P0 for ACP + Cloud Materialise reserved file-content auth secrets (Codex auth.json, Gemini Vertex SA). Mechanism is flexible/overridable so a downstream app (agent-canvas) can use it with new CLIs without updating the SDK https://github.com/OpenHands/software-agent-sdk/pull/3474 Find more discussion about this here: https://openhands-ai.slack.com/archives/C06R25BT5B2/p1780329790623829?thread_ts=1779112142.304149&cid=C06R25BT5B2