@openhands/agent-canvas 1.16.0 → 1.18.0

package/dist/api/agent-server-adapter.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport { ServerClient } from \"@openhands/typescript-client/clients\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { AgentKind, Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport {\n  getCachedAgentServerInfo,\n  isAgentServerToolAvailable,\n} from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  RuntimeConversationStats,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport { combineUsageMetrics } from \"#/utils/conversation-metrics\";\nimport {\n  buildSkillEnablementFilter,\n  findInvokedCatalogSkill,\n  toSkillEnablement,\n  type SkillEnablement,\n} from \"#/utils/skill-enablement\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\nimport {\n  CANVAS_UI_CLIENT_TOOL,\n  CANVAS_UI_CLIENT_TOOL_NAME,\n  LEGACY_CANVAS_UI_TOOL_NAME,\n  type ClientToolSpec,\n} from \"./canvas-ui-client-tool\";\nimport {\n  LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL,\n  LAUNCH_CHILD_CONVERSATION_TOOL_NAME,\n} from \"./launch-child-conversation-client-tool\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  /**\n   * Raw per-usage-id LLM stats from the agent-server. Search/list responses\n   * often carry real usage here even when `metrics` above comes back unset;\n   * {@link toAppConversation} combines this as a fallback in that case.\n   */\n  stats?: RuntimeConversationStats | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    /**\n     * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the\n     * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the\n     * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag\n     * client-side and the server may not repopulate it. Read by {@link toAppConversation}.\n     */\n    acp_server?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n  launched_agent_profile?: {\n    agent_profile_id: string;\n    revision: number;\n  } | null;\n}\n\nconst DEFAULT_TOOL_NAMES = [\"terminal\", \"file_editor\", \"task_tracker\"];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info served by Agent Canvas backends in\n * `/server_info.runtime_services`. All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's reachable\n * from inside its sandbox without having to probe.\n */\nexport interface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\nexport function parseRuntimeServicesInfo(\n  value: unknown,\n): RuntimeServicesInfo | null {\n  if (typeof value === \"string\") {\n    const raw = value.trim();\n    if (!raw) return null;\n    try {\n      return parseRuntimeServicesInfo(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  }\n\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  const parsed = value as RuntimeServicesInfo;\n  if (!parsed.services || typeof parsed.services !== \"object\") return null;\n  return parsed;\n}\n\nexport async function fetchBackendRuntimeServicesInfo(): Promise<RuntimeServicesInfo | null> {\n  let clientOptions: ReturnType<typeof getAgentServerClientOptions>;\n  try {\n    clientOptions = getAgentServerClientOptions({ timeout: 3000 });\n  } catch {\n    return null;\n  }\n\n  const cached = parseRuntimeServicesInfo(\n    getCachedAgentServerInfo({ host: clientOptions.host })?.runtime_services,\n  );\n  if (cached) return cached;\n\n  try {\n    const serverInfo = await new ServerClient(clientOptions).getServerInfo();\n    return parseRuntimeServicesInfo(\n      (serverInfo as { runtime_services?: unknown }).runtime_services,\n    );\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is supplied.\n */\nexport function getDeploymentMode(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | null {\n  return runtimeServicesInfo?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is available, so callers can safely\n * omit the field when the selected backend does not advertise runtime services.\n */\nexport function buildRuntimeServicesSystemSuffix(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | undefined {\n  const info = parseRuntimeServicesInfo(runtimeServicesInfo);\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie. Fall back to the\n  // agent's own ``acp_server`` (#3692) when the tag is missing — a profile\n  // launch doesn't stamp the tag, so tag-only reads would drop the ACP model\n  // picker and degrade the chip to a generic \"ACP\" (#1571).\n  const acpServer = isAcp\n    ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? info.agent?.acp_server ?? null)\n    : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    tags: info.tags ?? null,\n    launched_agent_profile: info.launched_agent_profile ?? null,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : combineUsageMetrics(info.stats),\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items.map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\nexport const CLIENT_SOURCE_TAG_KEY = \"clientsource\";\nexport const AGENT_CANVAS_SOURCE = \"agentcanvas\";\n\nexport const AUTOMATION_TRIGGER_TAG_KEY = \"automationtrigger\";\nexport const AUTOMATION_ID_TAG_KEY = \"automationid\";\nexport const AUTOMATION_NAME_TAG_KEY = \"automationname\";\nexport const AUTOMATION_RUN_ID_TAG_KEY = \"automationrunid\";\n\n/**\n * Tag keys stamped on conversations created by automation runs (see the SDK's\n * `RemoteWorkspace.default_conversation_tags`). The presence of any of these\n * marks a conversation as automation-born.\n */\nexport const AUTOMATION_TAG_KEYS: readonly string[] = [\n  AUTOMATION_TRIGGER_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_NAME_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n];\n\n/**\n * Conversation tag keys that must not appear as generic chips / hovercard\n * rows. Each is either already surfaced by a first-class UI source or is\n * internal routing data:\n * - ``acpserver`` → ACP provider chip\n * - ``clientsource`` → telemetry attribution\n * - ``title`` → conversation card heading\n * - git / repo / branch / workspace stamps → repo-branch metadata + directory\n *   footer / hovercard rows (``selected_repository``, ``selected_branch``,\n *   ``git_provider``, ``workspace.working_dir``)\n * - ``automationid`` / ``automationrunid`` → raw UUIDs consumed by the\n *   conversation panel's automation filter (chip noise), while\n *   ``automationname`` / ``automationtrigger`` stay visible\n */\nexport const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string> = new Set([\n  ACP_SERVER_TAG_KEY,\n  CLIENT_SOURCE_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n  \"title\",\n  \"git_provider\",\n  \"repo_name\",\n  \"repo\",\n  \"repository\",\n  \"selected_branch\",\n  \"branch\",\n  \"archiveworkspacepath\",\n  \"workspace\",\n  \"working_dir\",\n]);\n\n/**\n * High-signal tag keys shown first in the chip row (before A–Z). Automations\n * often stamp ``origin``; remaining free-form tags sort alphabetically.\n */\nexport const PRIORITY_CONVERSATION_TAG_KEYS: readonly string[] = [\"origin\"];\n\n/**\n * User-facing subset of a conversation's server-side tags: everything except\n * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries.\n * Priority keys come first (in {@link PRIORITY_CONVERSATION_TAG_KEYS} order);\n * the rest sort A–Z so chip order doesn't shuffle between refetches.\n */\nexport function getDisplayConversationTags(\n  tags: Record<string, string> | null | undefined,\n): Array<[string, string]> {\n  if (!tags) {\n    return [];\n  }\n  // Both the reserved-key check and the priority lookup must see the same\n  // normalized key: a cloud backend can stamp ``Origin`` / `` origin``, and\n  // ranking those off the raw key would silently drop them out of first place.\n  const priorityRank = (key: string): number => {\n    const index = PRIORITY_CONVERSATION_TAG_KEYS.indexOf(\n      key.trim().toLowerCase(),\n    );\n    return index === -1 ? Number.POSITIVE_INFINITY : index;\n  };\n\n  return Object.entries(tags)\n    .filter(\n      ([key, value]) =>\n        !RESERVED_CONVERSATION_TAG_KEYS.has(key.trim().toLowerCase()) &&\n        typeof value === \"string\" &&\n        value.trim().length > 0,\n    )\n    .sort(([a], [b]) => {\n      const aRank = priorityRank(a);\n      const bRank = priorityRank(b);\n      if (aRank !== bRank) {\n        return aRank - bRank;\n      }\n      return a.localeCompare(b);\n    });\n}\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedString(value: unknown): boolean {\n  if (typeof value === \"string\") {\n    return value.startsWith(FERNET_TOKEN_PREFIX);\n  }\n  if (Array.isArray(value)) {\n    return value.some(hasEncryptedString);\n  }\n  if (isPlainRecord(value)) {\n    return Object.values(value).some(hasEncryptedString);\n  }\n  return false;\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig).some(hasEncryptedString);\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(\n  agentSettings: SettingsRecord,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  enablement: SkillEnablement = {},\n  invokedCatalogSkill?: string,\n): SettingsRecord {\n  const runtimeServicesSuffix =\n    buildRuntimeServicesSystemSuffix(runtimeServicesInfo);\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const disabledSkills = enablement.disabledSkills ?? [];\n  const disabledSkillNames = new Set(disabledSkills);\n  const isSkillEnabled = buildSkillEnablementFilter(enablement);\n\n  // The bundled catalog is allow-listed, not deny-listed: it is a build-time\n  // snapshot of ~60 skills, so a deny-list puts every future addition into\n  // every system prompt (OpenHands#16302). Skills the agent context already\n  // carries are user-authored and stay opt-out. A skill the opening message\n  // invokes by name overrides both, for this conversation only.\n  const mergedSkills = [\n    ...existingSkills.filter(\n      (skill) =>\n        typeof skill.name !== \"string\" || !disabledSkillNames.has(skill.name),\n    ),\n    ...buildBundledSkills().filter(\n      (skill) =>\n        skill.name === invokedCatalogSkill || isSkillEnabled(skill.name),\n    ),\n  ];\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    // The backend also auto-loads user/project skills; the deny-list must\n    // travel with the context so those skills are excluded from the system\n    // prompt too. The allow-list has no counterpart to send: the backend\n    // loads no catalog skills of its own (`load_public_skills` is false).\n    disabled_skills: disabledSkills,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      toSkillEnablement(settings),\n      findInvokedCatalogSkill(query),\n    ),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a shared field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = toRecord(agentSettings.llm);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n    delete llm.base_url;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      toSkillEnablement(settings),\n      findInvokedCatalogSkill(query),\n    ),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings, runtimeServicesInfo, query)\n    : buildConfiguredOpenHandsAgentSettings(\n        settings,\n        runtimeServicesInfo,\n        query,\n      );\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\ntype StartConversationPayload = Record<string, unknown> & {\n  // Omitted when launching via ``agent_profile_id`` — the two are mutually\n  // exclusive agent sources; the server resolves the profile server-side.\n  agent_settings?: AgentSettingsPayload;\n  agent_profile_id?: string;\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: true;\n  title_llm_profile?: string;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  parent_conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  client_tools: ClientToolSpec[];\n  tool_module_qualnames?: Record<string, string>;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  // Links the new conversation to an existing one as its child. The\n  // agent-server requires the parent to exist and to share this\n  // conversation's requested `workspace.working_dir` (software-agent-sdk\n  // #4188, agent-server >= 1.37.1); older servers ignore the field.\n  parentConversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: Array<{ name: string; description?: string }>;\n  // When set, the conversation launches from this AgentProfile (resolved\n  // server-side) instead of an inline ``agent_settings`` dump (#3727).\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n  runtimeServicesInfo?: RuntimeServicesInfo | null;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): StartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const launchAgentKind = options.agentProfileId\n    ? options.agentProfileKind\n    : acpMode\n      ? \"acp\"\n      : \"openhands\";\n  const agentSettings = buildConfiguredAgentSettings(\n    sourceAgentSettings,\n    options.runtimeServicesInfo,\n    options.query,\n  );\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: StartConversationPayload = {\n    // ``agent_profile_id`` and ``agent_settings`` are mutually exclusive agent\n    // sources; the profile path lets the server resolve the profile (#3727).\n    //\n    // Enrichment boundary: on the profile path the server rebuilds the agent\n    // purely from the stored profile fields, so the client-owned enrichments\n    // this adapter folds into ``agent_settings`` do NOT apply. The exec toolset\n    // (terminal/file_editor/task_tracker) and public-skill loading are the\n    // server/SDK's responsibility to restore on the profile path — tracked in\n    // software-agent-sdk#3967 (profile resolution must attach the default\n    // toolset + public skills, else a profile-launched OpenHands agent has only\n    // Finish/Think). The dev ``RUNTIME_SERVICES`` system-message suffix remains\n    // agent-settings-only; the Canvas UI tool is a top-level client tool and\n    // therefore works on both inline-agent and profile launch paths.\n    //\n    // Persistent memory is NOT on that boundary: ``load_memory`` is a global\n    // user preference, so the agent-server stamps the stored\n    // ``agent_settings.agent_context.load_memory`` onto the profile-resolved\n    // agent the same way it already applies the global ``mcp_config``. The\n    // toggle therefore applies to both launch paths, and the client must not\n    // re-send it here (``agent_profile_id`` and ``agent_settings`` are\n    // mutually exclusive).\n    ...(options.agentProfileId\n      ? { agent_profile_id: options.agentProfileId }\n      : { agent_settings: agentSettings }),\n    workspace: conversationSettings.workspace,\n    // The agent-server caches each client tool's schema per tool *name* for the\n    // life of the process and rejects a re-registration with a different schema\n    // (`ClientToolSchemaConflictError`). Editing either schema below therefore\n    // requires restarting a long-running dev agent-server before new\n    // conversations can start.\n    client_tools:\n      launchAgentKind === \"openhands\"\n        ? [CANVAS_UI_CLIENT_TOOL, LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL]\n        : [],\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations:\n      typeof conversationSettings.max_iterations === \"number\"\n        ? conversationSettings.max_iterations\n        : 500,\n    stuck_detection: true,\n    autotitle: true,\n    ...(options.titleLlmProfile\n      ? { title_llm_profile: options.titleLlmProfile }\n      : {}),\n    worktree: options.worktree ?? true,\n  };\n\n  // Stamp the client source tag so the agent-server can attribute the\n  // conversation to Canvas in telemetry (conversation_source = \"canvas\").\n  // A profile launch resolves the ACP server server-side, so don't stamp the\n  // tag from current settings (it may not match the launched profile).\n  if (!options.agentProfileId && acpServerTag) {\n    payload.tags = {\n      [ACP_SERVER_TAG_KEY]: acpServerTag,\n      [CLIENT_SOURCE_TAG_KEY]: AGENT_CANVAS_SOURCE,\n    };\n  } else {\n    payload.tags = { [CLIENT_SOURCE_TAG_KEY]: AGENT_CANVAS_SOURCE };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config secrets as Fernet tokens,\n  // and ACP forwards mcp_config directly to the subprocess.\n  if (\n    !options.agentProfileId &&\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  if (options.parentConversationId) {\n    payload.parent_conversation_id = options.parentConversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  }\n\n  const toolModuleQualnames = {\n    ...((conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {}),\n  };\n  delete toolModuleQualnames[LEGACY_CANVAS_UI_TOOL_NAME];\n  delete toolModuleQualnames[CANVAS_UI_CLIENT_TOOL_NAME];\n  delete toolModuleQualnames[LAUNCH_CHILD_CONVERSATION_TOOL_NAME];\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  // Every saved secret rides as a LookupSecret the agent-server resolves back\n  // from its own store at spawn time — ``request.secrets`` is the sole channel,\n  // uniform for ACP and non-ACP (agent-canvas#1039). For ACP the resolution\n  // runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the loopback\n  // fetch can't deadlock.\n  if (options.customSecrets && options.customSecrets.length > 0) {\n    const backend = getEffectiveLocalBackend();\n    const headers = backend ? buildAuthHeaders(backend) : {};\n\n    const secrets: Record<string, LookupSecret> = {};\n    for (const secret of options.customSecrets) {\n      const lookupSecret: LookupSecret = {\n        kind: \"LookupSecret\",\n        url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n        description: secret.description,\n      };\n\n      if (Object.keys(headers).length > 0) {\n        lookupSecret.headers = headers;\n      }\n\n      secrets[secret.name] = lookupSecret;\n    }\n\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  parentConversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n}): Promise<Record<string, unknown>> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets, runtimeServicesInfo] =\n    await Promise.all([\n      SettingsService.getSettingsForConversation(),\n      SecretsService.getSecrets(),\n      fetchBackendRuntimeServicesInfo(),\n    ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  // A profile launch resolves the LLM server-side, so the current-settings\n  // subscription check doesn't apply (and can't see the profile's LLM).\n  if (!options.agentProfileId) {\n    await assertSubscriptionAuthReady(agentSettings);\n  }\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n    runtimeServicesInfo,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"2vCAsHA,IAAM,EAAqB,CAAC,WAAY,cAAe,cAAc,EAC/D,EAAwB,mBACxB,EAAqB,gBAE3B,SAAS,GAAsB,CAC7B,MAAO,EACT,CAkCA,SAAgB,EACd,EAC4B,CAC5B,GAAI,OAAO,GAAU,SAAU,CAC7B,IAAM,EAAM,EAAM,KAAK,EACvB,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,EAAyB,KAAK,MAAM,CAAG,CAAC,CACjD,MAAQ,CACN,OAAO,IACT,CACF,CAEA,GAAI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EAC5D,OAAO,KAGT,IAAM,EAAS,EAEf,MADI,CAAC,EAAO,UAAY,OAAO,EAAO,UAAa,SAAiB,KAC7D,CACT,CAEA,eAAsB,IAAuE,CAC3F,IAAI,EACJ,GAAI,CACF,EAAgB,EAAA,4BAA4B,CAAE,QAAS,GAAK,CAAC,CAC/D,MAAQ,CACN,OAAO,IACT,CAEA,IAAM,EAAS,EACb,EAAA,yBAAyB,CAAE,KAAM,EAAc,IAAK,CAAC,GAAG,gBAC1D,EACA,GAAI,EAAQ,OAAO,EAEnB,GAAI,CAEF,OAAO,GACJ,MAFsB,IAAI,EAAA,aAAa,CAAa,EAAE,cAAc,GAEtB,gBACjD,CACF,MAAQ,CACN,OAAO,IACT,CACF,CAmBA,SAAgB,EACd,EACoB,CACpB,IAAM,EAAO,EAAyB,CAAmB,EACzD,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,CAAC,EACzB,EAAM,KAAK,oBAAoB,EAC3B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,QAC5E,EAEA,EAAM,KAAK,mDAAmD,EAEhE,EAAM,KACJ,2EACA,iEACA,EACF,EAEA,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,6CACrC,EAEE,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,mDAChC,EAEE,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,wBACjC,EAEE,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,kCACnC,EACI,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,UAAU,EAE9C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,aAAa,EAEjD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,EACtE,GAGF,EAAM,KACJ,kFACF,EAQF,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,2EACF,EACI,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,yDACF,EAEF,EAAM,KAAK,qBAAqB,EAEzB,EAAM,KAAK;CAAI,CACxB,CAEA,SAAgB,EAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,4BAA4B,EAC7C,MAAO,GAAG,EAAK,qBAAqB,GACtC,CAKA,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,CAAC,GAClD,CAEA,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,EAAE,EAKhD,EAAQ,EAAK,OAAO,OAAS,WAQ7B,EAAY,EACb,EAAK,MAAA,WAA8B,EAAK,OAAO,YAAc,KAC9D,KACJ,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,KAAK,EACpB,EAAK,MACL,EAA4B,EAAK,EAAE,EACvC,QAAS,KACT,UAAW,CAAC,EACZ,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EACZ,KAAM,EAAK,MAAQ,KACnB,uBAAwB,EAAK,wBAA0B,KAKvD,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,KAC3B,CAAC,EACA,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,CAC3D,EACA,IACN,EACA,GAAA,oBAAoB,EAAK,KAAK,EAClC,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,EAAkB,EAAK,EAAE,EAC3C,gBAAiB,EAAA,4BAA4B,EAAE,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,yBAAyB,CACvE,EACA,OAAQ,GACR,qBAAsB,CAAC,CACzB,CACF,CAEA,SAAgB,EAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MAAM,IAAI,CAAiB,EACvC,aAAc,EAAK,cAAgB,IACrC,CACF,CA+BA,IAAa,EAAqB,YACrB,EAAwB,eACxB,EAAsB,cAEtB,EAA6B,oBAC7B,EAAwB,eACxB,EAA0B,iBAC1B,EAA4B,kBAO5B,EAAyC,CACpD,EACA,EACA,EACA,CACF,EAgBa,EAAsD,IAAI,IAAI,CACzE,EACA,EACA,EACA,EACA,QACA,eACA,YACA,OACA,aACA,kBACA,SACA,uBACA,YACA,aACF,CAAC,EAMY,EAAoD,CAAC,QAAQ,EAQ1E,SAAgB,EACd,EACyB,CACzB,GAAI,CAAC,EACH,MAAO,CAAC,EAKV,IAAM,EAAgB,GAAwB,CAC5C,IAAM,EAAQ,EAA+B,QAC3C,EAAI,KAAK,EAAE,YAAY,CACzB,EACA,OAAO,IAAU,GAAK,IAA2B,CACnD,EAEA,OAAO,OAAO,QAAQ,CAAI,EACvB,QACE,CAAC,EAAK,KACL,CAAC,EAA+B,IAAI,EAAI,KAAK,EAAE,YAAY,CAAC,GAC5D,OAAO,GAAU,UACjB,EAAM,KAAK,EAAE,OAAS,CAC1B,EACC,MAAM,CAAC,GAAI,CAAC,KAAO,CAClB,IAAM,EAAQ,EAAa,CAAC,EACtB,EAAQ,EAAa,CAAC,EAI5B,OAHI,IAAU,EAGP,EAAE,cAAc,CAAC,EAFf,EAAQ,CAGnB,CAAC,CACL,CAEA,IAAM,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,SACF,CAAC,EAED,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EACrD,CAAC,EAGH,gBAAgB,CAAuB,CAChD,CAEA,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,KAAK,EAC3B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,EACxC,CAEA,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAS,EAAmB,EAAyB,CAUnD,OATI,OAAO,GAAU,SACZ,EAAM,WAAW,CAAmB,EAEzC,MAAM,QAAQ,CAAK,EACd,EAAM,KAAK,CAAkB,EAElC,EAAc,CAAK,EACd,OAAO,OAAO,CAAK,EAAE,KAAK,CAAkB,EAE9C,EACT,CAEA,SAAS,EAAuB,EAA6B,CAK3D,OAJK,EAAc,CAAS,EAIrB,OAAO,OAAO,CAAS,EAAE,KAAK,CAAkB,EAH9C,EAIX,CAEA,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,EAAK,EAGnE,CAAE,KAAM,eAAgB,EAPtB,CAAE,KAAM,cAAe,CAQlC,CAEA,SAAS,GAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,qBAAsB,EACvC,IAAK,UACH,MAAO,CAAE,KAAM,yBAA0B,EAC3C,IAAK,cACH,MAAO,CAAE,KAAM,4BAA6B,EAC9C,QACE,MACJ,CACF,CAEA,SAAS,EACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,CAAK,GACpB,OAAQ,EAA6B,MAAS,QAElD,CAEA,SAAS,EAAkB,EAAc,EAA+B,CAYtE,OAXI,IAAS,EACJ,EAAoB,GAAK,EAAA,2BAA2B,CAAI,EAG7D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,CAAI,EAI5B,EACT,CAEA,SAAS,EAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,EACb,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAK,IAAM,IAAQ,CAAC,EAAuB,CAAkB,EACvD,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,CAAe,GAC7B,EAAgB,MAAO,GAAS,EAAa,CAAI,CAAC,MAE7C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,CAAa,GAC5C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,MAAM,CAC9B,CAAC,EAKP,OAAO,MAAM,KAAK,EAAM,OAAO,CAAC,CAClC,CAEA,SAAS,GACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,KAAK,EAAG,GAA0B,KAAK,CAAC,EAAE,OAC9D,OACF,EAKA,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;CAAM,CAAE,CAAC,EACpD,IAAK,EACP,CACF,CA2BA,SAAS,IAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,QAAS,EAC5C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,OAAQ,EAAI,CAAC,EAClD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,aAAc,EAAI,CAAC,CACtE,CACF,CAAC,CACH,CAEA,SAAS,EACP,EACA,EACA,EAA8B,CAAC,EAC/B,EACgB,CAChB,IAAM,EACJ,EAAiC,CAAmB,EAChD,EAAkB,EAAS,EAAc,aAAa,EAItD,EAAiB,MAAM,QAAQ,EAAgB,MAAM,EACtD,EAAgB,OACjB,CAAC,EACC,EAAiB,EAAW,gBAAkB,CAAC,EAC/C,EAAqB,IAAI,IAAI,CAAc,EAC3C,EAAiB,EAAA,2BAA2B,CAAU,EAOtD,EAAe,CACnB,GAAG,EAAe,OACf,GACC,OAAO,EAAM,MAAS,UAAY,CAAC,EAAmB,IAAI,EAAM,IAAI,CACxE,EACA,GAAG,GAAmB,EAAE,OACrB,GACC,EAAM,OAAS,GAAuB,EAAe,EAAM,IAAI,CACnE,CACF,EAEA,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GAKrB,gBAAiB,EACjB,GAAI,EACA,CAAE,sBAAuB,CAAsB,EAC/C,CAAC,CACP,CACF,CAEA,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,cACjC,EAAc,aAAe,KACtC,CAEA,SAAS,GAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,cAC1B,EAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,EACjE,CAEA,SAAS,GAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,CAAG,GAAK,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,EACmC,EACzC,OAAO,EAAW,CAAC,GAAG,EAAS,eAAe,EAAI,CACpD,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAgC,CACpC,WAAY,MACZ,cAAe,EACb,EACA,EACA,EAAA,kBAAkB,CAAQ,EAC1B,EAAA,wBAAwB,CAAK,CAC/B,CACF,EASA,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,GAAkB,CAAa,EAC/B,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,EAEnB,CAMA,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,OAAS,IAClC,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,CAAS,CACxD,CAAC,EAKD,OAJI,IACF,EAAQ,UAAY,GAGf,CACT,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAM,EAAS,EAAc,GAAG,EAEtC,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,KAAK,EAAE,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAIvB,EAAI,OAAS,GAEb,IAAM,EAAS,EAAsB,EAAI,OAAO,EAC5C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,QAAQ,EAC9C,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,CAAG,GAC7B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,QACX,OAAO,EAAI,WAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGb,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,SAAW,GACpC,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EACb,EACA,EACA,EAAA,kBAAkB,CAAQ,EAC1B,EAAA,wBAAwB,CAAK,CAC/B,EACA,MAAO,EAAc,CAAa,CACpC,CACF,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,OAAO,EAAW,CAAQ,EACtB,GAAgC,EAAU,EAAqB,CAAK,EACpE,GACE,EACA,EACA,CACF,CACN,CAEA,SAAS,GAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,qBAAqB,EAC9D,EAAiB,GAAoB,EAAO,CAAwB,EAwB1E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,EACvC,EAoBO,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,yBAAyB,CACtD,EACA,GAAI,EAAiB,CAAE,gBAAiB,CAAe,EAAI,CAAC,EAC5D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,GAAI,EAAI,CAAC,EACxC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,SAAU,EAAI,CAAC,CAC5D,EAAE,CACJ,EACA,CAAC,CAGA,CACT,CAyDA,SAAgB,GACd,EAC0B,CAC1B,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,sBAAuB,EACtE,EAAQ,SAEN,EAAU,EAAW,CAAmB,EACxC,EAAkB,EAAQ,eAC5B,EAAQ,iBACR,EACE,MACA,YACA,EAAgB,GACpB,EACA,EAAQ,oBACR,EAAQ,KACV,EACM,EAAe,EACjB,GAAgB,CAAmB,EACnC,IAAA,GAYE,EAAuB,GAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,6BACjC,CACF,EACA,CAIJ,EAEM,EAAoC,CAsBxC,GAAI,EAAQ,eACR,CAAE,iBAAkB,EAAQ,cAAe,EAC3C,CAAE,eAAgB,CAAc,EACpC,UAAW,EAAqB,UAMhC,aACE,IAAoB,YAChB,CAAC,EAAA,sBAAuB,EAAA,qCAAqC,EAC7D,CAAC,EACP,oBACE,EAAkC,CAAoB,EACxD,eACE,OAAO,EAAqB,gBAAmB,SAC3C,EAAqB,eACrB,IACN,gBAAiB,GACjB,UAAW,GACX,GAAI,EAAQ,gBACR,CAAE,kBAAmB,EAAQ,eAAgB,EAC7C,CAAC,EACL,SAAU,EAAQ,UAAY,EAChC,EAMI,CAAC,EAAQ,gBAAkB,EAC7B,EAAQ,KAAO,EACZ,GAAqB,GACrB,GAAwB,CAC3B,EAEA,EAAQ,KAAO,EAAG,GAAwB,CAAoB,EAU9D,CAAC,EAAQ,gBACT,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,UAAU,KAE5D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGhC,EAAQ,uBACV,EAAQ,uBAAyB,EAAQ,sBAG3C,IAAM,EACJ,GAAgC,CAAoB,EAClD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,cACvB,EAAQ,YAAc,EAAqB,aAG7C,IAAM,EAAsB,CAC1B,GAAK,EAAqB,uBAER,CAAC,CACrB,EAiBA,GAhBA,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,qCACvB,OAAO,KAAK,CAAmB,EAAE,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAQ/C,EAAQ,eAAiB,EAAQ,cAAc,OAAS,EAAG,CAC7D,IAAM,EAAU,EAAA,yBAAyB,EACnC,EAAU,EAAU,EAAA,iBAAiB,CAAO,EAAI,CAAC,EAEjD,EAAwC,CAAC,EAC/C,IAAK,IAAM,KAAU,EAAQ,cAAe,CAC1C,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,IAAI,IAC5D,YAAa,EAAO,WACtB,EAEI,OAAO,KAAK,CAAO,EAAE,OAAS,IAChC,EAAa,QAAU,GAGzB,EAAQ,EAAO,MAAQ,CACzB,CAEA,EAAQ,QAAU,CACpB,CAEA,OAAO,CACT,CAEA,IAAa,GACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,GACN,CAAG,GAG5B,EAAC,MADgB,EAAA,QAAuB,gBAAgB,GAChD,UACV,MAAU,MAAM,EAAiC,CAErD,CAEA,eAAsB,GAAmD,EAYpC,CACnC,GAAM,CAAE,kBAAmB,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,uBAAA,CAAA,EAE3B,CAAC,EAAgB,EAAe,GACpC,MAAM,QAAQ,IAAI,CAChB,GAAA,QAAgB,2BAA2B,EAC3C,EAAe,WAAW,EAC1B,GAAgC,CAClC,CAAC,EAEG,CAAE,gBAAe,uBAAsB,oBAC3C,EAQF,OAJK,EAAQ,gBACX,MAAM,EAA4B,CAAa,EAG1C,GAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACA,qBACF,CAAC,CACH,CAEA,SAAgB,IAAuC,CACrD,MAAO,CAAE,MAAO,CAAC,CAAE,CACrB"}
+{"version":3,"file":"agent-server-adapter.cjs","names":[],"sources":["../../src/api/agent-server-adapter.ts"],"sourcesContent":["import { ACP_SETTINGS_KEYS } from \"@openhands/typescript-client\";\nimport type { HookConfig } from \"@openhands/typescript-client\";\nimport { ServerClient } from \"@openhands/typescript-client/clients\";\nimport { SKILLS_CATALOG } from \"@openhands/extensions/skills\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { ExecutionStatus } from \"#/types/agent-server/core\";\nimport { AgentKind, Settings, SettingsValue } from \"#/types/settings\";\nimport {\n  getAcpPreferredDefaultModel,\n  getAcpProvider,\n  resolveEffectiveAcpModel,\n} from \"#/constants/acp-providers\";\nimport { getAgentServerClientOptions } from \"./agent-server-client-options\";\nimport {\n  getCachedAgentServerInfo,\n  isAgentServerToolAvailable,\n} from \"./agent-server-compatibility\";\nimport { getAgentServerWorkingDir } from \"./agent-server-config\";\nimport { getEffectiveLocalBackend } from \"./backend-registry/active-store\";\nimport { buildAuthHeaders } from \"./backend-registry/auth\";\nimport {\n  GetHooksResponse,\n  PluginSpec,\n  AppConversation,\n  AppConversationPage,\n  RuntimeConversationStats,\n  SandboxStatus,\n} from \"./conversation-service/agent-server-conversation-service.types\";\nimport { combineUsageMetrics } from \"#/utils/conversation-metrics\";\nimport {\n  buildSkillEnablementFilter,\n  findInvokedCatalogSkill,\n  toSkillEnablement,\n  type SkillEnablement,\n} from \"#/utils/skill-enablement\";\nimport SettingsService from \"./settings-service/settings-service.api\";\nimport { getStoredConversationMetadata } from \"./conversation-metadata-store\";\nimport LLMSubscriptionService from \"./llm-subscription-service\";\nimport {\n  LLM_AUTH_TYPE_SUBSCRIPTION,\n  OPENAI_SUBSCRIPTION_VENDOR,\n  isSubscriptionLlmConfig,\n} from \"#/constants/llm-subscription\";\nimport {\n  CANVAS_UI_CLIENT_TOOL,\n  CANVAS_UI_CLIENT_TOOL_NAME,\n  LEGACY_CANVAS_UI_TOOL_NAME,\n  type ClientToolSpec,\n} from \"./canvas-ui-client-tool\";\nimport {\n  LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL,\n  LAUNCH_CHILD_CONVERSATION_TOOL_NAME,\n} from \"./launch-child-conversation-client-tool\";\nimport {\n  buildPlanPath,\n  LOCAL_PLANNER_PARENT_TAG_KEY,\n  PLAN_STRUCTURE_TEXT,\n  PLANNING_AGENT_INSTRUCTION,\n  PLANNING_FILE_EDITOR_TOOL_NAME,\n  PLANNING_SYSTEM_PROMPT_FILENAME,\n} from \"#/utils/plan-file\";\n\nexport interface DirectConversationInfo {\n  id: string;\n  title?: string | null;\n  created_at: string;\n  updated_at: string;\n  execution_status?: string | null;\n  /** Cloud-only sandbox lifecycle state. Omitted / null for local agent-server conversations. */\n  sandbox_status?: string | null;\n  metrics?: {\n    accumulated_cost?: number | null;\n    max_budget_per_task?: number | null;\n    accumulated_token_usage?: {\n      prompt_tokens?: number;\n      completion_tokens?: number;\n      cache_read_tokens?: number;\n      cache_write_tokens?: number;\n      context_window?: number;\n      per_turn_token?: number;\n    } | null;\n  } | null;\n  /**\n   * Raw per-usage-id LLM stats from the agent-server. Search/list responses\n   * often carry real usage here even when `metrics` above comes back unset;\n   * {@link toAppConversation} combines this as a fallback in that case.\n   */\n  stats?: RuntimeConversationStats | null;\n  agent?: {\n    /**\n     * Pydantic discriminator from the SDK union: ``\"ACPAgent\"`` for ACP CLI\n     * subprocesses (model lives on the subprocess via ``acp_model``),\n     * ``\"Agent\"`` for direct litellm. Read by {@link toAppConversation}.\n     */\n    kind?: string | null;\n    acp_model?: string | null;\n    /**\n     * ACP CLI identity (``claude-code`` / ``codex`` / ``gemini-cli``) from the\n     * SDK's ``ACPAgent.acp_server`` (#3692). Preferred fallback when the\n     * ``acpserver`` tag is absent — e.g. a profile launch doesn't stamp the tag\n     * client-side and the server may not repopulate it. Read by {@link toAppConversation}.\n     */\n    acp_server?: string | null;\n    llm?: {\n      model?: string | null;\n    } | null;\n  } | null;\n  current_model_id?: string | null;\n  current_model_name?: string | null;\n  workspace?: {\n    working_dir?: string | null;\n  } | null;\n  /**\n   * Arbitrary string-keyed conversation tags surfaced by the agent-server\n   * (see ``ConversationInfo.tags``). Canvas only consumes one key today —\n   * ``ACP_SERVER_TAG_KEY`` (\"acpserver\") — but the field is typed as a\n   * generic record so future readers don't need another wire-shape change.\n   * Keys are constrained to ``^[a-z0-9]+$`` by the agent-server validator;\n   * values are opaque strings.\n   */\n  tags?: Record<string, string> | null;\n  launched_agent_profile?: {\n    agent_profile_id: string;\n    revision: number;\n  } | null;\n  /**\n   * Server-owned, derived from the catalog's ``parent_conversation_id`` link\n   * (agent-server >= 1.37.1, SDK #4188) — a conversation started with a\n   * parent is discoverable here on any browser, which is what makes the\n   * local planner's relationship server state rather than a browser-local\n   * hint. Absent on older agent-servers and on the cloud wire shape.\n   */\n  sub_conversation_ids?: string[] | null;\n}\n\nconst DEFAULT_TOOL_NAMES = [\"terminal\", \"file_editor\", \"task_tracker\"];\nconst BROWSER_TOOL_SET_NAME = \"browser_tool_set\";\nconst TASK_TOOL_SET_NAME = \"task_tool_set\";\n// Falls back to the same default the code agent uses when the user has not\n// configured `conversation_settings.max_iterations` (see buildConfiguredConversationSettings).\nconst DEFAULT_MAX_ITERATIONS = 500;\n\nfunction resolveMaxIterations(value: unknown): number {\n  return typeof value === \"number\" ? value : DEFAULT_MAX_ITERATIONS;\n}\n\nfunction browserToolsEnabled() {\n  return import.meta.env.VITE_ENABLE_BROWSER_TOOLS !== \"false\";\n}\n\n/**\n * Shape of the runtime services info served by Agent Canvas backends in\n * `/server_info.runtime_services`. All URLs are written from the agent's point of\n * view, not the browser's. The block is rendered into the agent's system prompt\n * via `AgentContext.system_message_suffix` so the agent knows what's reachable\n * from inside its sandbox without having to probe.\n */\nexport interface RuntimeServicesInfo {\n  mode?: string;\n  agent_host_alias?: string;\n  services?: {\n    agent_server?: { description?: string; url_from_agent?: string };\n    ingress?: { description?: string; url_from_agent?: string };\n    frontend?: {\n      kind?: \"vite\" | \"static\";\n      description?: string;\n      url_from_agent?: string;\n    };\n    // `vite` is the legacy key name for the frontend entry, accepted for\n    // one release while older dev-stack launchers may still emit it.\n    vite?: { description?: string; url_from_agent?: string };\n    automation?: {\n      description?: string;\n      url_from_agent?: string;\n      api_prefix?: string;\n      docs_url?: string;\n      openapi_url?: string;\n      auth_env_var?: string;\n    };\n  };\n}\n\nexport function parseRuntimeServicesInfo(\n  value: unknown,\n): RuntimeServicesInfo | null {\n  if (typeof value === \"string\") {\n    const raw = value.trim();\n    if (!raw) return null;\n    try {\n      return parseRuntimeServicesInfo(JSON.parse(raw));\n    } catch {\n      return null;\n    }\n  }\n\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  const parsed = value as RuntimeServicesInfo;\n  if (!parsed.services || typeof parsed.services !== \"object\") return null;\n  return parsed;\n}\n\nexport async function fetchBackendRuntimeServicesInfo(): Promise<RuntimeServicesInfo | null> {\n  let clientOptions: ReturnType<typeof getAgentServerClientOptions>;\n  try {\n    clientOptions = getAgentServerClientOptions({ timeout: 3000 });\n  } catch {\n    return null;\n  }\n\n  const cached = parseRuntimeServicesInfo(\n    getCachedAgentServerInfo({ host: clientOptions.host })?.runtime_services,\n  );\n  if (cached) return cached;\n\n  try {\n    const serverInfo = await new ServerClient(clientOptions).getServerInfo();\n    return parseRuntimeServicesInfo(\n      (serverInfo as { runtime_services?: unknown }).runtime_services,\n    );\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Return the deployment mode from the runtime services info, e.g. \"docker\",\n * \"dev:automation\", etc. Returns `null` when no runtime info is supplied.\n */\nexport function getDeploymentMode(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | null {\n  return runtimeServicesInfo?.mode ?? null;\n}\n\n/**\n * Render the runtime services info into a markdown block suitable for\n * appending to the system prompt via `AgentContext.system_message_suffix`.\n *\n * Returns `undefined` when no runtime info is available, so callers can safely\n * omit the field when the selected backend does not advertise runtime services.\n */\nexport function buildRuntimeServicesSystemSuffix(\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n): string | undefined {\n  const info = parseRuntimeServicesInfo(runtimeServicesInfo);\n  if (!info?.services) return undefined;\n\n  const lines: string[] = [];\n  lines.push(\"<RUNTIME_SERVICES>\");\n  if (info.mode) {\n    lines.push(\n      `You are running inside an agent-canvas dev stack started in '${info.mode}' mode.`,\n    );\n  } else {\n    lines.push(\"You are running inside an agent-canvas dev stack.\");\n  }\n  lines.push(\n    \"The following services are reachable from your sandbox. URLs are written\",\n    \"from your point of view (i.e., as you should curl/fetch them).\",\n    \"\",\n  );\n\n  const { agent_server, ingress, automation } = info.services;\n  const { frontend } = info.services;\n\n  if (agent_server?.url_from_agent) {\n    lines.push(\n      `* Agent Server (you): ${agent_server.url_from_agent}`,\n      `    ${agent_server.description ?? \"The agent-server hosting your tool calls.\"}`,\n    );\n  }\n  if (ingress?.url_from_agent) {\n    lines.push(\n      `* Ingress: ${ingress.url_from_agent}`,\n      `    ${ingress.description ?? \"Unified entry point for browser-facing traffic.\"}`,\n    );\n  }\n  if (frontend?.url_from_agent) {\n    lines.push(\n      `* Frontend: ${frontend.url_from_agent}`,\n      `    ${frontend.description ?? \"Frontend dev server.\"}`,\n    );\n  }\n  if (automation?.url_from_agent) {\n    lines.push(\n      `* Automation backend: ${automation.url_from_agent}`,\n      `    ${automation.description ?? \"OpenHands Automations service.\"}`,\n    );\n    if (automation.docs_url) {\n      lines.push(`    Docs:    ${automation.docs_url}`);\n    }\n    if (automation.openapi_url) {\n      lines.push(`    OpenAPI: ${automation.openapi_url}`);\n    }\n    if (automation.auth_env_var) {\n      // X-Session-API-Key is the local convention shared by the agent-server\n      // and automation backend (see openhands-automation auth.py).\n      lines.push(\n        `    Auth:    header 'X-Session-API-Key: $${automation.auth_env_var}'`,\n      );\n    }\n  } else {\n    lines.push(\n      \"* Automation backend: not running in this dev mode (skip /api/automation calls).\",\n    );\n  }\n\n  // Anchor the \"don't guess\" warning to the actual agent-server URL for\n  // this stack instead of a hardcoded port. The agent-server listens on\n  // different ports across dev modes, and baking the wrong port into the\n  // system prompt is exactly the kind of confusion this block is meant to\n  // prevent.\n  const agentServerUrl = agent_server?.url_from_agent;\n  lines.push(\n    \"\",\n    \"Trust this block over guessing: do not assume any other URLs are running.\",\n  );\n  if (agentServerUrl) {\n    lines.push(\n      `In particular, ${agentServerUrl} inside your sandbox is the Agent Server`,\n      \"you are running inside of — NOT the automation backend.\",\n    );\n  }\n  lines.push(\"</RUNTIME_SERVICES>\");\n\n  return lines.join(\"\\n\");\n}\n\nexport function toConversationUrl(conversationId: string): string {\n  // Local-format conversation URL — points at whichever local agent-server\n  // is actually serving the conversation (the bundled one when the active\n  // selection is cloud).\n  const { host } = getAgentServerClientOptions();\n  return `${host}/api/conversations/${conversationId}`;\n}\n\n// TODO(i18n): extract \"Conversation\" once we add CONVERSATION$DEFAULT_TITLE\n// with `{{shortId}}` interpolation. Kept as a literal for now to keep the\n// fallback inside this pure adapter rather than fanning out to display sites.\nexport function getDefaultConversationTitle(conversationId: string): string {\n  return `Conversation ${conversationId.slice(0, 5)}`;\n}\n\nexport function toAppConversation(\n  info: DirectConversationInfo,\n): AppConversation {\n  const metadata = getStoredConversationMetadata(info.id);\n  // ACPAgent conversations carry a sentinel ``llm`` on older SDKs. Prefer the\n  // runtime model fields when available, then the configured ``acp_model`` that\n  // Canvas saves for built-in providers. ``agent_kind`` still gates model\n  // switching, so surfacing this string is display-only.\n  const isAcp = info.agent?.kind === \"ACPAgent\";\n  // Only surface ``acp_server`` for ACP conversations even if the wire\n  // payload accidentally carries an ``acpserver`` tag on an OpenHands\n  // conversation — the chip is identity info for the ACP CLI subprocess,\n  // and showing it on a non-ACP conversation would be a lie. Fall back to the\n  // agent's own ``acp_server`` (#3692) when the tag is missing — a profile\n  // launch doesn't stamp the tag, so tag-only reads would drop the ACP model\n  // picker and degrade the chip to a generic \"ACP\" (#1571).\n  const acpServer = isAcp\n    ? (info.tags?.[ACP_SERVER_TAG_KEY] ?? info.agent?.acp_server ?? null)\n    : null;\n  return {\n    id: info.id,\n    created_by_user_id: null,\n    selected_repository: metadata?.selected_repository ?? null,\n    selected_branch: metadata?.selected_branch ?? null,\n    git_provider: metadata?.git_provider ?? null,\n    selected_workspace: metadata?.selected_workspace ?? null,\n    active_profile: metadata?.active_profile ?? null,\n    title: info.title?.trim()\n      ? info.title\n      : getDefaultConversationTitle(info.id),\n    trigger: null,\n    pr_number: [],\n    agent_kind: isAcp ? \"acp\" : \"openhands\",\n    acp_server: acpServer,\n    tags: info.tags ?? null,\n    launched_agent_profile: info.launched_agent_profile ?? null,\n    // Chip path: omit ``providerDefault`` so that when no concrete model\n    // resolves, the chip falls back to the provider display name in\n    // ConversationCardFooter rather than a registry default the session may\n    // not actually be running.\n    llm_model: isAcp\n      ? resolveEffectiveAcpModel({\n          runtimeName: info.current_model_name,\n          runtimeId: info.current_model_id,\n          configured: info.agent?.acp_model,\n          sdkLlm: info.agent?.llm?.model,\n        })\n      : (info.agent?.llm?.model ?? DEFAULT_SETTINGS.llm_model),\n    metrics: info.metrics\n      ? {\n          accumulated_cost: info.metrics.accumulated_cost ?? null,\n          max_budget_per_task: info.metrics.max_budget_per_task ?? null,\n          accumulated_token_usage: info.metrics.accumulated_token_usage\n            ? {\n                prompt_tokens:\n                  info.metrics.accumulated_token_usage.prompt_tokens ?? 0,\n                completion_tokens:\n                  info.metrics.accumulated_token_usage.completion_tokens ?? 0,\n                cache_read_tokens:\n                  info.metrics.accumulated_token_usage.cache_read_tokens ?? 0,\n                cache_write_tokens:\n                  info.metrics.accumulated_token_usage.cache_write_tokens ?? 0,\n                context_window:\n                  info.metrics.accumulated_token_usage.context_window ?? 0,\n                per_turn_token:\n                  info.metrics.accumulated_token_usage.per_turn_token ?? 0,\n              }\n            : null,\n        }\n      : combineUsageMetrics(info.stats),\n    created_at: info.created_at,\n    updated_at: info.updated_at,\n    execution_status:\n      (info.execution_status as AppConversation[\"execution_status\"]) ??\n      ExecutionStatus.IDLE,\n    sandbox_status: (info.sandbox_status as SandboxStatus | null) ?? null,\n    conversation_url: toConversationUrl(info.id),\n    session_api_key: getAgentServerClientOptions().apiKey ?? null,\n    sandbox_id: null,\n    workspace: {\n      working_dir: info.workspace?.working_dir ?? getAgentServerWorkingDir(),\n    },\n    public: false,\n    sub_conversation_ids: info.sub_conversation_ids ?? [],\n  };\n}\n\nexport function toConversationPage(data: {\n  items: DirectConversationInfo[];\n  next_page_id?: string | null;\n}): AppConversationPage {\n  return {\n    items: data.items\n      .filter((item) => !item.tags?.[LOCAL_PLANNER_PARENT_TAG_KEY])\n      .map(toAppConversation),\n    next_page_id: data.next_page_id ?? null,\n  };\n}\n\ntype SettingsRecord = Record<string, unknown>;\n\ninterface AgentToolSpec {\n  name: string;\n  params: SettingsRecord;\n}\n\ntype AgentSettingsPayload = SettingsRecord & {\n  llm?: SettingsRecord;\n  agent_context: SettingsRecord;\n  tools?: AgentToolSpec[];\n};\n\ninterface LocalWorkspacePayload {\n  kind: \"LocalWorkspace\";\n  working_dir: string;\n}\n\ninterface InitialMessagePayload {\n  role: \"user\";\n  content: Array<{ type: \"text\"; text: string }>;\n  run: true;\n}\n\ntype ConversationSettingsPayload = SettingsRecord & {\n  workspace: LocalWorkspacePayload;\n  initial_message?: InitialMessagePayload;\n};\n\nexport const ACP_SERVER_TAG_KEY = \"acpserver\";\nexport const CLIENT_SOURCE_TAG_KEY = \"clientsource\";\nexport const AGENT_CANVAS_SOURCE = \"agentcanvas\";\n\nexport const AUTOMATION_TRIGGER_TAG_KEY = \"automationtrigger\";\nexport const AUTOMATION_ID_TAG_KEY = \"automationid\";\nexport const AUTOMATION_NAME_TAG_KEY = \"automationname\";\nexport const AUTOMATION_RUN_ID_TAG_KEY = \"automationrunid\";\n\n/**\n * Tag keys stamped on conversations created by automation runs (see the SDK's\n * `RemoteWorkspace.default_conversation_tags`). The presence of any of these\n * marks a conversation as automation-born.\n */\nexport const AUTOMATION_TAG_KEYS: readonly string[] = [\n  AUTOMATION_TRIGGER_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_NAME_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n];\n\n/**\n * Conversation tag keys that must not appear as generic chips / hovercard\n * rows. Each is either already surfaced by a first-class UI source or is\n * internal routing data:\n * - ``acpserver`` → ACP provider chip\n * - ``clientsource`` → telemetry attribution\n * - ``title`` → conversation card heading\n * - git / repo / branch / workspace stamps → repo-branch metadata + directory\n *   footer / hovercard rows (``selected_repository``, ``selected_branch``,\n *   ``git_provider``, ``workspace.working_dir``)\n * - the automation family (``automationtrigger`` / ``automationid`` /\n *   ``automationname`` / ``automationrunid``) → provenance the SDK stamps at\n *   creation; the conversation panel's automation filter is its first-class\n *   UI source. The tag surface is user organization data, so machine stamps\n *   stay out of it — and users can't edit or spoof automation classification.\n * - ``localplannerparent`` → internal routing for the local planner; already\n *   surfaced by the hidden-from-list planner filter\n */\nexport const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string> = new Set([\n  ACP_SERVER_TAG_KEY,\n  CLIENT_SOURCE_TAG_KEY,\n  AUTOMATION_TRIGGER_TAG_KEY,\n  AUTOMATION_ID_TAG_KEY,\n  AUTOMATION_NAME_TAG_KEY,\n  AUTOMATION_RUN_ID_TAG_KEY,\n  \"title\",\n  \"git_provider\",\n  \"repo_name\",\n  \"repo\",\n  \"repository\",\n  \"selected_branch\",\n  \"branch\",\n  \"archiveworkspacepath\",\n  \"workspace\",\n  \"working_dir\",\n  LOCAL_PLANNER_PARENT_TAG_KEY,\n]);\n\n/**\n * High-signal tag keys shown first in the chip row (before A–Z). Automations\n * often stamp ``origin``; remaining free-form tags sort alphabetically.\n */\nexport const PRIORITY_CONVERSATION_TAG_KEYS: readonly string[] = [\"origin\"];\n\n/**\n * User-facing subset of a conversation's server-side tags: everything except\n * {@link RESERVED_CONVERSATION_TAG_KEYS}, as stable ``[key, value]`` entries.\n * Priority keys come first (in {@link PRIORITY_CONVERSATION_TAG_KEYS} order);\n * the rest sort A–Z so chip order doesn't shuffle between refetches.\n */\nexport function getDisplayConversationTags(\n  tags: Record<string, string> | null | undefined,\n): Array<[string, string]> {\n  if (!tags) {\n    return [];\n  }\n  // Both the reserved-key check and the priority lookup must see the same\n  // normalized key: a cloud backend can stamp ``Origin`` / `` origin``, and\n  // ranking those off the raw key would silently drop them out of first place.\n  const priorityRank = (key: string): number => {\n    const index = PRIORITY_CONVERSATION_TAG_KEYS.indexOf(\n      key.trim().toLowerCase(),\n    );\n    return index === -1 ? Number.POSITIVE_INFINITY : index;\n  };\n\n  return Object.entries(tags)\n    .filter(\n      ([key, value]) =>\n        !RESERVED_CONVERSATION_TAG_KEYS.has(key.trim().toLowerCase()) &&\n        typeof value === \"string\" &&\n        // Bare tags (empty value) are displayable — chips/tooltips render\n        // the key. Whitespace-only values stay dropped (raw-write junk).\n        (value === \"\" || value.trim().length > 0),\n    )\n    .sort(([a], [b]) => {\n      const aRank = priorityRank(a);\n      const bRank = priorityRank(b);\n      if (aRank !== bRank) {\n        return aRank - bRank;\n      }\n      return a.localeCompare(b);\n    });\n}\n\nconst FERNET_TOKEN_PREFIX = \"gAAAAA\";\n\nconst CONVERSATION_SETTINGS_METADATA_KEYS = new Set([\n  \"schema_version\",\n  \"agent_settings\",\n  \"workspace\",\n  \"conversation_id\",\n  \"initial_message\",\n  \"plugins\",\n]);\n\nfunction toRecord(value: unknown): SettingsRecord {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return {};\n  }\n\n  return structuredClone(value as SettingsRecord);\n}\n\nfunction normalizeSecretString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction buildNormalizedLlmSettings(value: unknown): SettingsRecord {\n  const llm = toRecord(value);\n\n  llm.model =\n    typeof llm.model === \"string\" && llm.model.trim().length > 0\n      ? llm.model\n      : DEFAULT_SETTINGS.llm_model;\n\n  const apiKey = normalizeSecretString(llm.api_key);\n  if (apiKey) {\n    llm.api_key = apiKey;\n  } else {\n    delete llm.api_key;\n  }\n\n  const baseUrl = normalizeSecretString(llm.base_url);\n  if (baseUrl) {\n    llm.base_url = baseUrl;\n  } else {\n    delete llm.base_url;\n  }\n\n  if (isSubscriptionLlmConfig(llm)) {\n    llm.auth_type = LLM_AUTH_TYPE_SUBSCRIPTION;\n    llm.subscription_vendor = OPENAI_SUBSCRIPTION_VENDOR;\n    delete llm.api_key;\n  } else {\n    delete llm.auth_type;\n    delete llm.subscription_vendor;\n  }\n\n  return llm;\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction hasEncryptedString(value: unknown): boolean {\n  if (typeof value === \"string\") {\n    return value.startsWith(FERNET_TOKEN_PREFIX);\n  }\n  if (Array.isArray(value)) {\n    return value.some(hasEncryptedString);\n  }\n  if (isPlainRecord(value)) {\n    return Object.values(value).some(hasEncryptedString);\n  }\n  return false;\n}\n\nfunction hasEncryptedMcpSecrets(mcpConfig: unknown): boolean {\n  if (!isPlainRecord(mcpConfig)) {\n    return false;\n  }\n\n  return Object.values(mcpConfig).some(hasEncryptedString);\n}\n\nfunction getConversationConfirmationPolicy(\n  conversationSettings: SettingsRecord,\n) {\n  if (conversationSettings.confirmation_mode !== true) {\n    return { kind: \"NeverConfirm\" };\n  }\n\n  if (conversationSettings.security_analyzer === \"llm\") {\n    return { kind: \"ConfirmRisky\", threshold: \"HIGH\", confirm_unknown: true };\n  }\n\n  return { kind: \"AlwaysConfirm\" };\n}\n\nfunction getConversationSecurityAnalyzer(conversationSettings: SettingsRecord) {\n  switch (conversationSettings.security_analyzer) {\n    case \"llm\":\n      return { kind: \"LLMSecurityAnalyzer\" };\n    case \"pattern\":\n      return { kind: \"PatternSecurityAnalyzer\" };\n    case \"policy_rail\":\n      return { kind: \"PolicyRailSecurityAnalyzer\" };\n    default:\n      return undefined;\n  }\n}\n\nfunction isToolRecord(\n  value: unknown,\n): value is { name: string; params?: unknown } {\n  return (\n    !!value &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    typeof (value as { name?: unknown }).name === \"string\"\n  );\n}\n\nfunction shouldIncludeTool(name: string, agentSettings: SettingsRecord) {\n  if (name === BROWSER_TOOL_SET_NAME) {\n    return browserToolsEnabled() && isAgentServerToolAvailable(name);\n  }\n\n  if (name === TASK_TOOL_SET_NAME) {\n    return (\n      agentSettings.enable_sub_agents === true &&\n      isAgentServerToolAvailable(name)\n    );\n  }\n\n  return true;\n}\n\nfunction getAgentTools(agentSettings: SettingsRecord): AgentToolSpec[] {\n  const tools = new Map<string, AgentToolSpec>();\n\n  for (const name of DEFAULT_TOOL_NAMES) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  for (const name of [BROWSER_TOOL_SET_NAME, TASK_TOOL_SET_NAME]) {\n    if (shouldIncludeTool(name, agentSettings)) {\n      tools.set(name, { name, params: {} });\n    }\n  }\n\n  const configuredTools = agentSettings.tools;\n  if (\n    Array.isArray(configuredTools) &&\n    configuredTools.every((tool) => isToolRecord(tool))\n  ) {\n    for (const tool of configuredTools) {\n      if (shouldIncludeTool(tool.name, agentSettings)) {\n        tools.set(tool.name, {\n          name: tool.name,\n          params: toRecord(tool.params),\n        });\n      }\n    }\n  }\n\n  return Array.from(tools.values());\n}\n\nfunction buildInitialMessage(\n  query?: string,\n  conversationInstructions?: string,\n): InitialMessagePayload | null {\n  const parts = [query?.trim(), conversationInstructions?.trim()].filter(\n    Boolean,\n  );\n  if (parts.length === 0) {\n    return null;\n  }\n\n  return {\n    role: \"user\",\n    content: [{ type: \"text\", text: parts.join(\"\\n\\n\") }],\n    run: true,\n  };\n}\n\n/**\n * Shape of a bundled skill entry passed to the agent-server SDK via\n * `agent_context.skills`. Mirrors the SDK's `Skill` model fields that\n * the server uses for trigger matching, activation, and system-prompt\n * injection.\n */\ninterface BundledSkill {\n  name: string;\n  content: string;\n  trigger: { type: \"keyword\"; keywords: string[] } | null;\n  source: string;\n  description: string | null;\n  is_agentskills_format: true;\n  license?: string;\n  compatibility?: string;\n}\n\n/**\n * Convert the bundled `SKILLS_CATALOG` entries into the SDK `Skill` JSON\n * shape so the agent-server can perform trigger matching, skill activation,\n * and system-prompt injection without cloning the extensions repo.\n *\n * The SDK discriminates triggers via `{ type: \"keyword\", keywords: [...] }`.\n * Skills with no triggers get `trigger: null` (always-active / on-demand).\n */\nfunction buildBundledSkills(): BundledSkill[] {\n  return SKILLS_CATALOG.map((entry) => {\n    const trigger: BundledSkill[\"trigger\"] =\n      entry.triggers?.length > 0\n        ? { type: \"keyword\", keywords: entry.triggers }\n        : null;\n\n    // Use the absolute path to the skill's SKILL.md so the Python\n    // agent-server can resolve bundled resources (scripts/, references/).\n    // Falls back to \"public\" in library builds where the path isn't known.\n    const source = __EXTENSIONS_SKILLS_DIR__\n      ? `${__EXTENSIONS_SKILLS_DIR__}/${entry.name}/SKILL.md`\n      : \"public\";\n\n    return {\n      name: entry.name,\n      content: entry.content,\n      trigger,\n      source,\n      description: entry.description ?? null,\n      is_agentskills_format: true as const,\n      ...(entry.license ? { license: entry.license } : {}),\n      ...(entry.compatibility ? { compatibility: entry.compatibility } : {}),\n    };\n  });\n}\n\nfunction buildAgentContext(\n  agentSettings: SettingsRecord,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  enablement: SkillEnablement = {},\n  invokedCatalogSkill?: string,\n): SettingsRecord {\n  const runtimeServicesSuffix =\n    buildRuntimeServicesSystemSuffix(runtimeServicesInfo);\n  const existingContext = toRecord(agentSettings.agent_context);\n\n  // Merge bundled public skills with any skills already present in the\n  // agent context (e.g. user-defined skills set via the settings API).\n  const existingSkills = Array.isArray(existingContext.skills)\n    ? (existingContext.skills as SettingsRecord[])\n    : [];\n  const disabledSkills = enablement.disabledSkills ?? [];\n  const disabledSkillNames = new Set(disabledSkills);\n  const isSkillEnabled = buildSkillEnablementFilter(enablement);\n\n  // The bundled catalog is allow-listed, not deny-listed: it is a build-time\n  // snapshot of ~60 skills, so a deny-list puts every future addition into\n  // every system prompt (OpenHands#16302). Skills the agent context already\n  // carries are user-authored and stay opt-out. A skill the opening message\n  // invokes by name overrides both, for this conversation only.\n  const mergedSkills = [\n    ...existingSkills.filter(\n      (skill) =>\n        typeof skill.name !== \"string\" || !disabledSkillNames.has(skill.name),\n    ),\n    ...buildBundledSkills().filter(\n      (skill) =>\n        skill.name === invokedCatalogSkill || isSkillEnabled(skill.name),\n    ),\n  ];\n\n  return {\n    ...existingContext,\n    // Public skills are bundled at build time from the @openhands/extensions\n    // npm package and passed directly in agent_context.skills. Setting\n    // load_public_skills to false tells the agent-server SDK to skip its own\n    // extensions-repo clone — the frontend is the sole source of public\n    // skills now.\n    //\n    // Migration: the former VITE_LOAD_PUBLIC_SKILLS env var was removed\n    // because bundled skills have no clone latency. Users who previously set\n    // VITE_LOAD_PUBLIC_SKILLS=false to avoid clone delays no longer need it.\n    skills: mergedSkills,\n    load_public_skills: false,\n    load_user_skills: true,\n    load_project_skills: true,\n    // The backend also auto-loads user/project skills; the deny-list must\n    // travel with the context so those skills are excluded from the system\n    // prompt too. The allow-list has no counterpart to send: the backend\n    // loads no catalog skills of its own (`load_public_skills` is false).\n    disabled_skills: disabledSkills,\n    ...(runtimeServicesSuffix\n      ? { system_message_suffix: runtimeServicesSuffix }\n      : {}),\n  };\n}\n\nfunction isAcpAgent(settings: Settings): boolean {\n  const agentSettings = toRecord(settings.agent_settings);\n  return agentSettings.agent_kind === \"acp\";\n}\n\nfunction getAcpServerTag(settings: Settings): string | undefined {\n  const agentSettings = toRecord(settings.agent_settings);\n  const value = agentSettings.acp_server;\n  return typeof value === \"string\" && value.length > 0 ? value : undefined;\n}\n\nfunction resolveAcpCommand(agentSettings: SettingsRecord): unknown {\n  const cmd = agentSettings.acp_command;\n  const isEmpty = Array.isArray(cmd) && cmd.length === 0;\n  const noCommand = cmd === undefined;\n  if (!isEmpty && !noCommand) {\n    return cmd;\n  }\n\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const provider = getAcpProvider(serverKey);\n  return provider ? [...provider.default_command] : cmd;\n}\n\nfunction buildConfiguredAcpAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const payload: AgentSettingsPayload = {\n    agent_kind: \"acp\",\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      toSkillEnablement(settings),\n      findInvokedCatalogSkill(query),\n    ),\n  };\n\n  // TODO(#1019): set ``acp_isolate_data_dir: true`` here for a containerized\n  // backend so concurrent same-provider conversations don't race on a shared\n  // HOME. The SDK supports it (software-agent-sdk#3492), but the released\n  // ``@openhands/typescript-client`` (1.24.3) doesn't surface it on\n  // ``ACPAgentSettings`` yet, so sending it risks a validation error on older\n  // servers. Cloud grouping isolation is separate (agent-canvas#1016).\n\n  for (const key of ACP_SETTINGS_KEYS) {\n    // ``acp_model`` is resolved separately below so a saved ``null`` still\n    // falls back to the provider's default rather than being dropped.\n    if (key === \"acp_model\") continue;\n    // ``acp_env`` is deprecated — provider creds now route via ``request.secrets``.\n    if (key === \"acp_env\") continue;\n    const value =\n      key === \"acp_command\"\n        ? resolveAcpCommand(agentSettings)\n        : agentSettings[key];\n    if (value !== undefined && value !== null) {\n      payload[key] = value;\n    }\n  }\n\n  // ``mcp_config`` is a shared field (not in ACP_SETTINGS_KEYS): forward it\n  // so the ACP subprocess connects to the configured MCP servers at session\n  // creation. Only include it when it actually carries servers — an empty or\n  // malformed value is dropped rather than sending ``mcp_config: {}``.\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length > 0) {\n    payload.mcp_config = mcpConfig;\n  }\n\n  // Saved settings may carry ``acp_model: null`` (existing users predating\n  // the default-model registry, or saved fields the agent-server stripped).\n  // Fall back to the *preferred* default (Vertex-safe for Gemini) so the\n  // conversation starts with whatever the Settings → Agent UI shows — without\n  // that, the form's displayed default would silently not take effect at\n  // runtime until the user re-saved the page.\n  const serverKey =\n    typeof agentSettings.acp_server === \"string\"\n      ? agentSettings.acp_server\n      : undefined;\n  const effectiveModel = resolveEffectiveAcpModel({\n    configured: agentSettings.acp_model as string | null | undefined,\n    providerDefault: getAcpPreferredDefaultModel(serverKey),\n  });\n  if (effectiveModel) {\n    payload.acp_model = effectiveModel;\n  }\n\n  return payload;\n}\n\nfunction buildConfiguredOpenHandsAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  const agentSettings = toRecord(settings.agent_settings);\n  const llm = buildNormalizedLlmSettings(agentSettings.llm);\n\n  // Stream assistant tokens (parity with ACP agents). The agent-server only\n  // emits StreamingDeltaEvents for SDK LLM agents when an LLM has stream=True.\n  llm.stream = true;\n\n  const mcpConfig = toRecord(agentSettings.mcp_config);\n  if (Object.keys(mcpConfig).length === 0) {\n    delete agentSettings.mcp_config;\n  }\n\n  delete agentSettings.acp_server;\n  for (const key of ACP_SETTINGS_KEYS) {\n    delete agentSettings[key];\n  }\n  // ``acp_env`` is no longer a forwarded ACP setting (provider creds ride the\n  // Secrets panel), but a legacy value may linger on persisted settings —\n  // scrub it so it never leaks onto the OpenHands payload.\n  delete agentSettings.acp_env;\n\n  return {\n    ...agentSettings,\n    llm,\n    agent_context: buildAgentContext(\n      agentSettings,\n      runtimeServicesInfo,\n      toSkillEnablement(settings),\n      findInvokedCatalogSkill(query),\n    ),\n    tools: getAgentTools(agentSettings),\n  };\n}\n\nfunction buildConfiguredAgentSettings(\n  settings: Settings,\n  runtimeServicesInfo?: RuntimeServicesInfo | null,\n  query?: string,\n): AgentSettingsPayload {\n  return isAcpAgent(settings)\n    ? buildConfiguredAcpAgentSettings(settings, runtimeServicesInfo, query)\n    : buildConfiguredOpenHandsAgentSettings(\n        settings,\n        runtimeServicesInfo,\n        query,\n      );\n}\n\nfunction buildConfiguredConversationSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  workingDir?: string;\n}): ConversationSettingsPayload {\n  const { settings, query, conversationInstructions, plugins, workingDir } =\n    options;\n  const conversationSettings = toRecord(settings.conversation_settings);\n  const initialMessage = buildInitialMessage(query, conversationInstructions);\n\n  CONVERSATION_SETTINGS_METADATA_KEYS.forEach(\n    (key) => delete conversationSettings[key],\n  );\n\n  const payload: ConversationSettingsPayload = {\n    ...conversationSettings,\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: workingDir ?? getAgentServerWorkingDir(),\n    },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n    ...(plugins?.length\n      ? {\n          plugins: plugins.map((plugin) => ({\n            source: plugin.source,\n            ...(plugin.ref ? { ref: plugin.ref } : {}),\n            ...(plugin.repo_path ? { repo_path: plugin.repo_path } : {}),\n          })),\n        }\n      : {}),\n  };\n\n  return payload;\n}\n\ninterface LookupSecret {\n  kind: \"LookupSecret\";\n  url: string;\n  headers?: Record<string, string>;\n  description?: string;\n}\n\n/** A custom secret's public identity — name + optional description, no value. */\ntype CustomSecretInput = { name: string; description?: string };\n\ntype StartConversationPayloadBase = Record<string, unknown> & {\n  workspace: LocalWorkspacePayload;\n  confirmation_policy: SettingsRecord;\n  security_analyzer?: SettingsRecord;\n  initial_message?: InitialMessagePayload;\n  max_iterations: number;\n  stuck_detection: true;\n  autotitle: boolean;\n  title_llm_profile?: string;\n  worktree: boolean;\n  secrets_encrypted?: true;\n  conversation_id?: string;\n  parent_conversation_id?: string;\n  secrets?: Record<string, LookupSecret>;\n  tags?: Record<string, string>;\n  client_tools: ClientToolSpec[];\n  tool_module_qualnames?: Record<string, string>;\n};\n\ntype AgentSettingsStartConversationPayload = StartConversationPayloadBase & {\n  // Omitted when launching via ``agent_profile_id`` — the two are mutually\n  // exclusive agent sources; the server resolves the profile server-side.\n  agent_settings?: AgentSettingsPayload;\n  agent_profile_id?: string;\n  agent?: never;\n};\n\n// The local planner bypasses agent assembly entirely and sends a raw agent\n// spec, so neither of the two managed agent sources applies.\ntype RawAgentStartConversationPayload = StartConversationPayloadBase & {\n  agent: SettingsRecord;\n  agent_settings?: never;\n  agent_profile_id?: never;\n  parent_conversation_id?: string;\n};\n\nexport interface StartConversationOptions {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  // Links the new conversation to an existing one as its child. The\n  // agent-server requires the parent to exist and to share this\n  // conversation's requested `workspace.working_dir` (software-agent-sdk\n  // #4188, agent-server >= 1.37.1); older servers ignore the field.\n  parentConversationId?: string;\n  workingDir?: string;\n  worktree?: boolean;\n  encryptedAgentSettings?: Record<string, SettingsValue>;\n  encryptedConversationSettings?: Record<string, SettingsValue>;\n  secretsEncrypted?: boolean;\n  customSecrets?: CustomSecretInput[];\n  // When set, the conversation launches from this AgentProfile (resolved\n  // server-side) instead of an inline ``agent_settings`` dump (#3727).\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n  runtimeServicesInfo?: RuntimeServicesInfo | null;\n  workspaceHookConfig?: HookConfig | null;\n}\n\n/**\n * Build the `request.secrets` map shared by the standard and planning\n * conversation builders. Every saved secret rides as a LookupSecret the\n * agent-server resolves from its own store at spawn time — `request.secrets` is\n * the sole channel, uniform for ACP and non-ACP (agent-canvas#1039). For ACP the\n * resolution runs off the event loop (software-agent-sdk#3510, >=1.25.0), so the\n * loopback fetch can't deadlock. Returns `undefined` when there are no custom\n * secrets so callers can omit the field.\n */\nfunction buildCustomSecrets(\n  customSecrets: CustomSecretInput[] | undefined,\n): Record<string, LookupSecret> | undefined {\n  if (!customSecrets?.length) return undefined;\n\n  const backend = getEffectiveLocalBackend();\n  const headers = backend ? buildAuthHeaders(backend) : {};\n\n  const secrets: Record<string, LookupSecret> = {};\n  for (const secret of customSecrets) {\n    const lookupSecret: LookupSecret = {\n      kind: \"LookupSecret\",\n      url: `/api/settings/secrets/${encodeURIComponent(secret.name)}`,\n      description: secret.description,\n    };\n    if (Object.keys(headers).length > 0) {\n      lookupSecret.headers = headers;\n    }\n    secrets[secret.name] = lookupSecret;\n  }\n  return secrets;\n}\n\nexport function buildStartConversationRequest(\n  options: StartConversationOptions,\n): AgentSettingsStartConversationPayload {\n  const sourceAgentSettings = options.encryptedAgentSettings\n    ? { ...options.settings, agent_settings: options.encryptedAgentSettings }\n    : options.settings;\n\n  const acpMode = isAcpAgent(sourceAgentSettings);\n  const launchAgentKind = options.agentProfileId\n    ? options.agentProfileKind\n    : acpMode\n      ? \"acp\"\n      : \"openhands\";\n  const agentSettings = buildConfiguredAgentSettings(\n    sourceAgentSettings,\n    options.runtimeServicesInfo,\n    options.query,\n  );\n  const acpServerTag = acpMode\n    ? getAcpServerTag(sourceAgentSettings)\n    : undefined;\n\n  const sourceConversationOptions = options.encryptedConversationSettings\n    ? {\n        ...options,\n        settings: {\n          ...options.settings,\n          conversation_settings: options.encryptedConversationSettings,\n        },\n      }\n    : options;\n\n  const conversationSettings = buildConfiguredConversationSettings(\n    sourceConversationOptions,\n  );\n\n  const payload: AgentSettingsStartConversationPayload = {\n    // ``agent_profile_id`` and ``agent_settings`` are mutually exclusive agent\n    // sources; the profile path lets the server resolve the profile (#3727).\n    //\n    // Enrichment boundary: on the profile path the server rebuilds the agent\n    // purely from the stored profile fields, so the client-owned enrichments\n    // this adapter folds into ``agent_settings`` do NOT apply. The exec toolset\n    // (terminal/file_editor/task_tracker) and public-skill loading are the\n    // server/SDK's responsibility to restore on the profile path — tracked in\n    // software-agent-sdk#3967 (profile resolution must attach the default\n    // toolset + public skills, else a profile-launched OpenHands agent has only\n    // Finish/Think). The dev ``RUNTIME_SERVICES`` system-message suffix remains\n    // agent-settings-only; the Canvas UI tool is a top-level client tool and\n    // therefore works on both inline-agent and profile launch paths.\n    //\n    // Persistent memory is NOT on that boundary: ``load_memory`` is a global\n    // user preference, so the agent-server stamps the stored\n    // ``agent_settings.agent_context.load_memory`` onto the profile-resolved\n    // agent the same way it already applies the global ``mcp_config``. The\n    // toggle therefore applies to both launch paths, and the client must not\n    // re-send it here (``agent_profile_id`` and ``agent_settings`` are\n    // mutually exclusive).\n    ...(options.agentProfileId\n      ? { agent_profile_id: options.agentProfileId }\n      : { agent_settings: agentSettings }),\n    workspace: conversationSettings.workspace,\n    // The agent-server caches each client tool's schema per tool *name* for the\n    // life of the process and rejects a re-registration with a different schema\n    // (`ClientToolSchemaConflictError`). Editing either schema below therefore\n    // requires restarting a long-running dev agent-server before new\n    // conversations can start.\n    client_tools:\n      launchAgentKind === \"openhands\"\n        ? [CANVAS_UI_CLIENT_TOOL, LAUNCH_CHILD_CONVERSATION_CLIENT_TOOL]\n        : [],\n    confirmation_policy:\n      getConversationConfirmationPolicy(conversationSettings),\n    max_iterations: resolveMaxIterations(conversationSettings.max_iterations),\n    stuck_detection: true,\n    autotitle: true,\n    ...(options.titleLlmProfile\n      ? { title_llm_profile: options.titleLlmProfile }\n      : {}),\n    worktree: options.worktree ?? true,\n  };\n\n  // Stamp the client source tag so the agent-server can attribute the\n  // conversation to Canvas in telemetry (conversation_source = \"canvas\").\n  // A profile launch resolves the ACP server server-side, so don't stamp the\n  // tag from current settings (it may not match the launched profile).\n  if (!options.agentProfileId && acpServerTag) {\n    payload.tags = {\n      [ACP_SERVER_TAG_KEY]: acpServerTag,\n      [CLIENT_SOURCE_TAG_KEY]: AGENT_CANVAS_SOURCE,\n    };\n  } else {\n    payload.tags = { [CLIENT_SOURCE_TAG_KEY]: AGENT_CANVAS_SOURCE };\n  }\n\n  // ``secrets_encrypted`` makes the agent-server decrypt request secrets at\n  // conversation start. Non-ACP conversations need it for encrypted LLM keys.\n  // ACP normally carries provider credentials as LookupSecrets, so avoid\n  // forcing a cipher on fresh ACP-only backends. The exception is MCP:\n  // encrypted settings round-trip mcp_config secrets as Fernet tokens,\n  // and ACP forwards mcp_config directly to the subprocess.\n  if (\n    !options.agentProfileId &&\n    options.secretsEncrypted &&\n    (!acpMode || hasEncryptedMcpSecrets(agentSettings.mcp_config))\n  ) {\n    payload.secrets_encrypted = true;\n  }\n\n  if (options.conversationId) {\n    payload.conversation_id = options.conversationId;\n  }\n\n  if (options.parentConversationId) {\n    payload.parent_conversation_id = options.parentConversationId;\n  }\n\n  const securityAnalyzer =\n    getConversationSecurityAnalyzer(conversationSettings);\n  if (securityAnalyzer) {\n    payload.security_analyzer = securityAnalyzer;\n  }\n\n  if (conversationSettings.initial_message) {\n    payload.initial_message = conversationSettings.initial_message;\n  }\n\n  if (conversationSettings.plugins) {\n    payload.plugins = conversationSettings.plugins;\n  }\n\n  if (conversationSettings.hook_config) {\n    payload.hook_config = conversationSettings.hook_config;\n  } else if (options.workspaceHookConfig) {\n    payload.hook_config = options.workspaceHookConfig;\n  }\n\n  const toolModuleQualnames = {\n    ...((conversationSettings.tool_module_qualnames as\n      | Record<string, string>\n      | undefined) ?? {}),\n  };\n  delete toolModuleQualnames[LEGACY_CANVAS_UI_TOOL_NAME];\n  delete toolModuleQualnames[CANVAS_UI_CLIENT_TOOL_NAME];\n  delete toolModuleQualnames[LAUNCH_CHILD_CONVERSATION_TOOL_NAME];\n  if (Object.keys(toolModuleQualnames).length > 0) {\n    payload.tool_module_qualnames = toolModuleQualnames;\n  }\n\n  if (conversationSettings.agent_definitions) {\n    payload.agent_definitions = conversationSettings.agent_definitions;\n  }\n\n  const secrets = buildCustomSecrets(options.customSecrets);\n  if (secrets) {\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\nexport function buildStartPlanningConversationRequest(options: {\n  encryptedAgentSettings: Record<string, SettingsValue>;\n  workingDir: string;\n  parentConversationId: string;\n  initialMessage?: string;\n  secretsEncrypted?: boolean;\n  customSecrets?: CustomSecretInput[];\n  /** Mirrors the parent's configured `conversation_settings.max_iterations` — see DEFAULT_MAX_ITERATIONS. */\n  maxIterations?: number;\n  /** Mirrors the code agent's skill filtering — see buildConfiguredOpenHandsAgentSettings. */\n  skillEnablement?: SkillEnablement;\n}): RawAgentStartConversationPayload {\n  const agentSettings = toRecord(options.encryptedAgentSettings);\n  const llm = buildNormalizedLlmSettings(agentSettings.llm);\n  // Stream assistant tokens, matching the code agent (see\n  // buildConfiguredOpenHandsAgentSettings) — otherwise the agent-server never\n  // emits StreamingDeltaEvents for the planner and its replies would appear\n  // all at once instead of token-by-token.\n  llm.stream = true;\n\n  const planPath = buildPlanPath(options.workingDir);\n\n  // Put the planner's directive + boundaries in the system prompt (matching the\n  // OpenHands app-server's PLANNING_AGENT_INSTRUCTION), preserving any suffix\n  // buildAgentContext already set (e.g. the runtime-services block).\n  const agentContext = buildAgentContext(\n    agentSettings,\n    undefined,\n    options.skillEnablement,\n  );\n  const existingSuffix = agentContext.system_message_suffix;\n  agentContext.system_message_suffix =\n    typeof existingSuffix === \"string\"\n      ? `${PLANNING_AGENT_INSTRUCTION}\\n\\n${existingSuffix}`\n      : PLANNING_AGENT_INSTRUCTION;\n\n  // Idle planner: \"Create a Plan\" only switches to plan mode and provisions\n  // this conversation; the user sends the first message themselves, so nothing\n  // is injected into the chat. An explicit initialMessage is still honored.\n  const initialMessage = buildInitialMessage(options.initialMessage);\n\n  const payload: RawAgentStartConversationPayload = {\n    agent: {\n      kind: \"Agent\",\n      llm,\n      tools: [\n        { name: \"glob\", params: {} },\n        { name: \"grep\", params: {} },\n        {\n          name: PLANNING_FILE_EDITOR_TOOL_NAME,\n          params: { plan_path: planPath },\n        },\n      ],\n      system_prompt_filename: PLANNING_SYSTEM_PROMPT_FILENAME,\n      system_prompt_kwargs: { plan_structure: PLAN_STRUCTURE_TEXT },\n      // agent_context (skills + project context) is intentionally included so\n      // the planner shares the code agent's project context. This goes beyond\n      // the bare SDK `get_planning_agent()` preset (which sets no context); it\n      // mirrors how the frontend builds every agent, so the local planner is\n      // not context-starved relative to the code agent.\n      agent_context: agentContext,\n      // Mirror the SDK planning preset's condenser (openhands-tools preset\n      // `get_planning_condenser`): a larger rolling window and more pinned\n      // initial context than the default, with its own usage_id so its\n      // summarization LLM calls are attributed separately. The planning\n      // conversation is sent as a raw agent spec (it bypasses the agent-server's\n      // default agent assembly), so without this it would never condense —\n      // diverging from the canonical planning agent on long sessions.\n      condenser: {\n        kind: \"LLMSummarizingCondenser\",\n        llm: { ...llm, usage_id: \"planning_condenser\" },\n        max_size: 100,\n        keep_first: 6,\n      },\n    },\n    workspace: {\n      kind: \"LocalWorkspace\",\n      working_dir: options.workingDir,\n    },\n    // No Canvas UI client tool: the planner's only output is PLAN.md, which the\n    // Planner tab surfaces on its own via PlanningFileEditorObservation. Handing\n    // it the panel-control tool would only let it navigate the right-side panel\n    // away from the plan the user is reading.\n    client_tools: [],\n    confirmation_policy: { kind: \"NeverConfirm\" },\n    max_iterations: options.maxIterations ?? DEFAULT_MAX_ITERATIONS,\n    stuck_detection: true,\n    autotitle: false,\n    worktree: false,\n    // Two independent links to the parent, for two different jobs:\n    //\n    // - ``parent_conversation_id`` is the server-owned relationship (SDK\n    //   #4188, agent-server >= 1.37.1). The parent's ``sub_conversation_ids``\n    //   is derived from it, so the planner is recoverable from the server on\n    //   any browser and after storage loss. Older agent-servers ignore the\n    //   field (``StartConversationRequest`` does not forbid extras), which is\n    //   why the client-side metadata hint is still written as a fallback.\n    // - The tag is what hides the helper from the conversation list; it is\n    //   also the only marker on agent-servers too old for the parent link.\n    parent_conversation_id: options.parentConversationId,\n    tags: { [LOCAL_PLANNER_PARENT_TAG_KEY]: options.parentConversationId },\n    ...(initialMessage ? { initial_message: initialMessage } : {}),\n  };\n\n  if (options.secretsEncrypted) {\n    payload.secrets_encrypted = true;\n  }\n\n  const secrets = buildCustomSecrets(options.customSecrets);\n  if (secrets) {\n    payload.secrets = secrets;\n  }\n\n  return payload;\n}\n\n/**\n * Resolve the encrypted LLM config for a named LLM profile, so a planner can\n * run the parent conversation's *current* model (`active_profile`, tracking\n * `/model` and `SwitchLLMTool`) rather than a stale launch-time value.\n * Returns `null` — caller falls back further — if unknown or lookup fails.\n */\nasync function resolveLlmProfileSettings(\n  profileName: string,\n): Promise<SettingsRecord | null> {\n  try {\n    const { default: ProfilesService } =\n      await import(\"./profiles-service/profiles-service.api\");\n    // ``encrypted`` matches ``secrets_encrypted`` on the payload: the\n    // agent-server decrypts with the same cipher it encrypted with.\n    const detail = await ProfilesService.getProfile(profileName, \"encrypted\");\n    return isPlainRecord(detail.config) ? detail.config : null;\n  } catch (error) {\n    console.warn(\n      `Falling back: could not resolve LLM profile ${profileName}`,\n      error,\n    );\n    return null;\n  }\n}\n\n/**\n * Resolve the encrypted LLM config the given AgentProfile launches with, as a\n * fallback for `resolveLlmProfileSettings`. AgentProfiles hold a reference\n * (`llm_profile_ref`), not credentials, so this is a two-hop lookup: profile\n * id -> llm profile name -> encrypted LLM config. Returns `null` — caller\n * falls back to global settings — for an unknown/ACP/dangling-ref profile or\n * a failed lookup, none of which should block plan creation outright.\n */\nasync function resolveAgentProfileLlmSettings(\n  agentProfileId: string,\n): Promise<SettingsRecord | null> {\n  try {\n    const { default: AgentProfilesService } =\n      await import(\"./agent-profiles-service/agent-profiles-service.api\");\n\n    const { profiles } = await AgentProfilesService.listProfiles();\n    const summary = profiles.find(\n      (profile) => profile.id === agentProfileId && profile.llm_profile_ref,\n    );\n    if (!summary?.llm_profile_ref) return null;\n\n    return await resolveLlmProfileSettings(summary.llm_profile_ref);\n  } catch (error) {\n    console.warn(\n      `Falling back to global agent settings: could not resolve the LLM for agent profile ${agentProfileId}`,\n      error,\n    );\n    return null;\n  }\n}\n\nexport async function buildStartPlanningConversationRequestWithEncryptedSettings(options: {\n  workingDir: string;\n  parentConversationId: string;\n  /**\n   * The parent conversation's current LLM profile (`AppConversation.active_profile`,\n   * tracking `/model` and `SwitchLLMTool`). Takes priority over\n   * `parentAgentProfileId` so a model switch on the parent carries over to a\n   * planner created afterward, without a *different* conversation's global\n   * profile activation repointing it.\n   */\n  parentActiveProfileName?: string | null;\n  /**\n   * `launched_agent_profile.agent_profile_id` of the parent, when started\n   * from an AgentProfile. Fallback for when `parentActiveProfileName` can't\n   * be resolved (e.g. an ACP parent, whose `active_profile` is a stale\n   * launch-time snapshot rather than anything the ACP agent itself runs).\n   */\n  parentAgentProfileId?: string | null;\n  initialMessage?: string;\n}): Promise<RawAgentStartConversationPayload> {\n  const { SecretsService } = await import(\"./secrets-service\");\n\n  const [settingsResult, customSecrets] = await Promise.all([\n    SettingsService.getSettingsForConversation(),\n    SecretsService.getSecrets(),\n  ]);\n\n  const profileLlm =\n    (options.parentActiveProfileName\n      ? await resolveLlmProfileSettings(options.parentActiveProfileName)\n      : null) ??\n    (options.parentAgentProfileId\n      ? await resolveAgentProfileLlmSettings(options.parentAgentProfileId)\n      : null);\n  const encryptedAgentSettings: Record<string, SettingsValue> = profileLlm\n    ? { ...settingsResult.agentSettings, llm: profileLlm as SettingsValue }\n    : settingsResult.agentSettings;\n\n  await assertSubscriptionAuthReady(encryptedAgentSettings);\n\n  // Mirror the code agent's configured cap (see DEFAULT_MAX_ITERATIONS) rather\n  // than hardcoding a different value the planner could silently stop against.\n  const maxIterations = resolveMaxIterations(\n    settingsResult.conversationSettings.max_iterations,\n  );\n\n  return buildStartPlanningConversationRequest({\n    ...options,\n    encryptedAgentSettings,\n    secretsEncrypted: settingsResult.secretsEncrypted,\n    customSecrets,\n    maxIterations,\n    skillEnablement: settingsResult.skillEnablement,\n  });\n}\n\nexport const SUBSCRIPTION_LOGIN_REQUIRED_ERROR =\n  \"Connect your ChatGPT subscription before starting a conversation with this LLM profile.\";\n\n/**\n * Throws if a ChatGPT subscription LLM profile is not connected.\n * Called before conversation creation and LLM profile switch only — not on\n * subsequent message sends or conversation resume. The agent-server must handle\n * mid-conversation token expiry gracefully.\n */\nexport async function assertSubscriptionAuthReady(\n  agentSettings: Record<string, unknown>,\n): Promise<void> {\n  const llm = toRecord(agentSettings.llm);\n  if (!isSubscriptionLlmConfig(llm)) return;\n\n  const status = await LLMSubscriptionService.getOpenAIStatus();\n  if (!status.connected) {\n    throw new Error(SUBSCRIPTION_LOGIN_REQUIRED_ERROR);\n  }\n}\n\nexport async function buildStartConversationRequestWithEncryptedSettings(options: {\n  settings: Settings;\n  query?: string;\n  conversationInstructions?: string;\n  plugins?: PluginSpec[];\n  conversationId?: string;\n  parentConversationId?: string;\n  workingDir?: string;\n  /** Workspace root for the hooks lookup, not the per-conversation `workingDir` (#16907). */\n  hooksProjectDir?: string;\n  worktree?: boolean;\n  agentProfileId?: string;\n  agentProfileKind?: AgentKind;\n  titleLlmProfile?: string;\n}): Promise<Record<string, unknown>> {\n  const [{ SecretsService }, { default: HooksService }] = await Promise.all([\n    import(\"./secrets-service\"),\n    import(\"./hooks-service\"),\n  ]);\n\n  const [\n    settingsResult,\n    customSecrets,\n    runtimeServicesInfo,\n    workspaceHookConfig,\n  ] = await Promise.all([\n    SettingsService.getSettingsForConversation(),\n    SecretsService.getSecrets(),\n    fetchBackendRuntimeServicesInfo(),\n    HooksService.loadWorkspaceHooks(options.hooksProjectDir),\n  ]);\n\n  const { agentSettings, conversationSettings, secretsEncrypted } =\n    settingsResult;\n\n  // A profile launch resolves the LLM server-side, so the current-settings\n  // subscription check doesn't apply (and can't see the profile's LLM).\n  if (!options.agentProfileId) {\n    await assertSubscriptionAuthReady(agentSettings);\n  }\n\n  return buildStartConversationRequest({\n    ...options,\n    encryptedAgentSettings: agentSettings,\n    encryptedConversationSettings: conversationSettings,\n    secretsEncrypted,\n    customSecrets,\n    runtimeServicesInfo,\n    workspaceHookConfig,\n  });\n}\n\nexport function emptyHooksResponse(): GetHooksResponse {\n  return { hooks: [] };\n}\n"],"mappings":"8xCAuIA,IAAM,GAAqB,CAAC,WAAY,cAAe,cAAc,EAC/D,EAAwB,mBACxB,EAAqB,gBAGrB,EAAyB,IAE/B,SAAS,EAAqB,EAAwB,CACpD,OAAO,OAAO,GAAU,SAAW,EAAQ,CAC7C,CAEA,SAAS,IAAsB,CAC7B,MAAO,EACT,CAkCA,SAAgB,EACd,EAC4B,CAC5B,GAAI,OAAO,GAAU,SAAU,CAC7B,IAAM,EAAM,EAAM,KAAK,EACvB,GAAI,CAAC,EAAK,OAAO,KACjB,GAAI,CACF,OAAO,EAAyB,KAAK,MAAM,CAAG,CAAC,CACjD,MAAQ,CACN,OAAO,IACT,CACF,CAEA,GAAI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EAC5D,OAAO,KAGT,IAAM,EAAS,EAEf,MADI,CAAC,EAAO,UAAY,OAAO,EAAO,UAAa,SAAiB,KAC7D,CACT,CAEA,eAAsB,GAAuE,CAC3F,IAAI,EACJ,GAAI,CACF,EAAgB,EAAA,4BAA4B,CAAE,QAAS,GAAK,CAAC,CAC/D,MAAQ,CACN,OAAO,IACT,CAEA,IAAM,EAAS,EACb,EAAA,yBAAyB,CAAE,KAAM,EAAc,IAAK,CAAC,GAAG,gBAC1D,EACA,GAAI,EAAQ,OAAO,EAEnB,GAAI,CAEF,OAAO,GACJ,MAFsB,IAAI,EAAA,aAAa,CAAa,EAAE,cAAc,GAEtB,gBACjD,CACF,MAAQ,CACN,OAAO,IACT,CACF,CAmBA,SAAgB,EACd,EACoB,CACpB,IAAM,EAAO,EAAyB,CAAmB,EACzD,GAAI,CAAC,GAAM,SAAU,OAErB,IAAM,EAAkB,CAAC,EACzB,EAAM,KAAK,oBAAoB,EAC3B,EAAK,KACP,EAAM,KACJ,gEAAgE,EAAK,KAAK,QAC5E,EAEA,EAAM,KAAK,mDAAmD,EAEhE,EAAM,KACJ,2EACA,iEACA,EACF,EAEA,GAAM,CAAE,eAAc,UAAS,cAAe,EAAK,SAC7C,CAAE,YAAa,EAAK,SAEtB,GAAc,gBAChB,EAAM,KACJ,yBAAyB,EAAa,iBACtC,OAAO,EAAa,aAAe,6CACrC,EAEE,GAAS,gBACX,EAAM,KACJ,cAAc,EAAQ,iBACtB,OAAO,EAAQ,aAAe,mDAChC,EAEE,GAAU,gBACZ,EAAM,KACJ,eAAe,EAAS,iBACxB,OAAO,EAAS,aAAe,wBACjC,EAEE,GAAY,gBACd,EAAM,KACJ,yBAAyB,EAAW,iBACpC,OAAO,EAAW,aAAe,kCACnC,EACI,EAAW,UACb,EAAM,KAAK,gBAAgB,EAAW,UAAU,EAE9C,EAAW,aACb,EAAM,KAAK,gBAAgB,EAAW,aAAa,EAEjD,EAAW,cAGb,EAAM,KACJ,4CAA4C,EAAW,aAAa,EACtE,GAGF,EAAM,KACJ,kFACF,EAQF,IAAM,EAAiB,GAAc,eAarC,OAZA,EAAM,KACJ,GACA,2EACF,EACI,GACF,EAAM,KACJ,kBAAkB,EAAe,0CACjC,yDACF,EAEF,EAAM,KAAK,qBAAqB,EAEzB,EAAM,KAAK;CAAI,CACxB,CAEA,SAAgB,GAAkB,EAAgC,CAIhE,GAAM,CAAE,QAAS,EAAA,4BAA4B,EAC7C,MAAO,GAAG,EAAK,qBAAqB,GACtC,CAKA,SAAgB,EAA4B,EAAgC,CAC1E,MAAO,gBAAgB,EAAe,MAAM,EAAG,CAAC,GAClD,CAEA,SAAgB,EACd,EACiB,CACjB,IAAM,EAAW,EAAA,8BAA8B,EAAK,EAAE,EAKhD,EAAQ,EAAK,OAAO,OAAS,WAQ7B,EAAY,EACb,EAAK,MAAA,WAA8B,EAAK,OAAO,YAAc,KAC9D,KACJ,MAAO,CACL,GAAI,EAAK,GACT,mBAAoB,KACpB,oBAAqB,GAAU,qBAAuB,KACtD,gBAAiB,GAAU,iBAAmB,KAC9C,aAAc,GAAU,cAAgB,KACxC,mBAAoB,GAAU,oBAAsB,KACpD,eAAgB,GAAU,gBAAkB,KAC5C,MAAO,EAAK,OAAO,KAAK,EACpB,EAAK,MACL,EAA4B,EAAK,EAAE,EACvC,QAAS,KACT,UAAW,CAAC,EACZ,WAAY,EAAQ,MAAQ,YAC5B,WAAY,EACZ,KAAM,EAAK,MAAQ,KACnB,uBAAwB,EAAK,wBAA0B,KAKvD,UAAW,EACP,EAAA,yBAAyB,CACvB,YAAa,EAAK,mBAClB,UAAW,EAAK,iBAChB,WAAY,EAAK,OAAO,UACxB,OAAQ,EAAK,OAAO,KAAK,KAC3B,CAAC,EACA,EAAK,OAAO,KAAK,OAAS,EAAA,iBAAiB,UAChD,QAAS,EAAK,QACV,CACE,iBAAkB,EAAK,QAAQ,kBAAoB,KACnD,oBAAqB,EAAK,QAAQ,qBAAuB,KACzD,wBAAyB,EAAK,QAAQ,wBAClC,CACE,cACE,EAAK,QAAQ,wBAAwB,eAAiB,EACxD,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,kBACE,EAAK,QAAQ,wBAAwB,mBAAqB,EAC5D,mBACE,EAAK,QAAQ,wBAAwB,oBAAsB,EAC7D,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,EACzD,eACE,EAAK,QAAQ,wBAAwB,gBAAkB,CAC3D,EACA,IACN,EACA,EAAA,oBAAoB,EAAK,KAAK,EAClC,WAAY,EAAK,WACjB,WAAY,EAAK,WACjB,iBACG,EAAK,kBACN,EAAA,gBAAgB,KAClB,eAAiB,EAAK,gBAA2C,KACjE,iBAAkB,GAAkB,EAAK,EAAE,EAC3C,gBAAiB,EAAA,4BAA4B,EAAE,QAAU,KACzD,WAAY,KACZ,UAAW,CACT,YAAa,EAAK,WAAW,aAAe,EAAA,yBAAyB,CACvE,EACA,OAAQ,GACR,qBAAsB,EAAK,sBAAwB,CAAC,CACtD,CACF,CAEA,SAAgB,GAAmB,EAGX,CACtB,MAAO,CACL,MAAO,EAAK,MACT,OAAQ,GAAS,CAAC,EAAK,OAAO,EAAA,6BAA6B,EAC3D,IAAI,CAAiB,EACxB,aAAc,EAAK,cAAgB,IACrC,CACF,CA+BA,IAAa,EAAqB,YACrB,EAAwB,eACxB,EAAsB,cAEtB,EAA6B,oBAC7B,EAAwB,eACxB,EAA0B,iBAC1B,EAA4B,kBAO5B,GAAyC,CACpD,EACA,EACA,EACA,CACF,EAoBa,EAAsD,IAAI,IAAI,CACzE,EACA,EACA,EACA,EACA,EACA,EACA,QACA,eACA,YACA,OACA,aACA,kBACA,SACA,uBACA,YACA,cACA,EAAA,4BACF,CAAC,EAMY,GAAoD,CAAC,QAAQ,EAQ1E,SAAgB,GACd,EACyB,CACzB,GAAI,CAAC,EACH,MAAO,CAAC,EAKV,IAAM,EAAgB,GAAwB,CAC5C,IAAM,EAAQ,GAA+B,QAC3C,EAAI,KAAK,EAAE,YAAY,CACzB,EACA,OAAO,IAAU,GAAK,IAA2B,CACnD,EAEA,OAAO,OAAO,QAAQ,CAAI,EACvB,QACE,CAAC,EAAK,KACL,CAAC,EAA+B,IAAI,EAAI,KAAK,EAAE,YAAY,CAAC,GAC5D,OAAO,GAAU,WAGhB,IAAU,IAAM,EAAM,KAAK,EAAE,OAAS,EAC3C,EACC,MAAM,CAAC,GAAI,CAAC,KAAO,CAClB,IAAM,EAAQ,EAAa,CAAC,EACtB,EAAQ,EAAa,CAAC,EAI5B,OAHI,IAAU,EAGP,EAAE,cAAc,CAAC,EAFf,EAAQ,CAGnB,CAAC,CACL,CAEA,IAAM,EAAsB,SAEtB,EAAsC,IAAI,IAAI,CAClD,iBACA,iBACA,YACA,kBACA,kBACA,SACF,CAAC,EAED,SAAS,EAAS,EAAgC,CAKhD,MAJI,CAAC,GAAS,OAAO,GAAU,UAAY,MAAM,QAAQ,CAAK,EACrD,CAAC,EAGH,gBAAgB,CAAuB,CAChD,CAEA,SAAS,EAAsB,EAAoC,CACjE,GAAI,OAAO,GAAU,SACnB,OAGF,IAAM,EAAU,EAAM,KAAK,EAC3B,OAAO,EAAQ,OAAS,EAAI,EAAU,IAAA,EACxC,CAEA,SAAS,EAA2B,EAAgC,CAClE,IAAM,EAAM,EAAS,CAAK,EAE1B,EAAI,MACF,OAAO,EAAI,OAAU,UAAY,EAAI,MAAM,KAAK,EAAE,OAAS,EACvD,EAAI,MACJ,EAAA,iBAAiB,UAEvB,IAAM,EAAS,EAAsB,EAAI,OAAO,EAC5C,EACF,EAAI,QAAU,EAEd,OAAO,EAAI,QAGb,IAAM,EAAU,EAAsB,EAAI,QAAQ,EAgBlD,OAfI,EACF,EAAI,SAAW,EAEf,OAAO,EAAI,SAGT,EAAA,wBAAwB,CAAG,GAC7B,EAAI,UAAY,EAAA,2BAChB,EAAI,oBAAsB,EAAA,2BAC1B,OAAO,EAAI,UAEX,OAAO,EAAI,UACX,OAAO,EAAI,qBAGN,CACT,CAEA,SAAS,EAAc,EAAkD,CACvE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAS,EAAmB,EAAyB,CAUnD,OATI,OAAO,GAAU,SACZ,EAAM,WAAW,CAAmB,EAEzC,MAAM,QAAQ,CAAK,EACd,EAAM,KAAK,CAAkB,EAElC,EAAc,CAAK,EACd,OAAO,OAAO,CAAK,EAAE,KAAK,CAAkB,EAE9C,EACT,CAEA,SAAS,EAAuB,EAA6B,CAK3D,OAJK,EAAc,CAAS,EAIrB,OAAO,OAAO,CAAS,EAAE,KAAK,CAAkB,EAH9C,EAIX,CAEA,SAAS,EACP,EACA,CASA,OARI,EAAqB,oBAAsB,GAI3C,EAAqB,oBAAsB,MACtC,CAAE,KAAM,eAAgB,UAAW,OAAQ,gBAAiB,EAAK,EAGnE,CAAE,KAAM,eAAgB,EAPtB,CAAE,KAAM,cAAe,CAQlC,CAEA,SAAS,GAAgC,EAAsC,CAC7E,OAAQ,EAAqB,kBAA7B,CACE,IAAK,MACH,MAAO,CAAE,KAAM,qBAAsB,EACvC,IAAK,UACH,MAAO,CAAE,KAAM,yBAA0B,EAC3C,IAAK,cACH,MAAO,CAAE,KAAM,4BAA6B,EAC9C,QACE,MACJ,CACF,CAEA,SAAS,GACP,EAC6C,CAC7C,MACE,CAAC,CAAC,GACF,OAAO,GAAU,UACjB,CAAC,MAAM,QAAQ,CAAK,GACpB,OAAQ,EAA6B,MAAS,QAElD,CAEA,SAAS,EAAkB,EAAc,EAA+B,CAYtE,OAXI,IAAS,EACJ,GAAoB,GAAK,EAAA,2BAA2B,CAAI,EAG7D,IAAS,EAET,EAAc,oBAAsB,IACpC,EAAA,2BAA2B,CAAI,EAI5B,EACT,CAEA,SAAS,GAAc,EAAgD,CACrE,IAAM,EAAQ,IAAI,IAElB,IAAK,IAAM,KAAQ,GACb,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAK,IAAM,IAAQ,CAAC,EAAuB,CAAkB,EACvD,EAAkB,EAAM,CAAa,GACvC,EAAM,IAAI,EAAM,CAAE,OAAM,OAAQ,CAAC,CAAE,CAAC,EAIxC,IAAM,EAAkB,EAAc,MACtC,GACE,MAAM,QAAQ,CAAe,GAC7B,EAAgB,MAAO,GAAS,GAAa,CAAI,CAAC,MAE7C,IAAM,KAAQ,EACb,EAAkB,EAAK,KAAM,CAAa,GAC5C,EAAM,IAAI,EAAK,KAAM,CACnB,KAAM,EAAK,KACX,OAAQ,EAAS,EAAK,MAAM,CAC9B,CAAC,EAKP,OAAO,MAAM,KAAK,EAAM,OAAO,CAAC,CAClC,CAEA,SAAS,EACP,EACA,EAC8B,CAC9B,IAAM,EAAQ,CAAC,GAAO,KAAK,EAAG,GAA0B,KAAK,CAAC,EAAE,OAC9D,OACF,EAKA,OAJI,EAAM,SAAW,EACZ,KAGF,CACL,KAAM,OACN,QAAS,CAAC,CAAE,KAAM,OAAQ,KAAM,EAAM,KAAK;;CAAM,CAAE,CAAC,EACpD,IAAK,EACP,CACF,CA2BA,SAAS,IAAqC,CAC5C,OAAO,EAAA,QAAe,IAAK,GAAU,CACnC,IAAM,EACJ,EAAM,UAAU,OAAS,EACrB,CAAE,KAAM,UAAW,SAAU,EAAM,QAAS,EAC5C,KASN,MAAO,CACL,KAAM,EAAM,KACZ,QAAS,EAAM,QACf,UACA,OAAA,SACA,YAAa,EAAM,aAAe,KAClC,sBAAuB,GACvB,GAAI,EAAM,QAAU,CAAE,QAAS,EAAM,OAAQ,EAAI,CAAC,EAClD,GAAI,EAAM,cAAgB,CAAE,cAAe,EAAM,aAAc,EAAI,CAAC,CACtE,CACF,CAAC,CACH,CAEA,SAAS,EACP,EACA,EACA,EAA8B,CAAC,EAC/B,EACgB,CAChB,IAAM,EACJ,EAAiC,CAAmB,EAChD,EAAkB,EAAS,EAAc,aAAa,EAItD,EAAiB,MAAM,QAAQ,EAAgB,MAAM,EACtD,EAAgB,OACjB,CAAC,EACC,EAAiB,EAAW,gBAAkB,CAAC,EAC/C,EAAqB,IAAI,IAAI,CAAc,EAC3C,EAAiB,EAAA,2BAA2B,CAAU,EAOtD,EAAe,CACnB,GAAG,EAAe,OACf,GACC,OAAO,EAAM,MAAS,UAAY,CAAC,EAAmB,IAAI,EAAM,IAAI,CACxE,EACA,GAAG,GAAmB,EAAE,OACrB,GACC,EAAM,OAAS,GAAuB,EAAe,EAAM,IAAI,CACnE,CACF,EAEA,MAAO,CACL,GAAG,EAUH,OAAQ,EACR,mBAAoB,GACpB,iBAAkB,GAClB,oBAAqB,GAKrB,gBAAiB,EACjB,GAAI,EACA,CAAE,sBAAuB,CAAsB,EAC/C,CAAC,CACP,CACF,CAEA,SAAS,EAAW,EAA6B,CAE/C,OADsB,EAAS,EAAS,cACjC,EAAc,aAAe,KACtC,CAEA,SAAS,GAAgB,EAAwC,CAE/D,IAAM,EADgB,EAAS,EAAS,cAC1B,EAAc,WAC5B,OAAO,OAAO,GAAU,UAAY,EAAM,OAAS,EAAI,EAAQ,IAAA,EACjE,CAEA,SAAS,GAAkB,EAAwC,CACjE,IAAM,EAAM,EAAc,YAG1B,GAAI,EAFY,MAAM,QAAQ,CAAG,GAAK,EAAI,SAAW,IACnC,IAAQ,IAAA,GAExB,OAAO,EAOT,IAAM,EAAW,EAAA,eAHf,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,EACmC,EACzC,OAAO,EAAW,CAAC,GAAG,EAAS,eAAe,EAAI,CACpD,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAgC,CACpC,WAAY,MACZ,cAAe,EACb,EACA,EACA,EAAA,kBAAkB,CAAQ,EAC1B,EAAA,wBAAwB,CAAK,CAC/B,CACF,EASA,IAAK,IAAM,KAAO,EAAA,kBAAmB,CAKnC,GAFI,IAAQ,aAER,IAAQ,UAAW,SACvB,IAAM,EACJ,IAAQ,cACJ,GAAkB,CAAa,EAC/B,EAAc,GAChB,GAAiC,OACnC,EAAQ,GAAO,EAEnB,CAMA,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,OAAS,IAClC,EAAQ,WAAa,GASvB,IAAM,EACJ,OAAO,EAAc,YAAe,SAChC,EAAc,WACd,IAAA,GACA,EAAiB,EAAA,yBAAyB,CAC9C,WAAY,EAAc,UAC1B,gBAAiB,EAAA,4BAA4B,CAAS,CACxD,CAAC,EAKD,OAJI,IACF,EAAQ,UAAY,GAGf,CACT,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,IAAM,EAAgB,EAAS,EAAS,cAAc,EAChD,EAAM,EAA2B,EAAc,GAAG,EAIxD,EAAI,OAAS,GAEb,IAAM,EAAY,EAAS,EAAc,UAAU,EAC/C,OAAO,KAAK,CAAS,EAAE,SAAW,GACpC,OAAO,EAAc,WAGvB,OAAO,EAAc,WACrB,IAAK,IAAM,KAAO,EAAA,kBAChB,OAAO,EAAc,GAOvB,OAFA,OAAO,EAAc,QAEd,CACL,GAAG,EACH,MACA,cAAe,EACb,EACA,EACA,EAAA,kBAAkB,CAAQ,EAC1B,EAAA,wBAAwB,CAAK,CAC/B,EACA,MAAO,GAAc,CAAa,CACpC,CACF,CAEA,SAAS,GACP,EACA,EACA,EACsB,CACtB,OAAO,EAAW,CAAQ,EACtB,GAAgC,EAAU,EAAqB,CAAK,EACpE,GACE,EACA,EACA,CACF,CACN,CAEA,SAAS,GAAoC,EAMb,CAC9B,GAAM,CAAE,WAAU,QAAO,2BAA0B,UAAS,cAC1D,EACI,EAAuB,EAAS,EAAS,qBAAqB,EAC9D,EAAiB,EAAoB,EAAO,CAAwB,EAwB1E,OAtBA,EAAoC,QACjC,GAAQ,OAAO,EAAqB,EACvC,EAoBO,CAjBL,GAAG,EACH,UAAW,CACT,KAAM,iBACN,YAAa,GAAc,EAAA,yBAAyB,CACtD,EACA,GAAI,EAAiB,CAAE,gBAAiB,CAAe,EAAI,CAAC,EAC5D,GAAI,GAAS,OACT,CACE,QAAS,EAAQ,IAAK,IAAY,CAChC,OAAQ,EAAO,OACf,GAAI,EAAO,IAAM,CAAE,IAAK,EAAO,GAAI,EAAI,CAAC,EACxC,GAAI,EAAO,UAAY,CAAE,UAAW,EAAO,SAAU,EAAI,CAAC,CAC5D,EAAE,CACJ,EACA,CAAC,CAGA,CACT,CAmFA,SAAS,EACP,EAC0C,CAC1C,GAAI,CAAC,GAAe,OAAQ,OAE5B,IAAM,EAAU,EAAA,yBAAyB,EACnC,EAAU,EAAU,EAAA,iBAAiB,CAAO,EAAI,CAAC,EAEjD,EAAwC,CAAC,EAC/C,IAAK,IAAM,KAAU,EAAe,CAClC,IAAM,EAA6B,CACjC,KAAM,eACN,IAAK,yBAAyB,mBAAmB,EAAO,IAAI,IAC5D,YAAa,EAAO,WACtB,EACI,OAAO,KAAK,CAAO,EAAE,OAAS,IAChC,EAAa,QAAU,GAEzB,EAAQ,EAAO,MAAQ,CACzB,CACA,OAAO,CACT,CAEA,SAAgB,GACd,EACuC,CACvC,IAAM,EAAsB,EAAQ,uBAChC,CAAE,GAAG,EAAQ,SAAU,eAAgB,EAAQ,sBAAuB,EACtE,EAAQ,SAEN,EAAU,EAAW,CAAmB,EACxC,EAAkB,EAAQ,eAC5B,EAAQ,iBACR,EACE,MACA,YACA,EAAgB,GACpB,EACA,EAAQ,oBACR,EAAQ,KACV,EACM,EAAe,EACjB,GAAgB,CAAmB,EACnC,IAAA,GAYE,EAAuB,GAVK,EAAQ,8BACtC,CACE,GAAG,EACH,SAAU,CACR,GAAG,EAAQ,SACX,sBAAuB,EAAQ,6BACjC,CACF,EACA,CAIJ,EAEM,EAAiD,CAsBrD,GAAI,EAAQ,eACR,CAAE,iBAAkB,EAAQ,cAAe,EAC3C,CAAE,eAAgB,CAAc,EACpC,UAAW,EAAqB,UAMhC,aACE,IAAoB,YAChB,CAAC,EAAA,sBAAuB,GAAA,qCAAqC,EAC7D,CAAC,EACP,oBACE,EAAkC,CAAoB,EACxD,eAAgB,EAAqB,EAAqB,cAAc,EACxE,gBAAiB,GACjB,UAAW,GACX,GAAI,EAAQ,gBACR,CAAE,kBAAmB,EAAQ,eAAgB,EAC7C,CAAC,EACL,SAAU,EAAQ,UAAY,EAChC,EAMI,CAAC,EAAQ,gBAAkB,EAC7B,EAAQ,KAAO,EACZ,GAAqB,GACrB,GAAwB,CAC3B,EAEA,EAAQ,KAAO,EAAG,GAAwB,CAAoB,EAU9D,CAAC,EAAQ,gBACT,EAAQ,mBACP,CAAC,GAAW,EAAuB,EAAc,UAAU,KAE5D,EAAQ,kBAAoB,IAG1B,EAAQ,iBACV,EAAQ,gBAAkB,EAAQ,gBAGhC,EAAQ,uBACV,EAAQ,uBAAyB,EAAQ,sBAG3C,IAAM,EACJ,GAAgC,CAAoB,EAClD,IACF,EAAQ,kBAAoB,GAG1B,EAAqB,kBACvB,EAAQ,gBAAkB,EAAqB,iBAG7C,EAAqB,UACvB,EAAQ,QAAU,EAAqB,SAGrC,EAAqB,YACvB,EAAQ,YAAc,EAAqB,YAClC,EAAQ,sBACjB,EAAQ,YAAc,EAAQ,qBAGhC,IAAM,EAAsB,CAC1B,GAAK,EAAqB,uBAER,CAAC,CACrB,EACA,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,4BAC3B,OAAO,EAAoB,EAAA,qCACvB,OAAO,KAAK,CAAmB,EAAE,OAAS,IAC5C,EAAQ,sBAAwB,GAG9B,EAAqB,oBACvB,EAAQ,kBAAoB,EAAqB,mBAGnD,IAAM,EAAU,EAAmB,EAAQ,aAAa,EAKxD,OAJI,IACF,EAAQ,QAAU,GAGb,CACT,CAEA,SAAgB,GAAsC,EAWjB,CACnC,IAAM,EAAgB,EAAS,EAAQ,sBAAsB,EACvD,EAAM,EAA2B,EAAc,GAAG,EAKxD,EAAI,OAAS,GAEb,IAAM,EAAW,EAAA,cAAc,EAAQ,UAAU,EAK3C,EAAe,EACnB,EACA,IAAA,GACA,EAAQ,eACV,EACM,EAAiB,EAAa,sBACpC,EAAa,sBACX,OAAO,GAAmB,SACtB,GAAG,EAAA,2BAA2B,MAAM,IACpC,EAAA,2BAKN,IAAM,EAAiB,EAAoB,EAAQ,cAAc,EAE3D,EAA4C,CAChD,MAAO,CACL,KAAM,QACN,MACA,MAAO,CACL,CAAE,KAAM,OAAQ,OAAQ,CAAC,CAAE,EAC3B,CAAE,KAAM,OAAQ,OAAQ,CAAC,CAAE,EAC3B,CACE,KAAM,EAAA,+BACN,OAAQ,CAAE,UAAW,CAAS,CAChC,CACF,EACA,uBAAwB,EAAA,gCACxB,qBAAsB,CAAE,eAAgB,EAAA,mBAAoB,EAM5D,cAAe,EAQf,UAAW,CACT,KAAM,0BACN,IAAK,CAAE,GAAG,EAAK,SAAU,oBAAqB,EAC9C,SAAU,IACV,WAAY,CACd,CACF,EACA,UAAW,CACT,KAAM,iBACN,YAAa,EAAQ,UACvB,EAKA,aAAc,CAAC,EACf,oBAAqB,CAAE,KAAM,cAAe,EAC5C,eAAgB,EAAQ,eAAiB,EACzC,gBAAiB,GACjB,UAAW,GACX,SAAU,GAWV,uBAAwB,EAAQ,qBAChC,KAAM,EAAG,EAAA,8BAA+B,EAAQ,oBAAqB,EACrE,GAAI,EAAiB,CAAE,gBAAiB,CAAe,EAAI,CAAC,CAC9D,EAEI,EAAQ,mBACV,EAAQ,kBAAoB,IAG9B,IAAM,EAAU,EAAmB,EAAQ,aAAa,EAKxD,OAJI,IACF,EAAQ,QAAU,GAGb,CACT,CAQA,eAAe,EACb,EACgC,CAChC,GAAI,CACF,GAAM,CAAE,QAAS,GACf,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,6CAAA,CAAA,EAGF,EAAS,MAAM,EAAgB,WAAW,EAAa,WAAW,EACxE,OAAO,EAAc,EAAO,MAAM,EAAI,EAAO,OAAS,IACxD,OAAS,EAAO,CAKd,OAJA,QAAQ,KACN,+CAA+C,IAC/C,CACF,EACO,IACT,CACF,CAUA,eAAe,GACb,EACgC,CAChC,GAAI,CACF,GAAM,CAAE,QAAS,GACf,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,yDAAA,CAAA,EAEF,CAAE,YAAa,MAAM,EAAqB,aAAa,EACvD,EAAU,EAAS,KACtB,GAAY,EAAQ,KAAO,GAAkB,EAAQ,eACxD,EAGA,OAFK,GAAS,gBAEP,MAAM,EAA0B,EAAQ,eAAe,EAFxB,IAGxC,OAAS,EAAO,CAKd,OAJA,QAAQ,KACN,sFAAsF,IACtF,CACF,EACO,IACT,CACF,CAEA,eAAsB,GAA2D,EAmBnC,CAC5C,GAAM,CAAE,kBAAmB,MAAA,QAAA,QAAA,EAAA,SAAA,QAAM,uBAAA,CAAA,EAE3B,CAAC,EAAgB,GAAiB,MAAM,QAAQ,IAAI,CACxD,EAAA,QAAgB,2BAA2B,EAC3C,EAAe,WAAW,CAC5B,CAAC,EAEK,GACH,EAAQ,wBACL,MAAM,EAA0B,EAAQ,uBAAuB,EAC/D,QACH,EAAQ,qBACL,MAAM,GAA+B,EAAQ,oBAAoB,EACjE,MACA,EAAwD,EAC1D,CAAE,GAAG,EAAe,cAAe,IAAK,CAA4B,EACpE,EAAe,cAEnB,MAAM,EAA4B,CAAsB,EAIxD,IAAM,EAAgB,EACpB,EAAe,qBAAqB,cACtC,EAEA,OAAO,GAAsC,CAC3C,GAAG,EACH,yBACA,iBAAkB,EAAe,iBACjC,gBACA,gBACA,gBAAiB,EAAe,eAClC,CAAC,CACH,CAEA,IAAa,GACX,0FAQF,eAAsB,EACpB,EACe,CAEV,KAAA,wBADO,EAAS,EAAc,GACN,CAAG,GAG5B,EAAC,MADgB,EAAA,QAAuB,gBAAgB,GAChD,UACV,MAAU,MAAM,EAAiC,CAErD,CAEA,eAAsB,GAAmD,EAcpC,CACnC,GAAM,CAAC,CAAE,kBAAkB,CAAE,QAAS,IAAkB,MAAM,QAAQ,IAAI,CAAA,QAAA,QAAA,EAAA,SAAA,QACxE,uBAAA,CAAA,EAAA,QAAA,QAAA,EAAA,SAAA,QACA,qBAAA,CAAA,CACF,CAAC,EAEK,CACJ,EACA,EACA,EACA,GACE,MAAM,QAAQ,IAAI,CACpB,EAAA,QAAgB,2BAA2B,EAC3C,EAAe,WAAW,EAC1B,EAAgC,EAChC,EAAa,mBAAmB,EAAQ,eAAe,CACzD,CAAC,EAEK,CAAE,gBAAe,uBAAsB,oBAC3C,EAQF,OAJK,EAAQ,gBACX,MAAM,EAA4B,CAAa,EAG1C,GAA8B,CACnC,GAAG,EACH,uBAAwB,EACxB,8BAA+B,EAC/B,mBACA,gBACA,sBACA,qBACF,CAAC,CACH,CAEA,SAAgB,IAAuC,CACrD,MAAO,CAAE,MAAO,CAAC,CAAE,CACrB"}

package/dist/api/agent-server-adapter.d.ts

@@ -1,5 +1,7 @@
+import type { HookConfig } from "@openhands/typescript-client";
 import { AgentKind, Settings, SettingsValue } from "#/types/settings";
 import { GetHooksResponse, PluginSpec, AppConversation, AppConversationPage, RuntimeConversationStats } from "./conversation-service/agent-server-conversation-service.types";
+import { type SkillEnablement } from "#/utils/skill-enablement";
 import { type ClientToolSpec } from "./canvas-ui-client-tool";
 export interface DirectConversationInfo {
     id: string;
@@ -64,6 +66,14 @@ export interface DirectConversationInfo {
         agent_profile_id: string;
         revision: number;
     } | null;
+    /**
+     * Server-owned, derived from the catalog's ``parent_conversation_id`` link
+     * (agent-server >= 1.37.1, SDK #4188) — a conversation started with a
+     * parent is discoverable here on any browser, which is what makes the
+     * local planner's relationship server state rather than a browser-local
+     * hint. Absent on older agent-servers and on the cloud wire shape.
+     */
+    sub_conversation_ids?: string[] | null;
 }
 /**
  * Shape of the runtime services info served by Agent Canvas backends in
@@ -170,9 +180,13 @@ export declare const AUTOMATION_TAG_KEYS: readonly string[];
  * - git / repo / branch / workspace stamps → repo-branch metadata + directory
  *   footer / hovercard rows (``selected_repository``, ``selected_branch``,
  *   ``git_provider``, ``workspace.working_dir``)
- * - ``automationid`` / ``automationrunid`` → raw UUIDs consumed by the
- *   conversation panel's automation filter (chip noise), while
- *   ``automationname`` / ``automationtrigger`` stay visible
+ * - the automation family (``automationtrigger`` / ``automationid`` /
+ *   ``automationname`` / ``automationrunid``) → provenance the SDK stamps at
+ *   creation; the conversation panel's automation filter is its first-class
+ *   UI source. The tag surface is user organization data, so machine stamps
+ *   stay out of it — and users can't edit or spoof automation classification.
+ * - ``localplannerparent`` → internal routing for the local planner; already
+ *   surfaced by the hidden-from-list planner filter
  */
 export declare const RESERVED_CONVERSATION_TAG_KEYS: ReadonlySet<string>;
 /**
@@ -193,16 +207,19 @@ interface LookupSecret {
     headers?: Record<string, string>;
     description?: string;
 }
-type StartConversationPayload = Record<string, unknown> & {
-    agent_settings?: AgentSettingsPayload;
-    agent_profile_id?: string;
+/** A custom secret's public identity — name + optional description, no value. */
+type CustomSecretInput = {
+    name: string;
+    description?: string;
+};
+type StartConversationPayloadBase = Record<string, unknown> & {
     workspace: LocalWorkspacePayload;
     confirmation_policy: SettingsRecord;
     security_analyzer?: SettingsRecord;
     initial_message?: InitialMessagePayload;
     max_iterations: number;
     stuck_detection: true;
-    autotitle: true;
+    autotitle: boolean;
     title_llm_profile?: string;
     worktree: boolean;
     secrets_encrypted?: true;
@@ -213,6 +230,17 @@ type StartConversationPayload = Record<string, unknown> & {
     client_tools: ClientToolSpec[];
     tool_module_qualnames?: Record<string, string>;
 };
+type AgentSettingsStartConversationPayload = StartConversationPayloadBase & {
+    agent_settings?: AgentSettingsPayload;
+    agent_profile_id?: string;
+    agent?: never;
+};
+type RawAgentStartConversationPayload = StartConversationPayloadBase & {
+    agent: SettingsRecord;
+    agent_settings?: never;
+    agent_profile_id?: never;
+    parent_conversation_id?: string;
+};
 export interface StartConversationOptions {
     settings: Settings;
     query?: string;
@@ -225,16 +253,46 @@ export interface StartConversationOptions {
     encryptedAgentSettings?: Record<string, SettingsValue>;
     encryptedConversationSettings?: Record<string, SettingsValue>;
     secretsEncrypted?: boolean;
-    customSecrets?: Array<{
-        name: string;
-        description?: string;
-    }>;
+    customSecrets?: CustomSecretInput[];
     agentProfileId?: string;
     agentProfileKind?: AgentKind;
     titleLlmProfile?: string;
     runtimeServicesInfo?: RuntimeServicesInfo | null;
+    workspaceHookConfig?: HookConfig | null;
 }
-export declare function buildStartConversationRequest(options: StartConversationOptions): StartConversationPayload;
+export declare function buildStartConversationRequest(options: StartConversationOptions): AgentSettingsStartConversationPayload;
+export declare function buildStartPlanningConversationRequest(options: {
+    encryptedAgentSettings: Record<string, SettingsValue>;
+    workingDir: string;
+    parentConversationId: string;
+    initialMessage?: string;
+    secretsEncrypted?: boolean;
+    customSecrets?: CustomSecretInput[];
+    /** Mirrors the parent's configured `conversation_settings.max_iterations` — see DEFAULT_MAX_ITERATIONS. */
+    maxIterations?: number;
+    /** Mirrors the code agent's skill filtering — see buildConfiguredOpenHandsAgentSettings. */
+    skillEnablement?: SkillEnablement;
+}): RawAgentStartConversationPayload;
+export declare function buildStartPlanningConversationRequestWithEncryptedSettings(options: {
+    workingDir: string;
+    parentConversationId: string;
+    /**
+     * The parent conversation's current LLM profile (`AppConversation.active_profile`,
+     * tracking `/model` and `SwitchLLMTool`). Takes priority over
+     * `parentAgentProfileId` so a model switch on the parent carries over to a
+     * planner created afterward, without a *different* conversation's global
+     * profile activation repointing it.
+     */
+    parentActiveProfileName?: string | null;
+    /**
+     * `launched_agent_profile.agent_profile_id` of the parent, when started
+     * from an AgentProfile. Fallback for when `parentActiveProfileName` can't
+     * be resolved (e.g. an ACP parent, whose `active_profile` is a stale
+     * launch-time snapshot rather than anything the ACP agent itself runs).
+     */
+    parentAgentProfileId?: string | null;
+    initialMessage?: string;
+}): Promise<RawAgentStartConversationPayload>;
 export declare const SUBSCRIPTION_LOGIN_REQUIRED_ERROR = "Connect your ChatGPT subscription before starting a conversation with this LLM profile.";
 /**
  * Throws if a ChatGPT subscription LLM profile is not connected.
@@ -251,6 +309,8 @@ export declare function buildStartConversationRequestWithEncryptedSettings(optio
     conversationId?: string;
     parentConversationId?: string;
     workingDir?: string;
+    /** Workspace root for the hooks lookup, not the per-conversation `workingDir` (#16907). */
+    hooksProjectDir?: string;
     worktree?: boolean;
     agentProfileId?: string;
     agentProfileKind?: AgentKind;