@openhands/extensions 0.8.0 → 0.10.0

package/skills/research-brief/SKILL.md

@@ -87,6 +87,8 @@ curl -s -X POST "${OPENHANDS_HOST}/api/automation/v1/preset/prompt" \
   }'
 ```
 
+PowerShell note: use `curl.exe` for this exact flag syntax, and replace `${OPENHANDS_HOST}` / `$OPENHANDS_AUTOMATION_API_KEY` with `$env:OPENHANDS_HOST` / `$env:OPENHANDS_AUTOMATION_API_KEY` if running it natively.
+
 ### Step 5 — Confirm
 
 Tell the user:

package/skills/skill-creator/SKILL.md

@@ -6,6 +6,7 @@ description: This skill should be used when the user wants to "create a skill",
 # Skill Creator
 
 This skill provides guidance for creating effective skills.
+Windows PowerShell equivalents for the Unix shell commands used in examples are in `references/windows.md`.
 
 ## About Skills
 

package/skills/skill-creator/references/windows.md

@@ -0,0 +1,30 @@
+# Windows Notes for Skill Creation Commands
+
+Use these PowerShell equivalents for the Unix shell examples in this skill.
+
+## Create a Skill Directory
+
+```powershell
+New-Item -ItemType Directory -Force skill-name\references,skill-name\scripts,skill-name\assets | Out-Null
+New-Item -ItemType File -Force skill-name\SKILL.md | Out-Null
+```
+
+## Run Helper Scripts
+
+Use `python` if `python3` is not available:
+
+```powershell
+python scripts\init_skill.py <skill-name> --path <output-directory>
+python scripts\quick_validate.py <path\to\skill-folder>
+```
+
+## Search and Extract Text
+
+PowerShell alternatives for common Unix text tools:
+
+```powershell
+Select-String -Path SKILL.md -Pattern "^name:"
+Get-Content SKILL.md | Select-Object -First 20
+```
+
+If a repository already provides `rg`, prefer it for recursive searches because it works well on Windows too.

package/skills/slack-channel-monitor/SKILL.md

@@ -15,6 +15,7 @@ triggers:
 # Slack Channel Monitor
 
 Create a cron automation that polls up to 10 Slack channels every minute.
+Windows PowerShell equivalents for the setup, packaging, upload, and API-check shell snippets are in `references/windows.md`.
 When a message containing the **trigger phrase** (default: `@openhands`) is
 detected it:
 

package/skills/slack-channel-monitor/references/windows.md

@@ -0,0 +1,64 @@
+# Windows Notes for Slack Channel Monitor Setup
+
+Use these PowerShell forms when creating the Slack monitor automation from Windows.
+
+## Validate Slack Tokens
+
+```powershell
+curl.exe -s https://slack.com/api/auth.test `
+  -H "Authorization: Bearer $env:SLACK_BOT_TOKEN" |
+  python -c "import json,sys; d=json.load(sys.stdin); print('ok' if d.get('ok') else d.get('error'))"
+```
+
+For a user token, replace `$env:SLACK_BOT_TOKEN` with `$env:SLACK_USER_TOKEN`.
+
+## Build Directory, Syntax Check, and Integrity Check
+
+```powershell
+$buildDir = Join-Path $env:TEMP "slack-monitor-build"
+New-Item -ItemType Directory -Force $buildDir | Out-Null
+$main = Join-Path $buildDir "main.py"
+# copy scripts/main.py to $main, then replace only the configuration constants
+
+python -m py_compile $main
+Select-String -Path $main -Pattern 'TRIGGER_PHRASE = "'
+Select-String -Path $main -Pattern 'CHANNEL_IDS: list\[str\] ='
+Select-String -Path $main -Pattern 'DEFAULT_OPENHANDS_URL = "'
+Select-String -Path $main -Pattern 'def get_secret'
+Select-String -Path $main -Pattern 'def _state_file_path'
+Select-String -Path $main -Pattern 'def create_conversation'
+```
+
+## Package and Upload
+
+```powershell
+$tarball = Join-Path $env:TEMP "slack-monitor.tar.gz"
+tar.exe -czf $tarball -C $buildDir .
+
+$upload = curl.exe -s -X POST `
+  "$env:OPENHANDS_HOST/api/automation/v1/uploads?name=slack-channel-monitor" `
+  -H "X-Session-API-Key: $env:OPENHANDS_AUTOMATION_API_KEY" `
+  -H "Content-Type: application/gzip" `
+  --data-binary "@$tarball" | ConvertFrom-Json
+
+$tarballPath = $upload.tarball_path
+```
+
+## Create the Automation
+
+```powershell
+$body = @"
+{
+  "name": "Slack Channel Monitor",
+  "trigger": {"type": "cron", "schedule": "* * * * *"},
+  "tarball_path": "$tarballPath",
+  "entrypoint": "python3 main.py",
+  "timeout": 55
+}
+"@
+
+curl.exe -s -X POST "$env:OPENHANDS_HOST/api/automation/v1" `
+  -H "X-Session-API-Key: $env:OPENHANDS_AUTOMATION_API_KEY" `
+  -H "Content-Type: application/json" `
+  -d $body
+```

package/skills/slack-standup-digest/SKILL.md

@@ -80,6 +80,8 @@ curl -s -X POST "${OPENHANDS_HOST}/api/automation/v1/preset/prompt" \
   }'
 ```
 
+PowerShell note: use `curl.exe` for this exact flag syntax, and replace `${OPENHANDS_HOST}` / `$OPENHANDS_AUTOMATION_API_KEY` with `$env:OPENHANDS_HOST` / `$env:OPENHANDS_AUTOMATION_API_KEY` if running it natively.
+
 ### Step 5 — Confirm
 
 Tell the user:

package/skills/spark-version-upgrade/SKILL.md

@@ -44,6 +44,7 @@ https://spark.apache.org/docs/latest/migration-guide.html
 - [ ] Identify target Spark version
 - [ ] Search for deprecated APIs: `grep -rn 'import org.apache.spark' --include='*.scala' --include='*.java' --include='*.py'`
 - [ ] List all Spark config properties: `grep -rn 'spark\.' --include='*.conf' --include='*.properties' --include='*.scala' --include='*.java' --include='*.py' | grep -v 'test'`
+- [ ] On Windows PowerShell, use `Get-ChildItem -Recurse -Include *.scala,*.java,*.py | Select-String 'import org.apache.spark'` and adjust the extensions/pattern for config searches.
 - [ ] Check for custom `SparkSession` or `SparkContext` extensions
 - [ ] Identify connector dependencies (Hive, Kafka, Cassandra, Delta, Iceberg)
 - [ ] Document findings in `spark_upgrade_impact.md`
@@ -230,4 +231,4 @@ Spark SQL behavior changes between versions can silently alter query results.
 ✓ No removed APIs remain in code
 ✓ Configuration properties are current
 ✓ SQL queries produce correct results
-✓ Upgrade impact documented in `spark_upgrade_impact.md`
+✓ Upgrade impact documented in `spark_upgrade_impact.md`

package/skills/ssh/SKILL.md

@@ -14,6 +14,7 @@ triggers:
 # SSH Skill
 
 This skill provides capabilities for establishing and managing SSH connections to remote machines.
+Windows PowerShell equivalents for SSH config creation, key paths, ssh-agent, and permissions are in `references/windows.md`.
 
 ## Capabilities
 
@@ -132,4 +133,4 @@ chmod 600 ~/.ssh/id_ed25519
 chmod 644 ~/.ssh/id_ed25519.pub
 # Set correct permissions for SSH directory
 chmod 700 ~/.ssh
-```
+```

package/skills/ssh/references/windows.md

@@ -0,0 +1,59 @@
+# Windows Notes for SSH Commands
+
+Windows includes OpenSSH Client on current Windows versions. Use these PowerShell forms for Windows-native setup.
+
+## Key Paths
+
+Use the Windows profile path:
+
+```powershell
+$sshDir = Join-Path $env:USERPROFILE ".ssh"
+New-Item -ItemType Directory -Force $sshDir | Out-Null
+```
+
+## Generate and Use a Key
+
+```powershell
+$key = Join-Path $sshDir "key_name"
+ssh-keygen -t ed25519 -f $key -C "comment" -N ""
+ssh -i $key username@hostname
+```
+
+## Create SSH Config
+
+```powershell
+$config = Join-Path $sshDir "config"
+@'
+Host alias
+    HostName hostname_or_ip
+    User username
+    IdentityFile ~/.ssh/key_name
+    Port 22
+    ServerAliveInterval 60
+'@ | Set-Content -LiteralPath $config -Encoding ascii
+```
+
+## Start ssh-agent
+
+```powershell
+Set-Service ssh-agent -StartupType Automatic
+Start-Service ssh-agent
+ssh-add $key
+```
+
+## Permissions
+
+POSIX `chmod 600` does not apply to Windows filesystems. Restrict private-key ACLs with `icacls`:
+
+```powershell
+icacls $key /inheritance:r
+icacls $key /grant:r "${env:USERNAME}:R"
+```
+
+## Copy a Public Key
+
+`ssh-copy-id` is usually not installed on Windows. For Unix-like remotes, append the key with SSH:
+
+```powershell
+Get-Content "$key.pub" | ssh username@hostname "mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys"
+```

package/skills/swift-linux/SKILL.md

@@ -12,6 +12,7 @@ triggers:
 This document provides instructions for installing Swift on Debian 12 (Bookworm).
 
 > This setup is intended for non-UI development tasks on Swift on Linux.
+> On Windows, run these Debian commands inside WSL2 or a Linux container. For native Windows Swift, use the Windows toolchain from Swift.org instead.
 
 ## Prerequisites
 
@@ -78,4 +79,4 @@ Verify that Swift is correctly installed by running:
 
 ```bash
 swift --version
-```
+```

package/skills/vercel/SKILL.md

@@ -40,6 +40,11 @@ To allow agents and automated systems to access protected deployments, users nee
    ```bash
    curl -H "x-vercel-protection-bypass: <secret>" https://your-preview-url.vercel.app
    ```
+
+   PowerShell equivalent:
+   ```powershell
+   Invoke-WebRequest -Headers @{ "x-vercel-protection-bypass" = "<secret>" } -Uri https://your-preview-url.vercel.app
+   ```
    
    **As a Query Parameter:**
    ```

package/tests/test_catalog_schema.py

@@ -9,6 +9,7 @@ AI reviewer kept catching is now caught in CI.
 """
 
 import json
+from copy import deepcopy
 from pathlib import Path
 
 import pytest
@@ -45,3 +46,60 @@ def test_catalog_entry_validates_against_schema(entry_path: Path) -> None:
 def test_schema_file_is_valid_draft_2020_12() -> None:
     """The schema itself must be a valid Draft 2020-12 document."""
     Draft202012Validator.check_schema(_SCHEMA)
+
+
+def test_schema_requires_catalog_and_install_metadata() -> None:
+    entry = json.loads((CATALOG_DIR / "slack.json").read_text())
+
+    invalid_entries: list[tuple[str, dict]] = []
+
+    missing_docs = deepcopy(entry)
+    missing_docs.pop("docsUrl")
+    invalid_entries.append(("docsUrl", missing_docs))
+
+    missing_field_type = deepcopy(entry)
+    missing_field_type["connectionOptions"][1]["transport"]["envFields"][0].pop("type")
+    invalid_entries.append(("type", missing_field_type))
+
+    missing_required_marker = deepcopy(entry)
+    missing_required_marker["connectionOptions"][1]["transport"]["envFields"][0].pop(
+        "required"
+    )
+    invalid_entries.append(("required", missing_required_marker))
+
+    missing_principal_mapping = deepcopy(entry)
+    missing_principal_mapping["connectionOptions"][0]["connectionModel"][
+        "identityMapping"
+    ].pop("externalPrincipalIdPath")
+    invalid_entries.append(("externalPrincipalIdPath", missing_principal_mapping))
+
+    for field, invalid in invalid_entries:
+        errors = list(VALIDATOR.iter_errors(invalid))
+        assert any(field in error.message for error in errors), errors
+
+
+@pytest.mark.parametrize(
+    ("entry_id", "resource_type", "cardinality", "selection_mode"),
+    [
+        ("slack", "workspace", "one", "automatic"),
+        ("notion", "workspace", "one", "automatic"),
+        ("microsoft-teams", "tenant", "one", "automatic"),
+        ("atlassian", "site", "many", "post_auth"),
+        ("github", "organization", "many", "post_auth"),
+    ],
+)
+def test_oauth_connection_model_examples(
+    entry_id: str,
+    resource_type: str,
+    cardinality: str,
+    selection_mode: str,
+) -> None:
+    entry = json.loads((CATALOG_DIR / f"{entry_id}.json").read_text())
+    oauth_option = next(
+        option for option in entry["connectionOptions"] if option["id"] == "oauth"
+    )
+    model = oauth_option["connectionModel"]
+
+    assert model["resourceType"] == resource_type
+    assert model["resourceCardinality"] == cardinality
+    assert model["selectionMode"] == selection_mode

package/tests/test_catalogs.py

@@ -79,9 +79,14 @@ def test_remote_no_auth_mcp_entries_are_intentionally_public():
     for entry in load_catalog_entries("integrations/catalog"):
         for option in entry["connectionOptions"]:
             transport = option.get("transport", {})
+            # An option with `headerFields` still requires the user to supply
+            # credentials (just via named headers, e.g. Datadog's
+            # DD-API-KEY/DD-APPLICATION-KEY), so it is NOT "public/no-auth".
+            has_header_credentials = bool(transport.get("headerFields"))
             if (
                 option["provider"] == "mcp"
                 and option["auth"]["strategy"] == "none"
+                and not has_header_credentials
                 and transport.get("url", "").startswith("https://")
             ):
                 actual.add(entry["id"])
@@ -98,7 +103,7 @@ def test_credential_fields_have_helper_text_and_link():
     for entry in load_catalog_entries("integrations/catalog"):
         for option in entry["connectionOptions"]:
             transport = option.get("transport", {})
-            for field_group in ("envFields", "argFields"):
+            for field_group in ("envFields", "argFields", "headerFields"):
                 for field in transport.get(field_group, []):
                     if field.get("type") == "password":
                         field_key = field.get("key", "<unknown>")

package/tests/test_deprecations.py

@@ -0,0 +1,136 @@
+"""Tests for the SDK-aligned public deprecation policy."""
+
+from __future__ import annotations
+
+import ast
+import importlib.util
+import sys
+from datetime import date, timedelta
+from pathlib import Path
+
+import pytest
+from deprecation import DeprecatedWarning, UnsupportedWarning
+
+from openhands_extensions.deprecation import (
+    deprecated,
+    handle_deprecated_model_fields,
+    warn_cleanup,
+    warn_deprecated,
+)
+
+
+ROOT = Path(__file__).resolve().parents[1]
+CHECK = ROOT / "scripts" / "check_deprecations.py"
+
+
+def _load_checker():
+    spec = importlib.util.spec_from_file_location("extensions_deprecation_check", CHECK)
+    assert spec is not None
+    assert spec.loader is not None
+    module = importlib.util.module_from_spec(spec)
+    sys.modules[spec.name] = module
+    spec.loader.exec_module(module)
+    return module
+
+
+def test_deprecated_decorator_warns_and_preserves_calls() -> None:
+    @deprecated(
+        deprecated_in="0.10.0",
+        removed_in="0.12.0",
+        current_version="0.10.0",
+        details="Use replacement().",
+    )
+    def legacy(value: int) -> int:
+        return value * 2
+
+    with pytest.warns(DeprecatedWarning, match="legacy"):
+        assert legacy(3) == 6
+
+
+def test_dynamic_deprecation_warnings_match_the_sdk() -> None:
+    with pytest.warns(DeprecatedWarning, match="dynamic legacy API"):
+        warn_deprecated(
+            "dynamic legacy API",
+            deprecated_in="0.10.0",
+            removed_in="0.12.0",
+            current_version="0.10.0",
+        )
+
+    with pytest.warns(UnsupportedWarning, match="dynamic legacy API"):
+        warn_deprecated(
+            "dynamic legacy API",
+            deprecated_in="0.10.0",
+            removed_in="0.12.0",
+            current_version="0.12.0",
+        )
+
+
+def test_cleanup_warning_and_model_field_compatibility_match_the_sdk() -> None:
+    with pytest.warns(UserWarning, match="Cleanup required: temporary workaround"):
+        warn_cleanup(
+            "temporary workaround",
+            cleanup_by="0.12.0",
+            current_version="0.12.0",
+        )
+
+    data = {"current": "value", "legacy": "old"}
+    assert handle_deprecated_model_fields(data, ("legacy",)) == {"current": "value"}
+    assert (
+        handle_deprecated_model_fields("not a mapping", ("legacy",)) == "not a mapping"
+    )
+
+
+def test_checker_scans_all_sdk_deprecation_mechanisms() -> None:
+    checker = _load_checker()
+    tree = ast.parse(
+        """
+@deprecated(deprecated_in=\"0.10.0\", removed_in=\"0.12.0\")
+def decorated(): pass
+
+warn_deprecated(\"dynamic API\", deprecated_in=\"0.10.0\", removed_in=\"0.12.0\")
+warn_cleanup(\"temporary workaround\", cleanup_by=date(2030, 1, 1))
+"""
+    )
+
+    records = [
+        *checker._gather_decorators(tree, CHECK, package="openhands-extensions"),
+        *checker._gather_warn_calls(tree, CHECK, package="openhands-extensions"),
+    ]
+
+    assert [(record.identifier, record.kind) for record in records] == [
+        ("decorated", "decorator"),
+        ("'dynamic API'", "warn_call"),
+        ("'temporary workaround'", "cleanup_call"),
+    ]
+    assert records[2].removed_in == date(2030, 1, 1)
+
+
+def test_release_please_deadline_passes_before_removal_version(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    checker = _load_checker()
+    monkeypatch.setattr(checker, "_load_current_version", lambda _: "0.10.0")
+
+    assert checker.main() == 0
+
+
+def test_release_please_deadline_fails_at_removal_version(
+    monkeypatch: pytest.MonkeyPatch,
+    capsys: pytest.CaptureFixture[str],
+) -> None:
+    checker = _load_checker()
+    monkeypatch.setattr(checker, "_load_current_version", lambda _: "0.12.0")
+
+    assert checker.main() == 1
+    output = capsys.readouterr().out
+    assert "list_integration_catalog" in output
+    assert "get_integration_catalog_entry" in output
+
+
+def test_date_based_deadlines_use_the_sdk_semantics() -> None:
+    with pytest.warns(DeprecatedWarning, match="scheduled dynamic API"):
+        warn_deprecated(
+            "scheduled dynamic API",
+            deprecated_in="0.10.0",
+            removed_in=date.today() + timedelta(days=1),
+        )

package/tests/test_integration_catalog_in_sync.py

@@ -4,9 +4,12 @@ from __future__ import annotations
 
 import json
 import subprocess
+from copy import deepcopy
 from pathlib import Path
 
 import openhands_extensions
+import pytest
+from pydantic import ValidationError
 
 ROOT = Path(__file__).resolve().parents[1]
 CATALOG_DIR = ROOT / "integrations" / "catalog"
@@ -23,7 +26,17 @@ def _catalog_files() -> dict[str, dict]:
 
 def _catalog_entries() -> list[dict]:
     entries = list(_catalog_files().values())
-    return sorted(entries, key=lambda entry: (-(entry.get("popularityRank") if entry.get("popularityRank") is not None else -1), entry["id"]))
+    return sorted(
+        entries,
+        key=lambda entry: (
+            -(
+                entry.get("popularityRank")
+                if entry.get("popularityRank") is not None
+                else -1
+            ),
+            entry["id"],
+        ),
+    )
 
 
 def _supports_mcp(entry: dict) -> bool:
@@ -31,8 +44,10 @@ def _supports_mcp(entry: dict) -> bool:
 
 
 def _supports_oauth(entry: dict) -> bool:
-    return any(option.get("auth", {}).get("strategy") == "oauth2" for option in entry["connectionOptions"])
-
+    return any(
+        option.get("auth", {}).get("strategy") == "oauth2"
+        for option in entry["connectionOptions"]
+    )
 
 
 def test_catalog_directory_is_hand_authored_source_of_truth() -> None:
@@ -84,6 +99,95 @@ def test_python_list_integration_catalog_returns_raw_entries() -> None:
         assert "runtimeAvailability" not in entry
 
 
+def test_python_list_integration_catalog_models_returns_typed_entries() -> None:
+    entries = openhands_extensions.list_integration_catalog()
+    models = openhands_extensions.list_integration_catalog_models()
+
+    assert [model.model_dump(exclude_none=True) for model in models] == entries
+    assert all(
+        isinstance(model, openhands_extensions.IntegrationCatalogEntry)
+        for model in models
+    )
+    assert (
+        openhands_extensions.get_integration_catalog_entry_model(entries[0]["id"])
+        == models[0]
+    )
+    assert openhands_extensions.get_integration_catalog_entry_model("missing") is None
+
+    with pytest.raises(ValidationError):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(
+            {**entries[0], "unexpected": True}
+        )
+
+
+def test_http_catalog_options_require_both_urls() -> None:
+    entry = next(
+        entry
+        for entry in _catalog_entries()
+        if any(option["provider"] == "http" for option in entry["connectionOptions"])
+    )
+    option = next(
+        option for option in entry["connectionOptions"] if option["provider"] == "http"
+    )
+
+    for field in ("apiBaseUrl", "openApiUrl"):
+        invalid = deepcopy(entry)
+        invalid_option = next(
+            item for item in invalid["connectionOptions"] if item["id"] == option["id"]
+        )
+        invalid_option["http"].pop(field)
+        with pytest.raises(ValidationError, match=field):
+            openhands_extensions.IntegrationCatalogEntry.model_validate(invalid)
+
+
+def test_catalog_models_require_connectability_and_install_metadata() -> None:
+    entry = next(entry for entry in _catalog_entries() if entry["id"] == "slack")
+
+    missing_docs = deepcopy(entry)
+    missing_docs.pop("docsUrl")
+    with pytest.raises(ValidationError, match="docsUrl"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(missing_docs)
+
+    missing_field_type = deepcopy(entry)
+    missing_field_type["connectionOptions"][1]["transport"]["envFields"][0].pop("type")
+    with pytest.raises(ValidationError, match="type"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(missing_field_type)
+
+    missing_required_marker = deepcopy(entry)
+    missing_required_marker["connectionOptions"][1]["transport"]["envFields"][0].pop(
+        "required"
+    )
+    with pytest.raises(ValidationError, match="required"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(
+            missing_required_marker
+        )
+
+    missing_principal_mapping = deepcopy(entry)
+    missing_principal_mapping["connectionOptions"][0]["connectionModel"][
+        "identityMapping"
+    ].pop("externalPrincipalIdPath")
+    with pytest.raises(ValidationError, match="externalPrincipalIdPath"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(
+            missing_principal_mapping
+        )
+
+    null_instead_of_omission = deepcopy(entry)
+    null_instead_of_omission["notes"] = None
+    with pytest.raises(ValidationError, match="must be omitted"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(
+            null_instead_of_omission
+        )
+
+    invalid_identity_path = deepcopy(entry)
+    invalid_identity_path["connectionOptions"][0]["connectionModel"]["identityMapping"][
+        "externalPrincipalIdPath"
+    ] = "not/a/path"
+    with pytest.raises(ValidationError, match="pattern"):
+        openhands_extensions.IntegrationCatalogEntry.model_validate(
+            invalid_identity_path
+        )
+
+
 def test_logo_metadata_is_serializable_and_language_agnostic() -> None:
     entries = openhands_extensions.list_integration_catalog()
     with_logo = [entry for entry in entries if entry.get("logoUrl")]
@@ -130,7 +234,9 @@ def test_js_reads_the_same_catalog_as_python() -> None:
         "import { getIntegrationCatalogEntry } from './integrations/index.js';\n"
         f"process.stdout.write(JSON.stringify(getIntegrationCatalogEntry({json.dumps(sample_id)})));"
     )
-    assert json.loads(sample) == openhands_extensions.get_integration_catalog_entry(sample_id)
+    assert json.loads(sample) == openhands_extensions.get_integration_catalog_entry(
+        sample_id
+    )
 
 
 def _js_filter(mcp, oauth) -> list[str]:
@@ -155,7 +261,9 @@ def test_filter_mcp_only() -> None:
 
 
 def test_filter_oauth_only() -> None:
-    py_ids = {e["id"] for e in openhands_extensions.list_integration_catalog(oauth=True)}
+    py_ids = {
+        e["id"] for e in openhands_extensions.list_integration_catalog(oauth=True)
+    }
     js_ids = set(_js_filter("undefined", "true"))
     all_oauth = {
         e["id"]
@@ -168,7 +276,8 @@ def test_filter_oauth_only() -> None:
 
 def test_filter_oauth_not_mcp() -> None:
     py_ids = {
-        e["id"] for e in openhands_extensions.list_integration_catalog(oauth=True, mcp=False)
+        e["id"]
+        for e in openhands_extensions.list_integration_catalog(oauth=True, mcp=False)
     }
     js_ids = set(_js_filter("false", "true"))
     expected = {
@@ -197,7 +306,9 @@ def test_accessors_return_independent_copies() -> None:
     sample = openhands_extensions.get_integration_catalog_entry(sample_id)
     assert sample is not None
     sample["__mutated"] = True
-    assert "__mutated" not in openhands_extensions.get_integration_catalog_entry(sample_id)
+    assert "__mutated" not in openhands_extensions.get_integration_catalog_entry(
+        sample_id
+    )
 
     snapshot = openhands_extensions.INTEGRATION_CATALOG_SNAPSHOT
     snapshot["integrations"][0]["__mutated"] = True