Return the profile's LLM or ``None`` if it doesn't exist.

* Log a warning message * @param warning The warning message

* Log an error message * @param error The error message

Create an async session maker bound to the async engine.

Factory function that creates a dependency to require a specific permission. This creates a FastAPI dependency that: 1. Extracts org_id

Get the default local server config shared across the server.

Save ``llm`` under ``name``. Overwrites if the name exists. Always stores a copy so later caller-side mutations do not bleed into the

Apply a batch of changes from a nested dict. ``agent_settings_diff`` and ``conversation_settings_diff`` use nested dict shape (matchi

Save conversation info and create/update SAAS metadata with user_id and org_id.

Parse a raw webhook payload into a normalized JiraWebhookPayload. Args: raw_payload: The raw webhook payload dict from Jira

Helper function to create runtime data for testing.

A Settings instance with an LLM configured so 'snapshot current' works.

Helper to create an AnalyticsContext for tests.

Helper function to create StoredRemoteSandbox for testing.

Get conversation info with user_id from SAAS metadata.

Helper to create a service with mocked constants.

Helper to create a mock request with optional api_key_org_id.

Get user by Keycloak user ID.

Fixture that returns a factory function to create KeycloakUserInfo models. Usage: def test_example(create_keycloak_user_info):

Return the verify option to pass when creating an HTTPX client.

Capture a server-side event. Consent gate: returns immediately when ctx.consented=False. Common properties (app_mode, is_feature_env,

Create a mock UserAuthorizer that returns the specified authorization result.

Create an async session maker for testing.

Resolve the effective organization ID for this request. Delegates to :meth:`_resolve_org_id` with ``verify_membership=True`` and cach

Get an instance of the ApiKeyStore.

Replace localhost hostname in URL with the specified replacement when running in Docker. This function only performs the replacement when the cod

Create a mock service with selected real methods bound for testing. Uses MagicMock for the service but binds the real method for testing. Re

Get environment variables to be injected into agent server sandbox environments. This function combines two sources of environment variables:

Search for conversations with user_id from SAAS metadata.

Build a complete StartConversationRequest for a user. Resolves LLM, MCP, tools, secrets and agent context, then builds the ``Agent``

Configure LLM and MCP (Model Context Protocol) settings. Args: user: User information containing LLM preferences llm_

Get organization by ID.

Get organization-user relationship.

Release long-lived resources owned by this injector. Currently this closes the GCP Cloud SQL connector (which in turn stops its backg

Create a new user authorization rule. Args: email_pattern: SQL LIKE pattern for email matching (e.g., '%@openhands.dev')

Get a single sandbox. Return None if the sandbox was not found.

Get user information from the first available provider

Validate an email address format. This uses a regex pattern that matches most valid email addresses while rejecting addresses with special ch

Make HTTP request to Azure DevOps API.

Run ``create_chunks`` and assert all core invariants. Calls ``create_chunks(text, size, language)`` and checks: 1. At least one chunk is

Apply deployment-specific LLM proxy override when needed. When the model uses the public ``openhands/`` prefix and the stored ``base_url`` is

Get the unique identifier for the current user

Remove a member from an organization. Returns: Tuple of (success, error_message). If success is True, error_message is None.

Verify and decode a JWS token. Args: token: The JWS token to verify key_id: The key ID to use for verification. If No

Return a mock that behaves like `async with httpx.AsyncClient() as client`.

Return a mock httpx.Response with the given JSON payload.

Make a request to the Bitbucket data center API. Args: url: The URL to request params: Optional parameters for the re

Create an async session maker for testing.

Return the module-level AnalyticsService singleton. Returns ``None`` if :func:`init_analytics_service` has not been called yet.