OpenHands

github/OpenHands

Fork 0

mirror of https://github.com/OpenHands/OpenHands.git synced 2026-10-07 17:08:34 +08:00

Files

T

History

Tim O'Farrellandopenhands 95b6d7a23e fix: persist OH_SECRET_KEY to secret-key.txt in dev mode, same as Docker (#957 )

Dev mode (npm run dev) was always using the hardcoded static default key
'openhands-dev-secret-key-change-in-prod' from config/defaults.json.
Docker mode (docker/entrypoint.sh) generates a random key on first run and
persists it to ~/.openhands/agent-canvas/secret-key.txt.

When both modes share the same ~/.openhands directory, they used different
keys — causing decryption failures for any settings encrypted by the other
mode.

Fix: remove the static default in dev-safe.mjs and instead use
getOrCreatePersistedApiKey() with a new DEFAULT_SECRET_KEY_PATH constant
pointing to the same secret-key.txt file that Docker reads/writes.
Whichever mode runs first generates and persists the key; the other picks
it up automatically on next start.

- Add DEFAULT_SECRET_KEY_PATH export to dev-safe.mjs
- Replace 'env.OH_SECRET_KEY || DEFAULT_SECRET_KEY' with
  'env.OH_SECRET_KEY || getOrCreatePersistedApiKey(secretKeyPath, "secret")'
- Update startup log to show persisted file path (not 'default (for local development)')
- Remove now-unused 'defaults.secretKey' from config/defaults.json
- Update AGENTS.md to reflect the new shared-file behavior

Co-authored-by: openhands <openhands@all-hands.dev>

2026-05-30 06:36:47 -06:00

check-sdk-version-sync.mjs

feat(acp): inline live model picker for ACP conversations (#769 ) (#832 )

2026-05-28 16:42:17 +02:00

check-translation-completeness.cjs

Port OpenHands frontend to direct agent_server integration

2026-04-24 02:46:34 +00:00

dev-extra-backend.mjs

Clean up dev stack process trees on shutdown (#475 )

2026-05-15 10:48:28 -04:00

dev-process-utils.mjs

Remove Docker dependency from dev workflow (#635 )