@openhands/agent-canvas 1.5.1 → 1.6.1

package/dist/api/settings-service/settings-service.api.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-service.api.cjs","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport {\n  getSdkMcpServerMap,\n  hasRedactedMcpSecretLeaf,\n  stringRecord,\n} from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\nconst cloudCompatibleMcpConfig = (value: unknown): unknown => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server) || !isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders = { ...existingHeaders, ...authHeaders };\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\nconst hasRedactedMcpSecrets = (mcpConfig: unknown): boolean => {\n  const servers = getSdkMcpServerMap(mcpConfig);\n  if (!servers) return false;\n  return Object.values(servers).some(\n    (server) =>\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.auth : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.headers : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.env : undefined),\n  );\n};\n\nconst removesMcpServer = (previous: unknown, next: unknown): boolean => {\n  const previousServers = getSdkMcpServerMap(previous);\n  const nextServers = getSdkMcpServerMap(next);\n  if (!previousServers || !nextServers) return false;\n  return Object.keys(previousServers).some((name) => !(name in nextServers));\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n\n    // The backend applies ``agent_settings_diff`` by deep-merging it into the\n    // existing ``agent_settings`` dict (see SDK\n    // ``openhands.agent_server.persistence.models._deep_merge``). That works\n    // for scalar fields but is wrong for ``mcp_config``, which is\n    // a name-keyed map: a diff that omits a server cannot remove it (stale\n    // key stays), and a diff whose key indices shift (e.g. after deleting\n    // index 0, the second server is renumbered) leaves the original keys\n    // behind as duplicates pointing to the wrong server config.\n    //\n    // The only way to make ``mcp_config`` behave like a replace through this\n    // API is to first null it out — ``null`` is not a dict, so deep-merge\n    // takes the else branch and sets the field to ``None`` outright — and\n    // then send the new value in a follow-up call. We do this for every\n    // ``mcp_config`` write, including adds (the wasted round-trip is\n    // negligible for this user action and avoids divergent code paths).\n    const agentDiff = payload.agent_settings_diff;\n    // Send a pre-clear PATCH when the diff sets ``mcp_config`` to a non-null\n    // value. A second PATCH below then writes the new value. Skipping the\n    // pre-clear when the caller is already clearing (``mcp_config: null``)\n    // avoids a pointless duplicate request.\n    const needsMcpPreClear =\n      !!agentDiff && \"mcp_config\" in agentDiff && agentDiff.mcp_config !== null;\n\n    // The pre-clear is destructive: if the follow-up write fails after the\n    // clear succeeds, the user's MCP config is left empty. Snapshot the\n    // previous value (in raw SDK-native shape, NOT the GUI's parsed MCPConfig)\n    // before pre-clearing so we can attempt a best-effort rollback. The\n    // original write error is always re-thrown to the caller regardless\n    // of rollback success — the GUI's react-query mutations surface that\n    // as an error toast so the user knows to retry.\n    //\n    // Snapshot must be the SDK-native server map because that is what the\n    // backend expects on the rollback PATCH.\n    // ``SettingsService.getSettings`` returns a GUI Settings object whose\n    // ``mcp_config`` is typed as the parsed frontend MCPConfig and\n    // defaults to empty arrays when nothing is installed, so it is not\n    // suitable for round-tripping back to the backend.\n    let mcpConfigSnapshot: unknown = undefined;\n    if (needsMcpPreClear) {\n      try {\n        if (isCloud) {\n          const raw = (await fetchCloudSettings()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        } else {\n          const raw = (await SettingsService.fetchSettingsFromApi()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        }\n      } catch {\n        // Snapshot failed (network blip, etc.). Continue without rollback\n        // ability — the original write error will still surface.\n      }\n    }\n\n    // Cloud settings may redact MCP env/header/auth secrets without an\n    // encrypted exposure mode. A pre-clear before a non-delete update can\n    // permanently erase unchanged secrets; for updates that keep all existing\n    // server keys, rely on the backend deep-merge to preserve redacted leaves\n    // while applying edited fields and newly typed credentials.\n    const shouldUseCloudMergePatchForRedactedMcpSecrets =\n      isCloud &&\n      needsMcpPreClear &&\n      hasRedactedMcpSecrets(mcpConfigSnapshot) &&\n      !removesMcpServer(mcpConfigSnapshot, agentDiff?.mcp_config);\n    const shouldPreClearMcpConfig =\n      needsMcpPreClear && !shouldUseCloudMergePatchForRedactedMcpSecrets;\n\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          saveCloudSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            ) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      try {\n        await withRetry(() => saveCloudSettings(cloudPayload));\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // Best-effort rollback. We deliberately do not wrap in withRetry:\n          // the user's session is already in a degraded state and we want\n          // to surface the original error promptly. Swallowing the restore\n          // error preserves the original failure context for the caller.\n          try {\n            await saveCloudSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      try {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings(\n            payload,\n          ),\n        );\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // See cloud branch above for rationale.\n          try {\n            await new SettingsClient(\n              getAgentServerClientOptions(),\n            ).updateSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":"ucAuBA,IAAa,EAAwB,CACnC,WACA,6BACA,6BACA,gBACA,iBACA,kBACD,CAsDK,EAAgD,IAAI,IACxD,EACD,CAEK,EAAwB,GAC5B,EAAyB,IAAI,EAAI,CAQ7B,EACJ,GACiE,CACjE,IAAM,EAA4B,EAAE,CAC9B,EAAgC,EAAE,CACxC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,EAAM,CAC1C,EAAqB,EAAI,CAC1B,EAAsC,GAAO,EAE9C,EAAK,GAAO,EAGhB,MAAO,CAAE,YAAW,OAAM,EAYtB,EAAgB,GAAgB,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,CAEjE,GACJ,EACA,KACI,CAAE,GAAI,GAAQ,EAAE,CAAG,GAAI,GAAQ,EAAE,CAAG,EAK1C,eAAe,EACb,EACA,EAAqB,EACrB,EAAsB,IACV,CACZ,IAAK,IAAI,EAAU,EAAG,EAAU,EAAY,GAAW,EACrD,GAAI,CACF,OAAO,MAAM,GAAI,OACV,EAAO,CACd,GAAI,GAAW,EAAa,EAC1B,MAAM,EAGR,IAAM,EAAQ,EAAc,GAAK,EAEjC,MAAM,IAAI,QAAe,GAAY,CACnC,WAAW,EAAS,EAAM,EAC1B,CAIN,MAAU,MAAM,2BAA2B,CAO7C,IAAI,EAOA,CACF,SAAU,KACV,UAAW,KACX,UAAW,EACZ,CAEK,EAAe,IAAS,IAExB,MAAqB,KAAK,KAAK,CAAG,EAAc,UAAY,EAE5D,MAAmB,CACvB,EAAgB,CAAE,SAAU,KAAM,UAAW,KAAM,UAAW,EAAG,EAG7D,EAAY,GAChB,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,EAAM,CAEzD,GAAmB,EAAkB,IAElC,SADO,KAAK,GAAG,EAAS,GAAG,IAClB,GAGZ,EACJ,GACkC,CAClC,OAAQ,EAAK,SAAb,CACE,IAAK,OACH,MAAO,EAAE,CACX,IAAK,UAAW,CACd,GAAI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAO,OAAO,KAC1D,IAAM,EACJ,OAAO,EAAK,aAAgB,UAAY,EAAK,YACzC,EAAK,YACL,gBACA,EACJ,IAAW,gBAAkB,UAAU,EAAK,QAAU,EAAK,MAC7D,MAAO,EAAG,GAAS,EAAO,CAE5B,IAAK,SAEH,OADI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAc,KACnD,CAAE,cAAe,UAAU,EAAK,QAAS,CAClD,IAAK,QAOH,OALE,OAAO,EAAK,UAAa,UACzB,OAAO,EAAK,UAAa,SAElB,KAEF,CAAE,cAAe,EAAgB,EAAK,SAAU,EAAK,SAAS,CAAE,CACzE,IAAK,SACH,OAAO,EAAA,aAAa,EAAK,QAAQ,EAAI,EAAE,CACzC,IAAK,SAAU,CACb,IAAM,EAAS,EAAS,EAAK,MAAM,CAAG,EAAK,MAAM,OAAS,IAAA,GAI1D,MAHI,CAAC,EAAS,EAAO,EAAI,OAAO,EAAO,cAAiB,SAC/C,KAEF,CAAE,cAAe,UAAU,EAAO,eAAgB,CAE3D,QACE,OAAO,OAIP,EAA4B,GAA4B,CAC5D,GAAI,CAAC,EAAS,EAAM,CAAE,OAAO,EAE7B,IAAM,EAAa,EAAS,EAAM,WAAW,CACvC,EAAqC,EACtC,EAAM,WACP,EAEE,EAAY,OAAO,YACvB,OAAO,QAAQ,EAAU,CAAC,KAAK,CAAC,EAAM,KAAY,CAChD,GAAI,CAAC,EAAS,EAAO,EAAI,CAAC,EAAS,EAAO,KAAK,CAAE,MAAO,CAAC,EAAM,EAAO,CAEtE,IAAM,EAAc,EAAmB,EAAO,KAAK,CACnD,GAAI,IAAgB,KAAM,MAAO,CAAC,EAAM,EAAO,CAE/C,IAAM,EAAa,CAAE,GAAG,EAAQ,CAE1B,EAAgB,CAAE,GADA,EAAA,aAAa,EAAO,QAAQ,EAAI,EAAE,CACd,GAAG,EAAa,CAO5D,OANA,OAAO,EAAW,KACd,OAAO,KAAK,EAAc,CAAC,OAAS,EACtC,EAAW,QAAU,EAErB,OAAO,EAAW,QAEb,CAAC,EAAM,EAAW,EACzB,CACH,CAED,OAAO,EAAa,CAAE,GAAG,EAAO,WAAY,EAAW,CAAG,GAGtD,EAAyB,GAAgC,CAC7D,IAAM,EAAU,EAAA,mBAAmB,EAAU,CAE7C,OADK,EACE,OAAO,OAAO,EAAQ,CAAC,KAC3B,GACC,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,KAAO,IAAA,GAAU,EACpE,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,QAAU,IAAA,GAAU,EACvE,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,IAAM,IAAA,GAAU,CACtE,CANoB,IASjB,GAAoB,EAAmB,IAA2B,CACtE,IAAM,EAAkB,EAAA,mBAAmB,EAAS,CAC9C,EAAc,EAAA,mBAAmB,EAAK,CAE5C,MADI,CAAC,GAAmB,CAAC,EAAoB,GACtC,OAAO,KAAK,EAAgB,CAAC,KAAM,GAAS,EAAE,KAAQ,GAAa,EAMtE,EACJ,GACsB,CAItB,IAAM,EAA6B,CACjC,eAJoB,EAAS,gBAAkB,EAAE,CAKjD,sBAJ2B,EAAS,uBAAyB,EAAE,CAK/D,gBAAiB,EAAS,mBAC3B,CAUK,EAAQ,EAAS,eAAe,gBACtC,GAAI,EACF,IAAK,IAAM,KAAO,EAAuB,CACvC,IAAM,EAAQ,EAAM,GAChB,IAAU,IAAA,KACX,EAAoC,GAAO,GAKlD,OAAO,GAOH,EAAuB,GAA0C,CACrE,IAAM,EAAgB,EACpB,EAAA,iBAAiB,gBAAkB,EAAE,CACrC,EAAS,gBAAkB,EAAE,CAC9B,CACK,EAAuB,EAC3B,EAAA,iBAAiB,uBAAyB,EAAE,CAC5C,EAAS,uBAAyB,EAAE,CACrC,CAEK,EAAS,CACb,GAAG,EAAU,EAAA,iBAAiB,CAC9B,GAAG,EACH,oBAAqB,CACnB,GAAI,EAAA,iBAAiB,qBAAuB,EAAE,CAC9C,GAAI,EAAS,qBAAuB,EAAE,CACvC,CACD,eAAgB,EAChB,sBAAuB,EACxB,CAEK,EAAM,EAAc,IACpB,EAAY,EAAc,UAsChC,OAlCI,OAAO,EAAc,OAAU,WACjC,EAAO,MAAQ,EAAc,OAE3B,OAAO,GAAK,OAAU,UAAY,EAAI,MAAM,OAAS,IACvD,EAAO,UAAY,EAAI,OAErB,OAAO,GAAK,UAAa,WAC3B,EAAO,aAAe,EAAI,UAIxB,OAAO,GAAW,SAAY,YAChC,EAAO,yBAA2B,EAAU,SAE1C,OAAO,GAAW,UAAa,WACjC,EAAO,mBAAqB,EAAU,UAEpC,OAAO,EAAqB,mBAAsB,YACpD,EAAO,kBAAoB,EAAqB,oBAGhD,OAAO,EAAqB,mBAAsB,UAClD,EAAqB,oBAAsB,QAE3C,EAAO,kBAAoB,EAAqB,mBAI9C,OAAO,EAAqB,gBAAmB,WACjD,EAAO,eAAiB,EAAqB,gBAG/C,EAAO,mBAAqB,CAAC,CAAC,EAAO,eAE9B,GAGH,EAAN,MAAM,CAAgB,CASpB,aAAa,qBACX,EAC8B,CAC9B,OAAO,MACL,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,YAAY,CAC5D,gBACD,CAAC,CACH,CAOH,aAAa,aAAiC,CAO5C,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,GAAI,CAEF,OAAO,EAAoB,MADP,MAAgB,EAAA,oBAAoB,CAAC,CACxB,OAC1B,EAAO,CAEd,OADA,QAAQ,KAAK,kDAAmD,EAAM,CAC/D,EAAoB,EAAE,CAAC,CAKlC,GAAI,GAAc,EAAI,EAAc,SAClC,OAAO,EAAoB,EAAqB,EAAc,SAAS,CAAC,CAG1E,GAAI,CACF,IAAM,EAAW,MAAM,KAAK,sBAAsB,CAGlD,MAFA,GAAc,SAAW,EACzB,EAAc,UAAY,KAAK,KAAK,CAC7B,EAAoB,EAAqB,EAAS,CAAC,OACnD,EAAO,CAGd,OADA,QAAQ,KAAK,qDAAsD,EAAM,CAClE,EAAoB,EAAE,CAAC,EAYlC,aAAa,4BAIV,CAED,GAAI,GAAc,EAAI,EAAc,UAClC,MAAO,CACL,cAAe,EAAc,UAAU,eACvC,qBAAsB,EAAc,UAAU,sBAC9C,iBAAkB,GACnB,CAKH,IAAM,EAAW,MAAM,KAAK,qBAAqB,YAAY,CAK7D,MAJA,GAAc,UAAY,EAC1B,AACE,EAAc,YAAY,KAAK,KAAK,CAE/B,CACL,cAAe,EAAS,eACxB,qBAAsB,EAAS,sBAC/B,iBAAkB,GACnB,CAGH,aAAa,mBAA6C,CAIxD,OAHI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAC9B,MAAM,EAAA,0BAA0B,CAElC,MAAM,IAAI,EAAA,eAChB,EAAA,6BAA6B,CAC9B,CAAC,gBAAgB,CAGpB,aAAa,+BAAyD,CAIpE,OAHI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAC9B,MAAM,EAAA,sCAAsC,CAE9C,MAAM,IAAI,EAAA,eAChB,EAAA,6BAA6B,CAC9B,CAAC,uBAAuB,CAO3B,aAAa,aACX,EACkB,CAOlB,GAAM,CAAE,UAAW,EAAgB,QAAS,EAC1C,EACD,CACK,EAAoB,OAAO,KAAK,EAAe,CAAC,OAAS,EAEzD,EAAiC,EAAE,CAGnC,EAAoB,EAAK,oBAG3B,GAAqB,OAAO,KAAK,EAAkB,CAAC,OAAS,IAC/D,EAAQ,oBAAsB,GAIhC,IAAM,EAA2B,EAAK,2BAIpC,GACA,OAAO,KAAK,EAAyB,CAAC,OAAS,IAE/C,EAAQ,2BAA6B,GAGnC,IACF,EAAQ,mBAAqB,CAAE,gBAAiB,EAAgB,EAGlE,IAAM,EAAU,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAiB9C,EAAY,EAAQ,oBAKpB,EACJ,CAAC,CAAC,GAAa,eAAgB,GAAa,EAAU,aAAe,KAgBnE,EACJ,GAAI,EACF,GAAI,CACF,AASE,EATE,GAIkB,MAHD,EAAA,oBAAoB,GAGd,gBAAgB,YAKrB,MAHD,EAAgB,sBAAsB,GAGhC,gBAAgB,gBAErC,EAWV,IAAM,EACJ,GACA,GACA,EAAsB,EAAkB,EACxC,CAAC,EAAiB,EAAmB,GAAW,WAAW,CACvD,EACJ,GAAoB,CAAC,EAEvB,GAAI,EAAS,CAKX,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACV,GAEA,MAAO,GAEL,GACF,MAAM,MACJ,EAAA,kBAAkB,CAChB,oBAAqB,CAAE,WAAY,KAAM,CAC1C,CAAC,CACH,CAKH,IAAM,EAAwD,EAAE,CAC5D,EAAQ,sBACV,EAAa,oBAAsB,CAAE,GAAG,EAAQ,oBAAqB,CACjE,eAAgB,EAAa,sBAC/B,EAAa,oBAAoB,WAC/B,EACE,EAAa,oBAAoB,WAClC,GAGH,EAAQ,6BACV,EAAa,2BACX,EAAQ,4BAER,IAIF,EAAa,gBAAkB,GAEjC,GAAI,CACF,MAAM,MAAgB,EAAA,kBAAkB,EAAa,CAAC,OAC/C,EAAK,CACZ,GAAI,GAA2B,EAK7B,GAAI,CACF,MAAM,EAAA,kBAAkB,CACtB,oBAAqB,CACnB,WAAY,EACb,CACF,CAAC,MACI,EAIV,MAAM,OAEH,CAOL,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACR,EAAQ,oBAEV,MAAO,GAEL,GACF,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,eAAe,CAC/D,oBAAqB,CAAE,WAAY,KAAM,CAC1C,CAAC,CACH,CAEH,GAAI,CACF,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,eAChD,EACD,CACF,OACM,EAAK,CACZ,GAAI,GAA2B,EAE7B,GAAI,CACF,MAAM,IAAI,EAAA,eACR,EAAA,6BAA6B,CAC9B,CAAC,eAAe,CACf,oBAAqB,CACnB,WAAY,EACb,CACF,CAAC,MACI,EAIV,MAAM,GAOV,OAFA,GAAY,CAEL,GAOT,OAAO,iBAAwB,CAC7B,GAAY"}
+{"version":3,"file":"settings-service.api.cjs","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport {\n  getSdkMcpServerMap,\n  hasRedactedMcpSecretLeaf,\n  stringRecord,\n} from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\nconst cloudCompatibleMcpConfig = (value: unknown): unknown => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server) || !isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders = { ...existingHeaders, ...authHeaders };\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\nconst hasRedactedMcpSecrets = (mcpConfig: unknown): boolean => {\n  const servers = getSdkMcpServerMap(mcpConfig);\n  if (!servers) return false;\n  return Object.values(servers).some(\n    (server) =>\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.auth : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.headers : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.env : undefined),\n  );\n};\n\nconst removesMcpServer = (previous: unknown, next: unknown): boolean => {\n  const previousServers = getSdkMcpServerMap(previous);\n  const nextServers = getSdkMcpServerMap(next);\n  if (!previousServers || !nextServers) return false;\n  return Object.keys(previousServers).some((name) => !(name in nextServers));\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n\n    // The backend applies ``agent_settings_diff`` by deep-merging it into the\n    // existing ``agent_settings`` dict (see SDK\n    // ``openhands.agent_server.persistence.models._deep_merge``). That works\n    // for scalar fields but is wrong for ``mcp_config``, which is\n    // a name-keyed map: a diff that omits a server cannot remove it (stale\n    // key stays), and a diff whose key indices shift (e.g. after deleting\n    // index 0, the second server is renumbered) leaves the original keys\n    // behind as duplicates pointing to the wrong server config.\n    //\n    // The only way to make ``mcp_config`` behave like a replace through this\n    // API is to first null it out — ``null`` is not a dict, so deep-merge\n    // takes the else branch and sets the field to ``None`` outright — and\n    // then send the new value in a follow-up call. We do this for every\n    // ``mcp_config`` write, including adds (the wasted round-trip is\n    // negligible for this user action and avoids divergent code paths).\n    const agentDiff = payload.agent_settings_diff;\n    // Send a pre-clear PATCH when the diff sets ``mcp_config`` to a non-null\n    // value. A second PATCH below then writes the new value. Skipping the\n    // pre-clear when the caller is already clearing (``mcp_config: null``)\n    // avoids a pointless duplicate request.\n    const needsMcpPreClear =\n      !!agentDiff && \"mcp_config\" in agentDiff && agentDiff.mcp_config !== null;\n\n    // The pre-clear is destructive: if the follow-up write fails after the\n    // clear succeeds, the user's MCP config is left empty. Snapshot the\n    // previous value (in raw SDK-native shape, NOT the GUI's parsed MCPConfig)\n    // before pre-clearing so we can attempt a best-effort rollback. The\n    // original write error is always re-thrown to the caller regardless\n    // of rollback success — the GUI's react-query mutations surface that\n    // as an error toast so the user knows to retry.\n    //\n    // Snapshot must be the SDK-native server map because that is what the\n    // backend expects on the rollback PATCH.\n    // ``SettingsService.getSettings`` returns a GUI Settings object whose\n    // ``mcp_config`` is typed as the parsed frontend MCPConfig and\n    // defaults to empty arrays when nothing is installed, so it is not\n    // suitable for round-tripping back to the backend.\n    let mcpConfigSnapshot: unknown = undefined;\n    if (needsMcpPreClear) {\n      try {\n        if (isCloud) {\n          const raw = (await fetchCloudSettings()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        } else {\n          const raw = (await SettingsService.fetchSettingsFromApi()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        }\n      } catch {\n        // Snapshot failed (network blip, etc.). Continue without rollback\n        // ability — the original write error will still surface.\n      }\n    }\n\n    // Cloud settings may redact MCP env/header/auth secrets without an\n    // encrypted exposure mode. A pre-clear before a non-delete update can\n    // permanently erase unchanged secrets; for updates that keep all existing\n    // server keys, rely on the backend deep-merge to preserve redacted leaves\n    // while applying edited fields and newly typed credentials.\n    const shouldUseCloudMergePatchForRedactedMcpSecrets =\n      isCloud &&\n      needsMcpPreClear &&\n      hasRedactedMcpSecrets(mcpConfigSnapshot) &&\n      !removesMcpServer(mcpConfigSnapshot, agentDiff?.mcp_config);\n    const shouldPreClearMcpConfig =\n      needsMcpPreClear && !shouldUseCloudMergePatchForRedactedMcpSecrets;\n\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          saveCloudSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            ) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      try {\n        await withRetry(() => saveCloudSettings(cloudPayload));\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // Best-effort rollback. We deliberately do not wrap in withRetry:\n          // the user's session is already in a degraded state and we want\n          // to surface the original error promptly. Swallowing the restore\n          // error preserves the original failure context for the caller.\n          try {\n            await saveCloudSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      try {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings(\n            payload,\n          ),\n        );\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // See cloud branch above for rationale.\n          try {\n            await new SettingsClient(\n              getAgentServerClientOptions(),\n            ).updateSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":"ucAuBA,IAAa,EAAwB,CACnC,WACA,6BACA,6BACA,gBACA,iBACA,oBACA,kBACD,CAsDK,EAAgD,IAAI,IACxD,EACD,CAEK,EAAwB,GAC5B,EAAyB,IAAI,EAAI,CAQ7B,EACJ,GACiE,CACjE,IAAM,EAA4B,EAAE,CAC9B,EAAgC,EAAE,CACxC,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,EAAM,CAC1C,EAAqB,EAAI,CAC1B,EAAsC,GAAO,EAE9C,EAAK,GAAO,EAGhB,MAAO,CAAE,YAAW,OAAM,EAYtB,EAAgB,GAAgB,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,CAEjE,GACJ,EACA,KACI,CAAE,GAAI,GAAQ,EAAE,CAAG,GAAI,GAAQ,EAAE,CAAG,EAK1C,eAAe,EACb,EACA,EAAqB,EACrB,EAAsB,IACV,CACZ,IAAK,IAAI,EAAU,EAAG,EAAU,EAAY,GAAW,EACrD,GAAI,CACF,OAAO,MAAM,GAAI,OACV,EAAO,CACd,GAAI,GAAW,EAAa,EAC1B,MAAM,EAGR,IAAM,EAAQ,EAAc,GAAK,EAEjC,MAAM,IAAI,QAAe,GAAY,CACnC,WAAW,EAAS,EAAM,EAC1B,CAIN,MAAU,MAAM,2BAA2B,CAO7C,IAAI,EAOA,CACF,SAAU,KACV,UAAW,KACX,UAAW,EACZ,CAEK,EAAe,IAAS,IAExB,MAAqB,KAAK,KAAK,CAAG,EAAc,UAAY,EAE5D,MAAmB,CACvB,EAAgB,CAAE,SAAU,KAAM,UAAW,KAAM,UAAW,EAAG,EAG7D,EAAY,GAChB,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,EAAM,CAEzD,GAAmB,EAAkB,IAElC,SADO,KAAK,GAAG,EAAS,GAAG,IAClB,GAGZ,EACJ,GACkC,CAClC,OAAQ,EAAK,SAAb,CACE,IAAK,OACH,MAAO,EAAE,CACX,IAAK,UAAW,CACd,GAAI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAO,OAAO,KAC1D,IAAM,EACJ,OAAO,EAAK,aAAgB,UAAY,EAAK,YACzC,EAAK,YACL,gBACA,EACJ,IAAW,gBAAkB,UAAU,EAAK,QAAU,EAAK,MAC7D,MAAO,EAAG,GAAS,EAAO,CAE5B,IAAK,SAEH,OADI,OAAO,EAAK,OAAU,UAAY,CAAC,EAAK,MAAc,KACnD,CAAE,cAAe,UAAU,EAAK,QAAS,CAClD,IAAK,QAOH,OALE,OAAO,EAAK,UAAa,UACzB,OAAO,EAAK,UAAa,SAElB,KAEF,CAAE,cAAe,EAAgB,EAAK,SAAU,EAAK,SAAS,CAAE,CACzE,IAAK,SACH,OAAO,EAAA,aAAa,EAAK,QAAQ,EAAI,EAAE,CACzC,IAAK,SAAU,CACb,IAAM,EAAS,EAAS,EAAK,MAAM,CAAG,EAAK,MAAM,OAAS,IAAA,GAI1D,MAHI,CAAC,EAAS,EAAO,EAAI,OAAO,EAAO,cAAiB,SAC/C,KAEF,CAAE,cAAe,UAAU,EAAO,eAAgB,CAE3D,QACE,OAAO,OAIP,EAA4B,GAA4B,CAC5D,GAAI,CAAC,EAAS,EAAM,CAAE,OAAO,EAE7B,IAAM,EAAa,EAAS,EAAM,WAAW,CACvC,EAAqC,EACtC,EAAM,WACP,EAEE,EAAY,OAAO,YACvB,OAAO,QAAQ,EAAU,CAAC,KAAK,CAAC,EAAM,KAAY,CAChD,GAAI,CAAC,EAAS,EAAO,EAAI,CAAC,EAAS,EAAO,KAAK,CAAE,MAAO,CAAC,EAAM,EAAO,CAEtE,IAAM,EAAc,EAAmB,EAAO,KAAK,CACnD,GAAI,IAAgB,KAAM,MAAO,CAAC,EAAM,EAAO,CAE/C,IAAM,EAAa,CAAE,GAAG,EAAQ,CAE1B,EAAgB,CAAE,GADA,EAAA,aAAa,EAAO,QAAQ,EAAI,EAAE,CACd,GAAG,EAAa,CAO5D,OANA,OAAO,EAAW,KACd,OAAO,KAAK,EAAc,CAAC,OAAS,EACtC,EAAW,QAAU,EAErB,OAAO,EAAW,QAEb,CAAC,EAAM,EAAW,EACzB,CACH,CAED,OAAO,EAAa,CAAE,GAAG,EAAO,WAAY,EAAW,CAAG,GAGtD,EAAyB,GAAgC,CAC7D,IAAM,EAAU,EAAA,mBAAmB,EAAU,CAE7C,OADK,EACE,OAAO,OAAO,EAAQ,CAAC,KAC3B,GACC,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,KAAO,IAAA,GAAU,EACpE,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,QAAU,IAAA,GAAU,EACvE,EAAA,yBAAyB,EAAS,EAAO,CAAG,EAAO,IAAM,IAAA,GAAU,CACtE,CANoB,IASjB,GAAoB,EAAmB,IAA2B,CACtE,IAAM,EAAkB,EAAA,mBAAmB,EAAS,CAC9C,EAAc,EAAA,mBAAmB,EAAK,CAE5C,MADI,CAAC,GAAmB,CAAC,EAAoB,GACtC,OAAO,KAAK,EAAgB,CAAC,KAAM,GAAS,EAAE,KAAQ,GAAa,EAMtE,EACJ,GACsB,CAItB,IAAM,EAA6B,CACjC,eAJoB,EAAS,gBAAkB,EAAE,CAKjD,sBAJ2B,EAAS,uBAAyB,EAAE,CAK/D,gBAAiB,EAAS,mBAC3B,CAUK,EAAQ,EAAS,eAAe,gBACtC,GAAI,EACF,IAAK,IAAM,KAAO,EAAuB,CACvC,IAAM,EAAQ,EAAM,GAChB,IAAU,IAAA,KACX,EAAoC,GAAO,GAKlD,OAAO,GAOH,EAAuB,GAA0C,CACrE,IAAM,EAAgB,EACpB,EAAA,iBAAiB,gBAAkB,EAAE,CACrC,EAAS,gBAAkB,EAAE,CAC9B,CACK,EAAuB,EAC3B,EAAA,iBAAiB,uBAAyB,EAAE,CAC5C,EAAS,uBAAyB,EAAE,CACrC,CAEK,EAAS,CACb,GAAG,EAAU,EAAA,iBAAiB,CAC9B,GAAG,EACH,oBAAqB,CACnB,GAAI,EAAA,iBAAiB,qBAAuB,EAAE,CAC9C,GAAI,EAAS,qBAAuB,EAAE,CACvC,CACD,eAAgB,EAChB,sBAAuB,EACxB,CAEK,EAAM,EAAc,IACpB,EAAY,EAAc,UAsChC,OAlCI,OAAO,EAAc,OAAU,WACjC,EAAO,MAAQ,EAAc,OAE3B,OAAO,GAAK,OAAU,UAAY,EAAI,MAAM,OAAS,IACvD,EAAO,UAAY,EAAI,OAErB,OAAO,GAAK,UAAa,WAC3B,EAAO,aAAe,EAAI,UAIxB,OAAO,GAAW,SAAY,YAChC,EAAO,yBAA2B,EAAU,SAE1C,OAAO,GAAW,UAAa,WACjC,EAAO,mBAAqB,EAAU,UAEpC,OAAO,EAAqB,mBAAsB,YACpD,EAAO,kBAAoB,EAAqB,oBAGhD,OAAO,EAAqB,mBAAsB,UAClD,EAAqB,oBAAsB,QAE3C,EAAO,kBAAoB,EAAqB,mBAI9C,OAAO,EAAqB,gBAAmB,WACjD,EAAO,eAAiB,EAAqB,gBAG/C,EAAO,mBAAqB,CAAC,CAAC,EAAO,eAE9B,GAGH,EAAN,MAAM,CAAgB,CASpB,aAAa,qBACX,EAC8B,CAC9B,OAAO,MACL,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,YAAY,CAC5D,gBACD,CAAC,CACH,CAOH,aAAa,aAAiC,CAO5C,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,GAAI,CAEF,OAAO,EAAoB,MADP,MAAgB,EAAA,oBAAoB,CAAC,CACxB,OAC1B,EAAO,CAEd,OADA,QAAQ,KAAK,kDAAmD,EAAM,CAC/D,EAAoB,EAAE,CAAC,CAKlC,GAAI,GAAc,EAAI,EAAc,SAClC,OAAO,EAAoB,EAAqB,EAAc,SAAS,CAAC,CAG1E,GAAI,CACF,IAAM,EAAW,MAAM,KAAK,sBAAsB,CAGlD,MAFA,GAAc,SAAW,EACzB,EAAc,UAAY,KAAK,KAAK,CAC7B,EAAoB,EAAqB,EAAS,CAAC,OACnD,EAAO,CAGd,OADA,QAAQ,KAAK,qDAAsD,EAAM,CAClE,EAAoB,EAAE,CAAC,EAYlC,aAAa,4BAIV,CAED,GAAI,GAAc,EAAI,EAAc,UAClC,MAAO,CACL,cAAe,EAAc,UAAU,eACvC,qBAAsB,EAAc,UAAU,sBAC9C,iBAAkB,GACnB,CAKH,IAAM,EAAW,MAAM,KAAK,qBAAqB,YAAY,CAK7D,MAJA,GAAc,UAAY,EAC1B,AACE,EAAc,YAAY,KAAK,KAAK,CAE/B,CACL,cAAe,EAAS,eACxB,qBAAsB,EAAS,sBAC/B,iBAAkB,GACnB,CAGH,aAAa,mBAA6C,CAIxD,OAHI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAC9B,MAAM,EAAA,0BAA0B,CAElC,MAAM,IAAI,EAAA,eAChB,EAAA,6BAA6B,CAC9B,CAAC,gBAAgB,CAGpB,aAAa,+BAAyD,CAIpE,OAHI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAC9B,MAAM,EAAA,sCAAsC,CAE9C,MAAM,IAAI,EAAA,eAChB,EAAA,6BAA6B,CAC9B,CAAC,uBAAuB,CAO3B,aAAa,aACX,EACkB,CAOlB,GAAM,CAAE,UAAW,EAAgB,QAAS,EAC1C,EACD,CACK,EAAoB,OAAO,KAAK,EAAe,CAAC,OAAS,EAEzD,EAAiC,EAAE,CAGnC,EAAoB,EAAK,oBAG3B,GAAqB,OAAO,KAAK,EAAkB,CAAC,OAAS,IAC/D,EAAQ,oBAAsB,GAIhC,IAAM,EAA2B,EAAK,2BAIpC,GACA,OAAO,KAAK,EAAyB,CAAC,OAAS,IAE/C,EAAQ,2BAA6B,GAGnC,IACF,EAAQ,mBAAqB,CAAE,gBAAiB,EAAgB,EAGlE,IAAM,EAAU,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QAiB9C,EAAY,EAAQ,oBAKpB,EACJ,CAAC,CAAC,GAAa,eAAgB,GAAa,EAAU,aAAe,KAgBnE,EACJ,GAAI,EACF,GAAI,CACF,AASE,EATE,GAIkB,MAHD,EAAA,oBAAoB,GAGd,gBAAgB,YAKrB,MAHD,EAAgB,sBAAsB,GAGhC,gBAAgB,gBAErC,EAWV,IAAM,EACJ,GACA,GACA,EAAsB,EAAkB,EACxC,CAAC,EAAiB,EAAmB,GAAW,WAAW,CACvD,EACJ,GAAoB,CAAC,EAEvB,GAAI,EAAS,CAKX,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACV,GAEA,MAAO,GAEL,GACF,MAAM,MACJ,EAAA,kBAAkB,CAChB,oBAAqB,CAAE,WAAY,KAAM,CAC1C,CAAC,CACH,CAKH,IAAM,EAAwD,EAAE,CAC5D,EAAQ,sBACV,EAAa,oBAAsB,CAAE,GAAG,EAAQ,oBAAqB,CACjE,eAAgB,EAAa,sBAC/B,EAAa,oBAAoB,WAC/B,EACE,EAAa,oBAAoB,WAClC,GAGH,EAAQ,6BACV,EAAa,2BACX,EAAQ,4BAER,IAIF,EAAa,gBAAkB,GAEjC,GAAI,CACF,MAAM,MAAgB,EAAA,kBAAkB,EAAa,CAAC,OAC/C,EAAK,CACZ,GAAI,GAA2B,EAK7B,GAAI,CACF,MAAM,EAAA,kBAAkB,CACtB,oBAAqB,CACnB,WAAY,EACb,CACF,CAAC,MACI,EAIV,MAAM,OAEH,CAOL,GAAI,EAHA,EAAQ,qBACR,EAAQ,4BACR,EAAQ,oBAEV,MAAO,GAEL,GACF,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,eAAe,CAC/D,oBAAqB,CAAE,WAAY,KAAM,CAC1C,CAAC,CACH,CAEH,GAAI,CACF,MAAM,MACJ,IAAI,EAAA,eAAe,EAAA,6BAA6B,CAAC,CAAC,eAChD,EACD,CACF,OACM,EAAK,CACZ,GAAI,GAA2B,EAE7B,GAAI,CACF,MAAM,IAAI,EAAA,eACR,EAAA,6BAA6B,CAC9B,CAAC,eAAe,CACf,oBAAqB,CACnB,WAAY,EACb,CACF,CAAC,MACI,EAIV,MAAM,GAOV,OAFA,GAAY,CAEL,GAOT,OAAO,iBAAwB,CAC7B,GAAY"}

package/dist/api/settings-service/settings-service.api.d.ts

@@ -5,7 +5,7 @@ import { Settings, SettingsSchema, SettingsValue } from "#/types/settings";
  * partial of Settings so the rest of the frontend can keep treating them as
  * top-level keys (`settings.language`, `settings.disabled_skills`, …).
  */
-export declare const APP_PREFERENCE_FIELDS: readonly ["language", "user_consents_to_analytics", "enable_sound_notifications", "git_user_name", "git_user_email", "disabled_skills"];
+export declare const APP_PREFERENCE_FIELDS: readonly ["language", "user_consents_to_analytics", "enable_sound_notifications", "git_user_name", "git_user_email", "title_llm_profile", "disabled_skills"];
 export type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];
 export type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;
 /**

package/dist/api/settings-service/settings-service.api.js

@@ -12,6 +12,7 @@ var d = [
 	"enable_sound_notifications",
 	"git_user_name",
 	"git_user_email",
+	"title_llm_profile",
 	"disabled_skills"
 ], f = new Set(d), p = (e) => f.has(e), m = (e) => {
 	let t = {}, n = {};

package/dist/api/settings-service/settings-service.api.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-service.api.js","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport {\n  getSdkMcpServerMap,\n  hasRedactedMcpSecretLeaf,\n  stringRecord,\n} from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\nconst cloudCompatibleMcpConfig = (value: unknown): unknown => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server) || !isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders = { ...existingHeaders, ...authHeaders };\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\nconst hasRedactedMcpSecrets = (mcpConfig: unknown): boolean => {\n  const servers = getSdkMcpServerMap(mcpConfig);\n  if (!servers) return false;\n  return Object.values(servers).some(\n    (server) =>\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.auth : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.headers : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.env : undefined),\n  );\n};\n\nconst removesMcpServer = (previous: unknown, next: unknown): boolean => {\n  const previousServers = getSdkMcpServerMap(previous);\n  const nextServers = getSdkMcpServerMap(next);\n  if (!previousServers || !nextServers) return false;\n  return Object.keys(previousServers).some((name) => !(name in nextServers));\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n\n    // The backend applies ``agent_settings_diff`` by deep-merging it into the\n    // existing ``agent_settings`` dict (see SDK\n    // ``openhands.agent_server.persistence.models._deep_merge``). That works\n    // for scalar fields but is wrong for ``mcp_config``, which is\n    // a name-keyed map: a diff that omits a server cannot remove it (stale\n    // key stays), and a diff whose key indices shift (e.g. after deleting\n    // index 0, the second server is renumbered) leaves the original keys\n    // behind as duplicates pointing to the wrong server config.\n    //\n    // The only way to make ``mcp_config`` behave like a replace through this\n    // API is to first null it out — ``null`` is not a dict, so deep-merge\n    // takes the else branch and sets the field to ``None`` outright — and\n    // then send the new value in a follow-up call. We do this for every\n    // ``mcp_config`` write, including adds (the wasted round-trip is\n    // negligible for this user action and avoids divergent code paths).\n    const agentDiff = payload.agent_settings_diff;\n    // Send a pre-clear PATCH when the diff sets ``mcp_config`` to a non-null\n    // value. A second PATCH below then writes the new value. Skipping the\n    // pre-clear when the caller is already clearing (``mcp_config: null``)\n    // avoids a pointless duplicate request.\n    const needsMcpPreClear =\n      !!agentDiff && \"mcp_config\" in agentDiff && agentDiff.mcp_config !== null;\n\n    // The pre-clear is destructive: if the follow-up write fails after the\n    // clear succeeds, the user's MCP config is left empty. Snapshot the\n    // previous value (in raw SDK-native shape, NOT the GUI's parsed MCPConfig)\n    // before pre-clearing so we can attempt a best-effort rollback. The\n    // original write error is always re-thrown to the caller regardless\n    // of rollback success — the GUI's react-query mutations surface that\n    // as an error toast so the user knows to retry.\n    //\n    // Snapshot must be the SDK-native server map because that is what the\n    // backend expects on the rollback PATCH.\n    // ``SettingsService.getSettings`` returns a GUI Settings object whose\n    // ``mcp_config`` is typed as the parsed frontend MCPConfig and\n    // defaults to empty arrays when nothing is installed, so it is not\n    // suitable for round-tripping back to the backend.\n    let mcpConfigSnapshot: unknown = undefined;\n    if (needsMcpPreClear) {\n      try {\n        if (isCloud) {\n          const raw = (await fetchCloudSettings()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        } else {\n          const raw = (await SettingsService.fetchSettingsFromApi()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        }\n      } catch {\n        // Snapshot failed (network blip, etc.). Continue without rollback\n        // ability — the original write error will still surface.\n      }\n    }\n\n    // Cloud settings may redact MCP env/header/auth secrets without an\n    // encrypted exposure mode. A pre-clear before a non-delete update can\n    // permanently erase unchanged secrets; for updates that keep all existing\n    // server keys, rely on the backend deep-merge to preserve redacted leaves\n    // while applying edited fields and newly typed credentials.\n    const shouldUseCloudMergePatchForRedactedMcpSecrets =\n      isCloud &&\n      needsMcpPreClear &&\n      hasRedactedMcpSecrets(mcpConfigSnapshot) &&\n      !removesMcpServer(mcpConfigSnapshot, agentDiff?.mcp_config);\n    const shouldPreClearMcpConfig =\n      needsMcpPreClear && !shouldUseCloudMergePatchForRedactedMcpSecrets;\n\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          saveCloudSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            ) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      try {\n        await withRetry(() => saveCloudSettings(cloudPayload));\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // Best-effort rollback. We deliberately do not wrap in withRetry:\n          // the user's session is already in a degraded state and we want\n          // to surface the original error promptly. Swallowing the restore\n          // error preserves the original failure context for the caller.\n          try {\n            await saveCloudSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      try {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings(\n            payload,\n          ),\n        );\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // See cloud branch above for rationale.\n          try {\n            await new SettingsClient(\n              getAgentServerClientOptions(),\n            ).updateSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":";;;;;;;;AAuBA,IAAa,IAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACD,EAsDK,IAAgD,IAAI,IACxD,EACD,EAEK,KAAwB,MAC5B,EAAyB,IAAI,EAAI,EAQ7B,KACJ,MACiE;CACjE,IAAM,IAA4B,EAAE,EAC9B,IAAgC,EAAE;AACxC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,EAAqB,EAAI,GAC1B,EAAsC,KAAO,IAE9C,EAAK,KAAO;AAGhB,QAAO;EAAE;EAAW;EAAM;GAYtB,KAAgB,MAAgB,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,EAEjE,KACJ,GACA,OACI;CAAE,GAAI,KAAQ,EAAE;CAAG,GAAI,KAAQ,EAAE;CAAG;AAK1C,eAAe,EACb,GACA,IAAqB,GACrB,IAAsB,KACV;AACZ,MAAK,IAAI,IAAU,GAAG,IAAU,GAAY,KAAW,EACrD,KAAI;AACF,SAAO,MAAM,GAAI;UACV,GAAO;AACd,MAAI,KAAW,IAAa,EAC1B,OAAM;EAGR,IAAM,IAAQ,IAAc,KAAK;AAEjC,QAAM,IAAI,SAAe,MAAY;AACnC,cAAW,GAAS,EAAM;IAC1B;;AAIN,OAAU,MAAM,2BAA2B;;AAO7C,IAAI,IAOA;CACF,UAAU;CACV,WAAW;CACX,WAAW;CACZ,EAEK,IAAe,MAAS,KAExB,UAAqB,KAAK,KAAK,GAAG,EAAc,YAAY,GAE5D,UAAmB;AACvB,KAAgB;EAAE,UAAU;EAAM,WAAW;EAAM,WAAW;EAAG;GAG7D,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,EAAM,EAEzD,KAAmB,GAAkB,MAElC,SADO,KAAK,GAAG,EAAS,GAAG,IAClB,IAGZ,KACJ,MACkC;AAClC,SAAQ,EAAK,UAAb;EACE,KAAK,OACH,QAAO,EAAE;EACX,KAAK,WAAW;AACd,OAAI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,MAAO,QAAO;GAC1D,IAAM,IACJ,OAAO,EAAK,eAAgB,YAAY,EAAK,cACzC,EAAK,cACL,iBACA,IACJ,MAAW,kBAAkB,UAAU,EAAK,UAAU,EAAK;AAC7D,UAAO,GAAG,IAAS,GAAO;;EAE5B,KAAK,SAEH,QADI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,QAAc,OACnD,EAAE,eAAe,UAAU,EAAK,SAAS;EAClD,KAAK,QAOH,QALE,OAAO,EAAK,YAAa,YACzB,OAAO,EAAK,YAAa,WAElB,OAEF,EAAE,eAAe,EAAgB,EAAK,UAAU,EAAK,SAAS,EAAE;EACzE,KAAK,SACH,QAAO,EAAa,EAAK,QAAQ,IAAI,EAAE;EACzC,KAAK,UAAU;GACb,IAAM,IAAS,EAAS,EAAK,MAAM,GAAG,EAAK,MAAM,SAAS,KAAA;AAI1D,UAHI,CAAC,EAAS,EAAO,IAAI,OAAO,EAAO,gBAAiB,WAC/C,OAEF,EAAE,eAAe,UAAU,EAAO,gBAAgB;;EAE3D,QACE,QAAO;;GAIP,KAA4B,MAA4B;AAC5D,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAE7B,IAAM,IAAa,EAAS,EAAM,WAAW,EACvC,IAAqC,IACtC,EAAM,aACP,GAEE,IAAY,OAAO,YACvB,OAAO,QAAQ,EAAU,CAAC,KAAK,CAAC,GAAM,OAAY;AAChD,MAAI,CAAC,EAAS,EAAO,IAAI,CAAC,EAAS,EAAO,KAAK,CAAE,QAAO,CAAC,GAAM,EAAO;EAEtE,IAAM,IAAc,EAAmB,EAAO,KAAK;AACnD,MAAI,MAAgB,KAAM,QAAO,CAAC,GAAM,EAAO;EAE/C,IAAM,IAAa,EAAE,GAAG,GAAQ,EAE1B,IAAgB;GAAE,GADA,EAAa,EAAO,QAAQ,IAAI,EAAE;GACd,GAAG;GAAa;AAO5D,SANA,OAAO,EAAW,MACd,OAAO,KAAK,EAAc,CAAC,SAAS,IACtC,EAAW,UAAU,IAErB,OAAO,EAAW,SAEb,CAAC,GAAM,EAAW;GACzB,CACH;AAED,QAAO,IAAa;EAAE,GAAG;EAAO,YAAY;EAAW,GAAG;GAGtD,KAAyB,MAAgC;CAC7D,IAAM,IAAU,EAAmB,EAAU;AAE7C,QADK,IACE,OAAO,OAAO,EAAQ,CAAC,MAC3B,MACC,EAAyB,EAAS,EAAO,GAAG,EAAO,OAAO,KAAA,EAAU,IACpE,EAAyB,EAAS,EAAO,GAAG,EAAO,UAAU,KAAA,EAAU,IACvE,EAAyB,EAAS,EAAO,GAAG,EAAO,MAAM,KAAA,EAAU,CACtE,GANoB;GASjB,KAAoB,GAAmB,MAA2B;CACtE,IAAM,IAAkB,EAAmB,EAAS,EAC9C,IAAc,EAAmB,EAAK;AAE5C,QADI,CAAC,KAAmB,CAAC,IAAoB,KACtC,OAAO,KAAK,EAAgB,CAAC,MAAM,MAAS,EAAE,KAAQ,GAAa;GAMtE,KACJ,MACsB;CAItB,IAAM,IAA6B;EACjC,gBAJoB,EAAS,kBAAkB,EAAE;EAKjD,uBAJ2B,EAAS,yBAAyB,EAAE;EAK/D,iBAAiB,EAAS;EAC3B,EAUK,IAAQ,EAAS,eAAe;AACtC,KAAI,EACF,MAAK,IAAM,KAAO,GAAuB;EACvC,IAAM,IAAQ,EAAM;AACpB,EAAI,MAAU,KAAA,MACX,EAAoC,KAAO;;AAKlD,QAAO;GAOH,KAAuB,MAA0C;CACrE,IAAM,IAAgB,EACpB,EAAiB,kBAAkB,EAAE,EACrC,EAAS,kBAAkB,EAAE,CAC9B,EACK,IAAuB,EAC3B,EAAiB,yBAAyB,EAAE,EAC5C,EAAS,yBAAyB,EAAE,CACrC,EAEK,IAAS;EACb,GAAG,EAAU,EAAiB;EAC9B,GAAG;EACH,qBAAqB;GACnB,GAAI,EAAiB,uBAAuB,EAAE;GAC9C,GAAI,EAAS,uBAAuB,EAAE;GACvC;EACD,gBAAgB;EAChB,uBAAuB;EACxB,EAEK,IAAM,EAAc,KACpB,IAAY,EAAc;AAsChC,QAlCI,OAAO,EAAc,SAAU,aACjC,EAAO,QAAQ,EAAc,QAE3B,OAAO,GAAK,SAAU,YAAY,EAAI,MAAM,SAAS,MACvD,EAAO,YAAY,EAAI,QAErB,OAAO,GAAK,YAAa,aAC3B,EAAO,eAAe,EAAI,WAIxB,OAAO,GAAW,WAAY,cAChC,EAAO,2BAA2B,EAAU,UAE1C,OAAO,GAAW,YAAa,aACjC,EAAO,qBAAqB,EAAU,WAEpC,OAAO,EAAqB,qBAAsB,cACpD,EAAO,oBAAoB,EAAqB,qBAGhD,OAAO,EAAqB,qBAAsB,YAClD,EAAqB,sBAAsB,UAE3C,EAAO,oBAAoB,EAAqB,oBAI9C,OAAO,EAAqB,kBAAmB,aACjD,EAAO,iBAAiB,EAAqB,iBAG/C,EAAO,qBAAqB,CAAC,CAAC,EAAO,gBAE9B;GAGH,IAAN,MAAM,EAAgB;CASpB,aAAa,qBACX,GAC8B;AAC9B,SAAO,QACL,IAAI,EAAe,GAA6B,CAAC,CAAC,YAAY,EAC5D,kBACD,CAAC,CACH;;CAOH,aAAa,cAAiC;AAO5C,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,KAAI;AAEF,UAAO,EAAoB,MADP,QAAgB,GAAoB,CAAC,CACxB;WAC1B,GAAO;AAEd,UADA,QAAQ,KAAK,mDAAmD,EAAM,EAC/D,EAAoB,EAAE,CAAC;;AAKlC,MAAI,GAAc,IAAI,EAAc,SAClC,QAAO,EAAoB,EAAqB,EAAc,SAAS,CAAC;AAG1E,MAAI;GACF,IAAM,IAAW,MAAM,KAAK,sBAAsB;AAGlD,UAFA,EAAc,WAAW,GACzB,EAAc,YAAY,KAAK,KAAK,EAC7B,EAAoB,EAAqB,EAAS,CAAC;WACnD,GAAO;AAGd,UADA,QAAQ,KAAK,sDAAsD,EAAM,EAClE,EAAoB,EAAE,CAAC;;;CAYlC,aAAa,6BAIV;AAED,MAAI,GAAc,IAAI,EAAc,UAClC,QAAO;GACL,eAAe,EAAc,UAAU;GACvC,sBAAsB,EAAc,UAAU;GAC9C,kBAAkB;GACnB;EAKH,IAAM,IAAW,MAAM,KAAK,qBAAqB,YAAY;AAK7D,SAJA,EAAc,YAAY,GAC1B,AACE,EAAc,cAAY,KAAK,KAAK,EAE/B;GACL,eAAe,EAAS;GACxB,sBAAsB,EAAS;GAC/B,kBAAkB;GACnB;;CAGH,aAAa,oBAA6C;AAIxD,SAHI,GAAkB,CAAC,QAAQ,SAAS,UAC9B,MAAM,GAA0B,GAElC,MAAM,IAAI,EAChB,GAA6B,CAC9B,CAAC,gBAAgB;;CAGpB,aAAa,gCAAyD;AAIpE,SAHI,GAAkB,CAAC,QAAQ,SAAS,UAC9B,MAAM,GAAsC,GAE9C,MAAM,IAAI,EAChB,GAA6B,CAC9B,CAAC,uBAAuB;;CAO3B,aAAa,aACX,GACkB;EAOlB,IAAM,EAAE,WAAW,GAAgB,YAAS,EAC1C,EACD,EACK,IAAoB,OAAO,KAAK,EAAe,CAAC,SAAS,GAEzD,IAAiC,EAAE,EAGnC,IAAoB,EAAK;AAG/B,EAAI,KAAqB,OAAO,KAAK,EAAkB,CAAC,SAAS,MAC/D,EAAQ,sBAAsB;EAIhC,IAAM,IAA2B,EAAK;AAUtC,EANE,KACA,OAAO,KAAK,EAAyB,CAAC,SAAS,MAE/C,EAAQ,6BAA6B,IAGnC,MACF,EAAQ,qBAAqB,EAAE,iBAAiB,GAAgB;EAGlE,IAAM,IAAU,GAAkB,CAAC,QAAQ,SAAS,SAiB9C,IAAY,EAAQ,qBAKpB,IACJ,CAAC,CAAC,KAAa,gBAAgB,KAAa,EAAU,eAAe,MAgBnE;AACJ,MAAI,EACF,KAAI;AACF,GASE,IATE,KAIkB,MAHD,GAAoB,GAGd,gBAAgB,cAKrB,MAHD,EAAgB,sBAAsB,GAGhC,gBAAgB;UAErC;EAWV,IAAM,IACJ,KACA,KACA,EAAsB,EAAkB,IACxC,CAAC,EAAiB,GAAmB,GAAW,WAAW,EACvD,IACJ,KAAoB,CAAC;AAEvB,MAAI,GAAS;AAKX,OAAI,EAHA,EAAQ,uBACR,EAAQ,8BACV,GAEA,QAAO;AAET,GAAI,KACF,MAAM,QACJ,EAAkB,EAChB,qBAAqB,EAAE,YAAY,MAAM,EAC1C,CAAC,CACH;GAKH,IAAM,IAAwD,EAAE;AAchE,GAbI,EAAQ,wBACV,EAAa,sBAAsB,EAAE,GAAG,EAAQ,qBAAqB,EACjE,gBAAgB,EAAa,wBAC/B,EAAa,oBAAoB,aAC/B,EACE,EAAa,oBAAoB,WAClC,IAGH,EAAQ,+BACV,EAAa,6BACX,EAAQ,6BAER,MAIF,EAAa,kBAAkB;AAEjC,OAAI;AACF,UAAM,QAAgB,EAAkB,EAAa,CAAC;YAC/C,GAAK;AACZ,QAAI,KAA2B,EAK7B,KAAI;AACF,WAAM,EAAkB,EACtB,qBAAqB,EACnB,YAAY,GACb,EACF,CAAC;YACI;AAIV,UAAM;;SAEH;AAOL,OAAI,EAHA,EAAQ,uBACR,EAAQ,8BACR,EAAQ,oBAEV,QAAO;AAET,GAAI,KACF,MAAM,QACJ,IAAI,EAAe,GAA6B,CAAC,CAAC,eAAe,EAC/D,qBAAqB,EAAE,YAAY,MAAM,EAC1C,CAAC,CACH;AAEH,OAAI;AACF,UAAM,QACJ,IAAI,EAAe,GAA6B,CAAC,CAAC,eAChD,EACD,CACF;YACM,GAAK;AACZ,QAAI,KAA2B,EAE7B,KAAI;AACF,WAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,eAAe,EACf,qBAAqB,EACnB,YAAY,GACb,EACF,CAAC;YACI;AAIV,UAAM;;;AAOV,SAFA,GAAY,EAEL;;CAOT,OAAO,kBAAwB;AAC7B,KAAY"}
+{"version":3,"file":"settings-service.api.js","names":[],"sources":["../../../src/api/settings-service/settings-service.api.ts"],"sourcesContent":["import { SettingsClient } from \"@openhands/typescript-client/clients\";\nimport { DEFAULT_SETTINGS } from \"#/services/settings\";\nimport { Settings, SettingsSchema, SettingsValue } from \"#/types/settings\";\nimport {\n  getSdkMcpServerMap,\n  hasRedactedMcpSecretLeaf,\n  stringRecord,\n} from \"#/utils/mcp-config\";\nimport { getActiveBackend } from \"../backend-registry/active-store\";\nimport {\n  fetchCloudConversationSettingsSchema,\n  fetchCloudSettings,\n  fetchCloudSettingsSchema,\n  saveCloudSettings,\n} from \"../cloud/settings-service.api\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\n\n/**\n * Fields the agent-server stores under `misc_settings.app_preferences` (see\n * SDK `openhands.sdk.settings.AppPreferences`). Mirrored here as a flat\n * partial of Settings so the rest of the frontend can keep treating them as\n * top-level keys (`settings.language`, `settings.disabled_skills`, …).\n */\nexport const APP_PREFERENCE_FIELDS = [\n  \"language\",\n  \"user_consents_to_analytics\",\n  \"enable_sound_notifications\",\n  \"git_user_name\",\n  \"git_user_email\",\n  \"title_llm_profile\",\n  \"disabled_skills\",\n] as const;\n\nexport type AppPreferenceField = (typeof APP_PREFERENCE_FIELDS)[number];\n\nexport type AppPreferences = Partial<Pick<Settings, AppPreferenceField>>;\n\n/**\n * Container for frontend-owned settings the agent doesn't interpret.\n * Mirrors the SDK `MiscSettings` model introduced in agent-server 1.27.\n *\n * Single nested category today (`app_preferences`). Adding a future\n * category (e.g. `ui_preferences`) is a non-breaking change for the wire\n * shape — it just adds another optional sibling here.\n */\nexport interface MiscSettings {\n  app_preferences?: AppPreferences;\n}\n\n/**\n * Response from GET /api/settings\n * Mirrors the SettingsResponse model in the agent server.\n */\nexport interface SettingsApiResponse {\n  agent_settings: Record<string, SettingsValue>;\n  conversation_settings: Record<string, SettingsValue>;\n  llm_api_key_is_set: boolean;\n  /**\n   * Frontend-owned settings the agent does not interpret (currently just\n   * `app_preferences`). Added in agent-server 1.27; earlier servers omit\n   * the field entirely, in which case the frontend falls back to defaults.\n   */\n  misc_settings?: MiscSettings;\n}\n\n/**\n * Request payload for PATCH /api/settings.\n *\n * `misc_settings_diff` is deep-merged into the persisted `misc_settings`\n * block, matching the semantics of `agent_settings_diff` /\n * `conversation_settings_diff`. A partial diff like\n * `{ app_preferences: { language: \"fr\" } }` updates only `language` and\n * leaves every other `app_preferences` field alone. Lists\n * (`disabled_skills`) are replaced wholesale rather than merged.\n */\nexport interface SettingsUpdateRequest {\n  agent_settings_diff?: Record<string, SettingsValue>;\n  conversation_settings_diff?: Record<string, SettingsValue>;\n  misc_settings_diff?: MiscSettings;\n  // Permit additional keys so this stays assignable to the underlying\n  // typescript-client SDK type, which uses `[key: string]: unknown` for\n  // forward compatibility.\n  [key: string]: unknown;\n}\n\nconst APP_PREFERENCE_FIELD_SET: ReadonlySet<string> = new Set(\n  APP_PREFERENCE_FIELDS,\n);\n\nconst isAppPreferenceField = (key: string): key is AppPreferenceField =>\n  APP_PREFERENCE_FIELD_SET.has(key);\n\n/**\n * Split known app-preference keys out of a save payload so callers can\n * route them through `misc_settings_diff.app_preferences` (local) or as\n * flat top-level keys (cloud), while the remaining fields flow into the\n * `agent_settings_diff` / `conversation_settings_diff` branches.\n */\nconst extractAppPreferences = (\n  input: Record<string, unknown>,\n): { extracted: AppPreferences; rest: Record<string, unknown> } => {\n  const extracted: AppPreferences = {};\n  const rest: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (isAppPreferenceField(key)) {\n      (extracted as Record<string, unknown>)[key] = value;\n    } else {\n      rest[key] = value;\n    }\n  }\n  return { extracted, rest };\n};\n\n/**\n * Secret exposure mode for X-Expose-Secrets header.\n *\n * - undefined: Returns redacted secrets (\"**********\")\n * - \"encrypted\": Returns cipher-encrypted values (safe for frontend to round-trip)\n * - \"plaintext\": Returns raw secret values (backend use only!)\n */\nexport type ExposeSecretsMode = \"encrypted\" | \"plaintext\" | undefined;\n\nconst deepClone = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst mergeRecords = (\n  base: Record<string, SettingsValue> | null | undefined,\n  next: Record<string, SettingsValue> | null | undefined,\n) => ({ ...(base ?? {}), ...(next ?? {}) });\n\n/**\n * Retry helper for API calls with exponential backoff.\n */\nasync function withRetry<T>(\n  fn: () => Promise<T>,\n  maxRetries: number = 3,\n  baseDelayMs: number = 500,\n): Promise<T> {\n  for (let attempt = 0; attempt < maxRetries; attempt += 1) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (attempt >= maxRetries - 1) {\n        throw error;\n      }\n\n      const delay = baseDelayMs * 2 ** attempt;\n\n      await new Promise<void>((resolve) => {\n        setTimeout(resolve, delay);\n      });\n    }\n  }\n\n  throw new Error(\"Retry attempts exhausted\");\n}\n\n/**\n * In-memory cache for settings to avoid repeated network calls.\n * The cache is invalidated on save operations.\n */\nlet settingsCache: {\n  /** Settings with redacted secrets for display */\n  redacted: SettingsApiResponse | null;\n  /** Settings with encrypted secrets for conversation start */\n  encrypted: SettingsApiResponse | null;\n  /** Timestamp when the cache was last populated */\n  timestamp: number;\n} = {\n  redacted: null,\n  encrypted: null,\n  timestamp: 0,\n};\n\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\nconst isCacheValid = () => Date.now() - settingsCache.timestamp < CACHE_TTL_MS;\n\nconst clearCache = () => {\n  settingsCache = { redacted: null, encrypted: null, timestamp: 0 };\n};\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  !!value && typeof value === \"object\" && !Array.isArray(value);\n\nconst basicAuthHeader = (username: string, password: string): string => {\n  const token = btoa(`${username}:${password}`);\n  return `Basic ${token}`;\n};\n\nconst headersFromMcpAuth = (\n  auth: Record<string, unknown>,\n): Record<string, string> | null => {\n  switch (auth.strategy) {\n    case \"none\":\n      return {};\n    case \"api_key\": {\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      const header =\n        typeof auth.header_name === \"string\" && auth.header_name\n          ? auth.header_name\n          : \"Authorization\";\n      const value =\n        header === \"Authorization\" ? `Bearer ${auth.value}` : auth.value;\n      return { [header]: value };\n    }\n    case \"bearer\":\n      if (typeof auth.value !== \"string\" || !auth.value) return null;\n      return { Authorization: `Bearer ${auth.value}` };\n    case \"basic\":\n      if (\n        typeof auth.username !== \"string\" ||\n        typeof auth.password !== \"string\"\n      ) {\n        return null;\n      }\n      return { Authorization: basicAuthHeader(auth.username, auth.password) };\n    case \"header\":\n      return stringRecord(auth.headers) ?? {};\n    case \"oauth2\": {\n      const tokens = isRecord(auth.state) ? auth.state.tokens : undefined;\n      if (!isRecord(tokens) || typeof tokens.access_token !== \"string\") {\n        return null;\n      }\n      return { Authorization: `Bearer ${tokens.access_token}` };\n    }\n    default:\n      return null;\n  }\n};\n\nconst cloudCompatibleMcpConfig = (value: unknown): unknown => {\n  if (!isRecord(value)) return value;\n\n  const hasWrapper = isRecord(value.mcpServers);\n  const serverMap: Record<string, unknown> = hasWrapper\n    ? (value.mcpServers as Record<string, unknown>)\n    : value;\n\n  const converted = Object.fromEntries(\n    Object.entries(serverMap).map(([name, server]) => {\n      if (!isRecord(server) || !isRecord(server.auth)) return [name, server];\n\n      const authHeaders = headersFromMcpAuth(server.auth);\n      if (authHeaders === null) return [name, server];\n\n      const nextServer = { ...server };\n      const existingHeaders = stringRecord(server.headers) ?? {};\n      const mergedHeaders = { ...existingHeaders, ...authHeaders };\n      delete nextServer.auth;\n      if (Object.keys(mergedHeaders).length > 0) {\n        nextServer.headers = mergedHeaders;\n      } else {\n        delete nextServer.headers;\n      }\n      return [name, nextServer];\n    }),\n  );\n\n  return hasWrapper ? { ...value, mcpServers: converted } : converted;\n};\n\nconst hasRedactedMcpSecrets = (mcpConfig: unknown): boolean => {\n  const servers = getSdkMcpServerMap(mcpConfig);\n  if (!servers) return false;\n  return Object.values(servers).some(\n    (server) =>\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.auth : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.headers : undefined) ||\n      hasRedactedMcpSecretLeaf(isRecord(server) ? server.env : undefined),\n  );\n};\n\nconst removesMcpServer = (previous: unknown, next: unknown): boolean => {\n  const previousServers = getSdkMcpServerMap(previous);\n  const nextServers = getSdkMcpServerMap(next);\n  if (!previousServers || !nextServers) return false;\n  return Object.keys(previousServers).some((name) => !(name in nextServers));\n};\n\n/**\n * Transform API response into Settings object with derived fields.\n */\nconst transformApiResponse = (\n  response: SettingsApiResponse,\n): Partial<Settings> => {\n  const agentSettings = response.agent_settings ?? {};\n  const conversationSettings = response.conversation_settings ?? {};\n\n  const partial: Partial<Settings> = {\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n    llm_api_key_set: response.llm_api_key_is_set,\n  };\n\n  // App-level user preferences come back nested under\n  // `misc_settings.app_preferences` from the local agent-server (added in\n  // 1.27, restructured into the `misc_settings` container in the follow-up\n  // refactor). Hoist them onto the flat Settings shape the rest of the\n  // frontend already speaks. Older servers omit the `misc_settings` field\n  // entirely; the migration helper invoked from `getSettings` promotes any\n  // leftover localStorage values to the server on first run, so the omitted\n  // case just falls back to defaults.\n  const prefs = response.misc_settings?.app_preferences;\n  if (prefs) {\n    for (const key of APP_PREFERENCE_FIELDS) {\n      const value = prefs[key];\n      if (value !== undefined) {\n        (partial as Record<string, unknown>)[key] = value;\n      }\n    }\n  }\n\n  return partial;\n};\n\n/**\n * Sync derived settings fields from agent_settings and conversation_settings.\n * This ensures backward compatibility with code that reads top-level fields.\n */\nconst syncDerivedSettings = (settings: Partial<Settings>): Settings => {\n  const agentSettings = mergeRecords(\n    DEFAULT_SETTINGS.agent_settings ?? {},\n    settings.agent_settings ?? {},\n  );\n  const conversationSettings = mergeRecords(\n    DEFAULT_SETTINGS.conversation_settings ?? {},\n    settings.conversation_settings ?? {},\n  );\n\n  const merged = {\n    ...deepClone(DEFAULT_SETTINGS),\n    ...settings,\n    provider_tokens_set: {\n      ...(DEFAULT_SETTINGS.provider_tokens_set ?? {}),\n      ...(settings.provider_tokens_set ?? {}),\n    },\n    agent_settings: agentSettings,\n    conversation_settings: conversationSettings,\n  } as Settings;\n\n  const llm = agentSettings.llm as Record<string, SettingsValue> | undefined;\n  const condenser = agentSettings.condenser as\n    | Record<string, SettingsValue>\n    | undefined;\n\n  if (typeof agentSettings.agent === \"string\") {\n    merged.agent = agentSettings.agent;\n  }\n  if (typeof llm?.model === \"string\" && llm.model.length > 0) {\n    merged.llm_model = llm.model;\n  }\n  if (typeof llm?.base_url === \"string\") {\n    merged.llm_base_url = llm.base_url;\n  }\n  // Note: api_key may be redacted (\"**********\") when fetched without expose header\n  // We don't sync it to top-level llm_api_key to avoid overwriting with redacted value\n  if (typeof condenser?.enabled === \"boolean\") {\n    merged.enable_default_condenser = condenser.enabled;\n  }\n  if (typeof condenser?.max_size === \"number\") {\n    merged.condenser_max_size = condenser.max_size;\n  }\n  if (typeof conversationSettings.confirmation_mode === \"boolean\") {\n    merged.confirmation_mode = conversationSettings.confirmation_mode;\n  }\n  if (\n    typeof conversationSettings.security_analyzer === \"string\" ||\n    conversationSettings.security_analyzer === null\n  ) {\n    merged.security_analyzer = conversationSettings.security_analyzer as\n      | string\n      | null;\n  }\n  if (typeof conversationSettings.max_iterations === \"number\") {\n    merged.max_iterations = conversationSettings.max_iterations;\n  }\n\n  merged.search_api_key_set = !!merged.search_api_key;\n\n  return merged;\n};\n\nclass SettingsService {\n  /**\n   * Fetch settings from the agent server API with retry logic.\n   *\n   * @param exposeSecrets - Controls how secrets are returned:\n   *   - undefined: Secrets are redacted (\"**********\") - safe for display\n   *   - \"encrypted\": Secrets are cipher-encrypted - safe for round-trip to start conversation\n   *   - \"plaintext\": Raw secrets - DO NOT USE from frontend\n   */\n  static async fetchSettingsFromApi(\n    exposeSecrets?: ExposeSecretsMode,\n  ): Promise<SettingsApiResponse> {\n    return withRetry(() =>\n      new SettingsClient(getAgentServerClientOptions()).getSettings({\n        exposeSecrets,\n      }),\n    ) as Promise<SettingsApiResponse>;\n  }\n\n  /**\n   * Get settings for display (secrets are redacted).\n   * Uses in-memory cache for performance.\n   */\n  static async getSettings(): Promise<Settings> {\n    // Cloud uses a different settings shape (flat top-level fields\n    // including provider_tokens_set, llm_model, etc.). Branch out before\n    // touching the local-only cache: cloud responses bypass the local\n    // SettingsApiResponse shape and feed straight into syncDerivedSettings\n    // so cloud-native fields like provider_tokens_set reach the GUI's\n    // useUserProviders → useAppInstallations → useGitRepositories chain.\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      try {\n        const cloud = await withRetry(() => fetchCloudSettings());\n        return syncDerivedSettings(cloud);\n      } catch (error) {\n        console.warn(\"Failed to fetch cloud settings, using defaults:\", error);\n        return syncDerivedSettings({});\n      }\n    }\n\n    // Check cache first\n    if (isCacheValid() && settingsCache.redacted) {\n      return syncDerivedSettings(transformApiResponse(settingsCache.redacted));\n    }\n\n    try {\n      const response = await this.fetchSettingsFromApi();\n      settingsCache.redacted = response;\n      settingsCache.timestamp = Date.now();\n      return syncDerivedSettings(transformApiResponse(response));\n    } catch (error) {\n      // If API fails, return defaults\n      console.warn(\"Failed to fetch settings from API, using defaults:\", error);\n      return syncDerivedSettings({});\n    }\n  }\n\n  /**\n   * Get settings with encrypted secrets for starting conversations.\n   * The encrypted secrets can be passed to the start conversation API\n   * with secrets_encrypted=true for server-side decryption.\n   *\n   * @throws Error if encrypted settings cannot be fetched - conversations\n   *   should not start with broken/redacted credentials.\n   */\n  static async getSettingsForConversation(): Promise<{\n    agentSettings: Record<string, SettingsValue>;\n    conversationSettings: Record<string, SettingsValue>;\n    secretsEncrypted: boolean;\n  }> {\n    // Check cache first\n    if (isCacheValid() && settingsCache.encrypted) {\n      return {\n        agentSettings: settingsCache.encrypted.agent_settings,\n        conversationSettings: settingsCache.encrypted.conversation_settings,\n        secretsEncrypted: true,\n      };\n    }\n\n    // Fetch encrypted settings - this MUST succeed for conversations to work.\n    // Do not fall back to redacted settings as that would cause auth failures.\n    const response = await this.fetchSettingsFromApi(\"encrypted\");\n    settingsCache.encrypted = response;\n    if (!settingsCache.timestamp) {\n      settingsCache.timestamp = Date.now();\n    }\n    return {\n      agentSettings: response.agent_settings,\n      conversationSettings: response.conversation_settings,\n      secretsEncrypted: true,\n    };\n  }\n\n  static async getSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getAgentSchema()) as SettingsSchema;\n  }\n\n  static async getConversationSettingsSchema(): Promise<SettingsSchema> {\n    if (getActiveBackend().backend.kind === \"cloud\") {\n      return (await fetchCloudConversationSettingsSchema()) as SettingsSchema;\n    }\n    return (await new SettingsClient(\n      getAgentServerClientOptions(),\n    ).getConversationSchema()) as SettingsSchema;\n  }\n\n  /**\n   * Save settings to the agent server API.\n   * Uses PATCH for incremental updates.\n   */\n  static async saveSettings(\n    settings: Partial<Settings> & Record<string, unknown>,\n  ): Promise<boolean> {\n    // Split app-level user-preference fields (language, git identity, sound\n    // notifications, analytics consent, disabled_skills) off and route them\n    // through `misc_settings_diff.app_preferences` (local) or as flat\n    // top-level keys (cloud). The local agent-server stores them under\n    // `PersistedSettings.misc_settings.app_preferences`; the cloud accepts\n    // them as flat keys on `POST /api/v1/settings`.\n    const { extracted: appPreferences, rest } = extractAppPreferences(\n      settings as Record<string, unknown>,\n    );\n    const hasAppPreferences = Object.keys(appPreferences).length > 0;\n\n    const payload: SettingsUpdateRequest = {};\n\n    // Extract agent_settings_diff\n    const agentSettingsDiff = rest.agent_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (agentSettingsDiff && Object.keys(agentSettingsDiff).length > 0) {\n      payload.agent_settings_diff = agentSettingsDiff;\n    }\n\n    // Extract conversation_settings_diff\n    const conversationSettingsDiff = rest.conversation_settings_diff as\n      | Record<string, SettingsValue>\n      | undefined;\n    if (\n      conversationSettingsDiff &&\n      Object.keys(conversationSettingsDiff).length > 0\n    ) {\n      payload.conversation_settings_diff = conversationSettingsDiff;\n    }\n\n    if (hasAppPreferences) {\n      payload.misc_settings_diff = { app_preferences: appPreferences };\n    }\n\n    const isCloud = getActiveBackend().backend.kind === \"cloud\";\n\n    // The backend applies ``agent_settings_diff`` by deep-merging it into the\n    // existing ``agent_settings`` dict (see SDK\n    // ``openhands.agent_server.persistence.models._deep_merge``). That works\n    // for scalar fields but is wrong for ``mcp_config``, which is\n    // a name-keyed map: a diff that omits a server cannot remove it (stale\n    // key stays), and a diff whose key indices shift (e.g. after deleting\n    // index 0, the second server is renumbered) leaves the original keys\n    // behind as duplicates pointing to the wrong server config.\n    //\n    // The only way to make ``mcp_config`` behave like a replace through this\n    // API is to first null it out — ``null`` is not a dict, so deep-merge\n    // takes the else branch and sets the field to ``None`` outright — and\n    // then send the new value in a follow-up call. We do this for every\n    // ``mcp_config`` write, including adds (the wasted round-trip is\n    // negligible for this user action and avoids divergent code paths).\n    const agentDiff = payload.agent_settings_diff;\n    // Send a pre-clear PATCH when the diff sets ``mcp_config`` to a non-null\n    // value. A second PATCH below then writes the new value. Skipping the\n    // pre-clear when the caller is already clearing (``mcp_config: null``)\n    // avoids a pointless duplicate request.\n    const needsMcpPreClear =\n      !!agentDiff && \"mcp_config\" in agentDiff && agentDiff.mcp_config !== null;\n\n    // The pre-clear is destructive: if the follow-up write fails after the\n    // clear succeeds, the user's MCP config is left empty. Snapshot the\n    // previous value (in raw SDK-native shape, NOT the GUI's parsed MCPConfig)\n    // before pre-clearing so we can attempt a best-effort rollback. The\n    // original write error is always re-thrown to the caller regardless\n    // of rollback success — the GUI's react-query mutations surface that\n    // as an error toast so the user knows to retry.\n    //\n    // Snapshot must be the SDK-native server map because that is what the\n    // backend expects on the rollback PATCH.\n    // ``SettingsService.getSettings`` returns a GUI Settings object whose\n    // ``mcp_config`` is typed as the parsed frontend MCPConfig and\n    // defaults to empty arrays when nothing is installed, so it is not\n    // suitable for round-tripping back to the backend.\n    let mcpConfigSnapshot: unknown = undefined;\n    if (needsMcpPreClear) {\n      try {\n        if (isCloud) {\n          const raw = (await fetchCloudSettings()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        } else {\n          const raw = (await SettingsService.fetchSettingsFromApi()) as {\n            agent_settings?: { mcp_config?: unknown };\n          };\n          mcpConfigSnapshot = raw?.agent_settings?.mcp_config;\n        }\n      } catch {\n        // Snapshot failed (network blip, etc.). Continue without rollback\n        // ability — the original write error will still surface.\n      }\n    }\n\n    // Cloud settings may redact MCP env/header/auth secrets without an\n    // encrypted exposure mode. A pre-clear before a non-delete update can\n    // permanently erase unchanged secrets; for updates that keep all existing\n    // server keys, rely on the backend deep-merge to preserve redacted leaves\n    // while applying edited fields and newly typed credentials.\n    const shouldUseCloudMergePatchForRedactedMcpSecrets =\n      isCloud &&\n      needsMcpPreClear &&\n      hasRedactedMcpSecrets(mcpConfigSnapshot) &&\n      !removesMcpServer(mcpConfigSnapshot, agentDiff?.mcp_config);\n    const shouldPreClearMcpConfig =\n      needsMcpPreClear && !shouldUseCloudMergePatchForRedactedMcpSecrets;\n\n    if (isCloud) {\n      const hasCloudWork =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        hasAppPreferences;\n      if (!hasCloudWork) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          saveCloudSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      // Build the cloud payload from the same diffs, but as a separate\n      // object so undefined keys don't appear in the call (saveCloudSettings\n      // is called from tests with an exact-shape assertion).\n      const cloudPayload: Parameters<typeof saveCloudSettings>[0] = {};\n      if (payload.agent_settings_diff) {\n        cloudPayload.agent_settings_diff = { ...payload.agent_settings_diff };\n        if (\"mcp_config\" in cloudPayload.agent_settings_diff) {\n          cloudPayload.agent_settings_diff.mcp_config =\n            cloudCompatibleMcpConfig(\n              cloudPayload.agent_settings_diff.mcp_config,\n            ) as SettingsValue;\n        }\n      }\n      if (payload.conversation_settings_diff) {\n        cloudPayload.conversation_settings_diff =\n          payload.conversation_settings_diff;\n      }\n      if (hasAppPreferences) {\n        // The cloud `POST /api/v1/settings` takes app-preference fields as\n        // flat top-level keys (not under `app_preferences_diff`).\n        // `saveCloudSettings` re-flattens them onto the request body.\n        cloudPayload.app_preferences = appPreferences;\n      }\n      try {\n        await withRetry(() => saveCloudSettings(cloudPayload));\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // Best-effort rollback. We deliberately do not wrap in withRetry:\n          // the user's session is already in a degraded state and we want\n          // to surface the original error promptly. Swallowing the restore\n          // error preserves the original failure context for the caller.\n          try {\n            await saveCloudSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    } else {\n      // The local agent-server PATCH /api/settings requires at least one of\n      // the three diff fields. Skip the request entirely if nothing changed.\n      const hasLocalDiffs =\n        !!payload.agent_settings_diff ||\n        !!payload.conversation_settings_diff ||\n        !!payload.misc_settings_diff;\n      if (!hasLocalDiffs) {\n        return true;\n      }\n      if (shouldPreClearMcpConfig) {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings({\n            agent_settings_diff: { mcp_config: null },\n          }),\n        );\n      }\n      try {\n        await withRetry(() =>\n          new SettingsClient(getAgentServerClientOptions()).updateSettings(\n            payload,\n          ),\n        );\n      } catch (err) {\n        if (shouldPreClearMcpConfig && mcpConfigSnapshot) {\n          // See cloud branch above for rationale.\n          try {\n            await new SettingsClient(\n              getAgentServerClientOptions(),\n            ).updateSettings({\n              agent_settings_diff: {\n                mcp_config: mcpConfigSnapshot as SettingsValue,\n              },\n            });\n          } catch {\n            // Rollback failed; the original error takes precedence.\n          }\n        }\n        throw err;\n      }\n    }\n\n    // Invalidate cache after successful save\n    clearCache();\n\n    return true;\n  }\n\n  /**\n   * Invalidate the settings cache.\n   * Call this when settings may have changed externally.\n   */\n  static invalidateCache(): void {\n    clearCache();\n  }\n}\n\nexport default SettingsService;\n"],"mappings":";;;;;;;;AAuBA,IAAa,IAAwB;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,EAsDK,IAAgD,IAAI,IACxD,EACD,EAEK,KAAwB,MAC5B,EAAyB,IAAI,EAAI,EAQ7B,KACJ,MACiE;CACjE,IAAM,IAA4B,EAAE,EAC9B,IAAgC,EAAE;AACxC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,EAAqB,EAAI,GAC1B,EAAsC,KAAO,IAE9C,EAAK,KAAO;AAGhB,QAAO;EAAE;EAAW;EAAM;GAYtB,KAAgB,MAAgB,KAAK,MAAM,KAAK,UAAU,EAAM,CAAC,EAEjE,KACJ,GACA,OACI;CAAE,GAAI,KAAQ,EAAE;CAAG,GAAI,KAAQ,EAAE;CAAG;AAK1C,eAAe,EACb,GACA,IAAqB,GACrB,IAAsB,KACV;AACZ,MAAK,IAAI,IAAU,GAAG,IAAU,GAAY,KAAW,EACrD,KAAI;AACF,SAAO,MAAM,GAAI;UACV,GAAO;AACd,MAAI,KAAW,IAAa,EAC1B,OAAM;EAGR,IAAM,IAAQ,IAAc,KAAK;AAEjC,QAAM,IAAI,SAAe,MAAY;AACnC,cAAW,GAAS,EAAM;IAC1B;;AAIN,OAAU,MAAM,2BAA2B;;AAO7C,IAAI,IAOA;CACF,UAAU;CACV,WAAW;CACX,WAAW;CACZ,EAEK,IAAe,MAAS,KAExB,UAAqB,KAAK,KAAK,GAAG,EAAc,YAAY,GAE5D,UAAmB;AACvB,KAAgB;EAAE,UAAU;EAAM,WAAW;EAAM,WAAW;EAAG;GAG7D,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,EAAM,EAEzD,KAAmB,GAAkB,MAElC,SADO,KAAK,GAAG,EAAS,GAAG,IAClB,IAGZ,KACJ,MACkC;AAClC,SAAQ,EAAK,UAAb;EACE,KAAK,OACH,QAAO,EAAE;EACX,KAAK,WAAW;AACd,OAAI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,MAAO,QAAO;GAC1D,IAAM,IACJ,OAAO,EAAK,eAAgB,YAAY,EAAK,cACzC,EAAK,cACL,iBACA,IACJ,MAAW,kBAAkB,UAAU,EAAK,UAAU,EAAK;AAC7D,UAAO,GAAG,IAAS,GAAO;;EAE5B,KAAK,SAEH,QADI,OAAO,EAAK,SAAU,YAAY,CAAC,EAAK,QAAc,OACnD,EAAE,eAAe,UAAU,EAAK,SAAS;EAClD,KAAK,QAOH,QALE,OAAO,EAAK,YAAa,YACzB,OAAO,EAAK,YAAa,WAElB,OAEF,EAAE,eAAe,EAAgB,EAAK,UAAU,EAAK,SAAS,EAAE;EACzE,KAAK,SACH,QAAO,EAAa,EAAK,QAAQ,IAAI,EAAE;EACzC,KAAK,UAAU;GACb,IAAM,IAAS,EAAS,EAAK,MAAM,GAAG,EAAK,MAAM,SAAS,KAAA;AAI1D,UAHI,CAAC,EAAS,EAAO,IAAI,OAAO,EAAO,gBAAiB,WAC/C,OAEF,EAAE,eAAe,UAAU,EAAO,gBAAgB;;EAE3D,QACE,QAAO;;GAIP,KAA4B,MAA4B;AAC5D,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAE7B,IAAM,IAAa,EAAS,EAAM,WAAW,EACvC,IAAqC,IACtC,EAAM,aACP,GAEE,IAAY,OAAO,YACvB,OAAO,QAAQ,EAAU,CAAC,KAAK,CAAC,GAAM,OAAY;AAChD,MAAI,CAAC,EAAS,EAAO,IAAI,CAAC,EAAS,EAAO,KAAK,CAAE,QAAO,CAAC,GAAM,EAAO;EAEtE,IAAM,IAAc,EAAmB,EAAO,KAAK;AACnD,MAAI,MAAgB,KAAM,QAAO,CAAC,GAAM,EAAO;EAE/C,IAAM,IAAa,EAAE,GAAG,GAAQ,EAE1B,IAAgB;GAAE,GADA,EAAa,EAAO,QAAQ,IAAI,EAAE;GACd,GAAG;GAAa;AAO5D,SANA,OAAO,EAAW,MACd,OAAO,KAAK,EAAc,CAAC,SAAS,IACtC,EAAW,UAAU,IAErB,OAAO,EAAW,SAEb,CAAC,GAAM,EAAW;GACzB,CACH;AAED,QAAO,IAAa;EAAE,GAAG;EAAO,YAAY;EAAW,GAAG;GAGtD,KAAyB,MAAgC;CAC7D,IAAM,IAAU,EAAmB,EAAU;AAE7C,QADK,IACE,OAAO,OAAO,EAAQ,CAAC,MAC3B,MACC,EAAyB,EAAS,EAAO,GAAG,EAAO,OAAO,KAAA,EAAU,IACpE,EAAyB,EAAS,EAAO,GAAG,EAAO,UAAU,KAAA,EAAU,IACvE,EAAyB,EAAS,EAAO,GAAG,EAAO,MAAM,KAAA,EAAU,CACtE,GANoB;GASjB,KAAoB,GAAmB,MAA2B;CACtE,IAAM,IAAkB,EAAmB,EAAS,EAC9C,IAAc,EAAmB,EAAK;AAE5C,QADI,CAAC,KAAmB,CAAC,IAAoB,KACtC,OAAO,KAAK,EAAgB,CAAC,MAAM,MAAS,EAAE,KAAQ,GAAa;GAMtE,KACJ,MACsB;CAItB,IAAM,IAA6B;EACjC,gBAJoB,EAAS,kBAAkB,EAAE;EAKjD,uBAJ2B,EAAS,yBAAyB,EAAE;EAK/D,iBAAiB,EAAS;EAC3B,EAUK,IAAQ,EAAS,eAAe;AACtC,KAAI,EACF,MAAK,IAAM,KAAO,GAAuB;EACvC,IAAM,IAAQ,EAAM;AACpB,EAAI,MAAU,KAAA,MACX,EAAoC,KAAO;;AAKlD,QAAO;GAOH,KAAuB,MAA0C;CACrE,IAAM,IAAgB,EACpB,EAAiB,kBAAkB,EAAE,EACrC,EAAS,kBAAkB,EAAE,CAC9B,EACK,IAAuB,EAC3B,EAAiB,yBAAyB,EAAE,EAC5C,EAAS,yBAAyB,EAAE,CACrC,EAEK,IAAS;EACb,GAAG,EAAU,EAAiB;EAC9B,GAAG;EACH,qBAAqB;GACnB,GAAI,EAAiB,uBAAuB,EAAE;GAC9C,GAAI,EAAS,uBAAuB,EAAE;GACvC;EACD,gBAAgB;EAChB,uBAAuB;EACxB,EAEK,IAAM,EAAc,KACpB,IAAY,EAAc;AAsChC,QAlCI,OAAO,EAAc,SAAU,aACjC,EAAO,QAAQ,EAAc,QAE3B,OAAO,GAAK,SAAU,YAAY,EAAI,MAAM,SAAS,MACvD,EAAO,YAAY,EAAI,QAErB,OAAO,GAAK,YAAa,aAC3B,EAAO,eAAe,EAAI,WAIxB,OAAO,GAAW,WAAY,cAChC,EAAO,2BAA2B,EAAU,UAE1C,OAAO,GAAW,YAAa,aACjC,EAAO,qBAAqB,EAAU,WAEpC,OAAO,EAAqB,qBAAsB,cACpD,EAAO,oBAAoB,EAAqB,qBAGhD,OAAO,EAAqB,qBAAsB,YAClD,EAAqB,sBAAsB,UAE3C,EAAO,oBAAoB,EAAqB,oBAI9C,OAAO,EAAqB,kBAAmB,aACjD,EAAO,iBAAiB,EAAqB,iBAG/C,EAAO,qBAAqB,CAAC,CAAC,EAAO,gBAE9B;GAGH,IAAN,MAAM,EAAgB;CASpB,aAAa,qBACX,GAC8B;AAC9B,SAAO,QACL,IAAI,EAAe,GAA6B,CAAC,CAAC,YAAY,EAC5D,kBACD,CAAC,CACH;;CAOH,aAAa,cAAiC;AAO5C,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,KAAI;AAEF,UAAO,EAAoB,MADP,QAAgB,GAAoB,CAAC,CACxB;WAC1B,GAAO;AAEd,UADA,QAAQ,KAAK,mDAAmD,EAAM,EAC/D,EAAoB,EAAE,CAAC;;AAKlC,MAAI,GAAc,IAAI,EAAc,SAClC,QAAO,EAAoB,EAAqB,EAAc,SAAS,CAAC;AAG1E,MAAI;GACF,IAAM,IAAW,MAAM,KAAK,sBAAsB;AAGlD,UAFA,EAAc,WAAW,GACzB,EAAc,YAAY,KAAK,KAAK,EAC7B,EAAoB,EAAqB,EAAS,CAAC;WACnD,GAAO;AAGd,UADA,QAAQ,KAAK,sDAAsD,EAAM,EAClE,EAAoB,EAAE,CAAC;;;CAYlC,aAAa,6BAIV;AAED,MAAI,GAAc,IAAI,EAAc,UAClC,QAAO;GACL,eAAe,EAAc,UAAU;GACvC,sBAAsB,EAAc,UAAU;GAC9C,kBAAkB;GACnB;EAKH,IAAM,IAAW,MAAM,KAAK,qBAAqB,YAAY;AAK7D,SAJA,EAAc,YAAY,GAC1B,AACE,EAAc,cAAY,KAAK,KAAK,EAE/B;GACL,eAAe,EAAS;GACxB,sBAAsB,EAAS;GAC/B,kBAAkB;GACnB;;CAGH,aAAa,oBAA6C;AAIxD,SAHI,GAAkB,CAAC,QAAQ,SAAS,UAC9B,MAAM,GAA0B,GAElC,MAAM,IAAI,EAChB,GAA6B,CAC9B,CAAC,gBAAgB;;CAGpB,aAAa,gCAAyD;AAIpE,SAHI,GAAkB,CAAC,QAAQ,SAAS,UAC9B,MAAM,GAAsC,GAE9C,MAAM,IAAI,EAChB,GAA6B,CAC9B,CAAC,uBAAuB;;CAO3B,aAAa,aACX,GACkB;EAOlB,IAAM,EAAE,WAAW,GAAgB,YAAS,EAC1C,EACD,EACK,IAAoB,OAAO,KAAK,EAAe,CAAC,SAAS,GAEzD,IAAiC,EAAE,EAGnC,IAAoB,EAAK;AAG/B,EAAI,KAAqB,OAAO,KAAK,EAAkB,CAAC,SAAS,MAC/D,EAAQ,sBAAsB;EAIhC,IAAM,IAA2B,EAAK;AAUtC,EANE,KACA,OAAO,KAAK,EAAyB,CAAC,SAAS,MAE/C,EAAQ,6BAA6B,IAGnC,MACF,EAAQ,qBAAqB,EAAE,iBAAiB,GAAgB;EAGlE,IAAM,IAAU,GAAkB,CAAC,QAAQ,SAAS,SAiB9C,IAAY,EAAQ,qBAKpB,IACJ,CAAC,CAAC,KAAa,gBAAgB,KAAa,EAAU,eAAe,MAgBnE;AACJ,MAAI,EACF,KAAI;AACF,GASE,IATE,KAIkB,MAHD,GAAoB,GAGd,gBAAgB,cAKrB,MAHD,EAAgB,sBAAsB,GAGhC,gBAAgB;UAErC;EAWV,IAAM,IACJ,KACA,KACA,EAAsB,EAAkB,IACxC,CAAC,EAAiB,GAAmB,GAAW,WAAW,EACvD,IACJ,KAAoB,CAAC;AAEvB,MAAI,GAAS;AAKX,OAAI,EAHA,EAAQ,uBACR,EAAQ,8BACV,GAEA,QAAO;AAET,GAAI,KACF,MAAM,QACJ,EAAkB,EAChB,qBAAqB,EAAE,YAAY,MAAM,EAC1C,CAAC,CACH;GAKH,IAAM,IAAwD,EAAE;AAchE,GAbI,EAAQ,wBACV,EAAa,sBAAsB,EAAE,GAAG,EAAQ,qBAAqB,EACjE,gBAAgB,EAAa,wBAC/B,EAAa,oBAAoB,aAC/B,EACE,EAAa,oBAAoB,WAClC,IAGH,EAAQ,+BACV,EAAa,6BACX,EAAQ,6BAER,MAIF,EAAa,kBAAkB;AAEjC,OAAI;AACF,UAAM,QAAgB,EAAkB,EAAa,CAAC;YAC/C,GAAK;AACZ,QAAI,KAA2B,EAK7B,KAAI;AACF,WAAM,EAAkB,EACtB,qBAAqB,EACnB,YAAY,GACb,EACF,CAAC;YACI;AAIV,UAAM;;SAEH;AAOL,OAAI,EAHA,EAAQ,uBACR,EAAQ,8BACR,EAAQ,oBAEV,QAAO;AAET,GAAI,KACF,MAAM,QACJ,IAAI,EAAe,GAA6B,CAAC,CAAC,eAAe,EAC/D,qBAAqB,EAAE,YAAY,MAAM,EAC1C,CAAC,CACH;AAEH,OAAI;AACF,UAAM,QACJ,IAAI,EAAe,GAA6B,CAAC,CAAC,eAChD,EACD,CACF;YACM,GAAK;AACZ,QAAI,KAA2B,EAE7B,KAAI;AACF,WAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,eAAe,EACf,qBAAqB,EACnB,YAAY,GACb,EACF,CAAC;YACI;AAIV,UAAM;;;AAOV,SAFA,GAAY,EAEL;;CAOT,OAAO,kBAAwB;AAC7B,KAAY"}

package/dist/components/conversation-events/chat/event-message-components/critic-result-display.cjs

@@ -1,2 +1,2 @@
-const e=require(`../../../../_virtual/_rolldown/runtime.cjs`),t=require(`../../../../node_modules/react-i18next/dist/es/useTranslation.cjs`),n=require(`../../../../i18n/declaration.cjs`),r=require(`../../../../hooks/query/use-settings.cjs`),i=require(`../../../../icons/angle-down-solid.cjs`),a=require(`../../../../icons/angle-up-solid.cjs`);let o=require(`react`);o=e.__toESM(o,1);let s=require(`react/jsx-runtime`);function c(e){return Number.isFinite(e)?Math.min(1,Math.max(0,e)):0}function l(e){let t=Math.round(e*5);return{filled:t,empty:5-t}}function u(e){return e>=.6?`text-green-400`:e>=.4?`text-yellow-400`:`text-red-400`}function d(e){return e>=.7?`text-red-400 font-semibold`:e>=.5?`text-yellow-400`:`text-neutral-400`}function f(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function p(e){let t=e?.verification;if(!f(t))return null;let n=t.enable_iterative_refinement;return typeof n==`boolean`?n:null}function m({feature:e}){let t=Math.round(e.probability*100),n=d(e.probability);return(0,s.jsxs)(`span`,{className:`inline-flex items-center gap-1`,children:[(0,s.jsx)(`span`,{className:`text-neutral-200`,children:e.display_name}),(0,s.jsxs)(`span`,{className:n,children:[`(`,t,`%)`]})]})}function h({label:e,features:t}){return!t||t.length===0?null:(0,s.jsxs)(`div`,{className:`flex flex-wrap items-center gap-x-1 text-xs`,children:[(0,s.jsx)(`span`,{className:`font-semibold text-neutral-300`,children:e}),t.map((e,t)=>(0,s.jsxs)(o.default.Fragment,{children:[t>0&&(0,s.jsx)(`span`,{className:`text-neutral-500`,children:`·`}),(0,s.jsx)(m,{feature:e})]},e.name))]})}function g({categorized:e}){let{t:r}=t.useTranslation(),i=e.agent_behavioral_issues&&e.agent_behavioral_issues.length>0,a=e.user_followup_patterns&&e.user_followup_patterns.length>0,o=e.infrastructure_issues&&e.infrastructure_issues.length>0,c=e.other&&e.other.length>0;return!i&&!a&&!o&&!c?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-1 mt-1.5`,children:[i&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$POTENTIAL_ISSUES),features:e.agent_behavioral_issues}),o&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$INFRASTRUCTURE),features:e.infrastructure_issues}),a&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$LIKELY_FOLLOWUP),features:e.user_followup_patterns}),c&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$OTHER),features:e.other})]})}function _({criticResult:e}){let{t:d}=t.useTranslation(),{data:f}=r.useSettings(),[m,h]=o.default.useState(!1),_=c(e.score),{filled:v,empty:y}=l(_),b=u(_),x=(_*100).toFixed(1),S=p(f?.agent_settings)===!1,C=e.metadata?.categorized_features,w=C!=null&&((C.agent_behavioral_issues??[]).length>0||(C.user_followup_patterns??[]).length>0||(C.infrastructure_issues??[]).length>0||(C.other??[]).length>0);return(0,s.jsxs)(`div`,{className:`border-l-2 border-neutral-600 pl-2 my-2 py-1.5 text-sm`,children:[(0,s.jsxs)(`div`,{className:`flex items-center gap-1`,children:[(0,s.jsx)(`span`,{className:`font-semibold text-neutral-300 text-xs`,children:d(n.I18nKey.CRITIC$SUCCESS_LIKELIHOOD_LABEL)}),(0,s.jsxs)(`span`,{className:`${b} text-xs tracking-wide`,"aria-label":`Score: ${x}%`,children:[`★`.repeat(v),`☆`.repeat(y)]}),(0,s.jsxs)(`span`,{className:`text-neutral-500 text-xs`,children:[`(`,x,`%)`]}),w&&(0,s.jsx)(`button`,{type:`button`,onClick:()=>h(e=>!e),className:`cursor-pointer ml-1`,"aria-label":d(m?n.I18nKey.BUTTON$COLLAPSE_DETAILS:n.I18nKey.BUTTON$EXPAND_DETAILS),children:m?(0,s.jsx)(a.default,{className:`h-3 w-3 inline fill-neutral-400`}):(0,s.jsx)(i.default,{className:`h-3 w-3 inline fill-neutral-400`})})]}),m&&w&&(0,s.jsx)(g,{categorized:C}),S&&(0,s.jsx)(`p`,{className:`mt-1.5 text-xs leading-5 text-neutral-500`,"data-testid":`critic-iterative-refinement-hint`,children:d(n.I18nKey.CRITIC$ITERATIVE_REFINEMENT_HINT)})]})}exports.CriticResultDisplay=_;
+const e=require(`../../../../_virtual/_rolldown/runtime.cjs`),t=require(`../../../../node_modules/react-i18next/dist/es/useTranslation.cjs`),n=require(`../../../../i18n/declaration.cjs`),r=require(`../../../../icons/angle-down-solid.cjs`),i=require(`../../../../icons/angle-up-solid.cjs`),a=require(`../../../../hooks/query/use-settings.cjs`);let o=require(`react`);o=e.__toESM(o,1);let s=require(`react/jsx-runtime`);function c(e){return Number.isFinite(e)?Math.min(1,Math.max(0,e)):0}function l(e){let t=Math.round(e*5);return{filled:t,empty:5-t}}function u(e){return e>=.6?`text-green-400`:e>=.4?`text-yellow-400`:`text-red-400`}function d(e){return e>=.7?`text-red-400 font-semibold`:e>=.5?`text-yellow-400`:`text-neutral-400`}function f(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function p(e){let t=e?.verification;if(!f(t))return null;let n=t.enable_iterative_refinement;return typeof n==`boolean`?n:null}function m({feature:e}){let t=Math.round(e.probability*100),n=d(e.probability);return(0,s.jsxs)(`span`,{className:`inline-flex items-center gap-1`,children:[(0,s.jsx)(`span`,{className:`text-neutral-200`,children:e.display_name}),(0,s.jsxs)(`span`,{className:n,children:[`(`,t,`%)`]})]})}function h({label:e,features:t}){return!t||t.length===0?null:(0,s.jsxs)(`div`,{className:`flex flex-wrap items-center gap-x-1 text-xs`,children:[(0,s.jsx)(`span`,{className:`font-semibold text-neutral-300`,children:e}),t.map((e,t)=>(0,s.jsxs)(o.default.Fragment,{children:[t>0&&(0,s.jsx)(`span`,{className:`text-neutral-500`,children:`·`}),(0,s.jsx)(m,{feature:e})]},e.name))]})}function g({categorized:e}){let{t:r}=t.useTranslation(),i=e.agent_behavioral_issues&&e.agent_behavioral_issues.length>0,a=e.user_followup_patterns&&e.user_followup_patterns.length>0,o=e.infrastructure_issues&&e.infrastructure_issues.length>0,c=e.other&&e.other.length>0;return!i&&!a&&!o&&!c?null:(0,s.jsxs)(`div`,{className:`flex flex-col gap-1 mt-1.5`,children:[i&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$POTENTIAL_ISSUES),features:e.agent_behavioral_issues}),o&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$INFRASTRUCTURE),features:e.infrastructure_issues}),a&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$LIKELY_FOLLOWUP),features:e.user_followup_patterns}),c&&(0,s.jsx)(h,{label:r(n.I18nKey.CRITIC$OTHER),features:e.other})]})}function _({criticResult:e}){let{t:d}=t.useTranslation(),{data:f}=a.useSettings(),[m,h]=o.default.useState(!1),_=c(e.score),{filled:v,empty:y}=l(_),b=u(_),x=(_*100).toFixed(1),S=p(f?.agent_settings)===!1,C=e.metadata?.categorized_features,w=C!=null&&((C.agent_behavioral_issues??[]).length>0||(C.user_followup_patterns??[]).length>0||(C.infrastructure_issues??[]).length>0||(C.other??[]).length>0);return(0,s.jsxs)(`div`,{className:`border-l-2 border-neutral-600 pl-2 my-2 py-1.5 text-sm`,children:[(0,s.jsxs)(`div`,{className:`flex items-center gap-1`,children:[(0,s.jsx)(`span`,{className:`font-semibold text-neutral-300 text-xs`,children:d(n.I18nKey.CRITIC$SUCCESS_LIKELIHOOD_LABEL)}),(0,s.jsxs)(`span`,{className:`${b} text-xs tracking-wide`,"aria-label":`Score: ${x}%`,children:[`★`.repeat(v),`☆`.repeat(y)]}),(0,s.jsxs)(`span`,{className:`text-neutral-500 text-xs`,children:[`(`,x,`%)`]}),w&&(0,s.jsx)(`button`,{type:`button`,onClick:()=>h(e=>!e),className:`cursor-pointer ml-1`,"aria-label":d(m?n.I18nKey.BUTTON$COLLAPSE_DETAILS:n.I18nKey.BUTTON$EXPAND_DETAILS),children:m?(0,s.jsx)(i.default,{className:`h-3 w-3 inline fill-neutral-400`}):(0,s.jsx)(r.default,{className:`h-3 w-3 inline fill-neutral-400`})})]}),m&&w&&(0,s.jsx)(g,{categorized:C}),S&&(0,s.jsx)(`p`,{className:`mt-1.5 text-xs leading-5 text-neutral-500`,"data-testid":`critic-iterative-refinement-hint`,children:d(n.I18nKey.CRITIC$ITERATIVE_REFINEMENT_HINT)})]})}exports.CriticResultDisplay=_;
 //# sourceMappingURL=critic-result-display.cjs.map

package/dist/components/conversation-events/chat/event-message-components/critic-result-display.js

@@ -1,8 +1,8 @@
 import { useTranslation as e } from "../../../../node_modules/react-i18next/dist/es/useTranslation.js";
 import { I18nKey as t } from "../../../../i18n/declaration.js";
-import { useSettings as n } from "../../../../hooks/query/use-settings.js";
-import r from "../../../../icons/angle-down-solid.js";
-import i from "../../../../icons/angle-up-solid.js";
+import n from "../../../../icons/angle-down-solid.js";
+import r from "../../../../icons/angle-up-solid.js";
+import { useSettings as i } from "../../../../hooks/query/use-settings.js";
 import a from "react";
 import { jsx as o, jsxs as s } from "react/jsx-runtime";
 //#region src/components/conversation-events/chat/event-message-components/critic-result-display.tsx
@@ -85,7 +85,7 @@ function g({ categorized: n }) {
 	});
 }
 function _({ criticResult: d }) {
-	let { t: f } = e(), { data: m } = n(), [h, _] = a.useState(!1), v = c(d.score), { filled: y, empty: b } = l(v), x = u(v), S = (v * 100).toFixed(1), C = p(m?.agent_settings) === !1, w = d.metadata?.categorized_features, T = w != null && ((w.agent_behavioral_issues ?? []).length > 0 || (w.user_followup_patterns ?? []).length > 0 || (w.infrastructure_issues ?? []).length > 0 || (w.other ?? []).length > 0);
+	let { t: f } = e(), { data: m } = i(), [h, _] = a.useState(!1), v = c(d.score), { filled: y, empty: b } = l(v), x = u(v), S = (v * 100).toFixed(1), C = p(m?.agent_settings) === !1, w = d.metadata?.categorized_features, T = w != null && ((w.agent_behavioral_issues ?? []).length > 0 || (w.user_followup_patterns ?? []).length > 0 || (w.infrastructure_issues ?? []).length > 0 || (w.other ?? []).length > 0);
 	return /* @__PURE__ */ s("div", {
 		className: "border-l-2 border-neutral-600 pl-2 my-2 py-1.5 text-sm",
 		children: [
@@ -114,7 +114,7 @@ function _({ criticResult: d }) {
 						onClick: () => _((e) => !e),
 						className: "cursor-pointer ml-1",
 						"aria-label": f(h ? t.BUTTON$COLLAPSE_DETAILS : t.BUTTON$EXPAND_DETAILS),
-						children: o(h ? i : r, { className: "h-3 w-3 inline fill-neutral-400" })
+						children: o(h ? r : n, { className: "h-3 w-3 inline fill-neutral-400" })
 					})
 				]
 			}),

package/dist/components/features/backends/backend-form-modal.cjs

@@ -1,2 +1,2 @@
-const e=require(`../../../_virtual/_rolldown/runtime.cjs`),t=require(`../../../node_modules/react-i18next/dist/es/useTranslation.cjs`),n=require(`../../../i18n/declaration.cjs`),r=require(`../../../utils/utils.cjs`),i=require(`../../../context/navigation-context.cjs`),a=require(`../../../node_modules/@openhands/typescript-client/dist/client/server-client.cjs`),o=require(`../../../node_modules/@openhands/typescript-client/dist/client/device-flow-client.cjs`);require(`../../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const s=require(`../../../api/agent-server-config.cjs`),c=require(`../../../api/agent-server-client-options.cjs`),l=require(`../../../api/agent-server-compatibility.cjs`),u=require(`../../../utils/user-facing-error.cjs`),d=require(`../../../node_modules/@tanstack/react-query/build/modern/useQuery.cjs`),f=require(`../../../contexts/active-backend-context.cjs`);require(`../../../api/device-flow-client.cjs`);const p=require(`../../../hooks/use-tracking.cjs`),m=require(`../../shared/modals/modal-backdrop.cjs`),h=require(`../../shared/modals/modal-body.cjs`),g=require(`../../../utils/modal-classes.cjs`),_=require(`../../shared/modals/modal-close-button.cjs`),v=require(`../settings/brand-button.cjs`),y=require(`../settings/settings-input.cjs`),b=require(`../../../hooks/query/use-backends-health.cjs`),x=require(`../../../assets/branding/openhands-logo-white.cjs`),S=require(`../files-tab/segmented-toggle.cjs`),C=require(`../../../icons/chevron-down-small.cjs`),w=require(`./backend-status-label.cjs`),T=require(`./backend-status-dot.cjs`),E=require(`./device-flow-auth.cjs`);let D=require(`react`);D=e.__toESM(D,1);let O=require(`react/jsx-runtime`);function k(e){return o.isOpenHandsCloudHost(e)?`cloud`:`local`}function A(e){let t=e.toLowerCase().replace(/^\[|\]$/g,``);return!!(t===`localhost`||t===`::1`||t===`::`||t===`0.0.0.0`||/^127\./.test(t)||/^::ffff:127\./i.test(t)||/^10\./.test(t)||/^192\.168\./.test(t)||/^172\.(1[6-9]|2\d|3[01])\./.test(t)||/^fe[89ab][0-9a-f]:/i.test(t)||/^f[cd][0-9a-f]{2}:/i.test(t)||t.endsWith(`.local`)||!t.includes(`.`)&&!t.includes(`:`))}function j(e){let t=e.trim().replace(/\/+$/,``);if(!t)return``;if(/^https?:\/\//i.test(t))return t;let n=t.match(/^\[([^\]]+)\]/);return`${A(n?n[1]:(t.match(/:/g)??[]).length>1?t:t.split(`:`)[0])?`http`:`https`}://${t}`}function M(e){let t=e.trim();if(!t||/\s/.test(t))return!1;let n=j(t);if(!n)return!1;try{let e=new URL(n);return(e.protocol===`http:`||e.protocol===`https:`)&&e.hostname.length>0}catch{return!1}}var N=`https://app.all-hands.dev`;function P(e,t){return e(n.I18nKey.BACKEND$CONNECTION_TEST_FAILED,{host:t,interpolation:{escapeValue:!1}})}function F(e){return u.getUserFacingConnectionErrorMessage(e)}function I(e,t){let n=F(t);return n?`${e}\n${n}`:e}async function L(e){e.kind===`local`&&l.assertAgentServerVersionIsSupported(await new a.ServerClient(c.getAgentServerClientOptions({host:e.host,sessionApiKey:e.apiKey||null,timeout:5e3})).getServerInfo())}function R({backend:e,testIdRoot:r}){let{t:i}=t.useTranslation(`openhands`),o=b.useBackendsHealth([e])[e.id],s=o?.isConnected??null,u=o?.disabled===!0,f=o?.consecutiveFailures??0,p=o?.lastError??null,{data:m}=d.useQuery({queryKey:[`backend-version`,e.host,e.apiKey],queryFn:async()=>l.getDisplayAgentServerVersion(await new a.ServerClient(c.getAgentServerClientOptions({host:e.host,sessionApiKey:e.apiKey||null,timeout:5e3})).getServerInfo()),retry:!1,staleTime:6e4,enabled:e.kind===`local`&&!u}),h=w.getBackendStatusLabel(i,e,o),g=e.kind===`cloud`?i(n.I18nKey.BACKEND$KIND_CLOUD):i(n.I18nKey.BACKEND$KIND_LOCAL);return(0,O.jsxs)(`div`,{className:`flex flex-col gap-2`,children:[(0,O.jsxs)(`div`,{"data-testid":`${r}-status`,className:`flex items-center gap-3 text-sm`,children:[(0,O.jsx)(T.BackendStatusDot,{isConnected:s}),(0,O.jsx)(`span`,{className:`text-white`,"data-testid":`${r}-status-label`,children:h}),(0,O.jsx)(`span`,{className:`text-tertiary-alt`,children:`·`}),(0,O.jsx)(`span`,{className:`text-[var(--oh-text-tertiary)]`,children:g}),m?(0,O.jsx)(`span`,{className:`text-xs text-[var(--oh-muted)]`,"data-testid":`${r}-version`,children:i(n.I18nKey.BACKEND$VERSION_LABEL,{version:m})}):null]}),u?(0,O.jsxs)(`div`,{"data-testid":`${r}-status-error`,className:`flex flex-col gap-1 rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm`,children:[(0,O.jsx)(`span`,{className:`font-semibold text-red-300`,children:i(n.I18nKey.BACKEND$HEALTH_FAILED_TITLE)}),(0,O.jsx)(`span`,{className:`text-xs text-[var(--oh-text-tertiary)]`,children:i(n.I18nKey.BACKEND$HEALTH_FAILED_DETAIL,{count:f})}),p?(0,O.jsx)(`span`,{"data-testid":`${r}-status-error-message`,className:`text-xs text-red-300 whitespace-pre-wrap break-words`,children:p}):null]}):null]})}function z({initialName:e=``,initialHost:n=``,initialApiKey:r=``,onTestConnection:i,onSuccess:a,requireApiKey:o=!1,onSubmitOverride:s}){let{t:c}=t.useTranslation(`openhands`),[l,u]=D.default.useState(e),[d,f]=D.default.useState(n),[p,m]=D.default.useState(r),[h,g]=D.default.useState(null),[_,v]=D.default.useState(!1),[y,b]=D.default.useState(null),x=y??k(d),S=o||x!==`local`,C=l.trim().length>0&&M(d)&&(!S||p.trim().length>0);return{name:l,setName:u,host:d,setHost:f,apiKey:p,setApiKey:m,connectionError:h,setConnectionError:g,isSubmitting:_,kind:x,setKind:b,canSubmit:C,handleSubmit:D.default.useCallback(async e=>{if(e.preventDefault(),!C||_)return;let t={name:l.trim(),host:j(d),apiKey:p.trim(),kind:x};g(null),v(!0);try{s?await s(t):(await i(t),a())}catch(e){g(I(P(c,t.host),e))}finally{v(!1)}},[C,_,l,d,p,x,i,a,o,s,c])}}function B({mode:e,backend:i,onSubmitted:a,renderActions:o,testIdRoot:s,hostReadOnly:c,requireApiKey:l,hideConfigurationFields:u=!1,onSubmitOverride:d}){let{t:p}=t.useTranslation(`openhands`),{addBackend:m,updateBackend:h}=f.useActiveBackendContext(),g=e===`edit`&&i?i.kind:null,{name:_,setName:b,host:x,setHost:S,apiKey:C,setApiKey:w,connectionError:T,setConnectionError:E,isSubmitting:k,kind:A,handleSubmit:P}=z({initialName:i?.name??``,initialHost:i?.host??``,initialApiKey:i?.apiKey??``,onTestConnection:L,onSuccess:async()=>{let t={name:_.trim(),host:j(x),apiKey:C.trim(),kind:g??A};e===`edit`&&i?h(i.id,t):m(t),a()},requireApiKey:l,onSubmitOverride:d}),[F,I]=D.default.useState(!1),[B,V]=D.default.useState(!1),H=g??A,U=s??(e===`edit`?`edit-backend`:`add-backend`),W=l||H!==`local`,G=_.trim().length>0&&M(x)&&(!W||C.trim().length>0),K=F&&!_.trim()?p(n.I18nKey.BACKEND$NAME_REQUIRED):void 0,q=B?x.trim()?M(x)?void 0:p(n.I18nKey.BACKEND$HOST_INVALID):p(n.I18nKey.BACKEND$HOST_REQUIRED):void 0;return(0,O.jsxs)(`form`,{"data-testid":`${U}-form`,onSubmit:async e=>{if(!G){I(!0),V(!0);return}await P(e)},className:`flex flex-col gap-4`,children:[(0,O.jsxs)(`div`,{"data-testid":`${U}-configuration-fields`,className:r.cn(`flex flex-col gap-4`,u&&`hidden`),children:[(0,O.jsx)(y.SettingsInput,{testId:`${U}-name`,name:`${U}-name`,type:`text`,label:p(n.I18nKey.BACKEND$NAME_LABEL),value:_,onChange:e=>{b(e),E(null)},onBlur:()=>I(!0),placeholder:`Production`,className:`w-full`,showRequiredTag:!0,error:K}),(0,O.jsx)(y.SettingsInput,{testId:`${U}-host`,name:`${U}-host`,type:`text`,label:p(n.I18nKey.BACKEND$HOST_LABEL),value:x,onChange:c?void 0:e=>{S(e),E(null)},onBlur:()=>V(!0),placeholder:N,className:`w-full`,showRequiredTag:!0,error:q,isDisabled:c}),(0,O.jsx)(y.SettingsInput,{testId:`${U}-api-key`,name:`${U}-api-key`,type:`password`,label:p(n.I18nKey.BACKEND$KEY_LABEL),value:C,onChange:e=>{w(e),E(null)},placeholder:``,className:`w-full`}),T?(0,O.jsx)(`div`,{role:`alert`,"data-testid":`${U}-error`,className:`rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm text-red-300 whitespace-pre-wrap break-words`,children:T}):null,e===`edit`&&i&&(0,O.jsx)(R,{backend:i,testIdRoot:U})]}),o?o({canSubmit:G&&!k,isSubmitting:k,testIdRoot:U}):(0,O.jsxs)(`div`,{className:`flex justify-end gap-2 mt-2 w-full`,children:[(0,O.jsx)(v.BrandButton,{type:`button`,variant:`secondary`,onClick:a,testId:`${U}-cancel`,children:p(n.I18nKey.BUTTON$CANCEL)}),(0,O.jsx)(v.BrandButton,{type:`submit`,variant:`primary`,isDisabled:!G||k,testId:`${U}-submit`,children:p(n.I18nKey.BACKEND$SAVE)})]})]})}function V(){let{currentPath:e,navigate:t}=i.useNavigation();return D.default.useCallback(()=>{/^\/automations\/[^/]+/.test(e)?t(`/automations`):/^\/conversations\/[^/]+/.test(e)&&t(`/conversations`)},[e,t])}function H({onConnected:e,testIdRoot:r=`add-backend`,initialManualBackend:i,requireManualApiKey:a=!1,manualSubmitLabel:o,manualSubmittingLabel:c,manualSubmitTestId:l,analyticsSource:u}){let{t:d}=t.useTranslation(`openhands`),f=s.getLockedCloudHost();return f?(0,O.jsx)(`div`,{"data-testid":`${r}-connection-options`,className:`flex justify-center`,children:(0,O.jsx)(`div`,{className:`w-full`,children:(0,O.jsx)(W,{onConnected:e,testIdRoot:r,lockedHost:f,analyticsSource:u})})}):(0,O.jsxs)(`div`,{"data-testid":`${r}-connection-options`,className:`flex flex-col gap-6 md:flex-row`,children:[(0,O.jsx)(`div`,{className:`flex-1 min-w-0`,children:(0,O.jsx)(U,{onConnected:e,testIdRoot:r,initialBackend:i,requireApiKey:a,submitLabel:o??d(n.I18nKey.BACKEND$CONNECT),submittingLabel:c??d(n.I18nKey.ONBOARDING$BACKEND_STATUS_CHECKING),submitTestId:l})}),(0,O.jsx)(`div`,{className:`flex-1 min-w-0`,children:(0,O.jsx)(W,{onConnected:e,testIdRoot:r,analyticsSource:u})})]})}function U({onConnected:e,testIdRoot:r,initialBackend:i,requireApiKey:a,submitLabel:o,submittingLabel:s,submitTestId:c}){let{t:l}=t.useTranslation(`openhands`),{name:u,setName:d,host:f,setHost:p,apiKey:m,setApiKey:h,connectionError:g,setConnectionError:_,isSubmitting:b,kind:x,setKind:C,canSubmit:w,handleSubmit:T}=z({initialName:i?.name??``,initialHost:i?.host??``,initialApiKey:i?.apiKey??``,onTestConnection:L,onSuccess:()=>{e({name:u.trim(),host:j(f),apiKey:m.trim(),kind:x},`manual`)},requireApiKey:a});return(0,O.jsxs)(`form`,{"data-testid":`${r}-form`,onSubmit:T,className:`flex flex-col gap-4 flex-1 min-w-0`,children:[(0,O.jsxs)(`div`,{className:`flex flex-col gap-1`,children:[(0,O.jsx)(y.SettingsInput,{testId:`${r}-name`,name:`${r}-name`,type:`text`,label:l(n.I18nKey.BACKEND$NAME_LABEL),value:u,onChange:e=>{d(e),_(null)},placeholder:`e.g. My Server`,className:`w-full`}),(0,O.jsx)(`p`,{className:`text-xs text-[var(--oh-muted)]`,children:l(n.I18nKey.BACKEND$NAME_HELPER)})]}),(0,O.jsxs)(`div`,{className:`flex flex-col gap-1`,children:[(0,O.jsx)(y.SettingsInput,{testId:`${r}-host`,name:`${r}-host`,type:`text`,label:l(n.I18nKey.BACKEND$HOST_LABEL),value:f,onChange:e=>{p(e),_(null)},placeholder:`http://localhost:8000`,className:`w-full`}),(0,O.jsx)(`p`,{className:`text-xs text-[var(--oh-muted)]`,"data-testid":`${r}-host-helper`,children:l(n.I18nKey.BACKEND$HOST_HELPER)})]}),(0,O.jsxs)(`div`,{className:`flex flex-col items-start gap-2.5`,children:[(0,O.jsx)(`span`,{className:`text-sm`,children:l(n.I18nKey.BACKEND$KIND_LABEL)}),(0,O.jsx)(S.SegmentedToggle,{value:x,options:[{value:`local`,label:l(n.I18nKey.BACKEND$KIND_LOCAL)},{value:`cloud`,label:l(n.I18nKey.BACKEND$KIND_CLOUD)}],onChange:e=>C(e),ariaLabel:l(n.I18nKey.BACKEND$KIND_LABEL),testId:`${r}-kind`})]}),(0,O.jsx)(y.SettingsInput,{testId:`${r}-api-key`,name:`${r}-api-key`,type:`password`,label:l(n.I18nKey.BACKEND$KEY_LABEL),value:m,onChange:e=>{h(e),_(null)},placeholder:`sk-••••••••••`,className:`w-full`}),g?(0,O.jsx)(`div`,{role:`alert`,"data-testid":`${r}-error`,className:`rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm text-red-300 whitespace-pre-wrap break-words`,children:g}):null,(0,O.jsx)(v.BrandButton,{type:`submit`,variant:`secondary`,isDisabled:!w||b,testId:c??`${r}-submit`,className:`w-full text-center`,children:b?s:o})]})}function W({onConnected:e,testIdRoot:i,lockedHost:a,analyticsSource:o}){let{t:s}=t.useTranslation(`openhands`),[c,l]=D.default.useState(!1),[u,d]=D.default.useState(``),f=a??(u.trim()||N);return(0,O.jsxs)(`div`,{className:`flex flex-1 min-w-0 flex-col items-center gap-3 pb-8`,children:[(0,O.jsxs)(`div`,{className:`flex flex-col items-center gap-1`,children:[(0,O.jsx)(x.default,{width:56,height:56,"aria-hidden":!0}),(0,O.jsx)(`h4`,{className:g.modalTitleLgMediumClassName,"data-testid":`${i}-cloud-title`,children:s(n.I18nKey.BACKEND$CLOUD_TITLE)})]}),(0,O.jsx)(`p`,{className:`text-center text-sm leading-relaxed text-[var(--oh-muted)]`,children:s(n.I18nKey.BACKEND$CLOUD_DESCRIPTION)}),(0,O.jsx)(E.DeviceFlowAuth,{host:f,onSuccess:t=>{e({name:`OpenHands Cloud`,host:j(f),apiKey:t,kind:`cloud`},`cloud_login`)},testIdRoot:i,analyticsSource:o}),a?null:(0,O.jsxs)(`div`,{className:`w-full`,children:[(0,O.jsxs)(`button`,{type:`button`,onClick:()=>l(e=>!e),"aria-expanded":c,"data-testid":`${i}-advanced-toggle`,className:`flex w-full cursor-pointer items-center justify-center gap-1 text-center text-xs text-[var(--oh-muted)] transition-colors hover:text-content-2`,children:[(0,O.jsx)(`span`,{children:s(n.I18nKey.BACKEND$ADVANCED)}),(0,O.jsx)(C.default,{className:r.cn(`h-4 w-4 shrink-0 text-muted transition-transform`,c&&`rotate-180`),"aria-hidden":!0})]}),(0,O.jsxs)(`div`,{className:r.cn(`pt-2`,!c&&`pointer-events-none invisible`),"aria-hidden":!c,children:[(0,O.jsx)(y.SettingsInput,{testId:`${i}-cloud-host`,name:`${i}-cloud-host`,type:`text`,label:s(n.I18nKey.BACKEND$HOST_LABEL),value:u,onChange:d,placeholder:N,className:`w-full`}),(0,O.jsx)(`p`,{className:`mt-1 text-xs text-[var(--oh-muted)]`,children:s(n.I18nKey.BACKEND$LOGIN_CLOUD_HINT)})]})]})]})}function G({onClose:e,source:t}){let{addBackend:n}=f.useActiveBackendContext(),r=V(),{trackBackendAdded:i}=p.useTracking();return(0,O.jsx)(H,{onConnected:D.default.useCallback((a,s)=>{n(a);let c=o.isOpenHandsCloudHost(a.host);i({backendKind:a.kind,connectionMethod:s,isOpenhandsCloud:c,isCustomHost:!c,hasApiKey:!!a.apiKey,source:t}),r(),e()},[n,r,e,i,t]),analyticsSource:t})}function K({mode:e,backend:i,onClose:a,source:o=`add_backend_modal`,hideCloseButton:s=!1}){let{t:c}=t.useTranslation(`openhands`);if(e===`add`)return(0,O.jsx)(m.ModalBackdrop,{onClose:s?void 0:a,closeOnEscape:!1,closeOnBackdropClick:!s,"aria-label":c(n.I18nKey.BACKEND$ADD_TITLE),children:(0,O.jsxs)(`div`,{"data-testid":s?`onboarding-modal`:`add-backend-modal`,className:r.cn(`relative rounded-xl border border-[var(--oh-border)] bg-base-secondary`,h.modalWidthClassName(`xl`),h.MODAL_MAX_WIDTH_VIEWPORT),children:[s?null:(0,O.jsx)(_.ModalCloseButton,{onClose:a,testId:`add-backend-close`}),s?null:(0,O.jsx)(`div`,{className:`px-6 pt-6 pb-2 pr-12`,children:(0,O.jsx)(`h2`,{className:g.modalTitleLgClassName,children:c(n.I18nKey.BACKEND$ADD_TITLE)})}),(0,O.jsx)(`div`,{className:r.cn(`px-6 pb-6`,s?`pt-6`:`pt-2`),children:(0,O.jsx)(G,{onClose:a,source:o})})]})});let l=`edit-backend`;return(0,O.jsx)(m.ModalBackdrop,{onClose:a,closeOnEscape:!1,"aria-label":c(n.I18nKey.BACKEND$EDIT_TITLE),children:(0,O.jsxs)(`div`,{"data-testid":`${l}-modal`,className:r.cn(`relative bg-base-secondary p-6 rounded-xl flex flex-col gap-4 border border-[var(--oh-border)]`,h.modalWidthClassName(`md`)),children:[(0,O.jsx)(_.ModalCloseButton,{onClose:a,testId:`${l}-close`}),(0,O.jsx)(`h2`,{className:r.cn(`pr-6`,g.modalTitleLgClassName),children:c(n.I18nKey.BACKEND$EDIT_TITLE)}),(0,O.jsx)(B,{mode:`edit`,backend:i,onSubmitted:a,testIdRoot:l})]})})}exports.BackendFormModal=K;
+const e=require(`../../../_virtual/_rolldown/runtime.cjs`),t=require(`../../../node_modules/react-i18next/dist/es/useTranslation.cjs`),n=require(`../../../i18n/declaration.cjs`),r=require(`../../../utils/utils.cjs`),i=require(`../../../context/navigation-context.cjs`),a=require(`../../../node_modules/@openhands/typescript-client/dist/client/server-client.cjs`),o=require(`../../../node_modules/@openhands/typescript-client/dist/client/device-flow-client.cjs`);require(`../../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const s=require(`../../../api/agent-server-config.cjs`),c=require(`../../../api/agent-server-client-options.cjs`),l=require(`../../../api/agent-server-compatibility.cjs`),u=require(`../../../utils/user-facing-error.cjs`),d=require(`../../../node_modules/@tanstack/react-query/build/modern/useQuery.cjs`),f=require(`../../../contexts/active-backend-context.cjs`),p=require(`../../../hooks/use-tracking.cjs`),m=require(`../../shared/modals/modal-backdrop.cjs`),h=require(`../../shared/modals/modal-body.cjs`),g=require(`../../../utils/modal-classes.cjs`),_=require(`../../shared/modals/modal-close-button.cjs`),v=require(`../settings/brand-button.cjs`),y=require(`../settings/settings-input.cjs`),b=require(`../../../hooks/query/use-backends-health.cjs`),x=require(`../../../assets/branding/openhands-logo-white.cjs`),S=require(`../files-tab/segmented-toggle.cjs`);require(`../../../api/device-flow-client.cjs`);const C=require(`../../../icons/chevron-down-small.cjs`),w=require(`./backend-status-label.cjs`),T=require(`./backend-status-dot.cjs`),E=require(`./device-flow-auth.cjs`);let D=require(`react`);D=e.__toESM(D,1);let O=require(`react/jsx-runtime`);function k(e){return o.isOpenHandsCloudHost(e)?`cloud`:`local`}function A(e){let t=e.toLowerCase().replace(/^\[|\]$/g,``);return!!(t===`localhost`||t===`::1`||t===`::`||t===`0.0.0.0`||/^127\./.test(t)||/^::ffff:127\./i.test(t)||/^10\./.test(t)||/^192\.168\./.test(t)||/^172\.(1[6-9]|2\d|3[01])\./.test(t)||/^fe[89ab][0-9a-f]:/i.test(t)||/^f[cd][0-9a-f]{2}:/i.test(t)||t.endsWith(`.local`)||!t.includes(`.`)&&!t.includes(`:`))}function j(e){let t=e.trim().replace(/\/+$/,``);if(!t)return``;if(/^https?:\/\//i.test(t))return t;let n=t.match(/^\[([^\]]+)\]/);return`${A(n?n[1]:(t.match(/:/g)??[]).length>1?t:t.split(`:`)[0])?`http`:`https`}://${t}`}function M(e){let t=e.trim();if(!t||/\s/.test(t))return!1;let n=j(t);if(!n)return!1;try{let e=new URL(n);return(e.protocol===`http:`||e.protocol===`https:`)&&e.hostname.length>0}catch{return!1}}var N=`https://app.all-hands.dev`;function P(e,t){return e(n.I18nKey.BACKEND$CONNECTION_TEST_FAILED,{host:t,interpolation:{escapeValue:!1}})}function F(e){return u.getUserFacingConnectionErrorMessage(e)}function I(e,t){let n=F(t);return n?`${e}\n${n}`:e}async function L(e){if(e.kind!==`local`)return{agentServerVersion:null};let t=await new a.ServerClient(c.getAgentServerClientOptions({host:e.host,sessionApiKey:e.apiKey||null,timeout:5e3})).getServerInfo();return l.assertAgentServerVersionIsSupported(t),{agentServerVersion:l.getDisplayAgentServerVersion(t)}}function R({backend:e,testIdRoot:r}){let{t:i}=t.useTranslation(`openhands`),o=b.useBackendsHealth([e])[e.id],s=o?.isConnected??null,u=o?.disabled===!0,f=o?.consecutiveFailures??0,p=o?.lastError??null,{data:m}=d.useQuery({queryKey:[`backend-version`,e.host,e.apiKey],queryFn:async()=>l.getDisplayAgentServerVersion(await new a.ServerClient(c.getAgentServerClientOptions({host:e.host,sessionApiKey:e.apiKey||null,timeout:5e3})).getServerInfo()),retry:!1,staleTime:6e4,enabled:e.kind===`local`&&!u}),h=w.getBackendStatusLabel(i,e,o),g=e.kind===`cloud`?i(n.I18nKey.BACKEND$KIND_CLOUD):i(n.I18nKey.BACKEND$KIND_LOCAL);return(0,O.jsxs)(`div`,{className:`flex flex-col gap-2`,children:[(0,O.jsxs)(`div`,{"data-testid":`${r}-status`,className:`flex items-center gap-3 text-sm`,children:[(0,O.jsx)(T.BackendStatusDot,{isConnected:s}),(0,O.jsx)(`span`,{className:`text-white`,"data-testid":`${r}-status-label`,children:h}),(0,O.jsx)(`span`,{className:`text-tertiary-alt`,children:`·`}),(0,O.jsx)(`span`,{className:`text-[var(--oh-text-tertiary)]`,children:g}),m?(0,O.jsx)(`span`,{className:`text-xs text-[var(--oh-muted)]`,"data-testid":`${r}-version`,children:i(n.I18nKey.BACKEND$VERSION_LABEL,{version:m})}):null]}),u?(0,O.jsxs)(`div`,{"data-testid":`${r}-status-error`,className:`flex flex-col gap-1 rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm`,children:[(0,O.jsx)(`span`,{className:`font-semibold text-red-300`,children:i(n.I18nKey.BACKEND$HEALTH_FAILED_TITLE)}),(0,O.jsx)(`span`,{className:`text-xs text-[var(--oh-text-tertiary)]`,children:i(n.I18nKey.BACKEND$HEALTH_FAILED_DETAIL,{count:f})}),p?(0,O.jsx)(`span`,{"data-testid":`${r}-status-error-message`,className:`text-xs text-red-300 whitespace-pre-wrap break-words`,children:p}):null]}):null]})}function z({initialName:e=``,initialHost:n=``,initialApiKey:r=``,onTestConnection:i,onSuccess:a,requireApiKey:o=!1,onSubmitOverride:s}){let{t:c}=t.useTranslation(`openhands`),[l,u]=D.default.useState(e),[d,f]=D.default.useState(n),[p,m]=D.default.useState(r),[h,g]=D.default.useState(null),[_,v]=D.default.useState(!1),[y,b]=D.default.useState(null),x=y??k(d),S=o||x!==`local`,C=l.trim().length>0&&M(d)&&(!S||p.trim().length>0);return{name:l,setName:u,host:d,setHost:f,apiKey:p,setApiKey:m,connectionError:h,setConnectionError:g,isSubmitting:_,kind:x,setKind:b,canSubmit:C,handleSubmit:D.default.useCallback(async e=>{if(e.preventDefault(),!C||_)return;let t={name:l.trim(),host:j(d),apiKey:p.trim(),kind:x};g(null),v(!0);try{s?await s(t):a(await i(t))}catch(e){g(I(P(c,t.host),e))}finally{v(!1)}},[C,_,l,d,p,x,i,a,o,s,c])}}function B({mode:e,backend:i,onSubmitted:a,renderActions:o,testIdRoot:s,hostReadOnly:c,requireApiKey:l,hideConfigurationFields:u=!1,onSubmitOverride:d}){let{t:p}=t.useTranslation(`openhands`),{addBackend:m,updateBackend:h}=f.useActiveBackendContext(),g=e===`edit`&&i?i.kind:null,{name:_,setName:b,host:x,setHost:S,apiKey:C,setApiKey:w,connectionError:T,setConnectionError:E,isSubmitting:k,kind:A,handleSubmit:P}=z({initialName:i?.name??``,initialHost:i?.host??``,initialApiKey:i?.apiKey??``,onTestConnection:L,onSuccess:async()=>{let t={name:_.trim(),host:j(x),apiKey:C.trim(),kind:g??A};e===`edit`&&i?h(i.id,t):m(t),a()},requireApiKey:l,onSubmitOverride:d}),[F,I]=D.default.useState(!1),[B,V]=D.default.useState(!1),H=g??A,U=s??(e===`edit`?`edit-backend`:`add-backend`),W=l||H!==`local`,G=_.trim().length>0&&M(x)&&(!W||C.trim().length>0),K=F&&!_.trim()?p(n.I18nKey.BACKEND$NAME_REQUIRED):void 0,q=B?x.trim()?M(x)?void 0:p(n.I18nKey.BACKEND$HOST_INVALID):p(n.I18nKey.BACKEND$HOST_REQUIRED):void 0;return(0,O.jsxs)(`form`,{"data-testid":`${U}-form`,onSubmit:async e=>{if(!G){I(!0),V(!0);return}await P(e)},className:`flex flex-col gap-4`,children:[(0,O.jsxs)(`div`,{"data-testid":`${U}-configuration-fields`,className:r.cn(`flex flex-col gap-4`,u&&`hidden`),children:[(0,O.jsx)(y.SettingsInput,{testId:`${U}-name`,name:`${U}-name`,type:`text`,label:p(n.I18nKey.BACKEND$NAME_LABEL),value:_,onChange:e=>{b(e),E(null)},onBlur:()=>I(!0),placeholder:`Production`,className:`w-full`,showRequiredTag:!0,error:K}),(0,O.jsx)(y.SettingsInput,{testId:`${U}-host`,name:`${U}-host`,type:`text`,label:p(n.I18nKey.BACKEND$HOST_LABEL),value:x,onChange:c?void 0:e=>{S(e),E(null)},onBlur:()=>V(!0),placeholder:N,className:`w-full`,showRequiredTag:!0,error:q,isDisabled:c}),(0,O.jsx)(y.SettingsInput,{testId:`${U}-api-key`,name:`${U}-api-key`,type:`password`,label:p(n.I18nKey.BACKEND$KEY_LABEL),value:C,onChange:e=>{w(e),E(null)},placeholder:``,className:`w-full`}),T?(0,O.jsx)(`div`,{role:`alert`,"data-testid":`${U}-error`,className:`rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm text-red-300 whitespace-pre-wrap break-words`,children:T}):null,e===`edit`&&i&&(0,O.jsx)(R,{backend:i,testIdRoot:U})]}),o?o({canSubmit:G&&!k,isSubmitting:k,testIdRoot:U}):(0,O.jsxs)(`div`,{className:`flex justify-end gap-2 mt-2 w-full`,children:[(0,O.jsx)(v.BrandButton,{type:`button`,variant:`secondary`,onClick:a,testId:`${U}-cancel`,children:p(n.I18nKey.BUTTON$CANCEL)}),(0,O.jsx)(v.BrandButton,{type:`submit`,variant:`primary`,isDisabled:!G||k,testId:`${U}-submit`,children:p(n.I18nKey.BACKEND$SAVE)})]})]})}function V(){let{currentPath:e,navigate:t}=i.useNavigation();return D.default.useCallback(()=>{/^\/automations\/[^/]+/.test(e)?t(`/automations`):/^\/conversations\/[^/]+/.test(e)&&t(`/conversations`)},[e,t])}function H({onConnected:e,testIdRoot:r=`add-backend`,initialManualBackend:i,requireManualApiKey:a=!1,manualSubmitLabel:o,manualSubmittingLabel:c,manualSubmitTestId:l,analyticsSource:u}){let{t:d}=t.useTranslation(`openhands`),f=s.getLockedCloudHost();return f?(0,O.jsx)(`div`,{"data-testid":`${r}-connection-options`,className:`flex justify-center`,children:(0,O.jsx)(`div`,{className:`w-full`,children:(0,O.jsx)(W,{onConnected:e,testIdRoot:r,lockedHost:f,analyticsSource:u})})}):(0,O.jsxs)(`div`,{"data-testid":`${r}-connection-options`,className:`flex flex-col gap-6 md:flex-row`,children:[(0,O.jsx)(`div`,{className:`flex-1 min-w-0`,children:(0,O.jsx)(U,{onConnected:e,testIdRoot:r,initialBackend:i,requireApiKey:a,submitLabel:o??d(n.I18nKey.BACKEND$CONNECT),submittingLabel:c??d(n.I18nKey.ONBOARDING$BACKEND_STATUS_CHECKING),submitTestId:l})}),(0,O.jsx)(`div`,{className:`flex-1 min-w-0`,children:(0,O.jsx)(W,{onConnected:e,testIdRoot:r,analyticsSource:u})})]})}function U({onConnected:e,testIdRoot:r,initialBackend:i,requireApiKey:a,submitLabel:o,submittingLabel:s,submitTestId:c}){let{t:l}=t.useTranslation(`openhands`),{name:u,setName:d,host:f,setHost:p,apiKey:m,setApiKey:h,connectionError:g,setConnectionError:_,isSubmitting:b,kind:x,setKind:C,canSubmit:w,handleSubmit:T}=z({initialName:i?.name??``,initialHost:i?.host??``,initialApiKey:i?.apiKey??``,onTestConnection:L,onSuccess:t=>{e({name:u.trim(),host:j(f),apiKey:m.trim(),kind:x},`manual`,t)},requireApiKey:a});return(0,O.jsxs)(`form`,{"data-testid":`${r}-form`,onSubmit:T,className:`flex flex-col gap-4 flex-1 min-w-0`,children:[(0,O.jsxs)(`div`,{className:`flex flex-col gap-1`,children:[(0,O.jsx)(y.SettingsInput,{testId:`${r}-name`,name:`${r}-name`,type:`text`,label:l(n.I18nKey.BACKEND$NAME_LABEL),value:u,onChange:e=>{d(e),_(null)},placeholder:`e.g. My Server`,className:`w-full`}),(0,O.jsx)(`p`,{className:`text-xs text-[var(--oh-muted)]`,children:l(n.I18nKey.BACKEND$NAME_HELPER)})]}),(0,O.jsxs)(`div`,{className:`flex flex-col gap-1`,children:[(0,O.jsx)(y.SettingsInput,{testId:`${r}-host`,name:`${r}-host`,type:`text`,label:l(n.I18nKey.BACKEND$HOST_LABEL),value:f,onChange:e=>{p(e),_(null)},placeholder:`http://localhost:8000`,className:`w-full`}),(0,O.jsx)(`p`,{className:`text-xs text-[var(--oh-muted)]`,"data-testid":`${r}-host-helper`,children:l(n.I18nKey.BACKEND$HOST_HELPER)})]}),(0,O.jsxs)(`div`,{className:`flex flex-col items-start gap-2.5`,children:[(0,O.jsx)(`span`,{className:`text-sm`,children:l(n.I18nKey.BACKEND$KIND_LABEL)}),(0,O.jsx)(S.SegmentedToggle,{value:x,options:[{value:`local`,label:l(n.I18nKey.BACKEND$KIND_LOCAL)},{value:`cloud`,label:l(n.I18nKey.BACKEND$KIND_CLOUD)}],onChange:e=>C(e),ariaLabel:l(n.I18nKey.BACKEND$KIND_LABEL),testId:`${r}-kind`})]}),(0,O.jsx)(y.SettingsInput,{testId:`${r}-api-key`,name:`${r}-api-key`,type:`password`,label:l(n.I18nKey.BACKEND$KEY_LABEL),value:m,onChange:e=>{h(e),_(null)},placeholder:`sk-••••••••••`,className:`w-full`}),g?(0,O.jsx)(`div`,{role:`alert`,"data-testid":`${r}-error`,className:`rounded-md border border-red-500/40 bg-red-500/10 p-3 text-sm text-red-300 whitespace-pre-wrap break-words`,children:g}):null,(0,O.jsx)(v.BrandButton,{type:`submit`,variant:`secondary`,isDisabled:!w||b,testId:c??`${r}-submit`,className:`w-full text-center`,children:b?s:o})]})}function W({onConnected:e,testIdRoot:i,lockedHost:a,analyticsSource:o}){let{t:s}=t.useTranslation(`openhands`),[c,l]=D.default.useState(!1),[u,d]=D.default.useState(``),f=a??(u.trim()||N);return(0,O.jsxs)(`div`,{className:`flex flex-1 min-w-0 flex-col items-center gap-3 pb-8`,children:[(0,O.jsxs)(`div`,{className:`flex flex-col items-center gap-1`,children:[(0,O.jsx)(x.default,{width:56,height:56,"aria-hidden":!0}),(0,O.jsx)(`h4`,{className:g.modalTitleLgMediumClassName,"data-testid":`${i}-cloud-title`,children:s(n.I18nKey.BACKEND$CLOUD_TITLE)})]}),(0,O.jsx)(`p`,{className:`text-center text-sm leading-relaxed text-[var(--oh-muted)]`,children:s(n.I18nKey.BACKEND$CLOUD_DESCRIPTION)}),(0,O.jsx)(E.DeviceFlowAuth,{host:f,onSuccess:t=>{e({name:`OpenHands Cloud`,host:j(f),apiKey:t,kind:`cloud`},`cloud_login`)},testIdRoot:i,analyticsSource:o}),a?null:(0,O.jsxs)(`div`,{className:`w-full`,children:[(0,O.jsxs)(`button`,{type:`button`,onClick:()=>l(e=>!e),"aria-expanded":c,"data-testid":`${i}-advanced-toggle`,className:`flex w-full cursor-pointer items-center justify-center gap-1 text-center text-xs text-[var(--oh-muted)] transition-colors hover:text-content-2`,children:[(0,O.jsx)(`span`,{children:s(n.I18nKey.BACKEND$ADVANCED)}),(0,O.jsx)(C.default,{className:r.cn(`h-4 w-4 shrink-0 text-muted transition-transform`,c&&`rotate-180`),"aria-hidden":!0})]}),(0,O.jsxs)(`div`,{className:r.cn(`pt-2`,!c&&`pointer-events-none invisible`),"aria-hidden":!c,children:[(0,O.jsx)(y.SettingsInput,{testId:`${i}-cloud-host`,name:`${i}-cloud-host`,type:`text`,label:s(n.I18nKey.BACKEND$HOST_LABEL),value:u,onChange:d,placeholder:N,className:`w-full`}),(0,O.jsx)(`p`,{className:`mt-1 text-xs text-[var(--oh-muted)]`,children:s(n.I18nKey.BACKEND$LOGIN_CLOUD_HINT)})]})]})]})}function G({onClose:e,source:t}){let{addBackend:n}=f.useActiveBackendContext(),r=V(),{trackBackendAdded:i}=p.useTracking();return(0,O.jsx)(H,{onConnected:D.default.useCallback((a,o,s)=>{n(a),i({backendKind:a.kind,connectionMethod:o,hasApiKey:!!a.apiKey,source:t,agentServerVersion:s?.agentServerVersion}),r(),e()},[n,r,e,i,t]),analyticsSource:t})}function K({mode:e,backend:i,onClose:a,source:o=`add_backend_modal`,hideCloseButton:s=!1}){let{t:c}=t.useTranslation(`openhands`);if(e===`add`)return(0,O.jsx)(m.ModalBackdrop,{onClose:s?void 0:a,closeOnEscape:!1,closeOnBackdropClick:!s,"aria-label":c(n.I18nKey.BACKEND$ADD_TITLE),children:(0,O.jsxs)(`div`,{"data-testid":s?`onboarding-modal`:`add-backend-modal`,className:r.cn(`relative rounded-xl border border-[var(--oh-border)] bg-base-secondary`,h.modalWidthClassName(`xl`),h.MODAL_MAX_WIDTH_VIEWPORT),children:[s?null:(0,O.jsx)(_.ModalCloseButton,{onClose:a,testId:`add-backend-close`}),s?null:(0,O.jsx)(`div`,{className:`px-6 pt-6 pb-2 pr-12`,children:(0,O.jsx)(`h2`,{className:g.modalTitleLgClassName,children:c(n.I18nKey.BACKEND$ADD_TITLE)})}),(0,O.jsx)(`div`,{className:r.cn(`px-6 pb-6`,s?`pt-6`:`pt-2`),children:(0,O.jsx)(G,{onClose:a,source:o})})]})});let l=`edit-backend`;return(0,O.jsx)(m.ModalBackdrop,{onClose:a,closeOnEscape:!1,"aria-label":c(n.I18nKey.BACKEND$EDIT_TITLE),children:(0,O.jsxs)(`div`,{"data-testid":`${l}-modal`,className:r.cn(`relative bg-base-secondary p-6 rounded-xl flex flex-col gap-4 border border-[var(--oh-border)]`,h.modalWidthClassName(`md`)),children:[(0,O.jsx)(_.ModalCloseButton,{onClose:a,testId:`${l}-close`}),(0,O.jsx)(`h2`,{className:r.cn(`pr-6`,g.modalTitleLgClassName),children:c(n.I18nKey.BACKEND$EDIT_TITLE)}),(0,O.jsx)(B,{mode:`edit`,backend:i,onSubmitted:a,testIdRoot:l})]})})}exports.BackendFormModal=K;
 //# sourceMappingURL=backend-form-modal.cjs.map