fix: sync acp-providers.json with openhands-sdk

[neubig]

Why

The validate-acp-providers CI check has been failing on main because src/models/acp-providers.json drifted from the Python source of truth in openhands-sdk. This was blocking dependabot PRs (#325, #324) that are otherwise green.

Summary

• Updated src/models/acp-providers.json to match the current ACP_PROVIDERS in openhands-sdk main, including version bumps and model label changes.

How to Test

pip install "openhands-sdk @ git+https://github.com/OpenHands/software-agent-sdk@main#subdirectory=openhands-sdk"
python scripts/check-acp-drift.py

Should print OK: src/models/acp-providers.json matches openhands-sdk (3 providers).

Type

• Bug fix
• Feature
• Refactor
• Breaking change
• Docs / chore

This PR was created by an AI agent (OpenHands) on behalf of the user.

[github-actions]

Endpoint audit

⚠️ 7 actionable Agent Server contract divergence(s) · report-only

Contract: pinned release artifact

Category	Count
Actionable client-only calls	0
Actionable server-only operations	7
Documented non-divergences	13
Agent Server contract operations	117
Audited handwritten client endpoints	119

Actionable client-only calls (0)

none

Actionable server-only operations (7)

• GET /api/conversations/{}/events
• GET /api/file/archive
• GET /api/git/commits
• GET /api/git/commits/{}/changes
• GET /api/init
• POST /api/conversations/{}/load_plugin
• POST /api/init

Documented non-divergences (13)

Client calls intentionally absent from the filtered contract (11)

• GET /
• GET /alive
• GET /health
• GET /ready
• GET /server_info

Reason: Operational Agent Server endpoints intentionally excluded from the filtered public release artifact.
Owner: OpenHands runtime maintainers

• DELETE /api/meta-profiles/{}
• GET /api/meta-profiles
• GET /api/meta-profiles/{}
• POST /api/meta-profiles/{}
• POST /api/meta-profiles/{}/activate

Reason: Client-ahead API stacked on the pending Agent Server meta-profiles implementation.
Owner: OpenHands SDK maintainers
Tracking: OpenHands/software-agent-sdk#3744

• POST /api/profiles/{}/validate

Reason: Client-ahead API stacked on the pending Agent Server pre-flight LLM validation endpoint.
Owner: OpenHands TypeScript client maintainers
Tracking: OpenHands/software-agent-sdk#4422

Server operations covered by an exposed browser URL (2)

• GET /api/conversations/{}/workspace
• GET /api/conversations/{}/workspace/{}

Reason: RemoteWorkspace.startWorkspaceSession exposes these authenticated URLs for browser iframe and file requests; they are not HttpClient method calls.
Owner: OpenHands TypeScript client maintainers

[neubig]

Closing — the acp-providers.json on main is already correct. The drift was caused by a stale local SDK install. Rebasing #325 and #324 should resolve their validate-acp-providers failures.