@openhands/agent-canvas 1.7.1 → 1.8.0

package/dist/utils/mcp-config.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-config.cjs","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":"sFAgBA,IAAM,EAA8B,CAClC,YAAa,CAAC,EACd,cAAe,CAAC,EAChB,cAAe,CAAC,CAClB,EAEa,EAA4B,aAazC,SAAS,EACP,EACA,EACoB,CAEpB,OAD0B,OAAO,IAAI,EAAK,UACnC,EAAc,KAAK,CAAU,EAAI,IAAA,GAAY,CACtD,CAEA,SAAS,EAAS,EAAkD,CAClE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAgB,EACd,EACgC,CAChC,GAAI,CAAC,EAAS,CAAK,EAAG,OAAO,KAE7B,IAAM,EAAa,EAAM,WASzB,OAPE,EAAS,CAAU,GACnB,EAAE,QAAS,IACX,EAAE,YAAa,GAER,EAGF,CACT,CAEA,SAAgB,EACd,EACoC,CACpC,GAAI,CAAC,EAAS,CAAK,EAAG,OACtB,IAAM,EAAU,OAAO,QAAQ,CAAK,EAAE,OACnC,GAAqC,OAAO,EAAM,IAAO,QAC5D,EACA,OAAO,EAAQ,OAAS,EAAI,OAAO,YAAY,CAAO,EAAI,IAAA,EAC5D,CAEA,SAAgB,EAAyB,EAAyB,CAKhE,OAJI,IAAA,aAA4C,GAC5C,MAAM,QAAQ,CAAK,EAAU,EAAM,KAAK,CAAwB,EAChE,EAAS,CAAK,EACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,EACpD,EACT,CAEA,SAAS,EAAc,EAA2C,CAChE,GAAI,CAAC,EAAS,CAAK,EAAG,OACtB,IAAM,EAAuB,CAAC,EAe9B,OAdI,EAAS,EAAM,MAAM,IACvB,EAAM,OAAS,EAAM,QAEnB,EAAS,EAAM,WAAW,IAC5B,EAAM,YAAc,EAAM,cAK1B,OAAO,EAAM,kBAAqB,UAClC,EAAM,mBAAqB,QAE3B,EAAM,iBAAmB,EAAM,kBAE1B,OAAO,KAAK,CAAK,EAAE,OAAS,EAAI,EAAQ,IAAA,EACjD,CAEA,SAAS,EACP,EAC+B,CAC1B,KAAS,CAAK,EACnB,OAAQ,EAAM,SAAd,CACE,IAAK,OACH,MAAO,CAAE,SAAU,MAAO,EAC5B,IAAK,UAEH,OADI,OAAO,EAAM,OAAU,SACpB,CACL,SAAU,UACV,MAAO,EAAM,MACb,GAAI,OAAO,EAAM,aAAgB,UAAY,CAC3C,YAAa,EAAM,WACrB,CACF,EAPqC,OAQvC,IAAK,SAEH,OADI,OAAO,EAAM,OAAU,SACpB,CAAE,SAAU,SAAU,MAAO,EAAM,KAAM,EADX,OAEvC,IAAK,QAOH,OALE,OAAO,EAAM,UAAa,UAC1B,OAAO,EAAM,UAAa,SAE1B,OAEK,CACL,SAAU,QACV,SAAU,EAAM,SAChB,SAAU,EAAM,QAClB,EACF,IAAK,SAAU,CACb,IAAM,EAAU,EAAa,EAAM,OAAO,EAC1C,OAAO,EAAU,CAAE,SAAU,SAAU,SAAQ,EAAI,IAAA,EACrD,CACA,IAAK,SAAU,CACb,IAAM,EAAiB,EAAwB,EAAM,cAAc,EAC7D,EAAQ,EAAc,EAAM,KAAK,EACvC,MAAO,CACL,SAAU,SACV,GAAI,GAAkB,CAAE,gBAAe,EACvC,GAAI,GAAS,CAAE,OAAM,CACvB,CACF,CACA,QACE,MACJ,CACF,CAEA,SAAS,EACP,EAC+B,CAC/B,OAAO,EAA8B,EAAa,IAAI,CACxD,CAEA,SAAS,EAAsB,EAGC,CAC9B,IAAM,EAAsC,CAAC,EAO7C,OANI,EAAM,MAAQ,CAAC,EAAyB,EAAM,IAAI,IACpD,EAAO,KAAO,EAAM,MAElB,EAAM,SAAW,OAAO,KAAK,EAAM,OAAO,EAAE,OAAS,IACvD,EAAO,QAAU,EAAM,SAElB,CACT,CAEA,SAAS,EAAsB,EAAyB,CACtD,MAAO,CACL,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,EACvC,IAAK,EAAO,IACZ,GAAI,EAAO,SAAW,CAAE,QAAS,EAAO,OAAQ,EAChD,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,CACzC,CACF,CAEA,SAAgB,EAAe,EAAuC,CACpE,OAAO,EAAsB,CAAM,CACrC,CAEA,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,GAAG,EAAsB,CAAM,EAC/B,GAAI,EAAO,UAAY,IAAA,IAAa,CAAE,QAAS,EAAO,OAAQ,CAChE,CACF,CAEA,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,EACvC,GAAI,EAAO,KAAO,CAAE,IAAK,EAAO,GAAI,CACtC,CACF,CAEA,SAAS,EACP,EACqC,CACrC,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,OACzC,IAAM,EAAS,EACf,GAAI,EAAO,OAAS,QAAS,OAC7B,IAAM,EAA0C,CAAE,KAAM,OAAQ,EAqChE,OAnCE,EAAO,qBAAuB,QAC9B,EAAO,qBAAuB,sBAC9B,EAAO,qBAAuB,uBAC9B,EAAO,qBAAuB,qBAE9B,EAAe,mBAAqB,EAAO,qBAEzC,OAAO,EAAO,QAAW,UAG3B,MAAM,QAAQ,EAAO,MAAM,GAC3B,EAAO,OAAO,MAAO,GAAU,OAAO,GAAU,QAAQ,KAHxD,EAAe,OAAS,EAAO,QAO7B,OAAO,EAAO,aAAgB,WAChC,EAAe,YAAc,EAAO,aAElC,OAAO,EAAO,qBAAwB,WACxC,EAAe,oBAAsB,EAAO,qBAE1C,OAAO,EAAO,WAAc,WAC9B,EAAe,UAAY,EAAO,WAEhC,OAAO,EAAO,eAAkB,WAClC,EAAe,cAAgB,EAAO,eAGtC,EAAO,4BACP,OAAO,EAAO,4BAA+B,UAC7C,CAAC,MAAM,QAAQ,EAAO,0BAA0B,IAEhD,EAAe,2BACb,EAAO,4BAEJ,CACT,CAMA,SAAgB,EAAe,EAA2B,CACxD,IAAM,EAAY,EAAmB,CAAK,EAC1C,GAAI,CAAC,EACH,MAAO,CAAE,GAAG,CAAiB,EAG/B,IAAM,EAAwC,CAAC,EACzC,EAAiC,CAAC,EAClC,EAA4C,CAAC,EAEnD,IAAK,GAAM,CAAC,EAAY,KAAiB,OAAO,QAAQ,CAAS,EAAG,CAClE,GAAI,CAAC,EAAS,CAAY,EAAG,SAE7B,IAAM,EAAM,EAAa,IAEzB,GAAI,EAAK,CACP,IAAM,EAAY,EAAa,UACzB,EAAO,EAA+B,CAAY,EAClD,EAAU,EAAa,EAAa,OAAO,EAEjD,GAAI,IAAc,MAAO,CACvB,IAAM,EAAO,EAAoB,EAAY,KAAK,EAC5C,EAAuB,CAAE,KAAI,EAC/B,IAAM,EAAO,KAAO,GACpB,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC9B,EAAW,KAAK,CAAM,CACxB,KAAO,CACL,IAAM,EAAO,EAAoB,EAAY,OAAO,EAC9C,EAAyB,CAAE,KAAI,EACjC,IAAM,EAAO,KAAO,GACpB,EAAa,SAAW,OAC1B,EAAO,QAAU,EAAa,SAE5B,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC9B,EAAa,KAAK,CAAM,CAC1B,CACF,KAAO,CACL,GAAI,OAAO,EAAa,SAAY,SAAU,SAC9C,IAAM,EAA8B,CAClC,KAAM,EACN,QAAS,EAAa,OACxB,EACI,EAAa,OACf,EAAY,KAAO,EAAa,MAE9B,EAAa,MACf,EAAY,IAAM,EAAa,KAEjC,EAAa,KAAK,CAAW,CAC/B,CACF,CAEA,MAAO,CACL,YAAa,EACb,cAAe,EACf,cAAe,CACjB,CACF,CAcA,SAAgB,EAAe,EAAwC,CACrE,IAAM,EAA0B,CAAC,EAE3B,EAAW,GAAyB,CACxC,IAAM,EAAW,EAAA,gBAAgB,CAAI,EACrC,GAAI,EAAE,KAAY,GAAY,OAAO,EACrC,IAAI,EAAI,EACR,KAAO,GAAG,EAAS,GAAG,MAAO,GAAW,GAAK,EAC7C,MAAO,GAAG,EAAS,GAAG,GACxB,EAEA,IAAK,IAAM,KAAS,EAAO,YAAa,CACtC,IAAM,EAA6B,CAAC,EAChC,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,CAAK,CAAC,GAEpD,EAAO,UAAY,MACnB,EAAU,EAAQ,GAAQ,KAAK,GAAK,CACtC,CAEA,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CAAE,UAAW,MAAO,EACnD,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,CAAK,CAAC,EAC9C,EAAM,SAAW,OAAM,EAAO,QAAU,EAAM,UAEpD,EAAU,EAAQ,GAAQ,OAAO,GAAK,CACxC,CAEA,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CACjC,QAAS,EAAM,OACjB,EACI,EAAM,OAAM,EAAO,KAAO,EAAM,MAChC,EAAM,MAAK,EAAO,IAAM,EAAM,KAClC,EAAU,EAAQ,EAAM,MAAQ,OAAO,GAAK,CAC9C,CAEA,OAAO,OAAO,KAAK,CAAS,EAAE,OAAS,EAAI,EAAY,IACzD"}
+{"version":3,"file":"mcp-config.cjs","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\n/**\n * Only an explicit ``false`` is carried. Every mutation round-trips the whole\n * server map through these converters, so preserving the flag here is what\n * stops adding or deleting one server from silently re-enabling another.\n */\nfunction disabledField(server: { enabled?: boolean }) {\n  return server.enabled === false ? { enabled: false as const } : {};\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n    ...disabledField(server),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n    ...disabledField(server),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    // The SDK omits ``enabled`` while it holds its default (true), so only an\n    // explicit ``false`` marks a server as switched off.\n    const disabled = serverConfig.enabled === false;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        if (disabled) server.enabled = false;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        if (disabled) server.enabled = false;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      if (disabled) stdioServer.enabled = false;\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n *\n * ``enabled`` is only emitted when a server is switched off — the SDK defaults\n * it to true. Omitting it is what *clears* a previously persisted\n * ``enabled: false``, and that only works because ``saveSettings`` pre-clears\n * ``mcp_config`` to null before every write (see\n * ``settings-service.api.ts``), turning the backend's RFC 7386 merge into a\n * full replace. If that pre-clear is ever removed, re-enabling a server\n * becomes a silent no-op.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    Object.assign(server, disabledField(entry));\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":"sFAgBA,IAAM,EAA8B,CAClC,YAAa,CAAC,EACd,cAAe,CAAC,EAChB,cAAe,CAAC,CAClB,EAEa,EAA4B,aAazC,SAAS,EACP,EACA,EACoB,CAEpB,OAD0B,OAAO,IAAI,EAAK,UACnC,EAAc,KAAK,CAAU,EAAI,IAAA,GAAY,CACtD,CAEA,SAAS,EAAS,EAAkD,CAClE,MAAO,CAAC,CAAC,GAAS,OAAO,GAAU,UAAY,CAAC,MAAM,QAAQ,CAAK,CACrE,CAEA,SAAgB,EACd,EACgC,CAChC,GAAI,CAAC,EAAS,CAAK,EAAG,OAAO,KAE7B,IAAM,EAAa,EAAM,WASzB,OAPE,EAAS,CAAU,GACnB,EAAE,QAAS,IACX,EAAE,YAAa,GAER,EAGF,CACT,CAEA,SAAgB,EACd,EACoC,CACpC,GAAI,CAAC,EAAS,CAAK,EAAG,OACtB,IAAM,EAAU,OAAO,QAAQ,CAAK,EAAE,OACnC,GAAqC,OAAO,EAAM,IAAO,QAC5D,EACA,OAAO,EAAQ,OAAS,EAAI,OAAO,YAAY,CAAO,EAAI,IAAA,EAC5D,CAEA,SAAgB,EAAyB,EAAyB,CAKhE,OAJI,IAAA,aAA4C,GAC5C,MAAM,QAAQ,CAAK,EAAU,EAAM,KAAK,CAAwB,EAChE,EAAS,CAAK,EACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,EACpD,EACT,CAEA,SAAS,EAAc,EAA2C,CAChE,GAAI,CAAC,EAAS,CAAK,EAAG,OACtB,IAAM,EAAuB,CAAC,EAe9B,OAdI,EAAS,EAAM,MAAM,IACvB,EAAM,OAAS,EAAM,QAEnB,EAAS,EAAM,WAAW,IAC5B,EAAM,YAAc,EAAM,cAK1B,OAAO,EAAM,kBAAqB,UAClC,EAAM,mBAAqB,QAE3B,EAAM,iBAAmB,EAAM,kBAE1B,OAAO,KAAK,CAAK,EAAE,OAAS,EAAI,EAAQ,IAAA,EACjD,CAEA,SAAS,EACP,EAC+B,CAC1B,KAAS,CAAK,EACnB,OAAQ,EAAM,SAAd,CACE,IAAK,OACH,MAAO,CAAE,SAAU,MAAO,EAC5B,IAAK,UAEH,OADI,OAAO,EAAM,OAAU,SACpB,CACL,SAAU,UACV,MAAO,EAAM,MACb,GAAI,OAAO,EAAM,aAAgB,UAAY,CAC3C,YAAa,EAAM,WACrB,CACF,EAPqC,OAQvC,IAAK,SAEH,OADI,OAAO,EAAM,OAAU,SACpB,CAAE,SAAU,SAAU,MAAO,EAAM,KAAM,EADX,OAEvC,IAAK,QAOH,OALE,OAAO,EAAM,UAAa,UAC1B,OAAO,EAAM,UAAa,SAE1B,OAEK,CACL,SAAU,QACV,SAAU,EAAM,SAChB,SAAU,EAAM,QAClB,EACF,IAAK,SAAU,CACb,IAAM,EAAU,EAAa,EAAM,OAAO,EAC1C,OAAO,EAAU,CAAE,SAAU,SAAU,SAAQ,EAAI,IAAA,EACrD,CACA,IAAK,SAAU,CACb,IAAM,EAAiB,EAAwB,EAAM,cAAc,EAC7D,EAAQ,EAAc,EAAM,KAAK,EACvC,MAAO,CACL,SAAU,SACV,GAAI,GAAkB,CAAE,gBAAe,EACvC,GAAI,GAAS,CAAE,OAAM,CACvB,CACF,CACA,QACE,MACJ,CACF,CAEA,SAAS,EACP,EAC+B,CAC/B,OAAO,EAA8B,EAAa,IAAI,CACxD,CAEA,SAAS,EAAsB,EAGC,CAC9B,IAAM,EAAsC,CAAC,EAO7C,OANI,EAAM,MAAQ,CAAC,EAAyB,EAAM,IAAI,IACpD,EAAO,KAAO,EAAM,MAElB,EAAM,SAAW,OAAO,KAAK,EAAM,OAAO,EAAE,OAAS,IACvD,EAAO,QAAU,EAAM,SAElB,CACT,CAOA,SAAS,EAAc,EAA+B,CACpD,OAAO,EAAO,UAAY,GAAQ,CAAE,QAAS,EAAe,EAAI,CAAC,CACnE,CAEA,SAAS,EAAsB,EAAyB,CACtD,MAAO,CACL,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,EACvC,IAAK,EAAO,IACZ,GAAI,EAAO,SAAW,CAAE,QAAS,EAAO,OAAQ,EAChD,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,EACvC,GAAG,EAAc,CAAM,CACzB,CACF,CAEA,SAAgB,EAAe,EAAuC,CACpE,OAAO,EAAsB,CAAM,CACrC,CAEA,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,GAAG,EAAsB,CAAM,EAC/B,GAAI,EAAO,UAAY,IAAA,IAAa,CAAE,QAAS,EAAO,OAAQ,CAChE,CACF,CAEA,SAAgB,EAAiB,EAAyC,CACxE,MAAO,CACL,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,GAAI,EAAO,MAAQ,CAAE,KAAM,EAAO,IAAK,EACvC,GAAI,EAAO,KAAO,CAAE,IAAK,EAAO,GAAI,EACpC,GAAG,EAAc,CAAM,CACzB,CACF,CAEA,SAAS,EACP,EACqC,CACrC,GAAI,CAAC,GAAS,OAAO,GAAU,SAAU,OACzC,IAAM,EAAS,EACf,GAAI,EAAO,OAAS,QAAS,OAC7B,IAAM,EAA0C,CAAE,KAAM,OAAQ,EAqChE,OAnCE,EAAO,qBAAuB,QAC9B,EAAO,qBAAuB,sBAC9B,EAAO,qBAAuB,uBAC9B,EAAO,qBAAuB,qBAE9B,EAAe,mBAAqB,EAAO,qBAEzC,OAAO,EAAO,QAAW,UAG3B,MAAM,QAAQ,EAAO,MAAM,GAC3B,EAAO,OAAO,MAAO,GAAU,OAAO,GAAU,QAAQ,KAHxD,EAAe,OAAS,EAAO,QAO7B,OAAO,EAAO,aAAgB,WAChC,EAAe,YAAc,EAAO,aAElC,OAAO,EAAO,qBAAwB,WACxC,EAAe,oBAAsB,EAAO,qBAE1C,OAAO,EAAO,WAAc,WAC9B,EAAe,UAAY,EAAO,WAEhC,OAAO,EAAO,eAAkB,WAClC,EAAe,cAAgB,EAAO,eAGtC,EAAO,4BACP,OAAO,EAAO,4BAA+B,UAC7C,CAAC,MAAM,QAAQ,EAAO,0BAA0B,IAEhD,EAAe,2BACb,EAAO,4BAEJ,CACT,CAMA,SAAgB,EAAe,EAA2B,CACxD,IAAM,EAAY,EAAmB,CAAK,EAC1C,GAAI,CAAC,EACH,MAAO,CAAE,GAAG,CAAiB,EAG/B,IAAM,EAAwC,CAAC,EACzC,EAAiC,CAAC,EAClC,EAA4C,CAAC,EAEnD,IAAK,GAAM,CAAC,EAAY,KAAiB,OAAO,QAAQ,CAAS,EAAG,CAClE,GAAI,CAAC,EAAS,CAAY,EAAG,SAE7B,IAAM,EAAM,EAAa,IAInB,EAAW,EAAa,UAAY,GAE1C,GAAI,EAAK,CACP,IAAM,EAAY,EAAa,UACzB,EAAO,EAA+B,CAAY,EAClD,EAAU,EAAa,EAAa,OAAO,EAEjD,GAAI,IAAc,MAAO,CACvB,IAAM,EAAO,EAAoB,EAAY,KAAK,EAC5C,EAAuB,CAAE,KAAI,EAC/B,IAAM,EAAO,KAAO,GACpB,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC1B,IAAU,EAAO,QAAU,IAC/B,EAAW,KAAK,CAAM,CACxB,KAAO,CACL,IAAM,EAAO,EAAoB,EAAY,OAAO,EAC9C,EAAyB,CAAE,KAAI,EACjC,IAAM,EAAO,KAAO,GACpB,EAAa,SAAW,OAC1B,EAAO,QAAU,EAAa,SAE5B,IAAM,EAAO,KAAO,GACpB,IAAS,EAAO,QAAU,GAC1B,IAAU,EAAO,QAAU,IAC/B,EAAa,KAAK,CAAM,CAC1B,CACF,KAAO,CACL,GAAI,OAAO,EAAa,SAAY,SAAU,SAC9C,IAAM,EAA8B,CAClC,KAAM,EACN,QAAS,EAAa,OACxB,EACI,EAAa,OACf,EAAY,KAAO,EAAa,MAE9B,EAAa,MACf,EAAY,IAAM,EAAa,KAE7B,IAAU,EAAY,QAAU,IACpC,EAAa,KAAK,CAAW,CAC/B,CACF,CAEA,MAAO,CACL,YAAa,EACb,cAAe,EACf,cAAe,CACjB,CACF,CAsBA,SAAgB,EAAe,EAAwC,CACrE,IAAM,EAA0B,CAAC,EAE3B,EAAW,GAAyB,CACxC,IAAM,EAAW,EAAA,gBAAgB,CAAI,EACrC,GAAI,EAAE,KAAY,GAAY,OAAO,EACrC,IAAI,EAAI,EACR,KAAO,GAAG,EAAS,GAAG,MAAO,GAAW,GAAK,EAC7C,MAAO,GAAG,EAAS,GAAG,GACxB,EAEA,IAAK,IAAM,KAAS,EAAO,YAAa,CACtC,IAAM,EAA6B,CAAC,EAChC,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,CAAK,EAAG,EAAc,CAAK,CAAC,GAE1E,EAAO,UAAY,MACnB,EAAU,EAAQ,GAAQ,KAAK,GAAK,CACtC,CAEA,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CAAE,UAAW,MAAO,EACnD,EACA,OAAO,GAAU,SACnB,EAAO,IAAM,GAEb,EAAO,EAAM,KACb,EAAO,IAAM,EAAM,IACnB,OAAO,OAAO,EAAQ,EAAsB,CAAK,EAAG,EAAc,CAAK,CAAC,EACpE,EAAM,SAAW,OAAM,EAAO,QAAU,EAAM,UAEpD,EAAU,EAAQ,GAAQ,OAAO,GAAK,CACxC,CAEA,IAAK,IAAM,KAAS,EAAO,cAAe,CACxC,IAAM,EAA6B,CACjC,QAAS,EAAM,OACjB,EACI,EAAM,OAAM,EAAO,KAAO,EAAM,MAChC,EAAM,MAAK,EAAO,IAAM,EAAM,KAClC,OAAO,OAAO,EAAQ,EAAc,CAAK,CAAC,EAC1C,EAAU,EAAQ,EAAM,MAAQ,OAAO,GAAK,CAC9C,CAEA,OAAO,OAAO,KAAK,CAAS,EAAE,OAAS,EAAI,EAAY,IACzD"}

package/dist/utils/mcp-config.d.ts

@@ -26,6 +26,14 @@ export declare function parseMcpConfig(value: unknown): MCPConfig;
  * persisted ahead of it, and shift the suffix on every save as the count
  * of other server types changes. With per-base collision suffixing,
  * unrelated entries keep their human-meaningful names stable across edits.
+ *
+ * ``enabled`` is only emitted when a server is switched off — the SDK defaults
+ * it to true. Omitting it is what *clears* a previously persisted
+ * ``enabled: false``, and that only works because ``saveSettings`` pre-clears
+ * ``mcp_config`` to null before every write (see
+ * ``settings-service.api.ts``), turning the backend's RFC 7386 merge into a
+ * full replace. If that pre-clear is ever removed, re-enabling a server
+ * becomes a silent no-op.
  */
 export declare function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null;
 export {};

package/dist/utils/mcp-config.js

@@ -54,7 +54,7 @@ function l(e) {
 			} : void 0;
 		}
 		case "oauth2": {
-			let t = g(e.authentication), n = c(e.state);
+			let t = _(e.authentication), n = c(e.state);
 			return {
 				strategy: "oauth2",
 				...t && { authentication: t },
@@ -72,52 +72,57 @@ function d(e) {
 	return e.auth && !s(e.auth) && (t.auth = e.auth), e.headers && Object.keys(e.headers).length > 0 && (t.headers = e.headers), t;
 }
 function f(e) {
+	return e.enabled === !1 ? { enabled: !1 } : {};
+}
+function p(e) {
 	return {
 		...e.name && { name: e.name },
 		url: e.url,
 		...e.headers && { headers: e.headers },
-		...e.auth && { auth: e.auth }
+		...e.auth && { auth: e.auth },
+		...f(e)
 	};
 }
-function p(e) {
-	return f(e);
-}
 function m(e) {
+	return p(e);
+}
+function h(e) {
 	return {
-		...f(e),
+		...p(e),
 		...e.timeout !== void 0 && { timeout: e.timeout }
 	};
 }
-function h(e) {
+function g(e) {
 	return {
 		name: e.name,
 		command: e.command,
 		...e.args && { args: e.args },
-		...e.env && { env: e.env }
+		...e.env && { env: e.env },
+		...f(e)
 	};
 }
-function g(e) {
+function _(e) {
 	if (!e || typeof e != "object") return;
 	let t = e;
 	if (t.type !== "oauth") return;
 	let n = { type: "oauth" };
 	return (t.client_auth_method === "none" || t.client_auth_method === "client_secret_post" || t.client_auth_method === "client_secret_basic" || t.client_auth_method === "private_key_jwt") && (n.client_auth_method = t.client_auth_method), (typeof t.scopes == "string" || Array.isArray(t.scopes) && t.scopes.every((e) => typeof e == "string")) && (n.scopes = t.scopes), typeof t.client_name == "string" && (n.client_name = t.client_name), typeof t.client_metadata_url == "string" && (n.client_metadata_url = t.client_metadata_url), typeof t.client_id == "string" && (n.client_id = t.client_id), typeof t.client_secret == "string" && (n.client_secret = t.client_secret), t.additional_client_metadata && typeof t.additional_client_metadata == "object" && !Array.isArray(t.additional_client_metadata) && (n.additional_client_metadata = t.additional_client_metadata), n;
 }
-function _(e) {
+function v(e) {
 	let n = a(e);
 	if (!n) return { ...t };
 	let s = [], c = [], l = [];
 	for (let [e, t] of Object.entries(n)) {
 		if (!i(t)) continue;
-		let n = t.url;
+		let n = t.url, a = t.enabled === !1;
 		if (n) {
-			let i = t.transport, a = u(t), c = o(t.headers);
+			let i = t.transport, c = u(t), d = o(t.headers);
 			if (i === "sse") {
 				let t = r(e, "sse"), i = { url: n };
-				t && (i.name = t), a && (i.auth = a), c && (i.headers = c), s.push(i);
+				t && (i.name = t), c && (i.auth = c), d && (i.headers = d), a && (i.enabled = !1), s.push(i);
 			} else {
 				let i = r(e, "shttp"), o = { url: n };
-				i && (o.name = i), t.timeout != null && (o.timeout = t.timeout), a && (o.auth = a), c && (o.headers = c), l.push(o);
+				i && (o.name = i), t.timeout != null && (o.timeout = t.timeout), c && (o.auth = c), d && (o.headers = d), a && (o.enabled = !1), l.push(o);
 			}
 		} else {
 			if (typeof t.command != "string") continue;
@@ -125,7 +130,7 @@ function _(e) {
 				name: e,
 				command: t.command
 			};
-			t.args && (n.args = t.args), t.env && (n.env = t.env), c.push(n);
+			t.args && (n.args = t.args), t.env && (n.env = t.env), a && (n.enabled = !1), c.push(n);
 		}
 	}
 	return {
@@ -134,7 +139,7 @@ function _(e) {
 		shttp_servers: l
 	};
 }
-function v(t) {
+function y(t) {
 	let n = {}, r = (t) => {
 		let r = e(t);
 		if (!(r in n)) return r;
@@ -144,19 +149,19 @@ function v(t) {
 	};
 	for (let e of t.sse_servers) {
 		let t = {}, i;
-		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e))), t.transport = "sse", n[r(i || "sse")] = t;
+		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e), f(e))), t.transport = "sse", n[r(i || "sse")] = t;
 	}
 	for (let e of t.shttp_servers) {
 		let t = { transport: "http" }, i;
-		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e)), e.timeout != null && (t.timeout = e.timeout)), n[r(i || "shttp")] = t;
+		typeof e == "string" ? t.url = e : (i = e.name, t.url = e.url, Object.assign(t, d(e), f(e)), e.timeout != null && (t.timeout = e.timeout)), n[r(i || "shttp")] = t;
 	}
 	for (let e of t.stdio_servers) {
 		let t = { command: e.command };
-		e.args && (t.args = e.args), e.env && (t.env = e.env), n[r(e.name || "stdio")] = t;
+		e.args && (t.args = e.args), e.env && (t.env = e.env), Object.assign(t, f(e)), n[r(e.name || "stdio")] = t;
 	}
 	return Object.keys(n).length > 0 ? n : null;
 }
 //#endregion
-export { n as REDACTED_MCP_SECRET_VALUE, a as getSdkMcpServerMap, s as hasRedactedMcpSecretLeaf, _ as parseMcpConfig, o as stringRecord, m as toMcpShttpServer, p as toMcpSseServer, h as toMcpStdioServer, v as toSdkMcpConfig };
+export { n as REDACTED_MCP_SECRET_VALUE, a as getSdkMcpServerMap, s as hasRedactedMcpSecretLeaf, v as parseMcpConfig, o as stringRecord, h as toMcpShttpServer, m as toMcpSseServer, g as toMcpStdioServer, y as toSdkMcpConfig };
 
 //# sourceMappingURL=mcp-config.js.map

package/dist/utils/mcp-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":";;AAgBA,IAAM,IAA8B;CAClC,aAAa,CAAC;CACd,eAAe,CAAC;CAChB,eAAe,CAAC;AAClB,GAEa,IAA4B;AAazC,SAAS,EACP,GACA,GACoB;CAEpB,OAD0B,OAAO,IAAI,EAAK,UACnC,EAAc,KAAK,CAAU,IAAI,KAAA,IAAY;AACtD;AAEA,SAAS,EAAS,GAAkD;CAClE,OAAO,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK;AACrE;AAEA,SAAgB,EACd,GACgC;CAChC,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAM;CASzB,OAPE,EAAS,CAAU,KACnB,EAAE,SAAS,MACX,EAAE,aAAa,KAER,IAGF;AACT;AAEA,SAAgB,EACd,GACoC;CACpC,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAU,OAAO,QAAQ,CAAK,EAAE,QACnC,MAAqC,OAAO,EAAM,MAAO,QAC5D;CACA,OAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,CAAO,IAAI,KAAA;AAC5D;AAEA,SAAgB,EAAyB,GAAyB;CAKhE,OAJI,MAAA,eAA4C,KAC5C,MAAM,QAAQ,CAAK,IAAU,EAAM,KAAK,CAAwB,IAChE,EAAS,CAAK,IACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,IACpD;AACT;AAEA,SAAS,EAAc,GAA2C;CAChE,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAuB,CAAC;CAe9B,OAdI,EAAS,EAAM,MAAM,MACvB,EAAM,SAAS,EAAM,SAEnB,EAAS,EAAM,WAAW,MAC5B,EAAM,cAAc,EAAM,eAK1B,OAAO,EAAM,oBAAqB,YAClC,EAAM,qBAAqB,UAE3B,EAAM,mBAAmB,EAAM,mBAE1B,OAAO,KAAK,CAAK,EAAE,SAAS,IAAI,IAAQ,KAAA;AACjD;AAEA,SAAS,EACP,GAC+B;CAC1B,MAAS,CAAK,GACnB,QAAQ,EAAM,UAAd;EACE,KAAK,QACH,OAAO,EAAE,UAAU,OAAO;EAC5B,KAAK,WAEH,OADI,OAAO,EAAM,SAAU,WACpB;GACL,UAAU;GACV,OAAO,EAAM;GACb,GAAI,OAAO,EAAM,eAAgB,YAAY,EAC3C,aAAa,EAAM,YACrB;EACF,IAPqC;EAQvC,KAAK,UAEH,OADI,OAAO,EAAM,SAAU,WACpB;GAAE,UAAU;GAAU,OAAO,EAAM;EAAM,IADX;EAEvC,KAAK,SAOH,OALE,OAAO,EAAM,YAAa,YAC1B,OAAO,EAAM,YAAa,WAE1B,SAEK;GACL,UAAU;GACV,UAAU,EAAM;GAChB,UAAU,EAAM;EAClB;EACF,KAAK,UAAU;GACb,IAAM,IAAU,EAAa,EAAM,OAAO;GAC1C,OAAO,IAAU;IAAE,UAAU;IAAU;GAAQ,IAAI,KAAA;EACrD;EACA,KAAK,UAAU;GACb,IAAM,IAAiB,EAAwB,EAAM,cAAc,GAC7D,IAAQ,EAAc,EAAM,KAAK;GACvC,OAAO;IACL,UAAU;IACV,GAAI,KAAkB,EAAE,kBAAe;IACvC,GAAI,KAAS,EAAE,SAAM;GACvB;EACF;EACA,SACE;CACJ;AACF;AAEA,SAAS,EACP,GAC+B;CAC/B,OAAO,EAA8B,EAAa,IAAI;AACxD;AAEA,SAAS,EAAsB,GAGC;CAC9B,IAAM,IAAsC,CAAC;CAO7C,OANI,EAAM,QAAQ,CAAC,EAAyB,EAAM,IAAI,MACpD,EAAO,OAAO,EAAM,OAElB,EAAM,WAAW,OAAO,KAAK,EAAM,OAAO,EAAE,SAAS,MACvD,EAAO,UAAU,EAAM,UAElB;AACT;AAEA,SAAS,EAAsB,GAAyB;CACtD,OAAO;EACL,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,KAAK,EAAO;EACZ,GAAI,EAAO,WAAW,EAAE,SAAS,EAAO,QAAQ;EAChD,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;CACzC;AACF;AAEA,SAAgB,EAAe,GAAuC;CACpE,OAAO,EAAsB,CAAM;AACrC;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,GAAG,EAAsB,CAAM;EAC/B,GAAI,EAAO,YAAY,KAAA,KAAa,EAAE,SAAS,EAAO,QAAQ;CAChE;AACF;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,MAAM,EAAO;EACb,SAAS,EAAO;EAChB,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,GAAI,EAAO,OAAO,EAAE,KAAK,EAAO,IAAI;CACtC;AACF;AAEA,SAAS,EACP,GACqC;CACrC,IAAI,CAAC,KAAS,OAAO,KAAU,UAAU;CACzC,IAAM,IAAS;CACf,IAAI,EAAO,SAAS,SAAS;CAC7B,IAAM,IAA0C,EAAE,MAAM,QAAQ;CAqChE,QAnCE,EAAO,uBAAuB,UAC9B,EAAO,uBAAuB,wBAC9B,EAAO,uBAAuB,yBAC9B,EAAO,uBAAuB,uBAE9B,EAAe,qBAAqB,EAAO,sBAEzC,OAAO,EAAO,UAAW,YAG3B,MAAM,QAAQ,EAAO,MAAM,KAC3B,EAAO,OAAO,OAAO,MAAU,OAAO,KAAU,QAAQ,OAHxD,EAAe,SAAS,EAAO,SAO7B,OAAO,EAAO,eAAgB,aAChC,EAAe,cAAc,EAAO,cAElC,OAAO,EAAO,uBAAwB,aACxC,EAAe,sBAAsB,EAAO,sBAE1C,OAAO,EAAO,aAAc,aAC9B,EAAe,YAAY,EAAO,YAEhC,OAAO,EAAO,iBAAkB,aAClC,EAAe,gBAAgB,EAAO,gBAGtC,EAAO,8BACP,OAAO,EAAO,8BAA+B,YAC7C,CAAC,MAAM,QAAQ,EAAO,0BAA0B,MAEhD,EAAe,6BACb,EAAO,6BAEJ;AACT;AAMA,SAAgB,EAAe,GAA2B;CACxD,IAAM,IAAY,EAAmB,CAAK;CAC1C,IAAI,CAAC,GACH,OAAO,EAAE,GAAG,EAAiB;CAG/B,IAAM,IAAwC,CAAC,GACzC,IAAiC,CAAC,GAClC,IAA4C,CAAC;CAEnD,KAAK,IAAM,CAAC,GAAY,MAAiB,OAAO,QAAQ,CAAS,GAAG;EAClE,IAAI,CAAC,EAAS,CAAY,GAAG;EAE7B,IAAM,IAAM,EAAa;EAEzB,IAAI,GAAK;GACP,IAAM,IAAY,EAAa,WACzB,IAAO,EAA+B,CAAY,GAClD,IAAU,EAAa,EAAa,OAAO;GAEjD,IAAI,MAAc,OAAO;IACvB,IAAM,IAAO,EAAoB,GAAY,KAAK,GAC5C,IAAuB,EAAE,OAAI;IAInC,AAHI,MAAM,EAAO,OAAO,IACpB,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC9B,EAAW,KAAK,CAAM;GACxB,OAAO;IACL,IAAM,IAAO,EAAoB,GAAY,OAAO,GAC9C,IAAyB,EAAE,OAAI;IAOrC,AANI,MAAM,EAAO,OAAO,IACpB,EAAa,WAAW,SAC1B,EAAO,UAAU,EAAa,UAE5B,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC9B,EAAa,KAAK,CAAM;GAC1B;EACF,OAAO;GACL,IAAI,OAAO,EAAa,WAAY,UAAU;GAC9C,IAAM,IAA8B;IAClC,MAAM;IACN,SAAS,EAAa;GACxB;GAOA,AANI,EAAa,SACf,EAAY,OAAO,EAAa,OAE9B,EAAa,QACf,EAAY,MAAM,EAAa,MAEjC,EAAa,KAAK,CAAW;EAC/B;CACF;CAEA,OAAO;EACL,aAAa;EACb,eAAe;EACf,eAAe;CACjB;AACF;AAcA,SAAgB,EAAe,GAAwC;CACrE,IAAM,IAA0B,CAAC,GAE3B,KAAW,MAAyB;EACxC,IAAM,IAAW,EAAgB,CAAI;EACrC,IAAI,EAAE,KAAY,IAAY,OAAO;EACrC,IAAI,IAAI;EACR,OAAO,GAAG,EAAS,GAAG,OAAO,IAAW,KAAK;EAC7C,OAAO,GAAG,EAAS,GAAG;CACxB;CAEA,KAAK,IAAM,KAAS,EAAO,aAAa;EACtC,IAAM,IAA6B,CAAC,GAChC;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,CAAC,IAEpD,EAAO,YAAY,OACnB,EAAU,EAAQ,KAAQ,KAAK,KAAK;CACtC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EAAE,WAAW,OAAO,GACnD;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,CAAC,GAC9C,EAAM,WAAW,SAAM,EAAO,UAAU,EAAM,WAEpD,EAAU,EAAQ,KAAQ,OAAO,KAAK;CACxC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EACjC,SAAS,EAAM,QACjB;EAGA,AAFI,EAAM,SAAM,EAAO,OAAO,EAAM,OAChC,EAAM,QAAK,EAAO,MAAM,EAAM,MAClC,EAAU,EAAQ,EAAM,QAAQ,OAAO,KAAK;CAC9C;CAEA,OAAO,OAAO,KAAK,CAAS,EAAE,SAAS,IAAI,IAAY;AACzD"}
+{"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n  MCPConfig,\n  MCPSSEServer,\n  MCPSHTTPServer,\n  MCPStdioServer,\n  SettingsValue,\n} from \"#/types/settings\";\nimport type {\n  MCPAuthCredential,\n  MCPAuthenticationConfig,\n  MCPJsonValue,\n  MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n  sse_servers: [],\n  stdio_servers: [],\n  shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"**********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue | MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/**\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n */\nfunction userGivenServerName(\n  serverName: string,\n  base: \"sse\" | \"shttp\",\n): string | undefined {\n  const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n  return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n  value: unknown,\n): Record<string, unknown> | null {\n  if (!isRecord(value)) return null;\n\n  const mcpServers = value.mcpServers;\n  if (\n    isRecord(mcpServers) &&\n    !(\"url\" in mcpServers) &&\n    !(\"command\" in mcpServers)\n  ) {\n    return mcpServers;\n  }\n\n  return value;\n}\n\nexport function stringRecord(\n  value: unknown,\n): Record<string, string> | undefined {\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === \"string\",\n  );\n  return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n  if (value === REDACTED_MCP_SECRET_VALUE) return true;\n  if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n  if (isRecord(value))\n    return Object.values(value).some(hasRedactedMcpSecretLeaf);\n  return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState | undefined {\n  if (!isRecord(value)) return undefined;\n  const state: MCPOAuthState = {};\n  if (isRecord(value.tokens)) {\n    state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n  }\n  if (isRecord(value.client_info)) {\n    state.client_info = value.client_info as NonNullable<\n      MCPOAuthState[\"client_info\"]\n    >;\n  }\n  if (\n    typeof value.token_expires_at === \"number\" ||\n    value.token_expires_at === null\n  ) {\n    state.token_expires_at = value.token_expires_at;\n  }\n  return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n  value: unknown,\n): MCPAuthCredential | undefined {\n  if (!isRecord(value)) return undefined;\n  switch (value.strategy) {\n    case \"none\":\n      return { strategy: \"none\" };\n    case \"api_key\":\n      if (typeof value.value !== \"string\") return undefined;\n      return {\n        strategy: \"api_key\",\n        value: value.value,\n        ...(typeof value.header_name === \"string\" && {\n          header_name: value.header_name,\n        }),\n      };\n    case \"bearer\":\n      if (typeof value.value !== \"string\") return undefined;\n      return { strategy: \"bearer\", value: value.value };\n    case \"basic\":\n      if (\n        typeof value.username !== \"string\" ||\n        typeof value.password !== \"string\"\n      ) {\n        return undefined;\n      }\n      return {\n        strategy: \"basic\",\n        username: value.username,\n        password: value.password,\n      };\n    case \"header\": {\n      const headers = stringRecord(value.headers);\n      return headers ? { strategy: \"header\", headers } : undefined;\n    }\n    case \"oauth2\": {\n      const authentication = getAuthenticationConfig(value.authentication);\n      const state = getOAuthState(value.state);\n      return {\n        strategy: \"oauth2\",\n        ...(authentication && { authentication }),\n        ...(state && { state }),\n      };\n    }\n    default:\n      return undefined;\n  }\n}\n\nfunction authCredentialFromServerConfig(\n  serverConfig: Record<string, unknown>,\n): MCPAuthCredential | undefined {\n  return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n  auth?: MCPAuthCredential;\n  headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n  const fields: Partial<SdkMcpServerConfig> = {};\n  if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n    fields.auth = entry.auth;\n  }\n  if (entry.headers && Object.keys(entry.headers).length > 0) {\n    fields.headers = entry.headers;\n  }\n  return fields;\n}\n\n/**\n * Only an explicit ``false`` is carried. Every mutation round-trips the whole\n * server map through these converters, so preserving the flag here is what\n * stops adding or deleting one server from silently re-enabling another.\n */\nfunction disabledField(server: { enabled?: boolean }) {\n  return server.enabled === false ? { enabled: false as const } : {};\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n  return {\n    ...(server.name && { name: server.name }),\n    url: server.url!,\n    ...(server.headers && { headers: server.headers }),\n    ...(server.auth && { auth: server.auth }),\n    ...disabledField(server),\n  };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n  return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n  return {\n    ...getRemoteServerFields(server),\n    ...(server.timeout !== undefined && { timeout: server.timeout }),\n  };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n  return {\n    name: server.name!,\n    command: server.command!,\n    ...(server.args && { args: server.args }),\n    ...(server.env && { env: server.env }),\n    ...disabledField(server),\n  };\n}\n\nfunction getAuthenticationConfig(\n  value: unknown,\n): MCPAuthenticationConfig | undefined {\n  if (!value || typeof value !== \"object\") return undefined;\n  const record = value as Record<string, unknown>;\n  if (record.type !== \"oauth\") return undefined;\n  const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n  if (\n    record.client_auth_method === \"none\" ||\n    record.client_auth_method === \"client_secret_post\" ||\n    record.client_auth_method === \"client_secret_basic\" ||\n    record.client_auth_method === \"private_key_jwt\"\n  ) {\n    authentication.client_auth_method = record.client_auth_method;\n  }\n  if (typeof record.scopes === \"string\") {\n    authentication.scopes = record.scopes;\n  } else if (\n    Array.isArray(record.scopes) &&\n    record.scopes.every((scope) => typeof scope === \"string\")\n  ) {\n    authentication.scopes = record.scopes;\n  }\n  if (typeof record.client_name === \"string\") {\n    authentication.client_name = record.client_name;\n  }\n  if (typeof record.client_metadata_url === \"string\") {\n    authentication.client_metadata_url = record.client_metadata_url;\n  }\n  if (typeof record.client_id === \"string\") {\n    authentication.client_id = record.client_id;\n  }\n  if (typeof record.client_secret === \"string\") {\n    authentication.client_secret = record.client_secret;\n  }\n  if (\n    record.additional_client_metadata &&\n    typeof record.additional_client_metadata === \"object\" &&\n    !Array.isArray(record.additional_client_metadata)\n  ) {\n    authentication.additional_client_metadata =\n      record.additional_client_metadata as Record<string, MCPJsonValue>;\n  }\n  return authentication;\n}\n\n/**\n * Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n */\nexport function parseMcpConfig(value: unknown): MCPConfig {\n  const mcpConfig = getSdkMcpServerMap(value);\n  if (!mcpConfig) {\n    return { ...EMPTY_MCP_CONFIG };\n  }\n\n  const sseServers: (string | MCPSSEServer)[] = [];\n  const stdioServers: MCPStdioServer[] = [];\n  const shttpServers: (string | MCPSHTTPServer)[] = [];\n\n  for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n    if (!isRecord(serverConfig)) continue;\n\n    const url = serverConfig.url as string | undefined;\n\n    // The SDK omits ``enabled`` while it holds its default (true), so only an\n    // explicit ``false`` marks a server as switched off.\n    const disabled = serverConfig.enabled === false;\n\n    if (url) {\n      const transport = serverConfig.transport as string | undefined;\n      const auth = authCredentialFromServerConfig(serverConfig);\n      const headers = stringRecord(serverConfig.headers);\n\n      if (transport === \"sse\") {\n        const name = userGivenServerName(serverName, \"sse\");\n        const server: MCPSSEServer = { url };\n        if (name) server.name = name;\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        if (disabled) server.enabled = false;\n        sseServers.push(server);\n      } else {\n        const name = userGivenServerName(serverName, \"shttp\");\n        const server: MCPSHTTPServer = { url };\n        if (name) server.name = name;\n        if (serverConfig.timeout != null) {\n          server.timeout = serverConfig.timeout as number;\n        }\n        if (auth) server.auth = auth;\n        if (headers) server.headers = headers;\n        if (disabled) server.enabled = false;\n        shttpServers.push(server);\n      }\n    } else {\n      if (typeof serverConfig.command !== \"string\") continue;\n      const stdioServer: MCPStdioServer = {\n        name: serverName,\n        command: serverConfig.command,\n      };\n      if (serverConfig.args) {\n        stdioServer.args = serverConfig.args as string[];\n      }\n      if (serverConfig.env) {\n        stdioServer.env = serverConfig.env as Record<string, string>;\n      }\n      if (disabled) stdioServer.enabled = false;\n      stdioServers.push(stdioServer);\n    }\n  }\n\n  return {\n    sse_servers: sseServers,\n    stdio_servers: stdioServers,\n    shttp_servers: shttpServers,\n  };\n}\n\n/**\n * Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n *\n * Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n *\n * ``enabled`` is only emitted when a server is switched off — the SDK defaults\n * it to true. Omitting it is what *clears* a previously persisted\n * ``enabled: false``, and that only works because ``saveSettings`` pre-clears\n * ``mcp_config`` to null before every write (see\n * ``settings-service.api.ts``), turning the backend's RFC 7386 merge into a\n * full replace. If that pre-clear is ever removed, re-enabling a server\n * becomes a silent no-op.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig | null {\n  const mcpConfig: SdkMcpConfig = {};\n\n  const reserve = (base: string): string => {\n    const safeBase = toMcpServerName(base);\n    if (!(safeBase in mcpConfig)) return safeBase;\n    let i = 1;\n    while (`${safeBase}_${i}` in mcpConfig) i += 1;\n    return `${safeBase}_${i}`;\n  };\n\n  for (const entry of config.sse_servers) {\n    const server: SdkMcpServerConfig = {};\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n    }\n    server.transport = \"sse\";\n    mcpConfig[reserve(name || \"sse\")] = server;\n  }\n\n  for (const entry of config.shttp_servers) {\n    const server: SdkMcpServerConfig = { transport: \"http\" };\n    let name: string | undefined;\n    if (typeof entry === \"string\") {\n      server.url = entry;\n    } else {\n      name = entry.name;\n      server.url = entry.url;\n      Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n      if (entry.timeout != null) server.timeout = entry.timeout;\n    }\n    mcpConfig[reserve(name || \"shttp\")] = server;\n  }\n\n  for (const entry of config.stdio_servers) {\n    const server: SdkMcpServerConfig = {\n      command: entry.command,\n    };\n    if (entry.args) server.args = entry.args;\n    if (entry.env) server.env = entry.env;\n    Object.assign(server, disabledField(entry));\n    mcpConfig[reserve(entry.name || \"stdio\")] = server;\n  }\n\n  return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":";;AAgBA,IAAM,IAA8B;CAClC,aAAa,CAAC;CACd,eAAe,CAAC;CAChB,eAAe,CAAC;AAClB,GAEa,IAA4B;AAazC,SAAS,EACP,GACA,GACoB;CAEpB,OAD0B,OAAO,IAAI,EAAK,UACnC,EAAc,KAAK,CAAU,IAAI,KAAA,IAAY;AACtD;AAEA,SAAS,EAAS,GAAkD;CAClE,OAAO,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK;AACrE;AAEA,SAAgB,EACd,GACgC;CAChC,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAM;CASzB,OAPE,EAAS,CAAU,KACnB,EAAE,SAAS,MACX,EAAE,aAAa,KAER,IAGF;AACT;AAEA,SAAgB,EACd,GACoC;CACpC,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAU,OAAO,QAAQ,CAAK,EAAE,QACnC,MAAqC,OAAO,EAAM,MAAO,QAC5D;CACA,OAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,CAAO,IAAI,KAAA;AAC5D;AAEA,SAAgB,EAAyB,GAAyB;CAKhE,OAJI,MAAA,eAA4C,KAC5C,MAAM,QAAQ,CAAK,IAAU,EAAM,KAAK,CAAwB,IAChE,EAAS,CAAK,IACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,IACpD;AACT;AAEA,SAAS,EAAc,GAA2C;CAChE,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAuB,CAAC;CAe9B,OAdI,EAAS,EAAM,MAAM,MACvB,EAAM,SAAS,EAAM,SAEnB,EAAS,EAAM,WAAW,MAC5B,EAAM,cAAc,EAAM,eAK1B,OAAO,EAAM,oBAAqB,YAClC,EAAM,qBAAqB,UAE3B,EAAM,mBAAmB,EAAM,mBAE1B,OAAO,KAAK,CAAK,EAAE,SAAS,IAAI,IAAQ,KAAA;AACjD;AAEA,SAAS,EACP,GAC+B;CAC1B,MAAS,CAAK,GACnB,QAAQ,EAAM,UAAd;EACE,KAAK,QACH,OAAO,EAAE,UAAU,OAAO;EAC5B,KAAK,WAEH,OADI,OAAO,EAAM,SAAU,WACpB;GACL,UAAU;GACV,OAAO,EAAM;GACb,GAAI,OAAO,EAAM,eAAgB,YAAY,EAC3C,aAAa,EAAM,YACrB;EACF,IAPqC;EAQvC,KAAK,UAEH,OADI,OAAO,EAAM,SAAU,WACpB;GAAE,UAAU;GAAU,OAAO,EAAM;EAAM,IADX;EAEvC,KAAK,SAOH,OALE,OAAO,EAAM,YAAa,YAC1B,OAAO,EAAM,YAAa,WAE1B,SAEK;GACL,UAAU;GACV,UAAU,EAAM;GAChB,UAAU,EAAM;EAClB;EACF,KAAK,UAAU;GACb,IAAM,IAAU,EAAa,EAAM,OAAO;GAC1C,OAAO,IAAU;IAAE,UAAU;IAAU;GAAQ,IAAI,KAAA;EACrD;EACA,KAAK,UAAU;GACb,IAAM,IAAiB,EAAwB,EAAM,cAAc,GAC7D,IAAQ,EAAc,EAAM,KAAK;GACvC,OAAO;IACL,UAAU;IACV,GAAI,KAAkB,EAAE,kBAAe;IACvC,GAAI,KAAS,EAAE,SAAM;GACvB;EACF;EACA,SACE;CACJ;AACF;AAEA,SAAS,EACP,GAC+B;CAC/B,OAAO,EAA8B,EAAa,IAAI;AACxD;AAEA,SAAS,EAAsB,GAGC;CAC9B,IAAM,IAAsC,CAAC;CAO7C,OANI,EAAM,QAAQ,CAAC,EAAyB,EAAM,IAAI,MACpD,EAAO,OAAO,EAAM,OAElB,EAAM,WAAW,OAAO,KAAK,EAAM,OAAO,EAAE,SAAS,MACvD,EAAO,UAAU,EAAM,UAElB;AACT;AAOA,SAAS,EAAc,GAA+B;CACpD,OAAO,EAAO,YAAY,KAAQ,EAAE,SAAS,GAAe,IAAI,CAAC;AACnE;AAEA,SAAS,EAAsB,GAAyB;CACtD,OAAO;EACL,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,KAAK,EAAO;EACZ,GAAI,EAAO,WAAW,EAAE,SAAS,EAAO,QAAQ;EAChD,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,GAAG,EAAc,CAAM;CACzB;AACF;AAEA,SAAgB,EAAe,GAAuC;CACpE,OAAO,EAAsB,CAAM;AACrC;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,GAAG,EAAsB,CAAM;EAC/B,GAAI,EAAO,YAAY,KAAA,KAAa,EAAE,SAAS,EAAO,QAAQ;CAChE;AACF;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,MAAM,EAAO;EACb,SAAS,EAAO;EAChB,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,GAAI,EAAO,OAAO,EAAE,KAAK,EAAO,IAAI;EACpC,GAAG,EAAc,CAAM;CACzB;AACF;AAEA,SAAS,EACP,GACqC;CACrC,IAAI,CAAC,KAAS,OAAO,KAAU,UAAU;CACzC,IAAM,IAAS;CACf,IAAI,EAAO,SAAS,SAAS;CAC7B,IAAM,IAA0C,EAAE,MAAM,QAAQ;CAqChE,QAnCE,EAAO,uBAAuB,UAC9B,EAAO,uBAAuB,wBAC9B,EAAO,uBAAuB,yBAC9B,EAAO,uBAAuB,uBAE9B,EAAe,qBAAqB,EAAO,sBAEzC,OAAO,EAAO,UAAW,YAG3B,MAAM,QAAQ,EAAO,MAAM,KAC3B,EAAO,OAAO,OAAO,MAAU,OAAO,KAAU,QAAQ,OAHxD,EAAe,SAAS,EAAO,SAO7B,OAAO,EAAO,eAAgB,aAChC,EAAe,cAAc,EAAO,cAElC,OAAO,EAAO,uBAAwB,aACxC,EAAe,sBAAsB,EAAO,sBAE1C,OAAO,EAAO,aAAc,aAC9B,EAAe,YAAY,EAAO,YAEhC,OAAO,EAAO,iBAAkB,aAClC,EAAe,gBAAgB,EAAO,gBAGtC,EAAO,8BACP,OAAO,EAAO,8BAA+B,YAC7C,CAAC,MAAM,QAAQ,EAAO,0BAA0B,MAEhD,EAAe,6BACb,EAAO,6BAEJ;AACT;AAMA,SAAgB,EAAe,GAA2B;CACxD,IAAM,IAAY,EAAmB,CAAK;CAC1C,IAAI,CAAC,GACH,OAAO,EAAE,GAAG,EAAiB;CAG/B,IAAM,IAAwC,CAAC,GACzC,IAAiC,CAAC,GAClC,IAA4C,CAAC;CAEnD,KAAK,IAAM,CAAC,GAAY,MAAiB,OAAO,QAAQ,CAAS,GAAG;EAClE,IAAI,CAAC,EAAS,CAAY,GAAG;EAE7B,IAAM,IAAM,EAAa,KAInB,IAAW,EAAa,YAAY;EAE1C,IAAI,GAAK;GACP,IAAM,IAAY,EAAa,WACzB,IAAO,EAA+B,CAAY,GAClD,IAAU,EAAa,EAAa,OAAO;GAEjD,IAAI,MAAc,OAAO;IACvB,IAAM,IAAO,EAAoB,GAAY,KAAK,GAC5C,IAAuB,EAAE,OAAI;IAKnC,AAJI,MAAM,EAAO,OAAO,IACpB,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC1B,MAAU,EAAO,UAAU,KAC/B,EAAW,KAAK,CAAM;GACxB,OAAO;IACL,IAAM,IAAO,EAAoB,GAAY,OAAO,GAC9C,IAAyB,EAAE,OAAI;IAQrC,AAPI,MAAM,EAAO,OAAO,IACpB,EAAa,WAAW,SAC1B,EAAO,UAAU,EAAa,UAE5B,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC1B,MAAU,EAAO,UAAU,KAC/B,EAAa,KAAK,CAAM;GAC1B;EACF,OAAO;GACL,IAAI,OAAO,EAAa,WAAY,UAAU;GAC9C,IAAM,IAA8B;IAClC,MAAM;IACN,SAAS,EAAa;GACxB;GAQA,AAPI,EAAa,SACf,EAAY,OAAO,EAAa,OAE9B,EAAa,QACf,EAAY,MAAM,EAAa,MAE7B,MAAU,EAAY,UAAU,KACpC,EAAa,KAAK,CAAW;EAC/B;CACF;CAEA,OAAO;EACL,aAAa;EACb,eAAe;EACf,eAAe;CACjB;AACF;AAsBA,SAAgB,EAAe,GAAwC;CACrE,IAAM,IAA0B,CAAC,GAE3B,KAAW,MAAyB;EACxC,IAAM,IAAW,EAAgB,CAAI;EACrC,IAAI,EAAE,KAAY,IAAY,OAAO;EACrC,IAAI,IAAI;EACR,OAAO,GAAG,EAAS,GAAG,OAAO,IAAW,KAAK;EAC7C,OAAO,GAAG,EAAS,GAAG;CACxB;CAEA,KAAK,IAAM,KAAS,EAAO,aAAa;EACtC,IAAM,IAA6B,CAAC,GAChC;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,GAAG,EAAc,CAAK,CAAC,IAE1E,EAAO,YAAY,OACnB,EAAU,EAAQ,KAAQ,KAAK,KAAK;CACtC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EAAE,WAAW,OAAO,GACnD;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,GAAG,EAAc,CAAK,CAAC,GACpE,EAAM,WAAW,SAAM,EAAO,UAAU,EAAM,WAEpD,EAAU,EAAQ,KAAQ,OAAO,KAAK;CACxC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EACjC,SAAS,EAAM,QACjB;EAIA,AAHI,EAAM,SAAM,EAAO,OAAO,EAAM,OAChC,EAAM,QAAK,EAAO,MAAM,EAAM,MAClC,OAAO,OAAO,GAAQ,EAAc,CAAK,CAAC,GAC1C,EAAU,EAAQ,EAAM,QAAQ,OAAO,KAAK;CAC9C;CAEA,OAAO,OAAO,KAAK,CAAS,EAAE,SAAS,IAAI,IAAY;AACzD"}

package/dist/utils/mcp-installed-servers.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");function e(e){return[...e.sse_servers.map((e,t)=>({id:`sse-${t}`,type:`sse`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,auth:typeof e==`object`?e.auth:void 0})),...e.stdio_servers.map((e,t)=>({id:`stdio-${t}`,type:`stdio`,name:e.name,command:e.command,args:e.args,env:e.env})),...e.shttp_servers.map((e,t)=>({id:`shttp-${t}`,type:`shttp`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,timeout:typeof e==`object`?e.timeout:void 0,auth:typeof e==`object`?e.auth:void 0}))]}exports.flattenMcpConfig=e;
+require("../_virtual/_rolldown/runtime.cjs");function e(e){return[...e.sse_servers.map((e,t)=>({id:`sse-${t}`,type:`sse`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,auth:typeof e==`object`?e.auth:void 0,enabled:typeof e==`object`?e.enabled:void 0})),...e.stdio_servers.map((e,t)=>({id:`stdio-${t}`,type:`stdio`,name:e.name,command:e.command,args:e.args,env:e.env,enabled:e.enabled})),...e.shttp_servers.map((e,t)=>({id:`shttp-${t}`,type:`shttp`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,timeout:typeof e==`object`?e.timeout:void 0,auth:typeof e==`object`?e.auth:void 0,enabled:typeof e==`object`?e.enabled:void 0}))]}exports.flattenMcpConfig=e;
 //# sourceMappingURL=mcp-installed-servers.cjs.map

package/dist/utils/mcp-installed-servers.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n  ];\n}\n"],"mappings":"6CAGA,SAAgB,EAAiB,EAAsC,CACrE,MAAO,CACL,GAAG,EAAO,YAAY,KAAK,EAAQ,KAAW,CAC5C,GAAI,OAAO,IACX,KAAM,MACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,EACnD,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,KAAM,EAAO,KACb,IAAK,EAAO,GACd,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,EACnD,EAAE,CACJ,CACF"}
+{"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n      enabled: typeof server === \"object\" ? server.enabled : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n      enabled: server.enabled,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n      enabled: typeof server === \"object\" ? server.enabled : undefined,\n    })),\n  ];\n}\n"],"mappings":"6CAGA,SAAgB,EAAiB,EAAsC,CACrE,MAAO,CACL,GAAG,EAAO,YAAY,KAAK,EAAQ,KAAW,CAC5C,GAAI,OAAO,IACX,KAAM,MACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,EACzD,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,EAAO,KACb,QAAS,EAAO,QAChB,KAAM,EAAO,KACb,IAAK,EAAO,IACZ,QAAS,EAAO,OAClB,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,GACvD,KAAM,OAAO,GAAW,SAAW,EAAO,KAAO,IAAA,GACjD,QAAS,OAAO,GAAW,SAAW,EAAO,QAAU,IAAA,EACzD,EAAE,CACJ,CACF"}

package/dist/utils/mcp-installed-servers.js

@@ -7,7 +7,8 @@ function e(e) {
 			name: typeof e == "object" ? e.name : void 0,
 			url: typeof e == "string" ? e : e.url,
 			headers: typeof e == "object" ? e.headers : void 0,
-			auth: typeof e == "object" ? e.auth : void 0
+			auth: typeof e == "object" ? e.auth : void 0,
+			enabled: typeof e == "object" ? e.enabled : void 0
 		})),
 		...e.stdio_servers.map((e, t) => ({
 			id: `stdio-${t}`,
@@ -15,7 +16,8 @@ function e(e) {
 			name: e.name,
 			command: e.command,
 			args: e.args,
-			env: e.env
+			env: e.env,
+			enabled: e.enabled
 		})),
 		...e.shttp_servers.map((e, t) => ({
 			id: `shttp-${t}`,
@@ -24,7 +26,8 @@ function e(e) {
 			url: typeof e == "string" ? e : e.url,
 			headers: typeof e == "object" ? e.headers : void 0,
 			timeout: typeof e == "object" ? e.timeout : void 0,
-			auth: typeof e == "object" ? e.auth : void 0
+			auth: typeof e == "object" ? e.auth : void 0,
+			enabled: typeof e == "object" ? e.enabled : void 0
 		}))
 	];
 }

package/dist/utils/mcp-installed-servers.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n    })),\n  ];\n}\n"],"mappings":";AAGA,SAAgB,EAAiB,GAAsC;CACrE,OAAO;EACL,GAAG,EAAO,YAAY,KAAK,GAAQ,OAAW;GAC5C,IAAI,OAAO;GACX,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;EACnD,EAAE;EACF,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,EAAO;GACb,SAAS,EAAO;GAChB,MAAM,EAAO;GACb,KAAK,EAAO;EACd,EAAE;EACF,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;EACnD,EAAE;CACJ;AACF"}
+{"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { MCPConfig } from \"#/types/settings\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n  return [\n    ...config.sse_servers.map((server, index) => ({\n      id: `sse-${index}`,\n      type: \"sse\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n      enabled: typeof server === \"object\" ? server.enabled : undefined,\n    })),\n    ...config.stdio_servers.map((server, index) => ({\n      id: `stdio-${index}`,\n      type: \"stdio\" as const,\n      name: server.name,\n      command: server.command,\n      args: server.args,\n      env: server.env,\n      enabled: server.enabled,\n    })),\n    ...config.shttp_servers.map((server, index) => ({\n      id: `shttp-${index}`,\n      type: \"shttp\" as const,\n      name: typeof server === \"object\" ? server.name : undefined,\n      url: typeof server === \"string\" ? server : server.url,\n      headers: typeof server === \"object\" ? server.headers : undefined,\n      timeout: typeof server === \"object\" ? server.timeout : undefined,\n      auth: typeof server === \"object\" ? server.auth : undefined,\n      enabled: typeof server === \"object\" ? server.enabled : undefined,\n    })),\n  ];\n}\n"],"mappings":";AAGA,SAAgB,EAAiB,GAAsC;CACrE,OAAO;EACL,GAAG,EAAO,YAAY,KAAK,GAAQ,OAAW;GAC5C,IAAI,OAAO;GACX,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;EACzD,EAAE;EACF,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,EAAO;GACb,SAAS,EAAO;GAChB,MAAM,EAAO;GACb,KAAK,EAAO;GACZ,SAAS,EAAO;EAClB,EAAE;EACF,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;GACvD,MAAM,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA;GACjD,SAAS,OAAO,KAAW,WAAW,EAAO,UAAU,KAAA;EACzD,EAAE;CACJ;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openhands/agent-canvas",
-  "version": "1.7.1",
+  "version": "1.8.0",
   "description": "Agent Canvas UI for OpenHands - run AI coding agents with a visual interface",
   "license": "MIT",
   "private": false,
@@ -24,7 +24,7 @@
     "@microlink/react-json-view": "1.31.20",
     "@monaco-editor/react": "4.7.0",
     "@openhands/extensions": "0.11.0",
-    "@openhands/typescript-client": "1.34.0",
+    "@openhands/typescript-client": "1.36.1",
     "@react-router/node": "7.17.0",
     "@react-router/serve": "7.17.0",
     "@tailwindcss/vite": "4.2.4",
@@ -87,6 +87,9 @@
     "test:e2e:mock-llm": "playwright test --config=playwright.mock-llm.config.ts",
     "test:e2e:mock-llm:docker": "playwright test --config=playwright.mock-llm-docker.config.ts",
     "test:coverage": "npm run make-i18n && vitest run --coverage",
+    "test:mutation": "npm run make-i18n && stryker run",
+    "test:mutation:diff": "npm run make-i18n && node scripts/stryker-diff.mjs",
+    "test:mutation:incremental": "npm run make-i18n && stryker run --incremental",
     "dev_wsl": "VITE_WATCH_USE_POLLING=true vite",
     "preview": "vite preview",
     "make-i18n": "node scripts/make-i18n-translations.cjs",
@@ -125,6 +128,8 @@
     "@mswjs/socket.io-binding": "0.2.0",
     "@playwright/test": "1.59.1",
     "@react-router/dev": "7.17.0",
+    "@stryker-mutator/core": "9.6.1",
+    "@stryker-mutator/vitest-runner": "9.6.1",
     "@tailwindcss/typography": "0.5.19",
     "@tanstack/eslint-plugin-query": "5.100.9",
     "@testing-library/dom": "10.4.1",

package/scripts/check-sdk-version-sync.mjs

@@ -19,7 +19,7 @@
  *
  * Usage:
  *   node scripts/check-sdk-version-sync.mjs
- *   EXPECTED_SDK_VERSION=1.38.0 node scripts/check-sdk-version-sync.mjs
+ *   EXPECTED_SDK_VERSION=1.39.1 node scripts/check-sdk-version-sync.mjs
  *   node scripts/check-sdk-version-sync.mjs --check-pypi
  *
  * Environment variables:
@@ -78,7 +78,7 @@ Triggering from other repos:
     -H "Authorization: token \$GITHUB_TOKEN" \\
     -H "Accept: application/vnd.github.v3+json" \\
     https://api.github.com/repos/OpenHands/OpenHands/dispatches \\
-    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.38.0"}}'
+    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.39.1"}}'
 `);
   process.exit(0);
 }
@@ -260,9 +260,9 @@ async function fetchPyPIDependencies(packageName, version) {
  * Parse PyPI requires_dist array and extract SDK package versions
  *
  * PyPI returns dependencies in PEP 508 format like:
- *   "openhands-sdk>=1.38.0,<2.0.0"
- *   "openhands-tools==1.38.0"
- *   "openhands-workspace (>=1.38.0)"
+ *   "openhands-sdk>=1.39.1,<2.0.0"
+ *   "openhands-tools==1.39.1"
+ *   "openhands-workspace (>=1.39.1)"
  */
 function parseSdkVersionsFromRequiresDist(requiresDist) {
   const versions = {};
@@ -276,7 +276,7 @@ function parseSdkVersionsFromRequiresDist(requiresDist) {
       }
 
       // Extract the version number - look for patterns like:
-      // ">=1.38.0", "==1.38.0", "(>=1.38.0)", "~=1.38.0"
+      // ">=1.39.1", "==1.39.1", "(>=1.39.1)", "~=1.39.1"
       // After the package name and before any comma or closing paren
       const versionPattern = /[><=~!]+\s*([0-9]+(?:\.[0-9]+)*)/;
       const match = dep.match(versionPattern);

package/scripts/dev-safe.mjs

@@ -48,7 +48,7 @@ const LOCAL_AGENT_SERVER_SUBDIRS = [
   "openhands-workspace",
 ];
 const DEFAULT_AGENT_SERVER_VERSION = SHARED_DEFAULTS.versions.agentServer;
-// Temporary transitive-dep pin: openhands-sdk 1.38.0 leaves agent-client-protocol
+// Temporary transitive-dep pin: openhands-sdk 1.39.1 leaves agent-client-protocol
 // unbounded (>=0.10.1), but acp 0.11.0 reordered the ACP prompt() args and breaks
 // the SDK's ACP client. Hold acp <0.11 until a fixed SDK ships. See config/defaults.json.
 const AGENT_CLIENT_PROTOCOL_CONSTRAINT =
@@ -399,7 +399,7 @@ export function validateFrontendDependencies(
  *   edits are picked up without a manual reinstall. The agent-server itself
  *   is rebuilt from local source on each invocation (--reinstall).
  * - OH_AGENT_SERVER_GIT_REF: Git commit SHA or branch name
- * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.38.0")
+ * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.39.1")
  *
  * If none are set, defaults to the released version specified by
  * DEFAULT_AGENT_SERVER_VERSION. Set OH_AGENT_SERVER_GIT_REF to use a

package/scripts/stryker-diff.mjs

@@ -0,0 +1,137 @@
+#!/usr/bin/env node
+
+import { spawnSync } from "node:child_process";
+import process from "node:process";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const EXCLUDED_DIRECTORY =
+  /(^|\/)(__tests__|tests?|fixtures|__fixtures__|snapshots|__snapshots__|generated|mocks|dev)(\/|$)/;
+const EXCLUDED_FILE = /\.(test|spec|d|gen|generated)\.(ts|tsx)$/;
+
+function isProductionTypeScript(file) {
+  const normalized = file.replaceAll("\\", "/");
+  return (
+    /^src\/.+\.(ts|tsx)$/.test(normalized) &&
+    !EXCLUDED_DIRECTORY.test(normalized) &&
+    !EXCLUDED_FILE.test(normalized)
+  );
+}
+
+/**
+ * @typedef {object} ProcessResult
+ * @property {Error | undefined} [error]
+ * @property {number | null} status
+ * @property {string | null} stderr
+ * @property {string | null} stdout
+ */
+
+/**
+ * @typedef {object} Dependencies
+ * @property {(command: string, args: readonly string[], options?: import("node:child_process").SpawnSyncOptions) => ProcessResult} spawn
+ * @property {(message: string) => void} writeError
+ * @property {(message: string) => void} writeOutput
+ */
+
+// Stryker disable all: the real process adapter is verified by the CLI
+// subprocess smoke test, which Vitest cannot attribute to the parent process.
+/** @type {Dependencies} */
+const defaultDependencies = {
+  spawn(command, args, options) {
+    const result = spawnSync(command, [...args], options);
+    return {
+      error: result.error,
+      status: result.status,
+      stderr: result.stderr?.toString() ?? null,
+      stdout: result.stdout?.toString() ?? null,
+    };
+  },
+  writeError(message) {
+    process.stderr.write(message);
+  },
+  writeOutput(message) {
+    process.stdout.write(message);
+  },
+};
+// Stryker restore all
+
+/**
+ * Run mutation testing against production TypeScript files changed from a base
+ * git ref. The dependency parameter keeps the process boundary observable in
+ * tests while the command-line behavior remains the public API.
+ *
+ * @param {string[]} argv
+ * @param {Partial<Dependencies>} [overrides]
+ * @returns {number}
+ */
+export function main(argv, overrides = {}) {
+  const dependencies = { ...defaultDependencies, ...overrides };
+  const baseRef = argv[0] ?? "main";
+  const gitArgs = [
+    "diff",
+    "--name-only",
+    "--diff-filter=ACMRTUXB",
+    `${baseRef}...HEAD`,
+  ];
+  const gitResult = dependencies.spawn("git", gitArgs, {
+    encoding: "utf8",
+    windowsHide: true,
+  });
+
+  if (gitResult.error || gitResult.status !== 0) {
+    const detail =
+      gitResult.stderr || gitResult.error?.message || "unknown error";
+    dependencies.writeError(
+      `Unable to determine changed files against ${baseRef}: ${detail.trim()}\n`,
+    );
+    return gitResult.status ?? 1;
+  }
+
+  const mutationTargets = gitResult.stdout
+    .split(/\r?\n/u)
+    .filter(isProductionTypeScript);
+
+  if (mutationTargets.length === 0) {
+    dependencies.writeOutput(
+      `No changed production files to mutate against ${baseRef}.\n`,
+    );
+    return 0;
+  }
+
+  const strykerCliPath = fileURLToPath(
+    new URL(
+      "../node_modules/@stryker-mutator/core/bin/stryker.js",
+      import.meta.url,
+    ),
+  );
+  const strykerResult = dependencies.spawn(
+    process.execPath,
+    [
+      strykerCliPath,
+      "run",
+      "--incremental",
+      "--force",
+      "--mutate",
+      mutationTargets.join(","),
+    ],
+    { stdio: "inherit", windowsHide: true },
+  );
+
+  if (strykerResult.error) {
+    dependencies.writeError(
+      `Unable to start Stryker: ${strykerResult.error.message}\n`,
+    );
+    return 1;
+  }
+
+  return strykerResult.status ?? 1;
+}
+
+// Stryker disable all: the CLI guard is verified by a real subprocess test,
+// which the Vitest runner cannot attribute to the mutated parent process.
+const isMainModule =
+  process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+
+if (isMainModule) {
+  process.exitCode = main(process.argv.slice(2));
+}
+// Stryker restore all