Validate that organization name is unique. Args: name: Organization name to validate Raises: OrgNam

Determine whether a token is for GitHub, GitLab, Bitbucket, Bitbucket Data Center, or Azure DevOps by attempting to get user info from the services.

Apply filters to query that includes SAAS metadata.

Strip tzinfo so a value can be written to a `TIMESTAMP WITHOUT TIME ZONE` column. Naive values are passed through unchanged; values already in UTC

Build a StartConversationRequest for ACP agent conversations. User secrets (Secrets panel + git provider tokens) flow through ``reque

Build the minimal event payload to forward to the automation service. Access control is NOT included here - it's deferred to executi

Repo identity for the Laminar trace so trajectories are searchable by repo / branch / commit (the trace UI has no DB to join against).

Version of the installed openhands-agent-server package. openhands-agent-server is a hard runtime dependency of the V1 app server; if it's no

Clean up a cloned repository directory.

Unwrap SecretStr to plain values.

Use the installer's Bitbucket token to check whether the commenter has ``write``/``admin`` permission on the PR's repository. Calling

Reduce a response's Set-Cookie headers to what a browser would keep.

Create a V1 callback processor for Jira integration.

Helper to create SAAS metadata for a conversation.

Create a task that won't be garbage-collected before completion.

Create a dedicated directory for the sandbox.

Delete conversation from agent server if sandbox is running.

Delete conversation from database. Args: app_conversation_info: The app conversation info to delete (already fetched).

Extract the bare model names from the ``openhands/…`` model list.

Convert Docker container status to SandboxStatus.

Dump settings to a JSON-compatible dict with secrets exposed.

Mirror of Cloud's ``_ensure_admin_access``. The DC ``user_has_admin_access`` implementation fails open on introspection errors (see its docst

Extract common fields and validate required data is present.

Extract redirect URL, reCAPTCHA token, and invitation token from OAuth state. Returns: Tuple of (redirect_url, recaptcha_token, invitatio

Extract owner and repo from repository string. Args: repository: Repository name in format 'workspace/repo_slug' Returns

Extract repository metadata from GraphQL response

Return Jira URLs whose hosts identify the configured workspace.

Return the service account's Jira (name, key) from /myself.

Retrieve the Azure DevOps authentication headers. Supports two authentication methods: 1. OAuth 2.0 (Bearer token) - Used for SSO/Saa

Resolve the effective org id for the active user context. Returns the request's effective org id (X-Org-Id > api_key_org_id > user.cu

Get or fetch external_auth_id from Keycloak token if not already set.

Retrieve the GH Token from settings store to construct the headers.

Retrieve the GitLab Token to construct the headers

Return a web-client-safe service-account config error, if any.

Return the env-managed service-account email when fully configured.

Fetch the raw ``ModelsResponse`` from all configured sources. The result is cached on the service instance so that multiple calls (e.

Fetch the org (raising 404 if missing) and the acting member's row. The member is read in its own short-lived session — matches the org read,

Get the shared async Redis client from enterprise storage.

Return common kwargs for Redis client creation.

Resolve the org ID for V1 conversations.