Create a new workflow folder. Args: name: The name of the folder parent_path: Path of the parent folder, defaults to

Store or update provider configuration (client credentials) for a workspace.

Logical AND operation.

Create a new table.

Check if a granted scope (potentially with wildcards) matches a required scope. Uses fnmatch-style matching with only * as the wildcard character

Unwrap StoredObject action result from workflow context.

Update a case and optionally its custom fields. Args: case: The case object to update params: Optional case update pa

Yield items from an iterable in a cooperative manner. This is useful for yielding back to the event loop to avoid Temporal deadlock. Args:

Execute a Python script in a sandbox. This is the main entry point for script execution. It automatically selects the appropriate exe

Decorator factory to register a new UDF (User-Defined Function) with additional parameters. This method creates a decorator that can be used to r

Create a workspace secret.

Factory for creating mock ResolvedContext objects for testing. In test mode (TRACECAT__POOL_WORKER_TEST_MODE=true), workers return mock succe

Factory for creating RunActionInput objects for testing.

Generate the schema name for a workspace.

Get a user's integration for a specific provider.

Get a workspace secret by name. Args: secret_name: The name of the secret to retrieve environment: Optional environme

Normalize an Anthropic Messages API request.

Parse a Git repository URL to extract components. Handles Git SSH URLs with 'git+ssh' prefix and optional '@' for branch specification. Suppo

Make an HTTP request and handle errors.

Perform a HTTP request to a given URL.

Import workflows atomically - either all succeed or all fail. Existing workflows will be overwritten with new definitions. Args:

Convert to timezone-aware datetime object from timestamp (in seconds), ISO 8601 string or existing datetime.

Create a new activity record for a case with variant-specific data. Note: This method is non-committing. The caller is responsible for

Populate templated fields with actual values.

Shorthand to get a setting value from the database.

Register a template action.

Convert a Claude SDK StreamEvent to UnifiedStreamEvent.

Create a new task for a case. Args: case_id: The ID of the case to create a task for params: The task parameters

* Check if a value contains a template expression pattern

Resolve value: org override takes precedence, then tier default.

Create a stream ID for a skipped scatter. Args: scope: The scope name for the stream. base_stream_id: The base stream

Normalize a stored identifier to its physical SQL name.

Encode a cursor from timestamp and ID, optionally with sort column info. Args: id: The row ID (used as tie-breaker for stable pagi

Get a context manager for an async session with explicit RLS bypass. Use this for system operations that need unrestricted database access.

Get an agent session by ID. Only returns actual AgentSession records. Use get_legacy_chat() for legacy Chat records. Args:

Check if a user has a required scope. Args: user_scopes: The set of scopes granted to the user required_scope: The scope required

Close the Redis connection.

Create a new registry action. Args: params (RegistryActionCreate): Parameters for creating the action. Returns:

Get the global Redis client instance.

Logical OR operation.

Create an invitation to join the organization. Args: email: Email address of the invitee. role_id: RBAC role to assig

Get the configured object storage backend. Returns InlineObjectStorage by default (no externalization). Returns S3ObjectStorage when TRACECAT

Get a lookup table by ID.

Get a Redis client bound to the current event loop.

Validate path is safe for protobuf config interpolation. Args: path: Path to validate. name: Human-readable name for error messag

Helper to collect all SSE frames from a sequence of events.

Decrypt and return the keys for a secret.

Initialize the registry.

List the event history of a workflow execution.

Set RLS context variables in the PostgreSQL session. Uses transaction-local settings (`set_config(..., true)`) to scope values to the current

Main dependency that orchestrates authentication and authorization. Delegates to the appropriate auth handler based on credentials and allowed

Create a new workspace invitation. Args: workspace_id: The workspace to invite the user to. params: The invitation pa

Format latency metrics consistently.

Run the scheduler and return any exceptions that occurred.

Add a tag to a case by ID or ref. Args: case_id: The case UUID. tag_identifier: The tag ID (UUID), ref, or name.

Build a safe lambda function from a string expression.

Format a datetime string for display.

Get user-visible columns for a table.

Resolve registry lock with action-level bindings. For each action in the workflow, determines which registry origin contains it and b

Helper to set ctx_role with the given scopes.