@openhands/agent-canvas 1.7.2 → 1.9.0

package/dist/manifests/manifest-validation.js

@@ -0,0 +1,145 @@
+import { SETUP_PLACEHOLDER_NAMESPACES as e } from "./types.js";
+//#region src/manifests/manifest-validation.ts
+var t = /^[a-z0-9]+(-[a-z0-9]+)*$/, n = /^[a-z][A-Za-z0-9]*$/, r = /<[A-Za-z/!]/, i = RegExp(`\\{\\{(?!(?:${e.join("|")})\\.[A-Za-z0-9_.]+\\}\\})`), a = ["direct", "assisted"], o = [
+	"text",
+	"textarea",
+	"select",
+	"cron",
+	"timezone",
+	"repo-picker"
+], s = [
+	"github",
+	"gitlab",
+	"bitbucket"
+], c = ["cron", "event"], l = ["safeExpressionLiteral"], u = 2e3;
+function d(e) {
+	return typeof e == "object" && !!e && !Array.isArray(e);
+}
+function f(e, t) {
+	return typeof e == "string" && t.includes(e);
+}
+function p(e, t) {
+	return typeof e == "number" && Number.isInteger(e) && e >= t;
+}
+var m = class {
+	errors = [];
+	fail(e, t) {
+		return this.errors.push(`${e}: ${t}`), !1;
+	}
+	copy(e, t) {
+		return typeof e != "string" || e.length === 0 ? this.fail(t, "must be a non-empty string") : r.test(e) ? this.fail(t, "must not contain markup") : !0;
+	}
+	placeholders(e, t) {
+		return i.test(e) ? this.fail(t, "uses an unknown placeholder namespace") : !0;
+	}
+	templateCopy(e, t) {
+		return this.copy(e, t) && this.placeholders(e, t);
+	}
+	templateValue(e, t) {
+		return typeof e != "string" || e.length === 0 ? this.fail(t, "must be a non-empty string") : this.placeholders(e, t);
+	}
+	absent(e, t, n, r) {
+		return t in e ? this.fail(`${n}.${t}`, r) : !0;
+	}
+};
+function h(e, t) {
+	if (!d(t)) {
+		e.fail("requires", "must be an object");
+		return;
+	}
+	let { integrations: n, features: r } = t;
+	!d(n) || Object.keys(n).length === 0 ? e.fail("requires.integrations", "must be a non-empty object") : Object.entries(n).forEach(([t, n]) => {
+		let r = `requires.integrations.${t}`;
+		if (!d(n)) {
+			e.fail(r, "must be an object");
+			return;
+		}
+		e.copy(n.message, `${r}.message`), "required" in n && n.required !== !1 && e.fail(`${r}.required`, "may only be false");
+		let i = ["message", "required"];
+		Object.keys(n).filter((e) => !i.includes(e)).forEach((t) => e.fail(`${r}.${t}`, "is not allowed"));
+	}), r !== void 0 && (!Array.isArray(r) || r.length === 0 ? e.fail("requires.features", "must be a non-empty array") : r.forEach((t, n) => {
+		(typeof t != "string" || t.length === 0) && e.fail(`requires.features[${n}]`, "must be a non-empty string");
+	}));
+}
+function g(e, t, n) {
+	if (!d(t) || Object.keys(t).length === 0) {
+		e.fail(n, "must be a non-empty object");
+		return;
+	}
+	let { minLength: r, maxLength: i, format: a } = t;
+	r !== void 0 && !p(r, 0) && e.fail(`${n}.minLength`, "must be a non-negative integer"), i !== void 0 && !p(i, 1) && e.fail(`${n}.maxLength`, "must be a positive integer"), a !== void 0 && !f(a, l) && e.fail(`${n}.format`, "is not a supported format");
+}
+function _(e, t, n) {
+	if (!d(t)) {
+		e.fail(n, "must be an object");
+		return;
+	}
+	let { type: r, label: i, help: a, placeholder: c, required: l, provider: u, options: p } = t;
+	f(r, o) || e.fail(`${n}.type`, "is not a supported field type"), e.copy(i, `${n}.label`), e.copy(a, `${n}.help`), c !== void 0 && e.copy(c, `${n}.placeholder`), t.default !== void 0 && typeof t.default != "string" && e.fail(`${n}.default`, "must be a string"), typeof l != "boolean" && e.fail(`${n}.required`, "must be a boolean"), u !== void 0 && !f(u, s) && e.fail(`${n}.provider`, "is not a supported provider"), r === "repo-picker" && u === void 0 && e.fail(`${n}.provider`, "is required for a repository field"), p !== void 0 && (r === "select" ? !Array.isArray(p) || p.length === 0 ? e.fail(`${n}.options`, "must be a non-empty array") : p.forEach((t, r) => {
+		let i = `${n}.options[${r}]`;
+		if (!d(t)) {
+			e.fail(i, "must be an object");
+			return;
+		}
+		(typeof t.value != "string" || t.value.length === 0) && e.fail(`${i}.value`, "must be a non-empty string"), e.copy(t.label, `${i}.label`);
+	}) : e.fail(`${n}.options`, "is only allowed on a select field")), t.constraints !== void 0 && g(e, t.constraints, `${n}.constraints`);
+}
+function v(e, t, r) {
+	return !d(t) || Object.keys(t).length === 0 ? (e.fail(r, "must be a non-empty object"), []) : Object.entries(t).map(([t, i]) => (n.test(t) || e.fail(`${r}.${t}`, "is not a valid field name"), _(e, i, `${r}.${t}`), t));
+}
+function y(e, t) {
+	if (!d(t)) return e.fail("setup.form", "must be an object"), [];
+	t.note !== void 0 && e.copy(t.note, "setup.form.note");
+	let n = v(e, t.args, "setup.form.args"), r = [];
+	t.triggers !== void 0 && (!d(t.triggers) || Object.keys(t.triggers).length === 0 ? e.fail("setup.form.triggers", "must be a non-empty object") : Object.entries(t.triggers).forEach(([t, i]) => {
+		if (!f(t, c)) {
+			e.fail(`setup.form.triggers.${t}`, "is not a trigger kind");
+			return;
+		}
+		r.push(t), n.push(...v(e, i, `setup.form.triggers.${t}`));
+	}));
+	let i = n.filter((e, t) => n.indexOf(e) !== t);
+	return Array.from(new Set(i)).forEach((t) => e.fail(`setup.form.${t}`, "is declared more than once")), r;
+}
+function b(e) {
+	return d(e) ? [e.args, ...Object.values(d(e.triggers) ? e.triggers : {})].some((e) => d(e) && Object.values(e).some((e) => d(e) && e.type === "repo-picker")) : !1;
+}
+function x(e, t) {
+	e.templateCopy(t, "setup.message") && t.length > u && e.fail("setup.message", `must be at most ${u} characters`);
+}
+function S(e, t, n) {
+	if (!f(t.mode, a)) {
+		e.fail("setup.mode", "is not a supported mode");
+		return;
+	}
+	if (t.mode === "direct") {
+		e.templateValue(t.prompt, "setup.prompt"), t.message !== void 0 && x(e, t.message), n.length !== 1 && e.fail("setup.form.triggers", "must declare exactly one trigger kind"), n.includes("event") && !b(t.form) && e.fail("setup.form", "must declare a repository field for an event trigger"), t.filter !== void 0 && (n.includes("event") ? e.templateValue(t.filter, "setup.filter") : e.fail("setup.filter", "is only allowed for an event trigger"));
+		return;
+	}
+	x(e, t.message), e.absent(t, "prompt", "setup", "is only allowed for direct setup"), e.absent(t, "filter", "setup", "is only allowed for direct setup");
+}
+function C(e) {
+	return d(e) && e.setup !== void 0;
+}
+function w(e) {
+	let n = new m();
+	if (!d(e)) return {
+		valid: !1,
+		errors: ["manifest: must be an object"]
+	};
+	let { setup: r } = e;
+	return d(r) ? r.version === "1.0" ? ((typeof e.id != "string" || !t.test(e.id)) && n.fail("id", "must be a lowercase slug"), n.copy(e.name, "name"), n.copy(e.description, "description"), e.skill !== void 0 && (typeof e.skill != "string" || !t.test(e.skill)) && n.fail("skill", "must be a lowercase slug"), h(n, e.requires), S(n, r, y(n, r.form)), {
+		valid: n.errors.length === 0,
+		errors: n.errors
+	}) : {
+		valid: !1,
+		errors: ["setup.version: must be \"1.0\""]
+	} : {
+		valid: !1,
+		errors: ["setup: must be an object"]
+	};
+}
+//#endregion
+export { C as hasSetupBlock, w as validateSetupEntry };
+
+//# sourceMappingURL=manifest-validation.js.map

package/dist/manifests/manifest-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validation.js","names":[],"sources":["../../src/manifests/manifest-validation.ts"],"sourcesContent":["/**\n * Admission policy for extension-authored catalog manifests.\n *\n * A manifest is data authored in a different repository that instructs this host\n * to render copy and compose a request. The host therefore decides what a\n * manifest is *permitted* to do rather than trusting the file — validation here\n * is a trust boundary, not a convenience check, and it deliberately does not\n * defer to a schema shipped alongside the manifests it would be validating.\n *\n * Beyond mirroring the published schema, this adds the invariants the host's own\n * derivation depends on: a single trigger kind to read, a repository field for\n * an event trigger's source, and field names unique across the form. Without\n * them the derived request body would be silently wrong rather than rejected.\n *\n * A manifest that fails any check is rejected outright. It never renders a\n * partial UI, because everything downstream treats its content as instructions.\n */\n\nimport { SETUP_PLACEHOLDER_NAMESPACES, SETUP_VERSION } from \"./types\";\n\nconst ENTRY_ID_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\nconst FIELD_NAME_PATTERN = /^[a-z][A-Za-z0-9]*$/;\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\n/** Every `{{` must open a known namespace and close immediately. */\nconst UNKNOWN_PLACEHOLDER_PATTERN = new RegExp(\n  `\\\\{\\\\{(?!(?:${SETUP_PLACEHOLDER_NAMESPACES.join(\"|\")})\\\\.[A-Za-z0-9_.]+\\\\}\\\\})`,\n);\n\nconst SETUP_MODES = [\"direct\", \"assisted\"] as const;\nconst FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"select\",\n  \"cron\",\n  \"timezone\",\n  \"repo-picker\",\n] as const;\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\nconst TRIGGER_KINDS = [\"cron\", \"event\"] as const;\nconst CONSTRAINT_FORMATS = [\"safeExpressionLiteral\"] as const;\n\n/** Setup context only, so this can never become a channel for runtime instructions. */\nconst MAX_MESSAGE_LENGTH = 2000;\n\nexport interface SetupValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  allowed: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (allowed as readonly string[]).includes(value)\n  );\n}\n\nfunction isInteger(value: unknown, minimum: number): boolean {\n  return (\n    typeof value === \"number\" && Number.isInteger(value) && value >= minimum\n  );\n}\n\nclass SetupChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  placeholders(value: string, path: string): boolean {\n    if (UNKNOWN_PLACEHOLDER_PATTERN.test(value)) {\n      return this.fail(path, \"uses an unknown placeholder namespace\");\n    }\n    return true;\n  }\n\n  /** Copy that may embed `{{namespace.key}}` placeholders. */\n  templateCopy(value: unknown, path: string): boolean {\n    return this.copy(value, path) && this.placeholders(value as string, path);\n  }\n\n  /**\n   * A request-body string that may embed placeholders. Never rendered, so\n   * expression syntax such as a JMESPath filter is allowed through.\n   */\n  templateValue(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    return this.placeholders(value, path);\n  }\n\n  absent(container: Rec, key: string, path: string, reason: string): boolean {\n    if (key in container) return this.fail(`${path}.${key}`, reason);\n    return true;\n  }\n}\n\nfunction checkRequires(check: SetupChecker, requires: unknown): void {\n  if (!isRecord(requires)) {\n    check.fail(\"requires\", \"must be an object\");\n    return;\n  }\n\n  const { integrations, features } = requires;\n  if (!isRecord(integrations) || Object.keys(integrations).length === 0) {\n    check.fail(\"requires.integrations\", \"must be a non-empty object\");\n  } else {\n    Object.entries(integrations).forEach(([id, requirement]) => {\n      const path = `requires.integrations.${id}`;\n      if (!isRecord(requirement)) {\n        check.fail(path, \"must be an object\");\n        return;\n      }\n      check.copy(requirement.message, `${path}.message`);\n      if (\"required\" in requirement && requirement.required !== false) {\n        check.fail(`${path}.required`, \"may only be false\");\n      }\n      const allowed = [\"message\", \"required\"];\n      Object.keys(requirement)\n        .filter((key) => !allowed.includes(key))\n        .forEach((key) => check.fail(`${path}.${key}`, \"is not allowed\"));\n    });\n  }\n\n  if (features !== undefined) {\n    if (!Array.isArray(features) || features.length === 0) {\n      check.fail(\"requires.features\", \"must be a non-empty array\");\n    } else {\n      features.forEach((feature, index) => {\n        if (typeof feature !== \"string\" || feature.length === 0) {\n          check.fail(\n            `requires.features[${index}]`,\n            \"must be a non-empty string\",\n          );\n        }\n      });\n    }\n  }\n}\n\nfunction checkConstraints(\n  check: SetupChecker,\n  constraints: unknown,\n  path: string,\n): void {\n  if (!isRecord(constraints) || Object.keys(constraints).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return;\n  }\n\n  const { minLength, maxLength, format } = constraints;\n  if (minLength !== undefined && !isInteger(minLength, 0)) {\n    check.fail(`${path}.minLength`, \"must be a non-negative integer\");\n  }\n  if (maxLength !== undefined && !isInteger(maxLength, 1)) {\n    check.fail(`${path}.maxLength`, \"must be a positive integer\");\n  }\n  if (format !== undefined && !isOneOf(format, CONSTRAINT_FORMATS)) {\n    check.fail(`${path}.format`, \"is not a supported format\");\n  }\n}\n\nfunction checkField(check: SetupChecker, field: unknown, path: string): void {\n  if (!isRecord(field)) {\n    check.fail(path, \"must be an object\");\n    return;\n  }\n\n  const { type, label, help, placeholder, required, provider, options } = field;\n\n  if (!isOneOf(type, FIELD_TYPES)) {\n    check.fail(`${path}.type`, \"is not a supported field type\");\n  }\n  check.copy(label, `${path}.label`);\n  check.copy(help, `${path}.help`);\n  if (placeholder !== undefined) check.copy(placeholder, `${path}.placeholder`);\n  if (field.default !== undefined && typeof field.default !== \"string\") {\n    check.fail(`${path}.default`, \"must be a string\");\n  }\n  if (typeof required !== \"boolean\") {\n    check.fail(`${path}.required`, \"must be a boolean\");\n  }\n  if (provider !== undefined && !isOneOf(provider, GIT_PROVIDERS)) {\n    check.fail(`${path}.provider`, \"is not a supported provider\");\n  }\n  if (type === \"repo-picker\" && provider === undefined) {\n    check.fail(`${path}.provider`, \"is required for a repository field\");\n  }\n\n  if (options !== undefined) {\n    if (type !== \"select\") {\n      check.fail(`${path}.options`, \"is only allowed on a select field\");\n    } else if (!Array.isArray(options) || options.length === 0) {\n      check.fail(`${path}.options`, \"must be a non-empty array\");\n    } else {\n      options.forEach((option, index) => {\n        const optionPath = `${path}.options[${index}]`;\n        if (!isRecord(option)) {\n          check.fail(optionPath, \"must be an object\");\n          return;\n        }\n        if (typeof option.value !== \"string\" || option.value.length === 0) {\n          check.fail(`${optionPath}.value`, \"must be a non-empty string\");\n        }\n        check.copy(option.label, `${optionPath}.label`);\n      });\n    }\n  }\n\n  if (field.constraints !== undefined) {\n    checkConstraints(check, field.constraints, `${path}.constraints`);\n  }\n}\n\n/** Returns the declared field names, so the caller can check them for collisions. */\nfunction checkFields(\n  check: SetupChecker,\n  fields: unknown,\n  path: string,\n): string[] {\n  if (!isRecord(fields) || Object.keys(fields).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return [];\n  }\n\n  return Object.entries(fields).map(([name, field]) => {\n    if (!FIELD_NAME_PATTERN.test(name)) {\n      check.fail(`${path}.${name}`, \"is not a valid field name\");\n    }\n    checkField(check, field, `${path}.${name}`);\n    return name;\n  });\n}\n\n/** Returns the trigger kinds declared, in order. */\nfunction checkForm(check: SetupChecker, form: unknown): string[] {\n  if (!isRecord(form)) {\n    check.fail(\"setup.form\", \"must be an object\");\n    return [];\n  }\n\n  if (form.note !== undefined) check.copy(form.note, \"setup.form.note\");\n\n  const names = checkFields(check, form.args, \"setup.form.args\");\n  const kinds: string[] = [];\n\n  if (form.triggers !== undefined) {\n    if (!isRecord(form.triggers) || Object.keys(form.triggers).length === 0) {\n      check.fail(\"setup.form.triggers\", \"must be a non-empty object\");\n    } else {\n      Object.entries(form.triggers).forEach(([kind, fields]) => {\n        if (!isOneOf(kind, TRIGGER_KINDS)) {\n          check.fail(`setup.form.triggers.${kind}`, \"is not a trigger kind\");\n          return;\n        }\n        kinds.push(kind);\n        names.push(\n          ...checkFields(check, fields, `setup.form.triggers.${kind}`),\n        );\n      });\n    }\n  }\n\n  // The host merges both halves into one value map, so a repeated name would\n  // silently shadow a field and misaddress every error reported against it.\n  const duplicates = names.filter(\n    (name, index) => names.indexOf(name) !== index,\n  );\n  Array.from(new Set(duplicates)).forEach((name) =>\n    check.fail(`setup.form.${name}`, \"is declared more than once\"),\n  );\n\n  return kinds;\n}\n\nfunction hasRepoPicker(form: unknown): boolean {\n  if (!isRecord(form)) return false;\n  const groups = [\n    form.args,\n    ...Object.values(isRecord(form.triggers) ? form.triggers : {}),\n  ];\n  return groups.some(\n    (group) =>\n      isRecord(group) &&\n      Object.values(group).some(\n        (field) => isRecord(field) && field.type === \"repo-picker\",\n      ),\n  );\n}\n\nfunction checkMessage(check: SetupChecker, message: unknown): void {\n  if (check.templateCopy(message, \"setup.message\")) {\n    if ((message as string).length > MAX_MESSAGE_LENGTH) {\n      check.fail(\n        \"setup.message\",\n        `must be at most ${MAX_MESSAGE_LENGTH} characters`,\n      );\n    }\n  }\n}\n\nfunction checkMode(check: SetupChecker, setup: Rec, kinds: string[]): void {\n  if (!isOneOf(setup.mode, SETUP_MODES)) {\n    check.fail(\"setup.mode\", \"is not a supported mode\");\n    return;\n  }\n\n  if (setup.mode === \"direct\") {\n    check.templateValue(setup.prompt, \"setup.prompt\");\n    // Optional here: it seeds the fallback conversation offered when the\n    // deployment cannot run the direct path.\n    if (setup.message !== undefined) checkMessage(check, setup.message);\n\n    // The derivation reads a single trigger kind, and an event trigger takes\n    // its source from the repository field's provider.\n    if (kinds.length !== 1) {\n      check.fail(\n        \"setup.form.triggers\",\n        \"must declare exactly one trigger kind\",\n      );\n    }\n    if (kinds.includes(\"event\") && !hasRepoPicker(setup.form)) {\n      check.fail(\n        \"setup.form\",\n        \"must declare a repository field for an event trigger\",\n      );\n    }\n    if (setup.filter !== undefined) {\n      if (!kinds.includes(\"event\")) {\n        check.fail(\"setup.filter\", \"is only allowed for an event trigger\");\n      } else {\n        check.templateValue(setup.filter, \"setup.filter\");\n      }\n    }\n    return;\n  }\n\n  checkMessage(check, setup.message);\n  check.absent(setup, \"prompt\", \"setup\", \"is only allowed for direct setup\");\n  check.absent(setup, \"filter\", \"setup\", \"is only allowed for direct setup\");\n}\n\n/** Whether a catalog entry ships a setup experience at all. It is optional. */\nexport function hasSetupBlock(candidate: unknown): boolean {\n  return isRecord(candidate) && candidate.setup !== undefined;\n}\n\n/**\n * Decide whether this host will act on a catalog manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateSetupEntry(candidate: unknown): SetupValidationResult {\n  const check = new SetupChecker();\n\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"manifest: must be an object\"] };\n  }\n\n  const { setup } = candidate;\n  if (!isRecord(setup)) {\n    return { valid: false, errors: [\"setup: must be an object\"] };\n  }\n  if (setup.version !== SETUP_VERSION) {\n    return {\n      valid: false,\n      errors: [`setup.version: must be \"${SETUP_VERSION}\"`],\n    };\n  }\n\n  if (\n    typeof candidate.id !== \"string\" ||\n    !ENTRY_ID_PATTERN.test(candidate.id)\n  ) {\n    check.fail(\"id\", \"must be a lowercase slug\");\n  }\n  check.copy(candidate.name, \"name\");\n  check.copy(candidate.description, \"description\");\n  if (\n    candidate.skill !== undefined &&\n    (typeof candidate.skill !== \"string\" ||\n      !ENTRY_ID_PATTERN.test(candidate.skill))\n  ) {\n    check.fail(\"skill\", \"must be a lowercase slug\");\n  }\n\n  checkRequires(check, candidate.requires);\n  const kinds = checkForm(check, setup.form);\n  checkMode(check, setup, kinds);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":";;AAoBA,IAAM,IAAmB,4BACnB,IAAqB,uBAErB,IAAiB,eAEjB,IAAkC,OACtC,eAAe,EAA6B,KAAK,GAAG,EAAE,0BACxD,GAEM,IAAc,CAAC,UAAU,UAAU,GACnC,IAAc;CAClB;CACA;CACA;CACA;CACA;CACA;AACF,GACM,IAAgB;CAAC;CAAU;CAAU;AAAW,GAChD,IAAgB,CAAC,QAAQ,OAAO,GAChC,IAAqB,CAAC,uBAAuB,GAG7C,IAAqB;AAS3B,SAAS,EAAS,GAA8B;CAC9C,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,SAAS,EACP,GACA,GACoB;CACpB,OACE,OAAO,KAAU,YAAa,EAA8B,SAAS,CAAK;AAE9E;AAEA,SAAS,EAAU,GAAgB,GAA0B;CAC3D,OACE,OAAO,KAAU,YAAY,OAAO,UAAU,CAAK,KAAK,KAAS;AAErE;AAEA,IAAM,IAAN,MAAmB;CACjB,SAA4B,CAAC;CAE7B,KAAK,GAAc,GAAuB;EAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,GAC9B;CACT;CAGA,KAAK,GAAgB,GAAuB;EAO1C,OANI,OAAO,KAAU,YAAY,EAAM,WAAW,IACzC,KAAK,KAAK,GAAM,4BAA4B,IAEjD,EAAe,KAAK,CAAK,IACpB,KAAK,KAAK,GAAM,yBAAyB,IAE3C;CACT;CAEA,aAAa,GAAe,GAAuB;EAIjD,OAHI,EAA4B,KAAK,CAAK,IACjC,KAAK,KAAK,GAAM,uCAAuC,IAEzD;CACT;CAGA,aAAa,GAAgB,GAAuB;EAClD,OAAO,KAAK,KAAK,GAAO,CAAI,KAAK,KAAK,aAAa,GAAiB,CAAI;CAC1E;CAMA,cAAc,GAAgB,GAAuB;EAInD,OAHI,OAAO,KAAU,YAAY,EAAM,WAAW,IACzC,KAAK,KAAK,GAAM,4BAA4B,IAE9C,KAAK,aAAa,GAAO,CAAI;CACtC;CAEA,OAAO,GAAgB,GAAa,GAAc,GAAyB;EAEzE,OADI,KAAO,IAAkB,KAAK,KAAK,GAAG,EAAK,GAAG,KAAO,CAAM,IACxD;CACT;AACF;AAEA,SAAS,EAAc,GAAqB,GAAyB;CACnE,IAAI,CAAC,EAAS,CAAQ,GAAG;EACvB,EAAM,KAAK,YAAY,mBAAmB;EAC1C;CACF;CAEA,IAAM,EAAE,iBAAc,gBAAa;CAqBnC,AApBI,CAAC,EAAS,CAAY,KAAK,OAAO,KAAK,CAAY,EAAE,WAAW,IAClE,EAAM,KAAK,yBAAyB,4BAA4B,IAEhE,OAAO,QAAQ,CAAY,EAAE,SAAS,CAAC,GAAI,OAAiB;EAC1D,IAAM,IAAO,yBAAyB;EACtC,IAAI,CAAC,EAAS,CAAW,GAAG;GAC1B,EAAM,KAAK,GAAM,mBAAmB;GACpC;EACF;EAEA,AADA,EAAM,KAAK,EAAY,SAAS,GAAG,EAAK,SAAS,GAC7C,cAAc,KAAe,EAAY,aAAa,MACxD,EAAM,KAAK,GAAG,EAAK,YAAY,mBAAmB;EAEpD,IAAM,IAAU,CAAC,WAAW,UAAU;EACtC,OAAO,KAAK,CAAW,EACpB,QAAQ,MAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,SAAS,MAAQ,EAAM,KAAK,GAAG,EAAK,GAAG,KAAO,gBAAgB,CAAC;CACpE,CAAC,GAGC,MAAa,KAAA,MACX,CAAC,MAAM,QAAQ,CAAQ,KAAK,EAAS,WAAW,IAClD,EAAM,KAAK,qBAAqB,2BAA2B,IAE3D,EAAS,SAAS,GAAS,MAAU;EACnC,CAAI,OAAO,KAAY,YAAY,EAAQ,WAAW,MACpD,EAAM,KACJ,qBAAqB,EAAM,IAC3B,4BACF;CAEJ,CAAC;AAGP;AAEA,SAAS,EACP,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAS,CAAW,KAAK,OAAO,KAAK,CAAW,EAAE,WAAW,GAAG;EACnE,EAAM,KAAK,GAAM,4BAA4B;EAC7C;CACF;CAEA,IAAM,EAAE,cAAW,cAAW,cAAW;CAOzC,AANI,MAAc,KAAA,KAAa,CAAC,EAAU,GAAW,CAAC,KACpD,EAAM,KAAK,GAAG,EAAK,aAAa,gCAAgC,GAE9D,MAAc,KAAA,KAAa,CAAC,EAAU,GAAW,CAAC,KACpD,EAAM,KAAK,GAAG,EAAK,aAAa,4BAA4B,GAE1D,MAAW,KAAA,KAAa,CAAC,EAAQ,GAAQ,CAAkB,KAC7D,EAAM,KAAK,GAAG,EAAK,UAAU,2BAA2B;AAE5D;AAEA,SAAS,EAAW,GAAqB,GAAgB,GAAoB;CAC3E,IAAI,CAAC,EAAS,CAAK,GAAG;EACpB,EAAM,KAAK,GAAM,mBAAmB;EACpC;CACF;CAEA,IAAM,EAAE,SAAM,UAAO,SAAM,gBAAa,aAAU,aAAU,eAAY;CAyCxE,AAvCK,EAAQ,GAAM,CAAW,KAC5B,EAAM,KAAK,GAAG,EAAK,QAAQ,+BAA+B,GAE5D,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GACjC,EAAM,KAAK,GAAM,GAAG,EAAK,MAAM,GAC3B,MAAgB,KAAA,KAAW,EAAM,KAAK,GAAa,GAAG,EAAK,aAAa,GACxE,EAAM,YAAY,KAAA,KAAa,OAAO,EAAM,WAAY,YAC1D,EAAM,KAAK,GAAG,EAAK,WAAW,kBAAkB,GAE9C,OAAO,KAAa,aACtB,EAAM,KAAK,GAAG,EAAK,YAAY,mBAAmB,GAEhD,MAAa,KAAA,KAAa,CAAC,EAAQ,GAAU,CAAa,KAC5D,EAAM,KAAK,GAAG,EAAK,YAAY,6BAA6B,GAE1D,MAAS,iBAAiB,MAAa,KAAA,KACzC,EAAM,KAAK,GAAG,EAAK,YAAY,oCAAoC,GAGjE,MAAY,KAAA,MACV,MAAS,WAEF,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,WAAW,IACvD,EAAM,KAAK,GAAG,EAAK,WAAW,2BAA2B,IAEzD,EAAQ,SAAS,GAAQ,MAAU;EACjC,IAAM,IAAa,GAAG,EAAK,WAAW,EAAM;EAC5C,IAAI,CAAC,EAAS,CAAM,GAAG;GACrB,EAAM,KAAK,GAAY,mBAAmB;GAC1C;EACF;EAIA,CAHI,OAAO,EAAO,SAAU,YAAY,EAAO,MAAM,WAAW,MAC9D,EAAM,KAAK,GAAG,EAAW,SAAS,4BAA4B,GAEhE,EAAM,KAAK,EAAO,OAAO,GAAG,EAAW,OAAO;CAChD,CAAC,IAdD,EAAM,KAAK,GAAG,EAAK,WAAW,mCAAmC,IAkBjE,EAAM,gBAAgB,KAAA,KACxB,EAAiB,GAAO,EAAM,aAAa,GAAG,EAAK,aAAa;AAEpE;AAGA,SAAS,EACP,GACA,GACA,GACU;CAMV,OALI,CAAC,EAAS,CAAM,KAAK,OAAO,KAAK,CAAM,EAAE,WAAW,KACtD,EAAM,KAAK,GAAM,4BAA4B,GACtC,CAAC,KAGH,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,GAAM,QACnC,EAAmB,KAAK,CAAI,KAC/B,EAAM,KAAK,GAAG,EAAK,GAAG,KAAQ,2BAA2B,GAE3D,EAAW,GAAO,GAAO,GAAG,EAAK,GAAG,GAAM,GACnC,EACR;AACH;AAGA,SAAS,EAAU,GAAqB,GAAyB;CAC/D,IAAI,CAAC,EAAS,CAAI,GAEhB,OADA,EAAM,KAAK,cAAc,mBAAmB,GACrC,CAAC;CAGV,AAAI,EAAK,SAAS,KAAA,KAAW,EAAM,KAAK,EAAK,MAAM,iBAAiB;CAEpE,IAAM,IAAQ,EAAY,GAAO,EAAK,MAAM,iBAAiB,GACvD,IAAkB,CAAC;CAEzB,AAAI,EAAK,aAAa,KAAA,MAChB,CAAC,EAAS,EAAK,QAAQ,KAAK,OAAO,KAAK,EAAK,QAAQ,EAAE,WAAW,IACpE,EAAM,KAAK,uBAAuB,4BAA4B,IAE9D,OAAO,QAAQ,EAAK,QAAQ,EAAE,SAAS,CAAC,GAAM,OAAY;EACxD,IAAI,CAAC,EAAQ,GAAM,CAAa,GAAG;GACjC,EAAM,KAAK,uBAAuB,KAAQ,uBAAuB;GACjE;EACF;EAEA,AADA,EAAM,KAAK,CAAI,GACf,EAAM,KACJ,GAAG,EAAY,GAAO,GAAQ,uBAAuB,GAAM,CAC7D;CACF,CAAC;CAML,IAAM,IAAa,EAAM,QACtB,GAAM,MAAU,EAAM,QAAQ,CAAI,MAAM,CAC3C;CAKA,OAJA,MAAM,KAAK,IAAI,IAAI,CAAU,CAAC,EAAE,SAAS,MACvC,EAAM,KAAK,cAAc,KAAQ,4BAA4B,CAC/D,GAEO;AACT;AAEA,SAAS,EAAc,GAAwB;CAM7C,OALK,EAAS,CAAI,IAKX,CAHL,EAAK,MACL,GAAG,OAAO,OAAO,EAAS,EAAK,QAAQ,IAAI,EAAK,WAAW,CAAC,CAAC,CAExD,EAAO,MACX,MACC,EAAS,CAAK,KACd,OAAO,OAAO,CAAK,EAAE,MAClB,MAAU,EAAS,CAAK,KAAK,EAAM,SAAS,aAC/C,CACJ,IAX4B;AAY9B;AAEA,SAAS,EAAa,GAAqB,GAAwB;CACjE,AAAI,EAAM,aAAa,GAAS,eAAe,KACxC,EAAmB,SAAS,KAC/B,EAAM,KACJ,iBACA,mBAAmB,EAAmB,YACxC;AAGN;AAEA,SAAS,EAAU,GAAqB,GAAY,GAAuB;CACzE,IAAI,CAAC,EAAQ,EAAM,MAAM,CAAW,GAAG;EACrC,EAAM,KAAK,cAAc,yBAAyB;EAClD;CACF;CAEA,IAAI,EAAM,SAAS,UAAU;EAoB3B,AAnBA,EAAM,cAAc,EAAM,QAAQ,cAAc,GAG5C,EAAM,YAAY,KAAA,KAAW,EAAa,GAAO,EAAM,OAAO,GAI9D,EAAM,WAAW,KACnB,EAAM,KACJ,uBACA,uCACF,GAEE,EAAM,SAAS,OAAO,KAAK,CAAC,EAAc,EAAM,IAAI,KACtD,EAAM,KACJ,cACA,sDACF,GAEE,EAAM,WAAW,KAAA,MACd,EAAM,SAAS,OAAO,IAGzB,EAAM,cAAc,EAAM,QAAQ,cAAc,IAFhD,EAAM,KAAK,gBAAgB,sCAAsC;EAKrE;CACF;CAIA,AAFA,EAAa,GAAO,EAAM,OAAO,GACjC,EAAM,OAAO,GAAO,UAAU,SAAS,kCAAkC,GACzE,EAAM,OAAO,GAAO,UAAU,SAAS,kCAAkC;AAC3E;AAGA,SAAgB,EAAc,GAA6B;CACzD,OAAO,EAAS,CAAS,KAAK,EAAU,UAAU,KAAA;AACpD;AAQA,SAAgB,EAAmB,GAA2C;CAC5E,IAAM,IAAQ,IAAI,EAAa;CAE/B,IAAI,CAAC,EAAS,CAAS,GACrB,OAAO;EAAE,OAAO;EAAO,QAAQ,CAAC,6BAA6B;CAAE;CAGjE,IAAM,EAAE,aAAU;CA+BlB,OA9BK,EAAS,CAAK,IAGf,EAAM,YAAA,UAQR,OAAO,EAAU,MAAO,YACxB,CAAC,EAAiB,KAAK,EAAU,EAAE,MAEnC,EAAM,KAAK,MAAM,0BAA0B,GAE7C,EAAM,KAAK,EAAU,MAAM,MAAM,GACjC,EAAM,KAAK,EAAU,aAAa,aAAa,GAE7C,EAAU,UAAU,KAAA,MACnB,OAAO,EAAU,SAAU,YAC1B,CAAC,EAAiB,KAAK,EAAU,KAAK,MAExC,EAAM,KAAK,SAAS,0BAA0B,GAGhD,EAAc,GAAO,EAAU,QAAQ,GAEvC,EAAU,GAAO,GADH,EAAU,GAAO,EAAM,IACb,CAAK,GAEtB;EAAE,OAAO,EAAM,OAAO,WAAW;EAAG,QAAQ,EAAM;CAAO,KA1BvD;EACL,OAAO;EACP,QAAQ,CAAC,gCAA2C;CACtD,IANO;EAAE,OAAO;EAAO,QAAQ,CAAC,0BAA0B;CAAE;AA8BhE"}

package/dist/manifests/types.cjs

@@ -0,0 +1,2 @@
+require("../_virtual/_rolldown/runtime.cjs");var e=[`form`,`automation`];exports.SETUP_PLACEHOLDER_NAMESPACES=e;
+//# sourceMappingURL=types.cjs.map

package/dist/manifests/types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.cjs","names":[],"sources":["../../src/manifests/types.ts"],"sourcesContent":["/**\n * Host-owned shape of an extension-authored setup experience.\n *\n * A catalog entry is declarative data published by `@openhands/extensions`. Its\n * optional `setup` block says what to ask a user for; everything derivable from\n * that — the request to send, the route, the review screen, the analytics — is\n * this host's to generate, so none of it appears here.\n *\n * The names mirror `@openhands/extensions/automations`' own declarations, so an\n * entry from the published package assigns without an adapter.\n */\n\nexport const SETUP_VERSION = \"1.0\";\n\nexport type SetupMode = \"direct\" | \"assisted\";\n\nexport type SetupFieldType =\n  | \"text\"\n  | \"textarea\"\n  | \"select\"\n  | \"cron\"\n  | \"timezone\"\n  | \"repo-picker\";\n\nexport type SetupGitProvider = \"github\" | \"gitlab\" | \"bitbucket\";\n\nexport type SetupTriggerKind = \"cron\" | \"event\";\n\n/** Placeholder namespaces a setup block may reference inside `{{...}}`. */\nexport const SETUP_PLACEHOLDER_NAMESPACES = [\"form\", \"automation\"] as const;\n\nexport interface SetupFieldOption {\n  value: string;\n  label: string;\n}\n\nexport interface SetupFieldConstraints {\n  minLength?: number;\n  maxLength?: number;\n  /**\n   * A host-implemented check named from a closed set. Entries supply no regex\n   * of their own, so they cannot hand the host a pathological pattern.\n   */\n  format?: \"safeExpressionLiteral\";\n}\n\nexport interface SetupFormField {\n  type: SetupFieldType;\n  label: string;\n  help: string;\n  placeholder?: string;\n  default?: string;\n  required: boolean;\n  provider?: SetupGitProvider;\n  options?: SetupFieldOption[];\n  constraints?: SetupFieldConstraints;\n}\n\n/** Keyed by field name, which is what `{{form.<name>}}` resolves against. */\nexport type SetupFormFields = Record<string, SetupFormField>;\n\nexport interface SetupForm {\n  note?: string;\n  /** Inputs that decide when the automation runs, keyed by trigger kind. */\n  triggers?: Partial<Record<SetupTriggerKind, SetupFormFields>>;\n  /** Every other input: the arguments to the automation itself. */\n  args: SetupFormFields;\n}\n\nexport interface SetupBlock {\n  version: typeof SETUP_VERSION;\n  mode: SetupMode;\n  form: SetupForm;\n  /** direct only. What the automation is told to do. */\n  prompt?: string;\n  /** direct only, event trigger only. Which delivered events belong to it. */\n  filter?: string;\n  /**\n   * Setup context for the conversation that finishes setup. Required for\n   * assisted mode. Optional for direct mode, where it seeds the fallback\n   * conversation offered when the deployment cannot run the direct path.\n   */\n  message?: string;\n}\n\nexport interface SetupIntegrationRequirement {\n  /** Why this entry needs the integration. */\n  message: string;\n  /** Defaults to true. `false` lets setup continue while it is unconnected. */\n  required?: false;\n}\n\nexport interface SetupPrerequisites {\n  /** Keyed by integration catalog id. */\n  integrations: Record<string, SetupIntegrationRequirement>;\n  /** Deployment capabilities this entry cannot run without. */\n  features?: string[];\n}\n\n/**\n * The part of a catalog entry this host reads. An admitted entry always has a\n * `setup` block; entries without one are simply not setup entries.\n */\nexport interface SetupEntry {\n  id: string;\n  name: string;\n  description: string;\n  requires: SetupPrerequisites;\n  /** The skill that owns the launch command. Defaults to `id`. */\n  skill?: string;\n  setup: SetupBlock;\n}\n\nexport type SetupPayloadValue =\n  | string\n  | number\n  | boolean\n  | null\n  | SetupPayloadValue[]\n  | { [key: string]: SetupPayloadValue };\n\nexport interface SetupRequestBody {\n  [key: string]: SetupPayloadValue;\n}\n\n/** Form values are collected as strings; the payload mapping shapes them. */\nexport type SetupFormValues = Record<string, string>;\n\n/** `GET /v1/capabilities` — what this deployment supports. */\nexport interface DeploymentCapabilities {\n  ready: boolean;\n  triggerKinds: string[];\n  eventSources: string[];\n  eventTypes: string[];\n  triggers: {\n    cron?: { minIntervalSeconds: number; timezones: string[] };\n    event?: { filterLanguage: string; filterFunctions: string[] };\n  };\n  features: string[];\n}\n\n/** A single problem with a draft, addressed to the field that caused it. */\nexport interface DraftValidationError {\n  /** Dotted path into the draft. Null when the problem spans the whole draft. */\n  field: string | null;\n  code: string;\n  message: string;\n}\n\n/** `POST /v1/validate` — an invalid draft is still a 200. */\nexport interface ValidateDraftResponse {\n  valid: boolean;\n  errors: DraftValidationError[];\n  sampleEventMatched?: boolean | null;\n}\n\n/**\n * Host-owned shape of the production Automation interface manifest, published\n * by `@openhands/extensions/automations` as `AUTOMATION_INTERFACE`.\n *\n * The catalog states what varies per automation; this states the domain-level\n * facts of the interface itself. As with setup entries, the published data is\n * validated at admission rather than trusted, and a package that predates the\n * manifest simply leaves the host on its own defaults.\n */\n\nexport const INTERFACE_VERSION = \"1.0\";\n\n/** The closed set of runtime-model properties a client may offer for setting. */\nexport type AutomationAttributeName =\n  | \"name\"\n  | \"prompt\"\n  | \"model\"\n  | \"timeout\"\n  | \"schedule\";\n\nexport type InterfaceAttributeType =\n  | \"text\"\n  | \"textarea\"\n  | \"number\"\n  | \"llm-profile\"\n  | \"schedule\";\n\n/** How one settable attribute of an existing Automation is offered. */\nexport interface InterfaceAttribute {\n  type: InterfaceAttributeType;\n  label: string;\n  help?: string;\n  required: boolean;\n  /** Only a `number` attribute carries constraints. */\n  constraints?: { min?: number; max?: number };\n}\n\nexport interface InterfaceRoutes {\n  list: string;\n  /** Carries the `:automationId` segment the host substitutes. */\n  setup: string;\n  /** Carries the `:automationId` segment the host substitutes. */\n  detail: string;\n}\n\n/**\n * Service-relative paths the host calls. The base path, methods, headers, and\n * auth remain the host's. `{id}` marks where the automation id is substituted.\n */\nexport interface InterfaceEndpoints {\n  list: string;\n  detail: string;\n  dispatch: string;\n  runs: string;\n  tarball: string;\n  health: string;\n  capabilities: string;\n  validate: string;\n  createPrompt: string;\n  createPlugin: string;\n}\n\nexport type InterfaceEndpointName = keyof InterfaceEndpoints;\n\nexport interface InterfaceImportExport {\n  fileKind: string;\n  fileVersion: number;\n  filenameSuffix: string;\n  importDefaults: {\n    /** Provider inferred for short owner/repo repository URLs on import. */\n    repoProvider: SetupGitProvider;\n    /** Event source of the placeholder trigger that keeps an import inert. */\n    placeholderEventSource: string;\n  };\n}\n\nexport interface InterfaceManifest {\n  version: typeof INTERFACE_VERSION;\n  routes: InterfaceRoutes;\n  navigation: {\n    sidebar: { label: string };\n    commandMenu: { title: string; description: string; keywords: string };\n  };\n  pages: {\n    list: { title: string; subtitle: string };\n    detail: { backLabel: string };\n    edit: { title: string };\n  };\n  docsUrl: string;\n  /**\n   * The input surface of an existing Automation, keyed by the runtime-model\n   * property the host sends. Rendering it as an edit dialog is this host's\n   * choice, not stated here.\n   */\n  attributes: Partial<Record<AutomationAttributeName, InterfaceAttribute>>;\n  importExport: InterfaceImportExport;\n  endpoints: InterfaceEndpoints;\n  featuredAutomationIds: string[];\n  responderIntegrationIds: string[];\n}\n"],"mappings":"6CA6BA,IAAa,EAA+B,CAAC,OAAQ,YAAY"}

package/dist/manifests/types.d.ts

@@ -0,0 +1,227 @@
+/**
+ * Host-owned shape of an extension-authored setup experience.
+ *
+ * A catalog entry is declarative data published by `@openhands/extensions`. Its
+ * optional `setup` block says what to ask a user for; everything derivable from
+ * that — the request to send, the route, the review screen, the analytics — is
+ * this host's to generate, so none of it appears here.
+ *
+ * The names mirror `@openhands/extensions/automations`' own declarations, so an
+ * entry from the published package assigns without an adapter.
+ */
+export declare const SETUP_VERSION = "1.0";
+export type SetupMode = "direct" | "assisted";
+export type SetupFieldType = "text" | "textarea" | "select" | "cron" | "timezone" | "repo-picker";
+export type SetupGitProvider = "github" | "gitlab" | "bitbucket";
+export type SetupTriggerKind = "cron" | "event";
+/** Placeholder namespaces a setup block may reference inside `{{...}}`. */
+export declare const SETUP_PLACEHOLDER_NAMESPACES: readonly ["form", "automation"];
+export interface SetupFieldOption {
+    value: string;
+    label: string;
+}
+export interface SetupFieldConstraints {
+    minLength?: number;
+    maxLength?: number;
+    /**
+     * A host-implemented check named from a closed set. Entries supply no regex
+     * of their own, so they cannot hand the host a pathological pattern.
+     */
+    format?: "safeExpressionLiteral";
+}
+export interface SetupFormField {
+    type: SetupFieldType;
+    label: string;
+    help: string;
+    placeholder?: string;
+    default?: string;
+    required: boolean;
+    provider?: SetupGitProvider;
+    options?: SetupFieldOption[];
+    constraints?: SetupFieldConstraints;
+}
+/** Keyed by field name, which is what `{{form.<name>}}` resolves against. */
+export type SetupFormFields = Record<string, SetupFormField>;
+export interface SetupForm {
+    note?: string;
+    /** Inputs that decide when the automation runs, keyed by trigger kind. */
+    triggers?: Partial<Record<SetupTriggerKind, SetupFormFields>>;
+    /** Every other input: the arguments to the automation itself. */
+    args: SetupFormFields;
+}
+export interface SetupBlock {
+    version: typeof SETUP_VERSION;
+    mode: SetupMode;
+    form: SetupForm;
+    /** direct only. What the automation is told to do. */
+    prompt?: string;
+    /** direct only, event trigger only. Which delivered events belong to it. */
+    filter?: string;
+    /**
+     * Setup context for the conversation that finishes setup. Required for
+     * assisted mode. Optional for direct mode, where it seeds the fallback
+     * conversation offered when the deployment cannot run the direct path.
+     */
+    message?: string;
+}
+export interface SetupIntegrationRequirement {
+    /** Why this entry needs the integration. */
+    message: string;
+    /** Defaults to true. `false` lets setup continue while it is unconnected. */
+    required?: false;
+}
+export interface SetupPrerequisites {
+    /** Keyed by integration catalog id. */
+    integrations: Record<string, SetupIntegrationRequirement>;
+    /** Deployment capabilities this entry cannot run without. */
+    features?: string[];
+}
+/**
+ * The part of a catalog entry this host reads. An admitted entry always has a
+ * `setup` block; entries without one are simply not setup entries.
+ */
+export interface SetupEntry {
+    id: string;
+    name: string;
+    description: string;
+    requires: SetupPrerequisites;
+    /** The skill that owns the launch command. Defaults to `id`. */
+    skill?: string;
+    setup: SetupBlock;
+}
+export type SetupPayloadValue = string | number | boolean | null | SetupPayloadValue[] | {
+    [key: string]: SetupPayloadValue;
+};
+export interface SetupRequestBody {
+    [key: string]: SetupPayloadValue;
+}
+/** Form values are collected as strings; the payload mapping shapes them. */
+export type SetupFormValues = Record<string, string>;
+/** `GET /v1/capabilities` — what this deployment supports. */
+export interface DeploymentCapabilities {
+    ready: boolean;
+    triggerKinds: string[];
+    eventSources: string[];
+    eventTypes: string[];
+    triggers: {
+        cron?: {
+            minIntervalSeconds: number;
+            timezones: string[];
+        };
+        event?: {
+            filterLanguage: string;
+            filterFunctions: string[];
+        };
+    };
+    features: string[];
+}
+/** A single problem with a draft, addressed to the field that caused it. */
+export interface DraftValidationError {
+    /** Dotted path into the draft. Null when the problem spans the whole draft. */
+    field: string | null;
+    code: string;
+    message: string;
+}
+/** `POST /v1/validate` — an invalid draft is still a 200. */
+export interface ValidateDraftResponse {
+    valid: boolean;
+    errors: DraftValidationError[];
+    sampleEventMatched?: boolean | null;
+}
+/**
+ * Host-owned shape of the production Automation interface manifest, published
+ * by `@openhands/extensions/automations` as `AUTOMATION_INTERFACE`.
+ *
+ * The catalog states what varies per automation; this states the domain-level
+ * facts of the interface itself. As with setup entries, the published data is
+ * validated at admission rather than trusted, and a package that predates the
+ * manifest simply leaves the host on its own defaults.
+ */
+export declare const INTERFACE_VERSION = "1.0";
+/** The closed set of runtime-model properties a client may offer for setting. */
+export type AutomationAttributeName = "name" | "prompt" | "model" | "timeout" | "schedule";
+export type InterfaceAttributeType = "text" | "textarea" | "number" | "llm-profile" | "schedule";
+/** How one settable attribute of an existing Automation is offered. */
+export interface InterfaceAttribute {
+    type: InterfaceAttributeType;
+    label: string;
+    help?: string;
+    required: boolean;
+    /** Only a `number` attribute carries constraints. */
+    constraints?: {
+        min?: number;
+        max?: number;
+    };
+}
+export interface InterfaceRoutes {
+    list: string;
+    /** Carries the `:automationId` segment the host substitutes. */
+    setup: string;
+    /** Carries the `:automationId` segment the host substitutes. */
+    detail: string;
+}
+/**
+ * Service-relative paths the host calls. The base path, methods, headers, and
+ * auth remain the host's. `{id}` marks where the automation id is substituted.
+ */
+export interface InterfaceEndpoints {
+    list: string;
+    detail: string;
+    dispatch: string;
+    runs: string;
+    tarball: string;
+    health: string;
+    capabilities: string;
+    validate: string;
+    createPrompt: string;
+    createPlugin: string;
+}
+export type InterfaceEndpointName = keyof InterfaceEndpoints;
+export interface InterfaceImportExport {
+    fileKind: string;
+    fileVersion: number;
+    filenameSuffix: string;
+    importDefaults: {
+        /** Provider inferred for short owner/repo repository URLs on import. */
+        repoProvider: SetupGitProvider;
+        /** Event source of the placeholder trigger that keeps an import inert. */
+        placeholderEventSource: string;
+    };
+}
+export interface InterfaceManifest {
+    version: typeof INTERFACE_VERSION;
+    routes: InterfaceRoutes;
+    navigation: {
+        sidebar: {
+            label: string;
+        };
+        commandMenu: {
+            title: string;
+            description: string;
+            keywords: string;
+        };
+    };
+    pages: {
+        list: {
+            title: string;
+            subtitle: string;
+        };
+        detail: {
+            backLabel: string;
+        };
+        edit: {
+            title: string;
+        };
+    };
+    docsUrl: string;
+    /**
+     * The input surface of an existing Automation, keyed by the runtime-model
+     * property the host sends. Rendering it as an edit dialog is this host's
+     * choice, not stated here.
+     */
+    attributes: Partial<Record<AutomationAttributeName, InterfaceAttribute>>;
+    importExport: InterfaceImportExport;
+    endpoints: InterfaceEndpoints;
+    featuredAutomationIds: string[];
+    responderIntegrationIds: string[];
+}

package/dist/manifests/types.js

@@ -0,0 +1,6 @@
+//#region src/manifests/types.ts
+var e = ["form", "automation"];
+//#endregion
+export { e as SETUP_PLACEHOLDER_NAMESPACES };
+
+//# sourceMappingURL=types.js.map

package/dist/manifests/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../../src/manifests/types.ts"],"sourcesContent":["/**\n * Host-owned shape of an extension-authored setup experience.\n *\n * A catalog entry is declarative data published by `@openhands/extensions`. Its\n * optional `setup` block says what to ask a user for; everything derivable from\n * that — the request to send, the route, the review screen, the analytics — is\n * this host's to generate, so none of it appears here.\n *\n * The names mirror `@openhands/extensions/automations`' own declarations, so an\n * entry from the published package assigns without an adapter.\n */\n\nexport const SETUP_VERSION = \"1.0\";\n\nexport type SetupMode = \"direct\" | \"assisted\";\n\nexport type SetupFieldType =\n  | \"text\"\n  | \"textarea\"\n  | \"select\"\n  | \"cron\"\n  | \"timezone\"\n  | \"repo-picker\";\n\nexport type SetupGitProvider = \"github\" | \"gitlab\" | \"bitbucket\";\n\nexport type SetupTriggerKind = \"cron\" | \"event\";\n\n/** Placeholder namespaces a setup block may reference inside `{{...}}`. */\nexport const SETUP_PLACEHOLDER_NAMESPACES = [\"form\", \"automation\"] as const;\n\nexport interface SetupFieldOption {\n  value: string;\n  label: string;\n}\n\nexport interface SetupFieldConstraints {\n  minLength?: number;\n  maxLength?: number;\n  /**\n   * A host-implemented check named from a closed set. Entries supply no regex\n   * of their own, so they cannot hand the host a pathological pattern.\n   */\n  format?: \"safeExpressionLiteral\";\n}\n\nexport interface SetupFormField {\n  type: SetupFieldType;\n  label: string;\n  help: string;\n  placeholder?: string;\n  default?: string;\n  required: boolean;\n  provider?: SetupGitProvider;\n  options?: SetupFieldOption[];\n  constraints?: SetupFieldConstraints;\n}\n\n/** Keyed by field name, which is what `{{form.<name>}}` resolves against. */\nexport type SetupFormFields = Record<string, SetupFormField>;\n\nexport interface SetupForm {\n  note?: string;\n  /** Inputs that decide when the automation runs, keyed by trigger kind. */\n  triggers?: Partial<Record<SetupTriggerKind, SetupFormFields>>;\n  /** Every other input: the arguments to the automation itself. */\n  args: SetupFormFields;\n}\n\nexport interface SetupBlock {\n  version: typeof SETUP_VERSION;\n  mode: SetupMode;\n  form: SetupForm;\n  /** direct only. What the automation is told to do. */\n  prompt?: string;\n  /** direct only, event trigger only. Which delivered events belong to it. */\n  filter?: string;\n  /**\n   * Setup context for the conversation that finishes setup. Required for\n   * assisted mode. Optional for direct mode, where it seeds the fallback\n   * conversation offered when the deployment cannot run the direct path.\n   */\n  message?: string;\n}\n\nexport interface SetupIntegrationRequirement {\n  /** Why this entry needs the integration. */\n  message: string;\n  /** Defaults to true. `false` lets setup continue while it is unconnected. */\n  required?: false;\n}\n\nexport interface SetupPrerequisites {\n  /** Keyed by integration catalog id. */\n  integrations: Record<string, SetupIntegrationRequirement>;\n  /** Deployment capabilities this entry cannot run without. */\n  features?: string[];\n}\n\n/**\n * The part of a catalog entry this host reads. An admitted entry always has a\n * `setup` block; entries without one are simply not setup entries.\n */\nexport interface SetupEntry {\n  id: string;\n  name: string;\n  description: string;\n  requires: SetupPrerequisites;\n  /** The skill that owns the launch command. Defaults to `id`. */\n  skill?: string;\n  setup: SetupBlock;\n}\n\nexport type SetupPayloadValue =\n  | string\n  | number\n  | boolean\n  | null\n  | SetupPayloadValue[]\n  | { [key: string]: SetupPayloadValue };\n\nexport interface SetupRequestBody {\n  [key: string]: SetupPayloadValue;\n}\n\n/** Form values are collected as strings; the payload mapping shapes them. */\nexport type SetupFormValues = Record<string, string>;\n\n/** `GET /v1/capabilities` — what this deployment supports. */\nexport interface DeploymentCapabilities {\n  ready: boolean;\n  triggerKinds: string[];\n  eventSources: string[];\n  eventTypes: string[];\n  triggers: {\n    cron?: { minIntervalSeconds: number; timezones: string[] };\n    event?: { filterLanguage: string; filterFunctions: string[] };\n  };\n  features: string[];\n}\n\n/** A single problem with a draft, addressed to the field that caused it. */\nexport interface DraftValidationError {\n  /** Dotted path into the draft. Null when the problem spans the whole draft. */\n  field: string | null;\n  code: string;\n  message: string;\n}\n\n/** `POST /v1/validate` — an invalid draft is still a 200. */\nexport interface ValidateDraftResponse {\n  valid: boolean;\n  errors: DraftValidationError[];\n  sampleEventMatched?: boolean | null;\n}\n\n/**\n * Host-owned shape of the production Automation interface manifest, published\n * by `@openhands/extensions/automations` as `AUTOMATION_INTERFACE`.\n *\n * The catalog states what varies per automation; this states the domain-level\n * facts of the interface itself. As with setup entries, the published data is\n * validated at admission rather than trusted, and a package that predates the\n * manifest simply leaves the host on its own defaults.\n */\n\nexport const INTERFACE_VERSION = \"1.0\";\n\n/** The closed set of runtime-model properties a client may offer for setting. */\nexport type AutomationAttributeName =\n  | \"name\"\n  | \"prompt\"\n  | \"model\"\n  | \"timeout\"\n  | \"schedule\";\n\nexport type InterfaceAttributeType =\n  | \"text\"\n  | \"textarea\"\n  | \"number\"\n  | \"llm-profile\"\n  | \"schedule\";\n\n/** How one settable attribute of an existing Automation is offered. */\nexport interface InterfaceAttribute {\n  type: InterfaceAttributeType;\n  label: string;\n  help?: string;\n  required: boolean;\n  /** Only a `number` attribute carries constraints. */\n  constraints?: { min?: number; max?: number };\n}\n\nexport interface InterfaceRoutes {\n  list: string;\n  /** Carries the `:automationId` segment the host substitutes. */\n  setup: string;\n  /** Carries the `:automationId` segment the host substitutes. */\n  detail: string;\n}\n\n/**\n * Service-relative paths the host calls. The base path, methods, headers, and\n * auth remain the host's. `{id}` marks where the automation id is substituted.\n */\nexport interface InterfaceEndpoints {\n  list: string;\n  detail: string;\n  dispatch: string;\n  runs: string;\n  tarball: string;\n  health: string;\n  capabilities: string;\n  validate: string;\n  createPrompt: string;\n  createPlugin: string;\n}\n\nexport type InterfaceEndpointName = keyof InterfaceEndpoints;\n\nexport interface InterfaceImportExport {\n  fileKind: string;\n  fileVersion: number;\n  filenameSuffix: string;\n  importDefaults: {\n    /** Provider inferred for short owner/repo repository URLs on import. */\n    repoProvider: SetupGitProvider;\n    /** Event source of the placeholder trigger that keeps an import inert. */\n    placeholderEventSource: string;\n  };\n}\n\nexport interface InterfaceManifest {\n  version: typeof INTERFACE_VERSION;\n  routes: InterfaceRoutes;\n  navigation: {\n    sidebar: { label: string };\n    commandMenu: { title: string; description: string; keywords: string };\n  };\n  pages: {\n    list: { title: string; subtitle: string };\n    detail: { backLabel: string };\n    edit: { title: string };\n  };\n  docsUrl: string;\n  /**\n   * The input surface of an existing Automation, keyed by the runtime-model\n   * property the host sends. Rendering it as an edit dialog is this host's\n   * choice, not stated here.\n   */\n  attributes: Partial<Record<AutomationAttributeName, InterfaceAttribute>>;\n  importExport: InterfaceImportExport;\n  endpoints: InterfaceEndpoints;\n  featuredAutomationIds: string[];\n  responderIntegrationIds: string[];\n}\n"],"mappings":";AA6BA,IAAa,IAA+B,CAAC,QAAQ,YAAY"}

package/dist/node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.cjs

@@ -0,0 +1,9 @@
+require("../../../../../../_virtual/_rolldown/runtime.cjs");var e={id:`github-pr-reviewer`,name:`GitHub Code Review Agent`,category:`Code review`,description:`Watch for a configurable label on GitHub pull requests, inspect full PR and repository context, and post an AI review comment once per label event.`,requires:{integrations:{github:{message:`Used to read pull requests and post review comments.`}},features:[`repoClone`,`presetPrompt`]},popularityRank:100,estimatedSetupMinutes:4,exampleImplementation:`Trigger: cron polling for open GitHub PRs with a configured label such as openhands-review
+Required secret: GITHUB_PERSONAL_ACCESS_TOKEN
+
+1. Read repository, trigger label, review tone, and polling schedule from setup.
+2. List open PRs and find the latest matching GitHub labeled issue event for each labeled PR.
+3. Deduplicate on the label event ID so every label application queues exactly one review.
+4. Start an OpenHands conversation that clones the repo, checks out the exact PR head SHA, and inspects PR discussion, review comments, changed files, diff, and surrounding code.
+5. Post an acknowledgement with the conversation link, then post the final AI review comment only if the PR is still open and the head SHA has not changed.`,setup:{version:`1.0`,mode:`direct`,form:{triggers:{cron:{schedule:{type:`cron`,label:`Check frequency`,help:`How often to look for newly labelled pull requests.`,default:`*/15 * * * *`,required:!0},timezone:{type:`timezone`,label:`Timezone`,help:`Timezone the schedule is interpreted in.`,default:`UTC`,required:!0}}},args:{repository:{type:`repo-picker`,label:`Repository`,help:`The repository whose pull requests will be reviewed.`,provider:`github`,required:!0},triggerLabel:{type:`text`,label:`Trigger label`,help:`Only pull requests carrying this label are reviewed.`,default:`openhands-review`,required:!0,constraints:{minLength:1,maxLength:50}},reviewTone:{type:`select`,label:`Review tone`,help:`How detailed the review comments should be.`,default:`concise`,required:!0,options:[{value:`concise`,label:`Concise`},{value:`thorough`,label:`Thorough`}]}}},prompt:`Review pull requests labeled '{{form.triggerLabel}}' in {{form.repository}}. Review tone: {{form.reviewTone}}.`,message:`This deployment cannot run the scheduled review automation directly. Set it up in this conversation instead: confirm the repository to review, the trigger label, the review tone, and the polling schedule, then create the automation.`}};exports.default=e;
+//# sourceMappingURL=manifest.cjs.map

package/dist/node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.cjs","names":[],"sources":["../../../../../../../node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.json"],"sourcesContent":["{\n  \"id\": \"github-pr-reviewer\",\n  \"name\": \"GitHub Code Review Agent\",\n  \"category\": \"Code review\",\n  \"description\": \"Watch for a configurable label on GitHub pull requests, inspect full PR and repository context, and post an AI review comment once per label event.\",\n  \"requires\": {\n    \"integrations\": {\n      \"github\": {\n        \"message\": \"Used to read pull requests and post review comments.\"\n      }\n    },\n    \"features\": [\n      \"repoClone\",\n      \"presetPrompt\"\n    ]\n  },\n  \"popularityRank\": 100,\n  \"estimatedSetupMinutes\": 4,\n  \"exampleImplementation\": \"Trigger: cron polling for open GitHub PRs with a configured label such as openhands-review\\nRequired secret: GITHUB_PERSONAL_ACCESS_TOKEN\\n\\n1. Read repository, trigger label, review tone, and polling schedule from setup.\\n2. List open PRs and find the latest matching GitHub labeled issue event for each labeled PR.\\n3. Deduplicate on the label event ID so every label application queues exactly one review.\\n4. Start an OpenHands conversation that clones the repo, checks out the exact PR head SHA, and inspects PR discussion, review comments, changed files, diff, and surrounding code.\\n5. Post an acknowledgement with the conversation link, then post the final AI review comment only if the PR is still open and the head SHA has not changed.\",\n  \"setup\": {\n    \"version\": \"1.0\",\n    \"mode\": \"direct\",\n    \"form\": {\n      \"triggers\": {\n        \"cron\": {\n          \"schedule\": {\n            \"type\": \"cron\",\n            \"label\": \"Check frequency\",\n            \"help\": \"How often to look for newly labelled pull requests.\",\n            \"default\": \"*/15 * * * *\",\n            \"required\": true\n          },\n          \"timezone\": {\n            \"type\": \"timezone\",\n            \"label\": \"Timezone\",\n            \"help\": \"Timezone the schedule is interpreted in.\",\n            \"default\": \"UTC\",\n            \"required\": true\n          }\n        }\n      },\n      \"args\": {\n        \"repository\": {\n          \"type\": \"repo-picker\",\n          \"label\": \"Repository\",\n          \"help\": \"The repository whose pull requests will be reviewed.\",\n          \"provider\": \"github\",\n          \"required\": true\n        },\n        \"triggerLabel\": {\n          \"type\": \"text\",\n          \"label\": \"Trigger label\",\n          \"help\": \"Only pull requests carrying this label are reviewed.\",\n          \"default\": \"openhands-review\",\n          \"required\": true,\n          \"constraints\": {\n            \"minLength\": 1,\n            \"maxLength\": 50\n          }\n        },\n        \"reviewTone\": {\n          \"type\": \"select\",\n          \"label\": \"Review tone\",\n          \"help\": \"How detailed the review comments should be.\",\n          \"default\": \"concise\",\n          \"required\": true,\n          \"options\": [\n            {\n              \"value\": \"concise\",\n              \"label\": \"Concise\"\n            },\n            {\n              \"value\": \"thorough\",\n              \"label\": \"Thorough\"\n            }\n          ]\n        }\n      }\n    },\n    \"prompt\": \"Review pull requests labeled '{{form.triggerLabel}}' in {{form.repository}}. Review tone: {{form.reviewTone}}.\",\n    \"message\": \"This deployment cannot run the scheduled review automation directly. Set it up in this conversation instead: confirm the repository to review, the trigger label, the review tone, and the polling schedule, then create the automation.\"\n  }\n}\n"],"x_google_ignoreList":[0],"mappings":""}

package/dist/node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.js

@@ -0,0 +1,75 @@
+var e = {
+	id: "github-pr-reviewer",
+	name: "GitHub Code Review Agent",
+	category: "Code review",
+	description: "Watch for a configurable label on GitHub pull requests, inspect full PR and repository context, and post an AI review comment once per label event.",
+	requires: {
+		integrations: { github: { message: "Used to read pull requests and post review comments." } },
+		features: ["repoClone", "presetPrompt"]
+	},
+	popularityRank: 100,
+	estimatedSetupMinutes: 4,
+	exampleImplementation: "Trigger: cron polling for open GitHub PRs with a configured label such as openhands-review\nRequired secret: GITHUB_PERSONAL_ACCESS_TOKEN\n\n1. Read repository, trigger label, review tone, and polling schedule from setup.\n2. List open PRs and find the latest matching GitHub labeled issue event for each labeled PR.\n3. Deduplicate on the label event ID so every label application queues exactly one review.\n4. Start an OpenHands conversation that clones the repo, checks out the exact PR head SHA, and inspects PR discussion, review comments, changed files, diff, and surrounding code.\n5. Post an acknowledgement with the conversation link, then post the final AI review comment only if the PR is still open and the head SHA has not changed.",
+	setup: {
+		version: "1.0",
+		mode: "direct",
+		form: {
+			triggers: { cron: {
+				schedule: {
+					type: "cron",
+					label: "Check frequency",
+					help: "How often to look for newly labelled pull requests.",
+					default: "*/15 * * * *",
+					required: !0
+				},
+				timezone: {
+					type: "timezone",
+					label: "Timezone",
+					help: "Timezone the schedule is interpreted in.",
+					default: "UTC",
+					required: !0
+				}
+			} },
+			args: {
+				repository: {
+					type: "repo-picker",
+					label: "Repository",
+					help: "The repository whose pull requests will be reviewed.",
+					provider: "github",
+					required: !0
+				},
+				triggerLabel: {
+					type: "text",
+					label: "Trigger label",
+					help: "Only pull requests carrying this label are reviewed.",
+					default: "openhands-review",
+					required: !0,
+					constraints: {
+						minLength: 1,
+						maxLength: 50
+					}
+				},
+				reviewTone: {
+					type: "select",
+					label: "Review tone",
+					help: "How detailed the review comments should be.",
+					default: "concise",
+					required: !0,
+					options: [{
+						value: "concise",
+						label: "Concise"
+					}, {
+						value: "thorough",
+						label: "Thorough"
+					}]
+				}
+			}
+		},
+		prompt: "Review pull requests labeled '{{form.triggerLabel}}' in {{form.repository}}. Review tone: {{form.reviewTone}}.",
+		message: "This deployment cannot run the scheduled review automation directly. Set it up in this conversation instead: confirm the repository to review, the trigger label, the review tone, and the polling schedule, then create the automation."
+	}
+};
+//#endregion
+export { e as default };
+
+//# sourceMappingURL=manifest.js.map

package/dist/node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","names":[],"sources":["../../../../../../../node_modules/@openhands/extensions/automations/catalog/github-pr-reviewer/manifest.json"],"sourcesContent":["{\n  \"id\": \"github-pr-reviewer\",\n  \"name\": \"GitHub Code Review Agent\",\n  \"category\": \"Code review\",\n  \"description\": \"Watch for a configurable label on GitHub pull requests, inspect full PR and repository context, and post an AI review comment once per label event.\",\n  \"requires\": {\n    \"integrations\": {\n      \"github\": {\n        \"message\": \"Used to read pull requests and post review comments.\"\n      }\n    },\n    \"features\": [\n      \"repoClone\",\n      \"presetPrompt\"\n    ]\n  },\n  \"popularityRank\": 100,\n  \"estimatedSetupMinutes\": 4,\n  \"exampleImplementation\": \"Trigger: cron polling for open GitHub PRs with a configured label such as openhands-review\\nRequired secret: GITHUB_PERSONAL_ACCESS_TOKEN\\n\\n1. Read repository, trigger label, review tone, and polling schedule from setup.\\n2. List open PRs and find the latest matching GitHub labeled issue event for each labeled PR.\\n3. Deduplicate on the label event ID so every label application queues exactly one review.\\n4. Start an OpenHands conversation that clones the repo, checks out the exact PR head SHA, and inspects PR discussion, review comments, changed files, diff, and surrounding code.\\n5. Post an acknowledgement with the conversation link, then post the final AI review comment only if the PR is still open and the head SHA has not changed.\",\n  \"setup\": {\n    \"version\": \"1.0\",\n    \"mode\": \"direct\",\n    \"form\": {\n      \"triggers\": {\n        \"cron\": {\n          \"schedule\": {\n            \"type\": \"cron\",\n            \"label\": \"Check frequency\",\n            \"help\": \"How often to look for newly labelled pull requests.\",\n            \"default\": \"*/15 * * * *\",\n            \"required\": true\n          },\n          \"timezone\": {\n            \"type\": \"timezone\",\n            \"label\": \"Timezone\",\n            \"help\": \"Timezone the schedule is interpreted in.\",\n            \"default\": \"UTC\",\n            \"required\": true\n          }\n        }\n      },\n      \"args\": {\n        \"repository\": {\n          \"type\": \"repo-picker\",\n          \"label\": \"Repository\",\n          \"help\": \"The repository whose pull requests will be reviewed.\",\n          \"provider\": \"github\",\n          \"required\": true\n        },\n        \"triggerLabel\": {\n          \"type\": \"text\",\n          \"label\": \"Trigger label\",\n          \"help\": \"Only pull requests carrying this label are reviewed.\",\n          \"default\": \"openhands-review\",\n          \"required\": true,\n          \"constraints\": {\n            \"minLength\": 1,\n            \"maxLength\": 50\n          }\n        },\n        \"reviewTone\": {\n          \"type\": \"select\",\n          \"label\": \"Review tone\",\n          \"help\": \"How detailed the review comments should be.\",\n          \"default\": \"concise\",\n          \"required\": true,\n          \"options\": [\n            {\n              \"value\": \"concise\",\n              \"label\": \"Concise\"\n            },\n            {\n              \"value\": \"thorough\",\n              \"label\": \"Thorough\"\n            }\n          ]\n        }\n      }\n    },\n    \"prompt\": \"Review pull requests labeled '{{form.triggerLabel}}' in {{form.repository}}. Review tone: {{form.reviewTone}}.\",\n    \"message\": \"This deployment cannot run the scheduled review automation directly. Set it up in this conversation instead: confirm the repository to review, the trigger label, the review tone, and the polling schedule, then create the automation.\"\n  }\n}\n"],"x_google_ignoreList":[0],"mappings":""}

package/dist/node_modules/@openhands/extensions/automations/catalog/github-repo-monitor/manifest.cjs

@@ -0,0 +1,9 @@
+require("../../../../../../_virtual/_rolldown/runtime.cjs");var e={id:`github-repo-monitor`,name:`GitHub repository monitor`,category:`Developer tools`,description:`Watch a repository for @OpenHands mentions in issues and PR comments, start a conversation, and post the agent's reply back to GitHub.`,requires:{integrations:{github:{message:`Used to read issue and pull request comments and post replies.`}},features:[`repoClone`,`presetPrompt`,`webhookDelivery`]},popularityRank:98,estimatedSetupMinutes:5,exampleImplementation:`Trigger: cron, every minute (configurable)
+Required secret: GITHUB_PERSONAL_ACCESS_TOKEN
+
+1. Poll GitHub for new issue and PR comments since the last run.
+2. Match comments containing the trigger phrase (case-insensitive, default: @OpenHands).
+3. Post an acknowledgment comment with a link to the new OpenHands conversation.
+4. Forward follow-up replies in the same thread to the running conversation.
+5. Post the agent's final response back to GitHub when the conversation completes.`,setup:{version:`1.0`,mode:`direct`,form:{triggers:{event:{on:{type:`select`,label:`Respond to`,help:`Which GitHub comment event starts a conversation.`,default:`issue_comment.created`,required:!0,options:[{value:`issue_comment.created`,label:`Comments on issues and pull requests`},{value:`pull_request_review_comment.created`,label:`Pull request review comments only`}]},triggerPhrase:{type:`text`,label:`Trigger phrase`,help:`Only comments containing this phrase start a conversation. Matched case-insensitively. Quotes and backslashes are not allowed, because the phrase becomes part of the event filter expression.`,default:`@openhands`,required:!0,constraints:{minLength:2,maxLength:50,format:`safeExpressionLiteral`}}}},args:{repository:{type:`repo-picker`,label:`Repository`,help:`The repository or repositories to watch for mentions.`,provider:`github`,required:!0},ref:{type:`text`,label:`Base branch`,help:`Branch checked out when the agent responds.`,default:`main`,required:!0,constraints:{minLength:1,maxLength:255}}}},prompt:`A comment in {{form.repository}} mentions '{{form.triggerPhrase}}'. Read the surrounding issue or pull request context from the event payload, then post a helpful reply as a comment on the same thread.`,filter:`icontains(comment.body, '{{form.triggerPhrase}}') && glob(repository.full_name, '{{form.repository}}')`,message:`This deployment cannot run the webhook-driven monitor directly. Set it up in this conversation instead: confirm the repository to watch, the comment event, and the trigger phrase, then create the automation. If webhook delivery is unavailable here, build the polling variant this skill supports.`}};exports.default=e;
+//# sourceMappingURL=manifest.cjs.map

package/dist/node_modules/@openhands/extensions/automations/catalog/github-repo-monitor/manifest.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.cjs","names":[],"sources":["../../../../../../../node_modules/@openhands/extensions/automations/catalog/github-repo-monitor/manifest.json"],"sourcesContent":["{\n  \"id\": \"github-repo-monitor\",\n  \"name\": \"GitHub repository monitor\",\n  \"category\": \"Developer tools\",\n  \"description\": \"Watch a repository for @OpenHands mentions in issues and PR comments, start a conversation, and post the agent's reply back to GitHub.\",\n  \"requires\": {\n    \"integrations\": {\n      \"github\": {\n        \"message\": \"Used to read issue and pull request comments and post replies.\"\n      }\n    },\n    \"features\": [\n      \"repoClone\",\n      \"presetPrompt\",\n      \"webhookDelivery\"\n    ]\n  },\n  \"popularityRank\": 98,\n  \"estimatedSetupMinutes\": 5,\n  \"exampleImplementation\": \"Trigger: cron, every minute (configurable)\\nRequired secret: GITHUB_PERSONAL_ACCESS_TOKEN\\n\\n1. Poll GitHub for new issue and PR comments since the last run.\\n2. Match comments containing the trigger phrase (case-insensitive, default: @OpenHands).\\n3. Post an acknowledgment comment with a link to the new OpenHands conversation.\\n4. Forward follow-up replies in the same thread to the running conversation.\\n5. Post the agent's final response back to GitHub when the conversation completes.\",\n  \"setup\": {\n    \"version\": \"1.0\",\n    \"mode\": \"direct\",\n    \"form\": {\n      \"triggers\": {\n        \"event\": {\n          \"on\": {\n            \"type\": \"select\",\n            \"label\": \"Respond to\",\n            \"help\": \"Which GitHub comment event starts a conversation.\",\n            \"default\": \"issue_comment.created\",\n            \"required\": true,\n            \"options\": [\n              {\n                \"value\": \"issue_comment.created\",\n                \"label\": \"Comments on issues and pull requests\"\n              },\n              {\n                \"value\": \"pull_request_review_comment.created\",\n                \"label\": \"Pull request review comments only\"\n              }\n            ]\n          },\n          \"triggerPhrase\": {\n            \"type\": \"text\",\n            \"label\": \"Trigger phrase\",\n            \"help\": \"Only comments containing this phrase start a conversation. Matched case-insensitively. Quotes and backslashes are not allowed, because the phrase becomes part of the event filter expression.\",\n            \"default\": \"@openhands\",\n            \"required\": true,\n            \"constraints\": {\n              \"minLength\": 2,\n              \"maxLength\": 50,\n              \"format\": \"safeExpressionLiteral\"\n            }\n          }\n        }\n      },\n      \"args\": {\n        \"repository\": {\n          \"type\": \"repo-picker\",\n          \"label\": \"Repository\",\n          \"help\": \"The repository or repositories to watch for mentions.\",\n          \"provider\": \"github\",\n          \"required\": true\n        },\n        \"ref\": {\n          \"type\": \"text\",\n          \"label\": \"Base branch\",\n          \"help\": \"Branch checked out when the agent responds.\",\n          \"default\": \"main\",\n          \"required\": true,\n          \"constraints\": {\n            \"minLength\": 1,\n            \"maxLength\": 255\n          }\n        }\n      }\n    },\n    \"prompt\": \"A comment in {{form.repository}} mentions '{{form.triggerPhrase}}'. Read the surrounding issue or pull request context from the event payload, then post a helpful reply as a comment on the same thread.\",\n    \"filter\": \"icontains(comment.body, '{{form.triggerPhrase}}') && glob(repository.full_name, '{{form.repository}}')\",\n    \"message\": \"This deployment cannot run the webhook-driven monitor directly. Set it up in this conversation instead: confirm the repository to watch, the comment event, and the trigger phrase, then create the automation. If webhook delivery is unavailable here, build the polling variant this skill supports.\"\n  }\n}\n"],"x_google_ignoreList":[0],"mappings":""}