Forward a Git provider webhook event to the automation service. This is designed to be called as a fire-and-forget background task.

Create a MeResponse from an OrgMember, Role, and user email.

Factory method to create a ProviderToken from various input types

Generate a new BYOR key for a user in a specific org.

Generate a secure invitation token. Uses cryptographically secure random generation for tokens. Pattern from api_key_store.py.

* Get the settings from the server or use the default settings if not found

Get the org_id bound to the API key used for authentication. Returns None if: - Not authenticated via API key (cookie auth), or - The API

Get a single sandboxed conversation info. Return None if missing.

Get an authenticated git URL for a repository. Args: repo_name: Repository name (owner/repo) is_optional: If True, lo

Get the current authenticated user's metadata from the git provider.

Get current user's Jira integration details.

Given an id, retrieve an event.

Get all GitLab projects and groups where the user has admin access. Returns a list of resources with their webhook installation status.

Get installations for the service; repos live underneath these installations

Get the current user's membership record for an organization. Retrieves the authenticated user's role, status, email, and LLM override

Return the user's active link for this workspace, reactivating a prior inactive link or creating one if none exists. Used by email-ma

Dependency that authorizes a user to create an organization. Behavior is gated by the ``OPEN_ORG_CREATION_ENABLED`` feature switch: - W

Get count of organization members with optional email filter. This endpoint returns the total count of organization members matching the filt

Get total count of organization members, optionally filtered by email. Args: org_id: Organization UUID. email_filter:

Human-readable LiteLLM team_alias for an org's team. Personal orgs (org_id == user_id) get "Personal Workspace"; team orgs use their display

Get pending messages with ownership validation. Args: conversation_id: The conversation ID to get messages for Returns:

Return a single secret value as plain text. Called by ``LookupSecret`` inside the sandbox. Checks custom secrets first, then falls back to pr

Get the user's secrets

Get the user settings for the current user. The default is the PERSISTED settings view (memoized in ``_settings``) — what settings ro

Get a webhook by resource without filtering by user_id. This allows any admin user in the organization to manage webhooks, not just t

Associate a group with properties (SaaS-only). No-op in OSS mode or when ctx.consented=False.

Handle a SlackError by logging and sending user message. This is the centralized error handler for all SlackErrors, used by both the

Raises RateLimitException when limit is hit. Logs and swallows exceptions and logs if lookup fails.

* Load and initialize the Reo.dev tracking script from CDN

Initialize the Tavily MCP proxy if API key is configured. This mounts a proxy to Tavily's MCP server under the 'tavily' namespace, allowing s

Whether transactional email delivery is configured. Mirrors the checks in _get_resend_client without logging, so callers can surface

List user-visible API keys for a user. Returns keys that are either bound to ``org_id`` **or** unbound (``org_id IS NULL`` -- visible

List all users that currently hold the instance-level super-admin role. A super admin is a user whose ``user.role_id`` references the

Load session init data. By default returns the PERSISTED (user-authored) settings — the view every load() -> store() round-trip must

Create a mock FastAPI Request with a state object and headers dict.

Mark the user's onboarding as completed. Args: user_id: The user's ID (Keycloak user ID) Returns: User: The

Mark this metrics record as having failed upload. Args: error_message: Description of the upload failure

Merge conversation tags with incoming tags overriding existing ones. Args: existing_tags: Tags from the existing conversation (may be Non

Mock session maker.

Prepare a streaming conversation trajectory export. Implementations may override this to acquire locks or stream zip data. The defaul

Persist organization and optional owner membership in a single transaction. Args: org: Organization entity to persist

Reset webhook for reinstallation without filtering by user_id. This allows any admin user to reset webhooks, and updates the user_id

Revoke a pending invitation, invalidating its token/link. Returns None when the invitation doesn't exist or belongs to a different or

Send an organization invitation email. Args: to_email: Recipient's email address org_name: Name of the organization

Send a welcome email to a new contact. Args: email: The email address of the contact. first_name: The first name of the contact.

Configure logger instance to output json for Google Cloud. Existing filters should stay in place for sensitive content.

Store secrets.

Store repositories in database (async version) 1. Make sure to store repositories if its ID doesn't exist 2. If repository I

Switch user's current organization to the specified organization. This method: 1. Validates that the organization exists

Capture a frontend-initiated analytics event. ``body.event_type`` selects the PostHog event name; the remaining fields on the validated model

Track 'user logged in' event. Fired when an existing user authenticates.

Unlink user from Jira integration by setting status to inactive.

Update Jira user integration status.

Return the public field names explicitly present on the update.

Validate session key and verify it belongs to a sandbox owned by the caller. This combines session key validation with ownership verification, en

Validate if the workspace has an active Jira DC integration.

Verify that the user is the owner of the organization. Args: user_id: User ID to check org_id: Organization

Attempt to acquire a distributed lock for user creation. Returns True if the lock was acquired or if Redis is unavailable (fallback to no loc

Acknowledge the @openhands mention with a best-effort reaction. Reactions are non-essential, so failures are logged, never raised.

Yield ``(session, org, agent_profiles)`` for a single locked mutation. Mirrors ``org_profiles._org_profiles_transaction``: ``SELECT ... FOR UPDAT

Apply server-only fields that have no place in ``AgentSettings``. * System-prompt filename / kwargs (planning vs default agent). * LL

Apply suggested task defaults to the start request.

Send a message to the agent server via the V1 API and return response text.

Compute the PLAN.md path based on provider type. Args: working_dir: The workspace working directory git_provider: The

Create a condenser based on user settings and agent type. Args: llm: The LLM instance to use for condensation agent_t

Convert security analyzer string from settings to SecurityAnalyzerBase instance. Args: security_analyzer_str: String value from s