Add lock-to-cloud backend setup mode

.github/workflows/docker.yml

@@ -7,7 +7,6 @@ on:
     tags:
       - "v*"
   pull_request:
-    branches: [main]
   workflow_dispatch:
     inputs:
       agent_server_image:

.github/workflows/mock-llm-docker-e2e.yml

@@ -70,7 +70,7 @@ jobs:
           SHOULD_RUN=false
           while IFS= read -r file; do
             case "$file" in
-              src/*|public/*|scripts/*|bin/*|config/*|docker/*|tests/e2e/mock-llm/*|tests/e2e/support/*|package.json|package-lock.json|vite.config.ts|tsconfig.json|react-router.config.ts|playwright.mock-llm.config.ts|playwright.mock-llm-docker.config.ts|tailwind.config.js|hero.ts|.github/workflows/mock-llm-docker-e2e.yml)
+              src/*|public/*|scripts/*|bin/*|config/*|docker/*|tests/e2e/mock-llm/*|tests/e2e/support/*|package.json|package-lock.json|vite.config.ts|tsconfig.json|react-router.config.ts|playwright.mock-llm.config.ts|playwright.mock-llm-docker.config.ts|tailwind.config.js|hero.ts|.github/workflows/docker.yml|.github/workflows/mock-llm-docker-e2e.yml)
                 SHOULD_RUN=true
                 break
                 ;;

.github/workflows/mock-llm-e2e.yml

@@ -49,7 +49,11 @@ jobs:
     needs: detect-pr-changes
     if: github.event_name != 'pull_request' || needs.detect-pr-changes.outputs.should_run == 'true'
     runs-on: ubuntu-24.04
-    timeout-minutes: 15
+    # Full-suite runs can spend several minutes on dependency, browser, uv,
+    # and frontend setup before Playwright starts. Keep Playwright's own
+    # 10-minute test deadline below, but give the job enough wall-clock room
+    # for setup plus reporting so GitHub does not terminate it mid-suite.
+    timeout-minutes: 30
 
     env:
       MOCK_LLM_REPORT_PATH: mock-llm-report.md

__tests__/api/agent-server-config.test.ts

@@ -6,6 +6,7 @@ import {
   getAgentServerFormDefaults,
   getAgentServerSessionApiKey,
   getAgentServerWorkingDir,
+  getLockedCloudHost,
   isAuthRequired,
   isAuthRequiredAndMissing,
 } from "#/api/agent-server-config";
@@ -24,6 +25,8 @@ afterEach(() => {
   vi.unstubAllEnvs();
   delete (window as unknown as Record<string, unknown>)
     .__AGENT_CANVAS_SESSION_API_KEY__;
+  delete (window as unknown as Record<string, unknown>)
+    .__AGENT_CANVAS_LOCK_TO_CLOUD__;
   Object.defineProperty(window, "location", {
     configurable: true,
     value: ORIGINAL_LOCATION,
@@ -75,6 +78,45 @@ describe("agent server config", () => {
   });
 });
 
+describe("getLockedCloudHost", () => {
+  function setInjectedCloudHost(value: unknown) {
+    (
+      window as unknown as Record<string, unknown>
+    ).__AGENT_CANVAS_LOCK_TO_CLOUD__ = value;
+  }
+
+  it("returns null when no Cloud lock is configured", () => {
+    expect(getLockedCloudHost()).toBeNull();
+  });
+
+  it("uses VITE_LOCK_TO_CLOUD when it is provided", () => {
+    vi.stubEnv("VITE_LOCK_TO_CLOUD", "https://cloud.example.com/");
+    setInjectedCloudHost("https://runtime.example.com");
+
+    expect(getLockedCloudHost()).toBe("https://cloud.example.com");
+  });
+
+  it("falls back to the runtime-injected Cloud URL", () => {
+    setInjectedCloudHost("https://runtime.example.com/");
+
+    expect(getLockedCloudHost()).toBe("https://runtime.example.com");
+  });
+
+  it("adds https:// to hostnames without an explicit scheme", () => {
+    setInjectedCloudHost("cloud.example.com/");
+
+    expect(getLockedCloudHost()).toBe("https://cloud.example.com");
+  });
+
+  it("ignores blank and non-string runtime values", () => {
+    setInjectedCloudHost("   ");
+    expect(getLockedCloudHost()).toBeNull();
+
+    setInjectedCloudHost(12345);
+    expect(getLockedCloudHost()).toBeNull();
+  });
+});
+
 describe("isAuthRequired", () => {
   afterEach(() => {
     delete (window as unknown as Record<string, unknown>)

__tests__/api/agent-server-conversation-service.test.ts

@@ -82,6 +82,7 @@ vi.mock("#/api/agent-server-config", () => ({
   getAgentServerHeaders: vi.fn(() => ({ "X-Session-API-Key": "test-api-key" })),
   shouldLoadPublicSkills: vi.fn(() => true),
   syncBakedSessionApiKey: vi.fn(),
+  getLockedCloudHost: vi.fn(() => null),
 }));
 
 vi.mock("#/api/settings-service/settings-service.api", () => ({

__tests__/api/use-create-conversation-metadata.test.ts

@@ -54,6 +54,7 @@ vi.mock("#/api/agent-server-config", () => ({
   ),
   shouldLoadPublicSkills: vi.fn(() => true),
   syncBakedSessionApiKey: vi.fn(),
+  getLockedCloudHost: vi.fn(() => null),
 }));
 
 vi.mock("#/api/settings-service/settings-service.api", () => ({

__tests__/components/backends/backend-form-modal.test.tsx

@@ -69,6 +69,9 @@ beforeEach(() => {
 
 afterEach(() => {
   window.localStorage.clear();
+  vi.unstubAllEnvs();
+  delete (window as unknown as Record<string, unknown>)
+    .__AGENT_CANVAS_LOCK_TO_CLOUD__;
   __resetActiveStoreForTests();
 });
 
@@ -128,14 +131,12 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
     renderWithProviders(
       <TestSeed
         onMount={(ctx) => {
-          backendId = ctx
-            .addBackend({
-              name: "Local Seed",
-              host: "http://localhost:9000",
-              apiKey: "sk-old",
-              kind: "local",
-            })
-            .id;
+          backendId = ctx.addBackend({
+            name: "Local Seed",
+            host: "http://localhost:9000",
+            apiKey: "sk-old",
+            kind: "local",
+          }).id;
         }}
       >
         <BackendFormModal
@@ -153,9 +154,7 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
     );
 
     await waitFor(() => {
-      expect(screen.getByTestId("edit-backend-name")).toHaveValue(
-        "Local Seed",
-      );
+      expect(screen.getByTestId("edit-backend-name")).toHaveValue("Local Seed");
     });
 
     const user = userEvent.setup();
@@ -187,14 +186,12 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
     renderWithProviders(
       <TestSeed
         onMount={(ctx) => {
-          backendId = ctx
-            .addBackend({
-              name: "Offline Server",
-              host: "http://localhost:9999",
-              apiKey: "sk-key",
-              kind: "local",
-            })
-            .id;
+          backendId = ctx.addBackend({
+            name: "Offline Server",
+            host: "http://localhost:9999",
+            apiKey: "sk-key",
+            kind: "local",
+          }).id;
         }}
       >
         <BackendFormModal
@@ -227,9 +224,9 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
 
     await user.click(screen.getByTestId("edit-backend-submit"));
 
-    expect(
-      await screen.findByTestId("edit-backend-error"),
-    ).toHaveTextContent("Connection refused");
+    expect(await screen.findByTestId("edit-backend-error")).toHaveTextContent(
+      "Connection refused",
+    );
   });
 
   it("preserves cloud kind when editing a cloud backend", async () => {
@@ -238,14 +235,12 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
     renderWithProviders(
       <TestSeed
         onMount={(ctx) => {
-          backendId = ctx
-            .addBackend({
-              name: "OpenHands Cloud",
-              host: "https://app.all-hands.dev",
-              apiKey: "sk-cloud",
-              kind: "cloud",
-            })
-            .id;
+          backendId = ctx.addBackend({
+            name: "OpenHands Cloud",
+            host: "https://app.all-hands.dev",
+            apiKey: "sk-cloud",
+            kind: "cloud",
+          }).id;
         }}
       >
         <BackendFormModal
@@ -290,4 +285,21 @@ describe("BackendFormModal – edit mode (BackendForm entry point)", () => {
       kind: "cloud",
     });
   });
+
+  it("locks add mode to Cloud login when VITE_LOCK_TO_CLOUD is set", () => {
+    vi.stubEnv("VITE_LOCK_TO_CLOUD", "https://cloud.example.com");
+
+    renderWithProviders(<BackendFormModal mode="add" onClose={vi.fn()} />);
+
+    expect(screen.getByTestId("add-backend-cloud-title")).toBeVisible();
+    expect(screen.getByTestId("add-backend-login-button")).toBeVisible();
+    expect(screen.queryByTestId("add-backend-host")).not.toBeInTheDocument();
+    expect(screen.queryByTestId("add-backend-api-key")).not.toBeInTheDocument();
+    expect(
+      screen.queryByTestId("add-backend-advanced-toggle"),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.queryByTestId("add-backend-cloud-host"),
+    ).not.toBeInTheDocument();
+  });
 });

__tests__/components/features/conversation-panel/conversation-card.test.tsx

@@ -39,6 +39,8 @@ vi.mock("react-i18next", async () => {
           CONVERSATION$UPDATED: "Updated",
           COMMON$NO_REPOSITORY: "No repository",
           CONVERSATION$ACP_AGENT_GENERIC: "ACP",
+          CONVERSATION_PANEL$PIN_CONVERSATION: "Pin conversation",
+          CONVERSATION_PANEL$UNPIN_CONVERSATION: "Unpin conversation",
         };
         return translations[key] || key;
       },
@@ -799,4 +801,47 @@ describe("ConversationCard", () => {
       ).not.toBeInTheDocument();
     });
   });
+
+  it("calls onTogglePin when the pin button is clicked", async () => {
+    const onTogglePin = vi.fn();
+    const user = userEvent.setup();
+
+    renderWithProviders(
+      <ConversationCard
+        title="Conversation 1"
+        selectedRepository={null}
+        lastUpdatedAt="2021-10-01T12:00:00Z"
+        conversationId="conversation-1"
+        onDelete={vi.fn()}
+        onTogglePin={onTogglePin}
+      />,
+    );
+
+    const card = screen.getByTestId("conversation-card");
+    await user.hover(card);
+    await user.click(
+      screen.getByTestId("conversation-pin-toggle-conversation-1"),
+    );
+    expect(onTogglePin).toHaveBeenCalledTimes(1);
+  });
+
+  it("keeps the pin icon visible without hover when alwaysShowPinIcon is set", () => {
+    renderWithProviders(
+      <ConversationCard
+        title="Conversation 1"
+        selectedRepository={null}
+        lastUpdatedAt="2021-10-01T12:00:00Z"
+        conversationId="conversation-1"
+        onDelete={vi.fn()}
+        onTogglePin={vi.fn()}
+        isPinned
+        alwaysShowPinIcon
+      />,
+    );
+
+    expect(
+      screen.getByTestId("conversation-pin-toggle-conversation-1"),
+    ).toBeVisible();
+    expect(screen.getByRole("time")).toBeInTheDocument();
+  });
 });

__tests__/components/features/conversation-panel/conversation-panel-filter-menu.test.tsx

@@ -32,6 +32,8 @@ function renderFilterMenu(
     toggleShowRepoBranchMetadata: vi.fn(),
     showLlmProfiles: false,
     toggleShowLlmProfiles: vi.fn(),
+    showHoverMetadata: false,
+    toggleShowHoverMetadata: vi.fn(),
     totalConversationsCount: 5,
     onRequestDeleteAll: vi.fn(),
     ...overrides,

__tests__/components/features/conversation-panel/conversation-panel-list-helpers.test.ts

@@ -1,9 +1,12 @@
 import { describe, expect, it } from "vitest";
 import {
+  applyGroupFolderOrder,
   getGroupConversationPreview,
   groupConversations,
   GROUP_CONVERSATIONS_PREVIEW_LIMIT,
   parseConversationTimeMs,
+  moveGroupFolderOrder,
+  resolvePinnedConversations,
   sortConversationsByField,
 } from "#/components/features/conversation-panel/conversation-panel-list-helpers";
 import type { AppConversation } from "#/api/conversation-service/agent-server-conversation-service.types";
@@ -252,6 +255,20 @@ describe("conversation-panel-list-helpers", () => {
     expect(GROUP_CONVERSATIONS_PREVIEW_LIMIT).toBe(5);
   });
 
+  it("resolvePinnedConversations preserves pin order and drops missing ids", () => {
+    const conversations = [
+      { ...base, id: "a", title: "A" },
+      { ...base, id: "b", title: "B" },
+      { ...base, id: "c", title: "C" },
+    ] as AppConversation[];
+
+    expect(
+      resolvePinnedConversations(["c", "missing", "a"], conversations).map(
+        (conversation) => conversation.id,
+      ),
+    ).toEqual(["c", "a"]);
+  });
+
   it("groups local conversations by selected_workspace, collapsing per-conversation worktree paths", () => {
     // Two worktree-mode conversations launched against the same workspace must
     // end up in a single group keyed off the user-selected workspace, not split
@@ -365,4 +382,36 @@ describe("conversation-panel-list-helpers", () => {
       },
     });
   });
+
+  it("applies a persisted folder order and moves folders via drag-and-drop", () => {
+    const groups = [
+      { id: "ws:/workspace/alpha", label: "alpha" },
+      { id: "ws:/workspace/beta", label: "beta" },
+      { id: "ws:/workspace/gamma", label: "gamma" },
+    ];
+
+    expect(
+      applyGroupFolderOrder(groups, [
+        "ws:/workspace/gamma",
+        "ws:/workspace/alpha",
+      ]).map((group) => group.id),
+    ).toEqual([
+      "ws:/workspace/gamma",
+      "ws:/workspace/alpha",
+      "ws:/workspace/beta",
+    ]);
+
+    expect(
+      moveGroupFolderOrder(
+        ["ws:/workspace/gamma", "ws:/workspace/alpha"],
+        groups.map((group) => group.id),
+        "ws:/workspace/alpha",
+        "ws:/workspace/beta",
+      ),
+    ).toEqual([
+      "ws:/workspace/gamma",
+      "ws:/workspace/beta",
+      "ws:/workspace/alpha",
+    ]);
+  });
 });