DSL definition for a workflow. The difference between this and a normal workflow engine is that here, our workflow execution order is defined

The identity and authorization of a user or service. Params ------ type : Literal["user", "service"] The type of role. user_i

Tracecat user-facing validation error

Data stored inline (not externalized).

A normalized streaming event. All harnesses convert their native events to this format. Format adapters (vercel, basic) can consume this dire

Raised when a resource is not found in the Tracecat database.

Normalized message representation used internally by the proxy.

Key for a provider that uniquely identifies it.

An organization in the platform.

Manage the organization.

Service for managing RBAC entities and computing effective scopes.

This object contains all the information needed to execute an action.

Insert model for a table row.

An immutable versioned snapshot of a registry repository.

Registry class to store UDF actions and template actions. Responsibilities ---------------- 1. Load and register UDFs and template action

Parameters for cursor-based pagination.

Schema for a field in a template action's expects definition. Note: The default field uses a sentinel to distinguish between "no default spec

Create model for a table.

Create model for a table column.

Configuration for an agent.

Request model for creating an HTTP MCP integration.

Registry version lock with action-level bindings for O(1) resolution. Attributes: origins: Maps repository origin to pinned version strin

Transactional tables service.

The workflow state. Notes ----- - This table serves as the source of truth for the workflow regardless of operating mode (headless o

Service for managing user integrations.

Scope metadata for a provider.

A repository of templates and actions.

Generic exception raised when a registry error occurs.

Create a new secret. Secret types ------------ - `custom`: Arbitrary user-defined types - `token`: A token, e.g. API Key, JWT Token (

Tracecat user-facing authorization error

Manage workspaces.

Registry actions service.

Workflow executions service.

Workflow execution context with typed fields. ACTIONS and TRIGGER are always present. Other fields are optional since contexts may be built i

Registry repository service.

Manages CRUD operations for Workflows.

Service for managing agent sessions and history.

This is the runtime context model for a workflow run. Passed into activities.

Runs registry actions in subprocesses with tarball venv caching. This runner: 1. Computes a cache key from the tarball URI 2. Downloads a

Adapter for converting Claude SDK stream events to unified format.

Tracecat user-facing DSL error

Result from the agent executor activity.

Single Anthropic-compatible SSE event.

Metadata for a provider.

Secrets manager service.

Selection criteria describing an event boundary for a duration.

Reference to an externalized object in blob storage. This is a typed reference that replaces large payloads in workflow context. Only derefer

A workspace belonging to an organization.

Provider-ready messages request shared across adapter families.

Stream-aware task instance.

Async HTTP client for Tracecat Admin API. Uses service key authentication via x-tracecat-service-key header.

Arguments for starting an agent workflow.

State machine that converts pydantic-ai events into AI SDK SSE frames. The context keeps a part registry keyed by the provider's part index so th

Custom string type for agent workflow IDs with pattern validation. This class uses Pydantic's __get_pydantic_core_schema__ to provide runtim

Link table for users and organizations (many to many).

Model for defining credential fields required by a provider.

CRUD operations and helpers for agent presets.

Raised when MCP configuration validation fails.

OAuth secret for a provider.

Adapter for AWS Bedrock Converse API.

Response format for cursor-based pagination.

Mock Action object for testing RFGraph.from_actions. Simulates the Action DB model with required attributes.

Normalized tool call across Anthropic and OpenAI request shapes.

Concrete HTTP request prepared for an upstream provider.

Result of executing a DSL node. With uniform envelope design, `result` is always a StoredObject: - InlineObject when data is small or externa

This is the runtime configuration for the workflow. Activities don't need access to this.

Service for managing immutable registry versions.

Tracecat user-facing expression error

Mock Action with ref property for testing build_action_statements_from_actions.

Represents a workflow definition in a remote store. This is the format that is used to store workflow definitions in the remote store.

Supported SQL types.

Model for creating new tags with validation.

Action implementation metadata for sandbox execution. Contains everything needed to execute an action without DB access.

Generic agent session/thread entity (harness-agnostic). Represents an agent execution session that can be backed by different harnesses (pyda

Service for managing case comments.

GitHub App operation error.

Normalized upstream response before rendering to a public format.

Adapter for converting PydanticAI stream events to unified format.

Pre-resolved context for untrusted execution mode. In untrusted mode, the sandbox doesn't have DB access, so all context needed to execute th

Exception raised for validation errors (400, 422).

Platform-level organization management.

Service for managing agent configuration at the organization level.

Manage persisted case durations and compute anchored metrics.

Service for managing case events.