Create a new thread (comment) in an Azure DevOps pull request. Azure DevOps uses 'threads' concept where each thread contains comments.

Create a test org and user for use in tests.

Create an async session maker bound to the async engine.

Mark the device code as authorized.

Get a batch of events given their ids, returning null for any missing event.

Get a batch of shared conversation info, return None for any missing or non-shared.

Shorthand for running a coroutine in the default background thread pool executor and awaiting the result

Check if BYOR key export is permitted for the request's effective org.

Count sandboxed conversations matching the given filters.

Count V1 conversations that reference the given sandbox. Used to decide whether a sandbox can be safely deleted when a conversation i

Count pending messages with ownership validation. Args: conversation_id: The conversation ID to count messages for Retur

Helper to create CustomSecret instances.

Create a mock for httpx.AsyncClient. Args: post_response: Response for POST requests. Can be a dict (JSON body) or a MagicMoc

Create a decorator for a particular type. Introduced because SQLAlchemy could not process lists of enum values.

Create a new Keycloak user in the configured realm. Used by the provisioning endpoint to seed accounts on behalf of an org admin. The

Deactivate the workspace and all user links for a given workspace.

Delete a profile (idempotent). Clears every org member's pointer to it. A missing name resolves 200, matching the ts-client ``AgentProfilesClient

Delete an API key by name for a specific user. Args: user_id: The ID of the user whose key to delete name: The name o

Delete an authorization rule by ID. Args: authorization_id: The ID of the authorization to delete session: Optional d

Delete all pending messages for a conversation, returning count deleted.

Begin the process of deleting a sandbox (which may involve stopping it). Return False if the sandbox did not exist. Purely sandbox-scoped (st

Delete a verified model. Args: model_name: The model name to delete provider: The provider name Returns:

Delete a webhook entry based on project_id or group_id. Args: webhook: GitlabWebhook object containing either project_id or group

Remove the enrollment row for ``(project_key, repo_slug)``. Returns ``True`` when a row was deleted, ``False`` if none existed — unin

Remove a Git organization claim from an OpenHands organization. Only admin and owner roles can disconnect Git organization claims. Args:

Emits a log record. Args: record (logging.LogRecord): The log record to emit.

Raise ValueError when branch_name is not safe to pass to git checkout.

Ensure a local row exists so its id can be used in webhook URLs. This intentionally does not rotate an existing secret. Automatic rei

Extract a stable user identifier from a Bitbucket DC ``actor`` block. DC's stable identifier is the user ``slug`` (lowercase username); ``id``

Generate a random API key with the sk-oh- prefix.

* Get a start task by ID * Poll this endpoint until status is READY to get the app_conversation_id * * @param taskId The task UUID * @retu

Get Jira user by Keycloak user ID and workspace ID.

Get Jira DC user by Keycloak user ID and workspace ID.

Return agent_settings with display-only defaults removed.

Get an authenticated git URL for a repository. Args: repository: Repository name (owner/repo) is_optional: If True, l

Extract max_budget and spend from user team info. For personal orgs (user_id == org_id), uses litellm_budget_table.max_budget. For te

Get device code entry by device code.

Get device code entry by user code.

Get information about the currently authenticated API key. Returns the key's bound org (``bound_org_id``, ``None`` for unbound keys) and the

Get the current organization for a user. Args: user_id: The user's ID (Keycloak user ID) Returns: Org: The o

Return the Git organizations, groups, or workspaces the user belongs to on their active provider. In SAAS mode users sign in with one provide

Get the org flagged as the install's bootstrapped default org.

Get all Git organization claims for an OpenHands organization. Only admin and owner roles can view Git organization claims. Args: or

Load (and refresh if needed) a provider IDP token using only the user_id. This path is independent of the user's Keycloak *offline session*:

Get an instance of UserAuth from the request given

Get an invitation by its token. Args: token: The invitation token Returns: OrgInvitation or None if not foun

Fetch issue details from Jira API (cached after first call). Returns: Tuple of (issue_title, issue_description) Raises:

Whether the install's Jira DC connection is set up, and its host. Lets the settings UI tell a not-yet-linked member "the integration exists,

Return the env-managed service account, or None when not configured.

Get a message asking the user to re-link their Jira DC workspace. Surfaced when the stored OAuth tokens are missing, expired, or fail to refr

Get the current user's membership record for an organization. Returns the authenticated user's role, status, email, and LLM override fields (

Get organization app settings. User ID is obtained from the injected user_context. Returns: OrgAppSettingsResponse: The

Get organization-level marketplaces. Returns: List of marketplace dictionaries from the org's registered_marketplaces.

Get the org member for a user's current organization. Args: user_id: The user's UUID. Returns: The OrgMember

Get a ProviderHandler bound to this user's provider tokens. Not all contexts can build one (e.g. admin-scoped contexts without provid

Get a shared synchronous Redis client, lazily initialized. Thread-safe with double-checked locking pattern. Returns: A Redis client