAAmB,EAAc,SAAS,CAC7D,EAKF,IAAM,EAAW,MAAM,KAAK,qBAAqB,WAAW,EAK5D,MAJA,GAAc,UAAY,EAC1B,AACE,EAAc,YAAY,KAAK,IAAI,EAE9B,CACL,cAAe,EAAS,eACxB,qBAAsB,EAAS,sBAC/B,iBAAkB,GAClB,gBAAiB,EAAmB,CAAQ,CAC9C,CACF,CAEA,aAAa,mBAA6C,CAIxD,OAHI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC9B,MAAM,EAAA,yBAAyB,EAEjC,MAAM,IAAI,EAAA,eAChB,EAAA,4BAA4B,CAC9B,EAAE,eAAe,CACnB,CAEA,aAAa,+BAAyD,CAIpE,OAHI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC9B,MAAM,EAAA,qCAAqC,EAE7C,MAAM,IAAI,EAAA,eAChB,EAAA,4BAA4B,CAC9B,EAAE,sBAAsB,CAC1B,CAOA,aAAa,eAAe,EAAyC,CACnE,GAAI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAAS,CAC/C,IAAM,EAAY,MAAM,EAAyB,CAAK,EACtD,MAAM,MACJ,EAAA,kBAAkB,CAChB,oBAAqB,CAAE,WAAY,CAA2B,CAChE,CAAC,CACH,CACF,MACE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAAe,CAC/D,oBAAqB,CAAE,WAAY,CAAM,CAC3C,CAAC,CACH,EAGF,OADA,EAAW,EACJ,EACT,CAEA,aAAa,eACX,EACA,EACkB,CAWlB,OAVI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,CAAM,CAAC,GAEhE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAChD,EACA,CACF,CACF,EACA,EAAW,EACJ,GACT,CAEA,aAAa,gBACX,EACA,EACkB,CAWlB,OAVI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,CAAO,CAAC,GAEjE,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBAChD,EACA,CACF,CACF,EACA,EAAW,EACJ,GACT,CAEA,aAAa,gBAAgB,EAAuC,CAUlE,OATI,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QAC/B,EAAgB,eAAe,EAAG,GAAc,IAAK,CAAC,GAE/D,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,gBAChD,CACF,CACF,EACA,EAAW,EACJ,GACT,CAMA,aAAa,aACX,EACkB,CAOlB,GAAM,CAAE,UAAW,EAAgB,QAAS,EAC1C,CACF,EACM,EAAoB,OAAO,KAAK,CAAc,EAAE,OAAS,EAEzD,EAAiC,CAAC,EAGlC,EAAoB,EAAK,oBAG3B,GAAqB,OAAO,KAAK,CAAiB,EAAE,OAAS,IAC/D,EAAQ,oBAAsB,GAIhC,IAAM,EAA2B,EAAK,2BAetC,GAXE,GACA,OAAO,KAAK,CAAwB,EAAE,OAAS,IAE/C,EAAQ,2BAA6B,GAGnC,IACF,EAAQ,mBAAqB,CAAE,gBAAiB,CAAe,GAGjD,EAAA,iBAAiB,EAAE,QAAQ,OAAS,QACvC,CAKX,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACV,GAEA,MAAO,GAKT,IAAM,EAAwD,CAAC,EAC3D,EAAQ,sBACV,EAAa,oBAAsB,CAAE,GAAG,EAAQ,mBAAoB,EAChE,eAAgB,EAAa,sBAC/B,EAAa,oBAAoB,WAC9B,MAAM,EACL,EAAa,oBAAoB,UACnC,IAGF,EAAQ,6BACV,EAAa,2BACX,EAAQ,4BAER,IAIF,EAAa,gBAAkB,GAEjC,MAAM,MAAgB,EAAA,kBAAkB,CAAY,CAAC,CACvD,KAAO,CAOL,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACR,EAAQ,oBAEV,MAAO,GAET,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,4BAA4B,CAAC,EAAE,eAChD,CACF,CACF,CACF,CAKA,OAFA,EAAW,EAEJ,EACT,CAMA,OAAO,iBAAwB,CAC7B,EAAW,CACb,CACF"}

package/dist/api/settings-service/settings-service.api.d.ts

@@ -1,12 +1,13 @@
 import type { MCPConfigPatch, MCPServer, MCPServerPatch } from "@openhands/typescript-client";
 import { Settings, SettingsSchema, SettingsValue } from "#/types/settings";
+import type { SkillEnablement } from "#/utils/skill-enablement";
 /**
  * Fields the agent-server stores under `misc_settings.app_preferences` (see
  * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat
  * partial of Settings so the rest of the frontend can keep treating them as
  * top-level keys (`settings.language`, `settings.disabled_skills`, …).
  */
-export declare const APP_PREFERENCE_FIELDS: readonly ["language", "user_consents_to_analytics", "enable_sound_notifications", "git_user_name", "git_user_email", "title_llm_profile", "disabled_skills"];
+export declare const APP_PREFERENCE_FIELDS: readonly ["language", "user_consents_to_analytics", "enable_sound_notifications", "git_user_name", "git_user_email", "title_llm_profile", "disabled_skills", "enabled_skills"];
 export type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];
 export type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;
 /**
@@ -43,7 +44,8 @@ export interface SettingsApiResponse {
  * `conversation_settings_diff`. A partial diff like
  * `{ app_preferences: { language: "fr" } }` updates only `language` and
  * leaves every other `app_preferences` field alone. Lists
- * (`disabled_skills`) are replaced wholesale rather than merged.
+ * (`disabled_skills`, `enabled_skills`) are replaced wholesale rather than
+ * merged.
  */
 export interface SettingsUpdateRequest {
     agent_settings_diff?: Record<string, SettingsValue>;
@@ -86,6 +88,7 @@ declare class SettingsService {
         agentSettings: Record<string, SettingsValue>;
         conversationSettings: Record<string, SettingsValue>;
         secretsEncrypted: boolean;
+        skillEnablement: SkillEnablement;
     }>;
     static getSettingsSchema(): Promise<SettingsSchema>;
     static getConversationSettingsSchema(): Promise<SettingsSchema>;

package/dist/api/settings-service/settings-service.api.js

@@ -13,7 +13,8 @@ var l = [
 	"git_user_name",
 	"git_user_email",
 	"title_llm_profile",
-	"disabled_skills"
+	"disabled_skills",
+	"enabled_skills"
 ], u = new Set(l), d = (e) => u.has(e), f = (e) => {
 	let t = {}, n = {};
 	for (let [r, i] of Object.entries(e)) d(r) ? t[r] = i : n[r] = i;
@@ -98,6 +99,12 @@ var g = {
 		mcpServers: c
 	} : c;
 }, w = (e) => {
+	let t = e.misc_settings?.app_preferences, n = t?.disabled_skills, r = t?.enabled_skills;
+	return {
+		disabledSkills: Array.isArray(n) ? n : [],
+		enabledSkills: Array.isArray(r) ? r : void 0
+	};
+}, T = (e) => {
 	let t = {
 		agent_settings: e.agent_settings ?? {},
 		conversation_settings: e.conversation_settings ?? {},
@@ -108,7 +115,7 @@ var g = {
 		r !== void 0 && (t[e] = r);
 	}
 	return t;
-}, T = (e) => {
+}, E = (e) => {
 	let t = m(r.agent_settings ?? {}, e.agent_settings ?? {}), n = m(r.conversation_settings ?? {}, e.conversation_settings ?? {}), i = {
 		...p(r),
 		...e,
@@ -120,35 +127,37 @@ var g = {
 		conversation_settings: n
 	}, a = t.llm, o = t.condenser;
 	return typeof t.agent == "string" && (i.agent = t.agent), typeof a?.model == "string" && a.model.length > 0 && (i.llm_model = a.model), typeof a?.base_url == "string" && (i.llm_base_url = a.base_url), typeof o?.enabled == "boolean" && (i.enable_default_condenser = o.enabled), typeof o?.max_size == "number" && (i.condenser_max_size = o.max_size), typeof n.confirmation_mode == "boolean" && (i.confirmation_mode = n.confirmation_mode), (typeof n.security_analyzer == "string" || n.security_analyzer === null) && (i.security_analyzer = n.security_analyzer), typeof n.max_iterations == "number" && (i.max_iterations = n.max_iterations), i.search_api_key_set = !!i.search_api_key, i;
-}, E = class r {
+}, D = class r {
 	static async fetchSettingsFromApi(t) {
 		return h(() => new e(n()).getSettings({ exposeSecrets: t }));
 	}
 	static async getSettings() {
 		if (t().backend.kind === "cloud") try {
-			return T(await h(() => o()));
+			return E(await h(() => o()));
 		} catch (e) {
-			return console.warn("Failed to fetch cloud settings, using defaults:", e), T({});
+			return console.warn("Failed to fetch cloud settings, using defaults:", e), E({});
 		}
-		if (v() && g.redacted) return T(w(g.redacted));
+		if (v() && g.redacted) return E(T(g.redacted));
 		try {
 			let e = await this.fetchSettingsFromApi();
-			return g.redacted = e, g.timestamp = Date.now(), T(w(e));
+			return g.redacted = e, g.timestamp = Date.now(), E(T(e));
 		} catch (e) {
-			return console.warn("Failed to fetch settings from API, using defaults:", e), T({});
+			return console.warn("Failed to fetch settings from API, using defaults:", e), E({});
 		}
 	}
 	static async getSettingsForConversation() {
 		if (v() && g.encrypted) return {
 			agentSettings: g.encrypted.agent_settings,
 			conversationSettings: g.encrypted.conversation_settings,
-			secretsEncrypted: !0
+			secretsEncrypted: !0,
+			skillEnablement: w(g.encrypted)
 		};
 		let e = await this.fetchSettingsFromApi("encrypted");
 		return g.encrypted = e, g.timestamp ||= Date.now(), {
 			agentSettings: e.agent_settings,
 			conversationSettings: e.conversation_settings,
-			secretsEncrypted: !0
+			secretsEncrypted: !0,
+			skillEnablement: w(e)
 		};
 	}
 	static async getSettingsSchema() {
@@ -192,6 +201,6 @@ var g = {
 	}
 };
 //#endregion
-export { E as default };
+export { D as default };
 
 //# sourceMappingURL=settings-service.api.js.map

package/dist/api/settings-service/settings-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-service.api.js","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport type {\n  MCPConfigPatch,\n  MCPServer,\n  MCPServerPatch,\n} from \"@openhands/typescript-client\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport { stringRecord } from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\n/**\n * Convert SDK `auth` credentials to the cloud's header-only storage shape.\n *\n * The cloud settings endpoint applies `mcp_config` as a merge patch, so a\n * credential change must also tombstone the headers the previous credential\n * produced — otherwise stale secrets survive a strategy switch (e.g. an\n * api_key's custom header after moving to bearer). Stored headers that the\n * new credential still produces (via the patch's carried `headers` or the\n * converted auth) are left untouched; any other stored header is cleared.\n */\nconst cloudCompatibleMcpConfig = async (value: unknown): Promise<unknown> => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const needsStoredCredential =\n    Object.values(serverMap).some(\n      (server) =>\n        isRecord(server) && isRecord(server.auth) && server.auth !== null,\n    ) && getActiveBackend().backend.kind === \"cloud\";\n\n  const storedHeadersByServer = new Map<string, Record<string, string>>();\n  if (needsStoredCredential) {\n    try {\n      const stored = await fetchCloudSettings();\n      const storedMcp = isRecord(stored.mcp_config) ? stored.mcp_config : {};\n      for (const [name, server] of Object.entries(storedMcp)) {\n        if (isRecord(server)) {\n          const headers = stringRecord(\n            (server as Record<string, unknown>).headers,\n          );\n          if (headers) storedHeadersByServer.set(name, headers);\n        }\n      }\n    } catch {\n      // Fall back to the patch-only conversion; a transient fetch failure\n      // must not block saving the user's explicit edits.\n    }\n  }\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server)) return [name, server];\n      if (server.auth === null) {\n        const nextServer: Record<string, unknown> = {\n          ...server,\n          headers: null,\n        };\n        delete nextServer.auth;\n        return [name, nextServer];\n      }\n      if (!isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders: Record<string, string | null> = {\n        ...existingHeaders,\n        ...authHeaders,\n      };\n\n      const storedHeaders = storedHeadersByServer.get(name);\n      if (storedHeaders) {\n        for (const key of Object.keys(storedHeaders)) {\n          if (!(key in mergedHeaders)) mergedHeaders[key] = null;\n        }\n      }\n\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Apply one name-keyed MCP merge patch in exactly one request. The server\n   * owns the stored catalog and secret preservation; Canvas never rebuilds\n   * the catalog from redacted display settings.\n   */\n  static async patchMcpConfig(patch: MCPConfigPatch): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      const mcpConfig = await cloudCompatibleMcpConfig(patch);\n      await withRetry(() =>\n        saveCloudSettings({\n          agent_settings_diff: { mcp_config: mcpConfig as SettingsValue },\n        }),\n      );\n    } else {\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings({\n          agent_settings_diff: { mcp_config: patch },\n        }),\n      );\n    }\n    clearCache();\n    return true;\n  }\n\n  static async patchMcpServer(\n    settingsKey: string,\n    patch: MCPServerPatch,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: patch });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).patchMcpServer(\n        settingsKey,\n        patch,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async createMcpServer(\n    settingsKey: string,\n    server: MCPServer,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: server });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).createMcpServer(\n        settingsKey,\n        server,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async deleteMcpServer(settingsKey: string): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: null });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).deleteMcpServer(\n        settingsKey,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            (await cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            )) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      await withRetry(() => saveCloudSettings(cloudPayload));\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings(\n          payload,\n        ),\n      );\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":";;;;;;;;AAwBA,IAAa,IAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;AACF,GAsDM,IAAgD,IAAI,IACxD,CACF,GAEM,KAAwB,MAC5B,EAAyB,IAAI,CAAG,GAQ5B,KACJ,MACiE;CACjE,IAAM,IAA4B,CAAC,GAC7B,IAAgC,CAAC;CACvC,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAK,GAC7C,AAAI,EAAqB,CAAG,IAC1B,EAAuC,KAAO,IAE9C,EAAK,KAAO;CAGhB,OAAO;EAAE;EAAW;CAAK;AAC3B,GAWM,KAAgB,MAAgB,KAAK,MAAM,KAAK,UAAU,CAAK,CAAC,GAEhE,KACJ,GACA,OACI;CAAE,GAAI,KAAQ,CAAC;CAAI,GAAI,KAAQ,CAAC;AAAG;AAKzC,eAAe,EACb,GACA,IAAqB,GACrB,IAAsB,KACV;CACZ,KAAK,IAAI,IAAU,GAAG,IAAU,GAAY,KAAW,GACrD,IAAI;EACF,OAAO,MAAM,EAAG;CAClB,SAAS,GAAO;EACd,IAAI,KAAW,IAAa,GAC1B,MAAM;EAGR,IAAM,IAAQ,IAAc,KAAK;EAEjC,MAAM,IAAI,SAAe,MAAY;GACnC,WAAW,GAAS,CAAK;EAC3B,CAAC;CACH;CAGF,MAAU,MAAM,0BAA0B;AAC5C;AAMA,IAAI,IAOA;CACF,UAAU;CACV,WAAW;CACX,WAAW;AACb,GAEM,IAAe,MAAS,KAExB,UAAqB,KAAK,IAAI,IAAI,EAAc,YAAY,GAE5D,UAAmB;CACvB,IAAgB;EAAE,UAAU;EAAM,WAAW;EAAM,WAAW;CAAE;AAClE,GAEM,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK,GAExD,KAAmB,GAAkB,MAElC,SADO,KAAK,GAAG,EAAS,GAAG,GAClB,KAGZ,KACJ,MACkC;CAClC,QAAQ,EAAK,UAAb;EACE,KAAK,QACH,OAAO,CAAC;EACV,KAAK,WAAW;GACd,IAAI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,OAAO,OAAO;GAC1D,IAAM,IACJ,OAAO,EAAK,eAAgB,YAAY,EAAK,cACzC,EAAK,cACL,iBACA,IACJ,MAAW,kBAAkB,UAAU,EAAK,UAAU,EAAK;GAC7D,OAAO,GAAG,IAAS,EAAM;EAC3B;EACA,KAAK,UAEH,OADI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,QAAc,OACnD,EAAE,eAAe,UAAU,EAAK,QAAQ;EACjD,KAAK,SAOH,OALE,OAAO,EAAK,YAAa,YACzB,OAAO,EAAK,YAAa,WAElB,OAEF,EAAE,eAAe,EAAgB,EAAK,UAAU,EAAK,QAAQ,EAAE;EACxE,KAAK,UACH,OAAO,EAAa,EAAK,OAAO,KAAK,CAAC;EACxC,KAAK,UAAU;GACb,IAAM,IAAS,EAAS,EAAK,KAAK,IAAI,EAAK,MAAM,SAAS,KAAA;GAI1D,OAHI,CAAC,EAAS,CAAM,KAAK,OAAO,EAAO,gBAAiB,WAC/C,OAEF,EAAE,eAAe,UAAU,EAAO,eAAe;EAC1D;EACA,SACE,OAAO;CACX;AACF,GAYM,IAA2B,OAAO,MAAqC;CAC3E,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAS,EAAM,UAAU,GACtC,IAAqC,IACtC,EAAM,aACP,GAEE,IACJ,OAAO,OAAO,CAAS,EAAE,MACtB,MACC,EAAS,CAAM,KAAK,EAAS,EAAO,IAAI,KAAK,EAAO,SAAS,IACjE,KAAK,EAAiB,EAAE,QAAQ,SAAS,SAErC,oBAAwB,IAAI,IAAoC;CACtE,IAAI,GACF,IAAI;EACF,IAAM,IAAS,MAAM,EAAmB,GAClC,IAAY,EAAS,EAAO,UAAU,IAAI,EAAO,aAAa,CAAC;EACrE,KAAK,IAAM,CAAC,GAAM,MAAW,OAAO,QAAQ,CAAS,GACnD,IAAI,EAAS,CAAM,GAAG;GACpB,IAAM,IAAU,EACb,EAAmC,OACtC;GACA,AAAI,KAAS,EAAsB,IAAI,GAAM,CAAO;EACtD;CAEJ,QAAQ,CAGR;CAGF,IAAM,IAAY,OAAO,YACvB,OAAO,QAAQ,CAAS,EAAE,KAAK,CAAC,GAAM,OAAY;EAChD,IAAI,CAAC,EAAS,CAAM,GAAG,OAAO,CAAC,GAAM,CAAM;EAC3C,IAAI,EAAO,SAAS,MAAM;GACxB,IAAM,IAAsC;IAC1C,GAAG;IACH,SAAS;GACX;GAEA,OADA,OAAO,EAAW,MACX,CAAC,GAAM,CAAU;EAC1B;EACA,IAAI,CAAC,EAAS,EAAO,IAAI,GAAG,OAAO,CAAC,GAAM,CAAM;EAEhD,IAAM,IAAc,EAAmB,EAAO,IAAI;EAClD,IAAI,MAAgB,MAAM,OAAO,CAAC,GAAM,CAAM;EAE9C,IAAM,IAAa,EAAE,GAAG,EAAO,GAEzB,IAA+C;GACnD,GAFsB,EAAa,EAAO,OAAO,KAAK,CAAC;GAGvD,GAAG;EACL,GAEM,IAAgB,EAAsB,IAAI,CAAI;EACpD,IAAI,QACG,IAAM,KAAO,OAAO,KAAK,CAAa,GACzC,AAAM,KAAO,MAAgB,EAAc,KAAO;EAUtD,OANA,OAAO,EAAW,MACd,OAAO,KAAK,CAAa,EAAE,SAAS,IACtC,EAAW,UAAU,IAErB,OAAO,EAAW,SAEb,CAAC,GAAM,CAAU;CAC1B,CAAC,CACH;CAEA,OAAO,IAAa;EAAE,GAAG;EAAO,YAAY;CAAU,IAAI;AAC5D,GAKM,KACJ,MACsB;CAItB,IAAM,IAA6B;EACjC,gBAJoB,EAAS,kBAAkB,CAAC;EAKhD,uBAJ2B,EAAS,yBAAyB,CAAC;EAK9D,iBAAiB,EAAS;CAC5B,GAUM,IAAQ,EAAS,eAAe;CACtC,IAAI,GACF,KAAK,IAAM,KAAO,GAAuB;EACvC,IAAM,IAAQ,EAAM;EACpB,AAAI,MAAU,KAAA,MACZ,EAAqC,KAAO;CAEhD;CAGF,OAAO;AACT,GAMM,KAAuB,MAA0C;CACrE,IAAM,IAAgB,EACpB,EAAiB,kBAAkB,CAAC,GACpC,EAAS,kBAAkB,CAAC,CAC9B,GACM,IAAuB,EAC3B,EAAiB,yBAAyB,CAAC,GAC3C,EAAS,yBAAyB,CAAC,CACrC,GAEM,IAAS;EACb,GAAG,EAAU,CAAgB;EAC7B,GAAG;EACH,qBAAqB;GACnB,GAAI,EAAiB,uBAAuB,CAAC;GAC7C,GAAI,EAAS,uBAAuB,CAAC;EACvC;EACA,gBAAgB;EAChB,uBAAuB;CACzB,GAEM,IAAM,EAAc,KACpB,IAAY,EAAc;CAsChC,OAlCI,OAAO,EAAc,SAAU,aACjC,EAAO,QAAQ,EAAc,QAE3B,OAAO,GAAK,SAAU,YAAY,EAAI,MAAM,SAAS,MACvD,EAAO,YAAY,EAAI,QAErB,OAAO,GAAK,YAAa,aAC3B,EAAO,eAAe,EAAI,WAIxB,OAAO,GAAW,WAAY,cAChC,EAAO,2BAA2B,EAAU,UAE1C,OAAO,GAAW,YAAa,aACjC,EAAO,qBAAqB,EAAU,WAEpC,OAAO,EAAqB,qBAAsB,cACpD,EAAO,oBAAoB,EAAqB,qBAGhD,OAAO,EAAqB,qBAAsB,YAClD,EAAqB,sBAAsB,UAE3C,EAAO,oBAAoB,EAAqB,oBAI9C,OAAO,EAAqB,kBAAmB,aACjD,EAAO,iBAAiB,EAAqB,iBAG/C,EAAO,qBAAqB,CAAC,CAAC,EAAO,gBAE9B;AACT,GAEM,IAAN,MAAM,EAAgB;CASpB,aAAa,qBACX,GAC8B;EAC9B,OAAO,QACL,IAAI,EAAe,EAA4B,CAAC,EAAE,YAAY,EAC5D,iBACF,CAAC,CACH;CACF;CAMA,aAAa,cAAiC;EAO5C,IAAI,EAAiB,EAAE,QAAQ,SAAS,SACtC,IAAI;GAEF,OAAO,EAAoB,MADP,QAAgB,EAAmB,CAAC,CACxB;EAClC,SAAS,GAAO;GAEd,OADA,QAAQ,KAAK,mDAAmD,CAAK,GAC9D,EAAoB,CAAC,CAAC;EAC/B;EAIF,IAAI,EAAa,KAAK,EAAc,UAClC,OAAO,EAAoB,EAAqB,EAAc,QAAQ,CAAC;EAGzE,IAAI;GACF,IAAM,IAAW,MAAM,KAAK,qBAAqB;GAGjD,OAFA,EAAc,WAAW,GACzB,EAAc,YAAY,KAAK,IAAI,GAC5B,EAAoB,EAAqB,CAAQ,CAAC;EAC3D,SAAS,GAAO;GAGd,OADA,QAAQ,KAAK,sDAAsD,CAAK,GACjE,EAAoB,CAAC,CAAC;EAC/B;CACF;CAUA,aAAa,6BAIV;EAED,IAAI,EAAa,KAAK,EAAc,WAClC,OAAO;GACL,eAAe,EAAc,UAAU;GACvC,sBAAsB,EAAc,UAAU;GAC9C,kBAAkB;EACpB;EAKF,IAAM,IAAW,MAAM,KAAK,qBAAqB,WAAW;EAK5D,OAJA,EAAc,YAAY,GAC1B,AACE,EAAc,cAAY,KAAK,IAAI,GAE9B;GACL,eAAe,EAAS;GACxB,sBAAsB,EAAS;GAC/B,kBAAkB;EACpB;CACF;CAEA,aAAa,oBAA6C;EAIxD,OAHI,EAAiB,EAAE,QAAQ,SAAS,UAC9B,MAAM,EAAyB,IAEjC,MAAM,IAAI,EAChB,EAA4B,CAC9B,EAAE,eAAe;CACnB;CAEA,aAAa,gCAAyD;EAIpE,OAHI,EAAiB,EAAE,QAAQ,SAAS,UAC9B,MAAM,EAAqC,IAE7C,MAAM,IAAI,EAChB,EAA4B,CAC9B,EAAE,sBAAsB;CAC1B;CAOA,aAAa,eAAe,GAAyC;EACnE,IAAI,EAAiB,EAAE,QAAQ,SAAS,SAAS;GAC/C,IAAM,IAAY,MAAM,EAAyB,CAAK;GACtD,MAAM,QACJ,EAAkB,EAChB,qBAAqB,EAAE,YAAY,EAA2B,EAChE,CAAC,CACH;EACF,OACE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAAe,EAC/D,qBAAqB,EAAE,YAAY,EAAM,EAC3C,CAAC,CACH;EAGF,OADA,EAAW,GACJ;CACT;CAEA,aAAa,eACX,GACA,GACkB;EAWlB,OAVI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,EAAM,CAAC,KAEhE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAChD,GACA,CACF,CACF,GACA,EAAW,GACJ;CACT;CAEA,aAAa,gBACX,GACA,GACkB;EAWlB,OAVI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,EAAO,CAAC,KAEjE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,gBAChD,GACA,CACF,CACF,GACA,EAAW,GACJ;CACT;CAEA,aAAa,gBAAgB,GAAuC;EAUlE,OATI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,KAAK,CAAC,KAE/D,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,gBAChD,CACF,CACF,GACA,EAAW,GACJ;CACT;CAMA,aAAa,aACX,GACkB;EAOlB,IAAM,EAAE,WAAW,GAAgB,YAAS,EAC1C,CACF,GACM,IAAoB,OAAO,KAAK,CAAc,EAAE,SAAS,GAEzD,IAAiC,CAAC,GAGlC,IAAoB,EAAK;EAG/B,AAAI,KAAqB,OAAO,KAAK,CAAiB,EAAE,SAAS,MAC/D,EAAQ,sBAAsB;EAIhC,IAAM,IAA2B,EAAK;EAetC,IAXE,KACA,OAAO,KAAK,CAAwB,EAAE,SAAS,MAE/C,EAAQ,6BAA6B,IAGnC,MACF,EAAQ,qBAAqB,EAAE,iBAAiB,EAAe,IAGjD,EAAiB,EAAE,QAAQ,SAAS,SACvC;GAKX,IAAI,EAHA,EAAQ,uBACR,EAAQ,8BACV,IAEA,OAAO;GAKT,IAAM,IAAwD,CAAC;GAoB/D,AAnBI,EAAQ,wBACV,EAAa,sBAAsB,EAAE,GAAG,EAAQ,oBAAoB,GAChE,gBAAgB,EAAa,wBAC/B,EAAa,oBAAoB,aAC9B,MAAM,EACL,EAAa,oBAAoB,UACnC,KAGF,EAAQ,+BACV,EAAa,6BACX,EAAQ,6BAER,MAIF,EAAa,kBAAkB,IAEjC,MAAM,QAAgB,EAAkB,CAAY,CAAC;EACvD,OAAO;GAOL,IAAI,EAHA,EAAQ,uBACR,EAAQ,8BACR,EAAQ,qBAEV,OAAO;GAET,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAChD,CACF,CACF;EACF;EAKA,OAFA,EAAW,GAEJ;CACT;CAMA,OAAO,kBAAwB;EAC7B,EAAW;CACb;AACF"}
+{"version":3,"file":"settings-service.api.js","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport type {\n  MCPConfigPatch,\n  MCPServer,\n  MCPServerPatch,\n} from \"@openhands/typescript-client\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport { stringRecord } from \"#/utils/mcp-config\";\nimport type { SkillEnablement } from \"#/utils/skill-enablement\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n  \"enabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`, `enabled_skills`) are replaced wholesale rather than\n * merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\n/**\n * Convert SDK `auth` credentials to the cloud's header-only storage shape.\n *\n * The cloud settings endpoint applies `mcp_config` as a merge patch, so a\n * credential change must also tombstone the headers the previous credential\n * produced — otherwise stale secrets survive a strategy switch (e.g. an\n * api_key's custom header after moving to bearer). Stored headers that the\n * new credential still produces (via the patch's carried `headers` or the\n * converted auth) are left untouched; any other stored header is cleared.\n */\nconst cloudCompatibleMcpConfig = async (value: unknown): Promise<unknown> => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const needsStoredCredential =\n    Object.values(serverMap).some(\n      (server) =>\n        isRecord(server) && isRecord(server.auth) && server.auth !== null,\n    ) && getActiveBackend().backend.kind === \"cloud\";\n\n  const storedHeadersByServer = new Map<string, Record<string, string>>();\n  if (needsStoredCredential) {\n    try {\n      const stored = await fetchCloudSettings();\n      const storedMcp = isRecord(stored.mcp_config) ? stored.mcp_config : {};\n      for (const [name, server] of Object.entries(storedMcp)) {\n        if (isRecord(server)) {\n          const headers = stringRecord(\n            (server as Record<string, unknown>).headers,\n          );\n          if (headers) storedHeadersByServer.set(name, headers);\n        }\n      }\n    } catch {\n      // Fall back to the patch-only conversion; a transient fetch failure\n      // must not block saving the user's explicit edits.\n    }\n  }\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server)) return [name, server];\n      if (server.auth === null) {\n        const nextServer: Record<string, unknown> = {\n          ...server,\n          headers: null,\n        };\n        delete nextServer.auth;\n        return [name, nextServer];\n      }\n      if (!isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders: Record<string, string | null> = {\n        ...existingHeaders,\n        ...authHeaders,\n      };\n\n      const storedHeaders = storedHeadersByServer.get(name);\n      if (storedHeaders) {\n        for (const key of Object.keys(storedHeaders)) {\n          if (!(key in mergedHeaders)) mergedHeaders[key] = null;\n        }\n      }\n\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\n/**\n * Read the skill allow-/deny-lists off a raw API response — for\n * `getSettingsForConversation`, which returns the encrypted dump as-is rather\n * than a normalized `Settings` object (so `toSkillEnablement` can't be used).\n *\n * `enabledSkills` stays `undefined` when absent: that is the \"never migrated\"\n * signal `resolveEnabledCatalogSkills` reads, and an empty array would instead\n * mean \"every catalog skill off\".\n */\nconst getSkillEnablement = (response: SettingsApiResponse): SkillEnablement => {\n  const prefs = response.misc_settings?.app_preferences;\n  const disabled = prefs?.disabled_skills;\n  const enabled = prefs?.enabled_skills;\n  return {\n    disabledSkills: Array.isArray(disabled) ? disabled : [],\n    enabledSkills: Array.isArray(enabled) ? enabled : undefined,\n  };\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n    skillEnablement: SkillEnablement;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n        skillEnablement: getSkillEnablement(settingsCache.encrypted),\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n      skillEnablement: getSkillEnablement(response),\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Apply one name-keyed MCP merge patch in exactly one request. The server\n   * owns the stored catalog and secret preservation; Canvas never rebuilds\n   * the catalog from redacted display settings.\n   */\n  static async patchMcpConfig(patch: MCPConfigPatch): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      const mcpConfig = await cloudCompatibleMcpConfig(patch);\n      await withRetry(() =>\n        saveCloudSettings({\n          agent_settings_diff: { mcp_config: mcpConfig as SettingsValue },\n        }),\n      );\n    } else {\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings({\n          agent_settings_diff: { mcp_config: patch },\n        }),\n      );\n    }\n    clearCache();\n    return true;\n  }\n\n  static async patchMcpServer(\n    settingsKey: string,\n    patch: MCPServerPatch,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: patch });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).patchMcpServer(\n        settingsKey,\n        patch,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async createMcpServer(\n    settingsKey: string,\n    server: MCPServer,\n  ): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: server });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).createMcpServer(\n        settingsKey,\n        server,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  static async deleteMcpServer(settingsKey: string): Promise<boolean> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return SettingsService.patchMcpConfig({ [settingsKey]: null });\n    }\n    await withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).deleteMcpServer(\n        settingsKey,\n      ),\n    );\n    clearCache();\n    return true;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            (await cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            )) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      await withRetry(() => saveCloudSettings(cloudPayload));\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      await withRetry(() =>\n        new SettingsClient(getAgentServerClientOptions()).updateSettings(\n          payload,\n        ),\n      );\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":";;;;;;;;AAyBA,IAAa,IAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,GAuDM,IAAgD,IAAI,IACxD,CACF,GAEM,KAAwB,MAC5B,EAAyB,IAAI,CAAG,GAQ5B,KACJ,MACiE;CACjE,IAAM,IAA4B,CAAC,GAC7B,IAAgC,CAAC;CACvC,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAK,GAC7C,AAAI,EAAqB,CAAG,IAC1B,EAAuC,KAAO,IAE9C,EAAK,KAAO;CAGhB,OAAO;EAAE;EAAW;CAAK;AAC3B,GAWM,KAAgB,MAAgB,KAAK,MAAM,KAAK,UAAU,CAAK,CAAC,GAEhE,KACJ,GACA,OACI;CAAE,GAAI,KAAQ,CAAC;CAAI,GAAI,KAAQ,CAAC;AAAG;AAKzC,eAAe,EACb,GACA,IAAqB,GACrB,IAAsB,KACV;CACZ,KAAK,IAAI,IAAU,GAAG,IAAU,GAAY,KAAW,GACrD,IAAI;EACF,OAAO,MAAM,EAAG;CAClB,SAAS,GAAO;EACd,IAAI,KAAW,IAAa,GAC1B,MAAM;EAGR,IAAM,IAAQ,IAAc,KAAK;EAEjC,MAAM,IAAI,SAAe,MAAY;GACnC,WAAW,GAAS,CAAK;EAC3B,CAAC;CACH;CAGF,MAAU,MAAM,0BAA0B;AAC5C;AAMA,IAAI,IAOA;CACF,UAAU;CACV,WAAW;CACX,WAAW;AACb,GAEM,IAAe,MAAS,KAExB,UAAqB,KAAK,IAAI,IAAI,EAAc,YAAY,GAE5D,UAAmB;CACvB,IAAgB;EAAE,UAAU;EAAM,WAAW;EAAM,WAAW;CAAE;AAClE,GAEM,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK,GAExD,KAAmB,GAAkB,MAElC,SADO,KAAK,GAAG,EAAS,GAAG,GAClB,KAGZ,KACJ,MACkC;CAClC,QAAQ,EAAK,UAAb;EACE,KAAK,QACH,OAAO,CAAC;EACV,KAAK,WAAW;GACd,IAAI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,OAAO,OAAO;GAC1D,IAAM,IACJ,OAAO,EAAK,eAAgB,YAAY,EAAK,cACzC,EAAK,cACL,iBACA,IACJ,MAAW,kBAAkB,UAAU,EAAK,UAAU,EAAK;GAC7D,OAAO,GAAG,IAAS,EAAM;EAC3B;EACA,KAAK,UAEH,OADI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,QAAc,OACnD,EAAE,eAAe,UAAU,EAAK,QAAQ;EACjD,KAAK,SAOH,OALE,OAAO,EAAK,YAAa,YACzB,OAAO,EAAK,YAAa,WAElB,OAEF,EAAE,eAAe,EAAgB,EAAK,UAAU,EAAK,QAAQ,EAAE;EACxE,KAAK,UACH,OAAO,EAAa,EAAK,OAAO,KAAK,CAAC;EACxC,KAAK,UAAU;GACb,IAAM,IAAS,EAAS,EAAK,KAAK,IAAI,EAAK,MAAM,SAAS,KAAA;GAI1D,OAHI,CAAC,EAAS,CAAM,KAAK,OAAO,EAAO,gBAAiB,WAC/C,OAEF,EAAE,eAAe,UAAU,EAAO,eAAe;EAC1D;EACA,SACE,OAAO;CACX;AACF,GAYM,IAA2B,OAAO,MAAqC;CAC3E,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAS,EAAM,UAAU,GACtC,IAAqC,IACtC,EAAM,aACP,GAEE,IACJ,OAAO,OAAO,CAAS,EAAE,MACtB,MACC,EAAS,CAAM,KAAK,EAAS,EAAO,IAAI,KAAK,EAAO,SAAS,IACjE,KAAK,EAAiB,EAAE,QAAQ,SAAS,SAErC,oBAAwB,IAAI,IAAoC;CACtE,IAAI,GACF,IAAI;EACF,IAAM,IAAS,MAAM,EAAmB,GAClC,IAAY,EAAS,EAAO,UAAU,IAAI,EAAO,aAAa,CAAC;EACrE,KAAK,IAAM,CAAC,GAAM,MAAW,OAAO,QAAQ,CAAS,GACnD,IAAI,EAAS,CAAM,GAAG;GACpB,IAAM,IAAU,EACb,EAAmC,OACtC;GACA,AAAI,KAAS,EAAsB,IAAI,GAAM,CAAO;EACtD;CAEJ,QAAQ,CAGR;CAGF,IAAM,IAAY,OAAO,YACvB,OAAO,QAAQ,CAAS,EAAE,KAAK,CAAC,GAAM,OAAY;EAChD,IAAI,CAAC,EAAS,CAAM,GAAG,OAAO,CAAC,GAAM,CAAM;EAC3C,IAAI,EAAO,SAAS,MAAM;GACxB,IAAM,IAAsC;IAC1C,GAAG;IACH,SAAS;GACX;GAEA,OADA,OAAO,EAAW,MACX,CAAC,GAAM,CAAU;EAC1B;EACA,IAAI,CAAC,EAAS,EAAO,IAAI,GAAG,OAAO,CAAC,GAAM,CAAM;EAEhD,IAAM,IAAc,EAAmB,EAAO,IAAI;EAClD,IAAI,MAAgB,MAAM,OAAO,CAAC,GAAM,CAAM;EAE9C,IAAM,IAAa,EAAE,GAAG,EAAO,GAEzB,IAA+C;GACnD,GAFsB,EAAa,EAAO,OAAO,KAAK,CAAC;GAGvD,GAAG;EACL,GAEM,IAAgB,EAAsB,IAAI,CAAI;EACpD,IAAI,QACG,IAAM,KAAO,OAAO,KAAK,CAAa,GACzC,AAAM,KAAO,MAAgB,EAAc,KAAO;EAUtD,OANA,OAAO,EAAW,MACd,OAAO,KAAK,CAAa,EAAE,SAAS,IACtC,EAAW,UAAU,IAErB,OAAO,EAAW,SAEb,CAAC,GAAM,CAAU;CAC1B,CAAC,CACH;CAEA,OAAO,IAAa;EAAE,GAAG;EAAO,YAAY;CAAU,IAAI;AAC5D,GAWM,KAAsB,MAAmD;CAC7E,IAAM,IAAQ,EAAS,eAAe,iBAChC,IAAW,GAAO,iBAClB,IAAU,GAAO;CACvB,OAAO;EACL,gBAAgB,MAAM,QAAQ,CAAQ,IAAI,IAAW,CAAC;EACtD,eAAe,MAAM,QAAQ,CAAO,IAAI,IAAU,KAAA;CACpD;AACF,GAKM,KACJ,MACsB;CAItB,IAAM,IAA6B;EACjC,gBAJoB,EAAS,kBAAkB,CAAC;EAKhD,uBAJ2B,EAAS,yBAAyB,CAAC;EAK9D,iBAAiB,EAAS;CAC5B,GAUM,IAAQ,EAAS,eAAe;CACtC,IAAI,GACF,KAAK,IAAM,KAAO,GAAuB;EACvC,IAAM,IAAQ,EAAM;EACpB,AAAI,MAAU,KAAA,MACZ,EAAqC,KAAO;CAEhD;CAGF,OAAO;AACT,GAMM,KAAuB,MAA0C;CACrE,IAAM,IAAgB,EACpB,EAAiB,kBAAkB,CAAC,GACpC,EAAS,kBAAkB,CAAC,CAC9B,GACM,IAAuB,EAC3B,EAAiB,yBAAyB,CAAC,GAC3C,EAAS,yBAAyB,CAAC,CACrC,GAEM,IAAS;EACb,GAAG,EAAU,CAAgB;EAC7B,GAAG;EACH,qBAAqB;GACnB,GAAI,EAAiB,uBAAuB,CAAC;GAC7C,GAAI,EAAS,uBAAuB,CAAC;EACvC;EACA,gBAAgB;EAChB,uBAAuB;CACzB,GAEM,IAAM,EAAc,KACpB,IAAY,EAAc;CAsChC,OAlCI,OAAO,EAAc,SAAU,aACjC,EAAO,QAAQ,EAAc,QAE3B,OAAO,GAAK,SAAU,YAAY,EAAI,MAAM,SAAS,MACvD,EAAO,YAAY,EAAI,QAErB,OAAO,GAAK,YAAa,aAC3B,EAAO,eAAe,EAAI,WAIxB,OAAO,GAAW,WAAY,cAChC,EAAO,2BAA2B,EAAU,UAE1C,OAAO,GAAW,YAAa,aACjC,EAAO,qBAAqB,EAAU,WAEpC,OAAO,EAAqB,qBAAsB,cACpD,EAAO,oBAAoB,EAAqB,qBAGhD,OAAO,EAAqB,qBAAsB,YAClD,EAAqB,sBAAsB,UAE3C,EAAO,oBAAoB,EAAqB,oBAI9C,OAAO,EAAqB,kBAAmB,aACjD,EAAO,iBAAiB,EAAqB,iBAG/C,EAAO,qBAAqB,CAAC,CAAC,EAAO,gBAE9B;AACT,GAEM,IAAN,MAAM,EAAgB;CASpB,aAAa,qBACX,GAC8B;EAC9B,OAAO,QACL,IAAI,EAAe,EAA4B,CAAC,EAAE,YAAY,EAC5D,iBACF,CAAC,CACH;CACF;CAMA,aAAa,cAAiC;EAO5C,IAAI,EAAiB,EAAE,QAAQ,SAAS,SACtC,IAAI;GAEF,OAAO,EAAoB,MADP,QAAgB,EAAmB,CAAC,CACxB;EAClC,SAAS,GAAO;GAEd,OADA,QAAQ,KAAK,mDAAmD,CAAK,GAC9D,EAAoB,CAAC,CAAC;EAC/B;EAIF,IAAI,EAAa,KAAK,EAAc,UAClC,OAAO,EAAoB,EAAqB,EAAc,QAAQ,CAAC;EAGzE,IAAI;GACF,IAAM,IAAW,MAAM,KAAK,qBAAqB;GAGjD,OAFA,EAAc,WAAW,GACzB,EAAc,YAAY,KAAK,IAAI,GAC5B,EAAoB,EAAqB,CAAQ,CAAC;EAC3D,SAAS,GAAO;GAGd,OADA,QAAQ,KAAK,sDAAsD,CAAK,GACjE,EAAoB,CAAC,CAAC;EAC/B;CACF;CAUA,aAAa,6BAKV;EAED,IAAI,EAAa,KAAK,EAAc,WAClC,OAAO;GACL,eAAe,EAAc,UAAU;GACvC,sBAAsB,EAAc,UAAU;GAC9C,kBAAkB;GAClB,iBAAiB,EAAmB,EAAc,SAAS;EAC7D;EAKF,IAAM,IAAW,MAAM,KAAK,qBAAqB,WAAW;EAK5D,OAJA,EAAc,YAAY,GAC1B,AACE,EAAc,cAAY,KAAK,IAAI,GAE9B;GACL,eAAe,EAAS;GACxB,sBAAsB,EAAS;GAC/B,kBAAkB;GAClB,iBAAiB,EAAmB,CAAQ;EAC9C;CACF;CAEA,aAAa,oBAA6C;EAIxD,OAHI,EAAiB,EAAE,QAAQ,SAAS,UAC9B,MAAM,EAAyB,IAEjC,MAAM,IAAI,EAChB,EAA4B,CAC9B,EAAE,eAAe;CACnB;CAEA,aAAa,gCAAyD;EAIpE,OAHI,EAAiB,EAAE,QAAQ,SAAS,UAC9B,MAAM,EAAqC,IAE7C,MAAM,IAAI,EAChB,EAA4B,CAC9B,EAAE,sBAAsB;CAC1B;CAOA,aAAa,eAAe,GAAyC;EACnE,IAAI,EAAiB,EAAE,QAAQ,SAAS,SAAS;GAC/C,IAAM,IAAY,MAAM,EAAyB,CAAK;GACtD,MAAM,QACJ,EAAkB,EAChB,qBAAqB,EAAE,YAAY,EAA2B,EAChE,CAAC,CACH;EACF,OACE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAAe,EAC/D,qBAAqB,EAAE,YAAY,EAAM,EAC3C,CAAC,CACH;EAGF,OADA,EAAW,GACJ;CACT;CAEA,aAAa,eACX,GACA,GACkB;EAWlB,OAVI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,EAAM,CAAC,KAEhE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAChD,GACA,CACF,CACF,GACA,EAAW,GACJ;CACT;CAEA,aAAa,gBACX,GACA,GACkB;EAWlB,OAVI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,EAAO,CAAC,KAEjE,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,gBAChD,GACA,CACF,CACF,GACA,EAAW,GACJ;CACT;CAEA,aAAa,gBAAgB,GAAuC;EAUlE,OATI,EAAiB,EAAE,QAAQ,SAAS,UAC/B,EAAgB,eAAe,GAAG,IAAc,KAAK,CAAC,KAE/D,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,gBAChD,CACF,CACF,GACA,EAAW,GACJ;CACT;CAMA,aAAa,aACX,GACkB;EAOlB,IAAM,EAAE,WAAW,GAAgB,YAAS,EAC1C,CACF,GACM,IAAoB,OAAO,KAAK,CAAc,EAAE,SAAS,GAEzD,IAAiC,CAAC,GAGlC,IAAoB,EAAK;EAG/B,AAAI,KAAqB,OAAO,KAAK,CAAiB,EAAE,SAAS,MAC/D,EAAQ,sBAAsB;EAIhC,IAAM,IAA2B,EAAK;EAetC,IAXE,KACA,OAAO,KAAK,CAAwB,EAAE,SAAS,MAE/C,EAAQ,6BAA6B,IAGnC,MACF,EAAQ,qBAAqB,EAAE,iBAAiB,EAAe,IAGjD,EAAiB,EAAE,QAAQ,SAAS,SACvC;GAKX,IAAI,EAHA,EAAQ,uBACR,EAAQ,8BACV,IAEA,OAAO;GAKT,IAAM,IAAwD,CAAC;GAoB/D,AAnBI,EAAQ,wBACV,EAAa,sBAAsB,EAAE,GAAG,EAAQ,oBAAoB,GAChE,gBAAgB,EAAa,wBAC/B,EAAa,oBAAoB,aAC9B,MAAM,EACL,EAAa,oBAAoB,UACnC,KAGF,EAAQ,+BACV,EAAa,6BACX,EAAQ,6BAER,MAIF,EAAa,kBAAkB,IAEjC,MAAM,QAAgB,EAAkB,CAAY,CAAC;EACvD,OAAO;GAOL,IAAI,EAHA,EAAQ,uBACR,EAAQ,8BACR,EAAQ,qBAEV,OAAO;GAET,MAAM,QACJ,IAAI,EAAe,EAA4B,CAAC,EAAE,eAChD,CACF,CACF;EACF;EAKA,OAFA,EAAW,GAEJ;CACT;CAMA,OAAO,kBAAwB;EAC7B,EAAW;CACb;AACF"}

package/dist/api/skills-service.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/@openhands/typescript-client/dist/client/skills-client.cjs");require("../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("./agent-server-config.cjs"),n=require("./backend-registry/active-store.cjs"),r=require("./agent-server-client-options.cjs"),i=require("../node_modules/@openhands/extensions/skills/index.cjs"),a=require("./cloud/skills-service.api.cjs");function o(e){return{name:e.name,type:`knowledge`,source:`public`,description:e.description,triggers:e.triggers,category:e.category,content:e.content,license:e.license??null,compatibility:e.compatibility??null}}var s=i.default.map(o),c=class{static async getSkills(i){if(n.getActiveBackend().backend.kind===`cloud`)return a.fetchCloudSkills();let o=[];try{o=(await new e.SkillsClient(r.getAgentServerClientOptions()).getSkills({load_public:!1,load_user:!0,load_project:!0,load_org:!1,project_dir:i??t.getAgentServerWorkingDir()})).skills??[]}catch{}return[...o,...s]}};exports.default=c;
+require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/@openhands/typescript-client/dist/client/skills-client.cjs");require("../node_modules/@openhands/typescript-client/dist/clients.cjs");const t=require("./agent-server-config.cjs"),n=require("./backend-registry/active-store.cjs"),r=require("./agent-server-client-options.cjs"),i=require("../node_modules/@openhands/extensions/skills/index.cjs"),a=require("./cloud/skills-service.api.cjs");function o(e){return{name:e.name,type:`knowledge`,source:`public`,description:e.description,triggers:e.triggers,category:e.category,content:e.content,license:e.license??null,compatibility:e.compatibility??null}}var s=i.default.map(o),c=class{static async getSkills(i){if(n.getActiveBackend().backend.kind===`cloud`)return a.fetchCloudSkills();let o=[];try{o=(await new e.SkillsClient(r.getAgentServerClientOptions()).getSkills({load_public:!1,load_user:!0,load_project:!0,load_org:!1,project_dir:i??t.getAgentServerWorkingDir()})).skills??[]}catch{}return[...o,...s]}static getConversationSkills(e){return a.fetchCloudConversationSkills(e)}};exports.default=c;
 //# sourceMappingURL=skills-service.cjs.map