Get a workspace membership with organization ID.

Get an existing repository or create a new one.

Get TRACECAT__SIGNING_SECRET. Raises ValueError if not set.

Get a tag by its ref.

Get a tag by either ref or ID.

Deserialize settings while tolerating encrypted decrypt failures. If an encrypted setting cannot be decrypted, return `None` for that key

Get a preset version by ID.

Check if a user has any of the required scopes. Args: user_scopes: The set of scopes granted to the user required_scopes: The sco

Return whether the session has pending approval decisions.

Create a new table by inferring schema and rows from a CSV file.

Generator that yields valid file paths based on extension and exclusion rules. Args: base_path: The base directory to search in f

List all integrations for a workspace, optionally filtered by providers.

Retrieve session messages, optionally filtered by message kind. For forked sessions, includes parent session messages first. Checks t

List rows with cursor-based pagination ordered by row ID.

List all schedules for a workflow. Parameters ---------- workflow_id : WorkflowID | None, optional The I

List all workspace secrets.

Load and return all UDFs in the class.

Move a workflow to a different folder. Args: workflow_id: ID of the workflow to move folder_id: ID of the destination

Coerce an ID into an instance of TracecatUUID. Handles legacy ids.

Normalize all action node IDs to canonical UUID string format. This handles backward compatibility with different action ID formats t

Recursively normalize error messages and URLs for comparison. This prevents test flakiness when source code line numbers change, newline form

Populate RegistryIndex entries from a version's manifest. This creates index entries for fast action lookups in the UI and workflow v

Validate a default once and return metadata + DDL representations.

Remove a user's integration for a specific provider.

Reset object storage to None, forcing re-initialization on next get.

Get an agent configuration from a preset by ID or slug with MCP integrations resolved.

Resolve a provider implementation from registry or workspace custom providers.

Test helper: execute template action using production code path.

Normalize a stored identifier to its physical SQL name.

Sanitize and constrain model output for session title use.

Search workspace secrets.

Shutdown all pool workers.

Start the worker pool.

Stop the HTTP bridge server.

Subtract second number from first number.

Aggregate latency stats for a single metric.

Trim message history to fit within model's context limit. Cleans orphaned tool calls/returns, then trims from the front based on actual token

Truncate large tool return outputs to fit within limits. Uses TRACECAT__AGENT_TOOL_OUTPUT_LIMIT from config (default 80k chars).

Update a schedule with the given schedule ID and parameters. Parameters ---------- schedule_id : AnyScheduleID

Update an agent session. Args: agent_session: The AgentSession model to update. params: Fields to update. Re

Update tag and regenerate ref if name changed.

Upsert custom field values for a case. This method ensures the workspace row exists and updates field values. It does NOT commit - th

Validate that a Python script has the required structure for run_python. The script must contain at least one function definition. If multiple

Create a copy with error information added.

Add an entry to a Redis stream with retry logic. Args: stream_key: The Redis stream key fields: Dictionary of field-v

Build a Role from MCP token claims.

Serialize a case tag definition.

Remove any tool calls without matching returns and vice versa. Scans the entire history and removes: - Tool calls (ModelResponse) where next

Compute SHA256 hex digests for deduplication keys. Args: seen: Mapping of composite key tuples to their items. Returns: List

Create a DSL with a single action.

Create a Role DB record for testing.

Create a Role DB record for testing.

Close a part and emit any ending SSE frames that are still pending.

Format list of dictionaries into html table.

Format list of dictionaries into markdown table. Args: x: List of dictionaries to format default_value: Value to use for null val

Get the standardized secret name for a provider's credentials.