All Classes and Interfaces
Class
Description
Acknowledge options for a currently leased message.
Ack result.
Immutable identity for an activation operation.
Immutable activation planning options.
Stable descriptor derived from annotation-first application metadata.
Stable descriptor derived from an annotation-first service class.
Stable descriptor derived from an annotated service method.
Raft-like AppendEntries request.
Raft-like AppendEntries response.
Append options.
Immutable activation status snapshot.
Immutable activation request.
Immutable artifact descriptor inside or outside an application bundle.
Immutable handle to a ZIP-compatible
.j7m application bundle.Immutable compatibility report for a target runtime.
Safe capabilities supplied to application lifecycle hooks.
Stable application or tenant context identifier used by resource policies.
Immutable repository coordinate for one exact application version.
Transport-neutral deployer API for packaging, repository deployment, and live activation.
Immutable activation plan.
Immutable result for deploy, deactivate, unload, and unsupported lifecycle operations.
Immutable descriptor combining manifest and bundle artifacts.
Immutable logical application identifier without a version.
Immutable identity for application code and metadata.
Immutable runtime-local id for one activated application instance.
Immutable identity for one active application instance in one runtime.
Immutable parsed application manifest.
Immutable JPMS module declaration.
Immutable resource declaration.
Immutable security declaration.
Immutable service declaration.
Promotion lifecycle state for repository environment markers.
Immutable query for active applications.
Application repository contract.
Immutable local repository status.
Immutable rollback plan metadata.
Lifecycle states for packaging, deployment, activation, stop, and unload.
Structured verification result for manifests and bundles.
Immutable application version string.
Declares a managed logical asynchronous result, encoded as its payload rather than a future object.
Finite logical result shape for an asynchronous remote method.
Future-like handle for asynchronous workload or invocation results.
Marks a service type or method as carrying audit policy metadata.
Immutable audit event with bounded public text.
Safe audit publisher exposed to application lifecycle code.
Immutable authorization decision.
Thread-safe authorization policy SPI.
Declares method-level admission metadata for overload handling.
Marks stream or task code as honoring middleware backpressure signals.
Backpressure behavior requested by streaming or asynchronous workloads.
Backpressure behavior requested by the caller or selected by policy.
Extension hook for runtime backpressure decisions.
Marks an optional lightweight benchmark method.
Mandatory trusted-host candidate admission.
Full candidate observation, not an event delta or an authorization grant.
Host-owned finite candidate feed.
Host-owned exact-reference connector.
Immutable host-owned limits and selection for one live binding; annotation policy IDs reference
instances of this value.
Supported deterministic selection policies.
Explicit unavailable behavior; optional results never manufacture a null business proxy.
Opt-in binding refresh; selecting another target never replays an in-flight invocation.
Immutable typed refresh observation without callback payloads or caller credentials.
Selects a host-owned dependency admission budget held until actual physical completion.
Host-local named dependency budget, shared by matching exports in one declared tenant.
Marks an interface or implementation as intended to be passed by remote reference.
Immutable caller identity snapshot exposed to application code.
Declares application cooperation with the host invocation cancellation signal.
Invoker used by fan-out and scatter-gather helpers.
Captured stdout/stderr summary.
Options for compare-and-set operations.
Result of a compare-and-set operation.
Causal relationship metadata for root and child invocations.
Marks a checkpoint hook for long-running work.
Selects a host-owned client connection-availability breaker; business errors do not open it.
Finite host-owned client connection breaker policy, independent of target incarnation.
Extension hook for class-loader isolation policy.
Trusted-host attempt closure for one pinned logical call.
Immutable trusted-host description of one logical dependency call.
Trusted host-installed dependency-call interceptor; application annotations never install it.
Finite trusted-host limits for optional pre-delivery retry.
Thread-safe SPI for CMDB or service-inventory export.
Context supplied to value codecs for remote-reference conversion.
Committed replicated log index.
Declares a method as compensation for a named saga step.
Safe exception for compliance evidence and report operations.
Named conservative compliance profile.
Immutable compliance evidence report.
Scope used when collecting evidence or generating a report.
Marks a service type or method as requiring confidential handling metadata.
Stable typed configuration provider.
One atomically observed typed configuration value and its source version.
Binds a public immutable configuration record to one validated configuration snapshot.
Host-configured source of complete versioned configuration snapshots.
Complete source snapshot, not a patch.
Read-only application configuration view.
Injects one value from the safe application configuration view.
Opaque command payload for the replicated metadata log.
Result of submitting a command to the replicated log.
Membership configuration change descriptor.
Fixed consensus group configuration.
Consensus-specific middleware exception with safe diagnostics.
Stable identifier for a consensus group.
Replicated log entry.
Redacted public status metadata for a consensus log entry.
Fixed membership entry for a consensus node.
Immutable fixed membership set.
Safe consensus metrics snapshot.
Stable identifier for a consensus node.
Durable consensus recovery report.
Raft-like node role.
Deterministic consensus safety invariant report.
Local Raft-like replicated log service for J7M platform metadata.
Deterministic simulation evidence.
Snapshot payload container for future snapshot installation support.
Snapshot metadata.
Immutable, redacted consensus node state snapshot.
Safe group status snapshot.
Monotonic Raft-like term.
Shared validation helpers for consensus API value objects.
Consumer group identity.
Durable queue consumer identity.
Assessment result for one control.
Evidence record collected for a control assessment.
Names a compliance or assurance framework used for evidence mapping.
Stable identifier for a compliance control or implementation objective.
Describes where and how J7M implements one compliance objective.
Maps one local implementation objective to one or more framework controls.
Machine-readable compliance requirement.
Conservative implementation or assessment state for one mapped control.
Safe key for local coordination metadata.
Bounded opaque coordination metadata value.
Monotonic version for a coordinate key.
Callback for best-effort runtime coordination notifications.
Safe coordination audit event.
Stable public exception for coordination failures.
Immutable coordination metrics snapshot.
Safe report for durable coordination recovery.
Local first-party coordination and membership service.
Public redacted status of a coordination service.
Correlation metadata propagated across nested invocations.
CPU budget hook for isolation status.
Immutable public credential descriptor.
Credential provider and rotation source.
Listener for credential rotation.
Immutable credential snapshot.
Injects the current safe application context.
Injects the current safe invocation context.
Injects the current caller principal from the safe invocation context.
Cursor options.
Declares a named, host-configured endpoint preference without granting routing authority.
Immutable deactivation options.
Declares a method as a dead-letter handling hook.
Dead-letter routing options.
Safe dead-letter metadata.
Declares the default invocation deadline for a service method.
Non-payload metadata recorded for a dedupe key.
Explicit duplicate-detection key.
Result of duplicate detection for one dedupe key.
Contract for duplicate detection stores.
Read-only status for a dedupe store.
Selects a host-installed durable invocation policy for one public method.
Not-before delivery timestamp.
Transport-neutral delivery mode requested for one invocation.
Delivery semantics selected for an invocation.
Declared delivery semantics for a submitted workload.
Immutable identity for a repository deployment operation.
Immutable deploy options.
Immutable public discovery event for admin/status surfaces.
Bounded options for discovery operations.
Identifies how a registry record or peer status was discovered.
Immutable discovery statistics snapshot.
Marks a drain hook used before shutdown or maintenance.
Duplicate handling policy for a dedupe key.
Declares one finite POJO durable job entry for an explicitly installed trusted host backend.
Thread-safe append-only durable log contract.
Durable-log middleware exception with redacted public message text.
Stable identifier for a durable operation in later reliability phases.
Local durable queue contract for Phase 6.3 messaging primitives.
Declares a method as a durable queue consumer handler.
Transport-neutral encoded value.
Options controlling durable queue enqueue behavior.
Enqueue result.
Safe status snapshot for an enterprise integration adapter.
Environment exposure policy.
Environment variable rule.
Declares an activation-owned durable event handler registered by a trusted host adapter.
Thread-safe SPI for collecting compliance evidence.
Thread-safe evidence exporter SPI.
Supported evidence export formats.
Extension hook for execution isolation policy.
Immutable transport export descriptor for one object.
Transport-owned export handle.
Immutable options used when exporting an object.
Fan-out request over multiple candidate references.
Result of a fan-out operation.
Monotonic token issued by a named fencing authority for a protected scope.
Monotonic fencing token associated with task lease ownership.
Filesystem operation class evaluated by
FileSystemPolicy.Extension hook for file-system access policy.
Filesystem policy for J7M-provided access checks and process working directory validation.
Filesystem access rule evaluated against normalized paths.
Durable-log sync policy.
Thread-safe SPI for external GRC evidence repositories.
Baseline group commit policy.
Marks a no-argument method that reports component health.
Heartbeat submitted by a coordination member.
Timing options for membership liveness.
Result of recording a heartbeat.
Declares that a service or method participates in J7M high-availability
routing.
Identifies the stable logical-operation key parameter of a deduplicated public method.
Explicit caller-supplied idempotency key.
Marks a service method as safe to retry when runtime policy allows retry.
Durable inbox duplicate suppression contract.
Inbox duplicate decision.
Durable inbox duplicate suppression entry.
Declares that a method handles messages protected by inbox duplicate
suppression.
Inbox duplicate-suppression options.
Inbox duplicate suppression status.
Marks a no-argument lifecycle method invoked before startup.
Requests J7M-native dependency injection.
Immutable key used to resolve one J7M-native injected dependency.
Safe diagnostic emitted by the J7M-native injector.
Immutable public status for an application injection graph.
Snapshot installation request.
Snapshot installation response.
Immutable status of one exported runtime object.
Application identity visible inside a current invocation.
Host-only invocation input established after transport authentication and authorization.
Trusted transport cancellation signal; registration never grants authority or promises undo.
Trusted export owner factory installed before publication, never through wire options.
Host-owned physical lifetime spanning decode, root invocation, tracked work and encoding.
Safe current invocation context exposed to application service code.
Host-owned controls for one managed invocation, safe to consult across its asynchronous work.
Immutable metadata captured for one completed invocation.
Immutable options for one method invocation.
Typed reliability metadata carried through invocation options.
Host-local logical outcome passed only to trusted result finalizers, never serialized.
Trusted host continuation after actual user-work settlement and before logical reply encoding.
Security identity visible inside a current invocation.
Bounded data-only W3C parent context for host-tracked work and generic remote hops.
Thread-confined restoration handle; it grants no host invocation ownership.
Safe audit event emitted by isolation providers.
Public isolation failure with stable middleware error-code mapping.
Live handle for a submitted isolated execution.
Stable identifier for one isolated execution attempt.
Request to run or evaluate isolated work.
Terminal or current result for an isolated execution.
Lifecycle state of an isolated execution.
Redacted live status for one isolated execution.
Safe health summary for an isolation provider.
Provider metrics snapshot.
Requested execution mode for an isolation request.
Complete policy set for an isolated execution.
Safe policy decision returned by an isolation provider.
Safe policy violation evidence.
Policy violation categories emitted by isolation providers.
Redacted handle summary for a local child process.
Child-process command specification.
Redacted child-process status.
Selects a named J7M isolation profile for an application component or
service method.
Reusable isolation policy and budget bundle.
Stable identifier for a reusable isolation profile.
First-party J7M isolation provider SPI.
Stable identifier for an isolation provider instance.
Identifies the implementation family behind an isolation provider.
Startup cleanup and recovery summary for an isolation provider.
Safe description of an application, task, or principal being isolated.
Stable identifier for the application, task, or caller being isolated.
Declares an annotation-first managed J7M application entry point.
Managed J7M application lifecycle contract.
Marks an application-owned class as eligible for J7M-native injection.
Accessor for the current application invocation context.
Scope returned by
J7mContext.open(InvocationContext).J7M-native application component injector.
Requests an application-scoped J7M capability such as a durable queue,
coordination service, saga service, isolation provider, audit publisher, or
metrics publisher.
Declares an application service that can be exported by the J7M application
platform.
Selects a trusted host's H2 TCP local transaction on one owned JDBC Connection.
Options for joining local coordination membership.
Result of a member join.
Admits an explicitly invoked activity only after acquiring its host-configured leadership lease.
Batch of leased messages.
Successful lease grant snapshot.
Acquires a host-configured durable lease before entering an actual managed invocation.
Stable identifier for a concrete lease grant.
Visibility lease identifier.
Stable name for an exclusive coordination lease.
Options for acquiring a lease.
Lease request options.
Identity of the worker or runtime that currently owns a task lease.
Result of a lease release.
Result of renewing a lease.
Public lifecycle state for a lease.
Immutable public status for a lease.
Options for explicitly leaving membership.
Result of an explicit member leave.
Marks a service or method as local-only for Phase 1 metadata purposes.
Immutable append result.
Corruption finding with redacted path text.
Recovery action for corruption or torn tail records.
Closeable deterministic durable-log cursor.
Non-negative replicated log index.
Record integrity policy.
Durable-log metrics snapshot.
Monotonic per-stream durable-log offset.
Immutable durable-log record payload plus deterministic header.
Immutable deterministic durable-log record header.
Durable-log record type.
Durable-log recovery report.
Monotonic physical segment identifier.
Snapshot marker metadata written to the log.
Durable-log status snapshot.
Stable logical durable-log stream identifier.
Per-stream status.
Explicitly declares long-running work admitted under a finite host calling profile.
Immutable options for registry-backed lookup and list operations.
Host-only callable for one exact activation generation; it is not a wire DTO or authority token.
Generated direct-access construction plan; component metadata must remain immutable.
Finite generated component metadata supplied explicitly or through a declared module service.
Finite declared dependency edge in a generated component graph.
Generated direct-call host adapter for an ordinary application component.
Generated finite host-only callbacks for optional resource, worker and subscription adapters.
Finite generated declaration consumed only by an explicitly installed trusted host factory.
Finite generated direct-access job and safe-point hooks, consumed by a trusted job factory.
Ordered managed activation lifecycle phases; no thread interruption or forced stop is implied.
Internal component Java method signature emitted in a versioned component index.
Generated direct-access plan for a deterministic config-only POJO partition reducer.
Internal generated identity for one explicitly declared host probe, not a wire service contract.
Host-only operational probe purpose; neither kind grants remote invocation rights.
A lazy managed dependency without a mandatory Jakarta dependency.
Exact immutable qualifier identity produced by a generated component index.
Dependency access supplied only to a generated creator/injector.
Complete public method identity for export, policy and durable integration.
Safe endpoint descriptor advertised by a coordination member.
Stable member identifier used by the local coordination service.
Immutable public identity for a coordination member.
Deterministic liveness state derived from joins, leaves, and heartbeats.
Local role declared by a coordination member.
Query options for membership views.
Immutable membership snapshot.
Snapshot of one member in a membership view.
Memory budget hook for isolation status.
Message plus durable delivery metadata.
Safe public metadata attached to a durable queue message.
Durable message identifier.
Leased message returned to a consumer.
Message priority, where larger values lease first.
Durable queue message state.
Messaging exception mapped to stable middleware error codes.
Messaging recovery report.
Stable identity of one Java interface method.
Safe metrics publisher exposed to application lifecycle code.
Stable error codes returned by the middleware public API.
Base unchecked exception for all public middleware failures.
Thread-safe public entry point for exporting and locating middleware objects.
Monotonic epoch within a named authority and scope.
Negative acknowledge options.
Nack result.
Qualifies an injected dependency by stable logical name.
Deterministic network egress policy.
Extension hook for network egress policy.
Network egress rule evaluated without requiring external network access.
Marks a service method as unsafe for automatic retry.
Prevents automatic remote export of values of the annotated type, method, or
parameter.
Public capability result for the Phase 7.8 admin contract.
Shared public envelope for one typed admin operation request.
Shared public envelope for one typed admin operation result.
Stable public constants for the Phase 7.8 nugget administration contract.
Allowlisted public query and deterministic ordering fields.
Stable public operation families for the nugget administration contract.
Exact payload binding for one operation-family request or result DTO.
Common public outcome vocabulary for nugget administration results.
Common bounded query model for public nugget administration collections.
Public exact-match filter.
Public collection page metadata.
Public sort clause.
Shared request context for public nugget administration operations.
Common public result header for admin command and query envelopes.
Headless nugget administration admission service.
Stable public sort direction.
Public lifecycle state of the headless nugget administration service.
Public target identity for an admin request.
UI-neutral application lifecycle contracts for nugget administration.
Application lifecycle action requested through nugget administration.
Stable public lifecycle outcome vocabulary.
Headless lifecycle request metadata.
Safe lifecycle operation result.
Stable, redacted reason category for a failed nugget PIN admission attempt.
Stable outcome of a nugget PIN admission request.
UI-neutral metadata for one nugget PIN admission request.
Safe, immutable result of a nugget PIN admission attempt.
Coarse source class for PIN admission throttling and audit.
Public nugget operation capability.
Safe public configuration summary for nugget administration.
UI-neutral nugget drain, shutdown, and self-termination contracts.
Nugget-level control action.
Server-issued confirmation challenge metadata.
Requested control mode.
Stable public nugget-control outcome vocabulary.
Nugget-control request metadata.
Safe nugget-control result.
Public UI-neutral nugget discovery contracts.
Safe protocol compatibility summary.
Explicit configured target.
Safe endpoint descriptor.
Discovery query.
Safe minimal discovery record.
Selector resolution result.
Resolution outcome.
Discovery collection result.
Target selector for future CLI and automation use.
Selector type for headless target resolution.
Discovery source category in descending trust priority.
Public discovery record status.
Safe discovery service status.
Headless nugget discovery service.
Immutable process-level identity of one J7M nugget.
Public UI-neutral contracts for read-only nugget introspection.
Application detail projection.
Application summary projection.
Stable component availability categories.
Read-only operation category used for authorization and audit.
Bounded collection result.
Component status summary.
Disk health vocabulary.
Disk/storage root query.
Disk/storage root summary.
JVM and process environment summary.
Stable health vocabulary.
Health response.
Safe key/value pair.
Stable metric entry.
Metrics summary.
Object/service detail projection.
Object/service summary projection.
Operations-plane object visibility categories.
Nugget overview.
Narrow read-only provider SPI for trusted runtime assembly.
Bounded execution context passed to read-only introspection providers.
Page, filter, and sort request for bounded collections.
Stable readiness vocabulary.
Readiness response.
Safe recent error entry.
Recent safe error query.
Registry summary.
Application repository summary.
Per-operation request metadata.
Safe operation result envelope.
Runtime status projection.
Safe service summary.
Sort direction.
Transport endpoint summary.
Runtime-owned protected source for clear nugget PIN material.
Safe classification of a configured server-side nugget PIN source.
Public lifecycle state of the nugget process subject.
Immutable safe status snapshot for a nugget administration subject.
Immutable object identity used in permission resources.
Portable reference to one concrete exported Java object instance.
Registration handle returned from
MiddlewareRuntime.export(String, T, Class, ExportOptions).Lifecycle state of an exported runtime object.
Thread-safe SPI for metrics, tracing, or OpenTelemetry-style backends.
Selects a host-owned application observation profile, independent of middleware RPC spans.
Declares void remote dispatch acknowledged only as LOCAL_ENQUEUED in the caller's finite local queue.
Declares an explicit ordering scope, never implicit global FIFO.
Application-defined key used for preserving relative order.
Ordering requirement declared by a workload submission.
Durable outbox contract.
Durable outbound message intent.
Outbox limits and retry options.
Declares that a method publishes through the J7M outbox pattern.
Records outbound message intents durably.
Relays pending outbox entries to a durable queue.
Outbox status.
Immutable package request.
Declares a config-only deterministic POJO reducer registered as an actual partition resource.
Optional SPI for registries that maintain a peer graph.
Immutable peer query.
Built-in security permission actions.
Functional permission evaluator.
Immutable authorization request.
Requests local instance preference when a service is available in the
current runtime.
Prepared object export that is transport-ready but not discoverable.
Immutable authenticated or anonymous caller principal.
Safe principal reference for coordination ownership and audit records.
Resolves a principal from transport or invocation metadata.
Declares default relative priority for work.
Declares a typed managed factory method.
Product ownership, independent of the factory receiver's ownership.
Marks a method or parameter involved in task progress reporting.
Bounded transport-neutral command envelope.
Immutable options for Java interface proxy creation.
Utilities for discovering middleware object references carried by proxies.
Marks a runtime-retained annotation as an exact managed dependency qualifier.
Queue or backlog budget for provider admission policy.
Immutable durable queue message payload and public metadata.
Durable queue metrics snapshot.
Durable queue name.
Queue configuration limits and policies.
Queue partition reference.
Zero-based queue partition identifier.
Partition-level queue status.
Declares a method of an ordinary producer interface implemented by a trusted host resource binding.
Queue status and metrics.
Declares the rate-limit scope for work.
Finite fixed-window admission policy.
Coordination requirement selected by the trusted host.
Managed-v1 hosting requires a finite public, non-static, zero-argument primitive-boolean
method on an ACTIVATION component.
Declares an ordinary POJO callback that independently establishes an uncertain saga effect.
Defines the bounded recovery policy used when a durable log scans existing
segment storage and rebuilds derived in-memory state.
Redacted output text safe for public status and audit.
Redacts sensitive values before audit or public diagnostics.
Registry visibility state of an exported object.
Thread-safe registry client SPI.
Optional diagnostics SPI for discovery-capable registries.
Immutable endpoint description for a registry peer.
Coarse latency or responsiveness marker for a registry peer.
Liveness state of a registry peer.
Immutable registry peer status used by decentralized discovery.
Immutable query for registry candidate listing.
Immutable registry record for one exported object.
Signs registry records with transport-neutral authentication metadata.
Verifies registry record authentication metadata.
Immutable summary of the registry visible to a runtime.
Placeholder trust marker for registry peers.
Options for releasing a lease.
Resolved reliability context for one invocation.
Result of a reliability policy decision.
Stable status for reliability policy decisions.
Public, redacted description of a local or remote middleware failure.
Marks a method as part of a J7M remote service contract.
Invocation handler used by generic transport providers.
Marks a type as intended for J7M service export.
Replay policy for invocation recovery decisions.
Read-only replicated log view.
Bounded artifact transfer chunk.
Digest-addressed artifact identity.
Artifact transfer lifecycle state.
Redacted replicated audit-chain line.
Conservative repository replication conflict resolution policy.
Ordered repository index delta.
Digest-addressed repository index snapshot.
Replicated promotion or demotion state.
Immutable repository publish options.
Deterministic reconciliation plan comparing local and peer repository state.
Repair plan for missing or corrupted repository state.
Redacted endpoint descriptor for a repository replica.
Stable repository replica identifier used in replication evidence and events.
Safe public identity for one repository replica.
Safe repository replication conflict evidence.
Durable repository replication event type.
Redacted repository replication evidence entry.
Repository replication exception with stable middleware error mapping.
Repository replication metrics snapshot.
Repository replication operating mode.
Explicit replication plan.
Result of one repository replication operation.
J7M-native repository replication service.
Safe repository replication status.
Rollback metadata replicated between repositories.
Raft-like RequestVote request.
Raft-like RequestVote response.
Declares a required permission action for a service or method.
Declares a required caller role for a service or method.
Declares a required caller trust domain.
Bounded resource budget for an isolation request.
Describes whether a resource limit is actively enforced.
One resource limit and its enforcement strength.
Resource categories understood by isolation status and budget reporting.
Transport-neutral resource policy SPI.
Runtime resource action evaluated by resource policies.
Immutable decision returned by a resource policy.
Immutable resource-policy evaluation request.
Immutable resource quota limits for one runtime policy evaluation.
Declares resource requirement metadata for policies and admin status.
Selects a trusted host policy for native participating resource 2PC, not JDBC or external ACID.
Safe resource usage snapshot for one execution.
Immutable runtime resource usage snapshot supplied to resource policies.
Marks a restore hook that consumes checkpoint metadata.
Durable-log retention policy.
Retention mode.
Declares bounded retry metadata for a service method.
Retry/dead-letter decision.
Retry policy options.
Retry policy metadata for idempotent workload execution.
Records a risk acceptance decision without claiming remediation.
Placeholder rollback options for later productization slices.
Immutable identity of one middleware runtime process.
Immutable identity for one application service exported by a runtime.
Immutable read-only status snapshot of a middleware runtime.
Runtime services exposed to transport providers.
Alias-style audit event type for public APIs that distinguish audit from evidence.
Saga cancellation behavior.
Request to cancel a saga execution.
Cancellation result.
Command payload supplied to a saga step action.
Safe step command result.
Compensation action invoked when a completed step must be compensated.
Safe compensation result.
Safe durable dead-letter summary for failed saga work.
Declares a class as a saga definition holder.
Ordered saga definition.
Stable saga definition identifier.
Safe saga evidence/audit event.
Saga-specific middleware exception.
Safe saga execution status.
Stable identifier for one durable saga execution.
Durable saga execution lifecycle state.
Stable saga family identifier.
Safe saga metrics snapshot.
Options used when starting a saga.
Safe saga recovery report.
Retry policy for step and compensation failures.
J7M-native durable saga orchestration service.
Request to start a saga execution.
Start result for a saga execution.
Safe saga service status.
Declares a method as a saga step in an annotation-derived descriptor.
Step action invoked by a saga implementation.
Immutable step definition with action and compensation callback.
Safe saga step execution summary.
Stable saga step identifier within a definition.
Durable saga step lifecycle state.
Saga step dispatch type.
Saga and step timeout policy.
Scatter-gather request over multiple candidate references.
Result of a scatter-gather operation.
Selects a trusted durable trigger for a DurableJob entry; it is not a local JVM timer.
Explicit application trust boundary: only these registered functions may extract and construct DTOs.
One explicitly trusted schema field.
Trusted generated allowlist provider.
Explicit trusted index assembly; validates all descriptors before any value factory is invoked.
Immutable allowlist of application-owned schemas; safe for concurrent codec calls.
Defines an explicit allowlisted wire schema for a public, non-generic record.
Selects the lifetime of a managed component or produced value; no cluster singleton is implied.
Supported explicit ownership lifetimes.
Secure-configuration validation finding.
Production secure-configuration posture snapshot.
Severity for secure-configuration validation findings.
Result of secure-configuration validation.
Thread-safe audit sink SPI.
Immutable runtime security configuration.
Immutable per-operation security context.
Thread-local security context holder used by runtime and proxy code.
Runtime security mode.
Marks a parameter, field, method, or type as sensitive for redaction.
Stable live service handle; each business invocation captures one exact target and is never
replayed automatically.
Immutable service selection contract.
Safe service export capability exposed to managed applications.
Immutable service identity used in permission resources.
Requests a stable binding to an explicitly versioned ordinary business interface.
Declares a canonical shard routing key without granting ownership authority.
Stable routing key used by shard-aware workload and invocation selection.
Result of routing a key to a shard candidate.
Transport-neutral shard routing strategy.
Marks a no-argument lifecycle method invoked during unexport or shutdown.
Thread-safe SPI for SIEM audit/evidence export.
Snapshot marker options.
Thread-safe SPI for SOAR webhook publication.
Snapshot of split-brain suspicion diagnostics.
Diagnostic split-brain suspicion.
Marks a no-argument lifecycle method invoked after initialization.
Standard error capture policy wrapper.
Standard output capture policy wrapper.
Output capture and redaction policy for stdout or stderr.
Backpressure-aware stream item emitter.
Backpressure-aware stream handle.
Optional transport extension for generic remote-object streaming.
Producer for a scheduler-managed result stream.
Reserved lifecycle-level marker for a future run-level switching contract.
Cancellation token visible to task handlers.
In-memory checkpoint metadata for a task.
Immutable description of work to schedule.
Safe failure description for failed task execution.
Stable identifier of a scheduler task.
Current lease ownership for a workload task.
Immutable task submission options.
Progress snapshot for long-running work.
Portable reference to a scheduler task.
Successful task result.
Stable lifecycle states for a middleware workload task.
Immutable scheduler task status snapshot.
Immutable task submission request.
Thread or virtual-thread budget for in-process execution.
Propagated saga transaction context; this is not an ACID transaction.
Stable non-ACID transaction context identifier.
Utility methods for safe transaction-context propagation metadata.
Status-safe transaction context summary.
Correlation metadata for root and nested saga operations.
Non-ACID transaction context outcome marker.
Safe participant identity carried in saga evidence.
Logical scope for a propagated transaction context.
Running transport endpoint owned by a runtime.
Stable SPI for middleware transports.
Transport security level observed for a request.
Immutable status for one runtime transport endpoint.
Immutable trust domain identifier.
Immutable unload options.
Immutable local-runtime upgrade options.
Codec for middleware invocation arguments and return values.
Immutable verification options.
Visibility timeout for leased messages.
Thread-safe SPI for vulnerability, SBOM, and VEX metadata sources.
Runtime watch notification.
Type of coordination watch notification.
Identifier for a runtime watch registration.
Runtime watch registration.
Defines a stable numeric wire identity independent of the Java record component name.
Execution context supplied to workload handlers.
Application workload handler.
Handle for a scheduled workload task.
Safe metadata used for workload selection, auditing, and admin views.
Transport-neutral task scheduling, execution and lease-ownership API.