Represents a configuration value for a specific parameter in a plugin. Attributes: value (JSONField): The configuration value in JSO

Represents a parameter that can be configured for a Python module. Attributes: name (str): The name of the parameter. type (

``Job`` model's serializer for Observable Analysis. Used for ``create()``.

``Job`` model's serializer for File Analysis. Used for ``create()``.

A visualizable component for displaying images in the visualizer. Supports two image sources: - url: A URL to fetch the image from (e.g.

Streams the answer text token-by-token, plus a status event per tool call. With a tool-calling agent there is no ``Final Answer:`` marker to gate

Envelope for the analyze_observable tool, which now ONLY previews. `plan` is what a confirmed run would do; `pending_id` is the one-time token th

Streams chat turns to the user and accepts inbound messages to start them. Auth is handled upstream by WSAuthMiddleware (anonymous users are reje

Serializer for the UserProfile model.

Represents a Python module model used in the application. Attributes: module (str): The name of the module. base_path (str):

Used for ``create()``

Abstract class for all Connectors. Inherit from this branch when defining a connector. Need to overrwrite `set_params(self, params: dict)

LangChain chat history backed by the Django ChatMessage model. Implements the BaseChatMessageHistory contract so a ChatSession's messages can be

Represents a job in the system, which is a task or process that is being managed. Attributes: TLP (str): The TLP (Traffic Light Prot

Serializer for ask_analysis_availability

Compact, LLM-facing Job view for search results (no user/PII fields).

Resolve a DNS query with Quad9

Check if a domain is malicious by Quad9 public resolver. Quad9 does not answer in the case a malicious domain is queried. However, we need to

Count actions per key within a fixed time window. ``allow()`` is a read-only check (no side effect); ``increment()`` records one action. Cal

Serializer for API tokens. Attributes: key (str): The token key. created (datetime): The creation time of the token.

Model representing a user profile. Attributes: user (OneToOneField): One-to-one relationship with the user model. company_na

Base Serializer for ``Job`` model's ``create()``.

Abstract model for plugin configurations. Attributes: name (str): The name of the configuration. description (str): A brief

Synchronous reply to an inbound frame, telling the client which session it landed on.

A tool produced something the user must act on out-of-band (e.g. confirm an analysis). Carries the pending id the frontend posts to the confirm e

What a confirmed analyze_observable call would launch (preview, no side effects).

Compact, LLM-facing AnalyzerConfig view for list_analyzers (no owner/PII fields). `runnable` is read from a per-user queryset annotation (`annota

Compact analyzer-report view used inside JobDetailToolSerializer.

wrapper for https://github.com/D4-project/BGP-Ranking

Response shape for GET /api/chatbot/health (serializes a ChatHealth dataclass).

Response of the analyze-confirm endpoint: the launched (or dedup-reused) job.