Build a minimal patch ensuring channel default heartbeat visibility is configured. Gateways may have existing channel config; we only want to fil

Validate/convert paginated query results to a concrete `list[Task]`. SQLModel pagination helpers return `Sequence[object]`; we validate types ear

Clone a pack repository and collect skills from index or `skills/**/SKILL.md`.

Clone a pack repository and return discovered skills plus sync warnings.

Compile and cache validation regex patterns for value checks.

Build a select statement from variadic where criteria.

Delete an organization and dependent rows without committing.

Generate an OpenAPI example from schema metadata with sensible fallbacks.

Extract the bearer token from an `Authorization` header. Returns `None` for missing/empty headers or non-bearer schemes. Note: we do *not* v

Best-effort extraction of an email address from Clerk/JWT-like claims. Clerk payloads vary depending on token type and SDK version. We try common

Best-effort extraction of a display name from Clerk/JWT-like claims.

Extract `(email, name)` from a Clerk user profile. The Clerk SDK surface is not perfectly consistent across environments: - some fields may b

Return existing default skill pack URLs for the organization.

Return a shared async Redis client for *redis_url*, creating one if needed.

Build default installer skill pack rows for a new organization.

Detect cycles in a directed dependency graph.

Ensure targeted-tag operations expose consistent OpenAPI docs and examples.

Check whether *peer_ip* falls within any trusted network.

Return `True` if `task` was auto-created by the lead agent.

Return `True` if the lead agent is mentioned in any comment on the task. This is used to avoid redundant lead pings (especially in auto-created t

Load trusted proxy networks from settings (called once at import).

Normalize summary/description/responses/request-body docs for tagged operations.