@openhands/agent-canvas 1.4.0 → 1.5.1

package/dist/api/cloud/conversation-service.api.js

@@ -1,10 +1,11 @@
 import { getActiveBackend as e } from "../backend-registry/active-store.js";
 import { callCloudProxy as t } from "./proxy.js";
-import { getStoredConversationMetadata as n } from "../conversation-metadata-store.js";
+import { AGENT_CANVAS_CLIENT_HEADERS as n } from "../client-source.js";
+import { getStoredConversationMetadata as r } from "../conversation-metadata-store.js";
 //#region src/api/cloud/conversation-service.api.ts
-function r(e) {
+function i(e) {
 	if (!e?.id) return e;
-	let t = n(e.id);
+	let t = r(e.id);
 	return t ? {
 		...e,
 		selected_repository: e.selected_repository ?? t.selected_repository ?? null,
@@ -13,89 +14,90 @@ function r(e) {
 		selected_workspace: e.selected_workspace ?? t.selected_workspace ?? null
 	} : e;
 }
-function i() {
+function a() {
 	let t = e().backend;
 	if (t.kind !== "cloud") throw Error("Cloud conversations call requires a cloud backend.");
 	return t;
 }
-async function a(e = 20, n) {
-	let a = i(), o = new URLSearchParams();
+async function o(e = 20, n) {
+	let r = a(), o = new URLSearchParams();
 	o.set("limit", String(e)), n && o.set("page_id", n), o.set("sort_order", "UPDATED_AT_DESC");
 	let s = await t({
-		backend: a,
+		backend: r,
 		method: "GET",
 		path: `/api/v1/app-conversations/search?${o.toString()}`
 	});
 	return {
-		items: (s?.items ?? []).map((e) => r(e)),
+		items: (s?.items ?? []).map((e) => i(e)),
 		next_page_id: s?.next_page_id ?? null
 	};
 }
-async function o(e) {
+async function s(e) {
 	if (e.length === 0) return [];
-	let n = i(), a = new URLSearchParams();
-	for (let t of e) a.append("ids", t);
+	let n = a(), r = new URLSearchParams();
+	for (let t of e) r.append("ids", t);
 	return (await t({
 		backend: n,
 		method: "GET",
-		path: `/api/v1/app-conversations?${a.toString()}`
-	}) ?? []).map(r);
+		path: `/api/v1/app-conversations?${r.toString()}`
+	}) ?? []).map(i);
 }
-async function s(e) {
+async function c(e) {
 	return await t({
-		backend: i(),
+		backend: a(),
 		method: "POST",
 		path: "/api/v1/app-conversations",
-		body: e
+		body: e,
+		headers: n
 	});
 }
-async function c(e) {
+async function l(e) {
 	return t({
-		backend: i(),
+		backend: a(),
 		method: "GET",
 		path: `/api/v1/app-conversations/${e}/download`,
 		responseType: "blob"
 	});
 }
-async function l(e) {
+async function u(e) {
 	await t({
-		backend: i(),
+		backend: a(),
 		method: "DELETE",
 		path: `/api/v1/app-conversations/${e}`
 	});
 }
-async function u(e, n) {
+async function d(e, n) {
 	return await t({
-		backend: i(),
+		backend: a(),
 		method: "PATCH",
 		path: `/api/v1/app-conversations/${e}`,
 		body: { public: n }
 	});
 }
-async function d(e) {
+async function f(e) {
 	await t({
-		backend: i(),
+		backend: a(),
 		method: "POST",
 		path: `/api/v1/sandboxes/${e}/pause`
 	});
 }
-async function f(e) {
+async function p(e) {
 	await t({
-		backend: i(),
+		backend: a(),
 		method: "POST",
 		path: `/api/v1/sandboxes/${e}/resume`
 	});
 }
-async function p(e, n) {
-	let r = i(), a = new URLSearchParams();
-	return a.append("file_path", n), await t({
+async function m(e, n) {
+	let r = a(), i = new URLSearchParams();
+	return i.append("file_path", n), await t({
 		backend: r,
 		method: "GET",
-		path: `/api/v1/app-conversations/${e}/file?${a.toString()}`
+		path: `/api/v1/app-conversations/${e}/file?${i.toString()}`
 	}) ?? "";
 }
-async function m(e) {
-	let n = i(), r = new URLSearchParams();
+async function h(e) {
+	let n = a(), r = new URLSearchParams();
 	return r.set("ids", e), (await t({
 		backend: n,
 		method: "GET",
@@ -103,6 +105,6 @@ async function m(e) {
 	}))?.[0] ?? null;
 }
 //#endregion
-export { o as batchGetCloudConversations, s as createCloudAppConversation, l as deleteCloudConversation, c as downloadCloudConversation, m as getCloudAppConversationStartTask, d as pauseCloudSandbox, p as readCloudConversationFile, f as resumeCloudSandbox, a as searchCloudConversations, u as updateCloudConversationPublicFlag };
+export { s as batchGetCloudConversations, c as createCloudAppConversation, u as deleteCloudConversation, l as downloadCloudConversation, h as getCloudAppConversationStartTask, f as pauseCloudSandbox, m as readCloudConversationFile, p as resumeCloudSandbox, o as searchCloudConversations, d as updateCloudConversationPublicFlag };
 
 //# sourceMappingURL=conversation-service.api.js.map

package/dist/api/cloud/conversation-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-service.api.js","names":[],"sources":["../../../src/api/cloud/conversation-service.api.ts"],"sourcesContent":["import { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { getStoredConversationMetadata } from \"../conversation-metadata-store\";\nimport type {\n  AppConversation,\n  AppConversationPage,\n  AppConversationStartRequest,\n  AppConversationStartTask,\n} from \"../conversation-service/agent-server-conversation-service.types\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * The cloud backend does not always echo `selected_repository` /\n * `selected_branch` / `git_provider` back from\n * `GET /api/v1/app-conversations` until its own background hydration\n * completes. We persist the selection to local storage at connect time\n * (see `AgentServerConversationService.updateConversationRepository`)\n * and overlay it here so the chat-page git control bar reflects the\n * connection immediately, instead of snapping back to the empty\n * \"Connect Repo\" state on every refetch.\n *\n * Server values take precedence whenever they're populated; the\n * local-storage fallback only fills in fields the server returned as\n * `null`/`undefined`.\n */\nfunction overlayStoredRepoSelection(\n  conversation: AppConversation | null,\n): AppConversation | null {\n  if (!conversation?.id) return conversation;\n  const stored = getStoredConversationMetadata(conversation.id);\n  if (!stored) return conversation;\n\n  return {\n    ...conversation,\n    selected_repository:\n      conversation.selected_repository ?? stored.selected_repository ?? null,\n    selected_branch:\n      conversation.selected_branch ?? stored.selected_branch ?? null,\n    git_provider: conversation.git_provider ?? stored.git_provider ?? null,\n    selected_workspace:\n      conversation.selected_workspace ?? stored.selected_workspace ?? null,\n  };\n}\n\nfunction getActiveCloudBackend(): Backend {\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\"Cloud conversations call requires a cloud backend.\");\n  }\n  return active;\n}\n\n/**\n * Search the cloud app-conversations list. Mirrors the local\n * `AgentServerConversationService.searchConversations` interface but calls\n * the cloud endpoint `/api/v1/app-conversations/search`.\n */\nexport async function searchCloudConversations(\n  limit: number = 20,\n  pageId?: string,\n): Promise<AppConversationPage> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.set(\"limit\", String(limit));\n  if (pageId) params.set(\"page_id\", pageId);\n  params.set(\"sort_order\", \"UPDATED_AT_DESC\");\n\n  const data = await callCloudProxy<{\n    items: AppConversation[];\n    next_page_id: string | null;\n  }>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/search?${params.toString()}`,\n  });\n\n  return {\n    items: (data?.items ?? []).map(\n      (item) => overlayStoredRepoSelection(item) as AppConversation,\n    ),\n    next_page_id: data?.next_page_id ?? null,\n  };\n}\n\n/**\n * Batch-fetch cloud app-conversations by id. Mirrors the local\n * `AgentServerConversationService.batchGetAppConversations` interface.\n */\nexport async function batchGetCloudConversations(\n  ids: string[],\n): Promise<(AppConversation | null)[]> {\n  if (ids.length === 0) return [];\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  for (const id of ids) params.append(\"ids\", id);\n  const data = await callCloudProxy<(AppConversation | null)[]>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations?${params.toString()}`,\n  });\n  return (data ?? []).map(overlayStoredRepoSelection);\n}\n\n/**\n * Create a v1 app-conversation on the cloud backend.\n *\n * Mirrors OpenHands' cloud flow: POST /api/v1/app-conversations with the\n * `AppConversationStartRequest` payload, returning a\n * `AppConversationStartTask`. The task is initially WORKING; the caller\n * polls `getCloudAppConversationStartTask` (3s cadence per OpenHands)\n * until status is READY (then `app_conversation_id`, `agent_server_url`,\n * and `session_api_key` are populated) or ERROR.\n *\n * This path does NOT use encrypted-settings round-tripping. Secrets stay\n * server-side on the cloud backend — the only auth carried is the cloud bearer\n * token, and the conversation runtime is\n * provisioned with its own ephemeral session_api_key returned in the\n * task.\n */\nexport async function createCloudAppConversation(\n  request: AppConversationStartRequest,\n): Promise<AppConversationStartTask> {\n  const backend = getActiveCloudBackend();\n  const data = await callCloudProxy<AppConversationStartTask>({\n    backend,\n    method: \"POST\",\n    path: \"/api/v1/app-conversations\",\n    body: request as unknown as Record<string, unknown>,\n  });\n  return data;\n}\n\n/**\n * Download a v1 app-conversation as a ZIP from the cloud backend. Mirrors\n * the local `AgentServerConversationService.downloadConversation` interface but\n * calls\n * `GET /api/v1/app-conversations/{id}/download`, which returns\n * `application/zip` with `Content-Disposition` set by the cloud backend.\n */\nexport async function downloadCloudConversation(\n  conversationId: string,\n): Promise<Blob> {\n  const backend = getActiveCloudBackend();\n  return callCloudProxy<Blob>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/${conversationId}/download`,\n    responseType: \"blob\",\n  });\n}\n\n/**\n * Delete a v1 app-conversation on the cloud backend. Mirrors the local\n * `AgentServerConversationService.deleteConversation` interface but calls\n * `DELETE /api/v1/app-conversations/{id}`, which returns a JSON\n * `Success` envelope (discarded here — the caller only needs to know\n * the request didn't error).\n */\nexport async function deleteCloudConversation(\n  conversationId: string,\n): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"DELETE\",\n    path: `/api/v1/app-conversations/${conversationId}`,\n  });\n}\n\n/**\n * Toggle the public-sharing flag on a cloud v1 app-conversation. Mirrors\n * OpenHands' `AgentServerConversationService.updateConversationPublicFlag`:\n * `PATCH /api/v1/app-conversations/{id}` with `{ public }`, returning\n * the updated conversation.\n */\nexport async function updateCloudConversationPublicFlag(\n  conversationId: string,\n  isPublic: boolean,\n): Promise<AppConversation> {\n  const backend = getActiveCloudBackend();\n  const data = await callCloudProxy<AppConversation>({\n    backend,\n    method: \"PATCH\",\n    path: `/api/v1/app-conversations/${conversationId}`,\n    body: { public: isPublic },\n  });\n  return data;\n}\n\n/**\n * Pause the cloud sandbox backing a v1 app-conversation. Mirrors\n * OpenHands' `SandboxService.pauseSandbox`:\n * `POST /api/v1/sandboxes/{sandboxId}/pause` on the cloud backend, which stops\n * the runtime owning the conversation.\n */\nexport async function pauseCloudSandbox(sandboxId: string): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"POST\",\n    path: `/api/v1/sandboxes/${sandboxId}/pause`,\n  });\n}\n\n/**\n * Resume a paused cloud sandbox. Mirrors OpenHands' `SandboxService.resumeSandbox`\n * by calling `POST /api/v1/sandboxes/{sandboxId}/resume` on the SaaS.\n *\n * This is the correct endpoint for waking a PAUSED sandbox. It is a\n * lightweight unpause — NOT the same as creating a new start task via\n * `POST /api/v1/app-conversations`, which provisions a fresh conversation\n * and is subject to the 120-second sandbox-start timeout.\n */\nexport async function resumeCloudSandbox(sandboxId: string): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"POST\",\n    path: `/api/v1/sandboxes/${sandboxId}/resume`,\n  });\n}\n\n/**\n * Read a file from a cloud conversation's sandbox workspace. Mirrors\n * OpenHands' `AgentServerConversationService.readConversationFile` — hits\n * `GET /api/v1/app-conversations/{id}/file?file_path=...` on the cloud backend\n * and returns the file content as a string.\n */\nexport async function readCloudConversationFile(\n  conversationId: string,\n  filePath: string,\n): Promise<string> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.append(\"file_path\", filePath);\n  const data = await callCloudProxy<string>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/${conversationId}/file?${params.toString()}`,\n  });\n  return data ?? \"\";\n}\n\n/**\n * Fetch a single v1 app-conversation start task. Mirrors OpenHands'\n * `AgentServerConversationService.getStartTask` — uses the batch search endpoint\n * with a single id and unwraps the first result.\n */\nexport async function getCloudAppConversationStartTask(\n  taskId: string,\n): Promise<AppConversationStartTask | null> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.set(\"ids\", taskId);\n  const data = await callCloudProxy<(AppConversationStartTask | null)[]>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/start-tasks?${params.toString()}`,\n  });\n  return data?.[0] ?? null;\n}\n"],"mappings":";;;;AAyBA,SAAS,EACP,GACwB;AACxB,KAAI,CAAC,GAAc,GAAI,QAAO;CAC9B,IAAM,IAAS,EAA8B,EAAa,GAAG;AAG7D,QAFK,IAEE;EACL,GAAG;EACH,qBACE,EAAa,uBAAuB,EAAO,uBAAuB;EACpE,iBACE,EAAa,mBAAmB,EAAO,mBAAmB;EAC5D,cAAc,EAAa,gBAAgB,EAAO,gBAAgB;EAClE,oBACE,EAAa,sBAAsB,EAAO,sBAAsB;EACnE,GAXmB;;AActB,SAAS,IAAiC;CACxC,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MAAM,qDAAqD;AAEvE,QAAO;;AAQT,eAAsB,EACpB,IAAgB,IAChB,GAC8B;CAC9B,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAGpC,CAFA,EAAO,IAAI,SAAS,OAAO,EAAM,CAAC,EAC9B,KAAQ,EAAO,IAAI,WAAW,EAAO,EACzC,EAAO,IAAI,cAAc,kBAAkB;CAE3C,IAAM,IAAO,MAAM,EAGhB;EACD;EACA,QAAQ;EACR,MAAM,oCAAoC,EAAO,UAAU;EAC5D,CAAC;AAEF,QAAO;EACL,QAAQ,GAAM,SAAS,EAAE,EAAE,KACxB,MAAS,EAA2B,EAAK,CAC3C;EACD,cAAc,GAAM,gBAAgB;EACrC;;AAOH,eAAsB,EACpB,GACqC;AACrC,KAAI,EAAI,WAAW,EAAG,QAAO,EAAE;CAC/B,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AACpC,MAAK,IAAM,KAAM,EAAK,GAAO,OAAO,OAAO,EAAG;AAM9C,SAAQ,MALW,EAA2C;EAC5D;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAO,UAAU;EACrD,CAAC,IACc,EAAE,EAAE,IAAI,EAA2B;;AAmBrD,eAAsB,EACpB,GACmC;AAQnC,QAAO,MANY,EAAyC;EAC1D,SAFc,GAEd;EACA,QAAQ;EACR,MAAM;EACN,MAAM;EACP,CAAC;;AAWJ,eAAsB,EACpB,GACe;AAEf,QAAO,EAAqB;EAC1B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAe;EAClD,cAAc;EACf,CAAC;;AAUJ,eAAsB,EACpB,GACe;AAEf,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B;EACpC,CAAC;;AASJ,eAAsB,EACpB,GACA,GAC0B;AAQ1B,QAAO,MANY,EAAgC;EACjD,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B;EACnC,MAAM,EAAE,QAAQ,GAAU;EAC3B,CAAC;;AAUJ,eAAsB,EAAkB,GAAkC;AAExE,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,qBAAqB,EAAU;EACtC,CAAC;;AAYJ,eAAsB,EAAmB,GAAkC;AAEzE,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,qBAAqB,EAAU;EACtC,CAAC;;AASJ,eAAsB,EACpB,GACA,GACiB;CACjB,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAOpC,QANA,EAAO,OAAO,aAAa,EAAS,EAM7B,MALY,EAAuB;EACxC;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAe,QAAQ,EAAO,UAAU;EAC5E,CAAC,IACa;;AAQjB,eAAsB,EACpB,GAC0C;CAC1C,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAOpC,QANA,EAAO,IAAI,OAAO,EAAO,GAMlB,MALY,EAAoD;EACrE;EACA,QAAQ;EACR,MAAM,yCAAyC,EAAO,UAAU;EACjE,CAAC,IACY,MAAM"}
+{"version":3,"file":"conversation-service.api.js","names":[],"sources":["../../../src/api/cloud/conversation-service.api.ts"],"sourcesContent":["import { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { getStoredConversationMetadata } from \"../conversation-metadata-store\";\nimport type {\n  AppConversation,\n  AppConversationPage,\n  AppConversationStartRequest,\n  AppConversationStartTask,\n} from \"../conversation-service/agent-server-conversation-service.types\";\nimport { AGENT_CANVAS_CLIENT_HEADERS } from \"../client-source\";\nimport { callCloudProxy } from \"./proxy\";\n\n/**\n * The cloud backend does not always echo `selected_repository` /\n * `selected_branch` / `git_provider` back from\n * `GET /api/v1/app-conversations` until its own background hydration\n * completes. We persist the selection to local storage at connect time\n * (see `AgentServerConversationService.updateConversationRepository`)\n * and overlay it here so the chat-page git control bar reflects the\n * connection immediately, instead of snapping back to the empty\n * \"Connect Repo\" state on every refetch.\n *\n * Server values take precedence whenever they're populated; the\n * local-storage fallback only fills in fields the server returned as\n * `null`/`undefined`.\n */\nfunction overlayStoredRepoSelection(\n  conversation: AppConversation | null,\n): AppConversation | null {\n  if (!conversation?.id) return conversation;\n  const stored = getStoredConversationMetadata(conversation.id);\n  if (!stored) return conversation;\n\n  return {\n    ...conversation,\n    selected_repository:\n      conversation.selected_repository ?? stored.selected_repository ?? null,\n    selected_branch:\n      conversation.selected_branch ?? stored.selected_branch ?? null,\n    git_provider: conversation.git_provider ?? stored.git_provider ?? null,\n    selected_workspace:\n      conversation.selected_workspace ?? stored.selected_workspace ?? null,\n  };\n}\n\nfunction getActiveCloudBackend(): Backend {\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\"Cloud conversations call requires a cloud backend.\");\n  }\n  return active;\n}\n\n/**\n * Search the cloud app-conversations list. Mirrors the local\n * `AgentServerConversationService.searchConversations` interface but calls\n * the cloud endpoint `/api/v1/app-conversations/search`.\n */\nexport async function searchCloudConversations(\n  limit: number = 20,\n  pageId?: string,\n): Promise<AppConversationPage> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.set(\"limit\", String(limit));\n  if (pageId) params.set(\"page_id\", pageId);\n  params.set(\"sort_order\", \"UPDATED_AT_DESC\");\n\n  const data = await callCloudProxy<{\n    items: AppConversation[];\n    next_page_id: string | null;\n  }>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/search?${params.toString()}`,\n  });\n\n  return {\n    items: (data?.items ?? []).map(\n      (item) => overlayStoredRepoSelection(item) as AppConversation,\n    ),\n    next_page_id: data?.next_page_id ?? null,\n  };\n}\n\n/**\n * Batch-fetch cloud app-conversations by id. Mirrors the local\n * `AgentServerConversationService.batchGetAppConversations` interface.\n */\nexport async function batchGetCloudConversations(\n  ids: string[],\n): Promise<(AppConversation | null)[]> {\n  if (ids.length === 0) return [];\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  for (const id of ids) params.append(\"ids\", id);\n  const data = await callCloudProxy<(AppConversation | null)[]>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations?${params.toString()}`,\n  });\n  return (data ?? []).map(overlayStoredRepoSelection);\n}\n\n/**\n * Create a v1 app-conversation on the cloud backend.\n *\n * Mirrors OpenHands' cloud flow: POST /api/v1/app-conversations with the\n * `AppConversationStartRequest` payload, returning a\n * `AppConversationStartTask`. The task is initially WORKING; the caller\n * polls `getCloudAppConversationStartTask` (3s cadence per OpenHands)\n * until status is READY (then `app_conversation_id`, `agent_server_url`,\n * and `session_api_key` are populated) or ERROR.\n *\n * This path does NOT use encrypted-settings round-tripping. Secrets stay\n * server-side on the cloud backend — the only auth carried is the cloud bearer\n * token, and the conversation runtime is\n * provisioned with its own ephemeral session_api_key returned in the\n * task.\n */\nexport async function createCloudAppConversation(\n  request: AppConversationStartRequest,\n): Promise<AppConversationStartTask> {\n  const backend = getActiveCloudBackend();\n  const data = await callCloudProxy<AppConversationStartTask>({\n    backend,\n    method: \"POST\",\n    path: \"/api/v1/app-conversations\",\n    body: request as unknown as Record<string, unknown>,\n    headers: AGENT_CANVAS_CLIENT_HEADERS,\n  });\n  return data;\n}\n\n/**\n * Download a v1 app-conversation as a ZIP from the cloud backend. Mirrors\n * the local `AgentServerConversationService.downloadConversation` interface but\n * calls\n * `GET /api/v1/app-conversations/{id}/download`, which returns\n * `application/zip` with `Content-Disposition` set by the cloud backend.\n */\nexport async function downloadCloudConversation(\n  conversationId: string,\n): Promise<Blob> {\n  const backend = getActiveCloudBackend();\n  return callCloudProxy<Blob>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/${conversationId}/download`,\n    responseType: \"blob\",\n  });\n}\n\n/**\n * Delete a v1 app-conversation on the cloud backend. Mirrors the local\n * `AgentServerConversationService.deleteConversation` interface but calls\n * `DELETE /api/v1/app-conversations/{id}`, which returns a JSON\n * `Success` envelope (discarded here — the caller only needs to know\n * the request didn't error).\n */\nexport async function deleteCloudConversation(\n  conversationId: string,\n): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"DELETE\",\n    path: `/api/v1/app-conversations/${conversationId}`,\n  });\n}\n\n/**\n * Toggle the public-sharing flag on a cloud v1 app-conversation. Mirrors\n * OpenHands' `AgentServerConversationService.updateConversationPublicFlag`:\n * `PATCH /api/v1/app-conversations/{id}` with `{ public }`, returning\n * the updated conversation.\n */\nexport async function updateCloudConversationPublicFlag(\n  conversationId: string,\n  isPublic: boolean,\n): Promise<AppConversation> {\n  const backend = getActiveCloudBackend();\n  const data = await callCloudProxy<AppConversation>({\n    backend,\n    method: \"PATCH\",\n    path: `/api/v1/app-conversations/${conversationId}`,\n    body: { public: isPublic },\n  });\n  return data;\n}\n\n/**\n * Pause the cloud sandbox backing a v1 app-conversation. Mirrors\n * OpenHands' `SandboxService.pauseSandbox`:\n * `POST /api/v1/sandboxes/{sandboxId}/pause` on the cloud backend, which stops\n * the runtime owning the conversation.\n */\nexport async function pauseCloudSandbox(sandboxId: string): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"POST\",\n    path: `/api/v1/sandboxes/${sandboxId}/pause`,\n  });\n}\n\n/**\n * Resume a paused cloud sandbox. Mirrors OpenHands' `SandboxService.resumeSandbox`\n * by calling `POST /api/v1/sandboxes/{sandboxId}/resume` on the SaaS.\n *\n * This is the correct endpoint for waking a PAUSED sandbox. It is a\n * lightweight unpause — NOT the same as creating a new start task via\n * `POST /api/v1/app-conversations`, which provisions a fresh conversation\n * and is subject to the 120-second sandbox-start timeout.\n */\nexport async function resumeCloudSandbox(sandboxId: string): Promise<void> {\n  const backend = getActiveCloudBackend();\n  await callCloudProxy<unknown>({\n    backend,\n    method: \"POST\",\n    path: `/api/v1/sandboxes/${sandboxId}/resume`,\n  });\n}\n\n/**\n * Read a file from a cloud conversation's sandbox workspace. Mirrors\n * OpenHands' `AgentServerConversationService.readConversationFile` — hits\n * `GET /api/v1/app-conversations/{id}/file?file_path=...` on the cloud backend\n * and returns the file content as a string.\n */\nexport async function readCloudConversationFile(\n  conversationId: string,\n  filePath: string,\n): Promise<string> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.append(\"file_path\", filePath);\n  const data = await callCloudProxy<string>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/${conversationId}/file?${params.toString()}`,\n  });\n  return data ?? \"\";\n}\n\n/**\n * Fetch a single v1 app-conversation start task. Mirrors OpenHands'\n * `AgentServerConversationService.getStartTask` — uses the batch search endpoint\n * with a single id and unwraps the first result.\n */\nexport async function getCloudAppConversationStartTask(\n  taskId: string,\n): Promise<AppConversationStartTask | null> {\n  const backend = getActiveCloudBackend();\n  const params = new URLSearchParams();\n  params.set(\"ids\", taskId);\n  const data = await callCloudProxy<(AppConversationStartTask | null)[]>({\n    backend,\n    method: \"GET\",\n    path: `/api/v1/app-conversations/start-tasks?${params.toString()}`,\n  });\n  return data?.[0] ?? null;\n}\n"],"mappings":";;;;;AA0BA,SAAS,EACP,GACwB;AACxB,KAAI,CAAC,GAAc,GAAI,QAAO;CAC9B,IAAM,IAAS,EAA8B,EAAa,GAAG;AAG7D,QAFK,IAEE;EACL,GAAG;EACH,qBACE,EAAa,uBAAuB,EAAO,uBAAuB;EACpE,iBACE,EAAa,mBAAmB,EAAO,mBAAmB;EAC5D,cAAc,EAAa,gBAAgB,EAAO,gBAAgB;EAClE,oBACE,EAAa,sBAAsB,EAAO,sBAAsB;EACnE,GAXmB;;AActB,SAAS,IAAiC;CACxC,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MAAM,qDAAqD;AAEvE,QAAO;;AAQT,eAAsB,EACpB,IAAgB,IAChB,GAC8B;CAC9B,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAGpC,CAFA,EAAO,IAAI,SAAS,OAAO,EAAM,CAAC,EAC9B,KAAQ,EAAO,IAAI,WAAW,EAAO,EACzC,EAAO,IAAI,cAAc,kBAAkB;CAE3C,IAAM,IAAO,MAAM,EAGhB;EACD;EACA,QAAQ;EACR,MAAM,oCAAoC,EAAO,UAAU;EAC5D,CAAC;AAEF,QAAO;EACL,QAAQ,GAAM,SAAS,EAAE,EAAE,KACxB,MAAS,EAA2B,EAAK,CAC3C;EACD,cAAc,GAAM,gBAAgB;EACrC;;AAOH,eAAsB,EACpB,GACqC;AACrC,KAAI,EAAI,WAAW,EAAG,QAAO,EAAE;CAC/B,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AACpC,MAAK,IAAM,KAAM,EAAK,GAAO,OAAO,OAAO,EAAG;AAM9C,SAAQ,MALW,EAA2C;EAC5D;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAO,UAAU;EACrD,CAAC,IACc,EAAE,EAAE,IAAI,EAA2B;;AAmBrD,eAAsB,EACpB,GACmC;AASnC,QAAO,MAPY,EAAyC;EAC1D,SAFc,GAEd;EACA,QAAQ;EACR,MAAM;EACN,MAAM;EACN,SAAS;EACV,CAAC;;AAWJ,eAAsB,EACpB,GACe;AAEf,QAAO,EAAqB;EAC1B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAe;EAClD,cAAc;EACf,CAAC;;AAUJ,eAAsB,EACpB,GACe;AAEf,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B;EACpC,CAAC;;AASJ,eAAsB,EACpB,GACA,GAC0B;AAQ1B,QAAO,MANY,EAAgC;EACjD,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,6BAA6B;EACnC,MAAM,EAAE,QAAQ,GAAU;EAC3B,CAAC;;AAUJ,eAAsB,EAAkB,GAAkC;AAExE,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,qBAAqB,EAAU;EACtC,CAAC;;AAYJ,eAAsB,EAAmB,GAAkC;AAEzE,OAAM,EAAwB;EAC5B,SAFc,GAEd;EACA,QAAQ;EACR,MAAM,qBAAqB,EAAU;EACtC,CAAC;;AASJ,eAAsB,EACpB,GACA,GACiB;CACjB,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAOpC,QANA,EAAO,OAAO,aAAa,EAAS,EAM7B,MALY,EAAuB;EACxC;EACA,QAAQ;EACR,MAAM,6BAA6B,EAAe,QAAQ,EAAO,UAAU;EAC5E,CAAC,IACa;;AAQjB,eAAsB,EACpB,GAC0C;CAC1C,IAAM,IAAU,GAAuB,EACjC,IAAS,IAAI,iBAAiB;AAOpC,QANA,EAAO,IAAI,OAAO,EAAO,GAMlB,MALY,EAAoD;EACrE;EACA,QAAQ;EACR,MAAM,yCAAyC,EAAO,UAAU;EACjE,CAAC,IACY,MAAM"}

package/dist/api/cloud/organization-service.api.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../backend-registry/active-store.cjs`),t=require(`../../node_modules/axios/lib/axios.cjs`),n=require(`./proxy.cjs`);function r(e){return{items:e?.items??[],currentOrgId:e?.current_org_id??null}}function i(t){if(t)return t;let n=e.getActiveBackend().backend;if(n.kind!==`cloud`)throw Error(`Cloud organization calls require a cloud backend. Active backend is local.`);return n}async function a(e){return r(await n.callCloudProxy({backend:i(e),method:`GET`,path:`/api/organizations`}))}async function o(e){let r=i(e);try{return{orgId:(await n.callCloudProxy({backend:r,method:`GET`,path:`/api/keys/current`}))?.org_id??null,isLegacyKey:!1}}catch(e){if(t.default.isAxiosError(e)&&e.response?.status===400)return{orgId:null,isLegacyKey:!0};throw e}}async function s(e,t){let r=await n.callCloudProxy({backend:i(t),method:`GET`,path:`/api/organizations/${encodeURIComponent(e)}/me`});return{orgId:r?.org_id??e,userId:r?.user_id??``,role:r?.role??null,permissions:Array.isArray(r?.permissions)?r.permissions:null}}exports.getCloudOrganizationMe=s,exports.getCloudOrganizations=a,exports.getCurrentCloudApiKey=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/http-client.cjs`),t=require(`../backend-registry/active-store.cjs`),n=require(`./proxy.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/index.cjs`);function r(e){return{items:e?.items??[],currentOrgId:e?.current_org_id??null}}function i(e){if(e)return e;let n=t.getActiveBackend().backend;if(n.kind!==`cloud`)throw Error(`Cloud organization calls require a cloud backend. Active backend is local.`);return n}async function a(e){return r(await n.callCloudProxy({backend:i(e),method:`GET`,path:`/api/organizations`}))}async function o(t){let r=i(t);try{return{orgId:(await n.callCloudProxy({backend:r,method:`GET`,path:`/api/keys/current`}))?.org_id??null,isLegacyKey:!1}}catch(t){if(t instanceof e.HttpError&&t.status===400)return{orgId:null,isLegacyKey:!0};throw t}}async function s(e,t){let r=await n.callCloudProxy({backend:i(t),method:`GET`,path:`/api/organizations/${encodeURIComponent(e)}/me`});return{orgId:r?.org_id??e,userId:r?.user_id??``,role:r?.role??null,permissions:Array.isArray(r?.permissions)?r.permissions:null}}exports.getCloudOrganizationMe=s,exports.getCloudOrganizations=a,exports.getCurrentCloudApiKey=o;
 //# sourceMappingURL=organization-service.api.cjs.map

package/dist/api/cloud/organization-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"organization-service.api.cjs","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":"qLAeA,SAAS,EACP,EACqB,CACrB,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,gBAAkB,KACvC,CAGH,SAAS,EAAe,EAA4B,CAClD,GAAI,EAAS,OAAO,EACpB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAClC,GAAI,EAAO,OAAS,QAClB,MAAU,MACR,6EACD,CAEH,OAAO,EAUT,eAAsB,EACpB,EAC8B,CAO9B,OAAO,EAAgB,MALJ,EAAA,eAA2C,CAC5D,QAFa,EAAe,EAEnB,CACT,OAAQ,MACR,KAAM,qBACP,CAAC,CAC0B,CAc9B,eAAsB,EACpB,EACyD,CACzD,IAAM,EAAS,EAAe,EAAQ,CACtC,GAAI,CAMF,MAAO,CAAE,OAAO,MALG,EAAA,eAAoC,CACrD,QAAS,EACT,OAAQ,MACR,KAAM,oBACP,CAAC,GACoB,QAAU,KAAM,YAAa,GAAO,OACnD,EAAG,CACV,GAAI,EAAA,QAAM,aAAa,EAAE,EAAI,EAAE,UAAU,SAAW,IAClD,MAAO,CAAE,MAAO,KAAM,YAAa,GAAM,CAE3C,MAAM,GAiBV,eAAsB,EACpB,EACA,EAMC,CAED,IAAM,EAAO,MAAM,EAAA,eAKhB,CACD,QAPa,EAAe,EAOnB,CACT,OAAQ,MACR,KAAM,sBAAsB,mBAAmB,EAAM,CAAC,KACvD,CAAC,CACF,MAAO,CACL,MAAO,GAAM,QAAU,EACvB,OAAQ,GAAM,SAAW,GACzB,KAAM,GAAM,MAAQ,KAGpB,YAAa,MAAM,QAAQ,GAAM,YAAY,CAAG,EAAK,YAAc,KACpE"}
+{"version":3,"file":"organization-service.api.cjs","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import { HttpError } from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (e instanceof HttpError && e.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":"oSAeA,SAAS,EACP,EACqB,CACrB,MAAO,CACL,MAAO,GAAM,OAAS,EAAE,CACxB,aAAc,GAAM,gBAAkB,KACvC,CAGH,SAAS,EAAe,EAA4B,CAClD,GAAI,EAAS,OAAO,EACpB,IAAM,EAAS,EAAA,kBAAkB,CAAC,QAClC,GAAI,EAAO,OAAS,QAClB,MAAU,MACR,6EACD,CAEH,OAAO,EAUT,eAAsB,EACpB,EAC8B,CAO9B,OAAO,EAAgB,MALJ,EAAA,eAA2C,CAC5D,QAFa,EAAe,EAEnB,CACT,OAAQ,MACR,KAAM,qBACP,CAAC,CAC0B,CAc9B,eAAsB,EACpB,EACyD,CACzD,IAAM,EAAS,EAAe,EAAQ,CACtC,GAAI,CAMF,MAAO,CAAE,OAAO,MALG,EAAA,eAAoC,CACrD,QAAS,EACT,OAAQ,MACR,KAAM,oBACP,CAAC,GACoB,QAAU,KAAM,YAAa,GAAO,OACnD,EAAG,CACV,GAAI,aAAa,EAAA,WAAa,EAAE,SAAW,IACzC,MAAO,CAAE,MAAO,KAAM,YAAa,GAAM,CAE3C,MAAM,GAiBV,eAAsB,EACpB,EACA,EAMC,CAED,IAAM,EAAO,MAAM,EAAA,eAKhB,CACD,QAPa,EAAe,EAOnB,CACT,OAAQ,MACR,KAAM,sBAAsB,mBAAmB,EAAM,CAAC,KACvD,CAAC,CACF,MAAO,CACL,MAAO,GAAM,QAAU,EACvB,OAAQ,GAAM,SAAW,GACzB,KAAM,GAAM,MAAQ,KAGpB,YAAa,MAAM,QAAQ,GAAM,YAAY,CAAG,EAAK,YAAc,KACpE"}

package/dist/api/cloud/organization-service.api.js

@@ -1,6 +1,7 @@
-import { getActiveBackend as e } from "../backend-registry/active-store.js";
-import t from "../../node_modules/axios/lib/axios.js";
+import { HttpError as e } from "../../node_modules/@openhands/typescript-client/dist/client/http-client.js";
+import { getActiveBackend as t } from "../backend-registry/active-store.js";
 import { callCloudProxy as n } from "./proxy.js";
+import "../../node_modules/@openhands/typescript-client/dist/index.js";
 //#region src/api/cloud/organization-service.api.ts
 function r(e) {
 	return {
@@ -8,9 +9,9 @@ function r(e) {
 		currentOrgId: e?.current_org_id ?? null
 	};
 }
-function i(t) {
-	if (t) return t;
-	let n = e().backend;
+function i(e) {
+	if (e) return e;
+	let n = t().backend;
 	if (n.kind !== "cloud") throw Error("Cloud organization calls require a cloud backend. Active backend is local.");
 	return n;
 }
@@ -21,8 +22,8 @@ async function a(e) {
 		path: "/api/organizations"
 	}));
 }
-async function o(e) {
-	let r = i(e);
+async function o(t) {
+	let r = i(t);
 	try {
 		return {
 			orgId: (await n({
@@ -32,12 +33,12 @@ async function o(e) {
 			}))?.org_id ?? null,
 			isLegacyKey: !1
 		};
-	} catch (e) {
-		if (t.isAxiosError(e) && e.response?.status === 400) return {
+	} catch (t) {
+		if (t instanceof e && t.status === 400) return {
 			orgId: null,
 			isLegacyKey: !0
 		};
-		throw e;
+		throw t;
 	}
 }
 async function s(e, t) {

package/dist/api/cloud/organization-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"organization-service.api.js","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import axios from \"axios\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (axios.isAxiosError(e) && e.response?.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":";;;;AAeA,SAAS,EACP,GACqB;AACrB,QAAO;EACL,OAAO,GAAM,SAAS,EAAE;EACxB,cAAc,GAAM,kBAAkB;EACvC;;AAGH,SAAS,EAAe,GAA4B;AAClD,KAAI,EAAS,QAAO;CACpB,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MACR,6EACD;AAEH,QAAO;;AAUT,eAAsB,EACpB,GAC8B;AAO9B,QAAO,EAAgB,MALJ,EAA2C;EAC5D,SAFa,EAAe,EAEnB;EACT,QAAQ;EACR,MAAM;EACP,CAAC,CAC0B;;AAc9B,eAAsB,EACpB,GACyD;CACzD,IAAM,IAAS,EAAe,EAAQ;AACtC,KAAI;AAMF,SAAO;GAAE,QAAO,MALG,EAAoC;IACrD,SAAS;IACT,QAAQ;IACR,MAAM;IACP,CAAC,GACoB,UAAU;GAAM,aAAa;GAAO;UACnD,GAAG;AACV,MAAI,EAAM,aAAa,EAAE,IAAI,EAAE,UAAU,WAAW,IAClD,QAAO;GAAE,OAAO;GAAM,aAAa;GAAM;AAE3C,QAAM;;;AAiBV,eAAsB,EACpB,GACA,GAMC;CAED,IAAM,IAAO,MAAM,EAKhB;EACD,SAPa,EAAe,EAOnB;EACT,QAAQ;EACR,MAAM,sBAAsB,mBAAmB,EAAM,CAAC;EACvD,CAAC;AACF,QAAO;EACL,OAAO,GAAM,UAAU;EACvB,QAAQ,GAAM,WAAW;EACzB,MAAM,GAAM,QAAQ;EAGpB,aAAa,MAAM,QAAQ,GAAM,YAAY,GAAG,EAAK,cAAc;EACpE"}
+{"version":3,"file":"organization-service.api.js","names":[],"sources":["../../../src/api/cloud/organization-service.api.ts"],"sourcesContent":["import { HttpError } from \"@openhands/typescript-client\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { callCloudProxy } from \"./proxy\";\nimport type {\n  CloudApiKeyMetadata,\n  CloudOrganization,\n  CloudOrganizationsResponse,\n} from \"./types\";\n\ninterface OrganizationsResult {\n  items: CloudOrganization[];\n  currentOrgId: string | null;\n}\n\nfunction normalizeResult(\n  data: CloudOrganizationsResponse | undefined | null,\n): OrganizationsResult {\n  return {\n    items: data?.items ?? [],\n    currentOrgId: data?.current_org_id ?? null,\n  };\n}\n\nfunction resolveBackend(backend?: Backend): Backend {\n  if (backend) return backend;\n  const active = getActiveBackend().backend;\n  if (active.kind !== \"cloud\") {\n    throw new Error(\n      \"Cloud organization calls require a cloud backend. Active backend is local.\",\n    );\n  }\n  return active;\n}\n\n/**\n * Fetch the org list for a cloud backend. With no argument, uses the active\n * cloud backend; pass `backend` explicitly to fetch for an inactive cloud\n * (used by the selector to flatten all cloud rows).\n *\n * Calls the cloud API directly with the backend's bearer token.\n */\nexport async function getCloudOrganizations(\n  backend?: Backend,\n): Promise<OrganizationsResult> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<CloudOrganizationsResponse>({\n    backend: target,\n    method: \"GET\",\n    path: \"/api/organizations\",\n  });\n  return normalizeResult(data);\n}\n\n/**\n * Fetch metadata for the API key used to authenticate this cloud backend.\n * The returned `orgId` is the single org the key is authorized to act on\n * (the cloud contract: one key → one org).\n *\n * Legacy keys minted before per-key org binding existed cause the upstream\n * to return HTTP 400 — we surface that as `isLegacyKey: true` with a null\n * `orgId` so the caller can fall back to the unfiltered behavior. Other\n * statuses (401 revoked, 5xx outage) propagate so React Query can mark\n * the query as failed and the selector can render the no-org-known row.\n */\nexport async function getCurrentCloudApiKey(\n  backend?: Backend,\n): Promise<{ orgId: string | null; isLegacyKey: boolean }> {\n  const target = resolveBackend(backend);\n  try {\n    const data = await callCloudProxy<CloudApiKeyMetadata>({\n      backend: target,\n      method: \"GET\",\n      path: \"/api/keys/current\",\n    });\n    return { orgId: data?.org_id ?? null, isLegacyKey: false };\n  } catch (e) {\n    if (e instanceof HttpError && e.status === 400) {\n      return { orgId: null, isLegacyKey: true };\n    }\n    throw e;\n  }\n}\n\n/**\n * Fetch `GET /api/organizations/{orgId}/me`. Identifies the calling user as\n * a member of `orgId`. The GUI uses `me.org_id === me.user_id` to decide\n * whether `orgId` is the user's personal workspace — that's the cloud\n * contract (the auto-generated personal-workspace org has the same id as\n * the user).\n *\n * `role` is the caller's role in the org (`owner` | `admin` | `member`, or\n * `null` if the upstream omits it). `permissions` is the server-defined\n * permission set for that role (e.g. `edit_org_settings`); it is `null` on\n * older app-servers that don't return it, so callers fall back to the role.\n * See `useCanManageOrgProfiles`.\n */\nexport async function getCloudOrganizationMe(\n  orgId: string,\n  backend?: Backend,\n): Promise<{\n  orgId: string;\n  userId: string;\n  role: string | null;\n  permissions?: string[] | null;\n}> {\n  const target = resolveBackend(backend);\n  const data = await callCloudProxy<{\n    org_id: string;\n    user_id: string;\n    role?: string;\n    permissions?: string[];\n  }>({\n    backend: target,\n    method: \"GET\",\n    path: `/api/organizations/${encodeURIComponent(orgId)}/me`,\n  });\n  return {\n    orgId: data?.org_id ?? orgId,\n    userId: data?.user_id ?? \"\",\n    role: data?.role ?? null,\n    // `null` when the field is absent (older app-server) so callers can fall\n    // back to a role check; a present array is the server's source of truth.\n    permissions: Array.isArray(data?.permissions) ? data.permissions : null,\n  };\n}\n"],"mappings":";;;;;AAeA,SAAS,EACP,GACqB;AACrB,QAAO;EACL,OAAO,GAAM,SAAS,EAAE;EACxB,cAAc,GAAM,kBAAkB;EACvC;;AAGH,SAAS,EAAe,GAA4B;AAClD,KAAI,EAAS,QAAO;CACpB,IAAM,IAAS,GAAkB,CAAC;AAClC,KAAI,EAAO,SAAS,QAClB,OAAU,MACR,6EACD;AAEH,QAAO;;AAUT,eAAsB,EACpB,GAC8B;AAO9B,QAAO,EAAgB,MALJ,EAA2C;EAC5D,SAFa,EAAe,EAEnB;EACT,QAAQ;EACR,MAAM;EACP,CAAC,CAC0B;;AAc9B,eAAsB,EACpB,GACyD;CACzD,IAAM,IAAS,EAAe,EAAQ;AACtC,KAAI;AAMF,SAAO;GAAE,QAAO,MALG,EAAoC;IACrD,SAAS;IACT,QAAQ;IACR,MAAM;IACP,CAAC,GACoB,UAAU;GAAM,aAAa;GAAO;UACnD,GAAG;AACV,MAAI,aAAa,KAAa,EAAE,WAAW,IACzC,QAAO;GAAE,OAAO;GAAM,aAAa;GAAM;AAE3C,QAAM;;;AAiBV,eAAsB,EACpB,GACA,GAMC;CAED,IAAM,IAAO,MAAM,EAKhB;EACD,SAPa,EAAe,EAOnB;EACT,QAAQ;EACR,MAAM,sBAAsB,mBAAmB,EAAM,CAAC;EACvD,CAAC;AACF,QAAO;EACL,OAAO,GAAM,UAAU;EACvB,QAAQ,GAAM,WAAW;EACzB,MAAM,GAAM,QAAQ;EAGpB,aAAa,MAAM,QAAQ,GAAM,YAAY,GAAG,EAAK,cAAc;EACpE"}

package/dist/api/cloud/proxy.cjs

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../agent-server-config.cjs`),t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../../node_modules/axios/lib/axios.cjs`),i=require(`../backend-registry/auth.cjs`);function a(e){let t=e.authMode??`bearer`;return t===`bearer`?i.buildAuthHeaders(e.backend):t===`session-api-key`&&e.sessionApiKey?{"X-Session-API-Key":e.sessionApiKey}:{}}async function o(i){let o=t.getActiveBackend(),s=o.backend.id===i.backend.id&&o.orgId?{"X-Org-Id":o.orgId}:{},c={...a(i),...s,...i.headers??{}},l=i.hostOverride??i.backend.host;if(!i.hostOverride)return(await r.default.request({url:`${l.replace(/\/+$/,``)}${i.path}`,method:i.method,headers:c,...i.body===void 0?{}:{data:i.body},timeout:(i.timeoutSeconds??30)*1e3,...i.responseType?{responseType:i.responseType}:{}})).data;let u=e.getAgentServerBaseUrl();if(!u)throw new n.NoBackendAvailableError;let d=e.getAgentServerHeaders();return(await r.default.post(`${u.replace(/\/+$/,``)}/api/cloud-proxy`,{host:l,method:i.method,path:i.path,headers:c,body:i.body??null,...i.timeoutSeconds?{timeout_seconds:i.timeoutSeconds}:{}},{headers:d,timeout:3e4,...i.responseType?{responseType:i.responseType}:{}})).data}exports.callCloudProxy=o;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`./client.cjs`);async function t(t){return(t.hostOverride?e.createCloudClientForRuntime(t.backend):e.createCloudClient(t.backend)).request({method:t.method,path:t.path,body:t.body,headers:t.headers,timeoutSeconds:t.timeoutSeconds,hostOverride:t.hostOverride,authMode:t.authMode===void 0||t.authMode===`bearer`?`bearer`:t.authMode,sessionApiKey:t.sessionApiKey,responseType:t.responseType})}exports.callCloudProxy=t;
 //# sourceMappingURL=proxy.cjs.map

package/dist/api/cloud/proxy.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.cjs","names":[],"sources":["../../../src/api/cloud/proxy.ts"],"sourcesContent":["import axios from \"axios\";\nimport {\n  getAgentServerBaseUrl,\n  getAgentServerHeaders,\n} from \"../agent-server-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { NoBackendAvailableError } from \"../agent-server-client-options\";\nimport { buildAuthHeaders } from \"../backend-registry/auth\";\nimport type { Backend } from \"../backend-registry/types\";\n\nexport interface CloudProxyRequest {\n  /**\n   * Cloud backend whose bearer token authenticates the upstream call.\n   * `backend.host` is also the default upstream host unless `hostOverride`\n   * is set.\n   */\n  backend: Backend;\n  /** HTTP method against the upstream host. */\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"PUT\" | \"DELETE\";\n  /** Path on the upstream host, e.g. \"/api/v1/conversation/123/events/search\". */\n  path: string;\n  /** Optional JSON body for non-GET methods. */\n  body?: unknown;\n  /** Extra headers merged with the auth header for the upstream call. */\n  headers?: Record<string, string>;\n  /** Override the upstream timeout, in seconds. */\n  timeoutSeconds?: number;\n  /**\n   * Override the upstream host. When set, the proxy targets this host\n   * instead of `backend.host`. Used for runtime-sandbox calls where the\n   * upstream lives at the conversation's runtime URL (e.g.\n   * `http://<id>.prod-runtime.all-hands.dev`) rather than the cloud API.\n   * The host must still pass the proxy's allowlist server-side.\n   */\n  hostOverride?: string;\n  /**\n   * Auth strategy for the upstream call. Defaults to \"bearer\" (uses the\n   * cloud backend's bearer token via `buildAuthHeaders`). For\n   * runtime-sandbox calls, set to \"session-api-key\" and pass\n   * `sessionApiKey` — those endpoints don't accept bearer tokens, only\n   * `X-Session-API-Key`. \"none\" sends no auth header.\n   */\n  authMode?: \"bearer\" | \"session-api-key\" | \"none\";\n  /** Required when `authMode === \"session-api-key\"`. */\n  sessionApiKey?: string | null;\n  /**\n   * Axios responseType for the inner POST to the bundled agent-server.\n   * Set to \"blob\" when the upstream cloud endpoint returns a binary\n   * payload (e.g. ZIP downloads); leave undefined for default JSON.\n   */\n  responseType?: \"blob\";\n}\n\nfunction buildUpstreamAuthHeaders(\n  req: CloudProxyRequest,\n): Record<string, string> {\n  const mode = req.authMode ?? \"bearer\";\n  if (mode === \"bearer\") return buildAuthHeaders(req.backend);\n  if (mode === \"session-api-key\") {\n    return req.sessionApiKey ? { \"X-Session-API-Key\": req.sessionApiKey } : {};\n  }\n  return {};\n}\n\n/**\n * Send a cloud request. App-host calls (`backend.host`) go directly to the\n * cloud API with the cloud backend's auth headers. Runtime-sandbox calls\n * pass `hostOverride`, and those go through `/api/cloud-proxy` because the\n * per-conversation runtime hosts are not the configured cloud app origin.\n *\n * App-host auth headers are sent directly to the cloud host. Proxied auth\n * headers are carried in the proxy envelope and attached server-side.\n */\nexport async function callCloudProxy<TResponse = unknown>(\n  req: CloudProxyRequest,\n): Promise<TResponse> {\n  // Send `X-Org-Id` so the upstream scopes per-request to the org the user\n  // selected locally, instead of the user's globally-shared\n  // `current_org_id` on the cloud backend. Restricted to calls against the active\n  // backend: the selector also fans out per-backend bookkeeping calls\n  // (e.g. `getCloudOrganizations(b)`) that would otherwise carry the\n  // active backend's orgId across an unrelated API key, which the cloud backend\n  // rejects when api_key_org_id and X-Org-Id disagree.\n  const active = getActiveBackend();\n  const orgIdHeader =\n    active.backend.id === req.backend.id && active.orgId\n      ? { \"X-Org-Id\": active.orgId }\n      : {};\n  const upstreamHeaders = {\n    ...buildUpstreamAuthHeaders(req),\n    ...orgIdHeader,\n    ...(req.headers ?? {}),\n  };\n  const upstreamHost = req.hostOverride ?? req.backend.host;\n\n  if (!req.hostOverride) {\n    const response = await axios.request<TResponse>({\n      url: `${upstreamHost.replace(/\\/+$/, \"\")}${req.path}`,\n      method: req.method,\n      headers: upstreamHeaders,\n      ...(req.body !== undefined ? { data: req.body } : {}),\n      timeout: (req.timeoutSeconds ?? 30) * 1000,\n      ...(req.responseType ? { responseType: req.responseType } : {}),\n    });\n\n    return response.data;\n  }\n\n  const proxyBaseUrl = getAgentServerBaseUrl();\n  if (!proxyBaseUrl) throw new NoBackendAvailableError();\n  const localAuthHeaders = getAgentServerHeaders();\n\n  // Talk to the configured app/ingress origin that exposes /api/cloud-proxy.\n  // Do not resolve this through the backend registry: when the active backend\n  // is cloud, borrowing some other registered local backend would silently\n  // route cloud traffic through the wrong user-configured server.\n  const response = await axios.post<TResponse>(\n    `${proxyBaseUrl.replace(/\\/+$/, \"\")}/api/cloud-proxy`,\n    {\n      host: upstreamHost,\n      method: req.method,\n      path: req.path,\n      headers: upstreamHeaders,\n      body: req.body ?? null,\n      ...(req.timeoutSeconds ? { timeout_seconds: req.timeoutSeconds } : {}),\n    },\n    {\n      headers: localAuthHeaders,\n      timeout: 30_000,\n      ...(req.responseType ? { responseType: req.responseType } : {}),\n    },\n  );\n\n  return response.data;\n}\n"],"mappings":"8RAqDA,SAAS,EACP,EACwB,CACxB,IAAM,EAAO,EAAI,UAAY,SAK7B,OAJI,IAAS,SAAiB,EAAA,iBAAiB,EAAI,QAAQ,CACvD,IAAS,mBACJ,EAAI,cAAgB,CAAE,oBAAqB,EAAI,cAAe,CAAG,EAAE,CAc9E,eAAsB,EACpB,EACoB,CAQpB,IAAM,EAAS,EAAA,kBAAkB,CAC3B,EACJ,EAAO,QAAQ,KAAO,EAAI,QAAQ,IAAM,EAAO,MAC3C,CAAE,WAAY,EAAO,MAAO,CAC5B,EAAE,CACF,EAAkB,CACtB,GAAG,EAAyB,EAAI,CAChC,GAAG,EACH,GAAI,EAAI,SAAW,EAAE,CACtB,CACK,EAAe,EAAI,cAAgB,EAAI,QAAQ,KAErD,GAAI,CAAC,EAAI,aAUP,OAAO,MATgB,EAAA,QAAM,QAAmB,CAC9C,IAAK,GAAG,EAAa,QAAQ,OAAQ,GAAG,GAAG,EAAI,OAC/C,OAAQ,EAAI,OACZ,QAAS,EACT,GAAI,EAAI,OAAS,IAAA,GAAiC,EAAE,CAAvB,CAAE,KAAM,EAAI,KAAM,CAC/C,SAAU,EAAI,gBAAkB,IAAM,IACtC,GAAI,EAAI,aAAe,CAAE,aAAc,EAAI,aAAc,CAAG,EAAE,CAC/D,CAAC,EAEc,KAGlB,IAAM,EAAe,EAAA,uBAAuB,CAC5C,GAAI,CAAC,EAAc,MAAM,IAAI,EAAA,wBAC7B,IAAM,EAAmB,EAAA,uBAAuB,CAuBhD,OAAO,MAjBgB,EAAA,QAAM,KAC3B,GAAG,EAAa,QAAQ,OAAQ,GAAG,CAAC,kBACpC,CACE,KAAM,EACN,OAAQ,EAAI,OACZ,KAAM,EAAI,KACV,QAAS,EACT,KAAM,EAAI,MAAQ,KAClB,GAAI,EAAI,eAAiB,CAAE,gBAAiB,EAAI,eAAgB,CAAG,EAAE,CACtE,CACD,CACE,QAAS,EACT,QAAS,IACT,GAAI,EAAI,aAAe,CAAE,aAAc,EAAI,aAAc,CAAG,EAAE,CAC/D,CACF,EAEe"}
+{"version":3,"file":"proxy.cjs","names":[],"sources":["../../../src/api/cloud/proxy.ts"],"sourcesContent":["import type { CloudRequestOptions } from \"@openhands/typescript-client/clients\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { createCloudClientForRuntime, createCloudClient } from \"./client\";\n\nexport interface CloudProxyRequest {\n  backend: Backend;\n  method: CloudRequestOptions[\"method\"];\n  path: string;\n  body?: unknown;\n  headers?: Record<string, string>;\n  timeoutSeconds?: number;\n  hostOverride?: string;\n  authMode?: \"bearer\" | \"session-api-key\" | \"none\";\n  sessionApiKey?: string | null;\n  responseType?: \"blob\";\n}\n\nexport async function callCloudProxy<TResponse = unknown>(\n  req: CloudProxyRequest,\n): Promise<TResponse> {\n  const client = req.hostOverride\n    ? createCloudClientForRuntime(req.backend)\n    : createCloudClient(req.backend);\n\n  return client.request<TResponse>({\n    method: req.method,\n    path: req.path,\n    body: req.body,\n    headers: req.headers,\n    timeoutSeconds: req.timeoutSeconds,\n    hostOverride: req.hostOverride,\n    authMode:\n      req.authMode === undefined || req.authMode === \"bearer\"\n        ? \"bearer\"\n        : req.authMode,\n    sessionApiKey: req.sessionApiKey,\n    responseType: req.responseType,\n  });\n}\n"],"mappings":"gFAiBA,eAAsB,EACpB,EACoB,CAKpB,OAJe,EAAI,aACf,EAAA,4BAA4B,EAAI,QAAQ,CACxC,EAAA,kBAAkB,EAAI,QAAQ,EAEpB,QAAmB,CAC/B,OAAQ,EAAI,OACZ,KAAM,EAAI,KACV,KAAM,EAAI,KACV,QAAS,EAAI,QACb,eAAgB,EAAI,eACpB,aAAc,EAAI,aAClB,SACE,EAAI,WAAa,IAAA,IAAa,EAAI,WAAa,SAC3C,SACA,EAAI,SACV,cAAe,EAAI,cACnB,aAAc,EAAI,aACnB,CAAC"}

package/dist/api/cloud/proxy.d.ts

@@ -1,53 +1,15 @@
+import type { CloudRequestOptions } from "@openhands/typescript-client/clients";
 import type { Backend } from "../backend-registry/types";
 export interface CloudProxyRequest {
-    /**
-     * Cloud backend whose bearer token authenticates the upstream call.
-     * `backend.host` is also the default upstream host unless `hostOverride`
-     * is set.
-     */
     backend: Backend;
-    /** HTTP method against the upstream host. */
-    method: "GET" | "POST" | "PATCH" | "PUT" | "DELETE";
-    /** Path on the upstream host, e.g. "/api/v1/conversation/123/events/search". */
+    method: CloudRequestOptions["method"];
     path: string;
-    /** Optional JSON body for non-GET methods. */
     body?: unknown;
-    /** Extra headers merged with the auth header for the upstream call. */
     headers?: Record<string, string>;
-    /** Override the upstream timeout, in seconds. */
     timeoutSeconds?: number;
-    /**
-     * Override the upstream host. When set, the proxy targets this host
-     * instead of `backend.host`. Used for runtime-sandbox calls where the
-     * upstream lives at the conversation's runtime URL (e.g.
-     * `http://<id>.prod-runtime.all-hands.dev`) rather than the cloud API.
-     * The host must still pass the proxy's allowlist server-side.
-     */
     hostOverride?: string;
-    /**
-     * Auth strategy for the upstream call. Defaults to "bearer" (uses the
-     * cloud backend's bearer token via `buildAuthHeaders`). For
-     * runtime-sandbox calls, set to "session-api-key" and pass
-     * `sessionApiKey` — those endpoints don't accept bearer tokens, only
-     * `X-Session-API-Key`. "none" sends no auth header.
-     */
     authMode?: "bearer" | "session-api-key" | "none";
-    /** Required when `authMode === "session-api-key"`. */
     sessionApiKey?: string | null;
-    /**
-     * Axios responseType for the inner POST to the bundled agent-server.
-     * Set to "blob" when the upstream cloud endpoint returns a binary
-     * payload (e.g. ZIP downloads); leave undefined for default JSON.
-     */
     responseType?: "blob";
 }
-/**
- * Send a cloud request. App-host calls (`backend.host`) go directly to the
- * cloud API with the cloud backend's auth headers. Runtime-sandbox calls
- * pass `hostOverride`, and those go through `/api/cloud-proxy` because the
- * per-conversation runtime hosts are not the configured cloud app origin.
- *
- * App-host auth headers are sent directly to the cloud host. Proxied auth
- * headers are carried in the proxy envelope and attached server-side.
- */
 export declare function callCloudProxy<TResponse = unknown>(req: CloudProxyRequest): Promise<TResponse>;

package/dist/api/cloud/proxy.js

@@ -1,44 +1,19 @@
-import { getAgentServerBaseUrl as e, getAgentServerHeaders as t } from "../agent-server-config.js";
-import { getActiveBackend as n } from "../backend-registry/active-store.js";
-import { NoBackendAvailableError as r } from "../agent-server-client-options.js";
-import i from "../../node_modules/axios/lib/axios.js";
-import { buildAuthHeaders as a } from "../backend-registry/auth.js";
+import { createCloudClient as e, createCloudClientForRuntime as t } from "./client.js";
 //#region src/api/cloud/proxy.ts
-function o(e) {
-	let t = e.authMode ?? "bearer";
-	return t === "bearer" ? a(e.backend) : t === "session-api-key" && e.sessionApiKey ? { "X-Session-API-Key": e.sessionApiKey } : {};
-}
-async function s(a) {
-	let s = n(), c = s.backend.id === a.backend.id && s.orgId ? { "X-Org-Id": s.orgId } : {}, l = {
-		...o(a),
-		...c,
-		...a.headers ?? {}
-	}, u = a.hostOverride ?? a.backend.host;
-	if (!a.hostOverride) return (await i.request({
-		url: `${u.replace(/\/+$/, "")}${a.path}`,
-		method: a.method,
-		headers: l,
-		...a.body === void 0 ? {} : { data: a.body },
-		timeout: (a.timeoutSeconds ?? 30) * 1e3,
-		...a.responseType ? { responseType: a.responseType } : {}
-	})).data;
-	let d = e();
-	if (!d) throw new r();
-	let f = t();
-	return (await i.post(`${d.replace(/\/+$/, "")}/api/cloud-proxy`, {
-		host: u,
-		method: a.method,
-		path: a.path,
-		headers: l,
-		body: a.body ?? null,
-		...a.timeoutSeconds ? { timeout_seconds: a.timeoutSeconds } : {}
-	}, {
-		headers: f,
-		timeout: 3e4,
-		...a.responseType ? { responseType: a.responseType } : {}
-	})).data;
+async function n(n) {
+	return (n.hostOverride ? t(n.backend) : e(n.backend)).request({
+		method: n.method,
+		path: n.path,
+		body: n.body,
+		headers: n.headers,
+		timeoutSeconds: n.timeoutSeconds,
+		hostOverride: n.hostOverride,
+		authMode: n.authMode === void 0 || n.authMode === "bearer" ? "bearer" : n.authMode,
+		sessionApiKey: n.sessionApiKey,
+		responseType: n.responseType
+	});
 }
 //#endregion
-export { s as callCloudProxy };
+export { n as callCloudProxy };
 
 //# sourceMappingURL=proxy.js.map

package/dist/api/cloud/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","names":[],"sources":["../../../src/api/cloud/proxy.ts"],"sourcesContent":["import axios from \"axios\";\nimport {\n  getAgentServerBaseUrl,\n  getAgentServerHeaders,\n} from \"../agent-server-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport { NoBackendAvailableError } from \"../agent-server-client-options\";\nimport { buildAuthHeaders } from \"../backend-registry/auth\";\nimport type { Backend } from \"../backend-registry/types\";\n\nexport interface CloudProxyRequest {\n  /**\n   * Cloud backend whose bearer token authenticates the upstream call.\n   * `backend.host` is also the default upstream host unless `hostOverride`\n   * is set.\n   */\n  backend: Backend;\n  /** HTTP method against the upstream host. */\n  method: \"GET\" | \"POST\" | \"PATCH\" | \"PUT\" | \"DELETE\";\n  /** Path on the upstream host, e.g. \"/api/v1/conversation/123/events/search\". */\n  path: string;\n  /** Optional JSON body for non-GET methods. */\n  body?: unknown;\n  /** Extra headers merged with the auth header for the upstream call. */\n  headers?: Record<string, string>;\n  /** Override the upstream timeout, in seconds. */\n  timeoutSeconds?: number;\n  /**\n   * Override the upstream host. When set, the proxy targets this host\n   * instead of `backend.host`. Used for runtime-sandbox calls where the\n   * upstream lives at the conversation's runtime URL (e.g.\n   * `http://<id>.prod-runtime.all-hands.dev`) rather than the cloud API.\n   * The host must still pass the proxy's allowlist server-side.\n   */\n  hostOverride?: string;\n  /**\n   * Auth strategy for the upstream call. Defaults to \"bearer\" (uses the\n   * cloud backend's bearer token via `buildAuthHeaders`). For\n   * runtime-sandbox calls, set to \"session-api-key\" and pass\n   * `sessionApiKey` — those endpoints don't accept bearer tokens, only\n   * `X-Session-API-Key`. \"none\" sends no auth header.\n   */\n  authMode?: \"bearer\" | \"session-api-key\" | \"none\";\n  /** Required when `authMode === \"session-api-key\"`. */\n  sessionApiKey?: string | null;\n  /**\n   * Axios responseType for the inner POST to the bundled agent-server.\n   * Set to \"blob\" when the upstream cloud endpoint returns a binary\n   * payload (e.g. ZIP downloads); leave undefined for default JSON.\n   */\n  responseType?: \"blob\";\n}\n\nfunction buildUpstreamAuthHeaders(\n  req: CloudProxyRequest,\n): Record<string, string> {\n  const mode = req.authMode ?? \"bearer\";\n  if (mode === \"bearer\") return buildAuthHeaders(req.backend);\n  if (mode === \"session-api-key\") {\n    return req.sessionApiKey ? { \"X-Session-API-Key\": req.sessionApiKey } : {};\n  }\n  return {};\n}\n\n/**\n * Send a cloud request. App-host calls (`backend.host`) go directly to the\n * cloud API with the cloud backend's auth headers. Runtime-sandbox calls\n * pass `hostOverride`, and those go through `/api/cloud-proxy` because the\n * per-conversation runtime hosts are not the configured cloud app origin.\n *\n * App-host auth headers are sent directly to the cloud host. Proxied auth\n * headers are carried in the proxy envelope and attached server-side.\n */\nexport async function callCloudProxy<TResponse = unknown>(\n  req: CloudProxyRequest,\n): Promise<TResponse> {\n  // Send `X-Org-Id` so the upstream scopes per-request to the org the user\n  // selected locally, instead of the user's globally-shared\n  // `current_org_id` on the cloud backend. Restricted to calls against the active\n  // backend: the selector also fans out per-backend bookkeeping calls\n  // (e.g. `getCloudOrganizations(b)`) that would otherwise carry the\n  // active backend's orgId across an unrelated API key, which the cloud backend\n  // rejects when api_key_org_id and X-Org-Id disagree.\n  const active = getActiveBackend();\n  const orgIdHeader =\n    active.backend.id === req.backend.id && active.orgId\n      ? { \"X-Org-Id\": active.orgId }\n      : {};\n  const upstreamHeaders = {\n    ...buildUpstreamAuthHeaders(req),\n    ...orgIdHeader,\n    ...(req.headers ?? {}),\n  };\n  const upstreamHost = req.hostOverride ?? req.backend.host;\n\n  if (!req.hostOverride) {\n    const response = await axios.request<TResponse>({\n      url: `${upstreamHost.replace(/\\/+$/, \"\")}${req.path}`,\n      method: req.method,\n      headers: upstreamHeaders,\n      ...(req.body !== undefined ? { data: req.body } : {}),\n      timeout: (req.timeoutSeconds ?? 30) * 1000,\n      ...(req.responseType ? { responseType: req.responseType } : {}),\n    });\n\n    return response.data;\n  }\n\n  const proxyBaseUrl = getAgentServerBaseUrl();\n  if (!proxyBaseUrl) throw new NoBackendAvailableError();\n  const localAuthHeaders = getAgentServerHeaders();\n\n  // Talk to the configured app/ingress origin that exposes /api/cloud-proxy.\n  // Do not resolve this through the backend registry: when the active backend\n  // is cloud, borrowing some other registered local backend would silently\n  // route cloud traffic through the wrong user-configured server.\n  const response = await axios.post<TResponse>(\n    `${proxyBaseUrl.replace(/\\/+$/, \"\")}/api/cloud-proxy`,\n    {\n      host: upstreamHost,\n      method: req.method,\n      path: req.path,\n      headers: upstreamHeaders,\n      body: req.body ?? null,\n      ...(req.timeoutSeconds ? { timeout_seconds: req.timeoutSeconds } : {}),\n    },\n    {\n      headers: localAuthHeaders,\n      timeout: 30_000,\n      ...(req.responseType ? { responseType: req.responseType } : {}),\n    },\n  );\n\n  return response.data;\n}\n"],"mappings":";;;;;;AAqDA,SAAS,EACP,GACwB;CACxB,IAAM,IAAO,EAAI,YAAY;AAK7B,QAJI,MAAS,WAAiB,EAAiB,EAAI,QAAQ,GACvD,MAAS,qBACJ,EAAI,gBAAgB,EAAE,qBAAqB,EAAI,eAAe,GAAG,EAAE;;AAc9E,eAAsB,EACpB,GACoB;CAQpB,IAAM,IAAS,GAAkB,EAC3B,IACJ,EAAO,QAAQ,OAAO,EAAI,QAAQ,MAAM,EAAO,QAC3C,EAAE,YAAY,EAAO,OAAO,GAC5B,EAAE,EACF,IAAkB;EACtB,GAAG,EAAyB,EAAI;EAChC,GAAG;EACH,GAAI,EAAI,WAAW,EAAE;EACtB,EACK,IAAe,EAAI,gBAAgB,EAAI,QAAQ;AAErD,KAAI,CAAC,EAAI,aAUP,SAAO,MATgB,EAAM,QAAmB;EAC9C,KAAK,GAAG,EAAa,QAAQ,QAAQ,GAAG,GAAG,EAAI;EAC/C,QAAQ,EAAI;EACZ,SAAS;EACT,GAAI,EAAI,SAAS,KAAA,IAAiC,EAAE,GAAvB,EAAE,MAAM,EAAI,MAAM;EAC/C,UAAU,EAAI,kBAAkB,MAAM;EACtC,GAAI,EAAI,eAAe,EAAE,cAAc,EAAI,cAAc,GAAG,EAAE;EAC/D,CAAC,EAEc;CAGlB,IAAM,IAAe,GAAuB;AAC5C,KAAI,CAAC,EAAc,OAAM,IAAI,GAAyB;CACtD,IAAM,IAAmB,GAAuB;AAuBhD,SAAO,MAjBgB,EAAM,KAC3B,GAAG,EAAa,QAAQ,QAAQ,GAAG,CAAC,mBACpC;EACE,MAAM;EACN,QAAQ,EAAI;EACZ,MAAM,EAAI;EACV,SAAS;EACT,MAAM,EAAI,QAAQ;EAClB,GAAI,EAAI,iBAAiB,EAAE,iBAAiB,EAAI,gBAAgB,GAAG,EAAE;EACtE,EACD;EACE,SAAS;EACT,SAAS;EACT,GAAI,EAAI,eAAe,EAAE,cAAc,EAAI,cAAc,GAAG,EAAE;EAC/D,CACF,EAEe"}
+{"version":3,"file":"proxy.js","names":[],"sources":["../../../src/api/cloud/proxy.ts"],"sourcesContent":["import type { CloudRequestOptions } from \"@openhands/typescript-client/clients\";\nimport type { Backend } from \"../backend-registry/types\";\nimport { createCloudClientForRuntime, createCloudClient } from \"./client\";\n\nexport interface CloudProxyRequest {\n  backend: Backend;\n  method: CloudRequestOptions[\"method\"];\n  path: string;\n  body?: unknown;\n  headers?: Record<string, string>;\n  timeoutSeconds?: number;\n  hostOverride?: string;\n  authMode?: \"bearer\" | \"session-api-key\" | \"none\";\n  sessionApiKey?: string | null;\n  responseType?: \"blob\";\n}\n\nexport async function callCloudProxy<TResponse = unknown>(\n  req: CloudProxyRequest,\n): Promise<TResponse> {\n  const client = req.hostOverride\n    ? createCloudClientForRuntime(req.backend)\n    : createCloudClient(req.backend);\n\n  return client.request<TResponse>({\n    method: req.method,\n    path: req.path,\n    body: req.body,\n    headers: req.headers,\n    timeoutSeconds: req.timeoutSeconds,\n    hostOverride: req.hostOverride,\n    authMode:\n      req.authMode === undefined || req.authMode === \"bearer\"\n        ? \"bearer\"\n        : req.authMode,\n    sessionApiKey: req.sessionApiKey,\n    responseType: req.responseType,\n  });\n}\n"],"mappings":";;AAiBA,eAAsB,EACpB,GACoB;AAKpB,SAJe,EAAI,eACf,EAA4B,EAAI,QAAQ,GACxC,EAAkB,EAAI,QAAQ,EAEpB,QAAmB;EAC/B,QAAQ,EAAI;EACZ,MAAM,EAAI;EACV,MAAM,EAAI;EACV,SAAS,EAAI;EACb,gBAAgB,EAAI;EACpB,cAAc,EAAI;EAClB,UACE,EAAI,aAAa,KAAA,KAAa,EAAI,aAAa,WAC3C,WACA,EAAI;EACV,eAAe,EAAI;EACnB,cAAc,EAAI;EACnB,CAAC"}

package/dist/api/conversation-metadata-store.cjs

@@ -1,2 +1,2 @@
-require(`../_virtual/_rolldown/runtime.cjs`);var e=`openhands-agent-server-conversation-metadata`,t=()=>{if(typeof window>`u`)return{};try{let t=window.localStorage.getItem(e);if(!t)return{};let n=JSON.parse(t);return!n||typeof n!=`object`?{}:n}catch{return{}}},n=t=>{if(!(typeof window>`u`)){if(Object.keys(t).length===0){window.localStorage.removeItem(e);return}window.localStorage.setItem(e,JSON.stringify(t))}},r=e=>t()[e]??null,i=(e,r)=>{let i=t();i[e]=r,n(i)},a=e=>{let r=t();e in r&&(delete r[e],n(r))};exports.getStoredConversationMetadata=r,exports.removeStoredConversationMetadata=a,exports.setStoredConversationMetadata=i;
+require(`../_virtual/_rolldown/runtime.cjs`);var e=`openhands-agent-server-conversation-metadata`,t=e=>({source:e.source,ref:e.ref??null,repo_path:e.repo_path??null}),n=()=>{if(typeof window>`u`)return{};try{let t=window.localStorage.getItem(e);if(!t)return{};let n=JSON.parse(t);return!n||typeof n!=`object`?{}:n}catch{return{}}},r=t=>{if(!(typeof window>`u`)){if(Object.keys(t).length===0){window.localStorage.removeItem(e);return}window.localStorage.setItem(e,JSON.stringify(t))}},i=e=>n()[e]??null,a=(e,t)=>{let i=n();i[e]=t,r(i)},o=e=>{let t=n();e in t&&(delete t[e],r(t))};exports.getStoredConversationMetadata=i,exports.removeStoredConversationMetadata=o,exports.setStoredConversationMetadata=a,exports.toPluginCoordinates=t;
 //# sourceMappingURL=conversation-metadata-store.cjs.map

package/dist/api/conversation-metadata-store.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-metadata-store.cjs","names":[],"sources":["../../src/api/conversation-metadata-store.ts"],"sourcesContent":["import { Provider } from \"#/types/settings\";\nimport type { PluginSpec } from \"#/api/conversation-service/agent-server-conversation-service.types\";\n\nconst STORAGE_KEY = \"openhands-agent-server-conversation-metadata\";\n\nexport type WorkspaceMode = \"local_repo\" | \"new_worktree\";\n\nexport interface ConversationMetadata {\n  selected_repository: string | null;\n  selected_branch: string | null;\n  git_provider: Provider | null;\n  /**\n   * The local workspace path the user explicitly attached at conversation\n   * creation time. Distinct from `selected_repository` (which is set by\n   * the repo picker on the home page). Used by the Files tab to decide\n   * whether to default to diff view: if the user attached *anything*\n   * (repo or local workspace), we lean diff-first because there's a real\n   * git baseline to compare against.\n   */\n  selected_workspace?: string | null;\n  /**\n   * How the conversation should use `selected_workspace`.\n   *\n   * `local_repo` means the runtime should operate directly in the selected\n   * folder, even when it is not a git checkout. `new_worktree` preserves the\n   * historical agent-server behavior for conversations that should start in a\n   * generated per-conversation worktree.\n   */\n  workspace_mode?: WorkspaceMode | null;\n  /**\n   * The LLM profile the conversation was created with (or last switched to).\n   * Client-side only. Lets the chat-header switcher show the exact profile\n   * name even when several profiles share the same underlying model — the\n   * agent-server only round-trips the model string, so matching on it alone\n   * is ambiguous (issue #1082).\n   */\n  active_profile?: string | null;\n  /**\n   * Snapshot of the plugins loaded into the conversation, captured at creation\n   * (coordinates only — `parameters` are stripped): plugins explicitly attached\n   * at creation plus the enabled installed plugins the SDK auto-loads into new\n   * local conversations. The agent-server doesn't expose a live conversation's\n   * loaded plugins, so this is the client-side source for the in-conversation\n   * plugins view. Local + forward-only: only set for conversations created\n   * after this shipped, and only when `app_conversation_id` is known.\n   */\n  plugins?: PluginSpec[] | null;\n}\n\ntype StoredMetadata = Record<string, ConversationMetadata>;\n\nconst readAll = (): StoredMetadata => {\n  if (typeof window === \"undefined\") return {};\n  try {\n    const raw = window.localStorage.getItem(STORAGE_KEY);\n    if (!raw) return {};\n    const parsed = JSON.parse(raw) as unknown;\n    if (!parsed || typeof parsed !== \"object\") return {};\n    return parsed as StoredMetadata;\n  } catch {\n    return {};\n  }\n};\n\nconst writeAll = (next: StoredMetadata): void => {\n  if (typeof window === \"undefined\") return;\n  if (Object.keys(next).length === 0) {\n    window.localStorage.removeItem(STORAGE_KEY);\n    return;\n  }\n  window.localStorage.setItem(STORAGE_KEY, JSON.stringify(next));\n};\n\nexport const getStoredConversationMetadata = (\n  conversationId: string,\n): ConversationMetadata | null => readAll()[conversationId] ?? null;\n\nexport const setStoredConversationMetadata = (\n  conversationId: string,\n  metadata: ConversationMetadata,\n): void => {\n  const all = readAll();\n  all[conversationId] = metadata;\n  writeAll(all);\n};\n\nexport const removeStoredConversationMetadata = (\n  conversationId: string,\n): void => {\n  const all = readAll();\n  if (!(conversationId in all)) return;\n  delete all[conversationId];\n  writeAll(all);\n};\n"],"mappings":"6CAGA,IAAM,EAAc,+CAgDd,MAAgC,CACpC,GAAI,OAAO,OAAW,IAAa,MAAO,EAAE,CAC5C,GAAI,CACF,IAAM,EAAM,OAAO,aAAa,QAAQ,EAAY,CACpD,GAAI,CAAC,EAAK,MAAO,EAAE,CACnB,IAAM,EAAS,KAAK,MAAM,EAAI,CAE9B,MADI,CAAC,GAAU,OAAO,GAAW,SAAiB,EAAE,CAC7C,OACD,CACN,MAAO,EAAE,GAIP,EAAY,GAA+B,CAC3C,YAAO,OAAW,KACtB,IAAI,OAAO,KAAK,EAAK,CAAC,SAAW,EAAG,CAClC,OAAO,aAAa,WAAW,EAAY,CAC3C,OAEF,OAAO,aAAa,QAAQ,EAAa,KAAK,UAAU,EAAK,CAAC,GAGnD,EACX,GACgC,GAAS,CAAC,IAAmB,KAElD,GACX,EACA,IACS,CACT,IAAM,EAAM,GAAS,CACrB,EAAI,GAAkB,EACtB,EAAS,EAAI,EAGF,EACX,GACS,CACT,IAAM,EAAM,GAAS,CACf,KAAkB,IACxB,OAAO,EAAI,GACX,EAAS,EAAI"}
+{"version":3,"file":"conversation-metadata-store.cjs","names":[],"sources":["../../src/api/conversation-metadata-store.ts"],"sourcesContent":["import { Provider } from \"#/types/settings\";\nimport type { PluginSpec } from \"#/api/conversation-service/agent-server-conversation-service.types\";\n\nconst STORAGE_KEY = \"openhands-agent-server-conversation-metadata\";\n\nexport type WorkspaceMode = \"local_repo\" | \"new_worktree\";\n\nexport interface ConversationMetadata {\n  selected_repository: string | null;\n  selected_branch: string | null;\n  git_provider: Provider | null;\n  /**\n   * The local workspace path the user explicitly attached at conversation\n   * creation time. Distinct from `selected_repository` (which is set by\n   * the repo picker on the home page). Used by the Files tab to decide\n   * whether to default to diff view: if the user attached *anything*\n   * (repo or local workspace), we lean diff-first because there's a real\n   * git baseline to compare against.\n   */\n  selected_workspace?: string | null;\n  /**\n   * How the conversation should use `selected_workspace`.\n   *\n   * `local_repo` means the runtime should operate directly in the selected\n   * folder, even when it is not a git checkout. `new_worktree` preserves the\n   * historical agent-server behavior for conversations that should start in a\n   * generated per-conversation worktree.\n   */\n  workspace_mode?: WorkspaceMode | null;\n  /**\n   * The LLM profile the conversation was created with (or last switched to).\n   * Client-side only. Lets the chat-header switcher show the exact profile\n   * name even when several profiles share the same underlying model — the\n   * agent-server only round-trips the model string, so matching on it alone\n   * is ambiguous (issue #1082).\n   */\n  active_profile?: string | null;\n  /** Store plugin coordinates only; parameters may contain secrets. */\n  plugins?: PluginSpec[] | null;\n}\n\nexport const toPluginCoordinates = (plugin: PluginSpec): PluginSpec => ({\n  source: plugin.source,\n  ref: plugin.ref ?? null,\n  repo_path: plugin.repo_path ?? null,\n});\n\ntype StoredMetadata = Record<string, ConversationMetadata>;\n\nconst readAll = (): StoredMetadata => {\n  if (typeof window === \"undefined\") return {};\n  try {\n    const raw = window.localStorage.getItem(STORAGE_KEY);\n    if (!raw) return {};\n    const parsed = JSON.parse(raw) as unknown;\n    if (!parsed || typeof parsed !== \"object\") return {};\n    return parsed as StoredMetadata;\n  } catch {\n    return {};\n  }\n};\n\nconst writeAll = (next: StoredMetadata): void => {\n  if (typeof window === \"undefined\") return;\n  if (Object.keys(next).length === 0) {\n    window.localStorage.removeItem(STORAGE_KEY);\n    return;\n  }\n  window.localStorage.setItem(STORAGE_KEY, JSON.stringify(next));\n};\n\nexport const getStoredConversationMetadata = (\n  conversationId: string,\n): ConversationMetadata | null => readAll()[conversationId] ?? null;\n\nexport const setStoredConversationMetadata = (\n  conversationId: string,\n  metadata: ConversationMetadata,\n): void => {\n  const all = readAll();\n  all[conversationId] = metadata;\n  writeAll(all);\n};\n\nexport const removeStoredConversationMetadata = (\n  conversationId: string,\n): void => {\n  const all = readAll();\n  if (!(conversationId in all)) return;\n  delete all[conversationId];\n  writeAll(all);\n};\n"],"mappings":"6CAGA,IAAM,EAAc,+CAsCP,EAAuB,IAAoC,CACtE,OAAQ,EAAO,OACf,IAAK,EAAO,KAAO,KACnB,UAAW,EAAO,WAAa,KAChC,EAIK,MAAgC,CACpC,GAAI,OAAO,OAAW,IAAa,MAAO,EAAE,CAC5C,GAAI,CACF,IAAM,EAAM,OAAO,aAAa,QAAQ,EAAY,CACpD,GAAI,CAAC,EAAK,MAAO,EAAE,CACnB,IAAM,EAAS,KAAK,MAAM,EAAI,CAE9B,MADI,CAAC,GAAU,OAAO,GAAW,SAAiB,EAAE,CAC7C,OACD,CACN,MAAO,EAAE,GAIP,EAAY,GAA+B,CAC3C,YAAO,OAAW,KACtB,IAAI,OAAO,KAAK,EAAK,CAAC,SAAW,EAAG,CAClC,OAAO,aAAa,WAAW,EAAY,CAC3C,OAEF,OAAO,aAAa,QAAQ,EAAa,KAAK,UAAU,EAAK,CAAC,GAGnD,EACX,GACgC,GAAS,CAAC,IAAmB,KAElD,GACX,EACA,IACS,CACT,IAAM,EAAM,GAAS,CACrB,EAAI,GAAkB,EACtB,EAAS,EAAI,EAGF,EACX,GACS,CACT,IAAM,EAAM,GAAS,CACf,KAAkB,IACxB,OAAO,EAAI,GACX,EAAS,EAAI"}

package/dist/api/conversation-metadata-store.d.ts

@@ -31,17 +31,10 @@ export interface ConversationMetadata {
      * is ambiguous (issue #1082).
      */
     active_profile?: string | null;
-    /**
-     * Snapshot of the plugins loaded into the conversation, captured at creation
-     * (coordinates only — `parameters` are stripped): plugins explicitly attached
-     * at creation plus the enabled installed plugins the SDK auto-loads into new
-     * local conversations. The agent-server doesn't expose a live conversation's
-     * loaded plugins, so this is the client-side source for the in-conversation
-     * plugins view. Local + forward-only: only set for conversations created
-     * after this shipped, and only when `app_conversation_id` is known.
-     */
+    /** Store plugin coordinates only; parameters may contain secrets. */
     plugins?: PluginSpec[] | null;
 }
+export declare const toPluginCoordinates: (plugin: PluginSpec) => PluginSpec;
 export declare const getStoredConversationMetadata: (conversationId: string) => ConversationMetadata | null;
 export declare const setStoredConversationMetadata: (conversationId: string, metadata: ConversationMetadata) => void;
 export declare const removeStoredConversationMetadata: (conversationId: string) => void;

package/dist/api/conversation-metadata-store.js

@@ -1,5 +1,9 @@
 //#region src/api/conversation-metadata-store.ts
-var e = "openhands-agent-server-conversation-metadata", t = () => {
+var e = "openhands-agent-server-conversation-metadata", t = (e) => ({
+	source: e.source,
+	ref: e.ref ?? null,
+	repo_path: e.repo_path ?? null
+}), n = () => {
 	if (typeof window > "u") return {};
 	try {
 		let t = window.localStorage.getItem(e);
@@ -9,7 +13,7 @@ var e = "openhands-agent-server-conversation-metadata", t = () => {
 	} catch {
 		return {};
 	}
-}, n = (t) => {
+}, r = (t) => {
 	if (!(typeof window > "u")) {
 		if (Object.keys(t).length === 0) {
 			window.localStorage.removeItem(e);
@@ -17,14 +21,14 @@ var e = "openhands-agent-server-conversation-metadata", t = () => {
 		}
 		window.localStorage.setItem(e, JSON.stringify(t));
 	}
-}, r = (e) => t()[e] ?? null, i = (e, r) => {
-	let i = t();
-	i[e] = r, n(i);
-}, a = (e) => {
-	let r = t();
-	e in r && (delete r[e], n(r));
+}, i = (e) => n()[e] ?? null, a = (e, t) => {
+	let i = n();
+	i[e] = t, r(i);
+}, o = (e) => {
+	let t = n();
+	e in t && (delete t[e], r(t));
 };
 //#endregion
-export { r as getStoredConversationMetadata, a as removeStoredConversationMetadata, i as setStoredConversationMetadata };
+export { i as getStoredConversationMetadata, o as removeStoredConversationMetadata, a as setStoredConversationMetadata, t as toPluginCoordinates };
 
 //# sourceMappingURL=conversation-metadata-store.js.map