npm - @openhands/agent-canvas - Versions diffs - 1.9.0 → 1.10.0 - Mend

@openhands/agent-canvas 1.9.0 → 1.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1105) hide show

package/dist/utils/mcp-config.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import {\n MCPConfig,\n MCPSSEServer,\n MCPSHTTPServer,\n MCPStdioServer,\n SettingsValue,\n} from \"#/types/settings\";\nimport type {\n MCPAuthCredential,\n MCPAuthenticationConfig,\n MCPJsonValue,\n MCPOAuthState,\n} from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nconst EMPTY_MCP_CONFIG: MCPConfig = {\n sse_servers: [],\n stdio_servers: [],\n shttp_servers: [],\n};\n\nexport const REDACTED_MCP_SECRET_VALUE = \"********\";\n\ntype SdkMcpServerConfig = Record<string, SettingsValue \| MCPAuthCredential>;\ntype SdkMcpConfig = Record<string, SdkMcpServerConfig>;\n\n/\n * The dict key for an SSE/SHTTP server doubles as its display name once a\n * user provides one. Keys that match the auto-generated fallback pattern\n * (``sse``, ``shttp``, ``shttp_1``, …) emitted by {@link toSdkMcpConfig}\n * carry no user intent, so we surface them as \"no name\" — re-serializing\n * regenerates the identical fallback key and existing configs are left\n * untouched.\n /\nfunction userGivenServerName(\n serverName: string,\n base: \"sse\" \| \"shttp\",\n): string \| undefined {\n const autoGenerated = new RegExp(`^${base}(_\\\\d+)?$`);\n return autoGenerated.test(serverName) ? undefined : serverName;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n return !!value && typeof value === \"object\" && !Array.isArray(value);\n}\n\nexport function getSdkMcpServerMap(\n value: unknown,\n): Record<string, unknown> \| null {\n if (!isRecord(value)) return null;\n\n const mcpServers = value.mcpServers;\n if (\n isRecord(mcpServers) &&\n !(\"url\" in mcpServers) &&\n !(\"command\" in mcpServers)\n ) {\n return mcpServers;\n }\n\n return value;\n}\n\nexport function stringRecord(\n value: unknown,\n): Record<string, string> \| undefined {\n if (!isRecord(value)) return undefined;\n const entries = Object.entries(value).filter(\n (entry): entry is [string, string] => typeof entry[1] === \"string\",\n );\n return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n if (value === REDACTED_MCP_SECRET_VALUE) return true;\n if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n if (isRecord(value))\n return Object.values(value).some(hasRedactedMcpSecretLeaf);\n return false;\n}\n\nfunction getOAuthState(value: unknown): MCPOAuthState \| undefined {\n if (!isRecord(value)) return undefined;\n const state: MCPOAuthState = {};\n if (isRecord(value.tokens)) {\n state.tokens = value.tokens as NonNullable<MCPOAuthState[\"tokens\"]>;\n }\n if (isRecord(value.client_info)) {\n state.client_info = value.client_info as NonNullable<\n MCPOAuthState[\"client_info\"]\n >;\n }\n if (\n typeof value.token_expires_at === \"number\" \|\|\n value.token_expires_at === null\n ) {\n state.token_expires_at = value.token_expires_at;\n }\n return Object.keys(state).length > 0 ? state : undefined;\n}\n\nfunction normalizeTaggedAuthCredential(\n value: unknown,\n): MCPAuthCredential \| undefined {\n if (!isRecord(value)) return undefined;\n switch (value.strategy) {\n case \"none\":\n return { strategy: \"none\" };\n case \"api_key\":\n if (typeof value.value !== \"string\") return undefined;\n return {\n strategy: \"api_key\",\n value: value.value,\n ...(typeof value.header_name === \"string\" && {\n header_name: value.header_name,\n }),\n };\n case \"bearer\":\n if (typeof value.value !== \"string\") return undefined;\n return { strategy: \"bearer\", value: value.value };\n case \"basic\":\n if (\n typeof value.username !== \"string\" \|\|\n typeof value.password !== \"string\"\n ) {\n return undefined;\n }\n return {\n strategy: \"basic\",\n username: value.username,\n password: value.password,\n };\n case \"header\": {\n const headers = stringRecord(value.headers);\n return headers ? { strategy: \"header\", headers } : undefined;\n }\n case \"oauth2\": {\n const authentication = getAuthenticationConfig(value.authentication);\n const state = getOAuthState(value.state);\n return {\n strategy: \"oauth2\",\n ...(authentication && { authentication }),\n ...(state && { state }),\n };\n }\n default:\n return undefined;\n }\n}\n\nfunction authCredentialFromServerConfig(\n serverConfig: Record<string, unknown>,\n): MCPAuthCredential \| undefined {\n return normalizeTaggedAuthCredential(serverConfig.auth);\n}\n\nfunction getRemoteSecretFields(entry: {\n auth?: MCPAuthCredential;\n headers?: Record<string, string>;\n}): Partial<SdkMcpServerConfig> {\n const fields: Partial<SdkMcpServerConfig> = {};\n if (entry.auth && !hasRedactedMcpSecretLeaf(entry.auth)) {\n fields.auth = entry.auth;\n }\n if (entry.headers && Object.keys(entry.headers).length > 0) {\n fields.headers = entry.headers;\n }\n return fields;\n}\n\n/\n Only an explicit ``false`` is carried. Every mutation round-trips the whole\n * server map through these converters, so preserving the flag here is what\n * stops adding or deleting one server from silently re-enabling another.\n /\nfunction disabledField(server: { enabled?: boolean }) {\n return server.enabled === false ? { enabled: false as const } : {};\n}\n\nfunction getRemoteServerFields(server: MCPServerConfig) {\n return {\n ...(server.name && { name: server.name }),\n url: server.url!,\n ...(server.headers && { headers: server.headers }),\n ...(server.auth && { auth: server.auth }),\n ...disabledField(server),\n };\n}\n\nexport function toMcpSseServer(server: MCPServerConfig): MCPSSEServer {\n return getRemoteServerFields(server);\n}\n\nexport function toMcpShttpServer(server: MCPServerConfig): MCPSHTTPServer {\n return {\n ...getRemoteServerFields(server),\n ...(server.timeout !== undefined && { timeout: server.timeout }),\n };\n}\n\nexport function toMcpStdioServer(server: MCPServerConfig): MCPStdioServer {\n return {\n name: server.name!,\n command: server.command!,\n ...(server.args && { args: server.args }),\n ...(server.env && { env: server.env }),\n ...disabledField(server),\n };\n}\n\nfunction getAuthenticationConfig(\n value: unknown,\n): MCPAuthenticationConfig \| undefined {\n if (!value \|\| typeof value !== \"object\") return undefined;\n const record = value as Record<string, unknown>;\n if (record.type !== \"oauth\") return undefined;\n const authentication: MCPAuthenticationConfig = { type: \"oauth\" };\n if (\n record.client_auth_method === \"none\" \|\|\n record.client_auth_method === \"client_secret_post\" \|\|\n record.client_auth_method === \"client_secret_basic\" \|\|\n record.client_auth_method === \"private_key_jwt\"\n ) {\n authentication.client_auth_method = record.client_auth_method;\n }\n if (typeof record.scopes === \"string\") {\n authentication.scopes = record.scopes;\n } else if (\n Array.isArray(record.scopes) &&\n record.scopes.every((scope) => typeof scope === \"string\")\n ) {\n authentication.scopes = record.scopes;\n }\n if (typeof record.client_name === \"string\") {\n authentication.client_name = record.client_name;\n }\n if (typeof record.client_metadata_url === \"string\") {\n authentication.client_metadata_url = record.client_metadata_url;\n }\n if (typeof record.client_id === \"string\") {\n authentication.client_id = record.client_id;\n }\n if (typeof record.client_secret === \"string\") {\n authentication.client_secret = record.client_secret;\n }\n if (\n record.additional_client_metadata &&\n typeof record.additional_client_metadata === \"object\" &&\n !Array.isArray(record.additional_client_metadata)\n ) {\n authentication.additional_client_metadata =\n record.additional_client_metadata as Record<string, MCPJsonValue>;\n }\n return authentication;\n}\n\n/\n Parse the SDK-native ``agent_settings.mcp_config`` value and convert it\n * to the frontend MCPConfig format used by UI components.\n /\nexport function parseMcpConfig(value: unknown): MCPConfig {\n const mcpConfig = getSdkMcpServerMap(value);\n if (!mcpConfig) {\n return { ...EMPTY_MCP_CONFIG };\n }\n\n const sseServers: (string \| MCPSSEServer)[] = [];\n const stdioServers: MCPStdioServer[] = [];\n const shttpServers: (string \| MCPSHTTPServer)[] = [];\n\n for (const [serverName, serverConfig] of Object.entries(mcpConfig)) {\n if (!isRecord(serverConfig)) continue;\n\n const url = serverConfig.url as string \| undefined;\n\n // The SDK omits ``enabled`` while it holds its default (true), so only an\n // explicit ``false`` marks a server as switched off.\n const disabled = serverConfig.enabled === false;\n\n if (url) {\n const transport = serverConfig.transport as string \| undefined;\n const auth = authCredentialFromServerConfig(serverConfig);\n const headers = stringRecord(serverConfig.headers);\n\n if (transport === \"sse\") {\n const name = userGivenServerName(serverName, \"sse\");\n const server: MCPSSEServer = { url };\n if (name) server.name = name;\n if (auth) server.auth = auth;\n if (headers) server.headers = headers;\n if (disabled) server.enabled = false;\n sseServers.push(server);\n } else {\n const name = userGivenServerName(serverName, \"shttp\");\n const server: MCPSHTTPServer = { url };\n if (name) server.name = name;\n if (serverConfig.timeout != null) {\n server.timeout = serverConfig.timeout as number;\n }\n if (auth) server.auth = auth;\n if (headers) server.headers = headers;\n if (disabled) server.enabled = false;\n shttpServers.push(server);\n }\n } else {\n if (typeof serverConfig.command !== \"string\") continue;\n const stdioServer: MCPStdioServer = {\n name: serverName,\n command: serverConfig.command,\n };\n if (serverConfig.args) {\n stdioServer.args = serverConfig.args as string[];\n }\n if (serverConfig.env) {\n stdioServer.env = serverConfig.env as Record<string, string>;\n }\n if (disabled) stdioServer.enabled = false;\n stdioServers.push(stdioServer);\n }\n }\n\n return {\n sse_servers: sseServers,\n stdio_servers: stdioServers,\n shttp_servers: shttpServers,\n };\n}\n\n/\n Convert the frontend MCPConfig format back to the SDK-native server map\n * expected by agent_settings.mcp_config on the backend.\n \n Names are only suffixed (``_1``, ``_2``, …) when an earlier entry has\n * already claimed the bare base name. We intentionally do NOT use a single\n * monotonic counter across server types: that would, for example, rename a\n * stdio server \"myname\" to \"myname_1\" the moment any sse/shttp entry is\n * persisted ahead of it, and shift the suffix on every save as the count\n * of other server types changes. With per-base collision suffixing,\n * unrelated entries keep their human-meaningful names stable across edits.\n \n ``enabled`` is only emitted when a server is switched off — the SDK defaults\n * it to true. Omitting it is what clears a previously persisted\n * ``enabled: false``, and that only works because ``saveSettings`` pre-clears\n * ``mcp_config`` to null before every write (see\n * ``settings-service.api.ts``), turning the backend's RFC 7386 merge into a\n * full replace. If that pre-clear is ever removed, re-enabling a server\n * becomes a silent no-op.\n */\nexport function toSdkMcpConfig(config: MCPConfig): SdkMcpConfig \| null {\n const mcpConfig: SdkMcpConfig = {};\n\n const reserve = (base: string): string => {\n const safeBase = toMcpServerName(base);\n if (!(safeBase in mcpConfig)) return safeBase;\n let i = 1;\n while (`${safeBase}_${i}` in mcpConfig) i += 1;\n return `${safeBase}_${i}`;\n };\n\n for (const entry of config.sse_servers) {\n const server: SdkMcpServerConfig = {};\n let name: string \| undefined;\n if (typeof entry === \"string\") {\n server.url = entry;\n } else {\n name = entry.name;\n server.url = entry.url;\n Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n }\n server.transport = \"sse\";\n mcpConfig[reserve(name \|\| \"sse\")] = server;\n }\n\n for (const entry of config.shttp_servers) {\n const server: SdkMcpServerConfig = { transport: \"http\" };\n let name: string \| undefined;\n if (typeof entry === \"string\") {\n server.url = entry;\n } else {\n name = entry.name;\n server.url = entry.url;\n Object.assign(server, getRemoteSecretFields(entry), disabledField(entry));\n if (entry.timeout != null) server.timeout = entry.timeout;\n }\n mcpConfig[reserve(name \|\| \"shttp\")] = server;\n }\n\n for (const entry of config.stdio_servers) {\n const server: SdkMcpServerConfig = {\n command: entry.command,\n };\n if (entry.args) server.args = entry.args;\n if (entry.env) server.env = entry.env;\n Object.assign(server, disabledField(entry));\n mcpConfig[reserve(entry.name \|\| \"stdio\")] = server;\n }\n\n return Object.keys(mcpConfig).length > 0 ? mcpConfig : null;\n}\n"],"mappings":";;AAgBA,IAAM,IAA8B;CAClC,aAAa,CAAC;CACd,eAAe,CAAC;CAChB,eAAe,CAAC;AAClB,GAEa,IAA4B;AAazC,SAAS,EACP,GACA,GACoB;CAEpB,OAD0B,OAAO,IAAI,EAAK,UACnC,EAAc,KAAK,CAAU,IAAI,KAAA,IAAY;AACtD;AAEA,SAAS,EAAS,GAAkD;CAClE,OAAO,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK;AACrE;AAEA,SAAgB,EACd,GACgC;CAChC,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAM;CASzB,OAPE,EAAS,CAAU,KACnB,EAAE,SAAS,MACX,EAAE,aAAa,KAER,IAGF;AACT;AAEA,SAAgB,EACd,GACoC;CACpC,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAU,OAAO,QAAQ,CAAK,EAAE,QACnC,MAAqC,OAAO,EAAM,MAAO,QAC5D;CACA,OAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,CAAO,IAAI,KAAA;AAC5D;AAEA,SAAgB,EAAyB,GAAyB;CAKhE,OAJI,MAAA,eAA4C,KAC5C,MAAM,QAAQ,CAAK,IAAU,EAAM,KAAK,CAAwB,IAChE,EAAS,CAAK,IACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,IACpD;AACT;AAEA,SAAS,EAAc,GAA2C;CAChE,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAuB,CAAC;CAe9B,OAdI,EAAS,EAAM,MAAM,MACvB,EAAM,SAAS,EAAM,SAEnB,EAAS,EAAM,WAAW,MAC5B,EAAM,cAAc,EAAM,eAK1B,OAAO,EAAM,oBAAqB,YAClC,EAAM,qBAAqB,UAE3B,EAAM,mBAAmB,EAAM,mBAE1B,OAAO,KAAK,CAAK,EAAE,SAAS,IAAI,IAAQ,KAAA;AACjD;AAEA,SAAS,EACP,GAC+B;CAC1B,MAAS,CAAK,GACnB,QAAQ,EAAM,UAAd;EACE,KAAK,QACH,OAAO,EAAE,UAAU,OAAO;EAC5B,KAAK,WAEH,OADI,OAAO,EAAM,SAAU,WACpB;GACL,UAAU;GACV,OAAO,EAAM;GACb,GAAI,OAAO,EAAM,eAAgB,YAAY,EAC3C,aAAa,EAAM,YACrB;EACF,IAPqC;EAQvC,KAAK,UAEH,OADI,OAAO,EAAM,SAAU,WACpB;GAAE,UAAU;GAAU,OAAO,EAAM;EAAM,IADX;EAEvC,KAAK,SAOH,OALE,OAAO,EAAM,YAAa,YAC1B,OAAO,EAAM,YAAa,WAE1B,SAEK;GACL,UAAU;GACV,UAAU,EAAM;GAChB,UAAU,EAAM;EAClB;EACF,KAAK,UAAU;GACb,IAAM,IAAU,EAAa,EAAM,OAAO;GAC1C,OAAO,IAAU;IAAE,UAAU;IAAU;GAAQ,IAAI,KAAA;EACrD;EACA,KAAK,UAAU;GACb,IAAM,IAAiB,EAAwB,EAAM,cAAc,GAC7D,IAAQ,EAAc,EAAM,KAAK;GACvC,OAAO;IACL,UAAU;IACV,GAAI,KAAkB,EAAE,kBAAe;IACvC,GAAI,KAAS,EAAE,SAAM;GACvB;EACF;EACA,SACE;CACJ;AACF;AAEA,SAAS,EACP,GAC+B;CAC/B,OAAO,EAA8B,EAAa,IAAI;AACxD;AAEA,SAAS,EAAsB,GAGC;CAC9B,IAAM,IAAsC,CAAC;CAO7C,OANI,EAAM,QAAQ,CAAC,EAAyB,EAAM,IAAI,MACpD,EAAO,OAAO,EAAM,OAElB,EAAM,WAAW,OAAO,KAAK,EAAM,OAAO,EAAE,SAAS,MACvD,EAAO,UAAU,EAAM,UAElB;AACT;AAOA,SAAS,EAAc,GAA+B;CACpD,OAAO,EAAO,YAAY,KAAQ,EAAE,SAAS,GAAe,IAAI,CAAC;AACnE;AAEA,SAAS,EAAsB,GAAyB;CACtD,OAAO;EACL,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,KAAK,EAAO;EACZ,GAAI,EAAO,WAAW,EAAE,SAAS,EAAO,QAAQ;EAChD,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,GAAG,EAAc,CAAM;CACzB;AACF;AAEA,SAAgB,EAAe,GAAuC;CACpE,OAAO,EAAsB,CAAM;AACrC;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,GAAG,EAAsB,CAAM;EAC/B,GAAI,EAAO,YAAY,KAAA,KAAa,EAAE,SAAS,EAAO,QAAQ;CAChE;AACF;AAEA,SAAgB,EAAiB,GAAyC;CACxE,OAAO;EACL,MAAM,EAAO;EACb,SAAS,EAAO;EAChB,GAAI,EAAO,QAAQ,EAAE,MAAM,EAAO,KAAK;EACvC,GAAI,EAAO,OAAO,EAAE,KAAK,EAAO,IAAI;EACpC,GAAG,EAAc,CAAM;CACzB;AACF;AAEA,SAAS,EACP,GACqC;CACrC,IAAI,CAAC,KAAS,OAAO,KAAU,UAAU;CACzC,IAAM,IAAS;CACf,IAAI,EAAO,SAAS,SAAS;CAC7B,IAAM,IAA0C,EAAE,MAAM,QAAQ;CAqChE,QAnCE,EAAO,uBAAuB,UAC9B,EAAO,uBAAuB,wBAC9B,EAAO,uBAAuB,yBAC9B,EAAO,uBAAuB,uBAE9B,EAAe,qBAAqB,EAAO,sBAEzC,OAAO,EAAO,UAAW,YAG3B,MAAM,QAAQ,EAAO,MAAM,KAC3B,EAAO,OAAO,OAAO,MAAU,OAAO,KAAU,QAAQ,OAHxD,EAAe,SAAS,EAAO,SAO7B,OAAO,EAAO,eAAgB,aAChC,EAAe,cAAc,EAAO,cAElC,OAAO,EAAO,uBAAwB,aACxC,EAAe,sBAAsB,EAAO,sBAE1C,OAAO,EAAO,aAAc,aAC9B,EAAe,YAAY,EAAO,YAEhC,OAAO,EAAO,iBAAkB,aAClC,EAAe,gBAAgB,EAAO,gBAGtC,EAAO,8BACP,OAAO,EAAO,8BAA+B,YAC7C,CAAC,MAAM,QAAQ,EAAO,0BAA0B,MAEhD,EAAe,6BACb,EAAO,6BAEJ;AACT;AAMA,SAAgB,EAAe,GAA2B;CACxD,IAAM,IAAY,EAAmB,CAAK;CAC1C,IAAI,CAAC,GACH,OAAO,EAAE,GAAG,EAAiB;CAG/B,IAAM,IAAwC,CAAC,GACzC,IAAiC,CAAC,GAClC,IAA4C,CAAC;CAEnD,KAAK,IAAM,CAAC,GAAY,MAAiB,OAAO,QAAQ,CAAS,GAAG;EAClE,IAAI,CAAC,EAAS,CAAY,GAAG;EAE7B,IAAM,IAAM,EAAa,KAInB,IAAW,EAAa,YAAY;EAE1C,IAAI,GAAK;GACP,IAAM,IAAY,EAAa,WACzB,IAAO,EAA+B,CAAY,GAClD,IAAU,EAAa,EAAa,OAAO;GAEjD,IAAI,MAAc,OAAO;IACvB,IAAM,IAAO,EAAoB,GAAY,KAAK,GAC5C,IAAuB,EAAE,OAAI;IAKnC,AAJI,MAAM,EAAO,OAAO,IACpB,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC1B,MAAU,EAAO,UAAU,KAC/B,EAAW,KAAK,CAAM;GACxB,OAAO;IACL,IAAM,IAAO,EAAoB,GAAY,OAAO,GAC9C,IAAyB,EAAE,OAAI;IAQrC,AAPI,MAAM,EAAO,OAAO,IACpB,EAAa,WAAW,SAC1B,EAAO,UAAU,EAAa,UAE5B,MAAM,EAAO,OAAO,IACpB,MAAS,EAAO,UAAU,IAC1B,MAAU,EAAO,UAAU,KAC/B,EAAa,KAAK,CAAM;GAC1B;EACF,OAAO;GACL,IAAI,OAAO,EAAa,WAAY,UAAU;GAC9C,IAAM,IAA8B;IAClC,MAAM;IACN,SAAS,EAAa;GACxB;GAQA,AAPI,EAAa,SACf,EAAY,OAAO,EAAa,OAE9B,EAAa,QACf,EAAY,MAAM,EAAa,MAE7B,MAAU,EAAY,UAAU,KACpC,EAAa,KAAK,CAAW;EAC/B;CACF;CAEA,OAAO;EACL,aAAa;EACb,eAAe;EACf,eAAe;CACjB;AACF;AAsBA,SAAgB,EAAe,GAAwC;CACrE,IAAM,IAA0B,CAAC,GAE3B,KAAW,MAAyB;EACxC,IAAM,IAAW,EAAgB,CAAI;EACrC,IAAI,EAAE,KAAY,IAAY,OAAO;EACrC,IAAI,IAAI;EACR,OAAO,GAAG,EAAS,GAAG,OAAO,IAAW,KAAK;EAC7C,OAAO,GAAG,EAAS,GAAG;CACxB;CAEA,KAAK,IAAM,KAAS,EAAO,aAAa;EACtC,IAAM,IAA6B,CAAC,GAChC;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,GAAG,EAAc,CAAK,CAAC,IAE1E,EAAO,YAAY,OACnB,EAAU,EAAQ,KAAQ,KAAK,KAAK;CACtC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EAAE,WAAW,OAAO,GACnD;EASJ,AARI,OAAO,KAAU,WACnB,EAAO,MAAM,KAEb,IAAO,EAAM,MACb,EAAO,MAAM,EAAM,KACnB,OAAO,OAAO,GAAQ,EAAsB,CAAK,GAAG,EAAc,CAAK,CAAC,GACpE,EAAM,WAAW,SAAM,EAAO,UAAU,EAAM,WAEpD,EAAU,EAAQ,KAAQ,OAAO,KAAK;CACxC;CAEA,KAAK,IAAM,KAAS,EAAO,eAAe;EACxC,IAAM,IAA6B,EACjC,SAAS,EAAM,QACjB;EAIA,AAHI,EAAM,SAAM,EAAO,OAAO,EAAM,OAChC,EAAM,QAAK,EAAO,MAAM,EAAM,MAClC,OAAO,OAAO,GAAQ,EAAc,CAAK,CAAC,GAC1C,EAAU,EAAQ,EAAM,QAAQ,OAAO,KAAK;CAC9C;CAEA,OAAO,OAAO,KAAK,CAAS,EAAE,SAAS,IAAI,IAAY;AACzD"}
1	+ {"version":3,"file":"mcp-config.js","names":[],"sources":["../../src/utils/mcp-config.ts"],"sourcesContent":["import type {\n MCPAuthCredential,\n MCPConfig,\n MCPConfigPatch,\n MCPServer,\n MCPServerPatch,\n} from \"@openhands/typescript-client\";\nimport { isMcpAuthCredential } from \"#/types/mcp-auth\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { toMcpServerName } from \"#/utils/mcp-server-name\";\n\nexport const REDACTED_MCP_SECRET_VALUE = \"********\";\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n !!value && typeof value === \"object\" && !Array.isArray(value);\n\nexport function getSdkMcpServerMap(\n value: unknown,\n): Record<string, unknown> \| null {\n if (!isRecord(value)) return null;\n\n const mcpServers = value.mcpServers;\n if (\n isRecord(mcpServers) &&\n !(\"url\" in mcpServers) &&\n !(\"command\" in mcpServers)\n ) {\n return mcpServers;\n }\n\n return value;\n}\n\nexport function stringRecord(\n value: unknown,\n): Record<string, string> \| undefined {\n if (!isRecord(value)) return undefined;\n const entries = Object.entries(value).filter(\n (entry): entry is [string, string] => typeof entry[1] === \"string\",\n );\n return entries.length > 0 ? Object.fromEntries(entries) : undefined;\n}\n\nexport function hasRedactedMcpSecretLeaf(value: unknown): boolean {\n if (value === REDACTED_MCP_SECRET_VALUE) return true;\n if (Array.isArray(value)) return value.some(hasRedactedMcpSecretLeaf);\n if (isRecord(value)) {\n return Object.values(value).some(hasRedactedMcpSecretLeaf);\n }\n return false;\n}\n\n// Agent Server persists this optional field, but typescript-client 1.36.1\n// does not yet expose it in its generated MCP model types.\nexport const getMcpServerEnabled = (server: MCPServer): boolean \| undefined =>\n (server as MCPServer & { enabled?: unknown }).enabled === false\n ? false\n : undefined;\n\nconst normalizeTransport = (\n value: unknown,\n): MCPServer[\"transport\"] \| undefined => {\n if (value === \"stdio\" \|\| value === \"sse\" \|\| value === \"streamable-http\") {\n return value;\n }\n if (value === \"http\" \|\| value === \"shttp\" \|\| value === undefined) {\n return \"http\";\n }\n return undefined;\n};\n\n/\n * Normalize the SDK and legacy cloud wrapper shapes into the client-owned,\n * name-keyed MCPConfig. The map key remains the server's persistence identity.\n /\n// @spec MCP-003 — Settings map keys are stable MCP identities\nexport function parseMcpConfig(value: unknown): MCPConfig {\n const serverMap = getSdkMcpServerMap(value);\n if (!serverMap) return {};\n\n const config: MCPConfig = {};\n for (const [settingsKey, candidate] of Object.entries(serverMap)) {\n if (!isRecord(candidate)) continue;\n\n if (typeof candidate.command === \"string\") {\n config[settingsKey] = {\n transport: \"stdio\",\n command: candidate.command,\n ...(Array.isArray(candidate.args) &&\n candidate.args.every((arg) => typeof arg === \"string\") && {\n args: candidate.args as string[],\n }),\n ...(stringRecord(candidate.env) && {\n env: stringRecord(candidate.env),\n }),\n ...(typeof candidate.cwd === \"string\" && { cwd: candidate.cwd }),\n ...(typeof candidate.description === \"string\" && {\n description: candidate.description,\n }),\n ...(typeof candidate.icon === \"string\" && { icon: candidate.icon }),\n ...(typeof candidate.timeout === \"number\" && {\n timeout: candidate.timeout,\n }),\n ...(candidate.enabled === false && { enabled: false }),\n };\n continue;\n }\n\n if (typeof candidate.url !== \"string\") continue;\n const transport = normalizeTransport(candidate.transport);\n if (!transport \|\| transport === \"stdio\") continue;\n config[settingsKey] = {\n transport,\n url: candidate.url,\n ...(stringRecord(candidate.headers) && {\n headers: stringRecord(candidate.headers),\n }),\n ...(isMcpAuthCredential(candidate.auth) && {\n auth: candidate.auth,\n }),\n ...(typeof candidate.description === \"string\" && {\n description: candidate.description,\n }),\n ...(typeof candidate.icon === \"string\" && { icon: candidate.icon }),\n ...(typeof candidate.timeout === \"number\" && {\n timeout: candidate.timeout,\n }),\n ...(typeof candidate.sse_read_timeout === \"number\" && {\n sse_read_timeout: candidate.sse_read_timeout,\n }),\n ...(typeof candidate.keep_alive === \"boolean\" && {\n keep_alive: candidate.keep_alive,\n }),\n ...(candidate.enabled === false && { enabled: false }),\n };\n }\n return config;\n}\n\nexport function toCanonicalMcpServer(server: MCPServerConfig): MCPServer {\n if (server.type === \"stdio\") {\n return {\n transport: \"stdio\",\n command: server.command!,\n ...(server.args?.length ? { args: server.args } : {}),\n ...(server.env && Object.keys(server.env).length > 0\n ? { env: server.env }\n : {}),\n ...(server.enabled === false && { enabled: false }),\n };\n }\n\n return {\n transport: server.type === \"sse\" ? \"sse\" : \"http\",\n url: server.url!,\n ...(server.headers && Object.keys(server.headers).length > 0\n ? { headers: server.headers }\n : {}),\n ...(server.auth ? { auth: server.auth } : {}),\n ...(server.type === \"shttp\" && server.timeout !== undefined\n ? { timeout: server.timeout }\n : {}),\n ...(server.enabled === false && { enabled: false }),\n };\n}\n\nconst buildEnabledPatch = (\n previous: MCPServer,\n edited: MCPServerConfig,\n): MCPServerPatch => {\n if (edited.enabled === false) return { enabled: false } as MCPServerPatch;\n return getMcpServerEnabled(previous) === false\n ? ({ enabled: true } as MCPServerPatch)\n : {};\n};\n\nconst buildStringMapPatch = (\n previous: Record<string, string> \| null \| undefined,\n next: Record<string, string> \| undefined,\n): Record<string, string \| null> \| null \| undefined => {\n if (!next) return previous ? null : undefined;\n\n const patch: Record<string, string \| null> = {};\n for (const [key, value] of Object.entries(next)) {\n if (value !== REDACTED_MCP_SECRET_VALUE) {\n patch[key] = value;\n }\n }\n for (const key of Object.keys(previous ?? {})) {\n if (!(key in next)) patch[key] = null;\n }\n return Object.keys(patch).length > 0 ? patch : undefined;\n};\n\ntype OAuthCredential = Extract<MCPAuthCredential, { strategy: \"oauth2\" }>;\ntype OAuthCredentialPatch = Extract<\n NonNullable<MCPServerPatch[\"auth\"]>,\n { strategy: \"oauth2\" }\n>;\nconst OAUTH_EDITABLE_AUTHENTICATION_FIELDS = [\n \"client_auth_method\",\n \"scopes\",\n \"client_id\",\n \"client_secret\",\n] as const;\n\nconst buildRedactionSafeNestedPatch = (\n previous: unknown,\n next: unknown,\n): unknown \| undefined => {\n if (next === REDACTED_MCP_SECRET_VALUE \|\| next === undefined) {\n return undefined;\n }\n if (next === null) return null;\n if (Array.isArray(next)) {\n if (hasRedactedMcpSecretLeaf(next)) return undefined;\n return JSON.stringify(previous) === JSON.stringify(next) ? undefined : next;\n }\n if (!isRecord(next)) {\n return Object.is(previous, next) ? undefined : next;\n }\n\n const previousRecord = isRecord(previous) ? previous : {};\n const patch: Record<string, unknown> = {};\n for (const [key, value] of Object.entries(next)) {\n const nestedPatch = buildRedactionSafeNestedPatch(\n previousRecord[key],\n value,\n );\n if (nestedPatch !== undefined) patch[key] = nestedPatch;\n }\n return Object.keys(patch).length > 0 ? patch : undefined;\n};\n\nconst buildOAuthAuthenticationPatch = (\n previous: OAuthCredential[\"authentication\"],\n edited: OAuthCredential[\"authentication\"],\n): OAuthCredentialPatch[\"authentication\"] \| undefined => {\n if (edited === undefined) return undefined;\n if (edited === null) return null;\n\n const nestedPatch = buildRedactionSafeNestedPatch(previous, edited);\n const patch = isRecord(nestedPatch) ? { ...nestedPatch } : {};\n const previousRecord = isRecord(previous) ? previous : {};\n for (const key of OAUTH_EDITABLE_AUTHENTICATION_FIELDS) {\n if (key in previousRecord && !(key in edited)) patch[key] = null;\n }\n if (Object.keys(patch).length === 0) return undefined;\n return { type: \"oauth\", ...patch } as NonNullable<\n OAuthCredentialPatch[\"authentication\"]\n >;\n};\n\nconst withAuthStrategyReplacementDeletes = <T extends MCPAuthCredential>(\n previous: MCPAuthCredential \| null \| undefined,\n patch: T,\n): T => {\n if (!previous \|\| previous.strategy === patch.strategy) return patch;\n\n const replacement = { ...patch } as Record<string, unknown>;\n for (const key of Object.keys(previous)) {\n if (key !== \"strategy\" && !(key in replacement)) {\n replacement[key] = null;\n }\n }\n return replacement as T;\n};\n\ntype HeaderAuthCredential = Extract<MCPAuthCredential, { strategy: \"header\" }>;\n\nexport const MCP_HEADER_REMOVAL_ERROR =\n \"Removing an individual header from header authentication is not supported yet. Replace the credential or clear authentication, then re-enter the headers you want to keep.\";\n\nconst buildHeaderAuthCredentialPatch = (\n previous: MCPAuthCredential \| null \| undefined,\n edited: HeaderAuthCredential,\n): NonNullable<MCPServerPatch[\"auth\"]> \| undefined => {\n const previousHeaders =\n previous?.strategy === \"header\" ? previous.headers : undefined;\n const headersPatch = buildStringMapPatch(previousHeaders, edited.headers);\n if (!headersPatch) return undefined;\n if (Object.values(headersPatch).some((value) => value === null)) {\n throw new Error(MCP_HEADER_REMOVAL_ERROR);\n }\n return {\n strategy: \"header\",\n headers: headersPatch as Record<string, string>,\n };\n};\n\nconst buildOAuthCredentialPatch = (\n previous: MCPAuthCredential \| null \| undefined,\n edited: OAuthCredential,\n): OAuthCredentialPatch \| undefined => {\n const previousOAuth = previous?.strategy === \"oauth2\" ? previous : undefined;\n const authentication = buildOAuthAuthenticationPatch(\n previousOAuth?.authentication,\n edited.authentication,\n );\n const state = buildRedactionSafeNestedPatch(\n previousOAuth?.state,\n edited.state,\n );\n if (previousOAuth && authentication === undefined && state === undefined) {\n return undefined;\n }\n return withAuthStrategyReplacementDeletes(previous, {\n strategy: \"oauth2\",\n ...(authentication !== undefined && { authentication }),\n ...(state !== undefined && { state }),\n } as OAuthCredentialPatch);\n};\n\n/\n Build one sparse MCP server merge-patch from an editor result. Redacted\n * values are display-only and are never mutation inputs.\n */\n// @spec MCP-002 — Secret patches preserve user intent\nexport function buildMcpServerPatch(\n previous: MCPServer,\n edited: MCPServerConfig,\n): MCPServerPatch {\n const enabled = buildEnabledPatch(previous, edited);\n if (edited.type === \"stdio\") {\n const env = buildStringMapPatch(\n previous.transport === \"stdio\" ? previous.env : undefined,\n edited.env,\n );\n return {\n transport: \"stdio\",\n command: edited.command!,\n ...(edited.args?.length\n ? { args: edited.args }\n : previous.transport === \"stdio\" && previous.args\n ? { args: null }\n : {}),\n ...(env !== undefined ? { env } : {}),\n ...enabled,\n };\n }\n\n const previousRemote = previous.transport === \"stdio\" ? undefined : previous;\n const patch: MCPServerPatch = {\n transport: edited.type === \"sse\" ? \"sse\" : \"http\",\n url: edited.url!,\n ...enabled,\n };\n\n if (edited.type === \"shttp\") {\n if (edited.timeout !== undefined) patch.timeout = edited.timeout;\n else if (previousRemote?.timeout !== undefined) patch.timeout = null;\n }\n\n if (edited.auth) {\n if (edited.auth.strategy === \"oauth2\") {\n const auth = buildOAuthCredentialPatch(previousRemote?.auth, edited.auth);\n if (auth !== undefined) patch.auth = auth;\n } else if (\n edited.auth.strategy === \"header\" &&\n previousRemote?.auth?.strategy === \"header\"\n ) {\n const auth = buildHeaderAuthCredentialPatch(\n previousRemote.auth,\n edited.auth,\n );\n if (auth !== undefined) patch.auth = auth;\n } else if (!hasRedactedMcpSecretLeaf(edited.auth)) {\n patch.auth = withAuthStrategyReplacementDeletes(\n previousRemote?.auth,\n edited.auth,\n );\n }\n } else if (previousRemote?.auth) {\n patch.auth = null;\n }\n\n return patch;\n}\n\nconst applyMcpServerPatch = (\n previous: MCPServer,\n patch: MCPServerPatch,\n): MCPServer => {\n const apply = (base: unknown, next: unknown): Record<string, unknown> => {\n const merged = isRecord(base) ? { ...base } : {};\n if (!isRecord(next)) return merged;\n\n for (const [key, value] of Object.entries(next)) {\n if (value === null) {\n delete merged[key];\n } else if (isRecord(value)) {\n merged[key] = apply(merged[key], value);\n } else {\n merged[key] = value;\n }\n }\n return merged;\n };\n\n return apply(previous, patch) as MCPServer;\n};\n\nexport const MCP_RENAME_CREDENTIAL_ERROR =\n \"Replace or clear the stored credential before renaming this MCP server.\";\n\n// @spec MCP-003 — Settings map keys are stable MCP identities\nexport function buildRenameMcpConfigPatch(\n oldKey: string,\n newKey: string,\n previous: MCPServer,\n edited: MCPServerConfig,\n): MCPConfigPatch {\n const previousSecrets =\n previous.transport === \"stdio\"\n ? previous.env\n : { auth: previous.auth, headers: previous.headers };\n if (hasRedactedMcpSecretLeaf(previousSecrets)) {\n throw new Error(MCP_RENAME_CREDENTIAL_ERROR);\n }\n const renamedServer = applyMcpServerPatch(\n previous,\n buildMcpServerPatch(previous, edited),\n );\n return {\n [oldKey]: null,\n [newKey]: renamedServer,\n };\n}\n\nexport function allocateMcpSettingsKey(\n config: MCPConfig,\n preferredName: string \| undefined,\n fallback: \"sse\" \| \"shttp\" \| \"stdio\",\n): string {\n const base = toMcpServerName(preferredName \|\| fallback);\n if (!(base in config)) return base;\n let suffix = 1;\n while (`${base}_${suffix}` in config) suffix += 1;\n return `${base}_${suffix}`;\n}\n"],"mappings":";;;AAWA,IAAa,IAA4B,cAEnC,KAAY,MAChB,CAAC,CAAC,KAAS,OAAO,KAAU,YAAY,CAAC,MAAM,QAAQ,CAAK;AAE9D,SAAgB,EACd,GACgC;CAChC,IAAI,CAAC,EAAS,CAAK,GAAG,OAAO;CAE7B,IAAM,IAAa,EAAM;CASzB,OAPE,EAAS,CAAU,KACnB,EAAE,SAAS,MACX,EAAE,aAAa,KAER,IAGF;AACT;AAEA,SAAgB,EACd,GACoC;CACpC,IAAI,CAAC,EAAS,CAAK,GAAG;CACtB,IAAM,IAAU,OAAO,QAAQ,CAAK,EAAE,QACnC,MAAqC,OAAO,EAAM,MAAO,QAC5D;CACA,OAAO,EAAQ,SAAS,IAAI,OAAO,YAAY,CAAO,IAAI,KAAA;AAC5D;AAEA,SAAgB,EAAyB,GAAyB;CAMhE,OALI,MAAA,eAA4C,KAC5C,MAAM,QAAQ,CAAK,IAAU,EAAM,KAAK,CAAwB,IAChE,EAAS,CAAK,IACT,OAAO,OAAO,CAAK,EAAE,KAAK,CAAwB,IAEpD;AACT;AAIA,IAAa,KAAuB,MACjC,EAA6C,YAAY,KACtD,KACA,KAAA,GAEA,KACJ,MACuC;CACvC,IAAI,MAAU,WAAW,MAAU,SAAS,MAAU,mBACpD,OAAO;CAET,IAAI,MAAU,UAAU,MAAU,WAAW,MAAU,KAAA,GACrD,OAAO;AAGX;AAOA,SAAgB,EAAe,GAA2B;CACxD,IAAM,IAAY,EAAmB,CAAK;CAC1C,IAAI,CAAC,GAAW,OAAO,CAAC;CAExB,IAAM,IAAoB,CAAC;CAC3B,KAAK,IAAM,CAAC,GAAa,MAAc,OAAO,QAAQ,CAAS,GAAG;EAChE,IAAI,CAAC,EAAS,CAAS,GAAG;EAE1B,IAAI,OAAO,EAAU,WAAY,UAAU;GACzC,EAAO,KAAe;IACpB,WAAW;IACX,SAAS,EAAU;IACnB,GAAI,MAAM,QAAQ,EAAU,IAAI,KAC9B,EAAU,KAAK,OAAO,MAAQ,OAAO,KAAQ,QAAQ,KAAK,EACxD,MAAM,EAAU,KAClB;IACF,GAAI,EAAa,EAAU,GAAG,KAAK,EACjC,KAAK,EAAa,EAAU,GAAG,EACjC;IACA,GAAI,OAAO,EAAU,OAAQ,YAAY,EAAE,KAAK,EAAU,IAAI;IAC9D,GAAI,OAAO,EAAU,eAAgB,YAAY,EAC/C,aAAa,EAAU,YACzB;IACA,GAAI,OAAO,EAAU,QAAS,YAAY,EAAE,MAAM,EAAU,KAAK;IACjE,GAAI,OAAO,EAAU,WAAY,YAAY,EAC3C,SAAS,EAAU,QACrB;IACA,GAAI,EAAU,YAAY,MAAS,EAAE,SAAS,GAAM;GACtD;GACA;EACF;EAEA,IAAI,OAAO,EAAU,OAAQ,UAAU;EACvC,IAAM,IAAY,EAAmB,EAAU,SAAS;EACpD,CAAC,KAAa,MAAc,YAChC,EAAO,KAAe;GACpB;GACA,KAAK,EAAU;GACf,GAAI,EAAa,EAAU,OAAO,KAAK,EACrC,SAAS,EAAa,EAAU,OAAO,EACzC;GACA,GAAI,EAAoB,EAAU,IAAI,KAAK,EACzC,MAAM,EAAU,KAClB;GACA,GAAI,OAAO,EAAU,eAAgB,YAAY,EAC/C,aAAa,EAAU,YACzB;GACA,GAAI,OAAO,EAAU,QAAS,YAAY,EAAE,MAAM,EAAU,KAAK;GACjE,GAAI,OAAO,EAAU,WAAY,YAAY,EAC3C,SAAS,EAAU,QACrB;GACA,GAAI,OAAO,EAAU,oBAAqB,YAAY,EACpD,kBAAkB,EAAU,iBAC9B;GACA,GAAI,OAAO,EAAU,cAAe,aAAa,EAC/C,YAAY,EAAU,WACxB;GACA,GAAI,EAAU,YAAY,MAAS,EAAE,SAAS,GAAM;EACtD;CACF;CACA,OAAO;AACT;AAEA,SAAgB,EAAqB,GAAoC;CAavE,OAZI,EAAO,SAAS,UACX;EACL,WAAW;EACX,SAAS,EAAO;EAChB,GAAI,EAAO,MAAM,SAAS,EAAE,MAAM,EAAO,KAAK,IAAI,CAAC;EACnD,GAAI,EAAO,OAAO,OAAO,KAAK,EAAO,GAAG,EAAE,SAAS,IAC/C,EAAE,KAAK,EAAO,IAAI,IAClB,CAAC;EACL,GAAI,EAAO,YAAY,MAAS,EAAE,SAAS,GAAM;CACnD,IAGK;EACL,WAAW,EAAO,SAAS,QAAQ,QAAQ;EAC3C,KAAK,EAAO;EACZ,GAAI,EAAO,WAAW,OAAO,KAAK,EAAO,OAAO,EAAE,SAAS,IACvD,EAAE,SAAS,EAAO,QAAQ,IAC1B,CAAC;EACL,GAAI,EAAO,OAAO,EAAE,MAAM,EAAO,KAAK,IAAI,CAAC;EAC3C,GAAI,EAAO,SAAS,WAAW,EAAO,YAAY,KAAA,IAC9C,EAAE,SAAS,EAAO,QAAQ,IAC1B,CAAC;EACL,GAAI,EAAO,YAAY,MAAS,EAAE,SAAS,GAAM;CACnD;AACF;AAEA,IAAM,KACJ,GACA,MAEI,EAAO,YAAY,KAAc,EAAE,SAAS,GAAM,IAC/C,EAAoB,CAAQ,MAAM,KACpC,EAAE,SAAS,GAAK,IACjB,CAAC,GAGD,KACJ,GACA,MACqD;CACrD,IAAI,CAAC,GAAM,OAAO,IAAW,OAAO,KAAA;CAEpC,IAAM,IAAuC,CAAC;CAC9C,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAI,GAC5C,AAAI,MAAA,iBACF,EAAM,KAAO;CAGjB,KAAK,IAAM,KAAO,OAAO,KAAK,KAAY,CAAC,CAAC,GAC1C,AAAM,KAAO,MAAO,EAAM,KAAO;CAEnC,OAAO,OAAO,KAAK,CAAK,EAAE,SAAS,IAAI,IAAQ,KAAA;AACjD,GAOM,IAAuC;CAC3C;CACA;CACA;CACA;AACF,GAEM,KACJ,GACA,MACwB;CACxB,IAAI,MAAA,gBAAsC,MAAS,KAAA,GACjD;CAEF,IAAI,MAAS,MAAM,OAAO;CAC1B,IAAI,MAAM,QAAQ,CAAI,GAEpB,OADI,EAAyB,CAAI,KAC1B,KAAK,UAAU,CAAQ,MAAM,KAAK,UAAU,CAAI,IADnB,SACmC;CAEzE,IAAI,CAAC,EAAS,CAAI,GAChB,OAAO,OAAO,GAAG,GAAU,CAAI,IAAI,KAAA,IAAY;CAGjD,IAAM,IAAiB,EAAS,CAAQ,IAAI,IAAW,CAAC,GAClD,IAAiC,CAAC;CACxC,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAI,GAAG;EAC/C,IAAM,IAAc,EAClB,EAAe,IACf,CACF;EACA,AAAI,MAAgB,KAAA,MAAW,EAAM,KAAO;CAC9C;CACA,OAAO,OAAO,KAAK,CAAK,EAAE,SAAS,IAAI,IAAQ,KAAA;AACjD,GAEM,KACJ,GACA,MACuD;CACvD,IAAI,MAAW,KAAA,GAAW;CAC1B,IAAI,MAAW,MAAM,OAAO;CAE5B,IAAM,IAAc,EAA8B,GAAU,CAAM,GAC5D,IAAQ,EAAS,CAAW,IAAI,EAAE,GAAG,EAAY,IAAI,CAAC,GACtD,IAAiB,EAAS,CAAQ,IAAI,IAAW,CAAC;CACxD,KAAK,IAAM,KAAO,GAChB,AAAI,KAAO,KAAkB,EAAE,KAAO,OAAS,EAAM,KAAO;CAE1D,WAAO,KAAK,CAAK,EAAE,WAAW,GAClC,OAAO;EAAE,MAAM;EAAS,GAAG;CAAM;AAGnC,GAEM,KACJ,GACA,MACM;CACN,IAAI,CAAC,KAAY,EAAS,aAAa,EAAM,UAAU,OAAO;CAE9D,IAAM,IAAc,EAAE,GAAG,EAAM;CAC/B,KAAK,IAAM,KAAO,OAAO,KAAK,CAAQ,GACpC,AAAI,MAAQ,cAAc,EAAE,KAAO,OACjC,EAAY,KAAO;CAGvB,OAAO;AACT,GAIa,IACX,8KAEI,KACJ,GACA,MACoD;CAGpD,IAAM,IAAe,EADnB,GAAU,aAAa,WAAW,EAAS,UAAU,KAAA,GACG,EAAO,OAAO;CACnE,OACL;MAAI,OAAO,OAAO,CAAY,EAAE,MAAM,MAAU,MAAU,IAAI,GAC5D,MAAU,MAAM,CAAwB;EAE1C,OAAO;GACL,UAAU;GACV,SAAS;EACX;CAL0C;AAM5C,GAEM,KACJ,GACA,MACqC;CACrC,IAAM,IAAgB,GAAU,aAAa,WAAW,IAAW,KAAA,GAC7D,IAAiB,EACrB,GAAe,gBACf,EAAO,cACT,GACM,IAAQ,EACZ,GAAe,OACf,EAAO,KACT;CACI,WAAiB,MAAmB,KAAA,KAAa,MAAU,KAAA,IAG/D,OAAO,EAAmC,GAAU;EAClD,UAAU;EACV,GAAI,MAAmB,KAAA,KAAa,EAAE,kBAAe;EACrD,GAAI,MAAU,KAAA,KAAa,EAAE,SAAM;CACrC,CAAyB;AAC3B;AAOA,SAAgB,EACd,GACA,GACgB;CAChB,IAAM,IAAU,EAAkB,GAAU,CAAM;CAClD,IAAI,EAAO,SAAS,SAAS;EAC3B,IAAM,IAAM,EACV,EAAS,cAAc,UAAU,EAAS,MAAM,KAAA,GAChD,EAAO,GACT;EACA,OAAO;GACL,WAAW;GACX,SAAS,EAAO;GAChB,GAAI,EAAO,MAAM,SACb,EAAE,MAAM,EAAO,KAAK,IACpB,EAAS,cAAc,WAAW,EAAS,OACzC,EAAE,MAAM,KAAK,IACb,CAAC;GACP,GAAI,MAAQ,KAAA,IAAsB,CAAC,IAAX,EAAE,OAAI;GAC9B,GAAG;EACL;CACF;CAEA,IAAM,IAAiB,EAAS,cAAc,UAAU,KAAA,IAAY,GAC9D,IAAwB;EAC5B,WAAW,EAAO,SAAS,QAAQ,QAAQ;EAC3C,KAAK,EAAO;EACZ,GAAG;CACL;CAOA,IALI,EAAO,SAAS,YACd,EAAO,YAAY,KAAA,IACd,GAAgB,YAAY,KAAA,MAAW,EAAM,UAAU,QAD9B,EAAM,UAAU,EAAO,UAIvD,EAAO,UACL,EAAO,KAAK,aAAa,UAAU;EACrC,IAAM,IAAO,EAA0B,GAAgB,MAAM,EAAO,IAAI;EACxE,AAAI,MAAS,KAAA,MAAW,EAAM,OAAO;CACvC,OAAO,IACL,EAAO,KAAK,aAAa,YACzB,GAAgB,MAAM,aAAa,UACnC;EACA,IAAM,IAAO,EACX,EAAe,MACf,EAAO,IACT;EACA,AAAI,MAAS,KAAA,MAAW,EAAM,OAAO;CACvC,OAAO,AAAK,EAAyB,EAAO,IAAI,MAC9C,EAAM,OAAO,EACX,GAAgB,MAChB,EAAO,IACT;MAEG,AAAI,GAAgB,SACzB,EAAM,OAAO;CAGf,OAAO;AACT;AAEA,IAAM,KACJ,GACA,MACc;CACd,IAAM,KAAS,GAAe,MAA2C;EACvE,IAAM,IAAS,EAAS,CAAI,IAAI,EAAE,GAAG,EAAK,IAAI,CAAC;EAC/C,IAAI,CAAC,EAAS,CAAI,GAAG,OAAO;EAE5B,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAI,GAC5C,AAAI,MAAU,OACZ,OAAO,EAAO,KACL,EAAS,CAAK,IACvB,EAAO,KAAO,EAAM,EAAO,IAAM,CAAK,IAEtC,EAAO,KAAO;EAGlB,OAAO;CACT;CAEA,OAAO,EAAM,GAAU,CAAK;AAC9B,GAEa,IACX;AAGF,SAAgB,EACd,GACA,GACA,GACA,GACgB;CAKhB,IAAI,EAHF,EAAS,cAAc,UACnB,EAAS,MACT;EAAE,MAAM,EAAS;EAAM,SAAS,EAAS;CAAQ,CACX,GAC1C,MAAU,MAAM,CAA2B;CAE7C,IAAM,IAAgB,EACpB,GACA,EAAoB,GAAU,CAAM,CACtC;CACA,OAAO;GACJ,IAAS;GACT,IAAS;CACZ;AACF;AAEA,SAAgB,EACd,GACA,GACA,GACQ;CACR,IAAM,IAAO,EAAgB,KAAiB,CAAQ;CACtD,IAAI,EAAE,KAAQ,IAAS,OAAO;CAC9B,IAAI,IAAS;CACb,OAAO,GAAG,EAAK,GAAG,OAAY,IAAQ,KAAU;CAChD,OAAO,GAAG,EAAK,GAAG;AACpB"}

package/dist/utils/mcp-installed-servers.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");function e(e){return[...e.sse_servers.map((e,t)=>({id:`sse-${t}`,type:`sse`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,auth:typeof e==`object`?e.auth:void 0,enabled:typeof e==`object`?e.enabled:void 0})),...e.stdio_servers.map((e,t)=>({id:`stdio-${t}`,type:`stdio`,name:e.name,command:e.command,args:e.args,env:e.env,enabled:e.enabled})),...e.shttp_servers.map((e,t)=>({id:`shttp-${t}`,type:`shttp`,name:typeof e==`object`?e.name:void 0,url:typeof e==`string`?e:e.url,headers:typeof e==`object`?e.headers:void 0,timeout:typeof e==`object`?e.timeout:void 0,auth:typeof e==`object`?e.auth:void 0,enabled:typeof e==`object`?e.enabled:void 0}))]}exports.flattenMcpConfig=e;
+require("../_virtual/_rolldown/runtime.cjs");const e=require("./mcp-config.cjs");function t(t){return Object.entries(t).map(([t,n])=>n.transport===`stdio`?{id:t,type:`stdio`,name:t,command:n.command,args:n.args??void 0,env:n.env??void 0,enabled:e.getMcpServerEnabled(n)}:{id:t,type:n.transport===`sse`?`sse`:`shttp`,name:t,url:n.url,headers:n.headers??void 0,timeout:n.timeout??void 0,auth:n.auth??void 0,enabled:e.getMcpServerEnabled(n)})}exports.flattenMcpConfig=t;
 //# sourceMappingURL=mcp-installed-servers.cjs.map

package/dist/utils/mcp-installed-servers.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { ~~MCPConfig~~ } from \"~~#/types/settings~~\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n return ~~[\n ...~~config.~~sse_servers.~~map((~~server~~, ~~index~~) ~~=> ({\~~n ~~id: `sse-${index}`,\n type: \"sse\" as const,\n name: typeof~~ server ~~=== \"object\" ? server~~.~~name~~ ~~: undefined,\n url: typeof server~~ === \"~~string~~\" ~~? server : server.url,\n headers: typeof server ===~~ \~~"object\" ? server.headers : undefined,\~~n ~~auth: typeof server === \"object\"~~ ? ~~server.auth : undefined,\n enabled: typeof server === \"object\" ? server.enabled : undefined,\n })),\n ...config.stdio_servers.map((server, index) => (~~{\n id: ~~`stdio-${index}`,\~~n type: \"stdio\" ~~as const~~,\n name: ~~server.name~~,\n command: server.command,\n args: server.args,\n env: server.env,\n enabled: server~~.enabled~~,\n }~~)),\n ...config.shttp_servers.map((server, index) => ({~~\n id: ~~`shttp-$~~{~~index}`,\~~n ~~type~~: ~~\"shttp\" as const~~,\n ~~name~~: ~~typeof~~ server === \"~~object~~\" ? ~~server.name~~ : ~~undefined,\n url: typeof server ===~~ \"~~string~~\" ~~? server~~ : server.url,\n headers: ~~typeof~~ server ~~=== \"object\" ? server~~.headers : undefined,\n timeout: ~~typeof~~ server ~~=== \"object\" ? server~~.timeout : undefined,\n auth: ~~typeof~~ server ~~=== \"object\" ? server~~.auth : undefined,\n enabled: ~~typeof~~ server ~~=== \"object\" ? server.enabled : undefined~~,\n })),\n ];\n}\n"],"mappings":"~~6CAGA~~,SAAgB,EAAiB,EAAsC,CACrE,~~MAAO~~,~~CACL~~,~~GAAG~~,~~EAAO~~,~~YAAY~~,KAAK,~~EAAQ~~,~~KAAW~~,~~CAC5C~~,~~GAAI,OAAO,IACX,KAAM,MACN,KAAM,OAAO,GAAW,SAAW,~~EAAO,~~KAAO~~,~~IAAA~~,~~GACjD~~,~~IAAK~~,~~OAAO~~,~~GAAW~~,~~SAAW~~,~~EAAS~~,~~EAAO~~,~~IAClD,~~QAAS,~~OAAO~~,~~GAAW~~,~~SAAW~~,EAAO,~~QAAU~~,IAAA,~~GACvD~~,~~KAAM~~,~~OAAO,GAAW,SAAW,~~EAAO,KAAO,IAAA,~~GACjD~~,QAAS,~~OAAO~~,~~GAAW~~,~~SAAW~~,~~EAAO~~,~~QAAU~~,~~IAAA~~,~~EACzD,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,~~GAAI,~~SAAS~~,~~IACb,~~KAAM,~~QACN,KAAM,~~EAAO,~~KACb~~,~~QAAS~~,~~EAAO~~,~~QAChB~~,KAAM,~~EAAO~~,~~KACb,~~IAAK,EAAO,IACZ,QAAS,EAAO,~~OAClB,EAAE,EACF,GAAG,EAAO,cAAc,KAAK,EAAQ,KAAW,CAC9C,GAAI,SAAS,IACb,KAAM,QACN,KAAM,OAAO,GAAW,~~SAAW,~~EAAO,KAAO,~~IAAA,~~GACjD~~,~~IAAK,OAAO,GAAW,SAAW,EAAS,EAAO,IAClD,~~QAAS,~~OAAO,GAAW,SAAW,~~EAAO,~~QAAU,IAAA,GACvD,QAAS,OAAO,GAAW,~~SAAW,~~EAAO,QAAU,~~IAAA,~~GACvD~~,KAAM,~~OAAO,GAAW,SAAW,~~EAAO,~~KAAO~~,IAAA,~~GACjD~~,QAAS,~~OAAO~~,~~GAAW~~,~~SAAW~~,~~EAAO~~,~~QAAU~~,~~IAAA,EACzD,EAAE,CACJ,~~CACF"}
1	+ {"version":3,"file":"mcp-installed-servers.cjs","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import type { MCPConfig } from \"@openhands/typescript-client\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { getMcpServerEnabled } from \"./mcp-config\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n return Object.entries(config).map(([settingsKey, server]) =>\n server.transport === \"stdio\"\n ? {\n id: settingsKey,\n type: \"stdio\",\n name: settingsKey,\n command: server.command,\n args: server.args ?? undefined,\n env: server.env ?? undefined,\n enabled: getMcpServerEnabled(server),\n }\n : {\n id: settingsKey,\n type: server.transport === \"sse\" ? \"sse\" : \"shttp\",\n name: settingsKey,\n url: server.url,\n headers: server.headers ?? undefined,\n timeout: server.timeout ?? undefined,\n auth: server.auth ?? undefined,\n enabled: getMcpServerEnabled(server),\n },\n );\n}\n"],"mappings":"iFAIA,SAAgB,EAAiB,EAAsC,CACrE,OAAO,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,EAAa,KAC/C,EAAO,YAAc,QACjB,CACE,GAAI,EACJ,KAAM,QACN,KAAM,EACN,QAAS,EAAO,QAChB,KAAM,EAAO,MAAQ,IAAA,GACrB,IAAK,EAAO,KAAO,IAAA,GACnB,QAAS,EAAA,oBAAoB,CAAM,CACrC,EACA,CACE,GAAI,EACJ,KAAM,EAAO,YAAc,MAAQ,MAAQ,QAC3C,KAAM,EACN,IAAK,EAAO,IACZ,QAAS,EAAO,SAAW,IAAA,GAC3B,QAAS,EAAO,SAAW,IAAA,GAC3B,KAAM,EAAO,MAAQ,IAAA,GACrB,QAAS,EAAA,oBAAoB,CAAM,CACrC,CACN,CACF"}

package/dist/utils/mcp-installed-servers.d.ts CHANGED Viewed

@@ -1,3 +1,3 @@
-import { MCPServerConfig } from "#/types/mcp-server";
-import { MCPConfig } from "#/types/settings";
+import type { MCPConfig } from "@openhands/typescript-client";
+import type { MCPServerConfig } from "#/types/mcp-server";
 export declare function flattenMcpConfig(config: MCPConfig): MCPServerConfig[];

package/dist/utils/mcp-installed-servers.js CHANGED Viewed

@@ -1,37 +1,26 @@
+import { getMcpServerEnabled as e } from "./mcp-config.js";
 //#region src/utils/mcp-installed-servers.ts
-function e(e) {
-	return [
-		...e.sse_servers.map((e, t) => ({
-			id: `sse-${t}`,
-			type: "sse",
-			name: typeof e == "object" ? e.name : void 0,
-			url: typeof e == "string" ? e : e.url,
-			headers: typeof e == "object" ? e.headers : void 0,
-			auth: typeof e == "object" ? e.auth : void 0,
-			enabled: typeof e == "object" ? e.enabled : void 0
-		})),
-		...e.stdio_servers.map((e, t) => ({
-			id: `stdio-${t}`,
-			type: "stdio",
-			name: e.name,
-			command: e.command,
-			args: e.args,
-			env: e.env,
-			enabled: e.enabled
-		})),
-		...e.shttp_servers.map((e, t) => ({
-			id: `shttp-${t}`,
-			type: "shttp",
-			name: typeof e == "object" ? e.name : void 0,
-			url: typeof e == "string" ? e : e.url,
-			headers: typeof e == "object" ? e.headers : void 0,
-			timeout: typeof e == "object" ? e.timeout : void 0,
-			auth: typeof e == "object" ? e.auth : void 0,
-			enabled: typeof e == "object" ? e.enabled : void 0
-		}))
-	];
+function t(t) {
+	return Object.entries(t).map(([t, n]) => n.transport === "stdio" ? {
+		id: t,
+		type: "stdio",
+		name: t,
+		command: n.command,
+		args: n.args ?? void 0,
+		env: n.env ?? void 0,
+		enabled: e(n)
+	} : {
+		id: t,
+		type: n.transport === "sse" ? "sse" : "shttp",
+		name: t,
+		url: n.url,
+		headers: n.headers ?? void 0,
+		timeout: n.timeout ?? void 0,
+		auth: n.auth ?? void 0,
+		enabled: e(n)
+	});
 }
 //#endregion
-export { e as flattenMcpConfig };
+export { t as flattenMcpConfig };
 //# sourceMappingURL=mcp-installed-servers.js.map

package/dist/utils/mcp-installed-servers.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import { MCPServerConfig } from \"#/types/mcp-server\";\nimport { ~~MCPConfig~~ } from \"~~#/types/settings~~\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n return ~~[\n ...~~config.~~sse_servers.~~map((~~server~~, ~~index~~) ~~=> ({\~~n ~~id: `sse-${index}`,\n type: \"sse\" as const,\n name: typeof~~ server ~~=== \"object\" ? server~~.~~name~~ ~~: undefined,\n url: typeof server~~ === \"~~string~~\" ~~? server : server.url,\n headers: typeof server ===~~ \~~"object\" ? server.headers : undefined,\~~n ~~auth: typeof server === \"object\"~~ ? ~~server.auth : undefined,\n enabled: typeof server === \"object\" ? server.enabled : undefined,\n })),\n ...config.stdio_servers.map((server, index) => (~~{\n id: ~~`stdio-${index}`,\~~n type: \"stdio\" ~~as const~~,\n name: ~~server.name~~,\n command: server.command,\n args: server.args,\n env: server.env,\n enabled: server~~.enabled~~,\n }~~)),\n ...config.shttp_servers.map((server, index) => ({~~\n id: ~~`shttp-$~~{~~index}`,\~~n ~~type~~: ~~\"shttp\" as const~~,\n ~~name~~: ~~typeof~~ server === \"~~object~~\" ? ~~server.name~~ : ~~undefined,\n url: typeof server ===~~ \"~~string~~\" ~~? server~~ : server.url,\n headers: ~~typeof~~ server ~~=== \"object\" ? server~~.headers : undefined,\n timeout: ~~typeof~~ server ~~=== \"object\" ? server~~.timeout : undefined,\n auth: ~~typeof~~ server ~~=== \"object\" ? server~~.auth : undefined,\n enabled: ~~typeof~~ server ~~=== \"object\" ? server.enabled : undefined~~,\n })),\n ];\n}\n"],"mappings":"~~;AAGA~~,SAAgB,EAAiB,GAAsC;CACrE,OAAO~~;EACL~~,~~GAAG~~,~~EAAO~~,~~YAAY~~,KAAK,~~GAAQ~~,~~OAAW~~;~~GAC5C~~,IAAI~~,OAAO~~;~~GACX~~,MAAM;~~GACN~~,MAAM~~,OAAO,KAAW,WAAW,EAAO,OAAO,KAAA~~;~~GACjD~~,~~KAAK~~,~~OAAO,KAAW,WAAW,IAAS,~~EAAO;~~GAClD~~,~~SAAS~~,~~OAAO,KAAW,WAAW,~~EAAO,~~UAAU~~,KAAA;~~GACvD~~,~~MAAM~~,~~OAAO,KAAW,WAAW,~~EAAO,OAAO,KAAA;~~GACjD~~,SAAS,~~OAAO~~,~~KAAW,WAAW,EAAO,UAAU,KAAA~~;~~EACzD~~,~~EAAE~~;~~EACF~~,~~GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,~~IAAI~~,SAAS~~;~~GACb~~,MAAM~~;GACN~~,~~MAAM,~~EAAO~~;GACb~~,~~SAAS~~,~~EAAO~~;~~GAChB~~,MAAM~~,EAAO~~;~~GACb~~,KAAK,EAAO;~~GACZ~~,SAAS,EAAO~~;EAClB~~,~~EAAE;EACF,GAAG,EAAO,cAAc,KAAK,GAAQ,OAAW;GAC9C,IAAI,SAAS;GACb,MAAM;GACN,MAAM,OAAO,KAAW,~~WAAW,~~EAAO,OAAO,~~KAAA;~~GACjD~~,~~KAAK,OAAO,KAAW,WAAW,IAAS,EAAO;GAClD,~~SAAS,~~OAAO,KAAW,WAAW,~~EAAO,~~UAAU,KAAA;GACvD,SAAS,OAAO,KAAW,~~WAAW,~~EAAO,UAAU,~~KAAA;~~GACvD~~,MAAM,~~OAAO,KAAW,WAAW,~~EAAO,~~OAAO~~,KAAA;~~GACjD~~,SAAS,~~OAAO~~,~~KAAW,WAAW,EAAO,UAAU,KAAA~~;~~EACzD~~,~~EAAE~~;~~CACJ;~~AACF"}
1	+ {"version":3,"file":"mcp-installed-servers.js","names":[],"sources":["../../src/utils/mcp-installed-servers.ts"],"sourcesContent":["import type { MCPConfig } from \"@openhands/typescript-client\";\nimport type { MCPServerConfig } from \"#/types/mcp-server\";\nimport { getMcpServerEnabled } from \"./mcp-config\";\n\nexport function flattenMcpConfig(config: MCPConfig): MCPServerConfig[] {\n return Object.entries(config).map(([settingsKey, server]) =>\n server.transport === \"stdio\"\n ? {\n id: settingsKey,\n type: \"stdio\",\n name: settingsKey,\n command: server.command,\n args: server.args ?? undefined,\n env: server.env ?? undefined,\n enabled: getMcpServerEnabled(server),\n }\n : {\n id: settingsKey,\n type: server.transport === \"sse\" ? \"sse\" : \"shttp\",\n name: settingsKey,\n url: server.url,\n headers: server.headers ?? undefined,\n timeout: server.timeout ?? undefined,\n auth: server.auth ?? undefined,\n enabled: getMcpServerEnabled(server),\n },\n );\n}\n"],"mappings":";;AAIA,SAAgB,EAAiB,GAAsC;CACrE,OAAO,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,GAAa,OAC/C,EAAO,cAAc,UACjB;EACE,IAAI;EACJ,MAAM;EACN,MAAM;EACN,SAAS,EAAO;EAChB,MAAM,EAAO,QAAQ,KAAA;EACrB,KAAK,EAAO,OAAO,KAAA;EACnB,SAAS,EAAoB,CAAM;CACrC,IACA;EACE,IAAI;EACJ,MAAM,EAAO,cAAc,QAAQ,QAAQ;EAC3C,MAAM;EACN,KAAK,EAAO;EACZ,SAAS,EAAO,WAAW,KAAA;EAC3B,SAAS,EAAO,WAAW,KAAA;EAC3B,MAAM,EAAO,QAAQ,KAAA;EACrB,SAAS,EAAoB,CAAM;CACrC,CACN;AACF"}

package/dist/utils/mcp-server-health-key.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-server-health-key.cjs","names":[],"sources":["../../src/utils/mcp-server-health-key.ts"],"sourcesContent":["import type { MCPServerConfig } from \"#/types/mcp-server\";\n\nconst sortedKeys = (record?: Record<string, string> \| null): string[] =>\n Object.keys(record ?? {}).sort();\n\n/*\n Stable identity for a server's health entry.\n \n Built from the server's structural, non-secret fields. Names are included\n * because persisted configs are keyed by name ~~(`toSdkMcpConfig` suffixes\n * duplicates `github` → `github_1`)~~, which makes the key unique per ~~stored~~\n * server and stable across list reordering ~~— unlike the positional\n * `sse-0`/`stdio-1` ids from `flattenMcpConfig`.~~ Secret VALUES are excluded:\n * the same credential legitimately appears as plaintext at install time,\n * `*********` in redacted settings, and ciphertext in test requests, so any\n of them would make the key flap. A structural edit (URL, command, header\n * names, auth strategy, ...) therefore produces a new key, orphaning the old\n * health entry instead of misattributing it.\n */\nexport function getMcpServerHealthKey(server: MCPServerConfig): string {\n if (server.type === \"stdio\") {\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n command: server.command ?? \"\",\n args: server.args ?? [],\n envKeys: sortedKeys(server.env),\n });\n }\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n url: server.url ?? \"\",\n headerKeys: sortedKeys(server.headers),\n authStrategy: server.auth?.strategy ?? \"\",\n authHeaderName:\n server.auth?.strategy === \"api_key\"\n ? (server.auth.header_name ?? \"\")\n : \"\",\n authHeaderKeys:\n server.auth?.strategy === \"header\" ? sortedKeys(server.auth.headers) : [],\n });\n}\n"],"mappings":"6CAEA,IAAM,EAAc,GAClB,OAAO,KAAK,GAAU,CAAC,CAAC,EAAE,KAAK,~~EAgBjC~~,SAAgB,EAAsB,EAAiC,CAUrE,OATI,EAAO,OAAS,QACX,KAAK,UAAU,CACpB,KAAM,EAAO,KACb,KAAM,EAAO,MAAQ,GACrB,QAAS,EAAO,SAAW,GAC3B,KAAM,EAAO,MAAQ,CAAC,EACtB,QAAS,EAAW,EAAO,GAAG,CAChC,CAAC,EAEI,KAAK,UAAU,CACpB,KAAM,EAAO,KACb,KAAM,EAAO,MAAQ,GACrB,IAAK,EAAO,KAAO,GACnB,WAAY,EAAW,EAAO,OAAO,EACrC,aAAc,EAAO,MAAM,UAAY,GACvC,eACE,EAAO,MAAM,WAAa,UACrB,EAAO,KAAK,aAAe,GAC5B,GACN,eACE,EAAO,MAAM,WAAa,SAAW,EAAW,EAAO,KAAK,OAAO,EAAI,CAAC,CAC5E,CAAC,CACH"}
1	+ {"version":3,"file":"mcp-server-health-key.cjs","names":[],"sources":["../../src/utils/mcp-server-health-key.ts"],"sourcesContent":["import type { MCPServerConfig } from \"#/types/mcp-server\";\n\nconst sortedKeys = (record?: Record<string, string> \| null): string[] =>\n Object.keys(record ?? {}).sort();\n\n/*\n Stable identity for a server's health entry.\n \n Built from the server's structural, non-secret fields. Names are included\n * because persisted configs are keyed by name, which makes the key unique per\n * stored server and stable across list reordering. Secret VALUES are excluded:\n * the same credential legitimately appears as plaintext at install time,\n * `*********` in redacted settings, and ciphertext in test requests, so any\n of them would make the key flap. A structural edit (URL, command, header\n * names, auth strategy, ...) therefore produces a new key, orphaning the old\n * health entry instead of misattributing it.\n */\nexport function getMcpServerHealthKey(server: MCPServerConfig): string {\n if (server.type === \"stdio\") {\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n command: server.command ?? \"\",\n args: server.args ?? [],\n envKeys: sortedKeys(server.env),\n });\n }\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n url: server.url ?? \"\",\n headerKeys: sortedKeys(server.headers),\n authStrategy: server.auth?.strategy ?? \"\",\n authHeaderName:\n server.auth?.strategy === \"api_key\"\n ? (server.auth.header_name ?? \"\")\n : \"\",\n authHeaderKeys:\n server.auth?.strategy === \"header\" ? sortedKeys(server.auth.headers) : [],\n });\n}\n"],"mappings":"6CAEA,IAAM,EAAc,GAClB,OAAO,KAAK,GAAU,CAAC,CAAC,EAAE,KAAK,EAcjC,SAAgB,EAAsB,EAAiC,CAUrE,OATI,EAAO,OAAS,QACX,KAAK,UAAU,CACpB,KAAM,EAAO,KACb,KAAM,EAAO,MAAQ,GACrB,QAAS,EAAO,SAAW,GAC3B,KAAM,EAAO,MAAQ,CAAC,EACtB,QAAS,EAAW,EAAO,GAAG,CAChC,CAAC,EAEI,KAAK,UAAU,CACpB,KAAM,EAAO,KACb,KAAM,EAAO,MAAQ,GACrB,IAAK,EAAO,KAAO,GACnB,WAAY,EAAW,EAAO,OAAO,EACrC,aAAc,EAAO,MAAM,UAAY,GACvC,eACE,EAAO,MAAM,WAAa,UACrB,EAAO,KAAK,aAAe,GAC5B,GACN,eACE,EAAO,MAAM,WAAa,SAAW,EAAW,EAAO,KAAK,OAAO,EAAI,CAAC,CAC5E,CAAC,CACH"}

package/dist/utils/mcp-server-health-key.d.ts CHANGED Viewed

@@ -3,10 +3,8 @@ import type { MCPServerConfig } from "#/types/mcp-server";
  * Stable identity for a server's health entry.
  *
  * Built from the server's structural, non-secret fields. Names are included
- * because persisted configs are keyed by name (`toSdkMcpConfig` suffixes
- * duplicates `github` → `github_1`), which makes the key unique per stored
- * server and stable across list reordering — unlike the positional
- * `sse-0`/`stdio-1` ids from `flattenMcpConfig`. Secret VALUES are excluded:
+ * because persisted configs are keyed by name, which makes the key unique per
+ * stored server and stable across list reordering. Secret VALUES are excluded:
  * the same credential legitimately appears as plaintext at install time,
  * `**********` in redacted settings, and ciphertext in test requests, so any
  * of them would make the key flap. A structural edit (URL, command, header

package/dist/utils/mcp-server-health-key.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"mcp-server-health-key.js","names":[],"sources":["../../src/utils/mcp-server-health-key.ts"],"sourcesContent":["import type { MCPServerConfig } from \"#/types/mcp-server\";\n\nconst sortedKeys = (record?: Record<string, string> \| null): string[] =>\n Object.keys(record ?? {}).sort();\n\n/*\n Stable identity for a server's health entry.\n \n Built from the server's structural, non-secret fields. Names are included\n * because persisted configs are keyed by name ~~(`toSdkMcpConfig` suffixes\n * duplicates `github` → `github_1`)~~, which makes the key unique per ~~stored~~\n * server and stable across list reordering ~~— unlike the positional\n * `sse-0`/`stdio-1` ids from `flattenMcpConfig`.~~ Secret VALUES are excluded:\n * the same credential legitimately appears as plaintext at install time,\n * `*********` in redacted settings, and ciphertext in test requests, so any\n of them would make the key flap. A structural edit (URL, command, header\n * names, auth strategy, ...) therefore produces a new key, orphaning the old\n * health entry instead of misattributing it.\n */\nexport function getMcpServerHealthKey(server: MCPServerConfig): string {\n if (server.type === \"stdio\") {\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n command: server.command ?? \"\",\n args: server.args ?? [],\n envKeys: sortedKeys(server.env),\n });\n }\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n url: server.url ?? \"\",\n headerKeys: sortedKeys(server.headers),\n authStrategy: server.auth?.strategy ?? \"\",\n authHeaderName:\n server.auth?.strategy === \"api_key\"\n ? (server.auth.header_name ?? \"\")\n : \"\",\n authHeaderKeys:\n server.auth?.strategy === \"header\" ? sortedKeys(server.auth.headers) : [],\n });\n}\n"],"mappings":";AAEA,IAAM,KAAc,MAClB,OAAO,KAAK,KAAU,CAAC,CAAC,EAAE,KAAK;~~AAgBjC~~,SAAgB,EAAsB,GAAiC;CAUrE,OATI,EAAO,SAAS,UACX,KAAK,UAAU;EACpB,MAAM,EAAO;EACb,MAAM,EAAO,QAAQ;EACrB,SAAS,EAAO,WAAW;EAC3B,MAAM,EAAO,QAAQ,CAAC;EACtB,SAAS,EAAW,EAAO,GAAG;CAChC,CAAC,IAEI,KAAK,UAAU;EACpB,MAAM,EAAO;EACb,MAAM,EAAO,QAAQ;EACrB,KAAK,EAAO,OAAO;EACnB,YAAY,EAAW,EAAO,OAAO;EACrC,cAAc,EAAO,MAAM,YAAY;EACvC,gBACE,EAAO,MAAM,aAAa,YACrB,EAAO,KAAK,eAAe,KAC5B;EACN,gBACE,EAAO,MAAM,aAAa,WAAW,EAAW,EAAO,KAAK,OAAO,IAAI,CAAC;CAC5E,CAAC;AACH"}
1	+ {"version":3,"file":"mcp-server-health-key.js","names":[],"sources":["../../src/utils/mcp-server-health-key.ts"],"sourcesContent":["import type { MCPServerConfig } from \"#/types/mcp-server\";\n\nconst sortedKeys = (record?: Record<string, string> \| null): string[] =>\n Object.keys(record ?? {}).sort();\n\n/*\n Stable identity for a server's health entry.\n \n Built from the server's structural, non-secret fields. Names are included\n * because persisted configs are keyed by name, which makes the key unique per\n * stored server and stable across list reordering. Secret VALUES are excluded:\n * the same credential legitimately appears as plaintext at install time,\n * `*********` in redacted settings, and ciphertext in test requests, so any\n of them would make the key flap. A structural edit (URL, command, header\n * names, auth strategy, ...) therefore produces a new key, orphaning the old\n * health entry instead of misattributing it.\n */\nexport function getMcpServerHealthKey(server: MCPServerConfig): string {\n if (server.type === \"stdio\") {\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n command: server.command ?? \"\",\n args: server.args ?? [],\n envKeys: sortedKeys(server.env),\n });\n }\n return JSON.stringify({\n type: server.type,\n name: server.name ?? \"\",\n url: server.url ?? \"\",\n headerKeys: sortedKeys(server.headers),\n authStrategy: server.auth?.strategy ?? \"\",\n authHeaderName:\n server.auth?.strategy === \"api_key\"\n ? (server.auth.header_name ?? \"\")\n : \"\",\n authHeaderKeys:\n server.auth?.strategy === \"header\" ? sortedKeys(server.auth.headers) : [],\n });\n}\n"],"mappings":";AAEA,IAAM,KAAc,MAClB,OAAO,KAAK,KAAU,CAAC,CAAC,EAAE,KAAK;AAcjC,SAAgB,EAAsB,GAAiC;CAUrE,OATI,EAAO,SAAS,UACX,KAAK,UAAU;EACpB,MAAM,EAAO;EACb,MAAM,EAAO,QAAQ;EACrB,SAAS,EAAO,WAAW;EAC3B,MAAM,EAAO,QAAQ,CAAC;EACtB,SAAS,EAAW,EAAO,GAAG;CAChC,CAAC,IAEI,KAAK,UAAU;EACpB,MAAM,EAAO;EACb,MAAM,EAAO,QAAQ;EACrB,KAAK,EAAO,OAAO;EACnB,YAAY,EAAW,EAAO,OAAO;EACrC,cAAc,EAAO,MAAM,YAAY;EACvC,gBACE,EAAO,MAAM,aAAa,YACrB,EAAO,KAAK,eAAe,KAC5B;EACN,gBACE,EAAO,MAAM,aAAa,WAAW,EAAW,EAAO,KAAK,OAAO,IAAI,CAAC;CAC5E,CAAC;AACH"}

package/dist/utils/settings-like-page-layout-classes.cjs CHANGED Viewed

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");var e=`flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]`,t=`flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]`;exports.settingsLayoutMainScrollClassName=t,exports.settingsLikeMainScrollClassName=e;
+require("../_virtual/_rolldown/runtime.cjs");var e=`flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]`,t=`flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]`;exports.settingsLayoutMainScrollClassName=t,exports.settingsLikeMainScrollClassName=e;
 //# sourceMappingURL=settings-like-page-layout-classes.cjs.map

package/dist/utils/settings-like-page-layout-classes.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"settings-like-page-layout-classes.cjs","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/*\n Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n /\nexport const settingsLikeMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/* Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":"~~6CAKA~~,IAAa,EACX,~~sIAGW~~,EACX"}
1	+ {"version":3,"file":"settings-like-page-layout-classes.cjs","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/*\n Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n \n `scrollbar-gutter: stable` keeps the gutter reserved when the page stops\n * overflowing. Without it, filtering a list short enough to fit drops the\n * scrollbar and the centered content jumps sideways into the freed space.\n /\nexport const settingsLikeMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/* Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":"6CASA,IAAa,EACX,gKAGW,EACX"}

package/dist/utils/settings-like-page-layout-classes.d.ts CHANGED Viewed

@@ -2,7 +2,11 @@
  * Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,
  * /plugins) so mobile gets horizontal inset while desktop keeps the aside +
  * `gap-10` + right gutter pattern.
+ *
+ * `scrollbar-gutter: stable` keeps the gutter reserved when the page stops
+ * overflowing. Without it, filtering a list short enough to fit drops the
+ * scrollbar and the centered content jumps sideways into the freed space.
  */
-export declare const settingsLikeMainScrollClassName = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]";
+export declare const settingsLikeMainScrollClassName = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]";
 /** Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */
-export declare const settingsLayoutMainScrollClassName = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";
+export declare const settingsLayoutMainScrollClassName = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";

package/dist/utils/settings-like-page-layout-classes.js CHANGED Viewed

@@ -1,5 +1,5 @@
 //#region src/utils/settings-like-page-layout-classes.ts
-var e = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]", t = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";
+var e = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]", t = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";
 //#endregion
 export { t as settingsLayoutMainScrollClassName, e as settingsLikeMainScrollClassName };

package/dist/utils/settings-like-page-layout-classes.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"settings-like-page-layout-classes.js","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/*\n Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n /\nexport const settingsLikeMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/* Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":";~~AAKA~~,IAAa,IACX,~~uIAGW~~,IACX"}
1	+ {"version":3,"file":"settings-like-page-layout-classes.js","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/*\n Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n \n `scrollbar-gutter: stable` keeps the gutter reserved when the page stops\n * overflowing. Without it, filtering a list short enough to fit drops the\n * scrollbar and the centered content jumps sideways into the freed space.\n /\nexport const settingsLikeMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/* Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":";AASA,IAAa,IACX,iKAGW,IACX"}

package/dist/utils/skill-category.d.ts ADDED Viewed

@@ -0,0 +1,12 @@
+import { type LucideIcon } from "lucide-react";
+import { type SkillCategoryId } from "@openhands/extensions/skills";
+import { I18nKey } from "#/i18n/declaration";
+import type { SkillInfo } from "#/types/settings";
+/** Display order in the facet rail. `other` last. */
+export declare const SKILL_CATEGORY_ORDER: readonly SkillCategoryId[];
+export declare const SKILL_CATEGORY_LABEL_KEYS: Record<SkillCategoryId, I18nKey>;
+export declare const SKILL_CATEGORY_ICONS: Record<SkillCategoryId, LucideIcon>;
+/** The catalog uses `other` for a skill with no marketplace entry, so it means "uncategorized" there exactly as it does for a local skill. */
+export declare const UNCATEGORIZED_SKILL_CATEGORY: SkillCategoryId;
+/** Local skills carry no category and a stale bundled catalog could carry one this build does not know; both degrade to `other` rather than an unrenderable facet value. */
+export declare function getSkillCategory(skill: SkillInfo): SkillCategoryId;

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@openhands/agent-canvas",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Agent Canvas UI for OpenHands - run AI coding agents with a visual interface",
   "license": "MIT",
   "private": false,
@@ -23,12 +23,12 @@
     "@heroui/react": "2.8.10",
     "@microlink/react-json-view": "1.31.20",
     "@monaco-editor/react": "4.7.0",
-    "@openhands/extensions": "0.13.0",
+    "@openhands/extensions": "0.16.0",
     "@openhands/typescript-client": "1.36.1",
-    "@react-router/node": "7.17.0",
-    "@react-router/serve": "7.17.0",
-    "@tailwindcss/vite": "4.2.4",
-    "@tanstack/react-query": "5.100.9",
+    "@react-router/node": "7.18.2",
+    "@react-router/serve": "7.18.2",
+    "@tailwindcss/vite": "4.3.3",
+    "@tanstack/react-query": "5.101.4",
     "@types/shell-quote": "1.7.5",
     "@uidotdev/usehooks": "2.4.1",
     "@xterm/addon-fit": "0.11.0",
@@ -39,20 +39,20 @@
     "downshift": "9.3.2",
     "framer-motion": "12.38.0",
     "httpxy": "0.5.3",
-    "i18next": "26.0.8",
+    "i18next": "26.3.6",
     "i18next-browser-languagedetector": "8.2.1",
     "i18next-http-backend": "4.0.0",
     "isbot": "5.1.39",
     "lucide-react": "1.25.0",
-    "monaco-editor": "0.55.1",
-    "posthog-js": "1.372.6",
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
+    "monaco-editor": "0.56.0",
+    "posthog-js": "1.380.0",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
     "react-hot-toast": "2.6.0",
-    "react-i18next": "17.0.6",
+    "react-i18next": "17.0.11",
     "react-icons": "5.6.0",
     "react-markdown": "10.1.0",
-    "react-router": "7.17.0",
+    "react-router": "7.18.2",
     "react-syntax-highlighter": "16.1.1",
     "rehype-raw": "7.0.0",
     "rehype-sanitize": "6.0.0",
@@ -62,7 +62,7 @@
     "sirv": "3.0.2",
     "sirv-cli": "3.0.1",
     "socket.io-client": "4.8.3",
-    "tailwind-merge": "3.5.0",
+    "tailwind-merge": "3.6.0",
     "tailwind-scrollbar": "4.0.2",
     "unist-util-visit": "5.1.0",
     "uuid": "14.0.0",
@@ -126,32 +126,32 @@
     "@eslint/eslintrc": "3.3.1",
     "@eslint/js": "9.39.4",
     "@mswjs/socket.io-binding": "0.2.0",
-    "@playwright/test": "1.59.1",
-    "@react-router/dev": "7.17.0",
+    "@playwright/test": "1.62.0",
+    "@react-router/dev": "7.18.2",
     "@stryker-mutator/core": "9.6.1",
     "@stryker-mutator/vitest-runner": "9.6.1",
-    "@tailwindcss/typography": "0.5.19",
-    "@tanstack/eslint-plugin-query": "5.100.9",
+    "@tailwindcss/typography": "0.5.20",
+    "@tanstack/eslint-plugin-query": "5.101.4",
     "@testing-library/dom": "10.4.1",
-    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/jest-dom": "7.0.0",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
     "@types/mdast": "4.0.4",
-    "@types/node": "25.6.0",
-    "@types/react": "19.2.14",
+    "@types/node": "26.1.2",
+    "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
     "@types/react-syntax-highlighter": "15.5.13",
     "@typescript-eslint/eslint-plugin": "8.59.2",
     "@typescript-eslint/parser": "8.59.2",
     "@vercel/react-router": "1.3.0",
-    "@vitest/coverage-v8": "4.1.5",
+    "@vitest/coverage-v8": "4.1.10",
     "cross-env": "10.1.0",
     "electron": "42.3.3",
-    "electron-builder": "26.8.1",
+    "electron-builder": "26.15.3",
     "eslint": "9.39.4",
     "eslint-config-prettier": "10.1.8",
-    "eslint-import-resolver-typescript": "4.4.4",
-    "eslint-plugin-i18next": "6.1.4",
+    "eslint-import-resolver-typescript": "4.4.5",
+    "eslint-plugin-i18next": "6.1.5",
     "eslint-plugin-import-x": "4.16.2",
     "eslint-plugin-jsx-a11y": "6.10.2",
     "eslint-plugin-prettier": "5.5.5",
@@ -160,15 +160,15 @@
     "eslint-plugin-unused-imports": "4.4.1",
     "globals": "16.5.0",
     "husky": "9.1.7",
-    "jsdom": "29.1.1",
+    "jsdom": "30.0.0",
     "lint-staged": "16.4.0",
-    "msw": "2.14.2",
+    "msw": "2.15.0",
     "postcss-prefix-selector": "2.1.1",
     "prettier": "3.8.3",
-    "tailwindcss": "4.2.4",
+    "tailwindcss": "4.3.3",
     "typescript": "6.0.3",
     "vite-plugin-svgr": "5.2.0",
-    "vitest": "4.1.5"
+    "vitest": "4.1.10"
   },
   "packageManager": "npm@10.5.0",
   "volta": {
@@ -183,7 +183,10 @@
     "@vercel/static-config": {
       "ajv": "8.20.0"
     },
-    "dompurify": "3.4.7"
+    "dompurify": "3.4.12",
+    "typed-rest-client": {
+      "qs": "6.15.3"
+    }
   },
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -240,8 +243,8 @@
     "./package.json": "./package.json"
   },
   "peerDependencies": {
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
-    "react-router": "7.17.0"
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
+    "react-router": "7.18.2"
   }
 }

package/scripts/check-sdk-version-sync.mjs CHANGED Viewed

@@ -19,7 +19,7 @@
  *
  * Usage:
  *   node scripts/check-sdk-version-sync.mjs
- *   EXPECTED_SDK_VERSION=1.39.1 node scripts/check-sdk-version-sync.mjs
+ *   EXPECTED_SDK_VERSION=1.40.1 node scripts/check-sdk-version-sync.mjs
  *   node scripts/check-sdk-version-sync.mjs --check-pypi
  *
  * Environment variables:
@@ -78,7 +78,7 @@ Triggering from other repos:
     -H "Authorization: token \$GITHUB_TOKEN" \\
     -H "Accept: application/vnd.github.v3+json" \\
     https://api.github.com/repos/OpenHands/OpenHands/dispatches \\
-    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.39.1"}}'
+    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.40.1"}}'
 `);
   process.exit(0);
 }
@@ -260,9 +260,9 @@ async function fetchPyPIDependencies(packageName, version) {
  * Parse PyPI requires_dist array and extract SDK package versions
  *
  * PyPI returns dependencies in PEP 508 format like:
- *   "openhands-sdk>=1.39.1,<2.0.0"
- *   "openhands-tools==1.39.1"
- *   "openhands-workspace (>=1.39.1)"
+ *   "openhands-sdk>=1.40.1,<2.0.0"
+ *   "openhands-tools==1.40.1"
+ *   "openhands-workspace (>=1.40.1)"
  */
 function parseSdkVersionsFromRequiresDist(requiresDist) {
   const versions = {};
@@ -276,7 +276,7 @@ function parseSdkVersionsFromRequiresDist(requiresDist) {
       }
       // Extract the version number - look for patterns like:
-      // ">=1.39.1", "==1.39.1", "(>=1.39.1)", "~=1.39.1"
+      // ">=1.40.1", "==1.40.1", "(>=1.40.1)", "~=1.40.1"
       // After the package name and before any comma or closing paren
       const versionPattern = /[><=~!]+\s*([0-9]+(?:\.[0-9]+)*)/;
       const match = dep.match(versionPattern);

package/scripts/dev-safe.mjs CHANGED Viewed

@@ -48,7 +48,7 @@ const LOCAL_AGENT_SERVER_SUBDIRS = [
   "openhands-workspace",
 ];
 const DEFAULT_AGENT_SERVER_VERSION = SHARED_DEFAULTS.versions.agentServer;
-// Temporary transitive-dep pin: openhands-sdk 1.39.1 leaves agent-client-protocol
+// Temporary transitive-dep pin: openhands-sdk 1.40.1 leaves agent-client-protocol
 // unbounded (>=0.10.1), but acp 0.11.0 reordered the ACP prompt() args and breaks
 // the SDK's ACP client. Hold acp <0.11 until a fixed SDK ships. See config/defaults.json.
 const AGENT_CLIENT_PROTOCOL_CONSTRAINT =
@@ -401,7 +401,7 @@ export function validateFrontendDependencies(
  *   edits are picked up without a manual reinstall. The agent-server itself
  *   is rebuilt from local source on each invocation (--reinstall).
  * - OH_AGENT_SERVER_GIT_REF: Git commit SHA or branch name
- * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.39.1")
+ * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.40.1")
  *
  * If none are set, defaults to the released version specified by
  * DEFAULT_AGENT_SERVER_VERSION. Set OH_AGENT_SERVER_GIT_REF to use a

package/scripts/dev-with-automation.mjs CHANGED Viewed

@@ -682,16 +682,17 @@ const AGENT_SERVER_ROUTE_PREFIXES = [
 function getLocalServiceRoutes(config) {
   const routes = [];
+  // These services bind to IPv4 loopback, but localhost can resolve to ::1.
   if (config.launchAutomation) {
     routes.push([
       AUTOMATION_ROUTE_PREFIX,
-      `http://localhost:${config.autoBackendPort}`,
+      `http://127.0.0.1:${config.autoBackendPort}`,
     ]);
   }
   if (config.launchAgentServer) {
     for (const prefix of AGENT_SERVER_ROUTE_PREFIXES) {
-      routes.push([prefix, `http://localhost:${config.agentServerPort}`]);
+      routes.push([prefix, `http://127.0.0.1:${config.agentServerPort}`]);
     }
   }

package/build/assets/Trans-Bwpzk1wT.js DELETED Viewed

@@ -1 +0,0 @@

- import{a as e,t}from"./rolldown-runtime-Cyuzqnbw.js";import{St as n}from"./vendor-styling-Bcgpimp9.js";import{a as r,i,o as a,t as o}from"./vendor~entry.client~root~root-layout~index-home~home~conversation-panel~conversation~launch~d4by102p-C2f0ZhS-.js";import{a as s,i as c,n as l,r as u}from"./vendor~root~root-layout~index-home~home~conversation-panel~conversation~launch~extensions-h~gy8zbn65-CGt6bWRT.js";import{N as d}from"./vendor~entry.client~root~root-layout~index-home~home~conversation-panel~conversation~launch~b0bpqexo-CbTboogo.js";var f=t(((e,t)=>{t.exports={area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0}})),p=e(n()),m=e(f()),h=/\s([^'"/\s><]+?)[\s/>]|([^\s=]+)=\s?(".*?"|'.*?')/g;function g(e){var t={type:`tag`,name:``,voidElement:!1,attrs:{},children:[]},n=e.match(/<\/?([^\s]+?)[/\s>]/);if(n&&(t.name=n[1],(m.default[n[1]]||e.charAt(e.length-2)===`/`)&&(t.voidElement=!0),t.name.startsWith(`!--`))){var r=e.indexOf(`-->`);return{type:`comment`,comment:r===-1?``:e.slice(4,r)}}for(var i=new RegExp(h),a=null;(a=i.exec(e))!==null;)if(a[0].trim())if(a[1]){var o=a[1].trim(),s=[o,``];o.indexOf(`=`)>-1&&(s=o.split(`=`)),t.attrs[s[0]]=s[1],i.lastIndex--}else a[2]&&(t.attrs[a[2]]=a[3].trim().substring(1,a[3].length-1));return t}var _=/<[a-zA-Z0-9\-\!\/](?:"[^"]*"|'[^']*'|[^'">])*>/g,v=/^\s*$/,y=Object.create(null);function b(e,t){switch(t.type){case`text`:return e+t.content;case`tag`:return e+=`<`+t.name+(t.attrs?function(e){var t=[];for(var n in e)t.push(n+`="`+e[n]+`"`);return t.length?` `+t.join(` `):``}(t.attrs):``)+(t.voidElement?`/>`:`>`),t.voidElement?e:e+t.children.reduce(b,``)+`</`+t.name+`>`;case`comment`:return e+``}}var x={parse:function(e,t){t||={},t.components||=y;var n,r=[],i=[],a=-1,o=!1;if(e.indexOf(`<`)!==0){var s=e.indexOf(`<`);r.push({type:`text`,content:s===-1?e:e.substring(0,s)})}return e.replace(_,function(s,c){if(o){if(s!==`</`+n.name+`>`)return;o=!1}var l,u=s.charAt(1)!==`/`,d=s.startsWith(`<!--`),f=c+s.length,p=e.charAt(f);if(d){var m=g(s);return a<0?(r.push(m),r):((l=i[a]).children.push(m),r)}if(u&&(a++,(n=g(s)).type===`tag`&&t.components[n.name]&&(n.type=`component`,o=!0),n.voidElement||o||!p||p===`<`||n.children.push({type:`text`,content:e.slice(f,e.indexOf(`<`,f))}),a===0&&r.push(n),(l=i[a-1])&&l.children.push(n),i[a]=n),(!u||n.voidElement)&&(a>-1&&(n.voidElement||n.name===s.slice(2,-1))&&(a--,n=a===-1?r:i[a]),!o&&p!==`<`&&p)){l=a===-1?r:i[a].children;var h=e.indexOf(`<`,f),_=e.slice(f,h===-1?void 0:h);v.test(_)&&(_=` `),(h>-1&&a+l.length>=0||_!==` `)&&l.push({type:`text`,content:_})}}),r},stringify:function(e){return e.reduce(function(e,t){return e+b(``,t)},``)}},S=(e,t)=>{if(!e)return!1;let n=e.props?.children??e.children;return t?n.length>0:!!n},C=e=>{if(!e)return[];let t=e.props?.children??e.children;return e.props?.i18nIsDynamicList?T(t):t},w=e=>Array.isArray(e)&&e.every(p.isValidElement),T=e=>Array.isArray(e)?e:[e],E=(e,t)=>{let n={...t};return n.props={...t.props,...e.props},n},D=e=>{let t={};if(!e)return t;let n=e=>{T(e).forEach(e=>{u(e)||(S(e)?n(C(e)):l(e)&&!(0,p.isValidElement)(e)&&Object.assign(t,e))})};return n(e),t},O=(e,t,n,r)=>{if(!e)return``;let i=``,a=T(e),o=t?.transSupportBasicHtmlNodes?t.transKeepBasicHtmlNodesFor??[]:[];return a.forEach((e,a)=>{if(u(e)){i+=`${e}`;return}if((0,p.isValidElement)(e)){let{props:s,type:c}=e,l=Object.keys(s).length,d=o.indexOf(c)>-1,f=s.children;if(!f&&d&&!l){i+=`<${c}/>`;return}if(!f&&(!d||l)||s.i18nIsDynamicList){i+=`<${a}></${a}>`;return}if(d&&l<=1){let e=u(f)?f:O(f,t,n,r);i+=`<${c}>${e}</${c}>`;return}let p=O(f,t,n,r);i+=`<${a}>${p}</${a}>`;return}if(e===null){c(n,`TRANS_NULL_VALUE`,`Passed in a null value as child`,{i18nKey:r});return}if(l(e)){let{format:t,...a}=e,o=Object.keys(a);if(o.length===1){let e=t?`${o[0]}, ${t}`:o[0];i+=`{{${e}}}`;return}c(n,`TRANS_INVALID_OBJ`,`Invalid child - Object should only have keys {{ value, format }} (format is optional).`,{i18nKey:r,child:e});return}c(n,`TRANS_INVALID_VAR`,`Passed in a variable like {number} - pass variables for interpolation as full objects like {{number}}.`,{i18nKey:r,child:e})}),i},k=(e,t=[],n={})=>{if(!e)return e;let r=Object.keys(n),i=[...t,...r],a=``,o=0;for(;o<e.length;)if(e[o]===`<`){let t=!1,n=e.slice(o).match(/^<\/(\d+|[a-zA-Z][a-zA-Z0-9_-]*)>/);if(n){let e=n[1];(/^\d+$/.test(e)||i.includes(e))&&(t=!0,a+=n[0],o+=n[0].length)}if(!t){let n=e.slice(o).match(/^<(\d+|[a-zA-Z][a-zA-Z0-9_-]*)(\s+[\w-]+(?:=(?:"[^"]*"|'[^']*'|[^\s>]+))?)*\s*(\/)?>/);if(n){let e=n[1];(/^\d+$/.test(e)||i.includes(e))&&(t=!0,a+=n[0],o+=n[0].length)}}t||(a+=`<`,o+=1)}else a+=e[o],o+=1;return a},A=(e,t,n,i,o,s,c)=>{if(n===``)return[];let d=o.transKeepBasicHtmlNodesFor||[],f=n&&new RegExp(d.map(e=>`<${e}`).join(`|`)).test(n);if(!e&&!t&&!f&&!c)return[n];let m=t??{},h=e=>{T(e).forEach(e=>{u(e)||(S(e)?h(C(e)):l(e)&&!(0,p.isValidElement)(e)&&Object.assign(m,e))})};h(e);let g=k(n,d,m),_=x.parse(`<0>${g}</0>`),v={...m,...s},y=(e,t,n)=>{let r=C(e),i=D(r,t.children,n);return w(r)&&i.length===0||e.props?.i18nIsDynamicList?r:i},b=(e,t,n,r,i)=>{e.dummy?(e.children=t,n.push((0,p.cloneElement)(e,{key:r},i?void 0:t))):n.push(...p.Children.map([e],e=>{if(e.type===p.Fragment||e.props?.i18nIsDynamicList!==void 0){let n={key:r};return e&&e.props&&Object.keys(e.props).forEach(t=>{t===`children`||t===`i18nIsDynamicList`||(n[t]=e.props[t])}),(0,p.createElement)(e.type,n,i?null:t)}let n={key:r};return e&&e.props&&Object.keys(e.props).forEach(t=>{t===`ref`||t===`children`||(n[t]=e.props[t])}),(0,p.cloneElement)(e,n,i?null:t)}))},D=(e,n,s)=>{let m=T(e),h=T(n),g={};return h.reduce((e,n,h)=>{let _=n.children?.[0]?.content&&i.services.interpolator.interpolate(n.children[0].content,v,i.language);if(n.type===`tag`){let r=m[parseInt(n.name,10)];!r&&t&&(r=t[n.name]),s.length===1&&!r&&(r=s[0][n.name]),r||={};let x={...n.attrs};c&&Object.keys(x).forEach(e=>{let t=x[e];u(t)&&(x[e]=a(t))});let w=Object.keys(x).length===0?r:E({props:x},r),O=(0,p.isValidElement)(w),k=O&&S(n,!0)&&!n.voidElement,A=f&&l(w)&&w.dummy&&!O,j=l(t)&&Object.hasOwnProperty.call(t,n.name);if(u(w)){let t=i.services.interpolator.interpolate(w,v,i.language);e.push(t)}else if(S(w)||k)b(w,y(w,n,s),e,h);else if(A)b(w,D(m,n.children,s),e,h);else if(Number.isNaN(parseFloat(n.name)))if(j)b(w,y(w,n,s),e,h,n.voidElement);else if(o.transSupportBasicHtmlNodes&&d.indexOf(n.name)>-1)if(n.voidElement)e.push((0,p.createElement)(n.name,{key:`${n.name}-${h}`}));else{let t=g[n.name]||0;g[n.name]=t+1;let r,i=0;for(let e=0;e<m.length;e+=1){let a=m[e];if((0,p.isValidElement)(a)&&a.type===n.name){if(i===t){r=a;break}i+=1}}let a=D(r?T(C(r)):m,n.children,s);e.push((0,p.createElement)(n.name,{key:`${n.name}-${h}`},a))}else if(n.voidElement)e.push(`<${n.name} />`);else{let t=D(m,n.children,s);e.push(`<${n.name}>${t}</${n.name}>`)}else if(l(w)&&!O){let t=n.children[0]?_:null;t&&e.push(t)}else b(w,_,e,h,n.children.length!==1||!_)}else if(n.type===`text`){let t=o.transWrapTextNodes,a=typeof o.unescape==`function`?o.unescape:r().unescape,s=c?a(i.services.interpolator.interpolate(n.content,v,i.language)):i.services.interpolator.interpolate(n.content,v,i.language);t?e.push((0,p.createElement)(t,{key:`${n.name}-${h}`},s)):e.push(s)}return e},[])};return C(D([{dummy:!0,children:e||[]}],_,T(e||[]))[0])},j=(e,t,n)=>{let r=e.key||t,i=(0,p.cloneElement)(e,{key:r});if(!i.props||!i.props.children||n.indexOf(`${t}/>`)<0&&n.indexOf(`${t} />`)<0)return i;function a(){return(0,p.createElement)(p.Fragment,null,i)}return(0,p.createElement)(a,{key:r})},M=(e,t)=>e.map((e,n)=>j(e,n,t)),N=(e,t)=>{let n={};return Object.keys(e).forEach(r=>{Object.assign(n,{[r]:j(e[r],r,t)})}),n},P=(e,t,n,r)=>e?Array.isArray(e)?M(e,t):l(e)?N(e,t):(s(n,`TRANS_INVALID_COMPONENTS`,`<Trans /> "components" prop expects an object or array`,{i18nKey:r}),null):null,F=e=>!l(e)||Array.isArray(e)?!1:Object.keys(e).reduce((e,t)=>e&&Number.isNaN(Number.parseFloat(t)),!0);function I({children:e,count:t,parent:n,i18nKey:a,context:o,tOptions:c={},values:l,defaults:f,components:m,ns:h,i18n:g,t:_,shouldUnescape:v,...y}){let b=g||i();if(!b)return s(b,`NO_I18NEXT_INSTANCE`,`Trans: You need to pass in an i18next instance using i18nextReactModule`,{i18nKey:a}),e;let x=_||b.t.bind(b)||(e=>e),S={...r(),...b.options?.react},C=h||x.ns||b.options?.defaultNS;C=u(C)?[C]:C||[`translation`];let{transDefaultProps:w}=S,T=w?.tOptions?{...w.tOptions,...c}:c,E=v??w?.shouldUnescape,k=w?.values?{...w.values,...l}:l,j=w?.components?{...w.components,...m}:m,M=O(e,S,b,a),N=f||T?.defaultValue||M||S.transEmptyNodeValue||(typeof a==`function`?d(a):a),{hashTransKey:I}=S,L=a||(I?I(M||N):M||N);l=b.options?.interpolation?.defaultVariables?k&&Object.keys(k).length>0?{...k,...b.options.interpolation.defaultVariables}:{...b.options.interpolation.defaultVariables}:k;let R=D(e);R&&typeof R.count==`number`&&t===void 0&&(t=R.count);let z=l||t!==void 0&&!b.options?.interpolation?.alwaysFormat||!e?T.interpolation:{interpolation:{...T.interpolation,prefix:`#$?`,suffix:`?$#`}},B={...T,context:o||T.context,count:t,...l,...z,defaultValue:N,ns:C},V=L?x(L,B):N;V===L&&N&&(V=N);let H=P(j,V,b,a),U=H||e,W=null;F(H)&&(W=H,U=e);let G=A(U,W,V,b,S,B,E),K=n??S.defaultTransParent;return K?(0,p.createElement)(K,y,G):G}function L({children:e,count:t,parent:n,i18nKey:r,context:a,tOptions:s={},values:c,defaults:l,components:u,ns:d,i18n:f,t:m,shouldUnescape:h,...g}){let{i18n:_,defaultNS:v}=(0,p.useContext)(o)||{},y=f||_||i(),b=m||y?.t.bind(y);return I({children:e,count:t,parent:n,i18nKey:r,context:a,tOptions:s,values:c,defaults:l,components:u,ns:d||b?.ns||v||y?.options?.defaultNS,i18n:y,t:m,shouldUnescape:h,...g})}export{L as t};