Translate the env-derived default model to the public prefix. ``LITELLM_DEFAULT_MODEL`` holds the default as ``litellm_proxy/<name>``; the ap

Determine the organization repository path and organization name. Args: selected_repository: Repository name (e.g., 'owner/repo' or 'org/

Dump a settings update payload using diff-only nested keys.

Find a running sandbox for the current user based on the grouping strategy. Returns: SandboxInfo if a running sandbox is found, N

Sqlite does not store timezones - and since we can't update the existing models we assume UTC if the timezone is missing. Returns current UTC

Get agent server url for running sandbox.

Get or create the user's OPENHANDS_API_KEY (system-level, non-deletable). This key is automatically generated on first access and stored as a

Extract org info from the user context if available. This works by checking if the underlying user_auth is a SaasUserAuth instance that has t

Get authenticated Git URL for organization repository. Args: org_openhands_repo: Organization repository path user_context: UserC

Determine the Git provider type for a repository. Args: selected_repository: Repository name (e.g., 'owner/repo') user_context: U

Return whether Slack integration is fully configured for the web client.

Normalize a GitHub ISO-8601 timestamp to a naive UTC datetime. GitHub sends timestamps like ``"2025-06-19T21:19:36Z"``. Parsing the trailing

Handle failure by cleaning up LiteLLM resources and raising appropriate error. This method performs compensating transaction and rai

Check if user has custom LLM settings that should be preserved. Returns True if user customized either model or base_url. Args:

Return whether GitLab OAuth is configured for the web client.

Build a real ``ConversationInfo`` with a real ``ACPAgent`` payload.

Create a mock AppConversation for testing.

Create a mock httpx.AsyncClient for testing.

Whether sign-in alone already makes users members of this org.

Yield ``(session, org, profiles)`` for a single locked mutation. Wraps read → mutate → write in one session with ``SELECT ... FOR UPDATE`` so

Parse a Bitbucket data center API repository response into a Repository object. Args: repo: Repository data from Bitbucket data c

Parse a GitHub API repository response into a Repository object. Args: repo: Repository data from GitHub API link_hea

Build the Bitbucket DC service used to POST comments/reactions. Always posts as the configured bot account -- mirroring the GitHub Ap

Query Keycloak for users matching a wildcard email pattern. Tries multiple query methods to find users with emails matching the patte

Path to archive: the value pinned at conversation creation if present, else rebuilt from the SAME base the clone used (the sandbox spec's

Return the effective org id for this request, or the user's current org id as a fallback. The caller still needs to verify that the us

Retrieve stored user message from Redis. Args: message_ts: The message timestamp thread_ts: The thread timestamp (if

Return the Message the route scheduled for manager.receive_message. The route returns 200 fast and backgrounds the manager, so the dispatch is

Navigate into settings.agent_settings and unwrap SecretStr values.

Pick the user matching ``username`` from a /users?filter= response. The filter parameter is a substring match, so the first result is not

Send error comment to Jira DC issue.

Send a comment with repository options for the user to choose.

Mock session whose initial (user, workspace) SELECT yields `existing`.

Set security analyzer on conversation using only the analyzer string. Args: agent_server_url: URL of the agent server

Convert stored metadata to AppConversationInfo with user_id from SAAS metadata.

Update a user's budget in a team. Args: client: The HTTP client to use. keycloak_user_id: The user's Keycloak ID.

Update all keys belonging to a user with the given parameters. Args: client: The HTTP client to use for the request k

Resolve each mentioned repo with a targeted lookup. Avoids enumerating the user's full repo list, which is capped and misses repos on

Activate a profile for the calling member — pointer only. Writes the per-member ``OrgMember.active_agent_profile_id`` and nothing else (no ``

Activate a profile for the current user. Two side effects: updates the org-wide ``profiles.active`` marker and writes the profile's LLM into

Add a comment to an Azure DevOps work item. API Reference: https://learn.microsoft.com/en-us/rest/api/azure/devops/wit/comments/add-comment

Create an async session maker for testing.

Authorize a device code. Args: user_code: The user code to authorize user_id: The user ID from Keycloak Retu

Get a batch of start tasks, return None for any missing.

Given a conversation_id and list of event_ids, get events if the conversation is shared.

Bitbucket DC service that posts as the configured bot account. Raises if the bot token is unset -- callers gate on it first, so this is a def

Build the absolute acceptance URL for an invitation token. WEB_HOST may be configured as a bare hostname (the OHE chart sets it that

Build sandbox config for agent-server API request. Args: sandbox: SandboxInfo containing exposed URLs Returns: sandbox_confi

Turn BYOK on and pin the SDK catalogue the union pulls from.

Return ``(True, id)`` when a webhook with ``webhook_url`` already exists on the repo (used to make enroll/reinstall idempotent), else

Check if a webhook already exists for resource with a specific URL. Args: resource_type: The type of resource

Claim a Git organization for an OpenHands organization. Only admin and owner roles can claim Git organizations. A Git organization can only b

Create a new Jira workspace with encrypted sensitive data.

Register a user mapping to a Jira workspace.

Decode an opaque page identifier back to an integer. This function exists to support the internal decoding of page IDs. External consumers sh

Delete ``key`` and every sibling chunk.

Delete a Git organization claim. Args: claim_id: Claim UUID to delete org_id: OpenHands organization UUID (for owners

Delete a system API key created by the service. This endpoint allows the automations service to clean up API keys it previously created

Deny a device code authorization. Args: user_code: The user code to deny Returns: True if denial was success

FastAPI ``Depends(...)`` factory for the request-scoped ``AsyncSession``. Returns a stable ``Depends`` object that defers the ``get_global_config

Disable a Keycloak user account. Args: user_id: The Keycloak user ID to disable email: Optional email address for log

Execute any applicable callbacks for the event and store the results.

Mock implementation of find_customer_id_by_user_id

Format parameters as a readable text block for display. Args: indent: Optional prefix to add before each parameter line.