[geeen-jp]

This PR was prepared by the workflow promotion pipeline. Merge and Issue closure remain outside workflow authority.

[github-actions]

Endpoint audit

⚠️ 18 actionable Agent Server contract divergence(s) · report-only

Contract: pinned release artifact

Category	Count
Actionable client-only calls	0
Actionable server-only operations	18
Documented non-divergences	13
Agent Server contract operations	129
Audited handwritten client endpoints	119

Actionable client-only calls (0)

none

Actionable server-only operations (18)

• DELETE /api/canvas-extensions/installed/{}
• DELETE /api/llm/provider-connections/{}
• GET /api/canvas-extensions/installed
• GET /api/canvas-extensions/installed/{}
• GET /api/canvas-extensions/installed/{}/bundle
• GET /api/conversations/{}/events
• GET /api/file/archive
• GET /api/git/commits
• GET /api/git/commits/{}/changes
• GET /api/init
• GET /api/llm/provider-connections
• PATCH /api/canvas-extensions/installed/{}
• PATCH /api/llm/provider-connections/{}
• POST /api/canvas-extensions/install
• POST /api/conversations/{}/load_plugin
• POST /api/file/create_directory
• POST /api/init
• POST /api/llm/provider-connections

Documented non-divergences (13)

Client calls intentionally absent from the filtered contract (11)

• GET /
• GET /alive
• GET /health
• GET /ready
• GET /server_info

Reason: Operational Agent Server endpoints intentionally excluded from the filtered public release artifact.
Owner: OpenHands runtime maintainers

• DELETE /api/meta-profiles/{}
• GET /api/meta-profiles
• GET /api/meta-profiles/{}
• POST /api/meta-profiles/{}
• POST /api/meta-profiles/{}/activate

Reason: Client-ahead API stacked on the pending Agent Server meta-profiles implementation.
Owner: OpenHands SDK maintainers
Tracking: OpenHands#3744

• POST /api/profiles/{}/validate

Reason: Client-ahead API stacked on the pending Agent Server pre-flight LLM validation endpoint.
Owner: OpenHands TypeScript client maintainers
Tracking: OpenHands#4422

Server operations covered by an exposed browser URL (2)

• GET /api/conversations/{}/workspace
• GET /api/conversations/{}/workspace/{}

Reason: RemoteWorkspace.startWorkspaceSession exposes these authenticated URLs for browser iframe and file requests; they are not HttpClient method calls.
Owner: OpenHands TypeScript client maintainers

[github-actions]

Python API breakage checks — ✅ PASSED

Result: ✅ PASSED

Action log

[github-actions]

REST API breakage checks (OpenAPI) — ✅ PASSED

Result: ✅ PASSED

Action log

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
openhands-sdk/openhands/sdk/agent
acp_agent.py	2611	325	88%	286, 356–359, 400, 432, 561, 568, 581, 606, 623, 626, 706, 713, 716–717, 813, 820, 840, 882, 885, 959, 1047–1048, 1104–1105, 1109, 1122, 1128–1131, 1134, 1141, 1155, 1161, 1167, 1174, 1176, 1217, 1305, 1424, 1474, 1590, 1594, 1596, 1598, 1627, 1630, 1632, 1636, 1639, 1648, 1731, 1737, 1760, 1818, 1828–1834, 1860–1862, 1873–1874, 1911, 1914, 1931–1935, 2164, 2168, 2204, 2210, 2218–2219, 2222, 2238–2239, 2255, 2258, 2261–2266, 2271, 2281, 2355, 2380–2390, 2399, 2439–2440, 2495, 2497, 2501, 2505, 2521, 2663, 2810, 2958, 2961–2962, 2979–2980, 2996, 3013, 3018, 3042, 3073, 3086, 3100, 3121, 3179, 3191, 3240, 3248, 3251, 3255–3258, 3269–3271, 3293, 3301–3302, 3305–3308, 3317–3319, 3325–3327, 3335–3336, 3348–3353, 3356–3358, 3365–3368, 3373–3377, 3389, 3415–3416, 3420–3421, 3429–3432, 3439, 3491, 3496, 3589–3590, 3592, 3613–3614, 3714, 3721–3722, 3814, 4089–4090, 4093, 4097–4099, 4102–4106, 4428, 4542, 4600, 4606, 4621–4622, 4633–4636, 4662, 4670, 4843–4845, 4857–4859, 4886, 4901–4902, 4905–4907, 4914, 4918, 4929–4930, 4938, 4943, 4955–4956, 4977, 4982–4985, 4987–4990, 4992–4995, 5017, 5029–5031, 5066–5067, 5070, 5078–5080, 5084, 5086, 5090, 5093, 5102–5104, 5108, 5142–5144, 5146, 5151–5153, 5162–5166, 5169, 5174–5176, 5179–5180, 5195–5197, 5252–5254, 5492–5494, 5533, 5537, 5548, 5558, 5566, 5596, 5629–5631, 5645, 5656–5659, 5751–5752, 5793–5794, 5809–5810, 5818, 5822, 5829, 5863–5864, 5880–5881
TOTAL	43103	11875	72%