Encrypt a token using the service's encryption key.

Ensure the workspace schema exists, creating it if needed.

Format a limit value for display.

Paginate an in-memory collection with cursor validation.

Ensure OAuth endpoints use HTTPS before persistence or use.

Return all `udf` (action) type nodes.

Assert that the actual execution context is equal to the expected execution context.

Return a copy of this collection handle pointing to a specific index. This creates a new handle that refers to a single item in the collectio

Convert a base62 string back to an integer. Args: encoded: Base62 encoded string Returns: Decoded integer value Raises:

Convenience function to check entitlement in a single call. Args: session: Database session role: The current role (must have org

Compute all configured durations for a case using its events.

Create a group for the organization.

Create a new registry repository.

Create a new workflow definition. Args: workflow_id: The ID of the workflow this definition belongs to. dsl: The DSL

Extract all templates from a templated object.

Formats a dictionary into a Server-Sent Event string.

Build RFGraph from Actions (single source of truth). This method constructs the React Flow graph from Action records, making Actions

Inner workflow ID for a run, using the workflow ID and run ID.

Get approval by session ID and tool call ID.

Retrieve an organization-wide secret by its name.

Get a task by ID. Args: task_id: The ID of the task to get Returns: The task Raises: Tr

Retrieve a workspace by ID.

Create a new row in a table.

Context manager that sets up the registry secrets context. This is needed because the registry secrets module reads from its own context vari

Make an authenticated HTTP request to the API. Args: method: HTTP method (GET, POST, PUT, DELETE, etc.) path: API pat

Run a coroutine in the current thread.

Run a session turn by spawning a DurableAgentWorkflow. This method prepares the chat turn and spawns a DurableAgentWorkflow on the ag

Set RLS context from a Role object or the current ctx_role. If role is None, reads from ctx_role context variable. If neither is available, s

Update a task. Args: task_id: The ID of the task to update params: The task update parameters Returns:

Normalize list/search case UDF outputs to case items.

Upsert an organization tier configuration with deterministic e2e limits.

Get headers for Chronicle SOAR API requests.

Create a test manifest with given action names.

Parse a JSON-encoded argument.

Role to bootstrap Tracecat services. Args: organization_id: Optional organization ID to scope the bootstrap role to. If None,

Map truncated tool names back to the original tool names.

Create a unique index on specified columns.

Create a CaseFieldReadMinimal from a SQLAlchemy reflected column. Args: column: The reflected column metadata from SQLAlchemy.

Get a folder by its path. Args: path: The path of the folder Returns: The folder or None if not found

List organization settings with optional filters. Args: keys: Filter settings by a set of specific keys value_type: F

List all tags attached to a specific case.

Test helper: execute action using production code path.

Search cases with cursor-based pagination, filtering, and sorting.

Send a structured log event to the orchestrator. This forwards logs from inside the sandbox to the worker's logger, providing visibil

Set the current registry context. Args: ctx: The context to set.

Cleanup backend resources. Called at worker shutdown. Override to release resources like terminating worker processes or closing conn

Store a collection as chunked manifest in blob storage. Splits items into chunks, uploads each chunk, then uploads a manifest referencing all

Convert a value to a JSONable Python object. Drop nulls and use fallback for unknown values.

Validate a file.

Validate an external identifier before using it in DDL operations.

Assert that RLS context is applied via one execute call with expected params.

Emit audit events for organization domain operations.

Get access token from Tracecat's OAuth system.

Build a minimal ExecutionContext for testing.

Make authenticated request to Panther API.

Generate workspace-specific schema name.

Return all edges that are not connected to the trigger node.

Recursively aggregate secrets from an action and its template steps. This method traverses template actions in the manifest to collect all

Get the SDK client for this context.

Collect secrets and variables from expressions.

Compute SHA-256 hash of content. Args: content: Bytes to hash Returns: Hex-encoded SHA-256 hash

Resolve the recommended login flow from an email address.

Read a DSL definition from a YAML file.

Get a single item from a collection by index. Args: collection: CollectionObject handle. index: Item index (0-indexed, supports n

Get a registry by ID.