@openhands/agent-canvas 1.9.0 → 1.11.0

package/dist/utils/settings-like-page-layout-classes.js

@@ -1,5 +1,5 @@
 //#region src/utils/settings-like-page-layout-classes.ts
-var e = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]", t = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";
+var e = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]", t = "flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]";
 //#endregion
 export { t as settingsLayoutMainScrollClassName, e as settingsLikeMainScrollClassName };
 

package/dist/utils/settings-like-page-layout-classes.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings-like-page-layout-classes.js","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/**\n * Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n */\nexport const settingsLikeMainScrollClassName =\n  \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/** Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n  \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":";AAKA,IAAa,IACX,uIAGW,IACX"}
+{"version":3,"file":"settings-like-page-layout-classes.js","names":[],"sources":["../../src/utils/settings-like-page-layout-classes.ts"],"sourcesContent":["/**\n * Shared layout tokens for /settings/* and extensions pages (/skills, /mcp,\n * /plugins) so mobile gets horizontal inset while desktop keeps the aside +\n * `gap-10` + right gutter pattern.\n *\n * `scrollbar-gutter: stable` keeps the gutter reserved when the page stops\n * overflowing. Without it, filtering a list short enough to fit drops the\n * scrollbar and the centered content jumps sideways into the freed space.\n */\nexport const settingsLikeMainScrollClassName =\n  \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pr-[14px]\";\n\n/** Same scroll shell as {@link settingsLikeMainScrollClassName} but desktop top padding comes from the outer `md:pt-8` wrapper ({@link SettingsLayout}). */\nexport const settingsLayoutMainScrollClassName =\n  \"flex min-h-0 min-w-0 flex-1 flex-col overflow-x-hidden overflow-y-auto [scrollbar-gutter:stable] custom-scrollbar-always px-4 pt-8 pb-12 md:px-0 md:pt-0 md:pr-[14px]\";\n"],"mappings":";AASA,IAAa,IACX,iKAGW,IACX"}

package/dist/utils/skill-category.d.ts

@@ -0,0 +1,12 @@
+import { type LucideIcon } from "lucide-react";
+import { type SkillCategoryId } from "@openhands/extensions/skills";
+import { I18nKey } from "#/i18n/declaration";
+import type { SkillInfo } from "#/types/settings";
+/** Display order in the facet rail. `other` last. */
+export declare const SKILL_CATEGORY_ORDER: readonly SkillCategoryId[];
+export declare const SKILL_CATEGORY_LABEL_KEYS: Record<SkillCategoryId, I18nKey>;
+export declare const SKILL_CATEGORY_ICONS: Record<SkillCategoryId, LucideIcon>;
+/** The catalog uses `other` for a skill with no marketplace entry, so it means "uncategorized" there exactly as it does for a local skill. */
+export declare const UNCATEGORIZED_SKILL_CATEGORY: SkillCategoryId;
+/** Local skills carry no category and a stale bundled catalog could carry one this build does not know; both degrade to `other` rather than an unrenderable facet value. */
+export declare function getSkillCategory(skill: SkillInfo): SkillCategoryId;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openhands/agent-canvas",
-  "version": "1.9.0",
+  "version": "1.11.0",
   "description": "Agent Canvas UI for OpenHands - run AI coding agents with a visual interface",
   "license": "MIT",
   "private": false,
@@ -23,12 +23,12 @@
     "@heroui/react": "2.8.10",
     "@microlink/react-json-view": "1.31.20",
     "@monaco-editor/react": "4.7.0",
-    "@openhands/extensions": "0.13.0",
+    "@openhands/extensions": "0.16.0",
     "@openhands/typescript-client": "1.36.1",
-    "@react-router/node": "7.17.0",
-    "@react-router/serve": "7.17.0",
-    "@tailwindcss/vite": "4.2.4",
-    "@tanstack/react-query": "5.100.9",
+    "@react-router/node": "7.18.2",
+    "@react-router/serve": "7.18.2",
+    "@tailwindcss/vite": "4.3.3",
+    "@tanstack/react-query": "5.101.4",
     "@types/shell-quote": "1.7.5",
     "@uidotdev/usehooks": "2.4.1",
     "@xterm/addon-fit": "0.11.0",
@@ -39,20 +39,20 @@
     "downshift": "9.3.2",
     "framer-motion": "12.38.0",
     "httpxy": "0.5.3",
-    "i18next": "26.0.8",
+    "i18next": "26.3.6",
     "i18next-browser-languagedetector": "8.2.1",
     "i18next-http-backend": "4.0.0",
     "isbot": "5.1.39",
     "lucide-react": "1.25.0",
-    "monaco-editor": "0.55.1",
-    "posthog-js": "1.372.6",
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
+    "monaco-editor": "0.56.0",
+    "posthog-js": "1.380.0",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
     "react-hot-toast": "2.6.0",
-    "react-i18next": "17.0.6",
+    "react-i18next": "17.0.11",
     "react-icons": "5.6.0",
     "react-markdown": "10.1.0",
-    "react-router": "7.17.0",
+    "react-router": "7.18.2",
     "react-syntax-highlighter": "16.1.1",
     "rehype-raw": "7.0.0",
     "rehype-sanitize": "6.0.0",
@@ -62,7 +62,7 @@
     "sirv": "3.0.2",
     "sirv-cli": "3.0.1",
     "socket.io-client": "4.8.3",
-    "tailwind-merge": "3.5.0",
+    "tailwind-merge": "3.6.0",
     "tailwind-scrollbar": "4.0.2",
     "unist-util-visit": "5.1.0",
     "uuid": "14.0.0",
@@ -104,11 +104,13 @@
     "build:lib": "npm run make-i18n && react-router typegen && cross-env BUILD_LIB=true vite build && tsc -p tsconfig.lib.json",
     "build:docker": "node scripts/docker-build.mjs",
     "example:acp-docker:env": "node scripts/gen-acp-docker-env.mjs",
-    "desktop": "npm run build:app && electron electron/main.mjs",
+    "predesktop": "node scripts/brand-dev-electron.mjs",
+    "desktop": "npm run build:app && electron electron",
     "build:desktop": "npm run build:app && node scripts/download-uv.mjs && node scripts/download-node.mjs && electron-builder --config electron-builder.config.mjs --publish never",
     "build:desktop:universal": "npm run build:app && node scripts/download-uv.mjs && node scripts/download-node.mjs && cross-env ELECTRON_ARCH=universal electron-builder --config electron-builder.config.mjs --publish never",
     "download-uv": "node scripts/download-uv.mjs",
-    "download-node": "node scripts/download-node.mjs"
+    "download-node": "node scripts/download-node.mjs",
+    "generate-icons": "node scripts/generate-icons.mjs"
   },
   "lint-staged": {
     "src/**/*.{ts,tsx,js}": [
@@ -126,32 +128,32 @@
     "@eslint/eslintrc": "3.3.1",
     "@eslint/js": "9.39.4",
     "@mswjs/socket.io-binding": "0.2.0",
-    "@playwright/test": "1.59.1",
-    "@react-router/dev": "7.17.0",
+    "@playwright/test": "1.62.0",
+    "@react-router/dev": "7.18.2",
     "@stryker-mutator/core": "9.6.1",
     "@stryker-mutator/vitest-runner": "9.6.1",
-    "@tailwindcss/typography": "0.5.19",
-    "@tanstack/eslint-plugin-query": "5.100.9",
+    "@tailwindcss/typography": "0.5.20",
+    "@tanstack/eslint-plugin-query": "5.101.4",
     "@testing-library/dom": "10.4.1",
-    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/jest-dom": "7.0.0",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
     "@types/mdast": "4.0.4",
-    "@types/node": "25.6.0",
-    "@types/react": "19.2.14",
+    "@types/node": "26.1.2",
+    "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
     "@types/react-syntax-highlighter": "15.5.13",
     "@typescript-eslint/eslint-plugin": "8.59.2",
     "@typescript-eslint/parser": "8.59.2",
     "@vercel/react-router": "1.3.0",
-    "@vitest/coverage-v8": "4.1.5",
+    "@vitest/coverage-v8": "4.1.10",
     "cross-env": "10.1.0",
     "electron": "42.3.3",
-    "electron-builder": "26.8.1",
+    "electron-builder": "26.15.3",
     "eslint": "9.39.4",
     "eslint-config-prettier": "10.1.8",
-    "eslint-import-resolver-typescript": "4.4.4",
-    "eslint-plugin-i18next": "6.1.4",
+    "eslint-import-resolver-typescript": "4.4.5",
+    "eslint-plugin-i18next": "6.1.5",
     "eslint-plugin-import-x": "4.16.2",
     "eslint-plugin-jsx-a11y": "6.10.2",
     "eslint-plugin-prettier": "5.5.5",
@@ -160,15 +162,16 @@
     "eslint-plugin-unused-imports": "4.4.1",
     "globals": "16.5.0",
     "husky": "9.1.7",
-    "jsdom": "29.1.1",
+    "jsdom": "30.0.0",
     "lint-staged": "16.4.0",
-    "msw": "2.14.2",
+    "msw": "2.15.0",
+    "png2icons": "2.0.1",
     "postcss-prefix-selector": "2.1.1",
     "prettier": "3.8.3",
-    "tailwindcss": "4.2.4",
+    "tailwindcss": "4.3.3",
     "typescript": "6.0.3",
     "vite-plugin-svgr": "5.2.0",
-    "vitest": "4.1.5"
+    "vitest": "4.1.10"
   },
   "packageManager": "npm@10.5.0",
   "volta": {
@@ -183,7 +186,10 @@
     "@vercel/static-config": {
       "ajv": "8.20.0"
     },
-    "dompurify": "3.4.7"
+    "dompurify": "3.4.12",
+    "typed-rest-client": {
+      "qs": "6.15.3"
+    }
   },
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -240,8 +246,8 @@
     "./package.json": "./package.json"
   },
   "peerDependencies": {
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
-    "react-router": "7.17.0"
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
+    "react-router": "7.18.2"
   }
 }

package/scripts/brand-dev-electron.mjs

@@ -0,0 +1,244 @@
+#!/usr/bin/env node
+/**
+ * Brand the dev Electron app bundle with the product name (macOS only).
+ *
+ * Run automatically as the `predesktop` npm hook.
+ *
+ * WHY THIS EXISTS
+ *
+ * `npm run desktop` runs the app inside Electron's own prebuilt bundle,
+ * node_modules/electron/dist/Electron.app. macOS derives the name it shows
+ * in the Dock tooltip, the ⌘-Tab switcher and Finder from that bundle, at
+ * launch, before any JavaScript runs. No runtime API can change it —
+ * `app.setName()`, `app.name` and package.json `productName` only drive
+ * Electron's own notion of the name (menu bar, About panel, and
+ * app.getPath("userData")).
+ *
+ * The packaged app has never had this problem: electron-builder emits a
+ * bundle literally named "<productName>.app" with matching plist keys. This
+ * script puts the dev bundle in that same state.
+ *
+ * THE BUNDLE FILENAME IS THE PART THAT ACTUALLY SHOWS
+ *
+ * Patching the plist alone is NOT enough — verified the hard way. macOS
+ * prefers the bundle's filesystem name over CFBundleName/CFBundleDisplayName
+ * for the Dock tooltip. Two installed apps prove each half of this:
+ *
+ *   DBeaver.app        CFBundleName "DBeaver Community" → displays "DBeaver"
+ *                      (the filename wins over the plist)
+ *   Antigravity.app    CFBundleExecutable "Electron"    → displays "Antigravity"
+ *                      (an Electron app whose executable name is irrelevant)
+ *
+ * So the fix aligns every source of the name at once: the .app directory
+ * name, CFBundleName and CFBundleDisplayName. That is exactly the shape of a
+ * packaged build, which is known to display correctly.
+ *
+ * Renaming the bundle means node_modules/electron/path.txt has to move with
+ * it: getElectronPath() in node_modules/electron/index.js joins path.txt onto
+ * dist/ and silently re-downloads Electron (~100 MB) if the result does not
+ * exist. The two are updated together, and the rename is rolled back if
+ * path.txt cannot be written.
+ *
+ * WHY THIS IS SAFE
+ *
+ *   - Electron's prebuilt dist is ad-hoc *linker-signed*: `codesign -dv`
+ *     reports `flags=0x20002(adhoc,linker-signed)`, `Info.plist=not bound`,
+ *     `Sealed Resources=none`. The signature covers only the Mach-O, so
+ *     editing Info.plist does not invalidate it and no re-signing is needed.
+ *   - `npm run build:desktop` is unaffected: electron-builder packages from
+ *     its own download cache (~/Library/Caches/electron/electron-v*.zip),
+ *     never from node_modules/electron/dist.
+ *
+ * WHAT IT DELIBERATELY DOES NOT TOUCH
+ *
+ *   CFBundleExecutable — left as "Electron". Antigravity above shows it has
+ *     no bearing on the displayed name; it only feeds ps / Activity Monitor.
+ *     Leaving it alone keeps path.txt's trailing segments valid.
+ *   CFBundleIdentifier — kept at com.github.Electron. Changing it would split
+ *     LaunchServices / TCC state per checkout for no visible gain.
+ *
+ * The changes live in node_modules, which `npm ci` wipes. That is fine: the
+ * `predesktop` hook re-applies them on every `npm run desktop`.
+ *
+ * This script must never block the desktop run — every failure path warns
+ * and exits 0.
+ */
+
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const projectRoot = join(__dirname, "..");
+
+// Both keys are set. CFBundleDisplayName is the one LaunchServices reports;
+// CFBundleName is the fallback and shows up in other bundle-name surfaces.
+const NAME_KEYS = ["CFBundleDisplayName", "CFBundleName"];
+
+function warn(message) {
+  console.warn(`[brand-dev-electron] ${message}`);
+}
+
+/** Root of the installed `electron` package, or null if it isn't resolvable. */
+function resolveElectronPackage() {
+  const require = createRequire(import.meta.url);
+  return dirname(require.resolve("electron/package.json"));
+}
+
+/** Current value of `key`, or null when the key is absent. */
+function readPlistString(plistPath, key) {
+  try {
+    return execFileSync(
+      "plutil",
+      ["-extract", key, "raw", "-o", "-", plistPath],
+      { encoding: "utf8" },
+    ).trim();
+  } catch {
+    return null;
+  }
+}
+
+function writePlistString(plistPath, key, value) {
+  execFileSync("plutil", ["-replace", key, "-string", value, plistPath], {
+    stdio: "pipe",
+  });
+}
+
+/**
+ * Rename dist/<current>.app to dist/<productName>.app and repoint path.txt.
+ * Returns { appDir, renamed }, or null if the bundle can't be determined.
+ */
+function ensureBundleName(pkgDir, productName) {
+  const distDir = join(pkgDir, "dist");
+  const pathFile = join(pkgDir, "path.txt");
+  if (!existsSync(pathFile)) {
+    warn(`No ${pathFile} — leaving the dev bundle alone.`);
+    return null;
+  }
+
+  // e.g. "Electron.app/Contents/MacOS/Electron" — only the first segment
+  // (the bundle directory) is ours to rename.
+  const relative = readFileSync(pathFile, "utf8").trim();
+  const segments = relative.split("/");
+  const currentName = segments[0];
+  const desiredName = `${productName}.app`;
+  if (!currentName.endsWith(".app")) {
+    warn(`Unexpected path.txt entry "${relative}" — leaving the bundle alone.`);
+    return null;
+  }
+
+  const desiredDir = join(distDir, desiredName);
+  if (currentName === desiredName && existsSync(desiredDir)) {
+    return { appDir: desiredDir, renamed: false };
+  }
+
+  const currentDir = join(distDir, currentName);
+  let renamed = false;
+  if (existsSync(currentDir) && currentDir !== desiredDir) {
+    if (existsSync(desiredDir)) {
+      // Both present: a previous run renamed the bundle and something
+      // restored the original. Prefer the correctly named one and just fix
+      // path.txt rather than clobbering either bundle.
+      warn(`Both ${currentName} and ${desiredName} exist — using the latter.`);
+    } else {
+      renameSync(currentDir, desiredDir);
+      renamed = true;
+    }
+  } else if (!existsSync(desiredDir)) {
+    warn(`No Electron bundle under ${distDir} — leaving the dev bundle alone.`);
+    return null;
+  }
+
+  // path.txt MUST agree with the directory on disk; a stale entry makes
+  // getElectronPath() re-download Electron on the next run.
+  segments[0] = desiredName;
+  try {
+    writeFileSync(pathFile, segments.join("/"));
+  } catch (err) {
+    // Undo the rename so the checkout is left in a working state.
+    if (existsSync(desiredDir) && !existsSync(currentDir)) {
+      try {
+        renameSync(desiredDir, currentDir);
+      } catch {
+        warn(`Could not roll back the bundle rename in ${distDir}.`);
+      }
+    }
+    warn(`Could not update ${pathFile}: ${err.message}`);
+    return null;
+  }
+
+  return { appDir: desiredDir, renamed };
+}
+
+function main() {
+  // The Dock/⌘-Tab name is a macOS bundle concept. On Windows the dev
+  // taskbar name comes from electron.exe's version resource and on Linux
+  // from the .desktop file / WM_CLASS — neither exists until the app is
+  // packaged, so there is nothing to patch.
+  if (process.platform !== "darwin") return;
+
+  const manifestPath = join(projectRoot, "electron", "package.json");
+  let productName;
+  try {
+    productName = JSON.parse(readFileSync(manifestPath, "utf8")).productName;
+  } catch (err) {
+    warn(`Could not read ${manifestPath}: ${err.message}`);
+    return;
+  }
+  if (!productName) {
+    warn(`No productName in ${manifestPath} — leaving the dev bundle alone.`);
+    return;
+  }
+  // The name becomes a directory entry; a "/" would silently retarget it.
+  if (productName.includes("/")) {
+    warn(`productName "${productName}" cannot be used as a bundle name.`);
+    return;
+  }
+
+  let pkgDir;
+  try {
+    pkgDir = resolveElectronPackage();
+  } catch (err) {
+    warn(`Could not resolve the electron package: ${err.message}`);
+    return;
+  }
+
+  let bundle;
+  try {
+    bundle = ensureBundleName(pkgDir, productName);
+  } catch (err) {
+    warn(`Could not rename the dev bundle: ${err.message}`);
+    return;
+  }
+  if (!bundle) return;
+
+  const plistPath = join(bundle.appDir, "Contents", "Info.plist");
+  if (!existsSync(plistPath)) {
+    warn(`No Info.plist at ${plistPath} — leaving the plist alone.`);
+    return;
+  }
+
+  const stale = NAME_KEYS.filter(
+    (key) => readPlistString(plistPath, key) !== productName,
+  );
+
+  try {
+    for (const key of stale) writePlistString(plistPath, key, productName);
+  } catch (err) {
+    // Read-only node_modules (CI caches, sandboxes) lands here. The app still
+    // runs; only the displayed name keeps saying "Electron".
+    warn(`Could not patch ${plistPath}: ${err.message}`);
+    return;
+  }
+
+  // Stay quiet when there was nothing to do, so repeat runs don't add noise.
+  if (bundle.renamed || stale.length > 0) {
+    console.log(
+      `[brand-dev-electron] Dev Electron bundle now identifies as "${productName}".`,
+    );
+  }
+}
+
+main();

package/scripts/check-sdk-version-sync.mjs

@@ -19,7 +19,7 @@
  *
  * Usage:
  *   node scripts/check-sdk-version-sync.mjs
- *   EXPECTED_SDK_VERSION=1.39.1 node scripts/check-sdk-version-sync.mjs
+ *   EXPECTED_SDK_VERSION=1.40.1 node scripts/check-sdk-version-sync.mjs
  *   node scripts/check-sdk-version-sync.mjs --check-pypi
  *
  * Environment variables:
@@ -78,7 +78,7 @@ Triggering from other repos:
     -H "Authorization: token \$GITHUB_TOKEN" \\
     -H "Accept: application/vnd.github.v3+json" \\
     https://api.github.com/repos/OpenHands/OpenHands/dispatches \\
-    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.39.1"}}'
+    -d '{"event_type": "sdk-version-check", "client_payload": {"version": "1.40.1"}}'
 `);
   process.exit(0);
 }
@@ -260,9 +260,9 @@ async function fetchPyPIDependencies(packageName, version) {
  * Parse PyPI requires_dist array and extract SDK package versions
  *
  * PyPI returns dependencies in PEP 508 format like:
- *   "openhands-sdk>=1.39.1,<2.0.0"
- *   "openhands-tools==1.39.1"
- *   "openhands-workspace (>=1.39.1)"
+ *   "openhands-sdk>=1.40.1,<2.0.0"
+ *   "openhands-tools==1.40.1"
+ *   "openhands-workspace (>=1.40.1)"
  */
 function parseSdkVersionsFromRequiresDist(requiresDist) {
   const versions = {};
@@ -276,7 +276,7 @@ function parseSdkVersionsFromRequiresDist(requiresDist) {
       }
 
       // Extract the version number - look for patterns like:
-      // ">=1.39.1", "==1.39.1", "(>=1.39.1)", "~=1.39.1"
+      // ">=1.40.1", "==1.40.1", "(>=1.40.1)", "~=1.40.1"
       // After the package name and before any comma or closing paren
       const versionPattern = /[><=~!]+\s*([0-9]+(?:\.[0-9]+)*)/;
       const match = dep.match(versionPattern);

package/scripts/check-translation-completeness.cjs

@@ -23,6 +23,7 @@ const IDENTICAL_VALUE_ALLOWLIST = new Set([
   'COMMAND_MENU$SHORTCUT',
   'CONVERSATION$ACP_AGENT_GENERIC',
   'CONVERSATION$BUDGET_USAGE_FORMAT',
+  'CONVERSATION_PANEL$PREVIEW_GIT',
   'FILES$VSCODE',
   'GITHUB$AUTH_SCOPE',
   'LAUNCH$PLUGIN_PATH',
@@ -37,6 +38,9 @@ const IDENTICAL_VALUE_ALLOWLIST = new Set([
   'SETTINGS$APP_UPDATE_CARD_TITLE',
   'SETTINGS$AZURE_DEVOPS',
   'SETTINGS$CLOUD_SETTINGS_LINK',
+  'SETTINGS$VERSION_DOCKER',
+  'SETTINGS$VERSION_NPM_RECOMMENDED',
+  'SETTINGS$VERSION_PRODUCT_NAME',
   'SETTINGS$GITHUB',
   'SETTINGS$GITLAB',
   'SETTINGS$MCP_AUTH_MODE_OAUTH',

package/scripts/dev-safe.mjs

@@ -48,7 +48,7 @@ const LOCAL_AGENT_SERVER_SUBDIRS = [
   "openhands-workspace",
 ];
 const DEFAULT_AGENT_SERVER_VERSION = SHARED_DEFAULTS.versions.agentServer;
-// Temporary transitive-dep pin: openhands-sdk 1.39.1 leaves agent-client-protocol
+// Temporary transitive-dep pin: openhands-sdk 1.40.1 leaves agent-client-protocol
 // unbounded (>=0.10.1), but acp 0.11.0 reordered the ACP prompt() args and breaks
 // the SDK's ACP client. Hold acp <0.11 until a fixed SDK ships. See config/defaults.json.
 const AGENT_CLIENT_PROTOCOL_CONSTRAINT =
@@ -401,7 +401,7 @@ export function validateFrontendDependencies(
  *   edits are picked up without a manual reinstall. The agent-server itself
  *   is rebuilt from local source on each invocation (--reinstall).
  * - OH_AGENT_SERVER_GIT_REF: Git commit SHA or branch name
- * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.39.1")
+ * - OH_AGENT_SERVER_VERSION: Specific PyPI version (e.g., "1.40.1")
  *
  * If none are set, defaults to the released version specified by
  * DEFAULT_AGENT_SERVER_VERSION. Set OH_AGENT_SERVER_GIT_REF to use a

package/scripts/dev-with-automation.mjs

@@ -682,16 +682,17 @@ const AGENT_SERVER_ROUTE_PREFIXES = [
 function getLocalServiceRoutes(config) {
   const routes = [];
 
+  // These services bind to IPv4 loopback, but localhost can resolve to ::1.
   if (config.launchAutomation) {
     routes.push([
       AUTOMATION_ROUTE_PREFIX,
-      `http://localhost:${config.autoBackendPort}`,
+      `http://127.0.0.1:${config.autoBackendPort}`,
     ]);
   }
 
   if (config.launchAgentServer) {
     for (const prefix of AGENT_SERVER_ROUTE_PREFIXES) {
-      routes.push([prefix, `http://localhost:${config.agentServerPort}`]);
+      routes.push([prefix, `http://127.0.0.1:${config.agentServerPort}`]);
     }
   }
 

package/scripts/generate-icons.mjs

@@ -0,0 +1,109 @@
+/**
+ * Generate electron/build-resources/icon.ico and icon.icns from the
+ * 1024×1024 icon.png master. Run after changing icon.png:
+ *
+ *   npm run generate-icons
+ *
+ * The outputs are COMMITTED — electron-builder auto-discovers them in
+ * directories.buildResources and uses them as-is. We don't rely on
+ * electron-builder's own PNG→ICO conversion because it emits a single
+ * 256×256 PNG-compressed entry, which several Windows shell surfaces
+ * (Explorer small views, NSIS, taskbar) can't render — they fall back to
+ * the default Electron icon. png2icons with forWinExe=true stores the
+ * 48/32/24/16 entries as classic BMP, which is what Windows expects.
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import png2icons from "png2icons";
+
+// Standard Windows app-icon sizes (Microsoft recommends 16/24/32/48/256;
+// 64/128 cover intermediate DPI scaling).
+export const REQUIRED_ICO_SIZES = [16, 24, 32, 48, 64, 128, 256];
+
+// The ten standard macOS representations (16 → 512@2x). is32/il32 (+ the
+// l8mk/s8mk masks png2icons emits alongside) are the legacy non-retina
+// 16/32 forms; ic07–ic14 cover 128 → 512@2x.
+export const REQUIRED_ICNS_TYPES = [
+  "is32",
+  "il32",
+  "ic07",
+  "ic08",
+  "ic09",
+  "ic10",
+  "ic11",
+  "ic12",
+  "ic13",
+  "ic14",
+];
+
+/**
+ * Parse an ICO buffer's ICONDIR into [{size, isPng}] — isPng distinguishes
+ * PNG-compressed payloads from classic BMP entries.
+ */
+export function listIcoEntries(ico) {
+  const entries = [];
+  for (let i = 0; i < ico.readUInt16LE(4); i++) {
+    const entry = 6 + i * 16;
+    const width = ico[entry];
+    const offset = ico.readUInt32LE(entry + 12);
+    entries.push({
+      size: width === 0 ? 256 : width,
+      isPng: ico.readUInt32BE(offset) === 0x89504e47, // \x89PNG
+    });
+  }
+  return entries;
+}
+
+/** List the 4-char OSType of every chunk in an ICNS buffer. */
+export function listIcnsTypes(icns) {
+  const types = [];
+  for (let p = 8; p < icns.length; p += icns.readUInt32BE(p + 4)) {
+    types.push(icns.toString("ascii", p, p + 4));
+  }
+  return types;
+}
+
+/**
+ * Convert a PNG buffer into { ico, icns } buffers, asserting the emitted
+ * size sets so a png2icons upgrade that changes them fails loudly.
+ */
+export function generateIcons(input) {
+  // forWinExe: true → 48/32/24/16 stored as classic BMP entries (required
+  // by Windows shell small-icon surfaces), ≥64 PNG-compressed. 0 = lossless.
+  const ico = png2icons.createICO(input, png2icons.BICUBIC2, 0, false, true);
+  const icns = png2icons.createICNS(input, png2icons.BICUBIC2, 0);
+  if (!ico || !icns) throw new Error("png2icons failed to convert icon.png");
+
+  const icoSizes = listIcoEntries(ico).map((entry) => entry.size);
+  for (const size of REQUIRED_ICO_SIZES) {
+    if (!icoSizes.includes(size)) throw new Error(`icon.ico missing ${size}px`);
+  }
+  const icnsTypes = listIcnsTypes(icns);
+  for (const type of REQUIRED_ICNS_TYPES) {
+    if (!icnsTypes.includes(type)) throw new Error(`icon.icns missing ${type}`);
+  }
+
+  return { ico, icns };
+}
+
+const isMainModule =
+  process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+
+if (isMainModule) {
+  const resDir = join(
+    dirname(fileURLToPath(import.meta.url)),
+    "..",
+    "electron",
+    "build-resources",
+  );
+  const { ico, icns } = generateIcons(readFileSync(join(resDir, "icon.png")));
+  writeFileSync(join(resDir, "icon.ico"), ico);
+  writeFileSync(join(resDir, "icon.icns"), icns);
+  console.log(
+    `icon.ico (${listIcoEntries(ico)
+      .map((entry) => entry.size)
+      .join("/")}px, ${ico.length} B), ` +
+      `icon.icns (${listIcnsTypes(icns).join(",")}, ${icns.length} B)`,
+  );
+}