Get the sandbox grouping strategy from user settings.

Return a process-wide shared GCS client. google.cloud.storage.Client is thread-safe and manages its own urllib3 connection pool. Creating on

Get the default value for use_host_network from environment variables. This function is called at runtime (not at class definition time) to ensur

Build an ``AuthUserContext`` for the sandbox owner.

Get UserSettings by keycloak_user_id (async version). Args: keycloak_user_id: The keycloak user ID to search for

Build the initial user message for V1 resolver conversations. For "issue opened" events (no specific comment body), we can simply con

Check if the host is an All-Hands managed domain.

Return whether Jira DC service-account credentials are env-managed.

Load all skills and update agent with them. Args: agent: The agent to update remote_workspace: AsyncRemoteWorkspace f

Load skill metadata from a directory of markdown files. Args: skills_dir: Path to the skills directory. source: Source label ('gl

Create a mock ProviderHandler.

``SaasUserAuth`` requires a refresh_token; tests don't exercise it, so a dummy SecretStr is sufficient.

Build Settings where the profile and the effective agent settings carry independent keys, so the switch endpoint's api_key fallback can be tested.

Return a context-manager stack that stubs everything _create_v1_conversation touches.

Mask an API key, showing only last 4 characters.

Best-effort auto-enrollment of the OpenHands webhook in Jira. When an admin PAT is supplied, register (or update) the webhook via JiraDcManag

Apply a sparse settings diff to the persisted base and validate it. Agent settings delegate to the SDK's :func:`apply_agent_settings_diff`,

Merge custom MCP configuration from user settings. Args: mcp_servers: Dictionary to add servers to user: User informa

Configure the DB mock to return the given StoredRemoteSandbox rows.

Configure the httpx mock to return the given session_ids from /list.

Parse a GitLab URL to extract the repository path. Expected format: https://{domain}/{group}/{possibly_subgroup}/{repo} Returns the f

Persist ``llm_model`` on the conversation record so the UI chip/header reflects a model switch on the next fetch. Best-effort: a save failure

Apply LLM-specific fixups after merging settings. Delegates the empty-string → cleared and provider-default inference rules to :func:`openhan

Post a summary comment to the configured GitLab issue or MR.

Post the summary back to the Jira DC issue.

Process pending tasks.

Helper method to fetch comments from a given URL with pagination.

Resolve the conversation's runtime and proxy a GET to ``runtime_path``. Browsers can't reach runtime sandboxes directly (no CORS for non-localhos

Resolve the request's effective organization. Honors ``X-Org-Id`` / API-key binding via ``SaasUserAuth.get_effective_org_id`` and fal

Resolve the organization context from the webhook payload. Uses Redis caching for both org claims and user ID mappings. Retu

Resolve an explicit ``org_id`` to an Org, or fall back to the user's current org. Returns ``None`` if neither resolves.

Shared resolver for :meth:`get_effective_org_id` and :meth:`get_target_org_id_for_permission_check`. Precedence (highest first):

Save data to a path

Mirror the user's saved LLM profiles into the sandbox profile store. The agent's built-in ``switch_llm`` tool resolves profiles from the

Resolve a project's repo deterministically: name match, else the sole repo. Returns None when ambiguous (multiple repos, no name match) so we

Send the normalized payload to the automation service. The payload is signed using AUTOMATION_WEBHOOK_SECRET so the automati

Ask an unenrolled mentioner to sign up in a PR reply. The mentioner has no OHE account. The reply is posted as the bot account (via

Split a stored display name into Resend first/last name fields.

Replicates uvicorn's default LOGGING_CONFIG with URL-param redaction.

Post a reaction emoticon on a Bitbucket Data Center PR comment. BBDC comment reactions live in the *comment-likes* plugin, NOT the co

Authentication endpoints for feature branches. # Requirements * This should never be enabled in prod! * Authentication on staging sh

Add rate limit headers to a response

Add an emoji reaction to a Jira DC comment as the service account. Uses Jira Data Center's internal reactions API (the endpoint the web UI

Compatibility function for anext in Python < 3.10

Batch get conversation info with user_id from SAAS metadata.

Get the bucket, initializing lazily on first access.

* Build the full URL for V1 runtime-specific endpoints * @param conversationUrl The conversation URL (e.g., "http://localhost:54928/api/conversatio

Check if the user has admin access to resource (is either an owner or maintainer) Args: resource_type: The type of resou