Get a single event callback, returning None if not found.

Fetch and cache issue title and description from Jira API. Returns: Tuple of (issue_title, issue_description)

Get a single shared conversation info, returning None if missing or not shared.

Get the user's role in an organization. Args: user_id: User ID (string that will be converted to UUID) org_id: Organization

Install webhook on a GitLab resource. Args: gitlab_service: GitLab service instance resource_type: Type of resource (PROJECT

Load skills from all sources via the agent-server. This method calls the agent-server's /api/skills endpoint to load and merge skills

Queue a message for delivery when conversation becomes ready. This endpoint allows users to submit messages even when the conversation's WebS

Store the sandboxed conversation info object given. Return the stored info

Store auth tokens in the database. Args: access_token: The access token to store refresh_token: The refresh token to

Return a ``{name, model, base_url, api_key_set}`` dict per profile. ``api_key_set`` mirrors the ``llm_api_key_set`` convention the main

Verify Jira webhook signature. Args: body: Raw request body bytes signature: Signature from x-hub-signature header (format:

Check if requester can remove target based on roles.

Helper to create a mock request with optional api_key_org_id and email.

Derive a SandboxStatus from the runtime info. The status field is now the source of truth for sandbox status. It accounts for both po

Get financial data for all members in a team. Fetches team info from LiteLLM and extracts spending/budget data for each member.

Handle the creation or reactivation of a workspace link for a user.

Hash a session API key using SHA-256.

Return True if *event* should be included in public shared responses.

Load hooks from .openhands/hooks.json in the remote workspace. This enables project-level hooks to be automatically loaded when starting

Load persisted agent settings via the SDK loader. Routes the raw payload through :func:`validate_agent_settings`, which applies registered sc

Create a mock FastAPI Request with given JSON body.

Build a service rooted at a known base_domain so URL assertions are stable.

Create a patch context that makes _get_user_provider return the given provider.

Truncate comment to max length.

Accept pending invitations matching the user's email at sign-in. SSO-native acceptance: the IdP verified the address an invitation was

Queue a message with ownership validation. Args: conversation_id: The conversation ID to queue the message for conten

Archive one conversation's workspace; return whether delete may proceed. Default no-op (returns True) for backends that do not archive; overr

Swap auto-load marketplace sources for authenticated git URLs. The agent-server clones ``auto_load`` marketplace registrations itself but has

Create a JiraV1CallbackProcessor for testing.

Build a view from a Bitbucket DC webhook payload. ``keycloak_user_id`` is the OpenHands user the resolver runs the job as — the @-men

Create a new Git organization claim. Args: org_id: OpenHands organization UUID provider: Git provider ('github', 'git

Create a mock for httpx.AsyncClient. Args: post_response: Response for POST requests. Can be a dict (JSON body) or a MagicMoc

Detect if conversation should have AUTOMATION trigger based on tags. Only sets AUTOMATION trigger if: - Current trigger is None (don't overri

Get the current authenticated user with SAAS-specific org info. Returns user settings along with organization context: - org_id: Current orga

Return env-managed Jira DC service-account config and validation state.

Get the LLM API key for BYOR (Bring Your Own Runtime). This endpoint validates that the key exists in LiteLLM before returning it. If validat

Generate the key alias for OpenHands Cloud managed keys.

Get the API base URL for a model using litellm. This function tries multiple approaches to determine the API base URL: 1. First tries litellm

Get the org-scoped permissions for a role. Args: role_name: Name of the role Returns: Set of permissions for the org-sc

Resolve the target organization for a permission check **without** requiring the authenticated user to be a member. Delegates to :met

Get user info from Keycloak userinfo endpoint. Args: access_token: A valid Keycloak access token Returns: Ke

Get the user's cross-organization ("super") role. Super roles live on the ``user`` table (``user.role_id``) and apply to the user across

Handle Jira DC webhook events for a specific workspace connection.

List agent profiles and the effective active pointer for this member. No implicit writes: an org with no profiles yet just returns an empty l

Load all skills from the agent-server. This function makes a single API call to the agent-server's /api/skills endpoint to load and merge ski

Load authentication tokens from the database and refresh them if necessary. This method uses a double-checked locking pattern to minimize loc

Check if an email matches a base email pattern. An email matches if: - It is exactly the base email (e.g., joe@example.com) - It has the

Reassemble a possibly-chunked cookie value, or ``None`` if absent. Concatenates ``key``, ``key_1``, ``key_2`` ... in order, stopping at the f

Reinstall GitLab webhook for a specific resource immediately. This endpoint validates permissions, resets webhook status in the database, and

Post a comment back to a pull request. When ``parent_comment_id`` is given, the comment becomes a threaded reply to that parent. When

Return the profile's LLM or raise :class:`ProfileNotFoundError`.

Authorization dependency for accessing organization financial data. Allows access if ANY of these conditions are met: 1. User has Admin

Mitigate the dreaded "coroutine was created in a different event loop" error. Pass the coroutine to a different event loop if needed.

Search for conversation start tasks.

Search for branches within a repository using the appropriate provider service.

Search / List events for a shared conversation. Because non-viewable events (e.g. ``ConversationStateUpdateEvent``) are filtered out after fe

Search for verified models with optional filtering and pagination. Args: provider: Optional provider name to filter by (e.g., 'op

Set person properties in PostHog (SaaS-only). No-op in OSS mode or when ctx.consented=False.

Update a member's role in an organization. Permission rules: - Admins can change roles of regular members to Admin or Member - Admins can

Unconditionally update User.email and/or email_verified. Unlike backfill_user_email(), this overwrites existing values. No-op when bo