github.com/OpenHands/automation/pull/580 supporting plugin spec based automation cc @strong-ice-84145 @curved-angle-80449

This one is interesting

The stock runner now drives the selected agent profile:

sdk_main.py

creates the conversation with

agent_profile_id

via

RemoteConversation.create

and scopes secrets with

workspace.get_secrets(agent_profile_id=...)

, so the validated allowlist actually governs the run.

It was pre-existing, this PR technically could have left it out of its scope, but it's true it was a problem imho - my agents noticed it too and those GPT-based refused to run Cloud automations "until it's safe to do so" 😅

@quick-window-91705 Love this work. I have approved with a few questions and suggestions that could be addressed in follow-ons.