Moltaro.Package.NET.Workflow

Definition catalog reads as the current application-automation principal.

Validates Move on Board settings and reads source-dependent catalog choices.

Reads role/group administrators for this Definition runtime.

Reads Definition-level Activation configuration.

Reads shared permission and business-condition authoring catalogs.

Validates Activation configuration without executing a process.

Lists authorized global Definition metadata.

Reads metadata by stable identity.

Reads scalar context paths accepted in DevLog message templates.

Reads User Input authoring catalogs with Workflow permission, without Entity/Board administration authority.

Reads the source modes, categories and context selectors a Wait Event of the Definition may observe.

Validates one Wait Event source with the revision save and publication rules, without saving.

Reads valid example filters for the records a Wait Event related path reaches.

Definition metadata commands with shared authorization, concurrency, audit and idempotency.

Replaces runtime administrators with configuration-manager or global-administrator authority.

Saves Definition-level Activation with the aggregate RowVersion and operation identity.

Creates a Definition using a caller-provided operation identity.

Updates metadata and its mutable Key using the current RowVersion.

Deletes a Definition using the current RowVersion.

Registers the supported Workflow application-automation facade.

Registers query/command aliases over one scoped facade; the host supplies the dispatcher.

Host-authorized runtime commands available in Action, Command, HttpEndpoint, Job and TriggerHandler.

Starts the current Active revision in Explicit mode; an unfinished process conflicts.

Responds once to the exact waiting visit under its pinned admission rule.

Technically cancels an unfinished process with Definition or global administration authority.

Pauses an unfinished instance without changing its visits or deadlines.

Restores the state before suspension; Faulted still requires Retry.

Recovers the same Faulted instance and pinned revision with administration authority.

Authorized runtime reads through the same application boundary as HTTP.

Discovers processes and current Explicit start eligibility on one Subject.

Reads the process and all unfinished visits, with current available actions.

Lists processes the actor may view or administer; access, filters and ordering apply in SQL before pagination.

Lists Definitions the actor may filter by, without configuration access.

Reads at most pageSize events after an exclusive Sequence cursor; pageSize is capped at 100.

Reads a safe command status after rechecking current authority.

Reads the pinned graph and the aggregated execution overlay of one process in the caller's projection.

Reads a SQL-authorized page of movement results; complete aggregates are absent when dependencies are hidden.

Registers the Workflow runtime application facade.

Registers command and query aliases to the same scoped facade; the host supplies trusted dispatch.

Authorized Definition outcome query facade for the current application principal.

Performs the authoritative outcome list operation.

Performs the authoritative outcome get operation.

Authorized Definition outcome command facade for the current application principal.

Performs the authoritative outcome create operation.

Performs the authoritative outcome update operation.

Performs the authoritative outcome delete operation.

Registers the supported outcome facade in package and workspace invocation scopes.

Registers one scoped facade and its exact query/command aliases.

Revision metadata and content queries as the current application principal.

Validates a document with current configuration-read authority, without saving it.

Performs the authorized revision list query.

Performs the authorized revision get query.

Performs the authorized revision content query.

Reads the localized revision history without host-only audit types.

Revision commands using shared authorization, optimistic concurrency and command receipts.

Saves supported Draft YAML with current authority, concurrency and mandatory audit.

Performs the authoritative revision create command.

Performs the authoritative revision update command.

Performs the authoritative revision copy command.

Performs the authoritative revision publish command.

Performs the authoritative revision delete command.

Registers the supported revision facade in package and workspace invocation scopes.

Registers one scoped facade and its exact query/command aliases.

Initial Explicit admission for a newly created Workflow Definition.

Requires Update for Entity, or EditBoardData for Board. An unbound Definition starts with the Entity default until its first Subject binding.

The single activation mode configured on a Definition independently of revisions.

Manual activation, requiring context permission and the optional precondition.

Automatic activation: Created only without a condition; Created and Updated with a condition.

Definition activation settings. An unconfigured Explicit rule never permits activation.

Actor-independent business-condition authoring metadata.

Separate permission and business-condition catalogs for Definition activation.

A complete candidate configuration. Implicit must omit ExplicitPermission.

Stores complete activation settings with Definition concurrency and command idempotency.

Successful configuration validation; diagnostics are returned as response errors.

Persisted activation settings and whether the command was replayed.

Settings of a Move on Board editor; missing values remain an unfinished Draft.

One catalog continuation of the current typed path, including its complete authored path.

Current admission and dependent catalog choices from the same owners used by save and publication.

Controls publication of subsequent runtime activity into the Subject's collaboration feed.

Do not publish new activity. Previously published activity is retained.

Publish service activity when the Subject's collaboration channel is enabled.

Actions authorized for one global Workflow Definition.

Whether this actor may change Subject before the permanent first-revision lock.

Actions authorized for the Definition catalog.

Global metadata, independent of future process revisions.

Prefix used for future instance numbers.

The optional global Subject and resolved metadata. Absence means not configured yet.

Whether subsequent runtime service activity is published to the Subject's collaboration feed.

Subject identities and display metadata; availability never grants access to business records.

Definition catalog and available collection actions.

Creates metadata. OperationId identifies this command for safe retries.

Prefix for future instance numbers, at most 32 characters; empty is allowed.

Service activity policy; disabled by default.

Optional Subject. It must be configured before creating the first revision.

Replaces metadata, including the mutable Key, with optimistic concurrency.

Replacement number prefix; null preserves it and empty removes the prefix for future instances.

Replacement policy. Omission preserves the current policy and never removes published activity.

Replacement Subject; null clears it. After the first revision it must remain unchanged.

Deletes a Definition with optimistic concurrency and retry identity.

The committed Definition; Replayed means the original command receipt was returned.

The deleted stable identity and whether the original receipt was replayed.

One role or group referenced by a Definition runtime administrator assignment.

Runtime administrators, independent of configuration permissions, Subject permissions and revision YAML.

Replaces the complete role/group assignment set with aggregate concurrency and operation identity.

Saved Definition Security and whether an identical operation was replayed.

A Board or Workflow Definition the event-source editor can select, with its display name.

The choices the event-source editor offers for one Definition regardless of its source: admitted source modes, categories per resource kind and the Boards whose items may be chosen as explicit records. Context selectors depend on the source and come with its .

The related path whose records a filter is written about, outermost first, as in Wait Event settings.

Help for a related-record filter: example filters written relative to one record the path reaches, each admitted by compiling the source with it. Empty while the path does not resolve or for a Board Item Subject.

One explicitly selected resource of an identity source.

Event-source settings exactly as a Wait Event document stores them; omitted values stay missing.

Authoritative check of one source and the context selectors it admits. Save diagnostics block saving; publication diagnostics block publishing; a filter diagnostic carries its range in the filter. are the Boards configured as a context of every Entity Definition the source observes (its own Subject, its records, or the records its related path reaches); are the other Workflow Definitions whose Subject is an observed Entity Definition or Board. Saving accepts no other selector. Both are empty while the source cannot be resolved.

Available scalar field paths for DevLog message-template authoring in one Definition's Subject.

Paths accepted inside template braces; metadata grants no access to business-record values.

Available scalar field paths for DevLog message-template authoring in one Definition's Subject.

Paths accepted inside template braces; metadata grants no access to business-record values.

One enabled Subject responsibility available for User Input configuration.

One allowed inherited permission, with its exact Board transition when applicable.

Subject-specific read-only authoring catalogs. Access does not grant authority over business records.

One currently visible result; no source mapping or processing ordinal is exposed.

A current authorized page of one visit. Progress is null unless all frozen dependencies are visible. VisibleCount describes only accessible entries; an empty page does not imply that no work was performed. OutputKey remains the persisted execution decision regardless of the reader's card visibility.

Safe selection-level diagnostic, containing no resource identity or count.

Per node key aggregate read from PostgreSQL; never one row per visit.

One visit row with the history sequence of its node.entered event (0 when that event is missing).

Transition events grouped by source node key, the output the source visit took and the destination node key.

Everything the builder needs from storage, read inside one consistent transaction.

Availability of the pinned process graph for presentation; the process state itself stays readable through the snapshot query.

The pinned revision document was read and verified.

The pinned revision has no stored content.

The stored content failed its hash check or no longer parses.

A finite canvas coordinate of the pinned revision's authored geometry.

The authored viewport of the pinned revision; presentation only.

A node anchor. Side is top, right, bottom or left; Offset is a relative position between zero and one.

A label of a Definition outcome referenced by an End node; visible in every projection like OutcomeName.

One semantic output of a node with its authored anchor and route. Title is the authored choice text and may be null even in the full projection (fall back to Key). In the technical projection User Input outputs carry revision-stable neutral keys (output-1, output-2, …) instead of choice keys and no title.

How the authored geometry draws this output: line (a routed line) or link (a short labelled link); geometry, so present in every projection.

One node of the pinned revision: identity, semantic kind, safe labels and authored geometry. Title is the authored step name in the full projection only.

The static topology and geometry of the pinned revision. Admission, messages, durations and instructions are never included.

One concrete visit of a node: every value belongs to this visit row. EntrySequence is the history sequence of its node.entered event and orders visits reliably even when a batch wrote several visits with one timestamp (0 when the entry event is missing). Responses continue to use the snapshot query and its RowVersion.

Pending observation counts for this waiting visit; omitted from technical-only projections.

Execution facts of one node key: counts aggregated over every visit, the last visit entered (by EntrySequence, as one row) and the unfinished visits. Node keys never visited are absent.

Confirmed traversals of one exact output of the pinned graph, identified by source visit, its choice and the destination visit.

One consistent read of the pinned graph and the execution overlay of a process. LastSequence is the history watermark of this snapshot; TraceIncomplete reports transitions that could not be mapped to an exact output instead of guessing. When the graph is Missing or Damaged, Edges are empty and the trace counters are zero: GraphState is the single cause.

Instance lifecycle state in the same captured read as the visit overlay.

State restored by Resume when Suspended; null otherwise.

Supported list sort fields; every sort adds a stable instance-id tie breaker.

Start instant, the default (newest first).

Completion or cancellation instant; unfinished processes sort last in both directions.

Immutable full number.

Technical runtime state.

Current Definition display name.

Bounded authorized list query. Access (Subject View or Definition runtime administration), filters and ordering execute in PostgreSQL before pagination; RequiresMyAction uses the same admission as a response.

Case-insensitive substring of the full number, at most 64 characters.

Restricts the page to one Definition.

Runtime states to include; empty or absent includes every state.

Inclusive lower bound of the start instant.

Exclusive upper bound of the start instant.

True keeps processes with a waiting User Input visit in any runtime state; false keeps the rest; absent ignores waits.

Keeps only Running processes with a waiting User Input visit the caller may answer now, using the response admission.

One-based page number.

Page size between 1 and 100.

Sort field from the server allowlist.

Sort direction; the default lists newest starts first.

One unfinished visit in a list row, without instructions, choices or concurrency tokens.

One authorized list row. Technical-only rows omit the Subject and authored node titles.

State that Resume restores; present only while Suspended.

One authorized page and the count of matching processes.

A Definition the caller may filter by: it administers it or can view at least one of its processes.

Explicit start of the current Active revision on a concrete Subject.

A response to one exact User Input visit.

Administrative lifecycle control with optimistic concurrency and a required reason.

A safe command receipt; command completion does not imply process completion.

Actions currently allowed to this caller on this process.

Whether the caller may explicitly pause this unfinished instance.

Whether the caller may restore the pre-suspension state with current module and Subject availability.

One choice from the pinned User Input node.

One unfinished visit. NodeKind is start, delay, userInput, devLog, if, waitEvent, waitUntil or end, independent of UI icons.

Pending observation counts, available only with Subject View; no observed identities or values.

Observations with at least one pending receipt in the current wait group; no event payloads or source identities.

Current runtime state. Technical-only projections omit the Subject identity and authored interaction text.

State that Resume restores; present only while Suspended.

Immutable full instance number, without the presentation hash sign.

Current Definition label; available without configuration access.

Number of the pinned revision.

Business outcome label when completed.

Subject identity, omitted from technical-only projections.

Subject display name resolved through the Resource Catalog; present only with Subject View.

Safe history event with whitelisted details only.

Node key of the visit; null for process-level events.

Node title from the pinned revision; present only with Subject View and for nodes that declare one.

Node key of the visit a transition came from.

Title of the source node; same visibility as .

Choice title from the pinned revision; present only with Subject View.

Actor display name resolved through the workspace user presentation; null for system actors.

Output a completed visit took: a choice key, true/false, event/timeout or to; present only with Subject View.

Opaque identity of the event an Event exit consumed; present only with Subject View, never its payload.

History ordered by Sequence; NextSequence is the exclusive cursor for the next page.

Current command lifecycle without raw request, recovery payload or technical stack traces.

Subject-level discovery, authorized before retrieving process rows.

Actor permissions combined with protected default and revision-reference constraints.

Definition-owned outcome metadata and current concurrency tokens.

Whether new process revisions may select and publish this outcome.

Ordered outcome catalog with the current parent version and collection authority.

Creates an outcome under the current Definition version.

Whether new revisions may select and publish this outcome.

Atomically replaces the existing default when true. A default must be enabled.

Replaces editable outcome metadata; referenced keys and published meanings are protected.

Changes availability for new revisions; null retains the current value.

True atomically replaces the default; null retains the current value. The current default cannot be unset directly.

Removes an unreferenced non-default outcome with optimistic concurrency.

Committed outcome metadata. Exact retries return the original result with Replayed set.

Deleted identity and the committed parent version.

Current actor/state-specific revision actions. No action grants runtime execution.

Whether this actor can change the never-published Draft's YAML.

Metadata for one revision, without its YAML body.

Current Definition metadata, revision and publication context, without YAML.

Collection admission, including an unavailable reason code and suggested description.

Revision metadata ordered by descending number. Reading this response never reserves a number.

The exact stored authored body and its SHA-256 UTF-8 hash.

Revision concurrency token read in the same database snapshot as the content.

Content-editing admission for the current actor and the same revision snapshot.

Saves the complete supported authored document, including optional designer data.

Checks a supported document without changing revision data.

A localized document diagnostic with a stable path and optional one-based YAML location.

Zero-based UTF-16 start within the authored expression at , such as a Wait Event filter, when located.

Exclusive zero-based UTF-16 end within that expression, present together with .

Authoritative document validation result. Validation does not reserve a version or save content.

Creates a Draft. Null Description asks the server to generate one from the allocated number.

Updates only human metadata, including after publication.

Copies an existing revision into an independent Draft of the same Definition.

Publishes a Draft against the current Definition and revision versions.

Deletes an unpublished Draft without releasing the Definition's Subject lock.

Committed revision metadata. Reload current views after replaying a historical receipt.

Committed document result, including the hash of the exact accepted YAML bytes.

Deleted Draft identity and the updated parent version.

Localized revision history entry without internal host audit models.

The latest authorized revision audit entries.

Selection frozen before the first Board effect of one node visit.

One owning visit, never a node key shared across visits.

Owning visit, loaded explicitly.

Versioned typed metadata and root identity of the frozen selection.

Collection members before projection/deduplication; absent for a refused selection.

Safe whole-selection refusal, without hidden identities or counts.

Ordered pending/result entries, loaded explicitly.

One distinct pinned Board Item, or one unresolved source-member refusal.

Owning frozen selection.

Owning selection, loaded explicitly.

Stable zero-based processing order.

Logical operation identity; a new visit never reuses it.

Pinned Board/item/target/pass; null for resolution failures without a concrete item.

Source-member identity witnesses, including mappings deduplicated onto this item.

Current progress, finalized once per entry.

Authoritative Boards result; null until attempted or for Workflow resolution failures.

Stable safe outcome/refusal code.

UTC instant this entry became final; cancellation leaves pending entries untouched.

Global Definition metadata; process revision data is not stored here.

Editable integration key; configuration services enforce normalization and locking rules.

Normalized key used by the database uniqueness constraint; writers maintain it with Key.

Human-readable name shown by configuration consumers.

Prefix captured in numbers of future instances; empty is allowed.

Optional descriptive metadata; not executable process content.

Creating principal when available.

Principal responsible for the latest metadata change, when available.

Application-managed optimistic concurrency token; replace it on each update.

Publication policy for subsequent Subject collaboration activity, independent of graph revisions.

Definition-level activation mode, independent of revision content.

Optional actor-independent Boolean DSL condition on Subject data.

JSONB-serialized ContextPermissionRule for Explicit; null for Implicit or an unconfigured Definition.

Use configuration services for catalog validation, audit and idempotency.

Earliest event instant eligible under the current Implicit configuration; null uses the module runtime boundary.

Kind of the Definition Subject, permanently locked by first revision creation.

Entity Definition context for an Entity Instance Subject.

Board context for a Board Item Subject.

Automatically assigned immutable DSL identifier within SubjectBoardId; not an editable binding.

Board presentation sequence only; never used by activation, execution or security.

Whether Board surfaces show this process; hidden processes still execute and supply DSL facts.

Opt-in Board item detail signal; still subject to BoardPresentationVisible and runtime authorization.

Independent presentation concurrency token, excluded from executable dependency fingerprints.

Monotonic revision allocator retained after Draft deletion.

Permanent first-revision lock; deleting revisions never clears it.

Revisions owned by this Definition; loaded explicitly.

Business outcomes owned by this Definition; loaded explicitly.

Process instances owned by this Definition; loaded explicitly.

Definition-scoped runtime administrator grants; loaded explicitly.

Runtime commands and event-candidate decisions; loaded explicitly.

Committed result of one Workflow configuration command, retained independently of Definition deletion. Only the actor that committed it can replay it.

Grants runtime administration on one Definition to a workspace role or group.

Definition whose instances may be administered.

Owning Definition; loaded explicitly.

Workspace role, mutually exclusive with GroupId. Its Core FK belongs to host composition.

Existing platform responsibility group, mutually exclusive with WorkspaceRoleId.

A process attached to one Subject and pinned to one Definition revision.

Immutable full number allocated from the workspace Workflow sequence.

Immutable positive value of the same Workflow sequence allocation as ; the Worker routes every command of the instance to one queue by it. Gaps are allowed; when left unset, the database takes the next value of the sequence.

Definition that owns the Subject contract.

Definition owning the Subject contract; loaded explicitly.

Revision selected at start and retained for this instance.

Revision pinned for this process instance; loaded explicitly.

Concrete Entity Instance or Board Item id; type comes from Definition.

Technical lifecycle; Faulted remains unfinished.

Running or Faulted while suspended; null in every other state.

Nonnegative execution fence advanced when administration invalidates outstanding work.

Last allocated history position; advance with the history append in the locked instance transaction.

Definition-owned business outcome, required only for Completed.

Business outcome when completed; null when absent or not loaded.

Key of the End node that completed the process.

UTC start instant.

UTC completion or cancellation instant; absent for unfinished processes.

Initiating user when one is available.

Optional integration correlation identifier.

Process-local JSON values. Does not duplicate node visit state.

Optimistic concurrency token; writers replace it when changing this row.

Individual node visits, including repeated and parallel visits; loaded explicitly.

Process history; loaded explicitly and ordered by Sequence by the reader.

Runtime commands and receipts addressed to this process; loaded explicitly.

Event observations of Wait Event nodes; internal runtime state, loaded explicitly.

A durable, ordered process event; writing state does not automatically append history.

Owning process instance.

Owning process instance; loaded explicitly.

Positive, unique sequence within the instance, allocated transactionally by writers.

Related visit, belonging to the same process, when applicable.

Related visit in the same process; null when absent or not loaded.

Source visit of an exact node transition; the regular visit reference identifies its destination.

Source visit in the same process, loaded explicitly.

Publication decision captured with the event; later policy changes do not alter this evidence.

Event discriminator owned by the producer; no executor event catalog is implied.

UTC event instant.

Acting user when one is available.

Optional integration correlation identifier.

Optional event details in JSON.

Applied version of the embedded Workflow security manifest.

Stable Workflow module identity.

Identity of the security manifest applied by bootstrap.

Version of the applied security manifest.

Fingerprint of the applied manifest for readiness validation.

UTC instant of completed security bootstrap.

Durable first runtime attachment boundary; restarts and re-enables do not reset it.

Token of the one active Worker owner; a successor replaces it before admitting work and claims of an older token are refused. Runtime-owned; never changed through ordinary settings updates.

Application-managed optimistic concurrency token; replace it on each update.

Workspace-wide mapping to a Workflow internal role.

Workspace role mapped to a Workflow internal role.

Module-owned internal security role key.

Manifest version introducing a bootstrap-owned association, when applicable.

Principal that recorded the association, when available.

Application-managed optimistic concurrency token; replace it on each update.

One visit to a node; repeated and simultaneous visits have distinct ids.

Owning process instance.

Owning process instance; loaded explicitly.

Stable graph node key within the instance's pinned revision.

Technical state of this visit.

Pending wait condition, or None outside Waiting.

UTC wake-up deadline, present only for a pending Delay.

UTC entry instant.

UTC completion or cancellation instant.

Accepted user choice key, when this visit completed through a choice.

Output a completed multi-output visit took: a choice key, true/false or event/timeout.

Optional JSON result produced by this visit.

Frozen Board movement selection and progress for this visit, loaded explicitly.

Unresolved technical error, present only for Faulted.

Optimistic concurrency token; writers replace it when changing this row.

History events associated with this visit; loaded explicitly.

Transition events that departed from this exact visit; loaded explicitly.

Commands addressing this exact visit; loaded explicitly.

The observation receipt this visit's Event exit consumed; loaded explicitly.

Lifecycle of a durable event observation.

Retains matching events for current and later visits of its node.

Ended with its instance; kept for retention and diagnostics.

Its boundary, stream or source evidence can no longer be trusted; waits on it fault.

The durable event observation of one Wait Event node in one sequential instance scope, shared by every visit of that node. Its boundary snapshot and stream incarnation decide which committed events belong to it; each eligible event is recorded once as a receipt. Internal runtime state: never exposed through runtime query DTOs.

Definition of the observing instance.

Observing instance.

Observing instance; loaded explicitly.

Pinned revision whose node settings compiled the source plan.

Observing node of the pinned revision.

Stable key of the configured observation inside its node.

Sequential execution scope; root until scoped execution exists.

Positive generation within the scope.

Concrete Subject of the instance, kept for routing takeover lookups.

Selected source mode.

Compiled source plan as JSONB: exact resources or the routing source, categories and facet selector.

SHA-256 of the plan, upper-case hexadecimal.

Routing registration key of a related path source.

Routing registration revision row the observation is bound to.

Routing registration revision number the observation is bound to.

Immutable PostgreSQL snapshot text captured when the observation opened.

SHA-256 of , upper-case hexadecimal; a mismatch makes the observation Invalid.

Event stream incarnation of the boundary.

When the post-commit bootstrap catch-up completed; null while it is pending.

Publisher transactions below this value were covered by a complete catch-up pass.

Floor candidate of an unfinished catch-up pass.

Publisher transaction of the last event read by an unfinished pass.

Last event read by an unfinished pass.

Observation lifecycle.

Stable workflow.runtime diagnostic of an Invalid observation.

UTC opening instant.

UTC closing instant.

Optimistic concurrency token; writers replace it when changing this row.

Exact resources of a Subject or identity source until the observation closes; loaded explicitly.

Eligible events recorded for this observation; loaded explicitly.

One exact resource of a Subject or identity observation, indexed for event delivery; removed when the observation closes.

Owning observation.

Owning observation; loaded explicitly.

Resource owner module.

Resource family.

Entity Definition or Board.

Entity record or Board Item.

How an eligible event reached an observation.

Catch-up over the exact resources of the observation.

A confirmed related-context routing invalidation.

The post-commit bootstrap of a related path: events no intake cohort of the registration delivers and events routed to the Subject before the observation was visible to routing takeover.

One eligible event of an observation generation. A Wait Event exit consumes exactly one pending receipt; other receipts stay pending for later visits. The insertion sequence orders consumption deterministically.

Insertion order and primary key.

Owning observation.

Owning observation; loaded explicitly.

Observation generation the event belongs to.

Original resource event identity.

How the event reached the observation.

Routing reason of a routed receipt; provenance only.

Visit whose Event exit consumed this receipt.

Visit whose Event exit consumed this receipt; loaded explicitly.

UTC consumption instant.

UTC insertion instant.

Definition-owned business outcome referenced by End nodes.

Owning Workflow Definition identifier.

Owning Workflow Definition; loaded explicitly.

Integration key whose normalization and locking are maintained by configuration services.

Normalized key maintained with Key for database uniqueness.

Human-readable name for configuration and runtime presentation.

Optional descriptive metadata; not executable process content.

Business outcome meaning, independent of technical process lifecycle.

Presentation order within the Definition outcome list.

Whether this is the Definition's required enabled default outcome.

Whether new revisions may select and publish this outcome. Published execution retains its meaning.

Set at the first revision reference; removal of references never clears this marker.

Creating principal when available.

Principal responsible for the latest metadata change, when available.

Application-managed optimistic concurrency token; replace it on each update.

Revision dependencies referring to this outcome; loaded explicitly.

Process instances completed with this outcome; loaded explicitly.

Dependency index derived atomically from a revision's YAML, never an alternative graph source.

Owning Workflow Definition identifier.

Related revision identifier, constrained to the same Definition.

Related revision, including the owning Definition through its navigation; loaded explicitly.

Related business outcome identifier, constrained to the same Definition.

Related business outcome; loaded explicitly.

Revision metadata. Content is loaded explicitly from its separate table.

Owning Workflow Definition identifier.

Owning Workflow Definition; loaded explicitly.

Positive revision number unique within its Definition.

Required revision description; independent of executable process content.

Publication lifecycle; configuration services retain published content unchanged.

Source revision provenance; intentionally not a foreign key.

Source revision number retained after deletion of a source Draft.

Creating principal when available.

Principal responsible for the latest metadata change, when available.

First publication instant; absent for an unpublished Draft.

Publishing principal when available.

UTC instant when another revision replaced this published revision.

User who published the replacement Workflow revision, when available.

Application-managed optimistic concurrency token; replace it on each update.

Separate authored body; null when absent or not loaded. Never loaded automatically.

Outcome dependencies derived from this revision's YAML; loaded explicitly.

Process instances pinned to this revision; loaded explicitly.

Authored body, editable only in an unpublished Draft. Description edits do not update this row.

Related Workflow revision identifier.

Revision owning this authored body; loaded explicitly.

Exact authored YAML; writers maintain ContentHash together with it.

SHA-256 of the exact YAML bytes, maintained together with content.

Durable runtime work or receipt. Direct EF writes do not execute or authorize it.

Unique canonical identity of an external operation, event candidate or visit continuation.

Hash of the canonical request used to reject identity reuse with different input.

Protocol operation.

Command lifecycle, not the process lifecycle.

Caller operation id, absent for internally derived work.

Authoritative actor recorded by the host; this value alone never grants system authority.

Optional originating correlation identity.

Original resource event identity, retained independently of event retention.

Definition addressed by the command; null for the shared event intake receipt.

Definition addressed by the command; loaded explicitly.

Concrete Subject identity, retained for activation before an instance exists.

Process addressed by the command, if already admitted.

Process addressed by the command; loaded explicitly.

Exact visit addressed by a continuation or response.

Exact visit addressed by the command; loaded explicitly.

Intake or originating command which created this work.

Originating command; loaded explicitly.

Derived work, including the fixed candidate set of an event intake.

Protocol input and recovery context, stored as JSONB; never exposed by runtime query DTOs.

Safe command receipt as JSONB.

Stable diagnostic code, without stack traces.

Earliest UTC execution instant.

UTC instant of a completed or skipped command.

Number of technical execution attempts; disabled time does not consume attempts.

Worker identity while Processing.

Unique fencing token for this claim, replaced on every reclaim.

UTC expiry of the current Processing claim.

Instance execution generation captured for a Processing continuation; absent without its lease.

Application-managed optimistic concurrency token.

Stable identity of the Workflow module.

Key used by module lifecycle, availability and installation packages.