Changed precedence - now cipher takes priority just like static secret

Author: tofarr

openhands-sdk/openhands/sdk/agent/base.py

@@ -291,9 +291,6 @@ def _serialize_with_mcp_handling(self, handler, info: SerializationInfo):
         if not self.mcp_config:  # Only process non-empty configs
             result.pop("mcp_config", None)
             return result
-        elif info.context and info.context.get("expose_secrets"):
-            # Keep mcp_config as-is (already in result from handler)
-            return result
         elif info.context and info.context.get("cipher"):
             # Encrypt and add encrypted_mcp_config
             cipher: Cipher = info.context["cipher"]
@@ -304,6 +301,9 @@ def _serialize_with_mcp_handling(self, handler, info: SerializationInfo):
             # Remove plaintext mcp_config
             result.pop("mcp_config", None)
             return result
+        elif info.context and info.context.get("expose_secrets"):
+            # Keep mcp_config as-is (already in result from handler)
+            return result
         else:
             # Default: redact by omitting
             result.pop("mcp_config", None)