Typed client: Model provider methods + nested-model types (#15492)

[juanmichelini]

Typed client: Model providers (provider-first)

Adds typed @openhands/typescript-client methods and types for the Model providers endpoints, aligned to the reworked provider-centric backend (OpenHands/software-agent-sdk#4455). A provider holds one key (named secret) and a nested list of models. Tracks OpenHands/OpenHands#15492.

The frontend PR (OpenHands/OpenHands#16499) uses raw fetch and does not block on this PR; this typed client is for consumers that want the typed surface.

What this adds

• Client methods on LLMMetadataClient, all under /api/llm/model-providers:
  • listProviders / createProvider / getProvider / updateProvider / deleteProvider
  • addProviderModel / updateProviderModel / removeProviderModel (nested model CRUD)
  • testProvider (optional key probe; returns suggested_models and never mutates the curated model list)
• Types mirroring the backend contract: ModelProvider, ProviderModel { name, wire_api? }, WireApi, CreateProviderRequest, UpdateProviderRequest, ProviderModelPayload, TestProviderResponse. The provider view is masked — api_key_set only, no raw key and no secret_name.

Changed vs. the previous iteration

• Replaced the ProviderConnection + validateConnection + createProfileFromConnection surface with provider CRUD + nested model CRUD.
• testProvider replaces validateConnection; it offers an optional catalog suggestion and never implies the model list was overwritten.
• Replaced connections-client.test.ts with providers-client.test.ts.

Testing

• providers-client.test.ts (12 tests): each endpoint hits the right method/path/body, responses unpack correctly, id/model-name path encoding, and typed HttpError on non-2xx.
• Full suite green (315 tests); tsc --noEmit and eslint clean.

Related PRs

• Frontend: Frontend: Model providers — provider cards with nested, editable models (#15492) OpenHands#16499
• Backend: Backend: Model providers — provider store + nested models + named-secret key (#15492) software-agent-sdk#4455
• Docs: Docs: Model providers page + cross-links (preview, local-only) (#15492) docs#717

---

This PR was created by an AI agent (OpenHands) on behalf of the user.

[github-actions]

Endpoint audit

⚠️ 14 actionable Agent Server contract divergence(s) · report-only

Contract: pinned release artifact

Category	Count
Actionable client-only calls	7
Actionable server-only operations	7
Documented non-divergences	13
Agent Server contract operations	117
Audited handwritten client endpoints	126

Actionable client-only calls (7)

• DELETE /api/llm/model-providers/{}
• GET /api/llm/model-providers
• GET /api/llm/model-providers/{}
• PATCH /api/llm/model-providers/{}
• POST /api/llm/model-providers
• POST /api/llm/model-providers/{}/models
• POST /api/llm/model-providers/{}/test

Actionable server-only operations (7)

• GET /api/conversations/{}/events
• GET /api/file/archive
• GET /api/git/commits
• GET /api/git/commits/{}/changes
• GET /api/init
• POST /api/conversations/{}/load_plugin
• POST /api/init

Documented non-divergences (13)

Client calls intentionally absent from the filtered contract (11)

• GET /
• GET /alive
• GET /health
• GET /ready
• GET /server_info

Reason: Operational Agent Server endpoints intentionally excluded from the filtered public release artifact.
Owner: OpenHands runtime maintainers

• DELETE /api/meta-profiles/{}
• GET /api/meta-profiles
• GET /api/meta-profiles/{}
• POST /api/meta-profiles/{}
• POST /api/meta-profiles/{}/activate

Reason: Client-ahead API stacked on the pending Agent Server meta-profiles implementation.
Owner: OpenHands SDK maintainers
Tracking: OpenHands/software-agent-sdk#3744

• POST /api/profiles/{}/validate

Reason: Client-ahead API stacked on the pending Agent Server pre-flight LLM validation endpoint.
Owner: OpenHands TypeScript client maintainers
Tracking: OpenHands/software-agent-sdk#4422

Server operations covered by an exposed browser URL (2)

• GET /api/conversations/{}/workspace
• GET /api/conversations/{}/workspace/{}

Reason: RemoteWorkspace.startWorkspaceSession exposes these authenticated URLs for browser iframe and file requests; they are not HttpClient method calls.
Owner: OpenHands TypeScript client maintainers