Moltaro.Package.NET

One extension-aware file type rule advertised by the attachment upload boundary. A file is allowed only when its longest matching extension and declared MIME type are present in the same rule.

Normalized lower-case extensions, including the leading dot. Normalized lower-case MIME types without parameters.

One extension-aware file type rule advertised by the attachment upload boundary. A file is allowed only when its longest matching extension and declared MIME type are present in the same rule.

Normalized lower-case extensions, including the leading dot. Normalized lower-case MIME types without parameters.

Normalized lower-case extensions, including the leading dot.

Normalized lower-case MIME types without parameters.

Request to upload an attachment to a Moltaro entity instance.

File name stored on the attachment descriptor.

Optional file description.

File MIME type.

Expected file size in bytes. Required when is used.

In-memory file content. Use either this property or , not both.

Streamed file content. Use either this property or , not both.

Optional resource relations attached to the uploaded attachment.

Request to import or replace an attachment with source-system metadata.

Caller-provided file reference identifier to create or replace.

File name stored on the attachment descriptor.

Optional file description.

File MIME type.

Expected file size in bytes. Required when is used.

In-memory file content. Use either this property or , not both.

Streamed file content. Use either this property or , not both.

Source-system user id to store as the creator. A non-null value must resolve to an existing workspace user. When omitted by system automation, the unknown historical creator is preserved; interactive callers continue to use the current actor as creator.

Source-system creation timestamp. When omitted, the current time is used.

Optional resource relations attached to the attachment. Upsert replaces the active relation set.

Result of a Moltaro attachment upload.

Created file reference identifier. Created file descriptor identifier. SHA-256 checksum encoded as lowercase hex. Stored file size in bytes. Stored file MIME type.

Result of a Moltaro attachment upload.

Created file reference identifier. Created file descriptor identifier. SHA-256 checksum encoded as lowercase hex. Stored file size in bytes. Stored file MIME type.

Created file reference identifier.

Created file descriptor identifier.

SHA-256 checksum encoded as lowercase hex.

Stored file size in bytes.

Stored file MIME type.

Result of a Moltaro attachment download.

File descriptor metadata. Verified file content streamed through Moltaro storage.

Result of a Moltaro attachment download.

File descriptor metadata. Verified file content streamed through Moltaro storage.

File descriptor metadata.

Verified file content streamed through Moltaro storage.

Effective non-secret upload capabilities for the current workspace.

Configured file-body storage provider. Whether bounded managed multipart transfer is available. Whether the legacy single-request stream path is available. Effective maximum after product, workspace, and verification limits. Required bounded part size for managed transfers. Maximum supported parallel part count. Supported client-declared checksum algorithm. Whether a client-declared checksum is required. Deprecated MIME-only compatibility projection. Use .

Effective non-secret upload capabilities for the current workspace.

Configured file-body storage provider.

Whether bounded managed multipart transfer is available.

Whether the legacy single-request stream path is available.

Effective maximum after product, workspace, and verification limits.

Required bounded part size for managed transfers.

Maximum supported parallel part count.

Supported client-declared checksum algorithm.

Whether a client-declared checksum is required.

Deprecated MIME-only compatibility projection. Use .

Gets the authoritative extension-aware upload rules. A file is allowed only when its longest matching extension and declared MIME type are present in the same rule.

Gets the persisted schema version of the effective file type policy.

Gets the deterministic SHA-256 fingerprint of the effective file type rule pairs.

Gets the simultaneous client-transfer session limit for the current execution actor.

Gets sessions transferring or completing client content for the current execution actor.

Gets the unpublished reserved-byte limit for the current execution actor.

Gets byte reservations held by transfer and post-transfer verification sessions.

Gets the retry delay when the actor currently has no upload capacity.

Gets the sliding inactivity lease for an active upload session.

Gets the absolute lifetime cap for an active upload session.

Provider-neutral lifecycle state for one bounded attachment transfer.

The caller stream is being transferred in bounded parts.

The complete body was accepted and is waiting for verification.

The body is being verified or published.

The verified attachment is available to readers.

The body was rejected by an integrity or content policy.

The transfer or publication failed.

The physical transfer attempt was explicitly aborted or stopped by system recovery. A system-recovery abort has a stable filesystem.upload.recovery.* failure code and can permit a successor attempt with the same logical idempotency key.

Monotonic progress for one bounded attachment transfer.

Identifier of the physical upload attempt. Repeating the logical operation after expiry can return a new value. Current provider-neutral transfer state. Bytes accepted for the current transfer attempt. Caller-declared complete body size.

Monotonic progress for one bounded attachment transfer.

Identifier of the physical upload attempt. Repeating the logical operation after expiry can return a new value.

Current provider-neutral transfer state.

Bytes accepted for the current transfer attempt.

Caller-declared complete body size.

Current provider-neutral result for one attachment transfer.

Identifier of the physical upload attempt. Repeating the logical operation after expiry can return a new value. Current transfer state. Provider-confirmed or locally transferred bytes. Caller-declared complete body size. Published file reference identifier, when available. Published descriptor identifier, when available. Authoritative verified SHA-256, when available. Authoritative detected MIME type when available; otherwise the declared type. Stable provider-neutral failure code, when applicable. An explicit caller abort has no failure code; a system-recovery abort has a safe filesystem.upload.recovery.* code.

Current provider-neutral result for one attachment transfer.

Identifier of the physical upload attempt. Repeating the logical operation after expiry can return a new value.

Current transfer state.

Provider-confirmed or locally transferred bytes.

Caller-declared complete body size.

Published file reference identifier, when available.

Published descriptor identifier, when available.

Authoritative verified SHA-256, when available.

Authoritative detected MIME type when available; otherwise the declared type.

Stable provider-neutral failure code, when applicable. An explicit caller abort has no failure code; a system-recovery abort has a safe filesystem.upload.recovery.* code.

Whether no further transfer or verification transition is possible. A provider-unavailable failure remains resumable by repeating the same stream operation with the original idempotency key. An expired or system-recovery-aborted physical attempt remains terminal when queried by its upload-session id, while a repeated stream operation can create a successor attempt when the failure contract permits it.

Outcome of explicitly aborting an attachment transfer.

The active transfer was aborted.

The transfer was already aborted.

No caller-owned transfer exists.

The current state cannot be aborted.

Result of explicitly aborting an attachment transfer.

Abort outcome. Current transfer state when it can be disclosed to the caller.

Result of explicitly aborting an attachment transfer.

Abort outcome. Current transfer state when it can be disclosed to the caller.

Abort outcome.

Current transfer state when it can be disclosed to the caller.

Outcome of an idempotent file-reference owner reassignment.

The reference owner was changed by this call.

The same operation was committed by an earlier call.

Request to atomically move an existing file reference to another owner.

Required stable idempotency key for this owner transition.

Stable file reference identifier. The physical body and descriptor are not copied.

Owner that must currently own the reference.

New owner for the same reference.

Expected current file-reference concurrency token.

Provider-neutral snapshot of a reassigned file reference.

Stable file reference identifier. Unchanged file descriptor identifier. Current owner after the operation. Current file-reference concurrency token.

Provider-neutral snapshot of a reassigned file reference.

Stable file reference identifier. Unchanged file descriptor identifier. Current owner after the operation. Current file-reference concurrency token.

Stable file reference identifier.

Unchanged file descriptor identifier.

Current owner after the operation.

Current file-reference concurrency token.

Result of an atomic file-reference owner reassignment.

Whether this call applied the transition or replayed its durable result. Current reference identity, descriptor, owner, and row version.

Result of an atomic file-reference owner reassignment.

Whether this call applied the transition or replayed its durable result. Current reference identity, descriptor, owner, and row version.

Whether this call applied the transition or replayed its durable result.

Current reference identity, descriptor, owner, and row version.

Request for a bounded, resumable attachment stream upload.

File name stored on the attachment descriptor.

Optional file description.

Caller-declared MIME type.

Complete body size. The stream itself does not need to expose .

Optional caller-declared lowercase or uppercase SHA-256 hex value.

Non-seekable attachment content stream.

Required stable identity of the logical upload operation, scoped to the actor and owner resource. Keep this value unchanged when retrying an expired physical attempt.

Optional monotonic bounded-transfer progress sink.

Optional relations applied atomically when the attachment is published.

Request for a bounded, resumable attachment import or replacement.

Caller-provided stable file reference identifier.

File name stored on the attachment descriptor.

Optional file description.

Caller-declared MIME type.

Complete body size. The stream itself does not need to expose .

Optional caller-declared lowercase or uppercase SHA-256 hex value.

Non-seekable attachment content stream.

Required stable identity of the logical upload operation, scoped to the actor and owner resource. Keep this value and unchanged when retrying an expired physical attempt.

Optional monotonic bounded-transfer progress sink.

Source-system user identifier to preserve as creator. This is historical attribution only and never grants attachment authorization. Null preserves an unknown historical creator; a non-null value must resolve to an existing workspace user.

Source-system creation timestamp to preserve.

Optional relations applied atomically when the attachment is published.

Service contract for trusted attachment access from package and direct-db code.

Returns effective non-secret upload limits and storage capabilities before the caller reads a source body.

Token that is signaled when the operation should stop. The effective workspace upload policy and provider-neutral transfer capabilities.

Lists attachments for a package entity instance.

Package entity type that owns the attachment list. Entity instance identifier. Token that is signaled when the operation should stop. Attachment references ordered from newest to oldest.

Lists attachments owned by a resource.

Owning resource identity. Token that is signaled when the operation should stop. Attachment references ordered from newest to oldest.

Lists attachments related to a resource target.

Relation target resource identity. Token that is signaled when the operation should stop. Attachment references ordered from newest to oldest.

Uploads an attachment for a package entity instance.

Package entity type that owns the attachment. Entity instance identifier. Attachment upload request. Token that is signaled when the operation should stop. Created attachment identifiers and stored descriptor metadata.

Uploads an attachment owned by a resource.

Owning resource identity. Attachment upload request. Token that is signaled when the operation should stop. Created attachment identifiers and stored descriptor metadata.

Imports or replaces an attachment for a package entity instance while preserving source-system metadata.

Package entity type that owns the attachment. Entity instance identifier. Attachment import request. Token that is signaled when the operation should stop. Created or replaced attachment identifiers and stored descriptor metadata.

Imports or replaces an attachment owned by a resource while preserving source-system metadata.

Owning resource identity. Attachment import request. Token that is signaled when the operation should stop. Created or replaced attachment identifiers and stored descriptor metadata.

Downloads an attachment that belongs to a package entity instance.

Package entity type that owns the attachment. Entity instance identifier. File reference identifier. Token that is signaled when the operation should stop. Attachment descriptor and content location.

Downloads an attachment that belongs to a resource owner.

Owning resource identity. File reference identifier. Token that is signaled when the operation should stop. Attachment descriptor and content location.

Transfers a package entity attachment without buffering the complete body.

Transfers a resource attachment without buffering the complete body.

Imports or replaces a package entity attachment without buffering the complete body. A scheduled function using the trusted system actor is authorized from host-owned execution provenance; supplying the reserved actor string outside that runtime context grants no access.

Imports or replaces a resource attachment without buffering the complete body. EntityInstance owners use entity attachment policy; BoardItem owners use the Boards process-attachment policy.

Imports or replaces multiple resource attachments with bounded parallelism. Each item owns an independent runtime scope and transaction; one item failure does not roll back or stop successful siblings. Input streams must be independent and remain caller-owned.

Returns one caller-owned package entity attachment transfer.

Returns one caller-owned resource attachment transfer.

Explicitly aborts one caller-owned package entity attachment transfer.

Explicitly aborts one caller-owned resource attachment transfer.

Atomically changes the owner of an available, unbound attachment without changing its identifier, descriptor, physical object, body bytes, or relations. Repeating the exact request with the same operation id returns the committed result.

Request to create a comment on a Moltaro entity instance.

Comment text.

Optional parent comment id when creating a reply.

Optional resource relations attached to the comment.

Request to update a comment.

Comment text.

Request to import or replace a comment with source-system metadata.

Caller-provided comment identifier to create or replace.

Comment text.

Optional parent comment id when importing a reply.

Existing workspace user id to preserve as the historical creator. When omitted, the current execution actor is used, including the trusted system-automation actor.

Source-system creation timestamp. When omitted, the current time is used.

Optional resource relations attached to the comment. Upsert replaces the active relation set.

Service contract for trusted comment access from package and direct-db code.

Gets an active comment by id.

Comment identifier. Token that is signaled when the operation should stop. The comment projection, or when it was not found.

Lists comments for a package entity instance.

Package entity type that owns the comments. Entity instance identifier. Token that is signaled when the operation should stop. Comments ordered from newest to oldest.

Lists comments owned by a resource.

Owning resource identity. Token that is signaled when the operation should stop. Comments ordered from newest to oldest.

Lists comments related to a resource target.

Relation target resource identity. Token that is signaled when the operation should stop. Comments ordered from newest to oldest.

Creates a comment for a package entity instance.

Package entity type that owns the comment. Entity instance identifier. Comment create request. Token that is signaled when the operation should stop. The created comment projection.

Creates a comment owned by a resource.

Owning resource identity. Comment create request. Token that is signaled when the operation should stop. The created comment projection.

Imports or replaces a comment for a package entity instance while preserving source-system metadata.

Package entity type that owns the comment. Entity instance identifier. Comment import request. Token that is signaled when the operation should stop. The created or replaced comment projection.

Imports or replaces a comment owned by a resource while preserving source-system metadata.

Owning resource identity. Comment import request. Token that is signaled when the operation should stop. The created or replaced comment projection.

Atomically changes an active comment owner without changing its identifier, text, parent, source attribution, source timestamp, or relations. Repeating the exact request with the same operation id returns the committed result. This operation is available only to runtime-authenticated system automation.

Updates an active comment.

Comment identifier. Comment update request. Token that is signaled when the operation should stop. The updated comment projection.

Soft-deletes an active comment.

Comment identifier. Token that is signaled when the operation should stop. The deleted comment identifier.

Convenience extensions for strongly typed function queue calls.

Enqueues a function by reading its stable key from .

The package function type to enqueue. The function queue service. Optional JSON-serializable function arguments. Token that is signaled when enqueueing should stop. The queued function run id.

Writes package execution diagnostics to the Moltaro dev log.

Writes an in-memory execution note.

Writes a trace dev-log entry.

Writes a debug dev-log entry.

Writes an information dev-log entry.

Writes a warning dev-log entry.

Writes an error dev-log entry.

Writes a critical dev-log entry.

Enqueues Moltaro business functions from trusted package code.

Enqueues a function by its stable key.

Service contract for Moltaro responsibility groups.

Lists responsibility groups visible to trusted package code.

Gets a responsibility group by its stable id.

Creates a responsibility group through trusted Moltaro core services.

Updates a responsibility group, including its complete user membership set.

Deletes a responsibility group.

Service contract for Moltaro roles.

Lists roles visible to trusted package code.

Gets a role by its stable id.

Creates a workspace role through trusted Moltaro core services.

Updates a non-system role by its stable id.

Deletes a non-system role.

Replaces all user memberships of a non-system role.

Replaces all permission claims of a non-system role.

Service contract for Moltaro users.

Lists active workspace users.

Gets the effective actor user for the current package invocation.

Gets the original interactive user when the current invocation is impersonated.

Gets a user by id.

Creates a workspace user through trusted Moltaro core services.

Updates one workspace user, including lifecycle, roles, and optional integration metadata.

Soft-deletes one non-owner workspace user.

Sets or replaces the password for an interactive workspace user.

Request to create a responsibility group through trusted Moltaro core services.

Optional stable responsibility group id. When omitted, Moltaro generates one.

Optional responsibility group code.

Responsibility group display name.

Responsibility group type.

Optional description.

Optional initial user memberships.

Optional non-secret integration metadata.

Request to create a workspace role through trusted Moltaro core services.

Optional stable role id. When omitted, Moltaro generates one.

Role display name.

Optional role description.

Whether the role is assigned automatically to newly created users.

Optional non-secret integration metadata stored as namespaced claims.

Request to create a workspace user through trusted Moltaro core services.

Optional stable user id. When omitted, Moltaro generates one.

Workspace user name.

Optional email address.

User first name.

Optional user last name.

User type. Direct-db creation defaults to a service account.

Whether the optional email is already confirmed.

Whether the created user is blocked from sign-in and API-key access.

Optional role ids to assign. Auto-assign roles and Everyone are added when present in the workspace.

Optional initial password. Direct-db creation accepts it only for workspace users.

Optional non-secret integration metadata stored as namespaced claims.

Tag value to import or synchronize on a Moltaro entity instance.

Tag display name.

Optional tag color.

Optional tag category.

Request to replace the full tag set on a Moltaro entity instance.

Desired tag set.

Existing workspace user id to preserve as the historical creator for new tags. When omitted, the current execution actor is stored, including the system automation actor.

Result of replacing a Moltaro tag set.

Number of tags created.

Number of tags updated.

Number of tags deleted.

Number of tags left unchanged.

Service contract for trusted tag access from package and direct-db code.

Lists tags for a package entity instance.

Lists tags for a Moltaro resource owner.

Replaces the complete tag set for a package entity instance.

Replaces the complete tag set for a Moltaro resource owner.

Non-generic runtime bridge used by hosts that discover and execute DataSources dynamically.

Gets the CLR parameter type accepted by this DataSource.

Gets the immutable descriptor for this DataSource using the source kind assigned by the discovery host.

Gets available option values for a select-like parameter.

Executes the DataSource using dynamically supplied parameters.

Typed base class for authoring Moltaro DataSources.

The CLR type that represents validated execution parameters.

Describes parameters, output shape, renderer compatibility, and execution requirements.

Gets available option values for a select-like parameter.

Executes the DataSource using typed parameters.

Describes a DataSource contract that can be bound to dashboard and report definitions.

Describes a single DataSource parameter.

Describes a DataSource output schema.

Describes a field in a DataSource output payload.

Describes a renderer that can consume a DataSource output.

Describes a drilldown/link target that can be produced by a DataSource.

Describes host execution limits and capabilities for a DataSource.

Describes module and permission requirements needed before a host executes a DataSource.

Gets an empty execution requirement descriptor.

Builds immutable instances for authoring and discovery.

Initializes a new instance of the class.

A stable identifier for the DataSource contract. An optional shorter key for authoring.

Gets the stable identifier for the descriptor being built.

Sets the authoring key.

Sets the default display name.

Sets the default description.

Sets the source kind assigned by the discovery host.

Sets the owning module key.

Sets the descriptor version.

Adds a date range parameter.

Adds a date parameter.

Adds a number parameter.

Adds a text parameter.

Adds a boolean parameter.

Adds a single-value select parameter.

Adds a multi-value select parameter.

Adds a Moltaro user parameter.

Adds a Moltaro role parameter.

Adds a Boards module board parameter.

Adds an entity definition parameter.

Adds an entity instance parameter.

Adds a logical scope parameter.

Sets metric output shape.

Sets metric set output shape.

Sets bounded metric output shape.

Sets table page output shape.

Sets time series output shape.

Sets category series output shape.

Sets record list output shape.

Adds an explicit renderer capability.

Adds a drilldown target capability.

Sets execution policy values.

Adds a permission key required for execution.

Adds a module key required for execution.

Sets the minimum built-in workspace role required for execution.

Builds a descriptor and calculates its schema fingerprint.

Calculates stable DataSource descriptor fingerprints for published definition compatibility checks.

Calculates a deterministic SHA-256 fingerprint for compatibility-relevant descriptor parts.

The descriptor to fingerprint. A lower-case hexadecimal SHA-256 fingerprint.

Identifies the authoring surface that provides a DataSource.

The source kind has not been assigned by a discovery host.

The DataSource is provided by a built-in Moltaro module.

The DataSource is provided by a customer NetOperationProject.

The DataSource is provided by a Moltaro .NET package assembly.

Defines the logical type of a DataSource parameter.

A date range parameter.

A single date parameter.

A numeric parameter.

A text parameter.

A boolean parameter.

A single-value select parameter.

A multi-value select parameter.

A Moltaro user parameter.

A Moltaro role parameter.

A Boards module board parameter.

An entity definition parameter.

An entity instance parameter.

A logical scope parameter.

Defines the shape returned by a DataSource execution.

A single metric value.

A set of named metric values.

A bounded metric value with min/max semantics.

A paged table payload.

A time series payload.

A category series payload.

A list of records.

Defines a logical field value type in a DataSource output schema.

A string value.

A whole or floating numeric value.

A decimal numeric value.

A boolean value.

A date-only value.

A date-time value.

A duration value.

A percentage value.

An arbitrary JSON value.

Defines renderer families that can consume a DataSource output.

A key performance indicator renderer.

A gauge renderer.

A table renderer.

A line chart renderer.

A bar chart renderer.

A donut chart renderer.

A status list renderer.

A record list renderer.

Defines link target families that can be emitted by DataSources.

An entity instance target.

An entity list target.

A board target.

A board item target.

A WorkInbox notification target.

A WorkInbox attention signal target.

An operational metrics target.

A function run target.

An external URL target.

Defines the current execution mode requested by the host.

Normal runtime execution.

Preview execution from a designer or catalog surface.

Export-oriented execution.

Defines the minimum built-in workspace role required before executing a DataSource.

No built-in role requirement.

The actor must be the workspace owner or an administrator.

The actor must be the workspace owner, an administrator, or a configurator.

Defines sort direction for table and list DataSource requests.

Ascending sort order.

Descending sort order.

Provides execution identity, locale, paging, sorting, and trace context to a DataSource.

Represents a paging request for table and list DataSource outputs.

Represents a sort request for table and list DataSource outputs.

Represents a request for select-like parameter options.

Represents a flat or grouped select-like option set.

Gets an empty option set.

Creates a flat option set.

Creates a grouped option set.

Represents a group for select-like options.

Represents one select-like parameter option.

Represents the result of a DataSource execution.

Creates a DataSource result from a JSON-serializable payload.

Creates a metric result from a JSON-serializable payload.

Creates a metric set result from a JSON-serializable payload.

Creates a bounded metric result from a JSON-serializable payload.

Creates a table page result from a JSON-serializable payload.

Creates a time series result from a JSON-serializable payload.

Creates a category series result from a JSON-serializable payload.

Creates a record list result from a JSON-serializable payload.

Represents paging metadata returned by a table or list DataSource.

Represents a warning emitted by DataSource execution.

Represents a typed link emitted by DataSource execution.

Represents display text with an invariant default value and optional locale-specific translations.

The invariant default text. Optional locale-specific translations keyed by locale code.

Represents display text with an invariant default value and optional locale-specific translations.

The invariant default text. Optional locale-specific translations keyed by locale code.

The invariant default text.

Optional locale-specific translations keyed by locale code.

Creates display text from a plain invariant string.

The invariant display text. A text descriptor.

Marks a class as a Moltaro DataSource implementation that can be discovered by product, module, or customer extension hosts.

Initializes a new instance of the class.

A stable, globally unique identifier for the DataSource contract.

Gets the stable DataSource identifier used by persisted dashboard and report definitions.

Gets or sets an optional shorter key for authoring and catalog display.

Gets or sets the default display name shown in builders and catalogs.

Gets or sets the default description shown in builders and catalogs.

Gets or sets the owner module key when the DataSource belongs to a module.

Gets or sets whether the DataSource is enabled by default when discovered.

Convenience methods for Moltaro package DbContext instances.

Writes a trace-level developer-log entry.

The EF Core context type connected to the Moltaro workspace database. The EF Core context whose connection points at the Moltaro workspace database. Stable producer name for the entry, for example a package or integration name. Source-local category used for filtering and investigation. Human-readable diagnostic message. Optional structured diagnostic payload stored under the caller JSON node. When true, writes outside the current transaction so the entry survives rollback. Token that cancels the write operation.

Writes a debug-level developer-log entry.

Writes an information-level developer-log entry.

Writes a warning-level developer-log entry.

Writes an error-level developer-log entry.

The EF Core context type connected to the Moltaro workspace database. The EF Core context whose connection points at the Moltaro workspace database. Stable producer name for the entry, for example a package or integration name. Source-local category used for filtering and investigation. Human-readable diagnostic message. Optional exception captured by package or integration code. Optional structured diagnostic payload stored under the caller JSON node. When true, writes outside the current transaction so the entry survives rollback. Token that cancels the write operation.

Writes a critical-level developer-log entry.

The EF Core context type connected to the Moltaro workspace database. The EF Core context whose connection points at the Moltaro workspace database. Stable producer name for the entry, for example a package or integration name. Source-local category used for filtering and investigation. Human-readable diagnostic message. Optional exception captured by package or integration code. Optional structured diagnostic payload stored under the caller JSON node. When true, writes outside the current transaction so the entry survives rollback. Token that cancels the write operation.

Display-safe business event to append to an entity audit trail.

Short event title shown in entity history. Optional display-safe event message. Optional display-safe key-value details. Optional related entity references.

Display-safe business event to append to an entity audit trail.

Short event title shown in entity history. Optional display-safe event message. Optional display-safe key-value details. Optional related entity references.

Short event title shown in entity history.

Optional display-safe event message.

Optional display-safe key-value details.

Optional related entity references.

One display-safe business event value.

Stable value key. Human-readable value label. Display-safe value text or primitive value.

One display-safe business event value.

Stable value key. Human-readable value label. Display-safe value text or primitive value.

Stable value key.

Human-readable value label.

Display-safe value text or primitive value.

One entity related to a business event.

Stable id of the related entity definition. Related entity instance id. Optional display-safe relation label.

One entity related to a business event.

Stable id of the related entity definition. Related entity instance id. Optional display-safe relation label.

Stable id of the related entity definition.

Related entity instance id.

Optional display-safe relation label.

Base EF Core context for a trusted Moltaro .NET package.

Package contexts derive from this type so Moltaro can apply runtime conventions for package entities, table rows, principal projections, audit capture, number generation, and presentation columns.

Appends a display-safe business event to the audit trail for one entity instance.

Entity type that owns the audit trail. Target entity instance id. Business event payload to store. Cancellation token. A task that completes after the audit entry is written. Thrown when the target entity does not enable AuditTrail() or its audit table cannot be resolved.

Initializes a new Moltaro package context for design-time scenarios.

Initializes a new Moltaro package context with EF Core options supplied by the host.

EF Core context options.

Read-only projection of workspace users available to trusted package code.

Read-only projection of workspace roles available to trusted package code.

Read-only projection of workspace user-to-role assignments.

Read-only projection of workspace responsibility groups.

Read-only projection of workspace responsibility-group memberships.

Read-only projection of workspace geo zone sets.

Read-only projection of workspace geo zones.

Read-only projection of workspace geo zone geometry revisions.

Read-only projection of workspace geo Location source configuration.

Read-only projection of workspace materialized geo classification facts.

Read-only projection of workspace materialized geo classification matches.

Read-only projection of Moltaro file references.

Read-only projection of Moltaro file descriptors.

Read-only projection of Moltaro database file bodies.

Read-only projection of Moltaro comments.

Read-only projection of Moltaro comment relations.

Read-only projection of Moltaro file reference relations.

Read-only projection of Moltaro tags.

Configures package-owned EF Core entities.

EF Core model builder for the package context.

Applies Moltaro save behavior for saves executed inside the returned scope.

Save behavior and audit metadata options. A scope that restores the previous save context when disposed. Audit suppression is privileged behavior and requires .

Sets package-supplied Number text for a save that uses .

Sets package-supplied DisplayName and Subtitle for a save that uses .

Runs immediately before Moltaro applies system columns, audit, generated numbers, and runtime side effects.

Override this hook only for package-local normalization that must happen before the Moltaro save pipeline inspects changed entities. Do not perform external I/O from this hook.

Runs asynchronously immediately before Moltaro applies system columns, audit, generated numbers, and runtime side effects.

Token that cancels the save operation. A task that completes when pre-save package work has finished. The default implementation calls . Override this method when pre-save package work must call async database APIs.

Controls Moltaro system behavior for the next save operation executed inside a save context scope.

Creates save options with the source type used by audit metadata.

Source type written into audit metadata.

Optional source label written into audit metadata.

User that initiated the original operation before impersonation.

Correlation id written into audit metadata.

Effective actor user id used for CreatedBy/ModifiedBy and audit trail entries.

Function run id written into audit metadata.

Business function id written into audit metadata.

Business function version id written into audit metadata.

Business function version number written into audit metadata.

Controls generated textual Number behavior while preserving RawNumber.

Controls generated DisplayName and Subtitle behavior.

Controls audit trail writes.

Required reason when privileged behavior such as audit suppression is enabled.

Controls audit trail writes for a Moltaro save.

Write audit trail records normally.

Suppress audit trail records for an explicitly privileged operation.

Moltaro file body storage location.

Storage is not specified.

File content is stored in the workspace database.

File content is stored in Azure Blob Storage.

File content is stored in Amazon S3.

File content is stored in Google Cloud Storage.

File content is stored on the workspace local file system.

Read-only file descriptor projection available to trusted package code.

Stable file descriptor identifier.

Entity creation timestamp.

Entity last modification timestamp.

Soft-delete timestamp.

Original file name.

Optional file description.

File body storage location.

File size in bytes.

File MIME type.

Persisted content availability state.

Server-detected MIME type used for rendering and response metadata.

Inspected image width in pixels.

Inspected image height in pixels.

Immutable content generation.

Checksum covered by the successful inspection.

Content generation covered by the successful inspection.

SHA-256 checksum encoded as text.

Database file body id when storage type is database.

File body navigation when the query includes it.

External blob URI for cloud storage or relative path for local file-system storage.

User id that created the descriptor.

Created-by user navigation when the query includes it.

User id that last modified the descriptor.

Modified-by user navigation when the query includes it.

User id that deleted the descriptor.

Deleted-by user navigation when the query includes it.

Optimistic concurrency token.

Base class for package-owned Moltaro entity records.

Derived entities define package-owned business fields. Moltaro maintains the system columns on this base type during runtime saves.

Stable entity instance identifier.

Internal numeric record sequence used for Moltaro number generation and sorting.

Visible Moltaro record number.

Persisted presentation title computed by Moltaro presentation rules.

Persisted presentation subtitle computed by Moltaro presentation rules.

UTC timestamp when the record was created through Moltaro.

Workspace user id that created the record, when known.

UTC timestamp of the last Moltaro runtime modification.

Workspace user id that last modified the record, when known.

UTC timestamp used by Moltaro activity ordering.

UTC timestamp when the record was archived.

Workspace user id that archived the record, when known.

Optimistic concurrency token managed by Moltaro runtime saves.

Public contract used by product, package, and workspace code to publish resource events.

Publish a resource event.

Resource change event delivered to consumers.

User that caused the event, when known.

Correlation identifier that links this event to a command, request, or background operation.

Stable producer key, such as a module, package, operation project, or product component key.

Resource affected by the event.

Create, Update, Deleted, or Custom operation. Consumers can filter on these values, but producers can also use custom values for non-standard operations.

Optional producer-owned JSON details carried with the event.

Consumer filter. A null filter or null/empty collections match any value for that dimension.

Event types handled by the consumer.

Resource kinds handled by the consumer.

Resource module keys handled by the consumer.

Resource context ids handled by the consumer.

Request to publish a resource event.

User that caused the event, when known.

Correlation identifier that links this event to a command, request, or background operation.

Stable producer key, such as a module, package, operation project, or product component key.

Optional producer-owned JSON details carried with the event.

Result returned after a resource event publish request is accepted.

Base class for type-safe global Moltaro action functions.

The action input type declared by the package.

Validates global action input after platform schema validation and before the action is queued.

Typed action input supplied by the caller. Token that is signaled when the validation run should stop. A validation result. Return to allow queueing.

Runs the global action with strongly typed input.

Typed action input supplied by the caller. Token that is signaled when the action run should stop. The action result.

Base class for type-safe action functions targeting one entity instance.

The package entity type targeted by the action. The action input type declared by the package.

Validates action input for one target entity instance after platform schema validation and before queueing.

The target entity instance id. Typed action input supplied by the caller. Token that is signaled when the validation run should stop. A validation result. Return to allow queueing.

Runs the action for one target entity instance.

The target entity instance id. Typed action input supplied by the caller. Token that is signaled when the action run should stop. The action result.

Base class for type-safe action functions targeting explicit selected entity instances.

The package entity type targeted by the action. The action input type declared by the package.

Validates action input for selected entity instances after platform schema validation and before queueing.

The selected entity instance ids captured by the caller. Typed action input supplied by the caller. Token that is signaled when the validation run should stop. A validation result. Return to allow queueing.

Runs the action for the selected entity instances.

The selected entity instance ids captured by the caller. Typed action input supplied by the caller. Token that is signaled when the action run should stop. The action result.

Base class for type-safe action functions targeting an entity collection.

The package entity type targeted by the action. The action input type declared by the package.

Validates action input for an entity collection after platform schema validation and before queueing.

Typed action input supplied by the caller. Token that is signaled when the validation run should stop. A validation result. Return to allow queueing.

Runs the action for an entity collection.

Typed action input supplied by the caller. Token that is signaled when the action run should stop. The action result.

Builds the field schema, input form, and history card for an action input type.

Configured fields require public getters and must bind through a public set/init, an explicit JsonInclude setter, or a compatible JsonConstructor parameter. Action-input JSON names are platform-owned; renaming or suppressing configured properties is not supported. The action input CLR type.

Adds a scalar field bound to an input model property.

Adds an entity picker field bound to a string id property.

Adds a workspace user picker field bound to a string id property.

Adds a workspace role picker field bound to a string id property.

Adds a responsibility group picker field bound to a string id property.

Starts the input form definition used to collect action input.

Starts the history card definition used to display submitted action input.

Builds the input form layout for an action input type.

The action input CLR type.

Sets the display name of the input form.

Sets the preferred maximum form width in pixels.

Sets the desktop column count for the form layout.

Adds a form field bound to an input model property.

Adds static text to the input form.

Adds an alert block to the input form.

Builds the history card layout for submitted action input.

The action input CLR type.

Sets the display name of the history card.

Adds a tab to the history card.

Adds a card field bound to an input model property.

Adds static text to the history card.

Adds an alert block to the history card.

Configures one action input field.

Overrides the field key stored in action input metadata.

Sets helper text for the input field.

Marks the input field as required or optional.

Marks the input field as sensitive for operational display.

Treats the field as short text with an optional maximum length.

Treats the field as long text with an optional maximum length.

Treats the field as a Boolean value.

Sets the versioned form default for a Boolean action input field.

Treats the field as an integer with optional numeric bounds.

Treats the field as a decimal number with optional precision, scale, and bounds.

Treats the field as a date-only value.

Treats the field as a date and time value.

Treats the field as a time-only value.

Treats the field as a select option field. Set to when the CLR property and wire value contain multiple option keys.

Sets the versioned form default option key for a scalar select action input field.

Sets the non-empty, unique versioned form default option keys for a multi-select action input field.

Adds a static option to a select field.

Base class for action input form and card item builders.

The concrete builder type returned by fluent methods.

Sets a stable item id for the form or card item.

Sets the item sort order inside the form, card, or tab.

Sets the item label.

Sets helper text for the item.

Controls whether the item is visible.

Configures one field item in an action input form.

Sets the starting form column for the field item.

Sets how many form columns the field item spans.

Sets the preferred form editor for the field item.

Sets the preferred editor row count for multi-line editors.

Sets reference rendering metadata for picker fields.

Sets the lookup table selector using an explicit package table stable id.

Sets the lookup table selector using the primary table id inferred from the entity type.

Configures one text item in an action input form.

Sets the starting form column for the text item.

Sets how many form columns the text item spans.

Sets the visual text style.

Configures one alert item in an action input form.

Sets the starting form column for the alert item.

Sets how many form columns the alert item spans.

Sets the visual alert tone.

Sets the alert title.

Configures one field item in an action input history card.

Assigns the field item to a card tab.

Sets the preferred card renderer for the field item.

Sets reference rendering metadata for picker fields.

Configures one text item in an action input history card.

Assigns the text item to a card tab.

Sets the visual text style.

Configures one alert item in an action input history card.

Assigns the alert item to a card tab.

Sets the visual alert tone.

Sets the alert title.

Configures one tab in an action input history card.

Sets a stable tab item id.

Sets the tab sort order.

Marks an action function with the configuration type that describes its typed input schema and UI metadata.

Base class for action input schema, form, and history-card metadata.

Configures action input fields, form layout, and history card layout.

Builder used to declare the action input contract.

Empty typed input marker for action functions that do not collect user input.

Result returned by a Moltaro command function across the runtime bridge.

Command authors normally build results through the typed factories instead of constructing this type directly.

Indicates whether the command completed successfully.

Optional user-facing result or failure summary.

Optional JSON result payload returned to the caller.

Validation issues produced by the command. A non-empty list marks the invocation as a validation failure and is returned to the caller as field-level errors.

Creates a successful command result without a structured payload.

Optional result summary. A successful result.

Creates a successful command result with a structured JSON payload.

The JSON-serializable result payload type. Structured data returned to the caller. Optional human-readable result summary. A successful result with structured data.

Creates a failed command result.

Failure summary returned to the caller. A failed result.

Creates a command result that rejects the invocation with validation issues.

Validation issues returned to the caller as field-level errors. A validation-failure result.

Typed result returned by a Moltaro command function.

The JSON-serializable result payload type of the command.

Creates a successful command result with the typed payload.

Structured data returned to the caller. Optional human-readable result summary. A successful typed result.

Creates a failed command result.

Failure summary returned to the caller. A failed typed result.

Creates a command result that rejects the invocation with validation issues.

Validation issues returned to the caller as field-level errors. A validation-failure typed result.

Converts this typed result into the runtime bridge result.

The non-generic command result carried across the runtime bridge.

Base class for no-argument Moltaro command functions invoked synchronously through the authenticated commands API.

The JSON-serializable result payload type of the command.

Executes the command.

Token that is signaled when the command run should stop. The typed command result.

Base class for type-safe Moltaro command functions with runtime-supplied arguments, invoked synchronously through the authenticated commands API.

The JSON-serializable argument type expected by the command. The JSON-serializable result payload type of the command.

Executes the command with strongly typed arguments.

Arguments deserialized by the runtime before the command is called. Token that is signaled when the command run should stop. The typed command result.

Marks a public Moltaro package function and assigns its durable stable id.

This is the recommended attribute for new functions. It combines the durable function id and function metadata that legacy packages can also declare with separate [MoltaroId] and [Function] attributes.

Creates a Moltaro package function declaration.

Durable package-owned function id. Optional stable callable key. When omitted, the runtime uses as the callable key.

Optional stable callable key override. Leave this unset to use the function id.

Optional display name shown to administrators and configurators.

Optional short description shown to administrators and configurators.

Indicates whether the function is enabled when it is first applied from the package.

Marks a public Moltaro package function and assigns its stable package key.

Optional stable callable key. When omitted, the runtime uses the function's value as the callable key.

Marks a public Moltaro package function and assigns its stable package key.

Optional stable callable key. When omitted, the runtime uses the function's value as the callable key.

Optional stable callable key override. Leave this unset to use the function's Moltaro id.

Optional display name shown to administrators and configurators.

Optional short description shown to administrators and configurators.

Indicates whether the function is enabled when it is first applied from the package.

Requests that the runtime create a transaction around a function when no save-pipeline transaction is already active.

The requested transaction mode.

Requests that the runtime create a transaction around a function when no save-pipeline transaction is already active.

The requested transaction mode.

Requested transaction mode for this function.

Declares a package or NetOperationProject function as an inbound HTTP endpoint.

The callable endpoint key is the function key declared by or . The optional route can add descriptor-owned path segments after /api/workspace/inbound/{endpointKey}.

Creates an inbound HTTP endpoint declaration.

Optional descriptor-owned path pattern below the endpoint key. Leave empty when the key is the complete public address.

Optional descriptor-owned path pattern below the endpoint key.

HTTP methods accepted by the endpoint. Defaults to .

Request body parsing mode. Defaults to JSON.

Endpoint authentication mode. Defaults to workspace bearer tokens and service API keys.

Runtime actor mode. Defaults to the authenticated caller.

Header that carries the managed shared secret when is .

Header that carries the HMAC signature when is .

Header that carries the Unix timestamp used for HMAC replay protection.

Maximum accepted HMAC timestamp age in seconds.

Publishes a command function for synchronous invocation through the authenticated commands API.

The callable command key is the function key declared by or ; the public route is POST /api/workspace/commands/{functionKey}. Exactly one of or must be configured; publications without an access declaration are rejected at build and apply time.

Permission key required to invoke the command. The key is surfaced in the roles administration catalog so administrators can assign it to roles. Use a lowercase dotted identifier such as acme.commands.recalculate; the segment after the last dot becomes the catalog code and the leading segments become the catalog group.

Allows every authenticated workspace user to invoke the command instead of requiring . Anonymous invocation is never supported.

Optional synchronous execution timeout override in seconds, from 1 through 86400. When unset, the runtime action timeout setting applies. The effective timeout never exceeds the current runtime action timeout setting.

Publishes a Job-contract global function for asynchronous enqueue through the authenticated functions API.

The callable key is the function key declared by or ; the public route is POST /api/workspace/functions/{functionKey}/enqueue. Exactly one of or must be configured. Callers with access can also observe and cancel the resulting queued job.

Permission key required to enqueue the function and observe its jobs. The key is surfaced in the roles administration catalog so administrators can assign it to roles. Use a lowercase dotted identifier such as acme.commands.rebuild-index.

Allows every authenticated workspace user to enqueue the function instead of requiring . Anonymous invocation is never supported.

Optional queued execution timeout in seconds, from 1 through 86400. The value is captured on each API-enqueued job so retries keep the same timeout. When unset, the runtime Job timeout setting applies.

Binds an entity validation or mutation function to the entity save pipeline.

The entity operation that should invoke the function. Validation functions may bind to create, update, archive, restore, and delete. Mutation functions may bind to create and update before-save operations. The runtime validates these rules when a package is applied.

Binds an entity validation or mutation function to the entity save pipeline.

Entity save operation that invokes the function.

Optional stable binding identifier. Changing this value creates a different binding from the runtime's perspective.

Lower values run earlier within the same operation and function type.

Indicates whether the binding is enabled when first applied from the package.

Binds an entity mutation function to an entity trigger.

The entity operation that should emit the trigger. Trigger-bound mutation functions run after the triggering operation according to the runtime's trigger pipeline. Delete triggers receive detached snapshots because the deleted record may no longer exist in the database.

Binds an entity mutation function to an entity trigger.

Entity operation that emits the trigger.

Optional stable binding identifier. Changing this value creates a different binding from the runtime's perspective.

Lower values run earlier within the same trigger operation.

Indicates whether the binding is enabled when first applied from the package.

Convenience alias for .

The entity operation that should emit the trigger.

Convenience alias for .

The entity operation that should emit the trigger.

Base class for type-safe Moltaro entity validation functions.

The package entity type being validated.

Executes validation with strongly typed entity snapshots.

Detached snapshot before the operation. This is null only for create. The entity that is being validated. Token that is signaled when the function run should stop. The validation result.

Base class for type-safe Moltaro entity mutation functions.

The package entity type being mutated.

Mutates the current entity or related records with strongly typed inputs.

Detached snapshot before the operation. This is null only for create. The working entity for the operation. Token that is signaled when the function run should stop.

Base class for no-argument Moltaro global functions.

Executes the global function.

Token that is signaled when the function run should stop. The global function result.

Base class for type-safe Moltaro global functions with runtime-supplied arguments.

The JSON-serializable argument type expected by the function.

Executes the global function with strongly typed arguments.

Arguments deserialized by the runtime before the function is called. Token that is signaled when the function run should stop. The global function result.

Runtime context shared by Moltaro validation, mutation, and global functions.

The user who originally caused the operation, when the runtime can identify one. Schedule-triggered and system runs may not have an original user. The effective user for permission-sensitive runtime work, when known. The operation or invocation source that caused this function run. The runtime correlation id shared by function runs, audit, and developer logs. The persisted function run id, when this invocation has one. The persisted function id for this invocation. The persisted function version id for this invocation. The published function version number for this invocation. The callable package-owned function key.

Runtime context shared by Moltaro validation, mutation, and global functions.

The user who originally caused the operation, when the runtime can identify one. Schedule-triggered and system runs may not have an original user.

The effective user for permission-sensitive runtime work, when known.

The operation or invocation source that caused this function run.

The runtime correlation id shared by function runs, audit, and developer logs.

The persisted function run id, when this invocation has one.

The persisted function id for this invocation.

The persisted function version id for this invocation.

The published function version number for this invocation.

The callable package-owned function key.

Localizable user-facing text emitted by package functions.

Required fallback message. Package authors should normally write this in English. Optional locale-specific translations keyed by locale code, for example uk, de, pl, or es.

Localizable user-facing text emitted by package functions.

Required fallback message. Package authors should normally write this in English. Optional locale-specific translations keyed by locale code, for example uk, de, pl, or es.

Required fallback message. Package authors should normally write this in English.

Optional locale-specific translations keyed by locale code, for example uk, de, pl, or es.

Allows plain strings to be used wherever a localized Moltaro message is expected.

The fallback message.

Resolves the best message for the provided locale.

Workspace locale code. When missing or untranslated, is returned. The translated message when available; otherwise .

A single validation issue returned by a Moltaro validation function.

User-facing validation message with an optional package-owned translation map. Optional entity field key. Leave this null for record-level validation issues. Optional stable machine-readable code. This is useful for tests, analytics, and client behavior, but it is not a localization key.

A single validation issue returned by a Moltaro validation function.

User-facing validation message with an optional package-owned translation map.

Optional entity field key. Leave this null for record-level validation issues.

Optional stable machine-readable code. This is useful for tests, analytics, and client behavior, but it is not a localization key.

Result returned by a Moltaro validation function.

Validation issues produced by the function.

Result returned by a Moltaro validation function.

Validation issues produced by the function.

A reusable successful validation result.

Indicates whether the result contains no validation issues.

Creates a validation result with one or more issues.

The issues returned by the function. A validation result containing the supplied issues.

Result returned by a Moltaro global function.

Indicates whether the global function completed successfully.

Indicates that the function intentionally skipped work without failing.

Optional user-facing or operator-facing result summary.

Optional JSON result payload.

Creates a successful global function result.

Optional result summary. A successful result.

Creates a successful global function result with a structured JSON payload.

The JSON-serializable result payload type. Structured data returned by the function. Optional human-readable result summary. A successful result with structured data.

Creates a skipped global function result.

Optional skip summary. A skipped result.

Creates a skipped global function result with a structured JSON payload.

The JSON-serializable result payload type. Structured data returned by the function. Optional human-readable skip summary. A skipped result with structured data.

Creates a failed global function result.

Failure summary. A failed result.

Describes the operation that caused a Moltaro function invocation.

Entity save functions receive the entity operation that is being applied. Global functions receive the invocation source, such as or .

A record is being created.

An existing record is being updated.

A record is being deleted.

A record is being archived.

An archived record is being restored.

The function was invoked by an explicit user action.

The function was invoked by a CRON schedule.

The function was invoked manually, usually by an administrator or configurator.

The function was invoked by a runtime trigger.

The function was invoked by an inbound HTTP endpoint.

The function was invoked through the authenticated commands API.

The runtime could not classify the invocation more precisely.

HTTP methods supported by Moltaro HTTP endpoint functions.

No HTTP method is enabled.

HTTP GET.

HTTP POST.

HTTP PUT.

HTTP PATCH.

HTTP DELETE.

All HTTP methods supported by V1 endpoint functions.

Controls how Moltaro parses the request body before invoking an HTTP endpoint function.

Parse application/json into the typed body model or expose it as JSON.

Expose the exact raw request body bytes and text to the function.

Parse application/x-www-form-urlencoded fields without file uploads.

Reserved for a future multipart/form-data version. V1 analyzers reject this value.

Authentication mode for an inbound Moltaro HTTP endpoint.

Use the workspace bearer token scheme for user tokens and service API keys.

Allow anonymous inbound calls after the endpoint is explicitly enabled by an administrator.

Verify a managed endpoint secret passed in a configured request header.

Verify a managed endpoint secret through an HMAC signature over the exact raw body.

Controls which actor identity is used when an inbound endpoint runs.

Use the authenticated user or service principal from the workspace bearer token.

Use the service user configured on the endpoint settings.

Controls whether a global function runs inside a database transaction created by the runtime.

Entity save validation and mutation functions run inside the save pipeline transaction. This setting is primarily for global functions and trigger handlers that need atomic database writes. It is not a sandbox: trusted package code can still perform external side effects that the database transaction cannot roll back.

The runtime does not create a transaction solely for this function.

The runtime creates a transaction around the function invocation when no ambient transaction is present.

Action input field type values used by generated descriptors.

Short string input field.

Long text input field.

Boolean input field.

Integer input field.

Decimal input field.

Date-only input field.

Date-time input field.

Time-only input field.

Select input field.

Entity instance reference input field.

User principal input field.

Role principal input field.

Responsibility group input field.

Base class for Moltaro HTTP endpoint functions that work with raw, JSON, or form request data.

Executes the HTTP endpoint function.

Inbound HTTP request data prepared by the Moltaro runtime. Token that is signaled when the endpoint run should stop. HTTP response returned to the caller.

Base class for Moltaro HTTP endpoint functions that receive a strongly typed JSON body model.

The JSON-serializable body model expected by the endpoint.

Executes the HTTP endpoint function with a strongly typed request body.

Inbound HTTP request data prepared by the Moltaro runtime. Token that is signaled when the endpoint run should stop. HTTP response returned to the caller.

Request data exposed to Moltaro HTTP endpoint functions.

Creates an HTTP request model.

Function execution context for this request.

HTTP method, for example GET or POST.

Descriptor-owned endpoint key from the public inbound route.

Path segments after the endpoint key.

Request content type, when supplied by the caller.

Exact raw request body bytes captured before parsing.

UTF-8 decoded request body text.

Parsed JSON body for JSON endpoints without a typed body model.

Request headers exposed to the handler. Values may contain secrets; do not write them to logs.

Query values exposed to the handler. Values may contain secrets; do not write them to logs.

Parsed form-url-encoded values. Values may contain secrets; do not write them to logs.

Returns the first header value for a key, when present.

Returns all header values for a key.

Returns the first query value for a key, when present.

Returns all query values for a key.

Returns the first form value for a key, when present.

Returns all form values for a key.

Request data exposed to typed JSON Moltaro HTTP endpoint functions.

The deserialized request body model.

Creates a typed HTTP request model.

Typed request body deserialized by the runtime.

HTTP response returned by Moltaro HTTP endpoint functions.

HTTP status code returned to the caller.

Response content type.

Response body bytes.

Additional response headers.

Creates a response from UTF-8 text.

Creates a JSON response from a serializable value.

Creates a binary response.

Creates a response with no body.

Creates a 200 OK text response.

Resolves workspace-managed, write-only secrets for trusted C# business logic. Inject this service through the function constructor. Any trusted C# code that knows a key can resolve its active value; resolution is not bound to a function or version. Never log, persist, return, or transmit a value except to its intended external service.

The runtime captures one immutable snapshot before constructing the function. Calls are synchronous in-memory lookups, and lifecycle changes become visible to a later invocation.

Returns an active secret value or throws a stable unavailable exception.

Exact managed-secret key. Matching is case-insensitive. The secret value captured in the current invocation snapshot. The key is empty, has leading or trailing whitespace, or contains a null character. The secret is missing, disabled, or retired.

Tries to return an active secret value without throwing for unavailable states.

Exact managed-secret key. Matching is case-insensitive. The snapshot value when available; otherwise . when the secret is available; otherwise . The key is empty, has leading or trailing whitespace, or contains a null character.

Resolves stable function keys from Moltaro function CLR types.

Resolves the stable function key for the supplied function type.

The Moltaro function type. The configured function key.

Resolves the stable function key for the supplied function type.

The Moltaro function CLR type. The configured function key.

Declares a Moltaro NetOperationProject assembly.

Generated workspace contract DbContext type used by the project.

Declares a Moltaro NetOperationProject assembly.

Generated workspace contract DbContext type used by the project.

Gets the generated workspace contract DbContext type used by the project.

Declares the startup type used to register NetOperationProject services.

NetOperationProject startup type.

Declares the startup type used to register NetOperationProject services.

NetOperationProject startup type.

Gets the NetOperationProject startup type.

Startup contract for trusted Moltaro NetOperationProject assemblies.

Registers project-owned business logic services.

Service collection provided by the Moltaro host.

Workspace-local context exposed to trusted Moltaro package functions.

Workspace identifier. Workspace route/name key. Workspace display name. Workspace locale code. Workspace time-zone identifier. Workspace date format. Workspace time format. Workspace date-time format. Workspace region code. Workspace default phone code.

Workspace-local context exposed to trusted Moltaro package functions.

Workspace identifier.

Workspace route/name key.

Workspace display name.

Workspace locale code.

Workspace time-zone identifier.

Workspace date format.

Workspace time format.

Workspace date-time format.

Workspace region code.

Workspace default phone code.

Stable outcome codes returned when a managed secret cannot be resolved.

No managed secret exists for the requested key.

The managed secret is disabled.

The managed secret is permanently retired.

Indicates that a managed secret is missing, disabled, or retired.

Creates an exception with a stable outcome code and requested key.

Stable unavailable outcome code.

Requested secret key.

Dynamic Entity audit operation kind.

Entity instance was created.

Entity instance fields were updated.

Entity instance assignment state changed.

Entity instance was archived.

Entity instance was restored.

Entity instance was deleted.

Display-safe business event.

Historical audit import request for a dynamic Entity instance.

Display-safe field change imported into a dynamic Entity audit row.

Display-safe business event for a dynamic Entity instance.

Short event title. Optional event message. Display-safe event values. Related entity references.

Display-safe business event for a dynamic Entity instance.

Short event title. Optional event message. Display-safe event values. Related entity references.

Short event title.

Optional event message.

Display-safe event values.

Related entity references.

One display-safe business event value.

Stable value key. Human-readable value label. Display-safe value text.

One display-safe business event value.

Stable value key. Human-readable value label. Display-safe value text.

Stable value key.

Human-readable value label.

Display-safe value text.

One entity related to a dynamic Entity business event.

Stable id of the related entity definition. Related entity instance id. Optional relation label.

One entity related to a dynamic Entity business event.

Stable id of the related entity definition. Related entity instance id. Optional relation label.

Stable id of the related entity definition.

Related entity instance id.

Optional relation label.

Source metadata captured for one dynamic Entity business event.

Mutation source category such as User, Function, or a module key. Human-readable source label. First contributing business-function run identifier, when applicable. First contributing business-function identifier, when applicable. First contributing business-function version identifier, when applicable. First contributing business-function version number, when applicable. Interactive user that initiated the mutation chain, when any. Correlation identifier linking related operations. Resolved user login/name for , when available.

Source metadata captured for one dynamic Entity business event.

Mutation source category such as User, Function, or a module key.

Human-readable source label.

First contributing business-function run identifier, when applicable.

First contributing business-function identifier, when applicable.

First contributing business-function version identifier, when applicable.

First contributing business-function version number, when applicable.

Interactive user that initiated the mutation chain, when any.

Correlation identifier linking related operations.

Resolved user login/name for , when available.

Reference to one dynamic entity instance.

Key for one dynamic entity instance reference.

Stable dictionary key.

Build a stable dictionary key.

One step in a dynamic entity relationship path.

Direction for traversing one dynamic entity reference field step.

Imports historical audit entries into dynamic Entity audit tables.

Import one historical audit entry into an existing dynamic Entity instance audit trail.

Historical audit import request. Cancellation token. The stable audit row id when successful.

Writes display-safe business events into dynamic Entity audit tables.

Append one business event to an existing dynamic Entity instance audit trail.

Target EntityDefinition id. Target Entity instance id. User id written as the audit actor. Business event payload to store. Optional source metadata. Cancellation token. The inserted audit row id when successful.

Query service for resolving and traversing Moltaro dynamic entity records.

Resolve one dynamic entity reference.

Resolve many dynamic entity references.

Check whether all target ids are reachable from one source id through a path.

Check whether one target id is covered by any selected source reference through a path.

Runtime clock for trusted module package services.

Return the current UTC instant.

Return the workspace time zone id.

Return the current instant in the workspace time zone.

Return the current date in the workspace time zone.

Convert a UTC instant to the workspace time zone.

Convert a workspace-local instant to UTC.

Describes one package domain rule violation without depending on API, localization, or validation frameworks.

Stable machine-readable violation code. Logical field that caused the violation. English diagnostic message intended for developers and logs.

Describes one package domain rule violation without depending on API, localization, or validation frameworks.

Stable machine-readable violation code. Logical field that caused the violation. English diagnostic message intended for developers and logs.

Stable machine-readable violation code.

Logical field that caused the violation.

English diagnostic message intended for developers and logs.

Reports safe, structured pre-commit failures that rejected an Entity save.

Creates a rejected-save exception with safe runtime errors.

Gets the safe failures that rejected the save.

Runtime error classification used by module package services and host adapters.

Runtime error emitted by module package services.

Stable machine-readable error code. Error classification for host adapters. Optional public request field that caused the error.

Runtime error emitted by module package services.

Stable machine-readable error code. Error classification for host adapters. Optional public request field that caused the error.

Stable machine-readable error code.

Error classification for host adapters.

Optional public request field that caused the error.

Optional already-localized safe message supplied by a trusted runtime boundary.

Optional exact operation or resource target associated with the error.

Optional stable diagnostic context that host adapters may preserve in their public error contract.

Result contract emitted by module package runtime services.

Payload type. True when the operation succeeded. Operation payload. Operation errors.

Result contract emitted by module package runtime services.

Payload type. True when the operation succeeded. Operation payload. Operation errors.

True when the operation succeeded.

Operation payload.

Operation errors.

Create a successful runtime result.

Create a failed runtime result.

Throws a bounded SDK exception when the runtime operation failed, preserving the first platform error code and its trusted safe diagnostic context.

Moltaro workspace user type.

Workspace owner.

Regular interactive workspace user.

Service account for integrations.

Stable identity of one Moltaro resource instance.

The identity separates four concepts that must not be mixed: is the owner namespace, for example core.entity, Boards, or a package module key. is the concrete resource family inside the module, for example EntityInstance, BoardItem, or a package-owned resource kind. is the parent context id used for filtering, for example an entity definition id, board id, entitlement plan id, or workspace for workspace-level resources. is the affected object id, for example an entity instance id, board item id, entitlement id, role id, or user id. Examples: Entity instance Order/order-1 is core.entity + EntityInstance + Order + order-1. Board item item-1 on board support is Boards + BoardItem + support + item-1. Role manager is core.security + Role + workspace + manager.

Stable identity of one Moltaro resource instance.

Create an entity-instance resource identity.

becomes . becomes .

Create a board-item resource identity.

becomes so consumers can filter by a concrete board. becomes .

Create an entitlement resource identity.

becomes . becomes .

Create an attention-signal resource identity.

Attention signals are workspace-level resources in the initial model, so is .

Create a workspace role resource identity.

Roles are workspace-level resources, so is and is .

Create a workspace user resource identity.

Users are workspace-level resources, so is and is .

Create a module or package resource identity.

Return this identity with string components trimmed.

Built-in resource kind keys used by Moltaro resource identities.

Resource kinds are strings, not an enum, because package and customer modules may publish their own resource families without changing Moltaro core code.

Dynamic or package entity instance.

Boards module board item.

Boards module board status.

Entitlement Operations issued entitlement.

WorkInbox attention signal.

Workspace role.

Workspace user.

Stable module keys used by Moltaro resource identities.

Core entity-instance resource module key.

Core security resource module key.

Boards module key.

Entitlement Operations module key.

Core-backed WorkInbox module key.