npm - @openhands/agent-canvas - Versions diffs - 1.5.2 → 1.6.1 - Mend

@openhands/agent-canvas 1.5.2 → 1.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (711) hide show

package/dist/api/conversation-service/agent-server-conversation-service.api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"agent-server-conversation-service.api.js","names":[],"sources":["../../../src/api/conversation-service/agent-server-conversation-service.api.ts"],"sourcesContent":["import {\n ConversationSortOrder,\n type ForkConversationRequest,\n type LLMConfig,\n} from \"@openhands/typescript-client\";\nimport {\n ConversationClient,\n FileClient,\n ProfilesClient,\n VSCodeClient,\n} from \"@openhands/typescript-client/clients\";\nimport { v4 as uuidv4 } from \"uuid\";\nimport { AgentKind, Provider } from \"#/types/settings\";\nimport type { ConversationRuntimeContext } from \"#/api/conversation-file-upload.api\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport {\n buildConversationWorkingDir,\n getAgentServerWorkingDir,\n} from \"../agent-server-config\";\nimport { resolveAbsoluteAgentServerPath } from \"../agent-server-home\";\nimport {\n getActiveBackend,\n getEffectiveLocalBackend,\n} from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport ProfilesService from \"../profiles-service/profiles-service.api\";\nimport {\n batchGetCloudConversations,\n createCloudAppConversation,\n deleteCloudConversation,\n downloadCloudConversation,\n getCloudAppConversationStartTask,\n readCloudConversationFile,\n searchCloudConversations,\n updateCloudConversationPublicFlag,\n} from \"../cloud/conversation-service.api\";\nimport {\n DirectConversationInfo,\n assertSubscriptionAuthReady,\n buildStartConversationRequestWithEncryptedSettings,\n emptyHooksResponse,\n getDefaultConversationTitle,\n toAppConversation,\n toConversationPage,\n} from \"../agent-server-adapter\";\nimport { GetVSCodeUrlResponse } from \"../open-hands.types\";\nimport {\n getAgentServerClientOptions,\n NoBackendAvailableError,\n} from \"../agent-server-client-options\";\nimport SettingsService from \"../settings-service/settings-service.api\";\nimport {\n ConversationMetadata,\n getStoredConversationMetadata,\n removeStoredConversationMetadata,\n setStoredConversationMetadata,\n type WorkspaceMode,\n} from \"../conversation-metadata-store\";\nimport type {\n GetHooksResponse,\n PluginSpec,\n AppConversation,\n AppConversationPage,\n AppConversationStartRequest,\n AppConversationStartTask,\n MetricsSnapshot,\n RuntimeConversationInfo,\n SendMessageRequest,\n SendMessageResponse,\n} from \"./agent-server-conversation-service.types\";\n\nconst DEFAULT_CONVERSATION_TIMESTAMP = \"1970-01-01T00:00:00.000Z\";\nconst INVALID_CONVERSATION_RESPONSE_MESSAGE =\n \"Unable to load conversations because the selected agent server returned \" +\n \"data this UI does not understand. Check the backend URL/session key and \" +\n \"update the agent server if needed.\";\nfunction invalidConversationResponse(): Error {\n return new Error(INVALID_CONVERSATION_RESPONSE_MESSAGE);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction numberOrNull(value: unknown): number \| null {\n return typeof value === \"number\" ? value : null;\n}\n\nfunction numberOrZero(value: unknown): number {\n return typeof value === \"number\" ? value : 0;\n}\n\nfunction stringOrNull(value: unknown): string \| null {\n return typeof value === \"string\" ? value : null;\n}\n\nfunction readTimestamp(\n item: Record<string, unknown>,\n snakeKey: \"created_at\" \| \"updated_at\",\n camelKey: \"createdAt\" \| \"updatedAt\",\n): string {\n const value = item[snakeKey] ?? item[camelKey];\n return typeof value === \"string\" && value.trim()\n ? value\n : DEFAULT_CONVERSATION_TIMESTAMP;\n}\n\nfunction normalizeTokenUsage(\n value: unknown,\n): NonNullable<MetricsSnapshot[\"accumulated_token_usage\"]> \| null {\n if (!isRecord(value)) return null;\n\n return {\n prompt_tokens: numberOrZero(value.prompt_tokens),\n completion_tokens: numberOrZero(value.completion_tokens),\n cache_read_tokens: numberOrZero(value.cache_read_tokens),\n cache_write_tokens: numberOrZero(value.cache_write_tokens),\n context_window: numberOrZero(value.context_window),\n per_turn_token: numberOrZero(value.per_turn_token),\n };\n}\n\nfunction normalizeMetrics(value: unknown): MetricsSnapshot \| null {\n if (!isRecord(value)) return null;\n\n return {\n accumulated_cost: numberOrNull(value.accumulated_cost),\n max_budget_per_task: numberOrNull(value.max_budget_per_task),\n accumulated_token_usage: normalizeTokenUsage(value.accumulated_token_usage),\n };\n}\n\nfunction normalizeAgent(value: unknown): DirectConversationInfo[\"agent\"] {\n if (!isRecord(value)) return null;\n const llm = isRecord(value.llm)\n ? { model: stringOrNull(value.llm.model) }\n : null;\n // ``kind`` is the SDK's pydantic discriminator (``\"Agent\"`` vs ``\"ACPAgent\"``);\n // ``toAppConversation`` reads it to derive ``agent_kind``. ``acp_server`` is\n // the ACP provider identity (``ACPAgent.acp_server``, SDK #3692) — required so\n // the adapter can source the chip + in-conversation model list from the agent\n // when the ``acpserver`` tag is absent (a profile launch doesn't stamp it,\n // #1571). ``acp_model`` is the Canvas-configured model — preserved so the chip\n // can fall back to it when the SDK runtime model fields aren't populated.\n // Preserving these makes the wire path agree with the unit-test path that\n // builds ``DirectConversationInfo`` directly\n // (e.g. ``__tests__/api/agent-server-adapter.test.ts``).\n return {\n kind: stringOrNull(value.kind),\n acp_server: stringOrNull(value.acp_server),\n acp_model: stringOrNull(value.acp_model),\n llm,\n };\n}\n\nfunction normalizeWorkspace(\n value: unknown,\n): DirectConversationInfo[\"workspace\"] {\n if (!isRecord(value)) return null;\n return { working_dir: stringOrNull(value.working_dir) };\n}\n\n/*\n Accept the agent-server's ``tags: Record[str, str]`` payload defensively:\n * the wire shape is guaranteed by the server-side validator (keys\n * ``^[a-z0-9]+$``, string values), but a non-conforming response (older\n * server, raw API write, future schema drift) must never crash the parser\n * — Canvas only consumes ``acpserver`` and falls back to a generic chip\n * for anything it doesn't recognize. Drop entries whose value isn't a\n * plain string; return ``null`` when the wire field is absent or not an\n * object so consumers can use ``info.tags?.[KEY] ?? null`` uniformly.\n /\nfunction normalizeTags(value: unknown): Record<string, string> \| null {\n if (!isRecord(value)) return null;\n const tags: Record<string, string> = {};\n for (const [key, entry] of Object.entries(value)) {\n if (typeof entry === \"string\") {\n tags[key] = entry;\n }\n }\n return tags;\n}\n\nfunction normalizeLaunchedAgentProfile(\n value: unknown,\n): DirectConversationInfo[\"launched_agent_profile\"] {\n if (!isRecord(value)) return null;\n const { agent_profile_id: agentProfileId, revision } = value;\n if (typeof agentProfileId !== \"string\" \|\| typeof revision !== \"number\") {\n return null;\n }\n return { agent_profile_id: agentProfileId, revision };\n}\n\nfunction normalizeAbsolutePath(path: string): string \| null {\n if (!path.startsWith(\"/\")) return null;\n\n const segments: string[] = [];\n for (const segment of path.split(\"/\")) {\n if (segment && segment !== \".\") {\n if (segment === \"..\") {\n if (!segments.length) return null;\n segments.pop();\n } else {\n segments.push(segment);\n }\n }\n }\n\n return `/${segments.join(\"/\")}`;\n}\n\nfunction requirePathInsideDirectory(path: string, directory: string): string {\n const normalizedPath = normalizeAbsolutePath(path);\n const normalizedDirectory = normalizeAbsolutePath(directory);\n\n if (\n !normalizedPath \|\|\n !normalizedDirectory \|\|\n (normalizedPath !== normalizedDirectory &&\n !normalizedPath.startsWith(`${normalizedDirectory}/`))\n ) {\n throw new Error(\"Conversation file path must stay inside the workspace\");\n }\n\n return normalizedPath;\n}\n\nfunction requireDirectConversationInfo(item: unknown): DirectConversationInfo {\n if (!isRecord(item) \|\| typeof item.id !== \"string\" \|\| !item.id.trim()) {\n throw invalidConversationResponse();\n }\n\n return {\n id: item.id.trim(),\n title: stringOrNull(item.title),\n created_at: readTimestamp(item, \"created_at\", \"createdAt\"),\n updated_at: readTimestamp(item, \"updated_at\", \"updatedAt\"),\n execution_status: stringOrNull(item.execution_status),\n sandbox_status: stringOrNull(item.sandbox_status),\n metrics: normalizeMetrics(item.metrics),\n agent: normalizeAgent(item.agent),\n workspace: normalizeWorkspace(item.workspace),\n tags: normalizeTags(item.tags),\n launched_agent_profile: normalizeLaunchedAgentProfile(\n item.launched_agent_profile,\n ),\n // SDK-runtime ACP model fields (populated when the agent-server supports\n // ``ConversationInfo.current_model_``). Consumed by the conversation\n // adapter to drive the per-card chip's model text. Older agent-servers\n // omit these — adapter handles ``undefined`` / ``null`` gracefully.\n current_model_id: stringOrNull(item.current_model_id),\n current_model_name: stringOrNull(item.current_model_name),\n };\n}\n\nfunction requireDirectConversationItems(\n items: unknown,\n): DirectConversationInfo[] {\n if (!Array.isArray(items)) {\n throw invalidConversationResponse();\n }\n return items.map(requireDirectConversationInfo);\n}\n\nfunction requireConversationSearchPage(page: unknown): {\n items: DirectConversationInfo[];\n next_page_id: string \| null;\n} {\n if (Array.isArray(page)) {\n return {\n items: requireDirectConversationItems(page),\n next_page_id: null,\n };\n }\n\n if (!isRecord(page)) {\n throw invalidConversationResponse();\n }\n\n return {\n items: requireDirectConversationItems(page.items),\n next_page_id:\n typeof page.next_page_id === \"string\" ? page.next_page_id : null,\n };\n}\n\nconst RUNTIME_STATUSES = new Set<string>([\n \"idle\",\n \"running\",\n \"paused\",\n \"waiting_for_confirmation\",\n \"finished\",\n \"error\",\n \"stuck\",\n]);\n\nfunction toRuntimeStatus(\n status: DirectConversationInfo[\"execution_status\"],\n): RuntimeConversationInfo[\"status\"] {\n const nextStatus = status ?? \"idle\";\n return (\n RUNTIME_STATUSES.has(nextStatus) ? nextStatus : \"idle\"\n ) as RuntimeConversationInfo[\"status\"];\n}\n\nfunction requireAppConversation(\n conversation: AppConversation \| null \| undefined,\n conversationId: string,\n): AppConversation {\n if (!conversation) {\n throw new Error(`Conversation ${conversationId} was not found`);\n }\n return conversation;\n}\n\nclass AgentServerConversationService {\n static async sendMessage(\n conversationId: string,\n message: SendMessageRequest,\n runtime?: ConversationRuntimeContext \| null,\n ): Promise<SendMessageResponse> {\n const active = getActiveBackend().backend;\n let conversationUrl = runtime?.conversationUrl ?? null;\n let sessionApiKey = runtime?.sessionApiKey ?? null;\n\n if (active.kind === \"cloud\") {\n if (!conversationUrl \|\| !sessionApiKey) {\n const [conversation] = await batchGetCloudConversations([\n conversationId,\n ]);\n conversationUrl = conversation?.conversation_url?.trim() ?? null;\n sessionApiKey = conversation?.session_api_key?.trim() ?? null;\n }\n\n if (!conversationUrl \|\| !sessionApiKey) {\n throw new Error(\n \"Conversation sandbox is still starting. Wait for it to finish, then try again.\",\n );\n }\n\n await callCloudProxy({\n backend: active,\n method: \"POST\",\n hostOverride: buildHttpBaseUrl(conversationUrl),\n path: `/api/conversations/${conversationId}/events`,\n body: { ...message, run: true },\n authMode: \"session-api-key\",\n sessionApiKey,\n });\n\n return message;\n }\n\n await new ConversationClient(\n getAgentServerClientOptions({ conversationUrl, sessionApiKey }),\n ).sendEvent(conversationId, message, {\n run: true,\n });\n\n return message;\n }\n\n static async createConversation(\n initialUserMsg?: string,\n conversationInstructions?: string,\n plugins?: PluginSpec[],\n metadata?: ConversationMetadata \| null,\n workingDirOverride?: string,\n workspaceMode?: WorkspaceMode,\n parentConversationId?: string,\n agentType?: \"default\" \| \"plan\",\n sandboxId?: string,\n // Launch from a saved AgentProfile (resolved server-side) instead of the\n // current encrypted agent_settings (#3727). Supported on both local and the\n // cloud app-server (OpenHands #15060): local threads it through the\n // encrypted-settings builder; cloud sends it as a flat request field.\n agentProfileId?: string,\n agentProfileKind?: AgentKind,\n ): Promise<AppConversationStartTask> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n // Cloud path mirrors OpenHands' frontend: build a flat\n // AppConversationStartRequest, POST /api/v1/app-conversations\n // (returns a WORKING task), and let the conversation route's\n // useTaskPolling drive it to READY. NO encrypted-settings\n // round-trip — the cloud backend holds secrets server-side.\n // When launching from a profile, send `agent_profile_id`; the backend\n // resolves it to agent_settings server-side.\n const request: AppConversationStartRequest = {\n initial_message: initialUserMsg\n ? {\n role: \"user\",\n content: [{ type: \"text\", text: initialUserMsg }],\n }\n : null,\n title: conversationInstructions ?? null,\n selected_repository: metadata?.selected_repository ?? null,\n selected_branch: metadata?.selected_branch ?? null,\n git_provider: metadata?.git_provider ?? null,\n plugins: plugins ?? null,\n parent_conversation_id: parentConversationId ?? null,\n agent_type: agentType,\n sandbox_id: sandboxId ?? null,\n agent_profile_id: agentProfileId ?? null,\n };\n return createCloudAppConversation(request);\n }\n\n const settings = await SettingsService.getSettings();\n const conversationId = uuidv4();\n // @spec WUP-001 — Send an absolute working_dir to the agent-server.\n // The default is `workspace/project/<hex>` (relative); without\n // resolving it here, `/api/file/upload` later prepends `/` and writes\n // to `/workspace/...` (read-only on macOS and fresh containers). When\n // the user picks an explicit workspace, `workingDirOverride` is\n // already absolute (it comes from `search_subdirs`).\n const workingDir = await resolveAbsoluteAgentServerPath(\n workingDirOverride ?? buildConversationWorkingDir(conversationId),\n );\n const resolvedWorkspaceMode =\n workspaceMode ?? (workingDirOverride ? \"local_repo\" : \"new_worktree\");\n\n // Use encrypted settings to avoid exposing secrets in the browser\n const payload = await buildStartConversationRequestWithEncryptedSettings({\n settings,\n query: initialUserMsg,\n conversationInstructions,\n plugins,\n conversationId,\n workingDir,\n worktree: resolvedWorkspaceMode === \"new_worktree\",\n agentProfileId,\n agentProfileKind,\n });\n\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).createConversation<DirectConversationInfo>(payload);\n const localBackend = getEffectiveLocalBackend();\n if (!localBackend) throw new NoBackendAvailableError();\n\n if (metadata?.selected_repository \|\| workingDirOverride) {\n // The agent-server runtime has no concept of selected repo/branch/\n // workspace, so persist the home-page selection client-side.\n // `toAppConversation` reads the repo/branch fields back to hydrate\n // the chat-page badges; `useHasAttachedSource` reads\n // `selected_workspace` to default the Files tab to Diff mode when\n // the user explicitly attached a local workspace.\n setStoredConversationMetadata(data.id, {\n selected_repository: metadata?.selected_repository ?? null,\n selected_branch: metadata?.selected_branch ?? null,\n git_provider: metadata?.git_provider ?? null,\n selected_workspace: workingDirOverride ?? null,\n workspace_mode: resolvedWorkspaceMode,\n });\n }\n\n return {\n id: data.id,\n created_by_user_id: null,\n status: \"READY\",\n detail: null,\n app_conversation_id: data.id,\n agent_server_url: localBackend.host,\n request: {\n initial_message: payload.initial_message as\n \| AppConversationStartRequest[\"initial_message\"]\n \| undefined,\n plugins: plugins ?? null,\n },\n created_at: data.created_at,\n updated_at: data.updated_at,\n };\n }\n\n static async getStartTask(\n taskId: string,\n ): Promise<AppConversationStartTask \| null> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return getCloudAppConversationStartTask(taskId);\n }\n // Local agent-server creates conversations synchronously — every\n // local \"task\" is already READY when createConversation returns, so\n // there's nothing to poll for.\n return null;\n }\n\n static async getVSCodeUrl(\n conversationId: string,\n conversationUrl: string \| null \| undefined,\n sessionApiKey?: string \| null,\n ): Promise<GetVSCodeUrlResponse> {\n // Local-only path. Cloud conversations read the VSCode URL straight\n // from the cloud-computed `sandbox.exposed_urls` (see\n // `useUnifiedVSCodeUrl` + `useCloudSandbox`); the runtime's own\n // `/api/vscode/url` only knows its internal `localhost:8001`, which\n // the user's browser can't reach.\n const workspaceDir =\n await this.resolveConversationWorkingDir(conversationId);\n // Local mode: the typescript-client targets the local agent-server\n // directly via the conversationUrl override.\n const vscodeUrl = await new VSCodeClient(\n getAgentServerClientOptions({\n conversationUrl,\n sessionApiKey,\n }),\n ).getUrl({\n baseUrl:\n typeof window !== \"undefined\" ? window.location.origin : undefined,\n workspaceDir,\n });\n\n return { vscode_url: vscodeUrl };\n }\n\n static async resolveConversationWorkingDir(\n conversationId: string,\n ): Promise<string> {\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return conversation?.workspace?.working_dir ?? getAgentServerWorkingDir();\n }\n\n static async batchGetAppConversations(\n ids: string[],\n ): Promise<(AppConversation \| null)[]> {\n if (ids.length === 0) return [];\n\n if (getActiveBackend().backend.kind === \"cloud\") {\n return batchGetCloudConversations(ids);\n }\n\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).getConversations<DirectConversationInfo>(ids);\n\n return requireDirectConversationItems(data).map((item) =>\n toAppConversation(item),\n );\n }\n\n static async updateConversationPublicFlag(\n conversationId: string,\n isPublic: boolean,\n ): Promise<AppConversation> {\n if (getActiveBackend().backend.kind !== \"cloud\") {\n throw new Error(\"Public sharing requires a cloud backend.\");\n }\n return updateCloudConversationPublicFlag(conversationId, isPublic);\n }\n\n static async updateConversationRepository(\n conversationId: string,\n repository: string \| null,\n branch?: string \| null,\n gitProvider?: string \| null,\n ): Promise<AppConversation> {\n if (repository) {\n const existing = getStoredConversationMetadata(conversationId);\n setStoredConversationMetadata(conversationId, {\n ...(existing ?? {}),\n selected_repository: repository,\n selected_branch: branch ?? null,\n git_provider: (gitProvider as Provider \| null \| undefined) ?? null,\n });\n } else {\n removeStoredConversationMetadata(conversationId);\n }\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return requireAppConversation(conversation, conversationId);\n }\n\n static async readConversationFile(\n conversationId: string,\n filePath?: string,\n ): Promise<string> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n // Cloud exposes a per-conversation file endpoint; the sandbox\n // working dir is fixed (`/workspace/project`), so PLAN.md lives at\n // a known absolute path. Mirrors OpenHands' readConversationFile.\n const path = requirePathInsideDirectory(\n filePath ?? \"/workspace/project/.agents_tmp/PLAN.md\",\n \"/workspace/project\",\n );\n return readCloudConversationFile(conversationId, path);\n }\n\n const workingDir = await this.resolveConversationWorkingDir(conversationId);\n const path = requirePathInsideDirectory(\n filePath ?? `${workingDir}/.agents_tmp/PLAN.md`,\n workingDir,\n );\n return new FileClient(getAgentServerClientOptions()).downloadTextFile(path);\n }\n\n static async downloadConversation(conversationId: string): Promise<Blob> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return downloadCloudConversation(conversationId);\n }\n\n return new FileClient(getAgentServerClientOptions()).downloadTrajectory(\n conversationId,\n );\n }\n\n static async getHooks(conversationId: string): Promise<GetHooksResponse> {\n if (!conversationId) {\n return emptyHooksResponse();\n }\n return emptyHooksResponse();\n }\n\n static async getRuntimeConversation(\n conversationId: string,\n conversationUrl: string \| null \| undefined,\n sessionApiKey?: string \| null,\n ): Promise<RuntimeConversationInfo> {\n const active = getActiveBackend().backend;\n\n type RawRuntime = DirectConversationInfo & {\n stats?: RuntimeConversationInfo[\"stats\"];\n };\n\n // Cloud mode: route through the cloud-proxy to the runtime sandbox at\n // the conversation's runtime URL — same pattern as getVSCodeUrl. Local\n // mode forwards conversationUrl so the host explicitly resolves to the\n // conversation's runtime instead of falling back to the active backend.\n const response =\n active.kind === \"cloud\" && conversationUrl\n ? await callCloudProxy<RawRuntime>({\n backend: active,\n method: \"GET\",\n hostOverride: buildHttpBaseUrl(conversationUrl),\n path: `/api/conversations/${conversationId}`,\n authMode: \"session-api-key\",\n sessionApiKey,\n })\n : await new ConversationClient(\n getAgentServerClientOptions({\n conversationUrl,\n sessionApiKey,\n }),\n ).getConversation<RawRuntime>(conversationId);\n const data = requireDirectConversationInfo(response);\n const stats = isRecord(response) ? response.stats : null;\n\n return {\n id: data.id,\n title: data.title?.trim()\n ? data.title\n : getDefaultConversationTitle(data.id),\n metrics: normalizeMetrics(data.metrics),\n created_at: data.created_at,\n updated_at: data.updated_at,\n status: toRuntimeStatus(data.execution_status),\n stats: isRecord(stats) ? stats : { usage_to_metrics: {} },\n };\n }\n\n static async searchConversations(\n limit: number = 20,\n pageId?: string,\n ): Promise<AppConversationPage> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return searchCloudConversations(limit, pageId);\n }\n\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).searchConversations({\n limit,\n page_id: pageId,\n sort_order: ConversationSortOrder.UPDATED_AT_DESC,\n });\n\n return toConversationPage(requireConversationSearchPage(data));\n }\n\n static async deleteConversation(conversationId: string): Promise<void> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n await deleteCloudConversation(conversationId);\n } else {\n await new ConversationClient(\n getAgentServerClientOptions(),\n ).deleteConversation(conversationId);\n }\n removeStoredConversationMetadata(conversationId);\n }\n\n static async updateConversationTitle(\n conversationId: string,\n title: string,\n ): Promise<AppConversation> {\n await new ConversationClient(\n getAgentServerClientOptions(),\n ).updateConversation(conversationId, {\n title,\n });\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return requireAppConversation(conversation, conversationId);\n }\n\n /*\n Forks a conversation, copying event history up to and including\n * `fromEventId`. Local agent-server only; needs agent-server >= 1.31.0 for\n * `from_event_id` (older backends copy the whole conversation).\n /\n static async forkConversation(\n sourceConversationId: string,\n fromEventId: string,\n title?: string,\n ): Promise<DirectConversationInfo> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n throw new Error(\n \"Branching a conversation isn't supported on the cloud backend yet.\",\n );\n }\n\n // `from_event_id` is accepted by `/fork` but not yet typed in\n // ForkConversationRequest (through client 1.32.0); the client forwards the\n // body verbatim, so cast to carry it. A title also suppresses the backend\n // auto-title, so the \"(branch)\" marker sticks.\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).forkConversation<DirectConversationInfo>(sourceConversationId, {\n from_event_id: fromEventId,\n ...(title ? { title } : {}),\n } as ForkConversationRequest & { from_event_id: string });\n\n // Carry over the source's client-side metadata (repo/branch/workspace/\n // profile/plugins) so the fork hydrates its chat-page badges the same way.\n const sourceMetadata = getStoredConversationMetadata(sourceConversationId);\n if (sourceMetadata) {\n setStoredConversationMetadata(data.id, sourceMetadata);\n }\n\n return data;\n }\n\n /\n Returns an event's `parent_id` (the fork point for branching before it),\n * or undefined at the root. Uses the single-event endpoint because the events\n * search API omits `parent_id`.\n /\n static async getEventParentId(\n conversationId: string,\n eventId: string,\n ): Promise<string \| undefined> {\n const event = (await new ConversationClient(\n getAgentServerClientOptions(),\n ).getEvent(conversationId, eventId)) as { parent_id?: string \| null };\n return event.parent_id ?? undefined;\n }\n\n /\n Switches the LLM profile for the running conversation when one is open\n * (POST /switch_profile — per-conversation swap, doesn't change the user's\n * default profile). When called without a conversationId (home page),\n * falls back to POST /activate so the next conversation created picks up\n * the chosen profile.\n \n The per-conversation endpoint accepts only the profile name, so the UI does\n * not need to fetch or forward profile secrets. That keeps switching working\n * even when the agent server has no OH_SECRET_KEY for encrypted secret export.\n \n Cloud backends route to the app-server's per-conversation\n * `/switch_profile`, which owns the profiles and resolves the swap\n * server-side (base_url/api_key fixups, usage_id derivation, then the\n * agent-server's switch_llm) — so the client only forwards the profile name,\n * mirroring {@link switchAcpModel}.\n /\n static async switchProfile(\n conversationId: string \| null,\n profileName: string,\n ): Promise<void> {\n const { backend } = getActiveBackend();\n\n if (backend.kind === \"cloud\") {\n // No conversation (home page): activate globally so the next\n // conversation starts with it. ProfilesService routes to the cloud\n // activate endpoint.\n if (!conversationId) {\n await ProfilesService.activateProfile(profileName);\n return;\n }\n await callCloudProxy({\n backend,\n method: \"POST\",\n path: `/api/v1/app-conversations/${conversationId}/switch_profile`,\n body: { profile_name: profileName },\n });\n return;\n }\n\n if (!conversationId) {\n await new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n profileName,\n );\n return;\n }\n\n const clientOptions = getAgentServerClientOptions();\n const conversationClient = new ConversationClient(clientOptions);\n const profile = await new ProfilesClient(clientOptions).getProfile(\n profileName,\n { exposeSecrets: \"encrypted\" },\n );\n const model =\n typeof profile.config.model === \"string\" ? profile.config.model : \"\";\n if (!model) throw new Error(`Profile '${profileName}' has no model.`);\n await assertSubscriptionAuthReady({ llm: profile.config });\n await conversationClient.switchLLM(conversationId, {\n ...profile.config,\n model,\n // Keep streaming on after a switch (parity with conversation start);\n // the profile config would otherwise default it to stream=False.\n stream: true,\n // Avoid stale first-write-wins entries in the backend LLM registry.\n usage_id: `profile:${profileName}:${uuidv4()}`,\n } as LLMConfig);\n }\n\n /\n Switches the model of a running ACP conversation in place (POST\n * /switch_acp_model — the ACP analog of {@link switchProfile}'s /switch_profile).\n * The agent-server calls the ACP wrapper's ``session/set_model`` on the live\n * session, preserving context. Mirrors {@link switchProfile}'s\n * local-backend-only guard and per-conversation ConversationClient call.\n \n Only valid once an ACP session exists (after the first message); the\n * agent-server returns 409 before then — the home/no-session default is\n * persisted via Settings instead (see ``use-switch-acp-model``).\n */\n static async switchAcpModel(\n conversationId: string,\n model: string,\n ): Promise<void> {\n const { backend } = getActiveBackend();\n if (backend.kind === \"cloud\") {\n await callCloudProxy({\n backend,\n method: \"POST\",\n path: `/api/v1/app-conversations/${conversationId}/switch_acp_model`,\n body: { model },\n });\n return;\n }\n\n await new ConversationClient(getAgentServerClientOptions()).switchAcpModel(\n conversationId,\n model,\n );\n }\n}\n\nexport default AgentServerConversationService;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuEA,IAAM,IAAiC,4BACjC,IACJ;AAGF,SAAS,IAAqC;AAC5C,QAAW,MAAM,EAAsC;;AAGzD,SAAS,EAAS,GAAkD;AAClE,QAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,EAAM;;AAG7E,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAAwB;AAC5C,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EACP,GACA,GACA,GACQ;CACR,IAAM,IAAQ,EAAK,MAAa,EAAK;AACrC,QAAO,OAAO,KAAU,YAAY,EAAM,MAAM,GAC5C,IACA;;AAGN,SAAS,EACP,GACgE;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,eAAe,EAAa,EAAM,cAAc;EAChD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,oBAAoB,EAAa,EAAM,mBAAmB;EAC1D,gBAAgB,EAAa,EAAM,eAAe;EAClD,gBAAgB,EAAa,EAAM,eAAe;EACnD,GAT4B;;AAY/B,SAAS,EAAiB,GAAwC;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,kBAAkB,EAAa,EAAM,iBAAiB;EACtD,qBAAqB,EAAa,EAAM,oBAAoB;EAC5D,yBAAyB,EAAoB,EAAM,wBAAwB;EAC5E,GAN4B;;AAS/B,SAAS,EAAe,GAAiD;AACvE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAAM,EAAS,EAAM,IAAI,GAC3B,EAAE,OAAO,EAAa,EAAM,IAAI,MAAM,EAAE,GACxC;AAWJ,QAAO;EACL,MAAM,EAAa,EAAM,KAAK;EAC9B,YAAY,EAAa,EAAM,WAAW;EAC1C,WAAW,EAAa,EAAM,UAAU;EACxC;EACD;;AAGH,SAAS,EACP,GACqC;AAErC,QADK,EAAS,EAAM,GACb,EAAE,aAAa,EAAa,EAAM,YAAY,EAAE,GAD1B;;AAc/B,SAAS,EAAc,GAA+C;AACpE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAA+B,EAAE;AACvC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,OAAO,KAAU,aACnB,EAAK,KAAO;AAGhB,QAAO;;AAGT,SAAS,EACP,GACkD;AAClD,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,EAAE,kBAAkB,GAAgB,gBAAa;AAIvD,QAHI,OAAO,KAAmB,YAAY,OAAO,KAAa,WACrD,OAEF;EAAE,kBAAkB;EAAgB;EAAU;;AAGvD,SAAS,EAAsB,GAA6B;AAC1D,KAAI,CAAC,EAAK,WAAW,IAAI,CAAE,QAAO;CAElC,IAAM,IAAqB,EAAE;AAC7B,MAAK,IAAM,KAAW,EAAK,MAAM,IAAI,CACnC,KAAI,KAAW,MAAY,IACzB,KAAI,MAAY,MAAM;AACpB,MAAI,CAAC,EAAS,OAAQ,QAAO;AAC7B,IAAS,KAAK;OAEd,GAAS,KAAK,EAAQ;AAK5B,QAAO,IAAI,EAAS,KAAK,IAAI;;AAG/B,SAAS,EAA2B,GAAc,GAA2B;CAC3E,IAAM,IAAiB,EAAsB,EAAK,EAC5C,IAAsB,EAAsB,EAAU;AAE5D,KACE,CAAC,KACD,CAAC,KACA,MAAmB,KAClB,CAAC,EAAe,WAAW,GAAG,EAAoB,GAAG,CAEvD,OAAU,MAAM,wDAAwD;AAG1E,QAAO;;AAGT,SAAS,EAA8B,GAAuC;AAC5E,KAAI,CAAC,EAAS,EAAK,IAAI,OAAO,EAAK,MAAO,YAAY,CAAC,EAAK,GAAG,MAAM,CACnE,OAAM,GAA6B;AAGrC,QAAO;EACL,IAAI,EAAK,GAAG,MAAM;EAClB,OAAO,EAAa,EAAK,MAAM;EAC/B,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,gBAAgB,EAAa,EAAK,eAAe;EACjD,SAAS,EAAiB,EAAK,QAAQ;EACvC,OAAO,EAAe,EAAK,MAAM;EACjC,WAAW,EAAmB,EAAK,UAAU;EAC7C,MAAM,EAAc,EAAK,KAAK;EAC9B,wBAAwB,EACtB,EAAK,uBACN;EAKD,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,oBAAoB,EAAa,EAAK,mBAAmB;EAC1D;;AAGH,SAAS,EACP,GAC0B;AAC1B,KAAI,CAAC,MAAM,QAAQ,EAAM,CACvB,OAAM,GAA6B;AAErC,QAAO,EAAM,IAAI,EAA8B;;AAGjD,SAAS,EAA8B,GAGrC;AACA,KAAI,MAAM,QAAQ,EAAK,CACrB,QAAO;EACL,OAAO,EAA+B,EAAK;EAC3C,cAAc;EACf;AAGH,KAAI,CAAC,EAAS,EAAK,CACjB,OAAM,GAA6B;AAGrC,QAAO;EACL,OAAO,EAA+B,EAAK,MAAM;EACjD,cACE,OAAO,EAAK,gBAAiB,WAAW,EAAK,eAAe;EAC/D;;AAGH,IAAM,IAAmB,IAAI,IAAY;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,GACP,GACmC;CACnC,IAAM,IAAa,KAAU;AAC7B,QACE,EAAiB,IAAI,EAAW,GAAG,IAAa;;AAIpD,SAAS,EACP,GACA,GACiB;AACjB,KAAI,CAAC,EACH,OAAU,MAAM,gBAAgB,EAAe,gBAAgB;AAEjE,QAAO;;AAGT,IAAM,KAAN,MAAqC;CACnC,aAAa,YACX,GACA,GACA,GAC8B;EAC9B,IAAM,IAAS,GAAkB,CAAC,SAC9B,IAAkB,GAAS,mBAAmB,MAC9C,IAAgB,GAAS,iBAAiB;AAE9C,MAAI,EAAO,SAAS,SAAS;AAC3B,OAAI,CAAC,KAAmB,CAAC,GAAe;IACtC,IAAM,CAAC,KAAgB,MAAM,EAA2B,CACtD,EACD,CAAC;AAEF,IADA,IAAkB,GAAc,kBAAkB,MAAM,IAAI,MAC5D,IAAgB,GAAc,iBAAiB,MAAM,IAAI;;AAG3D,OAAI,CAAC,KAAmB,CAAC,EACvB,OAAU,MACR,iFACD;AAaH,UAVA,MAAM,EAAe;IACnB,SAAS;IACT,QAAQ;IACR,cAAc,EAAiB,EAAgB;IAC/C,MAAM,sBAAsB,EAAe;IAC3C,MAAM;KAAE,GAAG;KAAS,KAAK;KAAM;IAC/B,UAAU;IACV;IACD,CAAC,EAEK;;AAST,SANA,MAAM,IAAI,EACR,EAA4B;GAAE;GAAiB;GAAe,CAAC,CAChE,CAAC,UAAU,GAAgB,GAAS,EACnC,KAAK,IACN,CAAC,EAEK;;CAGT,aAAa,mBACX,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GAKA,GACA,GACmC;AACnC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAyBtC,QAAO,EAA2B;GAhBhC,iBAAiB,IACb;IACE,MAAM;IACN,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAgB,CAAC;IAClD,GACD;GACJ,OAAO,KAA4B;GACnC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,SAAS,KAAW;GACpB,wBAAwB,KAAwB;GAChD,YAAY;GACZ,YAAY,KAAa;GACzB,kBAAkB,KAAkB;GAEJ,CAAQ;EAG5C,IAAM,IAAW,MAAM,EAAgB,aAAa,EAC9C,IAAiB,GAAQ,EAOzB,IAAa,MAAM,GACvB,KAAsB,EAA4B,EAAe,CAClE,EACK,IACJ,MAAkB,IAAqB,eAAe,iBAGlD,IAAU,MAAM,EAAmD;GACvE;GACA,OAAO;GACP;GACA;GACA;GACA;GACA,UAAU,MAA0B;GACpC;GACA;GACD,CAAC,EAEI,IAAO,MAAM,IAAI,EACrB,GAA6B,CAC9B,CAAC,mBAA2C,EAAQ,EAC/C,IAAe,GAA0B;AAC/C,MAAI,CAAC,EAAc,OAAM,IAAI,GAAyB;AAkBtD,UAhBI,GAAU,uBAAuB,MAOnC,EAA8B,EAAK,IAAI;GACrC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,oBAAoB,KAAsB;GAC1C,gBAAgB;GACjB,CAAC,EAGG;GACL,IAAI,EAAK;GACT,oBAAoB;GACpB,QAAQ;GACR,QAAQ;GACR,qBAAqB,EAAK;GAC1B,kBAAkB,EAAa;GAC/B,SAAS;IACP,iBAAiB,EAAQ;IAGzB,SAAS,KAAW;IACrB;GACD,YAAY,EAAK;GACjB,YAAY,EAAK;GAClB;;CAGH,aAAa,aACX,GAC0C;AAO1C,SANI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAiC,EAAO,GAK1C;;CAGT,aAAa,aACX,GACA,GACA,GAC+B;EAM/B,IAAM,IACJ,MAAM,KAAK,8BAA8B,EAAe;AAc1D,SAAO,EAAE,YAAY,MAXG,IAAI,EAC1B,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,OAAO;GACP,SACE,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS,KAAA;GAC3D;GACD,CAAC,EAE8B;;CAGlC,aAAa,8BACX,GACiB;EACjB,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,GAAc,WAAW,eAAe,GAA0B;;CAG3E,aAAa,yBACX,GACqC;AAWrC,SAVI,EAAI,WAAW,IAAU,EAAE,GAE3B,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA2B,EAAI,GAOjC,EAA+B,MAJnB,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,EAAI,CAEJ,CAAC,KAAK,MAC/C,EAAkB,EAAK,CACxB;;CAGH,aAAa,6BACX,GACA,GAC0B;AAC1B,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MAAM,2CAA2C;AAE7D,SAAO,EAAkC,GAAgB,EAAS;;CAGpE,aAAa,6BACX,GACA,GACA,GACA,GAC0B;AAC1B,EAAI,IAEF,EAA8B,GAAgB;GAC5C,GAFe,EAA8B,EAEzC,IAAY,EAAE;GAClB,qBAAqB;GACrB,iBAAiB,KAAU;GAC3B,cAAe,KAA+C;GAC/D,CAAC,GAEF,EAAiC,EAAe;EAElD,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAG7D,aAAa,qBACX,GACA,GACiB;AACjB,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAQtC,QAAO,EAA0B,GAJpB,EACX,KAAY,0CACZ,qBAE+C,CAAK;EAGxD,IAAM,IAAa,MAAM,KAAK,8BAA8B,EAAe,EACrE,IAAO,EACX,KAAY,GAAG,EAAW,uBAC1B,EACD;AACD,SAAO,IAAI,EAAW,GAA6B,CAAC,CAAC,iBAAiB,EAAK;;CAG7E,aAAa,qBAAqB,GAAuC;AAKvE,SAJI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA0B,EAAe,GAG3C,IAAI,EAAW,GAA6B,CAAC,CAAC,mBACnD,EACD;;CAGH,aAAa,SAAS,GAAmD;AAIvE,SAAO,GAAoB;;CAG7B,aAAa,uBACX,GACA,GACA,GACkC;EAClC,IAAM,IAAS,GAAkB,CAAC,SAU5B,IACJ,EAAO,SAAS,WAAW,IACvB,MAAM,EAA2B;GAC/B,SAAS;GACT,QAAQ;GACR,cAAc,EAAiB,EAAgB;GAC/C,MAAM,sBAAsB;GAC5B,UAAU;GACV;GACD,CAAC,GACF,MAAM,IAAI,EACR,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,gBAA4B,EAAe,EAC7C,IAAO,EAA8B,EAAS,EAC9C,IAAQ,EAAS,EAAS,GAAG,EAAS,QAAQ;AAEpD,SAAO;GACL,IAAI,EAAK;GACT,OAAO,EAAK,OAAO,MAAM,GACrB,EAAK,QACL,EAA4B,EAAK,GAAG;GACxC,SAAS,EAAiB,EAAK,QAAQ;GACvC,YAAY,EAAK;GACjB,YAAY,EAAK;GACjB,QAAQ,GAAgB,EAAK,iBAAiB;GAC9C,OAAO,EAAS,EAAM,GAAG,IAAQ,EAAE,kBAAkB,EAAE,EAAE;GAC1D;;CAGH,aAAa,oBACX,IAAgB,IAChB,GAC8B;AAa9B,SAZI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAyB,GAAO,EAAO,GAWzC,EAAmB,EAA8B,MARrC,IAAI,EACrB,GAA6B,CAC9B,CAAC,oBAAoB;GACpB;GACA,SAAS;GACT,YAAY,EAAsB;GACnC,CAAC,CAE2D,CAAC;;CAGhE,aAAa,mBAAmB,GAAuC;AAQrE,EAPI,GAAkB,CAAC,QAAQ,SAAS,UACtC,MAAM,EAAwB,EAAe,GAE7C,MAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,EAAe,EAEtC,EAAiC,EAAe;;CAGlD,aAAa,wBACX,GACA,GAC0B;AAC1B,QAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,GAAgB,EACnC,UACD,CAAC;EACF,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAQ7D,aAAa,iBACX,GACA,GACA,GACiC;AACjC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,qEACD;EAOH,IAAM,IAAO,MAAM,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,GAAsB;GAC/D,eAAe;GACf,GAAI,IAAQ,EAAE,UAAO,GAAG,EAAE;GAC3B,CAAwD,EAInD,IAAiB,EAA8B,EAAqB;AAK1E,SAJI,KACF,EAA8B,EAAK,IAAI,EAAe,EAGjD;;CAQT,aAAa,iBACX,GACA,GAC6B;AAI7B,UAAO,MAHc,IAAI,EACvB,GAA6B,CAC9B,CAAC,SAAS,GAAgB,EAAQ,EACtB,aAAa,KAAA;;CAoB5B,aAAa,cACX,GACA,GACe;EACf,IAAM,EAAE,eAAY,GAAkB;AAEtC,MAAI,EAAQ,SAAS,SAAS;AAI5B,OAAI,CAAC,GAAgB;AACnB,UAAM,EAAgB,gBAAgB,EAAY;AAClD;;AAEF,SAAM,EAAe;IACnB;IACA,QAAQ;IACR,MAAM,6BAA6B,EAAe;IAClD,MAAM,EAAE,cAAc,GAAa;IACpC,CAAC;AACF;;AAGF,MAAI,CAAC,GAAgB;AACnB,SAAM,IAAI,EAAe,GAA6B,CAAC,CAAC,gBACtD,EACD;AACD;;EAGF,IAAM,IAAgB,GAA6B,EAC7C,IAAqB,IAAI,EAAmB,EAAc,EAC1D,IAAU,MAAM,IAAI,EAAe,EAAc,CAAC,WACtD,GACA,EAAE,eAAe,aAAa,CAC/B,EACK,IACJ,OAAO,EAAQ,OAAO,SAAU,WAAW,EAAQ,OAAO,QAAQ;AACpE,MAAI,CAAC,EAAO,OAAU,MAAM,YAAY,EAAY,iBAAiB;AAErE,EADA,MAAM,EAA4B,EAAE,KAAK,EAAQ,QAAQ,CAAC,EAC1D,MAAM,EAAmB,UAAU,GAAgB;GACjD,GAAG,EAAQ;GACX;GAGA,QAAQ;GAER,UAAU,WAAW,EAAY,GAAG,GAAQ;GAC7C,CAAc;;CAcjB,aAAa,eACX,GACA,GACe;EACf,IAAM,EAAE,eAAY,GAAkB;AACtC,MAAI,EAAQ,SAAS,SAAS;AAC5B,SAAM,EAAe;IACnB;IACA,QAAQ;IACR,MAAM,6BAA6B,EAAe;IAClD,MAAM,EAAE,UAAO;IAChB,CAAC;AACF;;AAGF,QAAM,IAAI,EAAmB,GAA6B,CAAC,CAAC,eAC1D,GACA,EACD"}
1	+ {"version":3,"file":"agent-server-conversation-service.api.js","names":[],"sources":["../../../src/api/conversation-service/agent-server-conversation-service.api.ts"],"sourcesContent":["import {\n ConversationSortOrder,\n type ForkConversationRequest,\n type LLMConfig,\n} from \"@openhands/typescript-client\";\nimport {\n ConversationClient,\n FileClient,\n ProfilesClient,\n VSCodeClient,\n} from \"@openhands/typescript-client/clients\";\nimport { v4 as uuidv4 } from \"uuid\";\nimport { AgentKind, Provider } from \"#/types/settings\";\nimport type { ConversationRuntimeContext } from \"#/api/conversation-file-upload.api\";\nimport { buildHttpBaseUrl } from \"#/utils/websocket-url\";\nimport {\n buildConversationWorkingDir,\n getAgentServerWorkingDir,\n} from \"../agent-server-config\";\nimport { resolveAbsoluteAgentServerPath } from \"../agent-server-home\";\nimport {\n getActiveBackend,\n getEffectiveLocalBackend,\n} from \"../backend-registry/active-store\";\nimport { callCloudProxy } from \"../cloud/proxy\";\nimport ProfilesService from \"../profiles-service/profiles-service.api\";\nimport {\n batchGetCloudConversations,\n createCloudAppConversation,\n deleteCloudConversation,\n downloadCloudConversation,\n getCloudAppConversationStartTask,\n readCloudConversationFile,\n searchCloudConversations,\n updateCloudConversationPublicFlag,\n} from \"../cloud/conversation-service.api\";\nimport {\n DirectConversationInfo,\n assertSubscriptionAuthReady,\n buildStartConversationRequestWithEncryptedSettings,\n emptyHooksResponse,\n getDefaultConversationTitle,\n toAppConversation,\n toConversationPage,\n} from \"../agent-server-adapter\";\nimport { GetVSCodeUrlResponse } from \"../open-hands.types\";\nimport {\n getAgentServerClientOptions,\n NoBackendAvailableError,\n} from \"../agent-server-client-options\";\nimport SettingsService from \"../settings-service/settings-service.api\";\nimport {\n ConversationMetadata,\n getStoredConversationMetadata,\n removeStoredConversationMetadata,\n setStoredConversationMetadata,\n type WorkspaceMode,\n} from \"../conversation-metadata-store\";\nimport { resolveTitleLlmProfile } from \"#/utils/title-llm-profile\";\nimport type {\n GetHooksResponse,\n PluginSpec,\n AppConversation,\n AppConversationPage,\n AppConversationStartRequest,\n AppConversationStartTask,\n MetricsSnapshot,\n RuntimeConversationInfo,\n SendMessageRequest,\n SendMessageResponse,\n} from \"./agent-server-conversation-service.types\";\n\nconst DEFAULT_CONVERSATION_TIMESTAMP = \"1970-01-01T00:00:00.000Z\";\n// Creating the first conversation right after a cold agent-server boot (fresh\n// machine or the packaged desktop app, where uvx may still be warming caches)\n// can exceed the client's 60s default timeout.\nconst CREATE_CONVERSATION_TIMEOUT_MS = 5 * 60 * 1000;\nconst INVALID_CONVERSATION_RESPONSE_MESSAGE =\n \"Unable to load conversations because the selected agent server returned \" +\n \"data this UI does not understand. Check the backend URL/session key and \" +\n \"update the agent server if needed.\";\nfunction invalidConversationResponse(): Error {\n return new Error(INVALID_CONVERSATION_RESPONSE_MESSAGE);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction numberOrNull(value: unknown): number \| null {\n return typeof value === \"number\" ? value : null;\n}\n\nfunction numberOrZero(value: unknown): number {\n return typeof value === \"number\" ? value : 0;\n}\n\nfunction stringOrNull(value: unknown): string \| null {\n return typeof value === \"string\" ? value : null;\n}\n\nfunction readTimestamp(\n item: Record<string, unknown>,\n snakeKey: \"created_at\" \| \"updated_at\",\n camelKey: \"createdAt\" \| \"updatedAt\",\n): string {\n const value = item[snakeKey] ?? item[camelKey];\n return typeof value === \"string\" && value.trim()\n ? value\n : DEFAULT_CONVERSATION_TIMESTAMP;\n}\n\nfunction normalizeTokenUsage(\n value: unknown,\n): NonNullable<MetricsSnapshot[\"accumulated_token_usage\"]> \| null {\n if (!isRecord(value)) return null;\n\n return {\n prompt_tokens: numberOrZero(value.prompt_tokens),\n completion_tokens: numberOrZero(value.completion_tokens),\n cache_read_tokens: numberOrZero(value.cache_read_tokens),\n cache_write_tokens: numberOrZero(value.cache_write_tokens),\n context_window: numberOrZero(value.context_window),\n per_turn_token: numberOrZero(value.per_turn_token),\n };\n}\n\nfunction normalizeMetrics(value: unknown): MetricsSnapshot \| null {\n if (!isRecord(value)) return null;\n\n return {\n accumulated_cost: numberOrNull(value.accumulated_cost),\n max_budget_per_task: numberOrNull(value.max_budget_per_task),\n accumulated_token_usage: normalizeTokenUsage(value.accumulated_token_usage),\n };\n}\n\nfunction normalizeAgent(value: unknown): DirectConversationInfo[\"agent\"] {\n if (!isRecord(value)) return null;\n const llm = isRecord(value.llm)\n ? { model: stringOrNull(value.llm.model) }\n : null;\n // ``kind`` is the SDK's pydantic discriminator (``\"Agent\"`` vs ``\"ACPAgent\"``);\n // ``toAppConversation`` reads it to derive ``agent_kind``. ``acp_server`` is\n // the ACP provider identity (``ACPAgent.acp_server``, SDK #3692) — required so\n // the adapter can source the chip + in-conversation model list from the agent\n // when the ``acpserver`` tag is absent (a profile launch doesn't stamp it,\n // #1571). ``acp_model`` is the Canvas-configured model — preserved so the chip\n // can fall back to it when the SDK runtime model fields aren't populated.\n // Preserving these makes the wire path agree with the unit-test path that\n // builds ``DirectConversationInfo`` directly\n // (e.g. ``__tests__/api/agent-server-adapter.test.ts``).\n return {\n kind: stringOrNull(value.kind),\n acp_server: stringOrNull(value.acp_server),\n acp_model: stringOrNull(value.acp_model),\n llm,\n };\n}\n\nfunction normalizeWorkspace(\n value: unknown,\n): DirectConversationInfo[\"workspace\"] {\n if (!isRecord(value)) return null;\n return { working_dir: stringOrNull(value.working_dir) };\n}\n\n/*\n Accept the agent-server's ``tags: Record[str, str]`` payload defensively:\n * the wire shape is guaranteed by the server-side validator (keys\n * ``^[a-z0-9]+$``, string values), but a non-conforming response (older\n * server, raw API write, future schema drift) must never crash the parser\n * — Canvas only consumes ``acpserver`` and falls back to a generic chip\n * for anything it doesn't recognize. Drop entries whose value isn't a\n * plain string; return ``null`` when the wire field is absent or not an\n * object so consumers can use ``info.tags?.[KEY] ?? null`` uniformly.\n /\nfunction normalizeTags(value: unknown): Record<string, string> \| null {\n if (!isRecord(value)) return null;\n const tags: Record<string, string> = {};\n for (const [key, entry] of Object.entries(value)) {\n if (typeof entry === \"string\") {\n tags[key] = entry;\n }\n }\n return tags;\n}\n\nfunction normalizeLaunchedAgentProfile(\n value: unknown,\n): DirectConversationInfo[\"launched_agent_profile\"] {\n if (!isRecord(value)) return null;\n const { agent_profile_id: agentProfileId, revision } = value;\n if (typeof agentProfileId !== \"string\" \|\| typeof revision !== \"number\") {\n return null;\n }\n return { agent_profile_id: agentProfileId, revision };\n}\n\nfunction normalizeAbsolutePath(path: string): string \| null {\n if (!path.startsWith(\"/\")) return null;\n\n const segments: string[] = [];\n for (const segment of path.split(\"/\")) {\n if (segment && segment !== \".\") {\n if (segment === \"..\") {\n if (!segments.length) return null;\n segments.pop();\n } else {\n segments.push(segment);\n }\n }\n }\n\n return `/${segments.join(\"/\")}`;\n}\n\nfunction requirePathInsideDirectory(path: string, directory: string): string {\n const normalizedPath = normalizeAbsolutePath(path);\n const normalizedDirectory = normalizeAbsolutePath(directory);\n\n if (\n !normalizedPath \|\|\n !normalizedDirectory \|\|\n (normalizedPath !== normalizedDirectory &&\n !normalizedPath.startsWith(`${normalizedDirectory}/`))\n ) {\n throw new Error(\"Conversation file path must stay inside the workspace\");\n }\n\n return normalizedPath;\n}\n\nfunction requireDirectConversationInfo(item: unknown): DirectConversationInfo {\n if (!isRecord(item) \|\| typeof item.id !== \"string\" \|\| !item.id.trim()) {\n throw invalidConversationResponse();\n }\n\n return {\n id: item.id.trim(),\n title: stringOrNull(item.title),\n created_at: readTimestamp(item, \"created_at\", \"createdAt\"),\n updated_at: readTimestamp(item, \"updated_at\", \"updatedAt\"),\n execution_status: stringOrNull(item.execution_status),\n sandbox_status: stringOrNull(item.sandbox_status),\n metrics: normalizeMetrics(item.metrics),\n agent: normalizeAgent(item.agent),\n workspace: normalizeWorkspace(item.workspace),\n tags: normalizeTags(item.tags),\n launched_agent_profile: normalizeLaunchedAgentProfile(\n item.launched_agent_profile,\n ),\n // SDK-runtime ACP model fields (populated when the agent-server supports\n // ``ConversationInfo.current_model_``). Consumed by the conversation\n // adapter to drive the per-card chip's model text. Older agent-servers\n // omit these — adapter handles ``undefined`` / ``null`` gracefully.\n current_model_id: stringOrNull(item.current_model_id),\n current_model_name: stringOrNull(item.current_model_name),\n };\n}\n\nfunction requireDirectConversationItems(\n items: unknown,\n): DirectConversationInfo[] {\n if (!Array.isArray(items)) {\n throw invalidConversationResponse();\n }\n return items.map(requireDirectConversationInfo);\n}\n\nfunction requireConversationSearchPage(page: unknown): {\n items: DirectConversationInfo[];\n next_page_id: string \| null;\n} {\n if (Array.isArray(page)) {\n return {\n items: requireDirectConversationItems(page),\n next_page_id: null,\n };\n }\n\n if (!isRecord(page)) {\n throw invalidConversationResponse();\n }\n\n return {\n items: requireDirectConversationItems(page.items),\n next_page_id:\n typeof page.next_page_id === \"string\" ? page.next_page_id : null,\n };\n}\n\nconst RUNTIME_STATUSES = new Set<string>([\n \"idle\",\n \"running\",\n \"paused\",\n \"waiting_for_confirmation\",\n \"finished\",\n \"error\",\n \"stuck\",\n]);\n\nfunction toRuntimeStatus(\n status: DirectConversationInfo[\"execution_status\"],\n): RuntimeConversationInfo[\"status\"] {\n const nextStatus = status ?? \"idle\";\n return (\n RUNTIME_STATUSES.has(nextStatus) ? nextStatus : \"idle\"\n ) as RuntimeConversationInfo[\"status\"];\n}\n\nfunction requireAppConversation(\n conversation: AppConversation \| null \| undefined,\n conversationId: string,\n): AppConversation {\n if (!conversation) {\n throw new Error(`Conversation ${conversationId} was not found`);\n }\n return conversation;\n}\n\nclass AgentServerConversationService {\n static async sendMessage(\n conversationId: string,\n message: SendMessageRequest,\n runtime?: ConversationRuntimeContext \| null,\n ): Promise<SendMessageResponse> {\n const active = getActiveBackend().backend;\n let conversationUrl = runtime?.conversationUrl ?? null;\n let sessionApiKey = runtime?.sessionApiKey ?? null;\n\n if (active.kind === \"cloud\") {\n if (!conversationUrl \|\| !sessionApiKey) {\n const [conversation] = await batchGetCloudConversations([\n conversationId,\n ]);\n conversationUrl = conversation?.conversation_url?.trim() ?? null;\n sessionApiKey = conversation?.session_api_key?.trim() ?? null;\n }\n\n if (!conversationUrl \|\| !sessionApiKey) {\n throw new Error(\n \"Conversation sandbox is still starting. Wait for it to finish, then try again.\",\n );\n }\n\n await callCloudProxy({\n backend: active,\n method: \"POST\",\n hostOverride: buildHttpBaseUrl(conversationUrl),\n path: `/api/conversations/${conversationId}/events`,\n body: { ...message, run: true },\n authMode: \"session-api-key\",\n sessionApiKey,\n });\n\n return message;\n }\n\n await new ConversationClient(\n getAgentServerClientOptions({ conversationUrl, sessionApiKey }),\n ).sendEvent(conversationId, message, {\n run: true,\n });\n\n return message;\n }\n\n static async createConversation(\n initialUserMsg?: string,\n conversationInstructions?: string,\n plugins?: PluginSpec[],\n metadata?: ConversationMetadata \| null,\n workingDirOverride?: string,\n workspaceMode?: WorkspaceMode,\n parentConversationId?: string,\n agentType?: \"default\" \| \"plan\",\n sandboxId?: string,\n // Launch from a saved AgentProfile (resolved server-side) instead of the\n // current encrypted agent_settings (#3727). Supported on both local and the\n // cloud app-server (OpenHands #15060): local threads it through the\n // encrypted-settings builder; cloud sends it as a flat request field.\n agentProfileId?: string,\n agentProfileKind?: AgentKind,\n ): Promise<AppConversationStartTask> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n // Cloud path mirrors OpenHands' frontend: build a flat\n // AppConversationStartRequest, POST /api/v1/app-conversations\n // (returns a WORKING task), and let the conversation route's\n // useTaskPolling drive it to READY. NO encrypted-settings\n // round-trip — the cloud backend holds secrets server-side.\n // When launching from a profile, send `agent_profile_id`; the backend\n // resolves it to agent_settings server-side.\n const request: AppConversationStartRequest = {\n initial_message: initialUserMsg\n ? {\n role: \"user\",\n content: [{ type: \"text\", text: initialUserMsg }],\n }\n : null,\n title: conversationInstructions ?? null,\n selected_repository: metadata?.selected_repository ?? null,\n selected_branch: metadata?.selected_branch ?? null,\n git_provider: metadata?.git_provider ?? null,\n plugins: plugins ?? null,\n parent_conversation_id: parentConversationId ?? null,\n agent_type: agentType,\n sandbox_id: sandboxId ?? null,\n agent_profile_id: agentProfileId ?? null,\n };\n return createCloudAppConversation(request);\n }\n\n const [settings, profiles] = await Promise.all([\n SettingsService.getSettings(),\n ProfilesService.listProfiles().catch(() => undefined),\n ]);\n const titleLlmProfile = resolveTitleLlmProfile(\n settings.title_llm_profile,\n profiles,\n );\n const conversationId = uuidv4();\n // @spec WUP-001 — Send an absolute working_dir to the agent-server.\n // The default is `workspace/project/<hex>` (relative); without\n // resolving it here, `/api/file/upload` later prepends `/` and writes\n // to `/workspace/...` (read-only on macOS and fresh containers). When\n // the user picks an explicit workspace, `workingDirOverride` is\n // already absolute (it comes from `search_subdirs`).\n const workingDir = await resolveAbsoluteAgentServerPath(\n workingDirOverride ?? buildConversationWorkingDir(conversationId),\n );\n const resolvedWorkspaceMode =\n workspaceMode ?? (workingDirOverride ? \"local_repo\" : \"new_worktree\");\n\n // Use encrypted settings to avoid exposing secrets in the browser\n const payload = await buildStartConversationRequestWithEncryptedSettings({\n settings,\n query: initialUserMsg,\n conversationInstructions,\n plugins,\n conversationId,\n workingDir,\n worktree: resolvedWorkspaceMode === \"new_worktree\",\n agentProfileId,\n agentProfileKind,\n titleLlmProfile,\n });\n\n const data = await new ConversationClient(\n getAgentServerClientOptions({ timeout: CREATE_CONVERSATION_TIMEOUT_MS }),\n ).createConversation<DirectConversationInfo>(payload);\n const localBackend = getEffectiveLocalBackend();\n if (!localBackend) throw new NoBackendAvailableError();\n\n if (metadata?.selected_repository \|\| workingDirOverride) {\n // The agent-server runtime has no concept of selected repo/branch/\n // workspace, so persist the home-page selection client-side.\n // `toAppConversation` reads the repo/branch fields back to hydrate\n // the chat-page badges; `useHasAttachedSource` reads\n // `selected_workspace` to default the Files tab to Diff mode when\n // the user explicitly attached a local workspace.\n setStoredConversationMetadata(data.id, {\n selected_repository: metadata?.selected_repository ?? null,\n selected_branch: metadata?.selected_branch ?? null,\n git_provider: metadata?.git_provider ?? null,\n selected_workspace: workingDirOverride ?? null,\n workspace_mode: resolvedWorkspaceMode,\n });\n }\n\n return {\n id: data.id,\n created_by_user_id: null,\n status: \"READY\",\n detail: null,\n app_conversation_id: data.id,\n agent_server_url: localBackend.host,\n request: {\n initial_message: payload.initial_message as\n \| AppConversationStartRequest[\"initial_message\"]\n \| undefined,\n plugins: plugins ?? null,\n },\n created_at: data.created_at,\n updated_at: data.updated_at,\n };\n }\n\n static async getStartTask(\n taskId: string,\n ): Promise<AppConversationStartTask \| null> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return getCloudAppConversationStartTask(taskId);\n }\n // Local agent-server creates conversations synchronously — every\n // local \"task\" is already READY when createConversation returns, so\n // there's nothing to poll for.\n return null;\n }\n\n static async getVSCodeUrl(\n conversationId: string,\n conversationUrl: string \| null \| undefined,\n sessionApiKey?: string \| null,\n ): Promise<GetVSCodeUrlResponse> {\n // Local-only path. Cloud conversations read the VSCode URL straight\n // from the cloud-computed `sandbox.exposed_urls` (see\n // `useUnifiedVSCodeUrl` + `useCloudSandbox`); the runtime's own\n // `/api/vscode/url` only knows its internal `localhost:8001`, which\n // the user's browser can't reach.\n const workspaceDir =\n await this.resolveConversationWorkingDir(conversationId);\n // Local mode: the typescript-client targets the local agent-server\n // directly via the conversationUrl override.\n const vscodeUrl = await new VSCodeClient(\n getAgentServerClientOptions({\n conversationUrl,\n sessionApiKey,\n }),\n ).getUrl({\n baseUrl:\n typeof window !== \"undefined\" ? window.location.origin : undefined,\n workspaceDir,\n });\n\n return { vscode_url: vscodeUrl };\n }\n\n static async resolveConversationWorkingDir(\n conversationId: string,\n ): Promise<string> {\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return conversation?.workspace?.working_dir ?? getAgentServerWorkingDir();\n }\n\n static async batchGetAppConversations(\n ids: string[],\n ): Promise<(AppConversation \| null)[]> {\n if (ids.length === 0) return [];\n\n if (getActiveBackend().backend.kind === \"cloud\") {\n return batchGetCloudConversations(ids);\n }\n\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).getConversations<DirectConversationInfo>(ids);\n\n return requireDirectConversationItems(data).map((item) =>\n toAppConversation(item),\n );\n }\n\n static async updateConversationPublicFlag(\n conversationId: string,\n isPublic: boolean,\n ): Promise<AppConversation> {\n if (getActiveBackend().backend.kind !== \"cloud\") {\n throw new Error(\"Public sharing requires a cloud backend.\");\n }\n return updateCloudConversationPublicFlag(conversationId, isPublic);\n }\n\n static async updateConversationRepository(\n conversationId: string,\n repository: string \| null,\n branch?: string \| null,\n gitProvider?: string \| null,\n ): Promise<AppConversation> {\n if (repository) {\n const existing = getStoredConversationMetadata(conversationId);\n setStoredConversationMetadata(conversationId, {\n ...(existing ?? {}),\n selected_repository: repository,\n selected_branch: branch ?? null,\n git_provider: (gitProvider as Provider \| null \| undefined) ?? null,\n });\n } else {\n removeStoredConversationMetadata(conversationId);\n }\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return requireAppConversation(conversation, conversationId);\n }\n\n static async readConversationFile(\n conversationId: string,\n filePath?: string,\n ): Promise<string> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n // Cloud exposes a per-conversation file endpoint; the sandbox\n // working dir is fixed (`/workspace/project`), so PLAN.md lives at\n // a known absolute path. Mirrors OpenHands' readConversationFile.\n const path = requirePathInsideDirectory(\n filePath ?? \"/workspace/project/.agents_tmp/PLAN.md\",\n \"/workspace/project\",\n );\n return readCloudConversationFile(conversationId, path);\n }\n\n const workingDir = await this.resolveConversationWorkingDir(conversationId);\n const path = requirePathInsideDirectory(\n filePath ?? `${workingDir}/.agents_tmp/PLAN.md`,\n workingDir,\n );\n return new FileClient(getAgentServerClientOptions()).downloadTextFile(path);\n }\n\n static async downloadConversation(conversationId: string): Promise<Blob> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return downloadCloudConversation(conversationId);\n }\n\n return new FileClient(getAgentServerClientOptions()).downloadTrajectory(\n conversationId,\n );\n }\n\n static async getHooks(conversationId: string): Promise<GetHooksResponse> {\n if (!conversationId) {\n return emptyHooksResponse();\n }\n return emptyHooksResponse();\n }\n\n static async getRuntimeConversation(\n conversationId: string,\n conversationUrl: string \| null \| undefined,\n sessionApiKey?: string \| null,\n ): Promise<RuntimeConversationInfo> {\n const active = getActiveBackend().backend;\n\n type RawRuntime = DirectConversationInfo & {\n stats?: RuntimeConversationInfo[\"stats\"];\n };\n\n // Cloud mode: route through the cloud-proxy to the runtime sandbox at\n // the conversation's runtime URL — same pattern as getVSCodeUrl. Local\n // mode forwards conversationUrl so the host explicitly resolves to the\n // conversation's runtime instead of falling back to the active backend.\n const response =\n active.kind === \"cloud\" && conversationUrl\n ? await callCloudProxy<RawRuntime>({\n backend: active,\n method: \"GET\",\n hostOverride: buildHttpBaseUrl(conversationUrl),\n path: `/api/conversations/${conversationId}`,\n authMode: \"session-api-key\",\n sessionApiKey,\n })\n : await new ConversationClient(\n getAgentServerClientOptions({\n conversationUrl,\n sessionApiKey,\n }),\n ).getConversation<RawRuntime>(conversationId);\n const data = requireDirectConversationInfo(response);\n const stats = isRecord(response) ? response.stats : null;\n\n return {\n id: data.id,\n title: data.title?.trim()\n ? data.title\n : getDefaultConversationTitle(data.id),\n metrics: normalizeMetrics(data.metrics),\n created_at: data.created_at,\n updated_at: data.updated_at,\n status: toRuntimeStatus(data.execution_status),\n stats: isRecord(stats) ? stats : { usage_to_metrics: {} },\n };\n }\n\n static async searchConversations(\n limit: number = 20,\n pageId?: string,\n ): Promise<AppConversationPage> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n return searchCloudConversations(limit, pageId);\n }\n\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).searchConversations({\n limit,\n page_id: pageId,\n sort_order: ConversationSortOrder.UPDATED_AT_DESC,\n });\n\n return toConversationPage(requireConversationSearchPage(data));\n }\n\n static async deleteConversation(conversationId: string): Promise<void> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n await deleteCloudConversation(conversationId);\n } else {\n await new ConversationClient(\n getAgentServerClientOptions(),\n ).deleteConversation(conversationId);\n }\n removeStoredConversationMetadata(conversationId);\n }\n\n static async updateConversationTitle(\n conversationId: string,\n title: string,\n ): Promise<AppConversation> {\n await new ConversationClient(\n getAgentServerClientOptions(),\n ).updateConversation(conversationId, {\n title,\n });\n const [conversation] = await this.batchGetAppConversations([\n conversationId,\n ]);\n return requireAppConversation(conversation, conversationId);\n }\n\n /*\n Forks a conversation, copying event history up to and including\n * `fromEventId`. Local agent-server only; needs agent-server >= 1.31.0 for\n * `from_event_id` (older backends copy the whole conversation).\n /\n static async forkConversation(\n sourceConversationId: string,\n fromEventId: string,\n title?: string,\n ): Promise<DirectConversationInfo> {\n if (getActiveBackend().backend.kind === \"cloud\") {\n throw new Error(\n \"Branching a conversation isn't supported on the cloud backend yet.\",\n );\n }\n\n // `from_event_id` is accepted by `/fork` but not yet typed in\n // ForkConversationRequest (through client 1.32.0); the client forwards the\n // body verbatim, so cast to carry it. A title also suppresses the backend\n // auto-title, so the \"(branch)\" marker sticks.\n const data = await new ConversationClient(\n getAgentServerClientOptions(),\n ).forkConversation<DirectConversationInfo>(sourceConversationId, {\n from_event_id: fromEventId,\n ...(title ? { title } : {}),\n } as ForkConversationRequest & { from_event_id: string });\n\n // Carry over the source's client-side metadata (repo/branch/workspace/\n // profile/plugins) so the fork hydrates its chat-page badges the same way.\n const sourceMetadata = getStoredConversationMetadata(sourceConversationId);\n if (sourceMetadata) {\n setStoredConversationMetadata(data.id, sourceMetadata);\n }\n\n return data;\n }\n\n /\n Returns an event's `parent_id` (the fork point for branching before it),\n * or undefined at the root. Uses the single-event endpoint because the events\n * search API omits `parent_id`.\n /\n static async getEventParentId(\n conversationId: string,\n eventId: string,\n ): Promise<string \| undefined> {\n const event = (await new ConversationClient(\n getAgentServerClientOptions(),\n ).getEvent(conversationId, eventId)) as { parent_id?: string \| null };\n return event.parent_id ?? undefined;\n }\n\n /\n Switches the LLM profile for the running conversation when one is open\n * (POST /switch_profile — per-conversation swap, doesn't change the user's\n * default profile). When called without a conversationId (home page),\n * falls back to POST /activate so the next conversation created picks up\n * the chosen profile.\n \n The per-conversation endpoint accepts only the profile name, so the UI does\n * not need to fetch or forward profile secrets. That keeps switching working\n * even when the agent server has no OH_SECRET_KEY for encrypted secret export.\n \n Cloud backends route to the app-server's per-conversation\n * `/switch_profile`, which owns the profiles and resolves the swap\n * server-side (base_url/api_key fixups, usage_id derivation, then the\n * agent-server's switch_llm) — so the client only forwards the profile name,\n * mirroring {@link switchAcpModel}.\n /\n static async switchProfile(\n conversationId: string \| null,\n profileName: string,\n ): Promise<void> {\n const { backend } = getActiveBackend();\n\n if (backend.kind === \"cloud\") {\n // No conversation (home page): activate globally so the next\n // conversation starts with it. ProfilesService routes to the cloud\n // activate endpoint.\n if (!conversationId) {\n await ProfilesService.activateProfile(profileName);\n return;\n }\n await callCloudProxy({\n backend,\n method: \"POST\",\n path: `/api/v1/app-conversations/${conversationId}/switch_profile`,\n body: { profile_name: profileName },\n });\n return;\n }\n\n if (!conversationId) {\n await new ProfilesClient(getAgentServerClientOptions()).activateProfile(\n profileName,\n );\n return;\n }\n\n const clientOptions = getAgentServerClientOptions();\n const conversationClient = new ConversationClient(clientOptions);\n const profile = await new ProfilesClient(clientOptions).getProfile(\n profileName,\n { exposeSecrets: \"encrypted\" },\n );\n const model =\n typeof profile.config.model === \"string\" ? profile.config.model : \"\";\n if (!model) throw new Error(`Profile '${profileName}' has no model.`);\n await assertSubscriptionAuthReady({ llm: profile.config });\n await conversationClient.switchLLM(conversationId, {\n ...profile.config,\n model,\n // Keep streaming on after a switch (parity with conversation start);\n // the profile config would otherwise default it to stream=False.\n stream: true,\n // Avoid stale first-write-wins entries in the backend LLM registry.\n usage_id: `profile:${profileName}:${uuidv4()}`,\n } as LLMConfig);\n }\n\n /\n Switches the model of a running ACP conversation in place (POST\n * /switch_acp_model — the ACP analog of {@link switchProfile}'s /switch_profile).\n * The agent-server calls the ACP wrapper's ``session/set_model`` on the live\n * session, preserving context. Mirrors {@link switchProfile}'s\n * local-backend-only guard and per-conversation ConversationClient call.\n \n Only valid once an ACP session exists (after the first message); the\n * agent-server returns 409 before then — the home/no-session default is\n * persisted via Settings instead (see ``use-switch-acp-model``).\n */\n static async switchAcpModel(\n conversationId: string,\n model: string,\n ): Promise<void> {\n const { backend } = getActiveBackend();\n if (backend.kind === \"cloud\") {\n await callCloudProxy({\n backend,\n method: \"POST\",\n path: `/api/v1/app-conversations/${conversationId}/switch_acp_model`,\n body: { model },\n });\n return;\n }\n\n await new ConversationClient(getAgentServerClientOptions()).switchAcpModel(\n conversationId,\n model,\n );\n }\n}\n\nexport default AgentServerConversationService;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwEA,IAAM,IAAiC,4BAIjC,IAAiC,MAAS,KAC1C,IACJ;AAGF,SAAS,IAAqC;AAC5C,QAAW,MAAM,EAAsC;;AAGzD,SAAS,EAAS,GAAkD;AAClE,QAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,EAAM;;AAG7E,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAAwB;AAC5C,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EAAa,GAA+B;AACnD,QAAO,OAAO,KAAU,WAAW,IAAQ;;AAG7C,SAAS,EACP,GACA,GACA,GACQ;CACR,IAAM,IAAQ,EAAK,MAAa,EAAK;AACrC,QAAO,OAAO,KAAU,YAAY,EAAM,MAAM,GAC5C,IACA;;AAGN,SAAS,EACP,GACgE;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,eAAe,EAAa,EAAM,cAAc;EAChD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,mBAAmB,EAAa,EAAM,kBAAkB;EACxD,oBAAoB,EAAa,EAAM,mBAAmB;EAC1D,gBAAgB,EAAa,EAAM,eAAe;EAClD,gBAAgB,EAAa,EAAM,eAAe;EACnD,GAT4B;;AAY/B,SAAS,EAAiB,GAAwC;AAGhE,QAFK,EAAS,EAAM,GAEb;EACL,kBAAkB,EAAa,EAAM,iBAAiB;EACtD,qBAAqB,EAAa,EAAM,oBAAoB;EAC5D,yBAAyB,EAAoB,EAAM,wBAAwB;EAC5E,GAN4B;;AAS/B,SAAS,EAAe,GAAiD;AACvE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAAM,EAAS,EAAM,IAAI,GAC3B,EAAE,OAAO,EAAa,EAAM,IAAI,MAAM,EAAE,GACxC;AAWJ,QAAO;EACL,MAAM,EAAa,EAAM,KAAK;EAC9B,YAAY,EAAa,EAAM,WAAW;EAC1C,WAAW,EAAa,EAAM,UAAU;EACxC;EACD;;AAGH,SAAS,EACP,GACqC;AAErC,QADK,EAAS,EAAM,GACb,EAAE,aAAa,EAAa,EAAM,YAAY,EAAE,GAD1B;;AAc/B,SAAS,EAAc,GAA+C;AACpE,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,IAA+B,EAAE;AACvC,MAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,EAAM,CAC9C,CAAI,OAAO,KAAU,aACnB,EAAK,KAAO;AAGhB,QAAO;;AAGT,SAAS,EACP,GACkD;AAClD,KAAI,CAAC,EAAS,EAAM,CAAE,QAAO;CAC7B,IAAM,EAAE,kBAAkB,GAAgB,gBAAa;AAIvD,QAHI,OAAO,KAAmB,YAAY,OAAO,KAAa,WACrD,OAEF;EAAE,kBAAkB;EAAgB;EAAU;;AAGvD,SAAS,EAAsB,GAA6B;AAC1D,KAAI,CAAC,EAAK,WAAW,IAAI,CAAE,QAAO;CAElC,IAAM,IAAqB,EAAE;AAC7B,MAAK,IAAM,KAAW,EAAK,MAAM,IAAI,CACnC,KAAI,KAAW,MAAY,IACzB,KAAI,MAAY,MAAM;AACpB,MAAI,CAAC,EAAS,OAAQ,QAAO;AAC7B,IAAS,KAAK;OAEd,GAAS,KAAK,EAAQ;AAK5B,QAAO,IAAI,EAAS,KAAK,IAAI;;AAG/B,SAAS,EAA2B,GAAc,GAA2B;CAC3E,IAAM,IAAiB,EAAsB,EAAK,EAC5C,IAAsB,EAAsB,EAAU;AAE5D,KACE,CAAC,KACD,CAAC,KACA,MAAmB,KAClB,CAAC,EAAe,WAAW,GAAG,EAAoB,GAAG,CAEvD,OAAU,MAAM,wDAAwD;AAG1E,QAAO;;AAGT,SAAS,EAA8B,GAAuC;AAC5E,KAAI,CAAC,EAAS,EAAK,IAAI,OAAO,EAAK,MAAO,YAAY,CAAC,EAAK,GAAG,MAAM,CACnE,OAAM,GAA6B;AAGrC,QAAO;EACL,IAAI,EAAK,GAAG,MAAM;EAClB,OAAO,EAAa,EAAK,MAAM;EAC/B,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,YAAY,EAAc,GAAM,cAAc,YAAY;EAC1D,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,gBAAgB,EAAa,EAAK,eAAe;EACjD,SAAS,EAAiB,EAAK,QAAQ;EACvC,OAAO,EAAe,EAAK,MAAM;EACjC,WAAW,EAAmB,EAAK,UAAU;EAC7C,MAAM,EAAc,EAAK,KAAK;EAC9B,wBAAwB,EACtB,EAAK,uBACN;EAKD,kBAAkB,EAAa,EAAK,iBAAiB;EACrD,oBAAoB,EAAa,EAAK,mBAAmB;EAC1D;;AAGH,SAAS,EACP,GAC0B;AAC1B,KAAI,CAAC,MAAM,QAAQ,EAAM,CACvB,OAAM,GAA6B;AAErC,QAAO,EAAM,IAAI,EAA8B;;AAGjD,SAAS,GAA8B,GAGrC;AACA,KAAI,MAAM,QAAQ,EAAK,CACrB,QAAO;EACL,OAAO,EAA+B,EAAK;EAC3C,cAAc;EACf;AAGH,KAAI,CAAC,EAAS,EAAK,CACjB,OAAM,GAA6B;AAGrC,QAAO;EACL,OAAO,EAA+B,EAAK,MAAM;EACjD,cACE,OAAO,EAAK,gBAAiB,WAAW,EAAK,eAAe;EAC/D;;AAGH,IAAM,KAAmB,IAAI,IAAY;CACvC;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,GACP,GACmC;CACnC,IAAM,IAAa,KAAU;AAC7B,QACE,GAAiB,IAAI,EAAW,GAAG,IAAa;;AAIpD,SAAS,EACP,GACA,GACiB;AACjB,KAAI,CAAC,EACH,OAAU,MAAM,gBAAgB,EAAe,gBAAgB;AAEjE,QAAO;;AAGT,IAAM,KAAN,MAAqC;CACnC,aAAa,YACX,GACA,GACA,GAC8B;EAC9B,IAAM,IAAS,GAAkB,CAAC,SAC9B,IAAkB,GAAS,mBAAmB,MAC9C,IAAgB,GAAS,iBAAiB;AAE9C,MAAI,EAAO,SAAS,SAAS;AAC3B,OAAI,CAAC,KAAmB,CAAC,GAAe;IACtC,IAAM,CAAC,KAAgB,MAAM,EAA2B,CACtD,EACD,CAAC;AAEF,IADA,IAAkB,GAAc,kBAAkB,MAAM,IAAI,MAC5D,IAAgB,GAAc,iBAAiB,MAAM,IAAI;;AAG3D,OAAI,CAAC,KAAmB,CAAC,EACvB,OAAU,MACR,iFACD;AAaH,UAVA,MAAM,EAAe;IACnB,SAAS;IACT,QAAQ;IACR,cAAc,EAAiB,EAAgB;IAC/C,MAAM,sBAAsB,EAAe;IAC3C,MAAM;KAAE,GAAG;KAAS,KAAK;KAAM;IAC/B,UAAU;IACV;IACD,CAAC,EAEK;;AAST,SANA,MAAM,IAAI,EACR,EAA4B;GAAE;GAAiB;GAAe,CAAC,CAChE,CAAC,UAAU,GAAgB,GAAS,EACnC,KAAK,IACN,CAAC,EAEK;;CAGT,aAAa,mBACX,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GACA,GAKA,GACA,GACmC;AACnC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAyBtC,QAAO,EAA2B;GAhBhC,iBAAiB,IACb;IACE,MAAM;IACN,SAAS,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAgB,CAAC;IAClD,GACD;GACJ,OAAO,KAA4B;GACnC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,SAAS,KAAW;GACpB,wBAAwB,KAAwB;GAChD,YAAY;GACZ,YAAY,KAAa;GACzB,kBAAkB,KAAkB;GAEJ,CAAQ;EAG5C,IAAM,CAAC,GAAU,KAAY,MAAM,QAAQ,IAAI,CAC7C,GAAgB,aAAa,EAC7B,EAAgB,cAAc,CAAC,YAAY,KAAA,EAAU,CACtD,CAAC,EACI,IAAkB,EACtB,EAAS,mBACT,EACD,EACK,IAAiB,GAAQ,EAOzB,IAAa,MAAM,EACvB,KAAsB,EAA4B,EAAe,CAClE,EACK,IACJ,MAAkB,IAAqB,eAAe,iBAGlD,IAAU,MAAM,EAAmD;GACvE;GACA,OAAO;GACP;GACA;GACA;GACA;GACA,UAAU,MAA0B;GACpC;GACA;GACA;GACD,CAAC,EAEI,IAAO,MAAM,IAAI,EACrB,EAA4B,EAAE,SAAS,GAAgC,CAAC,CACzE,CAAC,mBAA2C,EAAQ,EAC/C,IAAe,GAA0B;AAC/C,MAAI,CAAC,EAAc,OAAM,IAAI,GAAyB;AAkBtD,UAhBI,GAAU,uBAAuB,MAOnC,EAA8B,EAAK,IAAI;GACrC,qBAAqB,GAAU,uBAAuB;GACtD,iBAAiB,GAAU,mBAAmB;GAC9C,cAAc,GAAU,gBAAgB;GACxC,oBAAoB,KAAsB;GAC1C,gBAAgB;GACjB,CAAC,EAGG;GACL,IAAI,EAAK;GACT,oBAAoB;GACpB,QAAQ;GACR,QAAQ;GACR,qBAAqB,EAAK;GAC1B,kBAAkB,EAAa;GAC/B,SAAS;IACP,iBAAiB,EAAQ;IAGzB,SAAS,KAAW;IACrB;GACD,YAAY,EAAK;GACjB,YAAY,EAAK;GAClB;;CAGH,aAAa,aACX,GAC0C;AAO1C,SANI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAiC,EAAO,GAK1C;;CAGT,aAAa,aACX,GACA,GACA,GAC+B;EAM/B,IAAM,IACJ,MAAM,KAAK,8BAA8B,EAAe;AAc1D,SAAO,EAAE,YAAY,MAXG,IAAI,EAC1B,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,OAAO;GACP,SACE,OAAO,SAAW,MAAc,OAAO,SAAS,SAAS,KAAA;GAC3D;GACD,CAAC,EAE8B;;CAGlC,aAAa,8BACX,GACiB;EACjB,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,GAAc,WAAW,eAAe,GAA0B;;CAG3E,aAAa,yBACX,GACqC;AAWrC,SAVI,EAAI,WAAW,IAAU,EAAE,GAE3B,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA2B,EAAI,GAOjC,EAA+B,MAJnB,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,EAAI,CAEJ,CAAC,KAAK,MAC/C,EAAkB,EAAK,CACxB;;CAGH,aAAa,6BACX,GACA,GAC0B;AAC1B,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MAAM,2CAA2C;AAE7D,SAAO,EAAkC,GAAgB,EAAS;;CAGpE,aAAa,6BACX,GACA,GACA,GACA,GAC0B;AAC1B,EAAI,IAEF,EAA8B,GAAgB;GAC5C,GAFe,EAA8B,EAEzC,IAAY,EAAE;GAClB,qBAAqB;GACrB,iBAAiB,KAAU;GAC3B,cAAe,KAA+C;GAC/D,CAAC,GAEF,EAAiC,EAAe;EAElD,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAG7D,aAAa,qBACX,GACA,GACiB;AACjB,MAAI,GAAkB,CAAC,QAAQ,SAAS,QAQtC,QAAO,EAA0B,GAJpB,EACX,KAAY,0CACZ,qBAE+C,CAAK;EAGxD,IAAM,IAAa,MAAM,KAAK,8BAA8B,EAAe,EACrE,IAAO,EACX,KAAY,GAAG,EAAW,uBAC1B,EACD;AACD,SAAO,IAAI,EAAW,GAA6B,CAAC,CAAC,iBAAiB,EAAK;;CAG7E,aAAa,qBAAqB,GAAuC;AAKvE,SAJI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAA0B,EAAe,GAG3C,IAAI,EAAW,GAA6B,CAAC,CAAC,mBACnD,EACD;;CAGH,aAAa,SAAS,GAAmD;AAIvE,SAAO,GAAoB;;CAG7B,aAAa,uBACX,GACA,GACA,GACkC;EAClC,IAAM,IAAS,GAAkB,CAAC,SAU5B,IACJ,EAAO,SAAS,WAAW,IACvB,MAAM,EAA2B;GAC/B,SAAS;GACT,QAAQ;GACR,cAAc,EAAiB,EAAgB;GAC/C,MAAM,sBAAsB;GAC5B,UAAU;GACV;GACD,CAAC,GACF,MAAM,IAAI,EACR,EAA4B;GAC1B;GACA;GACD,CAAC,CACH,CAAC,gBAA4B,EAAe,EAC7C,IAAO,EAA8B,EAAS,EAC9C,IAAQ,EAAS,EAAS,GAAG,EAAS,QAAQ;AAEpD,SAAO;GACL,IAAI,EAAK;GACT,OAAO,EAAK,OAAO,MAAM,GACrB,EAAK,QACL,EAA4B,EAAK,GAAG;GACxC,SAAS,EAAiB,EAAK,QAAQ;GACvC,YAAY,EAAK;GACjB,YAAY,EAAK;GACjB,QAAQ,GAAgB,EAAK,iBAAiB;GAC9C,OAAO,EAAS,EAAM,GAAG,IAAQ,EAAE,kBAAkB,EAAE,EAAE;GAC1D;;CAGH,aAAa,oBACX,IAAgB,IAChB,GAC8B;AAa9B,SAZI,GAAkB,CAAC,QAAQ,SAAS,UAC/B,EAAyB,GAAO,EAAO,GAWzC,EAAmB,GAA8B,MARrC,IAAI,EACrB,GAA6B,CAC9B,CAAC,oBAAoB;GACpB;GACA,SAAS;GACT,YAAY,EAAsB;GACnC,CAAC,CAE2D,CAAC;;CAGhE,aAAa,mBAAmB,GAAuC;AAQrE,EAPI,GAAkB,CAAC,QAAQ,SAAS,UACtC,MAAM,EAAwB,EAAe,GAE7C,MAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,EAAe,EAEtC,EAAiC,EAAe;;CAGlD,aAAa,wBACX,GACA,GAC0B;AAC1B,QAAM,IAAI,EACR,GAA6B,CAC9B,CAAC,mBAAmB,GAAgB,EACnC,UACD,CAAC;EACF,IAAM,CAAC,KAAgB,MAAM,KAAK,yBAAyB,CACzD,EACD,CAAC;AACF,SAAO,EAAuB,GAAc,EAAe;;CAQ7D,aAAa,iBACX,GACA,GACA,GACiC;AACjC,MAAI,GAAkB,CAAC,QAAQ,SAAS,QACtC,OAAU,MACR,qEACD;EAOH,IAAM,IAAO,MAAM,IAAI,EACrB,GAA6B,CAC9B,CAAC,iBAAyC,GAAsB;GAC/D,eAAe;GACf,GAAI,IAAQ,EAAE,UAAO,GAAG,EAAE;GAC3B,CAAwD,EAInD,IAAiB,EAA8B,EAAqB;AAK1E,SAJI,KACF,EAA8B,EAAK,IAAI,EAAe,EAGjD;;CAQT,aAAa,iBACX,GACA,GAC6B;AAI7B,UAAO,MAHc,IAAI,EACvB,GAA6B,CAC9B,CAAC,SAAS,GAAgB,EAAQ,EACtB,aAAa,KAAA;;CAoB5B,aAAa,cACX,GACA,GACe;EACf,IAAM,EAAE,eAAY,GAAkB;AAEtC,MAAI,EAAQ,SAAS,SAAS;AAI5B,OAAI,CAAC,GAAgB;AACnB,UAAM,EAAgB,gBAAgB,EAAY;AAClD;;AAEF,SAAM,EAAe;IACnB;IACA,QAAQ;IACR,MAAM,6BAA6B,EAAe;IAClD,MAAM,EAAE,cAAc,GAAa;IACpC,CAAC;AACF;;AAGF,MAAI,CAAC,GAAgB;AACnB,SAAM,IAAI,EAAe,GAA6B,CAAC,CAAC,gBACtD,EACD;AACD;;EAGF,IAAM,IAAgB,GAA6B,EAC7C,IAAqB,IAAI,EAAmB,EAAc,EAC1D,IAAU,MAAM,IAAI,EAAe,EAAc,CAAC,WACtD,GACA,EAAE,eAAe,aAAa,CAC/B,EACK,IACJ,OAAO,EAAQ,OAAO,SAAU,WAAW,EAAQ,OAAO,QAAQ;AACpE,MAAI,CAAC,EAAO,OAAU,MAAM,YAAY,EAAY,iBAAiB;AAErE,EADA,MAAM,EAA4B,EAAE,KAAK,EAAQ,QAAQ,CAAC,EAC1D,MAAM,EAAmB,UAAU,GAAgB;GACjD,GAAG,EAAQ;GACX;GAGA,QAAQ;GAER,UAAU,WAAW,EAAY,GAAG,GAAQ;GAC7C,CAAc;;CAcjB,aAAa,eACX,GACA,GACe;EACf,IAAM,EAAE,eAAY,GAAkB;AACtC,MAAI,EAAQ,SAAS,SAAS;AAC5B,SAAM,EAAe;IACnB;IACA,QAAQ;IACR,MAAM,6BAA6B,EAAe;IAClD,MAAM,EAAE,UAAO;IAChB,CAAC;AACF;;AAGF,QAAM,IAAI,EAAmB,GAA6B,CAAC,CAAC,eAC1D,GACA,EACD"}

package/dist/api/mcp-health/mcp-health-store.cjs ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ require(`../../_virtual/_rolldown/runtime.cjs`);var e={},t=new Set,n=1;function r(n){e=n,t.forEach(e=>e())}function i(){return e}function a(e){return t.add(e),()=>{t.delete(e)}}function o(t){let i=n;return n+=1,r({...e,[t]:{status:`checking`,checkId:i}}),i}function s(t,n,i){let a=e[t];a?.status!==`checking`\|\|a.checkId!==n\|\|r({...e,[t]:i})}function c(t,n){r({...e,[t]:n})}function l(t){if(!(t in e))return;let{[t]:n,...i}=e;r(i)}exports.beginMcpHealthCheck=o,exports.clearMcpServerHealth=l,exports.getMcpHealthSnapshot=i,exports.resolveMcpHealthCheck=s,exports.setMcpServerHealth=c,exports.subscribeMcpHealth=a;
2	+ //# sourceMappingURL=mcp-health-store.cjs.map

package/dist/api/mcp-health/mcp-health-store.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"mcp-health-store.cjs","names":[],"sources":["../../../src/api/mcp-health/mcp-health-store.ts"],"sourcesContent":["import type { McpServerHealth } from \"#/types/mcp-health\";\n\ntype Listener = () => void;\n\nexport type McpHealthMap = Record<string, McpServerHealth>;\n\n/**\n * In-memory MCP connection-health store, keyed by\n * `getMcpServerHealthKey(server)`. Mirrors the module-store shape of\n * `#/api/backend-registry/health-store` but is deliberately NOT persisted:\n * a health verdict is only as fresh as its probe, so a page reload resets\n * every server to \"unchecked\" instead of resurrecting a possibly-stale\n * \"healthy\".\n */\nlet healthMap: McpHealthMap = {};\nconst listeners = new Set<Listener>();\nlet nextCheckId = 1;\n\nfunction commit(next: McpHealthMap): void {\n healthMap = next;\n listeners.forEach((listener) => listener());\n}\n\nexport function getMcpHealthSnapshot(): McpHealthMap {\n return healthMap;\n}\n\nexport function subscribeMcpHealth(listener: Listener): () => void {\n listeners.add(listener);\n return () => {\n listeners.delete(listener);\n };\n}\n\n/** Mark a probe as in flight and return its id for `resolveMcpHealthCheck`. */\nexport function beginMcpHealthCheck(key: string): number {\n const checkId = nextCheckId;\n nextCheckId += 1;\n commit({ ...healthMap, [key]: { status: \"checking\", checkId } });\n return checkId;\n}\n\n/**\n * Commit a probe result, but only while the entry is still the `checking`\n * state that probe created. A slow older probe can never overwrite a newer\n * probe's result, and a probe whose server was edited, deleted, or reseeded\n * mid-flight (entry cleared or replaced) is silently dropped — a stale\n * check can never land a false verdict.\n */\nexport function resolveMcpHealthCheck(\n key: string,\n checkId: number,\n health: McpServerHealth,\n): void {\n const current = healthMap[key];\n if (current?.status !== \"checking\" || current.checkId !== checkId) {\n return;\n }\n commit({ ...healthMap, [key]: health });\n}\n\n/** Unconditional write — used to seed health from a pre-save test result. */\nexport function setMcpServerHealth(key: string, health: McpServerHealth): void {\n commit({ ...healthMap, [key]: health });\n}\n\n/** Drop the entry (back to \"unchecked\") — used when a server changes or is deleted. */\nexport function clearMcpServerHealth(key: string): void {\n if (!(key in healthMap)) return;\n const { [key]: _removed, ...rest } = healthMap;\n commit(rest);\n}\n\n/** Test-only: reset state and listeners. */\nexport function __resetMcpHealthStoreForTests(): void {\n healthMap = {};\n listeners.clear();\n nextCheckId = 1;\n}\n"],"mappings":"gDAcA,IAAI,EAA0B,EAAE,CAC1B,EAAY,IAAI,IAClB,EAAc,EAElB,SAAS,EAAO,EAA0B,CACxC,EAAY,EACZ,EAAU,QAAS,GAAa,GAAU,CAAC,CAG7C,SAAgB,GAAqC,CACnD,OAAO,EAGT,SAAgB,EAAmB,EAAgC,CAEjE,OADA,EAAU,IAAI,EAAS,KACV,CACX,EAAU,OAAO,EAAS,EAK9B,SAAgB,EAAoB,EAAqB,CACvD,IAAM,EAAU,EAGhB,MAFA,IAAe,EACf,EAAO,CAAE,GAAG,GAAY,GAAM,CAAE,OAAQ,WAAY,UAAS,CAAE,CAAC,CACzD,EAUT,SAAgB,EACd,EACA,EACA,EACM,CACN,IAAM,EAAU,EAAU,GACtB,GAAS,SAAW,YAAc,EAAQ,UAAY,GAG1D,EAAO,CAAE,GAAG,GAAY,GAAM,EAAQ,CAAC,CAIzC,SAAgB,EAAmB,EAAa,EAA+B,CAC7E,EAAO,CAAE,GAAG,GAAY,GAAM,EAAQ,CAAC,CAIzC,SAAgB,EAAqB,EAAmB,CACtD,GAAI,EAAE,KAAO,GAAY,OACzB,GAAM,EAAG,GAAM,EAAU,GAAG,GAAS,EACrC,EAAO,EAAK"}

package/dist/api/mcp-health/mcp-health-store.d.ts ADDED Viewed

@@ -0,0 +1,22 @@
+import type { McpServerHealth } from "#/types/mcp-health";
+type Listener = () => void;
+export type McpHealthMap = Record<string, McpServerHealth>;
+export declare function getMcpHealthSnapshot(): McpHealthMap;
+export declare function subscribeMcpHealth(listener: Listener): () => void;
+/** Mark a probe as in flight and return its id for `resolveMcpHealthCheck`. */
+export declare function beginMcpHealthCheck(key: string): number;
+/**
+ * Commit a probe result, but only while the entry is still the `checking`
+ * state that probe created. A slow older probe can never overwrite a newer
+ * probe's result, and a probe whose server was edited, deleted, or reseeded
+ * mid-flight (entry cleared or replaced) is silently dropped — a stale
+ * check can never land a false verdict.
+ */
+export declare function resolveMcpHealthCheck(key: string, checkId: number, health: McpServerHealth): void;
+/** Unconditional write — used to seed health from a pre-save test result. */
+export declare function setMcpServerHealth(key: string, health: McpServerHealth): void;
+/** Drop the entry (back to "unchecked") — used when a server changes or is deleted. */
+export declare function clearMcpServerHealth(key: string): void;
+/** Test-only: reset state and listeners. */
+export declare function __resetMcpHealthStoreForTests(): void;
+export {};

package/dist/api/mcp-health/mcp-health-store.js ADDED Viewed

@@ -0,0 +1,45 @@
+//#region src/api/mcp-health/mcp-health-store.ts
+var e = {}, t = /* @__PURE__ */ new Set(), n = 1;
+function r(n) {
+	e = n, t.forEach((e) => e());
+}
+function i() {
+	return e;
+}
+function a(e) {
+	return t.add(e), () => {
+		t.delete(e);
+	};
+}
+function o(t) {
+	let i = n;
+	return n += 1, r({
+		...e,
+		[t]: {
+			status: "checking",
+			checkId: i
+		}
+	}), i;
+}
+function s(t, n, i) {
+	let a = e[t];
+	a?.status !== "checking" || a.checkId !== n || r({
+		...e,
+		[t]: i
+	});
+}
+function c(t, n) {
+	r({
+		...e,
+		[t]: n
+	});
+}
+function l(t) {
+	if (!(t in e)) return;
+	let { [t]: n, ...i } = e;
+	r(i);
+}
+//#endregion
+export { o as beginMcpHealthCheck, l as clearMcpServerHealth, i as getMcpHealthSnapshot, s as resolveMcpHealthCheck, c as setMcpServerHealth, a as subscribeMcpHealth };
+//# sourceMappingURL=mcp-health-store.js.map

package/dist/api/mcp-health/mcp-health-store.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"mcp-health-store.js","names":[],"sources":["../../../src/api/mcp-health/mcp-health-store.ts"],"sourcesContent":["import type { McpServerHealth } from \"#/types/mcp-health\";\n\ntype Listener = () => void;\n\nexport type McpHealthMap = Record<string, McpServerHealth>;\n\n/**\n * In-memory MCP connection-health store, keyed by\n * `getMcpServerHealthKey(server)`. Mirrors the module-store shape of\n * `#/api/backend-registry/health-store` but is deliberately NOT persisted:\n * a health verdict is only as fresh as its probe, so a page reload resets\n * every server to \"unchecked\" instead of resurrecting a possibly-stale\n * \"healthy\".\n */\nlet healthMap: McpHealthMap = {};\nconst listeners = new Set<Listener>();\nlet nextCheckId = 1;\n\nfunction commit(next: McpHealthMap): void {\n healthMap = next;\n listeners.forEach((listener) => listener());\n}\n\nexport function getMcpHealthSnapshot(): McpHealthMap {\n return healthMap;\n}\n\nexport function subscribeMcpHealth(listener: Listener): () => void {\n listeners.add(listener);\n return () => {\n listeners.delete(listener);\n };\n}\n\n/** Mark a probe as in flight and return its id for `resolveMcpHealthCheck`. */\nexport function beginMcpHealthCheck(key: string): number {\n const checkId = nextCheckId;\n nextCheckId += 1;\n commit({ ...healthMap, [key]: { status: \"checking\", checkId } });\n return checkId;\n}\n\n/**\n * Commit a probe result, but only while the entry is still the `checking`\n * state that probe created. A slow older probe can never overwrite a newer\n * probe's result, and a probe whose server was edited, deleted, or reseeded\n * mid-flight (entry cleared or replaced) is silently dropped — a stale\n * check can never land a false verdict.\n */\nexport function resolveMcpHealthCheck(\n key: string,\n checkId: number,\n health: McpServerHealth,\n): void {\n const current = healthMap[key];\n if (current?.status !== \"checking\" || current.checkId !== checkId) {\n return;\n }\n commit({ ...healthMap, [key]: health });\n}\n\n/** Unconditional write — used to seed health from a pre-save test result. */\nexport function setMcpServerHealth(key: string, health: McpServerHealth): void {\n commit({ ...healthMap, [key]: health });\n}\n\n/** Drop the entry (back to \"unchecked\") — used when a server changes or is deleted. */\nexport function clearMcpServerHealth(key: string): void {\n if (!(key in healthMap)) return;\n const { [key]: _removed, ...rest } = healthMap;\n commit(rest);\n}\n\n/** Test-only: reset state and listeners. */\nexport function __resetMcpHealthStoreForTests(): void {\n healthMap = {};\n listeners.clear();\n nextCheckId = 1;\n}\n"],"mappings":";AAcA,IAAI,IAA0B,EAAE,EAC1B,oBAAY,IAAI,KAAe,EACjC,IAAc;AAElB,SAAS,EAAO,GAA0B;AAExC,CADA,IAAY,GACZ,EAAU,SAAS,MAAa,GAAU,CAAC;;AAG7C,SAAgB,IAAqC;AACnD,QAAO;;AAGT,SAAgB,EAAmB,GAAgC;AAEjE,QADA,EAAU,IAAI,EAAS,QACV;AACX,IAAU,OAAO,EAAS;;;AAK9B,SAAgB,EAAoB,GAAqB;CACvD,IAAM,IAAU;AAGhB,QAFA,KAAe,GACf,EAAO;EAAE,GAAG;GAAY,IAAM;GAAE,QAAQ;GAAY;GAAS;EAAE,CAAC,EACzD;;AAUT,SAAgB,EACd,GACA,GACA,GACM;CACN,IAAM,IAAU,EAAU;AACtB,IAAS,WAAW,cAAc,EAAQ,YAAY,KAG1D,EAAO;EAAE,GAAG;GAAY,IAAM;EAAQ,CAAC;;AAIzC,SAAgB,EAAmB,GAAa,GAA+B;AAC7E,GAAO;EAAE,GAAG;GAAY,IAAM;EAAQ,CAAC;;AAIzC,SAAgB,EAAqB,GAAmB;AACtD,KAAI,EAAE,KAAO,GAAY;CACzB,IAAM,GAAG,IAAM,GAAU,GAAG,MAAS;AACrC,GAAO,EAAK"}

package/dist/api/mcp-health/probe-mcp-server-health.cjs ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`./mcp-health-store.cjs`),t=require(`../../utils/mcp-server-health-key.cjs`),n=require(`../../utils/mcp-credential-validation.cjs`),r=require(`../../utils/redact-mcp-secrets.cjs`),i=require(`../mcp-service/mcp-service.api.cjs`);var a=/\b(401\|403)\b\|unauthorized\|forbidden\|invalid[ _-]?(token\|credentials?\|api[ _-]?key)/i;function o(e,t){return{status:`failed`,kind:`unknown`,error:r.redactMcpSecrets(t instanceof Error?t.message:String(t),e),checkedAt:Date.now()}}function s(e,t){let r=Date.now();if(!t.ok)return{status:`failed`,kind:(t.error_kind===`connection`\|\|t.error_kind===`unknown`)&&a.test(t.error)?`credentials`:t.error_kind,error:t.error,checkedAt:r};let i=n.getCredentialValidationForServer(e);return{status:`healthy`,verification:i&&t.tools.includes(i.toolCall.name)&&t.tool_result&&!t.tool_result.is_error?`verified`:`connectivity-only`,toolCount:t.tools.length,checkedAt:r}}async function c(n){let r=t.getMcpServerHealthKey(n),a=e.beginMcpHealthCheck(r),c;try{c=s(n,await i.default.testServer(n))}catch(e){c=o(n,e)}e.resolveMcpHealthCheck(r,a,c)}async function l(n){let r=t.getMcpServerHealthKey(n),a=e.beginMcpHealthCheck(r);try{let t=await i.default.authorizeOAuth(n);return e.resolveMcpHealthCheck(r,a,s(n,t)),t}catch(t){return e.resolveMcpHealthCheck(r,a,o(n,t)),null}}function u(n,r,i){let a=t.getMcpServerHealthKey(n);i.some(e=>t.getMcpServerHealthKey(e)===a)\|\|e.setMcpServerHealth(a,s(n,r))}exports.probeMcpServerHealth=c,exports.reauthorizeMcpServerHealth=l,exports.seedMcpServerHealth=u;
2	+ //# sourceMappingURL=probe-mcp-server-health.cjs.map

package/dist/api/mcp-health/probe-mcp-server-health.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"probe-mcp-server-health.cjs","names":[],"sources":["../../../src/api/mcp-health/probe-mcp-server-health.ts"],"sourcesContent":["import McpService from \"#/api/mcp-service/mcp-service.api\";\nimport type { McpServerHealth } from \"#/types/mcp-health\";\nimport type {\n ExtendedMCPTestResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport { getMcpServerHealthKey } from \"#/utils/mcp-server-health-key\";\nimport { redactMcpSecrets } from \"#/utils/redact-mcp-secrets\";\nimport {\n beginMcpHealthCheck,\n resolveMcpHealthCheck,\n setMcpServerHealth,\n} from \"./mcp-health-store\";\n\n/**\n * Conservative auth-failure sniffing for hosted servers that reject a bad\n * token at the HTTP handshake: the backend can only classify those as\n * `connection`/`unknown` (the MCP connection itself failed), but the\n * guidance the user needs is the credentials one.\n */\nconst AUTH_FAILURE_TEXT =\n /\\b(401|403)\\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;\n\nfunction failedHealth(\n server: MCPServerConfig,\n error: unknown,\n): McpServerHealth {\n const message = error instanceof Error ? error.message : String(error);\n return {\n status: \"failed\",\n kind: \"unknown\",\n error: redactMcpSecrets(message, server),\n checkedAt: Date.now(),\n };\n}\n\n/**\n * Map a test/OAuth probe response (already secret-redacted and\n * credential-interpreted by `McpService`) to a card health state.\n *\n * `verified` requires the catalog entry's read-only probe tool to have been\n * advertised AND invoked without error; everything else that connected is\n * `connectivity-only` — truthfully labeled, never silently upgraded.\n */\nexport function interpretMcpTestResponse(\n server: MCPServerConfig,\n response: ExtendedMCPTestResponse,\n): McpServerHealth {\n const checkedAt = Date.now();\n if (!response.ok) {\n const kind =\n (response.error_kind === \"connection\" ||\n response.error_kind === \"unknown\") &&\n AUTH_FAILURE_TEXT.test(response.error)\n ? \"credentials\"\n : response.error_kind;\n return { status: \"failed\", kind, error: response.error, checkedAt };\n }\n const validation = getCredentialValidationForServer(server);\n const verified =\n !!validation &&\n response.tools.includes(validation.toolCall.name) &&\n !!response.tool_result &&\n !response.tool_result.is_error;\n return {\n status: \"healthy\",\n verification: verified ? \"verified\" : \"connectivity-only\",\n toolCount: response.tools.length,\n checkedAt,\n };\n}\n\n/** Run the non-mutating connection probe and publish the result. */\nexport async function probeMcpServerHealth(\n server: MCPServerConfig,\n): Promise<void> {\n const key = getMcpServerHealthKey(server);\n const checkId = beginMcpHealthCheck(key);\n let health: McpServerHealth;\n try {\n const response = await McpService.testServer(server);\n health = interpretMcpTestResponse(server, response);\n } catch (error) {\n health = failedHealth(server, error);\n }\n resolveMcpHealthCheck(key, checkId, health);\n}\n\n/**\n * Run the interactive OAuth authorization probe and publish the result.\n * Returns the raw response (null on transport error) so the caller can\n * persist a refreshed `oauth_state`.\n */\nexport async function reauthorizeMcpServerHealth(\n server: MCPServerConfig,\n): Promise<ExtendedMCPTestResponse | null> {\n const key = getMcpServerHealthKey(server);\n const checkId = beginMcpHealthCheck(key);\n try {\n const response = await McpService.authorizeOAuth(server);\n resolveMcpHealthCheck(\n key,\n checkId,\n interpretMcpTestResponse(server, response),\n );\n return response;\n } catch (error) {\n resolveMcpHealthCheck(key, checkId, failedHealth(server, error));\n return null;\n }\n}\n\n/**\n * Publish a just-saved server's health from the pre-save test result the\n * install/edit flow already produced (same config, moments earlier), so its\n * card shows a verdict immediately without a second probe.\n *\n * `otherServers` are the servers whose health must NOT be overwritten —\n * callers pass the pre-save list, excluding the server being saved. When a\n * same-shape duplicate exists (health keys exclude secret values, so two\n * installs of one catalog entry can collide until the save suffixes the\n * name), the seed is skipped and the new card simply starts \"unchecked\".\n */\nexport function seedMcpServerHealth(\n server: MCPServerConfig,\n response: ExtendedMCPTestResponse,\n otherServers: MCPServerConfig[],\n): void {\n const key = getMcpServerHealthKey(server);\n if (otherServers.some((other) => getMcpServerHealthKey(other) === key)) {\n return;\n }\n setMcpServerHealth(key, interpretMcpTestResponse(server, response));\n}\n"],"mappings":"oSAqBA,IAAM,EACJ,uFAEF,SAAS,EACP,EACA,EACiB,CAEjB,MAAO,CACL,OAAQ,SACR,KAAM,UACN,MAAO,EAAA,iBAJO,aAAiB,MAAQ,EAAM,QAAU,OAAO,EAAM,CAInC,EAAO,CACxC,UAAW,KAAK,KAAK,CACtB,CAWH,SAAgB,EACd,EACA,EACiB,CACjB,IAAM,EAAY,KAAK,KAAK,CAC5B,GAAI,CAAC,EAAS,GAOZ,MAAO,CAAE,OAAQ,SAAU,MALxB,EAAS,aAAe,cACvB,EAAS,aAAe,YAC1B,EAAkB,KAAK,EAAS,MAAM,CAClC,cACA,EAAS,WACkB,MAAO,EAAS,MAAO,YAAW,CAErE,IAAM,EAAa,EAAA,iCAAiC,EAAO,CAM3D,MAAO,CACL,OAAQ,UACR,aANE,GACF,EAAS,MAAM,SAAS,EAAW,SAAS,KAAK,EAC/C,EAAS,aACX,CAAC,EAAS,YAAY,SAGG,WAAa,oBACtC,UAAW,EAAS,MAAM,OAC1B,YACD,CAIH,eAAsB,EACpB,EACe,CACf,IAAM,EAAM,EAAA,sBAAsB,EAAO,CACnC,EAAU,EAAA,oBAAoB,EAAI,CACpC,EACJ,GAAI,CAEF,EAAS,EAAyB,EAAQ,MADnB,EAAA,QAAW,WAAW,EAAO,CACD,OAC5C,EAAO,CACd,EAAS,EAAa,EAAQ,EAAM,CAEtC,EAAA,sBAAsB,EAAK,EAAS,EAAO,CAQ7C,eAAsB,EACpB,EACyC,CACzC,IAAM,EAAM,EAAA,sBAAsB,EAAO,CACnC,EAAU,EAAA,oBAAoB,EAAI,CACxC,GAAI,CACF,IAAM,EAAW,MAAM,EAAA,QAAW,eAAe,EAAO,CAMxD,OALA,EAAA,sBACE,EACA,EACA,EAAyB,EAAQ,EAAS,CAC3C,CACM,QACA,EAAO,CAEd,OADA,EAAA,sBAAsB,EAAK,EAAS,EAAa,EAAQ,EAAM,CAAC,CACzD,MAeX,SAAgB,EACd,EACA,EACA,EACM,CACN,IAAM,EAAM,EAAA,sBAAsB,EAAO,CACrC,EAAa,KAAM,GAAU,EAAA,sBAAsB,EAAM,GAAK,EAAI,EAGtE,EAAA,mBAAmB,EAAK,EAAyB,EAAQ,EAAS,CAAC"}

package/dist/api/mcp-health/probe-mcp-server-health.d.ts ADDED Viewed

@@ -0,0 +1,31 @@
+import type { McpServerHealth } from "#/types/mcp-health";
+import type { ExtendedMCPTestResponse, MCPServerConfig } from "#/types/mcp-server";
+/**
+ * Map a test/OAuth probe response (already secret-redacted and
+ * credential-interpreted by `McpService`) to a card health state.
+ *
+ * `verified` requires the catalog entry's read-only probe tool to have been
+ * advertised AND invoked without error; everything else that connected is
+ * `connectivity-only` — truthfully labeled, never silently upgraded.
+ */
+export declare function interpretMcpTestResponse(server: MCPServerConfig, response: ExtendedMCPTestResponse): McpServerHealth;
+/** Run the non-mutating connection probe and publish the result. */
+export declare function probeMcpServerHealth(server: MCPServerConfig): Promise<void>;
+/**
+ * Run the interactive OAuth authorization probe and publish the result.
+ * Returns the raw response (null on transport error) so the caller can
+ * persist a refreshed `oauth_state`.
+ */
+export declare function reauthorizeMcpServerHealth(server: MCPServerConfig): Promise<ExtendedMCPTestResponse | null>;
+/**
+ * Publish a just-saved server's health from the pre-save test result the
+ * install/edit flow already produced (same config, moments earlier), so its
+ * card shows a verdict immediately without a second probe.
+ *
+ * `otherServers` are the servers whose health must NOT be overwritten —
+ * callers pass the pre-save list, excluding the server being saved. When a
+ * same-shape duplicate exists (health keys exclude secret values, so two
+ * installs of one catalog entry can collide until the save suffixes the
+ * name), the seed is skipped and the new card simply starts "unchecked".
+ */
+export declare function seedMcpServerHealth(server: MCPServerConfig, response: ExtendedMCPTestResponse, otherServers: MCPServerConfig[]): void;

package/dist/api/mcp-health/probe-mcp-server-health.js ADDED Viewed

@@ -0,0 +1,57 @@
+import { beginMcpHealthCheck as e, resolveMcpHealthCheck as t, setMcpServerHealth as n } from "./mcp-health-store.js";
+import { getMcpServerHealthKey as r } from "../../utils/mcp-server-health-key.js";
+import { getCredentialValidationForServer as i } from "../../utils/mcp-credential-validation.js";
+import { redactMcpSecrets as a } from "../../utils/redact-mcp-secrets.js";
+import o from "../mcp-service/mcp-service.api.js";
+//#region src/api/mcp-health/probe-mcp-server-health.ts
+var s = /\b(401|403)\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;
+function c(e, t) {
+	return {
+		status: "failed",
+		kind: "unknown",
+		error: a(t instanceof Error ? t.message : String(t), e),
+		checkedAt: Date.now()
+	};
+}
+function l(e, t) {
+	let n = Date.now();
+	if (!t.ok) return {
+		status: "failed",
+		kind: (t.error_kind === "connection" || t.error_kind === "unknown") && s.test(t.error) ? "credentials" : t.error_kind,
+		error: t.error,
+		checkedAt: n
+	};
+	let r = i(e);
+	return {
+		status: "healthy",
+		verification: r && t.tools.includes(r.toolCall.name) && t.tool_result && !t.tool_result.is_error ? "verified" : "connectivity-only",
+		toolCount: t.tools.length,
+		checkedAt: n
+	};
+}
+async function u(n) {
+	let i = r(n), a = e(i), s;
+	try {
+		s = l(n, await o.testServer(n));
+	} catch (e) {
+		s = c(n, e);
+	}
+	t(i, a, s);
+}
+async function d(n) {
+	let i = r(n), a = e(i);
+	try {
+		let e = await o.authorizeOAuth(n);
+		return t(i, a, l(n, e)), e;
+	} catch (e) {
+		return t(i, a, c(n, e)), null;
+	}
+}
+function f(e, t, i) {
+	let a = r(e);
+	i.some((e) => r(e) === a) || n(a, l(e, t));
+}
+//#endregion
+export { u as probeMcpServerHealth, d as reauthorizeMcpServerHealth, f as seedMcpServerHealth };
+//# sourceMappingURL=probe-mcp-server-health.js.map

package/dist/api/mcp-health/probe-mcp-server-health.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"probe-mcp-server-health.js","names":[],"sources":["../../../src/api/mcp-health/probe-mcp-server-health.ts"],"sourcesContent":["import McpService from \"#/api/mcp-service/mcp-service.api\";\nimport type { McpServerHealth } from \"#/types/mcp-health\";\nimport type {\n ExtendedMCPTestResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport { getMcpServerHealthKey } from \"#/utils/mcp-server-health-key\";\nimport { redactMcpSecrets } from \"#/utils/redact-mcp-secrets\";\nimport {\n beginMcpHealthCheck,\n resolveMcpHealthCheck,\n setMcpServerHealth,\n} from \"./mcp-health-store\";\n\n/**\n * Conservative auth-failure sniffing for hosted servers that reject a bad\n * token at the HTTP handshake: the backend can only classify those as\n * `connection`/`unknown` (the MCP connection itself failed), but the\n * guidance the user needs is the credentials one.\n */\nconst AUTH_FAILURE_TEXT =\n /\\b(401|403)\\b|unauthorized|forbidden|invalid[ _-]?(token|credentials?|api[ _-]?key)/i;\n\nfunction failedHealth(\n server: MCPServerConfig,\n error: unknown,\n): McpServerHealth {\n const message = error instanceof Error ? error.message : String(error);\n return {\n status: \"failed\",\n kind: \"unknown\",\n error: redactMcpSecrets(message, server),\n checkedAt: Date.now(),\n };\n}\n\n/**\n * Map a test/OAuth probe response (already secret-redacted and\n * credential-interpreted by `McpService`) to a card health state.\n *\n * `verified` requires the catalog entry's read-only probe tool to have been\n * advertised AND invoked without error; everything else that connected is\n * `connectivity-only` — truthfully labeled, never silently upgraded.\n */\nexport function interpretMcpTestResponse(\n server: MCPServerConfig,\n response: ExtendedMCPTestResponse,\n): McpServerHealth {\n const checkedAt = Date.now();\n if (!response.ok) {\n const kind =\n (response.error_kind === \"connection\" ||\n response.error_kind === \"unknown\") &&\n AUTH_FAILURE_TEXT.test(response.error)\n ? \"credentials\"\n : response.error_kind;\n return { status: \"failed\", kind, error: response.error, checkedAt };\n }\n const validation = getCredentialValidationForServer(server);\n const verified =\n !!validation &&\n response.tools.includes(validation.toolCall.name) &&\n !!response.tool_result &&\n !response.tool_result.is_error;\n return {\n status: \"healthy\",\n verification: verified ? \"verified\" : \"connectivity-only\",\n toolCount: response.tools.length,\n checkedAt,\n };\n}\n\n/** Run the non-mutating connection probe and publish the result. */\nexport async function probeMcpServerHealth(\n server: MCPServerConfig,\n): Promise<void> {\n const key = getMcpServerHealthKey(server);\n const checkId = beginMcpHealthCheck(key);\n let health: McpServerHealth;\n try {\n const response = await McpService.testServer(server);\n health = interpretMcpTestResponse(server, response);\n } catch (error) {\n health = failedHealth(server, error);\n }\n resolveMcpHealthCheck(key, checkId, health);\n}\n\n/**\n * Run the interactive OAuth authorization probe and publish the result.\n * Returns the raw response (null on transport error) so the caller can\n * persist a refreshed `oauth_state`.\n */\nexport async function reauthorizeMcpServerHealth(\n server: MCPServerConfig,\n): Promise<ExtendedMCPTestResponse | null> {\n const key = getMcpServerHealthKey(server);\n const checkId = beginMcpHealthCheck(key);\n try {\n const response = await McpService.authorizeOAuth(server);\n resolveMcpHealthCheck(\n key,\n checkId,\n interpretMcpTestResponse(server, response),\n );\n return response;\n } catch (error) {\n resolveMcpHealthCheck(key, checkId, failedHealth(server, error));\n return null;\n }\n}\n\n/**\n * Publish a just-saved server's health from the pre-save test result the\n * install/edit flow already produced (same config, moments earlier), so its\n * card shows a verdict immediately without a second probe.\n *\n * `otherServers` are the servers whose health must NOT be overwritten —\n * callers pass the pre-save list, excluding the server being saved. When a\n * same-shape duplicate exists (health keys exclude secret values, so two\n * installs of one catalog entry can collide until the save suffixes the\n * name), the seed is skipped and the new card simply starts \"unchecked\".\n */\nexport function seedMcpServerHealth(\n server: MCPServerConfig,\n response: ExtendedMCPTestResponse,\n otherServers: MCPServerConfig[],\n): void {\n const key = getMcpServerHealthKey(server);\n if (otherServers.some((other) => getMcpServerHealthKey(other) === key)) {\n return;\n }\n setMcpServerHealth(key, interpretMcpTestResponse(server, response));\n}\n"],"mappings":";;;;;;AAqBA,IAAM,IACJ;AAEF,SAAS,EACP,GACA,GACiB;AAEjB,QAAO;EACL,QAAQ;EACR,MAAM;EACN,OAAO,EAJO,aAAiB,QAAQ,EAAM,UAAU,OAAO,EAAM,EAInC,EAAO;EACxC,WAAW,KAAK,KAAK;EACtB;;AAWH,SAAgB,EACd,GACA,GACiB;CACjB,IAAM,IAAY,KAAK,KAAK;AAC5B,KAAI,CAAC,EAAS,GAOZ,QAAO;EAAE,QAAQ;EAAU,OALxB,EAAS,eAAe,gBACvB,EAAS,eAAe,cAC1B,EAAkB,KAAK,EAAS,MAAM,GAClC,gBACA,EAAS;EACkB,OAAO,EAAS;EAAO;EAAW;CAErE,IAAM,IAAa,EAAiC,EAAO;AAM3D,QAAO;EACL,QAAQ;EACR,cANE,KACF,EAAS,MAAM,SAAS,EAAW,SAAS,KAAK,IAC/C,EAAS,eACX,CAAC,EAAS,YAAY,WAGG,aAAa;EACtC,WAAW,EAAS,MAAM;EAC1B;EACD;;AAIH,eAAsB,EACpB,GACe;CACf,IAAM,IAAM,EAAsB,EAAO,EACnC,IAAU,EAAoB,EAAI,EACpC;AACJ,KAAI;AAEF,MAAS,EAAyB,GAAQ,MADnB,EAAW,WAAW,EAAO,CACD;UAC5C,GAAO;AACd,MAAS,EAAa,GAAQ,EAAM;;AAEtC,GAAsB,GAAK,GAAS,EAAO;;AAQ7C,eAAsB,EACpB,GACyC;CACzC,IAAM,IAAM,EAAsB,EAAO,EACnC,IAAU,EAAoB,EAAI;AACxC,KAAI;EACF,IAAM,IAAW,MAAM,EAAW,eAAe,EAAO;AAMxD,SALA,EACE,GACA,GACA,EAAyB,GAAQ,EAAS,CAC3C,EACM;UACA,GAAO;AAEd,SADA,EAAsB,GAAK,GAAS,EAAa,GAAQ,EAAM,CAAC,EACzD;;;AAeX,SAAgB,EACd,GACA,GACA,GACM;CACN,IAAM,IAAM,EAAsB,EAAO;AACrC,GAAa,MAAM,MAAU,EAAsB,EAAM,KAAK,EAAI,IAGtE,EAAmB,GAAK,EAAyB,GAAQ,EAAS,CAAC"}

package/dist/api/mcp-service/mcp-service.api.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/mcp-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../../utils/mcp-credential-validation.cjs`),i=require(`./mcp-redacted-credentials.cjs`);var a=120;function o(e){return e.type===`stdio`?{transport:`stdio`,command:e.command,...e.args?.length&&{args:e.args},...e.env&&Object.keys(e.env).length>0&&{env:e.env}}:{transport:e.type===`sse`?`sse`:`http`,url:e.url,...e.headers&&Object.keys(e.headers).length>0&&{headers:e.headers},...e.auth?{auth:e.auth}:{}}}function s(e){return e.auth?.strategy===`oauth2`?a:e.timeout}async function c(e){let t=r.getCredentialValidationForServer(e),n=o(await i.substituteRedactedMcpCredentials(e)),a=s(e);return{server:n,...e.name?{name:e.name}:{},...a===void 0?{}:{timeout:a},...t?{tool_call:t.toolCall}:{}}}function l(){if(t.getActiveBackend().backend.kind===`local`){let{host:e,apiKey:t}=n.getAgentServerClientOptions();return{host:e,...t?{apiKey:t}:{}}}let e=t.getRegisteredBackends().find(e=>e.kind===`local`&&e.host);if(e)return{host:e.host.replace(/\/+$/,``),...e.apiKey?{apiKey:e.apiKey}:{}};throw Error(`OAuth authorization requires a reachable local backend.`)}function u(){let{host:t,apiKey:n}=l();return new e.MCPClient({host:t,...n?{apiKey:n}:{},timeout:a*1e3+5e3})}function d(e){return e.status===`succeeded`?{ok:!0,tools:e.tools??[],...e.tool_result!==void 0&&{tool_result:e.tool_result},...e.oauth_state!==void 0&&{oauth_state:e.oauth_state}}:{ok:!1,error:e.error||`OAuth authorization did not complete`,error_kind:e.error_kind||`unknown`}}var f=e=>new Promise(t=>{window.setTimeout(t,e)}),p=class i{static async testServer(i){if(t.getActiveBackend().backend.kind===`cloud`)return{ok:!0,tools:[]};let a=r.getCredentialValidationForServer(i),{host:o,apiKey:s}=n.getAgentServerClientOptions(),l=new e.MCPClient({host:o,...s?{apiKey:s}:{}});try{let e=await c(i),t=await l.testServer(e);if(t.ok&&a&&t.tool_result){let e=a.interpret(t.tool_result);if(e)return{ok:!1,error:e,error_kind:`credentials`}}return t}finally{l.close()}}static async startOAuth(e){let t=u();try{return await i.startOAuthWithClient(t,e)}finally{t.close()}}static async getOAuthStatus(e){let t=u();try{return await i.getOAuthStatusWithClient(t,e)}finally{t.close()}}static async submitOAuthCallback(e,t){let n=u();try{return await i.submitOAuthCallbackWithClient(n,e,t)}finally{n.close()}}static async authorizeOAuth(e){let t=window.open(`about:blank`,`_blank`),n=u();try{let r=await i.startOAuthWithClient(n,e);if(!r.ok||!r.job_id||!r.authorization_url)return t?.close(),{ok:!1,error:r.error||`Could not start OAuth authorization`,error_kind:r.error_kind||`unknown`};let o=await i.getOAuthStatusWithClient(n,r.job_id);for(let e=0;e<20;e+=1){if(o.status===`succeeded`||o.status===`failed`)return t?.close(),d(o);if(o.callback_ready)break;await f(250),o=await i.getOAuthStatusWithClient(n,r.job_id)}t&&(t.location.href=r.authorization_url);for(let e=0;e<a;e+=1)if(await f(1e3),o=await i.getOAuthStatusWithClient(n,r.job_id),o.status===`succeeded`||o.status===`failed`)return t?.close(),d(o);return{ok:!1,error:`OAuth authorization timed out`,error_kind:`timeout`}}finally{n.close()}}static async startOAuthWithClient(e,t){let n=await c(t);return e.startOAuth(n)}static async getOAuthStatusWithClient(e,t){return e.getOAuthStatus(t)}static async submitOAuthCallbackWithClient(e,t,n){return e.submitOAuthCallback(t,{callback_url:n})}};exports.default=p;
+require(`../../_virtual/_rolldown/runtime.cjs`);const e=require(`../../node_modules/@openhands/typescript-client/dist/client/mcp-client.cjs`);require(`../../node_modules/@openhands/typescript-client/dist/clients.cjs`);const t=require(`../backend-registry/active-store.cjs`),n=require(`../agent-server-client-options.cjs`),r=require(`../../utils/mcp-credential-validation.cjs`),i=require(`../../utils/redact-mcp-secrets.cjs`),a=require(`./mcp-redacted-credentials.cjs`);var o=120;function s(e){return e.type===`stdio`?{transport:`stdio`,command:e.command,...e.args?.length&&{args:e.args},...e.env&&Object.keys(e.env).length>0&&{env:e.env}}:{transport:e.type===`sse`?`sse`:`http`,url:e.url,...e.headers&&Object.keys(e.headers).length>0&&{headers:e.headers},...e.auth?{auth:e.auth}:{}}}function c(e){return e.auth?.strategy===`oauth2`?o:e.timeout}async function l(e){let t=r.getCredentialValidationForServer(e),n=await a.substituteRedactedMcpCredentials(e),i=s(n),o=c(e);return{request:{server:i,...e.name?{name:e.name}:{},...o===void 0?{}:{timeout:o},...t?{tool_call:t.toolCall}:{}},substituted:n}}function u(e,t){return e.ok?e.tool_result?{...e,tool_result:{...e.tool_result,text:i.redactMcpSecrets(e.tool_result.text,...t)}}:e:{...e,error:i.redactMcpSecrets(e.error,...t)}}function d(e,t,n){let r=u(e,n);if(r.ok&&t&&r.tool_result&&r.tools.includes(t.toolCall.name)){let e=t.interpret(r.tool_result);if(e)return{ok:!1,error:e,error_kind:`credentials`}}return r}function f(){if(t.getActiveBackend().backend.kind===`local`){let{host:e,apiKey:t}=n.getAgentServerClientOptions();return{host:e,...t?{apiKey:t}:{}}}let e=t.getRegisteredBackends().find(e=>e.kind===`local`&&e.host);if(e)return{host:e.host.replace(/\/+$/,``),...e.apiKey?{apiKey:e.apiKey}:{}};throw Error(`OAuth authorization requires a reachable local backend.`)}function p(){let{host:t,apiKey:n}=f();return new e.MCPClient({host:t,...n?{apiKey:n}:{},timeout:o*1e3+5e3})}function m(e){return e.status===`succeeded`?{ok:!0,tools:e.tools??[],...e.tool_result!==void 0&&{tool_result:e.tool_result},...e.oauth_state!==void 0&&{oauth_state:e.oauth_state}}:{ok:!1,error:e.error||`OAuth authorization did not complete`,error_kind:e.error_kind||`unknown`}}var h=e=>new Promise(t=>{window.setTimeout(t,e)}),g=class i{static async testServer(i){if(t.getActiveBackend().backend.kind===`cloud`)return{ok:!0,tools:[]};let a=r.getCredentialValidationForServer(i),{host:o,apiKey:s}=n.getAgentServerClientOptions(),c=new e.MCPClient({host:o,...s?{apiKey:s}:{}});try{let{request:e,substituted:t}=await l(i);return d(await c.testServer(e),a,[t,i])}finally{c.close()}}static async startOAuth(e){let t=p();try{return await i.startOAuthWithClient(t,e)}finally{t.close()}}static async getOAuthStatus(e){let t=p();try{return await i.getOAuthStatusWithClient(t,e)}finally{t.close()}}static async submitOAuthCallback(e,t){let n=p();try{return await i.submitOAuthCallbackWithClient(n,e,t)}finally{n.close()}}static async authorizeOAuth(e){let t=r.getCredentialValidationForServer(e),n=n=>d(n,t,[e]),a=window.open(`about:blank`,`_blank`),s=p();try{let t=await i.startOAuthWithClient(s,e);if(!t.ok||!t.job_id||!t.authorization_url)return a?.close(),n({ok:!1,error:t.error||`Could not start OAuth authorization`,error_kind:t.error_kind||`unknown`});let r=await i.getOAuthStatusWithClient(s,t.job_id);for(let e=0;e<20;e+=1){if(r.status===`succeeded`||r.status===`failed`)return a?.close(),n(m(r));if(r.callback_ready)break;await h(250),r=await i.getOAuthStatusWithClient(s,t.job_id)}a&&(a.location.href=t.authorization_url);for(let e=0;e<o;e+=1)if(await h(1e3),r=await i.getOAuthStatusWithClient(s,t.job_id),r.status===`succeeded`||r.status===`failed`)return a?.close(),n(m(r));return{ok:!1,error:`OAuth authorization timed out`,error_kind:`timeout`}}finally{s.close()}}static async startOAuthWithClient(e,t){let{request:n}=await l(t);return e.startOAuth(n)}static async getOAuthStatusWithClient(e,t){return e.getOAuthStatus(t)}static async submitOAuthCallbackWithClient(e,t,n){return e.submitOAuthCallback(t,{callback_url:n})}};exports.default=g;
 //# sourceMappingURL=mcp-service.api.cjs.map

package/dist/api/mcp-service/mcp-service.api.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-service.api.cjs","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type { MCPTestRequest } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport {\n getActiveBackend,\n getRegisteredBackends,\n} from \"../backend-registry/active-store\";\nimport { getCredentialValidationForServer } from \"#/utils/mcp-credential-validation\";\nimport type { MCPAuthCredential } from \"#/types/mcp-auth\";\nimport type {\n ExtendedMCPTestResponse,\n MCPOAuthStartResponse,\n MCPOAuthStatusResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nconst OAUTH_MCP_TEST_TIMEOUT_SECONDS = 120;\n\ntype MCPTestServer = {\n transport?: \"stdio\" \| \"http\" \| \"sse\";\n command?: string;\n args?: string[];\n env?: Record<string, string>;\n url?: string;\n headers?: Record<string, string>;\n auth?: MCPAuthCredential;\n};\n\ninterface ExtendedMCPTestRequest {\n server: MCPTestServer;\n name?: string;\n timeout?: number;\n tool_call?: {\n name: string;\n arguments: Record<string, unknown>;\n };\n}\n\nfunction toMcpServer(server: MCPServerConfig): MCPTestServer {\n if (server.type === \"stdio\") {\n return {\n transport: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n transport: server.type === \"sse\" ? \"sse\" : \"http\",\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.auth ? { auth: server.auth } : {}),\n };\n}\n\nfunction getMcpTestTimeout(server: MCPServerConfig): number \| undefined {\n if (server.auth?.strategy !== \"oauth2\") return server.timeout;\n return OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n}\n\nasync function buildMcpTestRequest(\n server: MCPServerConfig,\n): Promise<ExtendedMCPTestRequest> {\n const validation = getCredentialValidationForServer(server);\n const serverSpec = toMcpServer(\n await substituteRedactedMcpCredentials(server),\n );\n const timeout = getMcpTestTimeout(server);\n return {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(timeout !== undefined ? { timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n };\n}\n\nfunction getMcpProbeOptions(): { host: string; apiKey?: string } {\n const active = getActiveBackend().backend;\n if (active.kind === \"local\") {\n const { host, apiKey } = getAgentServerClientOptions();\n return { host, ...(apiKey ? { apiKey } : {}) };\n }\n\n const localBackend = getRegisteredBackends().find(\n (backend) => backend.kind === \"local\" && backend.host,\n );\n if (localBackend) {\n return {\n host: localBackend.host.replace(/\\/+$/, \"\"),\n ...(localBackend.apiKey ? { apiKey: localBackend.apiKey } : {}),\n };\n }\n throw new Error(\"OAuth authorization requires a reachable local backend.\");\n}\n\nfunction createMcpProbeClient(): MCPClient {\n const { host, apiKey } = getMcpProbeOptions();\n return new MCPClient({\n host,\n ...(apiKey ? { apiKey } : {}),\n timeout: OAUTH_MCP_TEST_TIMEOUT_SECONDS * 1000 + 5000,\n });\n}\n\nfunction oauthStatusToTestResponse(\n status: MCPOAuthStatusResponse,\n): ExtendedMCPTestResponse {\n if (status.status === \"succeeded\") {\n return {\n ok: true,\n tools: status.tools ?? [],\n ...(status.tool_result !== undefined && {\n tool_result: status.tool_result,\n }),\n ...(status.oauth_state !== undefined && {\n oauth_state: status.oauth_state,\n }),\n };\n }\n return {\n ok: false,\n error: status.error \|\| \"OAuth authorization did not complete\",\n error_kind: status.error_kind \|\| \"unknown\",\n };\n}\n\nconst sleep = (ms: number) =>\n new Promise<void>((resolve) => {\n window.setTimeout(resolve, ms);\n });\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n const request = await buildMcpTestRequest(server);\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n if (result.ok && validation && result.tool_result) {\n const credentialError = validation.interpret(result.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return result;\n } finally {\n client.close();\n }\n }\n\n static async startOAuth(\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.startOAuthWithClient(client, server);\n } finally {\n client.close();\n }\n }\n\n static async getOAuthStatus(jobId: string): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.getOAuthStatusWithClient(client, jobId);\n } finally {\n client.close();\n }\n }\n\n static async submitOAuthCallback(\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.submitOAuthCallbackWithClient(\n client,\n jobId,\n callbackUrl,\n );\n } finally {\n client.close();\n }\n }\n\n static async authorizeOAuth(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n const popup = window.open(\"about:blank\", \"_blank\");\n const client = createMcpProbeClient();\n try {\n const start = await McpService.startOAuthWithClient(client, server);\n if (!start.ok \|\| !start.job_id \|\| !start.authorization_url) {\n popup?.close();\n return {\n ok: false,\n error: start.error \|\| \"Could not start OAuth authorization\",\n error_kind: start.error_kind \|\| \"unknown\",\n };\n }\n\n let status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n for (let attempt = 0; attempt < 20; attempt += 1) {\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n if (status.callback_ready) break;\n await sleep(250);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n }\n\n if (popup) {\n popup.location.href = start.authorization_url;\n }\n\n for (\n let attempt = 0;\n attempt < OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n attempt += 1\n ) {\n await sleep(1000);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return oauthStatusToTestResponse(status);\n }\n }\n\n return {\n ok: false,\n error: \"OAuth authorization timed out\",\n error_kind: \"timeout\",\n };\n } finally {\n client.close();\n }\n }\n\n private static async startOAuthWithClient(\n client: MCPClient,\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const request = await buildMcpTestRequest(server);\n return client.startOAuth(request as MCPTestRequest);\n }\n\n private static async getOAuthStatusWithClient(\n client: MCPClient,\n jobId: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.getOAuthStatus(jobId);\n }\n\n private static async submitOAuthCallbackWithClient(\n client: MCPClient,\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.submitOAuthCallback(jobId, { callback_url: callbackUrl });\n }\n}\n\nexport default McpService;\n"],"mappings":"qaAiBA,IAAM,EAAiC,IAsBvC,SAAS,EAAY,EAAwC,CAU3D,OATI,EAAO,OAAS,QACX,CACL,UAAW,QACX,QAAS,EAAO,QAChB,GAAI,EAAO,MAAM,QAAU,CAAE,KAAM,EAAO,KAAM,CAChD,GAAI,EAAO,KACT,OAAO,KAAK,EAAO,IAAI,CAAC,OAAS,GAAK,CAAE,IAAK,EAAO,IAAK,CAC5D,CAEI,CACL,UAAW,EAAO,OAAS,MAAQ,MAAQ,OAC3C,IAAK,EAAO,IACZ,GAAI,EAAO,SACT,OAAO,KAAK,EAAO,QAAQ,CAAC,OAAS,GAAK,CAAE,QAAS,EAAO,QAAS,CACvE,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC7C,CAGH,SAAS,EAAkB,EAA6C,CAEtE,OADI,EAAO,MAAM,WAAa,SACvB,EADwC,EAAO,QAIxD,eAAe,EACb,EACiC,CACjC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,EAAa,EACjB,MAAM,EAAA,iCAAiC,EAAO,CAC/C,CACK,EAAU,EAAkB,EAAO,CACzC,MAAO,CACL,OAAQ,EACR,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC5C,GAAI,IAAY,IAAA,GAA0B,EAAE,CAAhB,CAAE,UAAS,CACvC,GAAI,EAAa,CAAE,UAAW,EAAW,SAAU,CAAG,EAAE,CACzD,CAGH,SAAS,GAAwD,CAE/D,GADe,EAAA,kBAAkB,CAAC,QACvB,OAAS,QAAS,CAC3B,GAAM,CAAE,OAAM,UAAW,EAAA,6BAA6B,CACtD,MAAO,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAGhD,IAAM,EAAe,EAAA,uBAAuB,CAAC,KAC1C,GAAY,EAAQ,OAAS,SAAW,EAAQ,KAClD,CACD,GAAI,EACF,MAAO,CACL,KAAM,EAAa,KAAK,QAAQ,OAAQ,GAAG,CAC3C,GAAI,EAAa,OAAS,CAAE,OAAQ,EAAa,OAAQ,CAAG,EAAE,CAC/D,CAEH,MAAU,MAAM,0DAA0D,CAG5E,SAAS,GAAkC,CACzC,GAAM,CAAE,OAAM,UAAW,GAAoB,CAC7C,OAAO,IAAI,EAAA,UAAU,CACnB,OACA,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAC5B,QAAS,EAAiC,IAAO,IAClD,CAAC,CAGJ,SAAS,EACP,EACyB,CAazB,OAZI,EAAO,SAAW,YACb,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,EAAE,CACzB,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACD,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACF,CAEI,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,uCACvB,WAAY,EAAO,YAAc,UAClC,CAGH,IAAM,EAAS,GACb,IAAI,QAAe,GAAY,CAC7B,OAAO,WAAW,EAAS,EAAG,EAC9B,CAEE,EAAN,MAAM,CAAW,CACf,aAAa,WACX,EACkC,CAWlC,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,MAAO,CAAE,GAAI,GAAM,MAAO,EAAE,CAAE,CAEhC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,CAAE,OAAM,UAAW,EAAA,6BAA6B,CAChD,EAAS,IAAI,EAAA,UAAU,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAAC,CACrE,GAAI,CACF,IAAM,EAAU,MAAM,EAAoB,EAAO,CAC3C,EAAU,MAAM,EAAO,WAC3B,EACD,CACD,GAAI,EAAO,IAAM,GAAc,EAAO,YAAa,CACjD,IAAM,EAAkB,EAAW,UAAU,EAAO,YAAY,CAChE,GAAI,EACF,MAAO,CACL,GAAI,GACJ,MAAO,EACP,WAAY,cACb,CAGL,OAAO,SACC,CACR,EAAO,OAAO,EAIlB,aAAa,WACX,EACgC,CAChC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,qBAAqB,EAAQ,EAAO,QACpD,CACR,EAAO,OAAO,EAIlB,aAAa,eAAe,EAAgD,CAC1E,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,yBAAyB,EAAQ,EAAM,QACvD,CACR,EAAO,OAAO,EAIlB,aAAa,oBACX,EACA,EACiC,CACjC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,8BACtB,EACA,EACA,EACD,QACO,CACR,EAAO,OAAO,EAIlB,aAAa,eACX,EACkC,CAClC,IAAM,EAAQ,OAAO,KAAK,cAAe,SAAS,CAC5C,EAAS,GAAsB,CACrC,GAAI,CACF,IAAM,EAAQ,MAAM,EAAW,qBAAqB,EAAQ,EAAO,CACnE,GAAI,CAAC,EAAM,IAAM,CAAC,EAAM,QAAU,CAAC,EAAM,kBAEvC,OADA,GAAO,OAAO,CACP,CACL,GAAI,GACJ,MAAO,EAAM,OAAS,sCACtB,WAAY,EAAM,YAAc,UACjC,CAGH,IAAI,EAAS,MAAM,EAAW,yBAC5B,EACA,EAAM,OACP,CACD,IAAK,IAAI,EAAU,EAAG,EAAU,GAAI,GAAW,EAAG,CAChD,GAAI,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAA0B,EAAO,CAE1C,GAAI,EAAO,eAAgB,MAC3B,MAAM,EAAM,IAAI,CAChB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CAGC,IACF,EAAM,SAAS,KAAO,EAAM,mBAG9B,IACE,IAAI,EAAU,EACd,EAAU,EACV,GAAW,EAOX,GALA,MAAM,EAAM,IAAK,CACjB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CACG,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAA0B,EAAO,CAI5C,MAAO,CACL,GAAI,GACJ,MAAO,gCACP,WAAY,UACb,QACO,CACR,EAAO,OAAO,EAIlB,aAAqB,qBACnB,EACA,EACgC,CAChC,IAAM,EAAU,MAAM,EAAoB,EAAO,CACjD,OAAO,EAAO,WAAW,EAA0B,CAGrD,aAAqB,yBACnB,EACA,EACiC,CACjC,OAAO,EAAO,eAAe,EAAM,CAGrC,aAAqB,8BACnB,EACA,EACA,EACiC,CACjC,OAAO,EAAO,oBAAoB,EAAO,CAAE,aAAc,EAAa,CAAC"}
1	+ {"version":3,"file":"mcp-service.api.cjs","names":[],"sources":["../../../src/api/mcp-service/mcp-service.api.ts"],"sourcesContent":["import { MCPClient } from \"@openhands/typescript-client/clients\";\nimport type { MCPTestRequest } from \"@openhands/typescript-client\";\nimport { getAgentServerClientOptions } from \"../agent-server-client-options\";\nimport {\n getActiveBackend,\n getRegisteredBackends,\n} from \"../backend-registry/active-store\";\nimport {\n getCredentialValidationForServer,\n type CredentialValidation,\n} from \"#/utils/mcp-credential-validation\";\nimport type { MCPAuthCredential } from \"#/types/mcp-auth\";\nimport type {\n ExtendedMCPTestResponse,\n MCPOAuthStartResponse,\n MCPOAuthStatusResponse,\n MCPServerConfig,\n} from \"#/types/mcp-server\";\nimport { redactMcpSecrets } from \"#/utils/redact-mcp-secrets\";\nimport { substituteRedactedMcpCredentials } from \"./mcp-redacted-credentials\";\n\nconst OAUTH_MCP_TEST_TIMEOUT_SECONDS = 120;\n\ntype MCPTestServer = {\n transport?: \"stdio\" \| \"http\" \| \"sse\";\n command?: string;\n args?: string[];\n env?: Record<string, string>;\n url?: string;\n headers?: Record<string, string>;\n auth?: MCPAuthCredential;\n};\n\ninterface ExtendedMCPTestRequest {\n server: MCPTestServer;\n name?: string;\n timeout?: number;\n tool_call?: {\n name: string;\n arguments: Record<string, unknown>;\n };\n}\n\nfunction toMcpServer(server: MCPServerConfig): MCPTestServer {\n if (server.type === \"stdio\") {\n return {\n transport: \"stdio\",\n command: server.command!,\n ...(server.args?.length && { args: server.args }),\n ...(server.env &&\n Object.keys(server.env).length > 0 && { env: server.env }),\n };\n }\n return {\n transport: server.type === \"sse\" ? \"sse\" : \"http\",\n url: server.url!,\n ...(server.headers &&\n Object.keys(server.headers).length > 0 && { headers: server.headers }),\n ...(server.auth ? { auth: server.auth } : {}),\n };\n}\n\nfunction getMcpTestTimeout(server: MCPServerConfig): number \| undefined {\n if (server.auth?.strategy !== \"oauth2\") return server.timeout;\n return OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n}\n\nasync function buildMcpTestRequest(server: MCPServerConfig): Promise<{\n request: ExtendedMCPTestRequest;\n substituted: MCPServerConfig;\n}> {\n const validation = getCredentialValidationForServer(server);\n const substituted = await substituteRedactedMcpCredentials(server);\n const serverSpec = toMcpServer(substituted);\n const timeout = getMcpTestTimeout(server);\n return {\n request: {\n server: serverSpec,\n ...(server.name ? { name: server.name } : {}),\n ...(timeout !== undefined ? { timeout } : {}),\n ...(validation ? { tool_call: validation.toolCall } : {}),\n },\n substituted,\n };\n}\n\nfunction redactMcpTestResponse(\n result: ExtendedMCPTestResponse,\n redactionSources: (MCPServerConfig \| undefined)[],\n): ExtendedMCPTestResponse {\n if (!result.ok) {\n return {\n ...result,\n error: redactMcpSecrets(result.error, ...redactionSources),\n };\n }\n if (result.tool_result) {\n return {\n ...result,\n tool_result: {\n ...result.tool_result,\n text: redactMcpSecrets(result.tool_result.text, ...redactionSources),\n },\n };\n }\n return result;\n}\n\n/*\n Display-boundary post-processing shared by the test and OAuth probes:\n * scrub secrets from error/tool-result text, then let the catalog entry's\n * credential validation turn a failed read-only tool call into a\n * `credentials` failure. The interpretation only runs when the probe tool\n * is actually advertised in `tools` — a server variant that doesn't expose\n * the tool (e.g. a hosted alternative to the stdio server the spec was\n * written for) must degrade to a connectivity-only success, not be\n * misreported as bad credentials.\n /\nfunction finalizeMcpTestResponse(\n result: ExtendedMCPTestResponse,\n validation: CredentialValidation \| undefined,\n redactionSources: (MCPServerConfig \| undefined)[],\n): ExtendedMCPTestResponse {\n const redacted = redactMcpTestResponse(result, redactionSources);\n if (\n redacted.ok &&\n validation &&\n redacted.tool_result &&\n redacted.tools.includes(validation.toolCall.name)\n ) {\n const credentialError = validation.interpret(redacted.tool_result);\n if (credentialError) {\n return {\n ok: false,\n error: credentialError,\n error_kind: \"credentials\",\n };\n }\n }\n return redacted;\n}\n\nfunction getMcpProbeOptions(): { host: string; apiKey?: string } {\n const active = getActiveBackend().backend;\n if (active.kind === \"local\") {\n const { host, apiKey } = getAgentServerClientOptions();\n return { host, ...(apiKey ? { apiKey } : {}) };\n }\n\n const localBackend = getRegisteredBackends().find(\n (backend) => backend.kind === \"local\" && backend.host,\n );\n if (localBackend) {\n return {\n host: localBackend.host.replace(/\\/+$/, \"\"),\n ...(localBackend.apiKey ? { apiKey: localBackend.apiKey } : {}),\n };\n }\n throw new Error(\"OAuth authorization requires a reachable local backend.\");\n}\n\nfunction createMcpProbeClient(): MCPClient {\n const { host, apiKey } = getMcpProbeOptions();\n return new MCPClient({\n host,\n ...(apiKey ? { apiKey } : {}),\n timeout: OAUTH_MCP_TEST_TIMEOUT_SECONDS 1000 + 5000,\n });\n}\n\nfunction oauthStatusToTestResponse(\n status: MCPOAuthStatusResponse,\n): ExtendedMCPTestResponse {\n if (status.status === \"succeeded\") {\n return {\n ok: true,\n tools: status.tools ?? [],\n ...(status.tool_result !== undefined && {\n tool_result: status.tool_result,\n }),\n ...(status.oauth_state !== undefined && {\n oauth_state: status.oauth_state,\n }),\n };\n }\n return {\n ok: false,\n error: status.error \|\| \"OAuth authorization did not complete\",\n error_kind: status.error_kind \|\| \"unknown\",\n };\n}\n\nconst sleep = (ms: number) =>\n new Promise<void>((resolve) => {\n window.setTimeout(resolve, ms);\n });\n\nclass McpService {\n static async testServer(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n // The MCP connectivity-test endpoint lives on the local agent-server. It\n // spawns the configured stdio command / opens an SSE-or-SHTTP connection\n // from that process's environment. Cloud backends don't expose this\n // endpoint to the frontend — the MCP server would actually run inside the\n // cloud sandbox, which isn't reachable from the browser before the user\n // starts a conversation. Calling `getAgentServerClientOptions()` here for\n // a cloud-active session would throw `NoBackendAvailableError(\"No backend\n // is configured.\")` and block the install flow entirely. Short-circuit\n // with a synthetic success so saving proceeds; any real connection\n // failure surfaces inside the conversation runtime instead.\n if (getActiveBackend().backend.kind === \"cloud\") {\n return { ok: true, tools: [] };\n }\n const validation = getCredentialValidationForServer(server);\n const { host, apiKey } = getAgentServerClientOptions();\n const client = new MCPClient({ host, ...(apiKey ? { apiKey } : {}) });\n try {\n const { request, substituted } = await buildMcpTestRequest(server);\n const result = (await client.testServer(\n request as MCPTestRequest,\n )) as ExtendedMCPTestResponse;\n // Redact against both config forms: `server` may hold fresh plaintext\n // input, `substituted` the stored (encrypted) round-trip values.\n return finalizeMcpTestResponse(result, validation, [substituted, server]);\n } finally {\n client.close();\n }\n }\n\n static async startOAuth(\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.startOAuthWithClient(client, server);\n } finally {\n client.close();\n }\n }\n\n static async getOAuthStatus(jobId: string): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.getOAuthStatusWithClient(client, jobId);\n } finally {\n client.close();\n }\n }\n\n static async submitOAuthCallback(\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n const client = createMcpProbeClient();\n try {\n return await McpService.submitOAuthCallbackWithClient(\n client,\n jobId,\n callbackUrl,\n );\n } finally {\n client.close();\n }\n }\n\n static async authorizeOAuth(\n server: MCPServerConfig,\n ): Promise<ExtendedMCPTestResponse> {\n const validation = getCredentialValidationForServer(server);\n const finalize = (result: ExtendedMCPTestResponse) =>\n finalizeMcpTestResponse(result, validation, [server]);\n const popup = window.open(\"about:blank\", \"_blank\");\n const client = createMcpProbeClient();\n try {\n const start = await McpService.startOAuthWithClient(client, server);\n if (!start.ok \|\| !start.job_id \|\| !start.authorization_url) {\n popup?.close();\n return finalize({\n ok: false,\n error: start.error \|\| \"Could not start OAuth authorization\",\n error_kind: start.error_kind \|\| \"unknown\",\n });\n }\n\n let status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n for (let attempt = 0; attempt < 20; attempt += 1) {\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return finalize(oauthStatusToTestResponse(status));\n }\n if (status.callback_ready) break;\n await sleep(250);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n }\n\n if (popup) {\n popup.location.href = start.authorization_url;\n }\n\n for (\n let attempt = 0;\n attempt < OAUTH_MCP_TEST_TIMEOUT_SECONDS;\n attempt += 1\n ) {\n await sleep(1000);\n status = await McpService.getOAuthStatusWithClient(\n client,\n start.job_id,\n );\n if (status.status === \"succeeded\" \|\| status.status === \"failed\") {\n popup?.close();\n return finalize(oauthStatusToTestResponse(status));\n }\n }\n\n return {\n ok: false,\n error: \"OAuth authorization timed out\",\n error_kind: \"timeout\",\n };\n } finally {\n client.close();\n }\n }\n\n private static async startOAuthWithClient(\n client: MCPClient,\n server: MCPServerConfig,\n ): Promise<MCPOAuthStartResponse> {\n const { request } = await buildMcpTestRequest(server);\n return client.startOAuth(request as MCPTestRequest);\n }\n\n private static async getOAuthStatusWithClient(\n client: MCPClient,\n jobId: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.getOAuthStatus(jobId);\n }\n\n private static async submitOAuthCallbackWithClient(\n client: MCPClient,\n jobId: string,\n callbackUrl: string,\n ): Promise<MCPOAuthStatusResponse> {\n return client.submitOAuthCallback(jobId, { callback_url: callbackUrl });\n }\n}\n\nexport default McpService;\n"],"mappings":"qdAqBA,IAAM,EAAiC,IAsBvC,SAAS,EAAY,EAAwC,CAU3D,OATI,EAAO,OAAS,QACX,CACL,UAAW,QACX,QAAS,EAAO,QAChB,GAAI,EAAO,MAAM,QAAU,CAAE,KAAM,EAAO,KAAM,CAChD,GAAI,EAAO,KACT,OAAO,KAAK,EAAO,IAAI,CAAC,OAAS,GAAK,CAAE,IAAK,EAAO,IAAK,CAC5D,CAEI,CACL,UAAW,EAAO,OAAS,MAAQ,MAAQ,OAC3C,IAAK,EAAO,IACZ,GAAI,EAAO,SACT,OAAO,KAAK,EAAO,QAAQ,CAAC,OAAS,GAAK,CAAE,QAAS,EAAO,QAAS,CACvE,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC7C,CAGH,SAAS,EAAkB,EAA6C,CAEtE,OADI,EAAO,MAAM,WAAa,SACvB,EADwC,EAAO,QAIxD,eAAe,EAAoB,EAGhC,CACD,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,EAAc,MAAM,EAAA,iCAAiC,EAAO,CAC5D,EAAa,EAAY,EAAY,CACrC,EAAU,EAAkB,EAAO,CACzC,MAAO,CACL,QAAS,CACP,OAAQ,EACR,GAAI,EAAO,KAAO,CAAE,KAAM,EAAO,KAAM,CAAG,EAAE,CAC5C,GAAI,IAAY,IAAA,GAA0B,EAAE,CAAhB,CAAE,UAAS,CACvC,GAAI,EAAa,CAAE,UAAW,EAAW,SAAU,CAAG,EAAE,CACzD,CACD,cACD,CAGH,SAAS,EACP,EACA,EACyB,CAgBzB,OAfK,EAAO,GAMR,EAAO,YACF,CACL,GAAG,EACH,YAAa,CACX,GAAG,EAAO,YACV,KAAM,EAAA,iBAAiB,EAAO,YAAY,KAAM,GAAG,EAAiB,CACrE,CACF,CAEI,EAdE,CACL,GAAG,EACH,MAAO,EAAA,iBAAiB,EAAO,MAAO,GAAG,EAAiB,CAC3D,CAwBL,SAAS,EACP,EACA,EACA,EACyB,CACzB,IAAM,EAAW,EAAsB,EAAQ,EAAiB,CAChE,GACE,EAAS,IACT,GACA,EAAS,aACT,EAAS,MAAM,SAAS,EAAW,SAAS,KAAK,CACjD,CACA,IAAM,EAAkB,EAAW,UAAU,EAAS,YAAY,CAClE,GAAI,EACF,MAAO,CACL,GAAI,GACJ,MAAO,EACP,WAAY,cACb,CAGL,OAAO,EAGT,SAAS,GAAwD,CAE/D,GADe,EAAA,kBAAkB,CAAC,QACvB,OAAS,QAAS,CAC3B,GAAM,CAAE,OAAM,UAAW,EAAA,6BAA6B,CACtD,MAAO,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAGhD,IAAM,EAAe,EAAA,uBAAuB,CAAC,KAC1C,GAAY,EAAQ,OAAS,SAAW,EAAQ,KAClD,CACD,GAAI,EACF,MAAO,CACL,KAAM,EAAa,KAAK,QAAQ,OAAQ,GAAG,CAC3C,GAAI,EAAa,OAAS,CAAE,OAAQ,EAAa,OAAQ,CAAG,EAAE,CAC/D,CAEH,MAAU,MAAM,0DAA0D,CAG5E,SAAS,GAAkC,CACzC,GAAM,CAAE,OAAM,UAAW,GAAoB,CAC7C,OAAO,IAAI,EAAA,UAAU,CACnB,OACA,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAC5B,QAAS,EAAiC,IAAO,IAClD,CAAC,CAGJ,SAAS,EACP,EACyB,CAazB,OAZI,EAAO,SAAW,YACb,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,EAAE,CACzB,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACD,GAAI,EAAO,cAAgB,IAAA,IAAa,CACtC,YAAa,EAAO,YACrB,CACF,CAEI,CACL,GAAI,GACJ,MAAO,EAAO,OAAS,uCACvB,WAAY,EAAO,YAAc,UAClC,CAGH,IAAM,EAAS,GACb,IAAI,QAAe,GAAY,CAC7B,OAAO,WAAW,EAAS,EAAG,EAC9B,CAEE,EAAN,MAAM,CAAW,CACf,aAAa,WACX,EACkC,CAWlC,GAAI,EAAA,kBAAkB,CAAC,QAAQ,OAAS,QACtC,MAAO,CAAE,GAAI,GAAM,MAAO,EAAE,CAAE,CAEhC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,CAAE,OAAM,UAAW,EAAA,6BAA6B,CAChD,EAAS,IAAI,EAAA,UAAU,CAAE,OAAM,GAAI,EAAS,CAAE,SAAQ,CAAG,EAAE,CAAG,CAAC,CACrE,GAAI,CACF,GAAM,CAAE,UAAS,eAAgB,MAAM,EAAoB,EAAO,CAMlE,OAAO,EAAwB,MALT,EAAO,WAC3B,EACD,CAGsC,EAAY,CAAC,EAAa,EAAO,CAAC,QACjE,CACR,EAAO,OAAO,EAIlB,aAAa,WACX,EACgC,CAChC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,qBAAqB,EAAQ,EAAO,QACpD,CACR,EAAO,OAAO,EAIlB,aAAa,eAAe,EAAgD,CAC1E,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,yBAAyB,EAAQ,EAAM,QACvD,CACR,EAAO,OAAO,EAIlB,aAAa,oBACX,EACA,EACiC,CACjC,IAAM,EAAS,GAAsB,CACrC,GAAI,CACF,OAAO,MAAM,EAAW,8BACtB,EACA,EACA,EACD,QACO,CACR,EAAO,OAAO,EAIlB,aAAa,eACX,EACkC,CAClC,IAAM,EAAa,EAAA,iCAAiC,EAAO,CACrD,EAAY,GAChB,EAAwB,EAAQ,EAAY,CAAC,EAAO,CAAC,CACjD,EAAQ,OAAO,KAAK,cAAe,SAAS,CAC5C,EAAS,GAAsB,CACrC,GAAI,CACF,IAAM,EAAQ,MAAM,EAAW,qBAAqB,EAAQ,EAAO,CACnE,GAAI,CAAC,EAAM,IAAM,CAAC,EAAM,QAAU,CAAC,EAAM,kBAEvC,OADA,GAAO,OAAO,CACP,EAAS,CACd,GAAI,GACJ,MAAO,EAAM,OAAS,sCACtB,WAAY,EAAM,YAAc,UACjC,CAAC,CAGJ,IAAI,EAAS,MAAM,EAAW,yBAC5B,EACA,EAAM,OACP,CACD,IAAK,IAAI,EAAU,EAAG,EAAU,GAAI,GAAW,EAAG,CAChD,GAAI,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAAS,EAA0B,EAAO,CAAC,CAEpD,GAAI,EAAO,eAAgB,MAC3B,MAAM,EAAM,IAAI,CAChB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CAGC,IACF,EAAM,SAAS,KAAO,EAAM,mBAG9B,IACE,IAAI,EAAU,EACd,EAAU,EACV,GAAW,EAOX,GALA,MAAM,EAAM,IAAK,CACjB,EAAS,MAAM,EAAW,yBACxB,EACA,EAAM,OACP,CACG,EAAO,SAAW,aAAe,EAAO,SAAW,SAErD,OADA,GAAO,OAAO,CACP,EAAS,EAA0B,EAAO,CAAC,CAItD,MAAO,CACL,GAAI,GACJ,MAAO,gCACP,WAAY,UACb,QACO,CACR,EAAO,OAAO,EAIlB,aAAqB,qBACnB,EACA,EACgC,CAChC,GAAM,CAAE,WAAY,MAAM,EAAoB,EAAO,CACrD,OAAO,EAAO,WAAW,EAA0B,CAGrD,aAAqB,yBACnB,EACA,EACiC,CACjC,OAAO,EAAO,eAAe,EAAM,CAGrC,aAAqB,8BACnB,EACA,EACA,EACiC,CACjC,OAAO,EAAO,oBAAoB,EAAO,CAAE,aAAc,EAAa,CAAC"}