Release 1.3.0 (#1262)

Co-authored-by: openhands <openhands@all-hands.dev>

Author: xingyaoww

examples/01_standalone_sdk/04_confirmation_mode_example.py

@@ -12,6 +12,7 @@
     ConversationState,
 )
 from openhands.sdk.security.confirmation_policy import AlwaysConfirm, NeverConfirm
+from openhands.sdk.security.llm_analyzer import LLMSecurityAnalyzer
 from openhands.tools.preset.default import get_default_agent
 
 
@@ -91,11 +92,14 @@ def run_until_finished(conversation: BaseConversation, confirmer: Callable) -> N
     api_key=SecretStr(api_key),
 )
 
+agent = get_default_agent(llm=llm)
+conversation = Conversation(agent=agent, workspace=os.getcwd())
+
+# Conditionally add security analyzer based on environment variable
 add_security_analyzer = bool(os.getenv("ADD_SECURITY_ANALYZER", "").strip())
 if add_security_analyzer:
     print("Agent security analyzer added.")
-agent = get_default_agent(llm=llm, add_security_analyzer=add_security_analyzer)
-conversation = Conversation(agent=agent, workspace=os.getcwd())
+    conversation.set_security_analyzer(LLMSecurityAnalyzer())
 
 # 1) Confirmation mode ON
 conversation.set_confirmation_policy(AlwaysConfirm())

examples/01_standalone_sdk/07_mcp_integration.py

@@ -50,7 +50,6 @@
     mcp_config=mcp_config,
     # This regex filters out all repomix tools except pack_codebase
     filter_tools_regex="^(?!repomix)(.*)|^repomix.*pack_codebase.*$",
-    security_analyzer=LLMSecurityAnalyzer(),
 )
 
 llm_messages = []  # collect raw LLM messages
@@ -67,6 +66,7 @@ def conversation_callback(event: Event):
     callbacks=[conversation_callback],
     workspace=cwd,
 )
+conversation.set_security_analyzer(LLMSecurityAnalyzer())
 
 logger.info("Starting conversation with MCP integration...")
 conversation.send_message(

examples/01_standalone_sdk/16_llm_security_analyzer.py

@@ -111,14 +111,14 @@ def run_until_finished_with_security(
     Tool(name=FileEditorTool.name),
 ]
 
-# Agent with security analyzer
-security_analyzer = LLMSecurityAnalyzer()
-agent = Agent(llm=llm, tools=tools, security_analyzer=security_analyzer)
+# Agent
+agent = Agent(llm=llm, tools=tools)
 
 # Conversation with persisted filestore
 conversation = Conversation(
     agent=agent, persistence_dir="./.conversations", workspace="."
 )
+conversation.set_security_analyzer(LLMSecurityAnalyzer())
 conversation.set_confirmation_policy(ConfirmRisky())
 
 print("\n1) Safe command (LOW risk - should execute automatically)...")

openhands-agent-server/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "openhands-agent-server"
-version = "1.2.0"
+version = "1.3.0"
 description = "OpenHands Agent Server - REST/WebSocket interface for OpenHands AI Agent"
 
 requires-python = ">=3.12"

openhands-sdk/openhands/sdk/agent/base.py

@@ -5,19 +5,15 @@
 from collections.abc import Generator, Iterable
 from typing import TYPE_CHECKING, Any
 
-from pydantic import BaseModel, ConfigDict, Field, PrivateAttr, model_validator
+from pydantic import BaseModel, ConfigDict, Field, PrivateAttr
 
 from openhands.sdk.context.agent_context import AgentContext
 from openhands.sdk.context.condenser import CondenserBase, LLMSummarizingCondenser
 from openhands.sdk.context.prompts.prompt import render_template
 from openhands.sdk.llm import LLM
 from openhands.sdk.logger import get_logger
 from openhands.sdk.mcp import create_mcp_tools
-from openhands.sdk.security import analyzer
 from openhands.sdk.tool import BUILT_IN_TOOLS, Tool, ToolDefinition, resolve_tool
-from openhands.sdk.utils.deprecation import (
-    warn_deprecated,
-)
 from openhands.sdk.utils.models import DiscriminatedUnionMixin
 from openhands.sdk.utils.pydantic_diff import pretty_pydantic_diff
 
@@ -30,12 +26,6 @@
 logger = get_logger(__name__)
 
 
-AGENT_SECURITY_ANALYZER_DEPRECATION_DETAILS = (
-    "Use `conversation = Conversation(); "
-    "conversation.set_security_analyzer(...)` instead."
-)
-
-
 class AgentBase(DiscriminatedUnionMixin, ABC):
     """Abstract base class for OpenHands agents.
 
@@ -132,12 +122,6 @@ class AgentBase(DiscriminatedUnionMixin, ABC):
         examples=[{"cli_mode": True}],
     )
 
-    security_analyzer: analyzer.SecurityAnalyzerBase | None = Field(
-        default=None,
-        description="Optional security analyzer to evaluate action risks.",
-        examples=[{"kind": "LLMSecurityAnalyzer"}],
-    )
-
     condenser: CondenserBase | None = Field(
         default=None,
         description="Optional condenser to use for condensing conversation history.",
@@ -158,24 +142,6 @@ class AgentBase(DiscriminatedUnionMixin, ABC):
     # Runtime materialized tools; private and non-serializable
     _tools: dict[str, ToolDefinition] = PrivateAttr(default_factory=dict)
 
-    @model_validator(mode="before")
-    @classmethod
-    def _coerce_inputs(cls, data):
-        if not isinstance(data, dict):
-            return data
-        d = dict(data)
-
-        if "security_analyzer" in d and d["security_analyzer"]:
-            warn_deprecated(
-                "Agent.security_analyzer",
-                deprecated_in="1.1.0",
-                removed_in="1.3.0",
-                details=AGENT_SECURITY_ANALYZER_DEPRECATION_DETAILS,
-                stacklevel=3,
-            )
-
-        return d
-
     @property
     def prompt_dir(self) -> str:
         """Returns the directory where this class's module file is located."""
@@ -222,15 +188,6 @@ def init_state(
     def _initialize(self, state: "ConversationState"):
         """Create an AgentBase instance from an AgentSpec."""
 
-        # 1) Migrate deprecated analyzer → state (if present)
-        if self.security_analyzer and not state.security_analyzer:
-            state.security_analyzer = self.security_analyzer
-            # 2) Clear on the immutable model (allowed via object.__setattr__)
-            try:
-                object.__setattr__(self, "security_analyzer", None)
-            except Exception:
-                logger.warning("Could not clear deprecated Agent.security_analyzer")
-
         if self._tools:
             logger.warning("Agent already initialized; skipping re-initialization.")
             return
@@ -299,8 +256,7 @@ def step(
     def resolve_diff_from_deserialized(self, persisted: "AgentBase") -> "AgentBase":
         """
         Return a new AgentBase instance equivalent to `persisted` but with
-        explicitly whitelisted fields (e.g. api_key, security_analyzer) taken from
-        `self`.
+        explicitly whitelisted fields (e.g. api_key) taken from `self`.
         """
         if persisted.__class__ is not self.__class__:
             raise ValueError(
@@ -329,9 +285,6 @@ def resolve_diff_from_deserialized(self, persisted: "AgentBase") -> "AgentBase":
                 )
                 updates["condenser"] = new_condenser
 
-        # Allow security_analyzer to differ - use the runtime (self) version
-        updates["security_analyzer"] = self.security_analyzer
-
         # Create maps by tool name for easy lookup
         runtime_tools_map = {tool.name: tool for tool in self.tools}
         persisted_tools_map = {tool.name: tool for tool in persisted.tools}

openhands-sdk/openhands/sdk/conversation/conversation_stats.py

@@ -1,66 +1,23 @@
-from pydantic import AliasChoices, BaseModel, Field, PrivateAttr
+from pydantic import BaseModel, Field, PrivateAttr
 
 from openhands.sdk.llm.llm_registry import RegistryEvent
 from openhands.sdk.llm.utils.metrics import Metrics
 from openhands.sdk.logger import get_logger
-from openhands.sdk.utils.deprecation import (
-    deprecated,
-)
 
 
 logger = get_logger(__name__)
 
-SERVICE_TO_USAGE_DEPRECATION_DETAILS = (
-    "Use usage_to_metrics instead of service_to_metrics."
-)
-RESTORED_SERVICES_DEPRECATION_DETAILS = (
-    "Use _restored_usage_ids instead of _restored_services."
-)
-
 
 class ConversationStats(BaseModel):
     """Track per-LLM usage metrics observed during conversations."""
 
     usage_to_metrics: dict[str, Metrics] = Field(
         default_factory=dict,
-        validation_alias=AliasChoices("usage_to_metrics", "service_to_metrics"),
-        serialization_alias="usage_to_metrics",
         description="Active usage metrics tracked by the registry.",
     )
 
     _restored_usage_ids: set[str] = PrivateAttr(default_factory=set)
 
-    @property
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_TO_USAGE_DEPRECATION_DETAILS,
-    )
-    def service_to_metrics(
-        self,
-    ) -> dict[str, Metrics]:  # pragma: no cover - compatibility shim
-        return self.usage_to_metrics
-
-    @service_to_metrics.setter
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_TO_USAGE_DEPRECATION_DETAILS,
-    )
-    def service_to_metrics(
-        self, value: dict[str, Metrics]
-    ) -> None:  # pragma: no cover - compatibility shim
-        self.usage_to_metrics = value
-
-    @property
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=RESTORED_SERVICES_DEPRECATION_DETAILS,
-    )
-    def _restored_services(self) -> set[str]:  # pragma: no cover - compatibility shim
-        return self._restored_usage_ids
-
     def get_combined_metrics(self) -> Metrics:
         total_metrics = Metrics()
         for metrics in self.usage_to_metrics.values():
@@ -73,16 +30,6 @@ def get_metrics_for_usage(self, usage_id: str) -> Metrics:
 
         return self.usage_to_metrics[usage_id]
 
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_TO_USAGE_DEPRECATION_DETAILS,
-    )
-    def get_metrics_for_service(
-        self, service_id: str
-    ) -> Metrics:  # pragma: no cover - compatibility shim
-        return self.get_metrics_for_usage(service_id)
-
     def register_llm(self, event: RegistryEvent):
         # Listen for LLM creations and track their metrics
         llm = event.llm

openhands-sdk/openhands/sdk/llm/llm.py

@@ -29,10 +29,6 @@
 if TYPE_CHECKING:  # type hints only, avoid runtime import cycle
     from openhands.sdk.tool.tool import ToolDefinition
 
-from openhands.sdk.utils.deprecation import (
-    deprecated,
-    warn_deprecated,
-)
 from openhands.sdk.utils.pydantic_diff import pretty_pydantic_diff
 
 
@@ -98,8 +94,6 @@
     LLMNoResponseError,
 )
 
-SERVICE_ID_DEPRECATION_DETAILS = "Use LLM.usage_id instead of LLM.service_id."
-
 
 class LLM(BaseModel, RetryMixin, NonNativeToolCallingMixin):
     """Language model interface for OpenHands agents.
@@ -332,16 +326,6 @@ def _coerce_inputs(cls, data):
             return data
         d = dict(data)
 
-        if "service_id" in d and "usage_id" not in d:
-            warn_deprecated(
-                "LLM.service_id",
-                deprecated_in="1.1.0",
-                removed_in="1.3.0",
-                details=SERVICE_ID_DEPRECATION_DETAILS,
-                stacklevel=3,
-            )
-            d["usage_id"] = d.pop("service_id")
-
         model_val = d.get("model")
         if not model_val:
             raise ValueError("model must be specified in LLM")
@@ -422,24 +406,6 @@ def _serialize_secrets(self, v: SecretStr | None, info):
     # =========================================================================
     # Public API
     # =========================================================================
-    @property
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_ID_DEPRECATION_DETAILS,
-    )
-    def service_id(self) -> str:
-        return self.usage_id
-
-    @service_id.setter
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_ID_DEPRECATION_DETAILS,
-    )
-    def service_id(self, value: str) -> None:
-        self.usage_id = value
-
     @property
     def metrics(self) -> Metrics:
         """Get usage metrics for this LLM instance.

openhands-sdk/openhands/sdk/llm/llm_registry.py

@@ -6,19 +6,11 @@
 
 from openhands.sdk.llm.llm import LLM
 from openhands.sdk.logger import get_logger
-from openhands.sdk.utils.deprecation import (
-    deprecated,
-)
 
 
 logger = get_logger(__name__)
 
 
-SERVICE_TO_LLM_DEPRECATION_DETAILS = "Use usage_to_llm instead of service_to_llm."
-
-LIST_SERVICES_DEPRECATION_DETAILS = "Use list_usage_ids instead of list_services."
-
-
 class RegistryEvent(BaseModel):
     llm: LLM
 
@@ -77,15 +69,6 @@ def usage_to_llm(self) -> dict[str, LLM]:
 
         return self._usage_to_llm
 
-    @property
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=SERVICE_TO_LLM_DEPRECATION_DETAILS,
-    )
-    def service_to_llm(self) -> dict[str, LLM]:  # pragma: no cover - compatibility shim
-        return self._usage_to_llm
-
     def add(self, llm: LLM) -> None:
         """Add an LLM instance to the registry.
 
@@ -137,13 +120,3 @@ def list_usage_ids(self) -> list[str]:
         """List all registered usage IDs."""
 
         return list(self._usage_to_llm.keys())
-
-    @deprecated(
-        deprecated_in="1.1.0",
-        removed_in="1.3.0",
-        details=LIST_SERVICES_DEPRECATION_DETAILS,
-    )
-    def list_services(self) -> list[str]:  # pragma: no cover - compatibility shim
-        """Deprecated alias for :meth:`list_usage_ids`."""
-
-        return list(self._usage_to_llm.keys())

openhands-sdk/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "openhands-sdk"
-version = "1.2.0"
+version = "1.3.0"
 description = "OpenHands SDK - Core functionality for building AI agents"
 
 requires-python = ">=3.12"