Get or create a lock for the given cache key. This prevents multiple concurrent async tasks from downloading the same tarball simulta

Extract preset_id from internal tool context.

Load workspace secret key inventory for the default environment.

Create a UDF node for the graph. Note: UDFNode.id is typed as ActionID (uuid.UUID), so the node_id must be a valid UUID or UUID string. Legac

Return the TTL for staged MCP file transfer URLs and artifacts.

Compute an equivalence key for MIME types to compare related variants consistently. Strategy: - Lowercase, strip parameters first (ca

Normalize a MIME type to its base form (lowercased, parameters stripped).

Read an uploaded CSV file enforcing a maximum size limit.

Get workspace_id, raising if role or workspace_id is None.

Resolve logical batch size and dispatch window for child loops.

Run cleanup to completion even if workflow cancellation is requested.

Suppress internal/synthetic runtime events from external consumers.

Leader-only sync logic with retries.

Acquire lock with timing metrics. Tracks lock acquisitions, contention (wait > 1ms), and wait times.

Accept an invitation and create organization membership + RBAC assignment. This method validates the invitation token, checks expiry and stat

Generate S3 key prefix for action collection (manifest + chunks). Format: {workspace_id}/{wf_exec_id}/actions/{stream_id}/{ref}

Add a user to an organization. This method creates an OrganizationMembership record linking a user to an organization. It is typicall

Factory method for creating approval request events.

Convert Tracecat's output_type into Claude SDK's output_format shape. The Claude SDK expects ``output_format`` as:: {"type": "json_schem

Enforce domain guardrails for multi-tenant SAML enablement. In multi-tenant mode, enabling SAML must require at least one active organization

Legacy no-op sink claim kept for backwards compatibility. External-channel approvals are no longer source-locked. Decisions can be su

Normalize a MULTI_SELECT payload as a list of strings.

Coerce a value to a timezone-aware UTC datetime.

Compare two versions and return a diff of changes. Args: base_version: The base version (typically older) compare_ver

Compute the effective scopes for a role. Results are cached by (user_id, organization_id, workspace_id) with a 30-second TTL so that repeated

Compute durations as metrics optimized for time-series platforms. Returns flat, OTEL-aligned Gauge metrics suitable for direct ingestion

Create Action entities from DSL and add to session. Builds upstream_edges from depends_on relationships. For root actions (no depends

Record a case viewed event if the current user hasn't viewed recently.

Create a RegistryVersion with manifest for the given actions. Returns a RegistryLock that can be used in RunActionInput.

Create a new organization secret.

Create a schedule for a workflow. Parameters ---------- params : ScheduleCreate The parameters for creat

Create or get an existing agent session in the database. This is called at the start of an agent workflow to establish the session record tha

Create a platform-level user without org/workspace memberships.

Create a new workflow execution. Note: This method blocks until the workflow execution completes. Args: memo: Optional m

Create a workflow execution and wait until Temporal acknowledges start.

Remove a member of the organization. This method deletes a specified member from the organization. It first checks if the me

Convert MCP tool name format to canonical action name. MCP tool names use double underscores, canonical names use dots. Args: tool_n

Create a manifest action from a RegistryActionCreate.

Create a TracecatUUID instance from a shortened ID string. Args: short_id: The shortened ID string with prefix Returns:

* Returns the display name of the user.

Get the db async connection pool.

Get a specific case.

Resolve a collection item for object preview/download operations.

Get a simplified toast-friendly message about dependency conflicts. Args: error_message: The error message containing dependency con

Get effective entitlements (org override or tier default). In single-tenant mode, returns static OSS/self-host defaults. In multi-ten

Read effective limits from Redis cache.

Extract execution type from search attributes.

Get the status of GitHub App credentials. Returns: Dictionary with credentials status information

Extract hookSpecificOutput from result.

Get the interaction context from the current action in the workflow execution.

Extract a per-user client ID from the MCP middleware context. Uses the authenticated user's email from the OIDC access token. Falls back to '

Retrieve a member of the organization by their user ID. Args: user_id (UserID): The unique identifier of the user. Retur

Get current memory usage in megabytes.

Parse pyproject.toml to extract dependencies.

Get provider credentials augmented for runtime consumers.