Application
Table of Contents
Interfaces
- ReadOnlyDepartmentServiceInterface
- ReadOnlyOfficerRosterServiceInterface
- ReadOnlyOfficeServiceInterface
- AddFromBackendInterface
- Any task that does not need arguments and can be added from backend GUI.
- AddInterface
- Any task needs to at least implement add().
- TaskInterface
- Any task needs to at least implement run().
- SystemViewsProviderInterface
- Contract for GridColumns classes that provide dv_grid system views.
- KMPApiPluginInterface
- Contract for plugins that publish API routes.
- KmpIdentityInterface
- KMPPluginInterface
- Plugin architecture contract for KMP plugins.
- KMPWorkflowPluginInterface
- Interface for plugins that provide workflow components.
- ActionItemCompletionFormProviderInterface
- Plugin extension point for specialized ActionItem completion forms.
- ActionItemLifecycleProviderInterface
- Optional owner-specific mutations, executed while the owner and item are locked.
- ActionItemOwnerInterface
- Optional lifecycle contract for persisted entities that own ActionItems.
- ActiveWindowManagerInterface
- Active Window Manager Interface
- ApprovalContextRendererInterface
- Renders entity-aware context for the unified approvals UI.
- BackupPayloadMigratorInterface
- Upgrades decoded backup payloads before they are restored to the current schema.
- BackupArchiveStorageInterface
- PlatformDatabaseBackupDumperInterface
- PlatformDatabaseBackupStorageInterface
- TenantBackupDumperInterface
- TenantBackupRestorerInterface
- TenantBackupStorageInterface
- TenantRestoreDrillVerifierInterface
- TenantAwareCacheInterface
- Tenant-safe facade for application cache access.
- EscrowCeremonyTrackerInterface
- EscrowVerificationRecorderInterface
- KekEscrowSplitterInterface
- WormAuditSinkInterface
- PlatformHealthCheckerInterface
- Reports platform metadata database availability for tenant-aware entry points.
- PlatformScheduleDispatcherInterface
- PlatformTotpVerifierInterface
- TenantMigrationLockManagerInterface
- TenantMigrationMarkerServiceInterface
- TenantMigrationRunnerInterface
- TenantMigrationStateInspectorInterface
- SecretStoreInterface
- WritableSecretStoreInterface
- WarrantManagerInterface
- Warrant Manager Interface
- WorkflowApprovalManagerInterface
- Interface for managing workflow approval gates and responses.
- WorkflowEngineInterface
- Contract for the workflow execution engine.
- WorkflowVersionManagerInterface
- Contract for managing workflow version lifecycle.
Classes
- AppController
- Base controller for Activities plugin API v1 endpoints.
- AuthorizationsController
- Authorizations API Controller
- AuthorizationsController
- Activities Plugin Base Controller
- ActivitiesGridColumns
- Activities Grid Column Metadata
- ActivityGroupsGridColumns
- Activity Groups Grid Column Metadata
- MemberAuthorizationsGridColumns
- Grid column definitions for Member Authorizations listing.
- ActivityGroup
- ActivityGroup Entity
- Authorization
- Authorization Entity
- ActivitiesTable
- Manages Activity entities for the Activities Plugin.
- ActivityGroupsTable
- Manages ActivityGroup entities for categorical organization of activities.
- AuthorizationsTable
- Manages Authorization entities for member activity participation workflows.
- AuthorizationPolicy
- Authorization Policy for Member Activity Authorizations
- ActivitiesApprovalContextRenderer
- Provides rich display context for Activity authorization approvals
shown in the unified approvals queue.
- ActivitiesNavigationProvider
- Provides navigation items for the Activities plugin.
- ActivitiesViewCellProvider
- Activities View Cell Provider Service
- ActivitiesWorkflowActions
- Workflow action implementations for activity authorization operations.
- ActivitiesWorkflowConditions
- Workflow condition evaluators for the Activities plugin.
- ActivitiesWorkflowProvider
- Registers activity authorization workflow triggers and actions with the workflow registries.
- AuthorizationApproverResolver
- Resolves eligible approver member IDs for activity authorization workflow approvals.
- DefaultAuthorizationManager
- Default Authorization Manager Service
- MemberAuthorizationDetailsJSONCell
- Member Authorization Details JSON Cell
- MemberAuthorizationsCell
- Member Authorizations View Cell
- PermissionActivitiesCell
- Permission Activities View Cell
- AuditBestowalLinksCommand
- Read-only diagnostic command for bestowal link consistency.
- MaterializeBestowalTodosCommand
- Backfill the parallel to-do checklist for bestowals that predate (or were
created without) their award's assigned bestowal to-do template.
- MigrateAwardRecommendationsCommand
- ReconcileRecommendationStateCommand
- ApprovalProcessesController
- Admin UI for configuring award recommendation approval processes.
- BestowalsController
- Bestowals Controller
- BestowalTodoTemplatesController
- Admin UI for configuring bestowal to-do templates.
- CourtAgendasController
- Visual and printable court agenda management for gathering bestowals.
- DomainsController
- CRUD operations for award domain management.
- LevelsController
- Award Levels Controller - CRUD for award precedence/rank levels.
- ReportsController
- Awards Reports Controller - Analytics and statistics for award recommendations.
- BestowalTodoCompletionListener
- Synchronizes bestowal projections and finalizes completed bestowals.
- RecommendationFeedbackApprovalListener
- Keeps recommendation feedback state synchronized with workflow approval lifecycle events.
- ApprovalProcessesGridColumns
- Base class for grid column metadata definitions.
- AwardsGridColumns
- Grid column definitions for the Awards index view
Used by Awards\Controller\AwardsController::gridData()
- BestowalsGridColumns
- Grid column metadata for award bestowal Dataverse-style grids.
- BestowalTodoTemplatesGridColumns
- Base class for grid column metadata definitions.
- RecommendationsGridColumns
- Recommendations Grid Column Metadata
- ApprovalProcess
- Award approval process configuration.
- ApprovalProcessStep
- Ordered approval step within an award approval process.
- Award
- Award Entity - Individual award configuration with hierarchical organization.
- AwardGatheringActivity
- AwardGatheringActivity Entity
- Bestowal
- Bestowal Entity - Award presentation workflow.
- BestowalRecommendation
- BestowalRecommendation Entity - Join record linking a bestowal to a recommendation.
- BestowalTodoTemplate
- Bestowal to-do template configuration.
- BestowalTodoTemplateItem
- A single parallel checklist item within a bestowal to-do template.
- CourtAgenda
- Persistent gathering-level court agenda.
- CourtAgendaItem
- Ordered item on a court agenda segment.
- CourtAgendaSegment
- Named court, break, or planning segment inside a court agenda.
- Domain
- Domain Entity - Award category (e.g., Service, Arts & Sciences, Martial).
- Event
- Event Entity - Award ceremony and presentation events.
- Level
- Level Entity - Award precedence tier (e.g., Entry, Advanced, Master, Peerage).
- Recommendation
- Recommendation Entity - Award recommendation workflow with state machine.
- RecommendationApprovalRun
- Recommendation approval workflow projection.
- RecommendationFeedbackRequest
- Base Entity for KMP Application
- RecommendationFeedbackRequestItem
- Base Entity for KMP Application
- RecommendationFeedbackRequestRecipient
- Base Entity for KMP Application
- RecommendationMigrationResult
- Base Entity for KMP Application
- RecommendationMigrationRun
- Base Entity for KMP Application
- RecommendationsStatesLog
- RecommendationsStatesLog Entity - Audit trail for recommendation state transitions.
- ApprovalProcessesTable
- ApprovalProcessStepsTable
- ApprovalSyncItemsTable
- Durable progress for tenant-local approval synchronization.
- ApprovalSyncRunsTable
- Durable progress for tenant-local approval synchronization.
- AwardGatheringActivitiesTable
- AwardGatheringActivities Model
- AwardsTable
- Awards Table - Manages award configuration with Domain/Level/Branch hierarchy.
- BestowalRecommendationsTable
- BestowalRecommendations Table - Join table linking bestowals to recommendations.
- BestowalsTable
- Manages award bestowals and their workflow-facing persistence rules.
- BestowalTodoTemplateItemsTable
- BestowalTodoTemplateItems Table - parallel checklist items within a template.
- BestowalTodoTemplatesTable
- BestowalTodoTemplates Table - reusable bestowal checklists assigned to awards.
- CourtAgendaItemsTable
- Ordered bestowal and manual block items inside court agenda segments.
- CourtAgendaSegmentsTable
- Court agenda segments represent named courts, breaks, or business blocks.
- CourtAgendasTable
- Court agendas group bestowals into printable court plans for a gathering.
- DomainsTable
- Domains Table - Award category classification management.
- EventsTable
- Manages award event data for ceremony coordination, temporal validation, and recommendation workflow integration.
- LevelsTable
- Manages award level data with hierarchical precedence ordering.
- RecommendationApprovalRunsTable
- RecommendationFeedbackRequestItemsTable
- RecommendationFeedbackRequestRecipientsTable
- RecommendationFeedbackRequestsTable
- RecommendationMigrationResultsTable
- RecommendationMigrationRunsTable
- RecommendationsStatesLogsTable
- Manages audit trail for recommendation state transitions.
- RecommendationsTable
- Manages award recommendations and their workflow-facing persistence rules.
- ApprovalProcessesTablePolicy
- ApprovalProcessPolicy
- ApprovalProcessStepPolicy
- AwardPolicy
- Authorization policy for Award entities.
- AwardsTablePolicy
- Table-level authorization policy for Awards data operations.
- BestowalPolicy
- Authorization policy for Bestowal entities in the Awards plugin.
- BestowalsTablePolicy
- Table-level authorization policy for Bestowals in the Awards plugin.
- BestowalTodoTemplateItemPolicy
- Authorization policy for bestowal to-do template items.
- BestowalTodoTemplatePolicy
- Authorization policy for bestowal to-do templates.
- BestowalTodoTemplatesTablePolicy
- Table-level authorization policy for bestowal to-do templates.
- CourtAgendaPolicy
- Authorization policy for Awards court agendas.
- CourtAgendasTablePolicy
- Table-level authorization for court agenda listings.
- DomainPolicy
- Authorization policy for Domain entities.
- DomainsTablePolicy
- Table-level authorization policy for Domains.
- EventPolicy
- Authorization policy for Event entities in the Awards plugin.
- EventsTablePolicy
- Table-level authorization policy for Events in the Awards plugin.
- LevelPolicy
- Authorization policy for Level entities in the Awards plugin.
- LevelsTablePolicy
- Table-level authorization policy for Levels in the Awards plugin.
- RecommendationPolicy
- Authorization policy for Recommendation entities in the Awards plugin.
- RecommendationsStatesLogPolicy
- Authorization policy for RecommendationsStatesLog entities in the Awards plugin.
- RecommendationsStatesLogTablePolicy
- Table-level authorization policy for RecommendationsStatesLogs in the Awards plugin.
- RecommendationsTablePolicy
- Table-level authorization policy for Recommendations in the Awards plugin.
- ApprovalSyncTask
- Tenant-local, bounded approval synchronization queue task.
- AdHocBestowalService
- Records ad-hoc bestowals that are not backed by award recommendations.
- ApprovalSyncJobService
- Bounded, resumable tenant-queue coordination; each restart and its result commit together.
- AwardApprovalResolverService
- Resolves branch-scoped approvers for award approval process steps.
- AwardsNavigationProvider
- Provides navigation integration for the Awards plugin.
- AwardsViewCellProvider
- Provides view cell integration for the Awards plugin.
- AwardsWorkflowActions
- Workflow action implementations for award recommendation operations.
- AwardsWorkflowConditions
- Workflow condition evaluators for the Awards plugin.
- AwardsWorkflowProvider
- Registers award recommendation workflow triggers, actions, conditions,
and entities with the workflow registries.
- BestowalCancellationService
- Cancels an in-flight bestowal and unwinds linked recommendations.
- BestowalCourtSlotService
- Court slots tie a bestowal to a scheduled activity on the gathering's Event Schedule,
or to roaming court when the award may be given at any time during the event.
- BestowalCreationService
- Creates bestowals from approved recommendations and links grouped recommendations.
- BestowalFieldAccessService
- Applies field-level authorization to protected bestowal data.
- BestowalFinalizationService
- BestowalFinalizationService - shared "Mark Given" finalization for bestowals.
- BestowalFormService
- Prepares lookup data for bestowal edit and bulk edit forms.
- BestowalGatheringLookupService
- Resolves gathering options for bestowal edit forms with member attendance markers.
- BestowalHandoffService
- Workflow-aware bestowal handoff service.
- BestowalLinkAuditService
- Read-only consistency checks for recommendation-to-bestowal link ownership.
- BestowalNotificationVarsService
- Prepares email template variables for bestowal notification workflows.
- BestowalQueryService
- Builds configured ORM queries and grid-processing option arrays for bestowal grids.
- BestowalRecommendationLinkService
- Links and unlinks recommendations on an existing bestowal.
- BestowalRecommendationSyncService
- Synchronizes bestowal-owned recommendation projections from the bestowal lifecycle.
- BestowalTodoAssigneeResolver
- Resolves the live set of members eligible to complete a bestowal to-do item.
- BestowalTodoCompletionFormProvider
- Supplies Awards-owned completion UI and apply logic for bestowal gathering todos.
- BestowalTodoMaterializationService
- Builds a bestowal's parallel to-do checklist from its award's assigned
bestowal to-do template and materializes them as core ActionItems.
- BestowalUpdateService
- Applies bestowal edit form updates including link changes and field updates.
- CourtAgendaService
- Builds and mutates gathering court agendas for visual planning and print output.
- RecommendationApprovalContextRenderer
- RecommendationApprovalDecisionService
- RecommendationApprovalManualReviewException
- Identifies an approval migration failure that safely degrades to manual review.
- RecommendationApprovalProcessService
- Bridges award recommendation approval process config to workflow runtime state.
- RecommendationApprovalWorkflowLifecycleService
- Owns workflow-backed lifecycle operations for recommendation approvals.
- RecommendationApprovalWorkflowSyncService
- Restarts open award recommendation approvals against current configuration.
- RecommendationBestowalStatePolicyService
- Defines the recommendation state boundary where bestowals take over.
- RecommendationDeletionService
- Deletes recommendations through the workflow-owned mutation layer.
- RecommendationFeedbackContextRenderer
- RecommendationFeedbackService
- Creates and manages out-of-band feedback requests for award recommendations.
- RecommendationFormService
- Prepares lookup data for recommendation edit forms.
- RecommendationGroupingService
- Encapsulates recommendation grouping mechanics and origin-state restoration.
- RecommendationMigrationService
- Audits and reconciles legacy Awards recommendations into their new lifecycle owners.
- RecommendationQueryService
- Builds configured ORM queries and grid-processing option arrays for recommendation grids.
- RecommendationStateLogService
- Centralizes recommendation state-log creation for entity and bulk transitions.
- RecommendationSubmissionInput
- Allowlisted creation input, shared by HTTP and workflow submission boundaries.
- RecommendationSubmissionService
- RecommendationTransitionService
- Applies recommendation state transitions for single and bulk operations.
- RecommendationUiModeService
- Derives recommendation edit-form UI rules from explicit application modes.
- RecommendationUpdateService
- RecommendationWorkflowUiService
- Builds recommendation approval workflow context for recommendation screens.
- ActivityAwardsCell
- Displays awards that can be given during a specific gathering activity.
- GatheringBestowalsCell
- Gathering Bestowals View Cell
- MemberSubmittedRecsCell
- Displays award recommendations submitted by a specific member.
- RecsForMemberCell
- Displays award recommendations received by a specific member.
- BootstrapPlugin
- Plugin for Boostrap
- Matching
- A trait that provides useful methods to match HTML tag.
- StackedStates
- A class that providing stacking states.
- EnhancedStringTemplate
- FlexibleStringTemplate
- CardHelper
- Card helper library.
- HtmlHelper
- Html Helper class for easy use of HTML widgets.
- ModalHelper
- Modal helper library.
- NavbarHelper
- Navbar helper library.
- ColumnSelectBoxWidget
- Form 'widget' for creating select box in bootstrap columns.
- FancyFileWidget
- Form 'widget' for creating fancy file widgets made of a button
and a text input.
- InlineRadioWidget
- Input widget class for generating a set of inline radio buttons.
- LabelLegendWidget
- Label widget class for generating label or legend depending on type of
inputs.
- AppController
- Base controller for Officers plugin API v1 endpoints.
- DepartmentsController
- API controller for read-only department listing and detail.
- OfficersController
- API controller for read-only officer roster listing and detail.
- OfficesController
- API controller for read-only office listing and detail.
- AppController
- Officers Plugin Base Controller
- DepartmentsController
- Departments Controller
- OfficersController
- Officers Controller
- OfficesController
- Officers Plugin Base Controller
- ReportsController
- Officers Plugin Base Controller
- RostersController
- Officers Plugin Base Controller
- OfficersGridColumns
- Officers Grid Column Metadata
- OfficesGridColumns
- Grid column definitions for the Offices index view
Used by Officers\Controller\OfficesController::gridData()
- Department
- Department Entity - Organizational structure for officer categorization
- Office
- Office Entity - Hierarchical office positions within departments
- Officer
- Officer Entity - Officer assignments with temporal management
- DepartmentsTable
- Departments Table - Departmental data management
- OfficersTable
- Officers Table - Officer assignment lifecycle management
- OfficesTable
- Offices Table - Hierarchical office structure and permission-based access
- OfficersPlugin
- Officers Plugin - Officer assignment management and hierarchical organization
- DepartmentPolicy
- Department Authorization Policy
- DepartmentsTablePolicy
- Departments Table Authorization Policy
- OfficePolicy
- Office Authorization Policy
- OfficerPolicy
- Officer Authorization Policy
- OfficersTablePolicy
- Officers Table Authorization Policy
- OfficesTablePolicy
- Offices Table Authorization Policy
- ReportsControllerPolicy
- Officers Reports Controller Authorization Policy
- RostersControllerPolicy
- Rosters Controller Authorization Policy
- DefaultReadOnlyDepartmentService
- DefaultReadOnlyOfficerRosterService
- DefaultReadOnlyOfficeService
- OfficersBranchApiDataProvider
- Provides current officer data for branch API detail responses.
- OfficerAssignmentWorkflowActions
- Ephemeral workflow actions for editing an existing officer assignment.
- OfficersWorkflowProvider
- Registers Officers plugin workflow triggers, actions, conditions, and entities.
- OfficerWorkflowActions
- Workflow action implementations for officer lifecycle operations.
- OfficerWorkflowConditions
- Workflow condition evaluators for Officers plugin.
- AddCommand
- BakeQueueTaskCommand
- Command class for generating queue task files and their tests.
- InfoCommand
- JobCommand
- RunCommand
- Main execution of queued jobs.
- WorkerCommand
- JobConfig
- JobConfig DTO
- Io
- Composition class as proxy towards ConsoleIO - basically a shell replacement for inside business logic.
- QueueController
- QueuedJobsController
- QueueProcessesController
- QueuedJobTask
- QueueTransport
- Send mail using Queue plugin and Message objects.
- SimpleQueueTransport
- Send mail using Queue plugin and Message settings.
- OldTaskFinder
- JsonableBehavior
- A behavior that will json_encode (and json_decode) fields if they contain an array or specific pattern.
- QueuedJob
- Base Entity for KMP Application
- QueueProcess
- QueueProcess Entity
- ProcessEndingException
- QueueException
- QueuedJobsTable
- QueueProcessesTable
- QueueProcesses Model
- QueuedJobPolicy
- QueuedJob policy
- Config
- Processor
- Main shell to init and run queue workers.
- EmailTask
- A convenience task ready to use for asynchronously sending basic emails.
- MailerTask
- A convenience task ready to use for asynchronously sending reusable emails via Mailer classes.
- Task
- Queue Task.
- TaskFinder
- QueuePlugin
- Plugin for Queue
- QueueNavigationProvider
- Queue Navigation Provider
- QueueHelper
- QueueProgressHelper
- HelloWorldController
- HelloWorld Controller
- HelloWorldControllerPolicy
- HelloWorld Policy
- GatheringActivityWaiversController
- GatheringActivityWaivers Controller
- GatheringWaiversController
- GatheringWaivers Controller
- WaiverTypesController
- WaiverTypes Controller
- GatheringWaiversGridColumns
- Gathering Waivers Grid Column Metadata
- WaiverTypesGridColumns
- Waiver Types Grid Column Metadata
- GatheringActivityWaiver
- GatheringActivityWaiver Entity
- GatheringWaiver
- GatheringWaiver Entity
- GatheringWaiverClosure
- GatheringWaiverClosure Entity
- WaiverType
- WaiverType Entity
- GatheringActivityWaiversTable
- GatheringActivityWaivers Model
- GatheringWaiverClosuresTable
- GatheringWaiverClosures Model
- GatheringWaiversTable
- GatheringWaivers Model
- WaiverTypesTable
- WaiverTypes Model
- GatheringActivityWaiverPolicy
- GatheringActivityWaiver Entity Authorization Policy
- GatheringActivityWaiversTablePolicy
- GatheringActivityWaivers Table Authorization Policy
- GatheringWaiverPolicy
- GatheringWaiver Entity Authorization Policy
- GatheringWaiversControllerPolicy
- GatheringWaivers Controller Authorization Policy
- GatheringWaiversTablePolicy
- GatheringWaivers Table Authorization Policy
- WaiverPolicy
- Waiver Policy (for GatheringWaiver)
- WaiverTypePolicy
- WaiverType Policy
- WaiverTypesTablePolicy
- WaiverTypes Table Authorization Policy
- GatheringActivityService
- Gathering Activity Service
- WaiverDashboardService
- Waiver Dashboard Service
- WaiverFileService
- Waiver File Service
- WaiverMobileService
- Waiver Mobile Service
- WaiversNavigationProvider
- Waivers Navigation Provider
- WaiverStateService
- Waiver State Service
- WaiversViewCellProvider
- Waivers View Cell Provider Service
- WaiversWorkflowActions
- Workflow action implementations for waiver lifecycle operations.
- WaiversWorkflowConditions
- Workflow condition evaluators for the Waivers plugin.
- WaiversWorkflowProvider
- Registers waiver workflow triggers, actions, conditions, and entities with the workflow registries.
- GatheringActivityWaiversCell
- Gathering Activity Waivers View Cell
- GatheringWaiversCell
- Gathering Waivers View Cell
- WaiversPlugin
- Waivers Plugin - Gathering Waiver Tracking System
- MemberSessionAuthenticator
- Revalidate tenant, account eligibility and credential epoch on every request.
- ServicePrincipalAuthenticator
- Authenticates API clients via API token.
- AdvanceDevSeedDatesCommand
- Advance date-sensitive development snapshot data to a current reference date.
- AgeUpMembersCommand
- CLI command to age up youth members who have turned 18.
- BackupCommand
- CLI backup management: create and restore passphrase-encrypted .kmpbackup files.
- DrPreflightCommand
- Non-destructive disaster-recovery prerequisite report for operators.
- GeneratePublicIdsCommand
- GeneratePublicIds Command
- ImageCacheGcCommand
- KmpInstallCommand
- KMP installer wizard for first-time setup and targeted upgrades.
- MigrateAwardEventsCommand
- Migrate Award Events Command
- PlatformAdminCommand
- PlatformBackupCommand
- PlatformBackupDecryptCommand
- Decrypts a platform database backup with its portable recovery-key file.
- PlatformBackupKeysEnsureCommand
- Idempotently provisions backup KEKs without printing secret values.
- PlatformBackupsPruneCommand
- PlatformDatabasePrivilegesCommand
- Reconcile platform, default, and registered tenant runtime database grants.
- PlatformDocumentStorageCommand
- Plan or reconcile private document containers for the complete tenant registry.
- PlatformEscrowCommand
- PlatformHealthCommand
- Reports platform metadata database health for operators.
- PlatformJobsCheckAlertsCommand
- Emits platform job/schedule alert diagnostics for external monitors.
- PlatformJobsPruneCommand
- PlatformJobsRunCommand
- PlatformMetricsPruneCommand
- PlatformMigrateCommand
- Runs the dedicated platform metadata migration track.
- PlatformNightlyMigrationDrillCommand
- Runs a non-destructive nightly migration drill for staging/canary tenants.
- PlatformQueuesRunCommand
- Runs every application queue lane from one background worker authority.
- PlatformReleaseCheckCommand
- Validates a release manifest and tenant schema compatibility for deploy gates.
- PlatformScheduleRunCommand
- PlatformSchedulesRunDueCommand
- PlatformSecretsImportEnvCommand
- Copy legacy KMP_SECRET_* values into the database store without overwrites.
- PlatformWorkerRunCommand
- Runs one bounded platform schedule and queue worker cycle.
- ResetDatabaseCommand
- RevertDatabase command.
- RolesAuditBranchScopeCommand
- Find inert role grants: active member-role assignments with no branch scope
on roles that carry branch-scoped permissions.
- SyncActiveWindowStatusesCommand
- CLI command to synchronize ActiveWindow-based entity statuses.
- SyncMemberWarrantableStatusesCommand
- CLI command to synchronize stored member warrantable flags.
- TelemetryCheckCommand
- Deploy-time validation for the KMP performance instrumentation stack.
- TenantBackupCommand
- TenantBackupsEnqueueCommand
- Enqueues managed tenant backups for every active tenant whose latest
completed backup is older than the global backup-policy cadence.
- TenantMigrateCommand
- Runs tenant application and plugin migrations with platform job logging.
- TenantPocCommand
- Automates the two-tenant staging proof-of-concept harness.
- TenantProvisionCommand
- Provisions a tenant registry row and tenant database resources.
- TenantRestoreCommand
- TenantRestoreDrillCommand
- UpdateDatabaseCommand
- RevertDatabase command.
- WorkflowDiffCommand
- WorkflowReconcileApprovalsCommand
- WorkflowSchedulerCommand
- CLI command to check and dispatch scheduled workflow triggers.
- WorkflowSyncCommand
- Installer
- Provides installation hooks for when this application is installed through
composer. Customize this class to suit your needs.
- ActionItemsController
- ActionItems Controller - the reusable "My To-Dos" surface.
- ApiController
- Base API Controller - Foundation for all API endpoints
- BranchesController
- Branches API Controller
- MembersController
- Members API Controller
- RolesController
- Roles API Controller
- ServicePrincipalsController
- Service Principals API Controller
- AppController
- ApprovalsController
- Approvals Controller
- AppSettingsController
- AppSettings Controller
- BackupsController
- Tenant self-service view of platform-managed backups.
- BranchesController
- Manages hierarchical organizational branches with tree structure maintenance.
- EmailTemplatesController
- EmailTemplates Controller
- ErrorController
- Error Handling Controller
- GatheringActivitiesController
- GatheringActivities Controller
- GatheringAttendancesController
- GatheringAttendances Controller
- GatheringsController
- Gatherings Controller
- GatheringStaffController
- GatheringStaff Controller
- GatheringTypesController
- GatheringTypes Controller
- GridViewsController
- JSON-based REST endpoints for managing saved grid views.
- HealthController
- Health check controller for load balancers and monitoring.
- MemberRolesController
- MemberRoles Controller
- MembersController
- Manages member CRUD, authentication, profiles, and member discovery.
- NavBarController
- NavBarController Controller
- NotesController
- Notes Controller
- OfflineController
- Public, nonpersonalized shell; private data is fetched only after authentication.
- OpenApiController
- Serves the merged OpenAPI specification (base + plugin fragments).
- PagesController
- Static content controller
- PermissionsController
- Manages RBAC permissions: CRUD, policy matrix, and role assignments.
- AuthController
- Base controller for the isolated platform admin portal.
- DashboardController
- Base controller for the isolated platform admin portal.
- DataConsoleController
- Base controller for the isolated platform admin portal.
- OperationsController
- Base controller for the isolated platform admin portal.
- PlatformAdminAppController
- Base controller for the isolated platform admin portal.
- TenantsController
- Base controller for the isolated platform admin portal.
- ReportsController
- RolesController
- Manages RBAC roles: CRUD, permission assignment, and member management.
- ServicePrincipalsController
- ServicePrincipals Controller - Admin Management
- SessionsController
- TableAdminController
- Simple database administration interface for super users.
- WarrantPeriodsController
- Manages warrant period templates for standardized duration definitions.
- WarrantRostersController
- Manages warrant roster batches and multi-level approval workflows.
- WarrantsController
- Manages warrant lifecycle: listing, filtering, deactivation, and CSV export.
- WorkflowDefinitionsController
- WorkflowDefinitions Controller
- WorkflowInstancesController
- WorkflowInstances Controller
- ApiExceptionRenderer
- Returns JSON error responses for API routes instead of HTML error pages.
- CallForCellsHandlerBase
- CallForCellsHandlerBase - Event-based view cell handler
- EmailTemplateNotFoundException
- Thrown when an email template cannot be resolved by slug.
- ResetPasswordForm
- KMPBruteForcePasswordIdentifier
- CaseInsensitiveQuery
- Builds portable case-insensitive conditions for trusted database fields.
- DataverseGridQueryContext
- Resolved column context for building Dataverse grid queries.
- ActionItemsGridColumns
- Action Items Grid Column Metadata
- ApprovalsGridColumns
- Approvals Grid Column Metadata
- AppSettingsGridColumns
- AppSettings Grid Column Metadata
- BaseGridColumns
- Base class for grid column metadata definitions.
- BranchesGridColumns
- Branches Grid Column Metadata
- DepartmentsGridColumns
- Grid column definitions for the Departments index view
Used by Officers\Controller\DepartmentsController::gridData()
- DomainsGridColumns
- Grid column definitions for the Award Domains index view
Used by Awards\Controller\DomainsController::gridData()
- EmailTemplatesGridColumns
- Email Templates Grid Column Metadata
- GatheringActivitiesGridColumns
- Gathering Activities Grid Column Metadata
- GatheringAttendancesGridColumns
- Gathering Attendances Grid Column Metadata
- GatheringsGridColumns
- Gatherings Grid Column Metadata
- GatheringTypesGridColumns
- Gathering Types Grid Column Metadata
- LevelsGridColumns
- Grid column definitions for the Award Levels index view
Used by Awards\Controller\LevelsController::gridData()
- MemberRolesGridColumns
- Member Roles Grid Column Metadata
- MembersGridColumns
- Members Grid Column Metadata
- PermissionsGridColumns
- Permissions Grid Column Metadata
- RolesGridColumns
- Roles Grid Column Metadata
- VerifyQueueGridColumns
- Verification Queue Grid Column Metadata
- WarrantPeriodsGridColumns
- Warrant Periods Grid Column Metadata
- WarrantRostersGridColumns
- Warrant Rosters Grid Column Metadata
- WarrantsGridColumns
- Warrants Grid Column Metadata
- WorkflowInstancesGridColumns
- Workflow Instances Grid Column Metadata
- GridRowDomId
- Stable DOM ids for Dataverse grid rows (Turbo Stream replace/remove targets).
- GridViewConfig
- Configuration validator and normalizer for grid views.
- MissingTenantContextException
- PermissionsLoader
- Core RBAC security engine for KMP permission validation.
- RequestQueryCounter
- PSR-3 logger that counts queries and accumulates their durations for the
current process / request.
- SqlRedactor
- Redacts user-provided data from SQL strings before they are exported to
Application Insights.
- TenantContext
- Tracks the active tenant for the current request, worker message, or CLI scope.
- TenantMetadata
- Immutable platform metadata required to bind a tenant-scoped request or job.
- WorkflowApprovalDecisionOptions
- Normalizes workflow-configured approval decision choices for UI and validation.
- ApplicationInsightsLog
- Sends CakePHP log events to Azure Application Insights.
- PrivateFileLog
- Sanitize before FileLog interpolates context; restrict files containing security diagnostics.
- QueryLogFormatter
- Adds HTTP request correlation details to database query log lines.
- LogPrivacy
- Shared, bounded sanitation before interpolation or serialization at any log sink.
- KMPMailer
- ApiTransport
- Abstract base for HTTP API-based email transports.
- AzureCommunicationTransport
- Email transport for Azure Communication Services REST API.
- ResendApiTransport
- Email transport for the Resend API.
- SendGridApiTransport
- Email transport for the SendGrid v3 Mail Send API.
- RestoreMaintenanceMiddleware
- Short-circuits normal web traffic while destructive database restore is running.
- TenantResolutionMiddleware
- ApiAwareRedirectHandler
- Re-throws authorization exceptions for API routes and XHR/fetch requests so
the exception renderer returns a proper 403; redirects normal navigations.
- ActiveWindowBehavior
- ActiveWindow Behavior
- JsonFieldBehavior
- JsonField Behavior
- PublicIdBehavior
- PublicId Behavior
- SortableBehavior
- Sortable Behavior
- WorkflowTriggerBehavior
- WorkflowTrigger Behavior
- ActionItem
- ActionItem Entity - a reusable, polymorphic "to-do" / check.
- ActionItemLog
- ActionItemLog Entity - append-only audit of action item status changes.
- ActiveWindowBaseEntity
- ActiveWindowBaseEntity Entity
- AppSetting
- AppSetting Entity
- Backup
- Backup entity — tracks backup metadata.
- BaseEntity
- Base Entity for KMP Application
- Branch
- Branch Entity - Hierarchical Organizational Structure for KMP
- Document
- Document Entity
- EmailTemplate
- EmailTemplate Entity
- Gathering
- Gathering Entity
- GatheringActivity
- GatheringActivity Entity
- GatheringAttendance
- GatheringAttendance Entity
- GatheringScheduledActivity
- GatheringScheduledActivity Entity
- GatheringsGatheringActivity
- GatheringsGatheringActivity Entity
- GatheringStaff
- GatheringStaff Entity
- GatheringType
- GatheringType Entity
- GatheringTypeGatheringActivity
- GatheringTypeGatheringActivity Entity
- GridView
- GridView Entity - Saved grid view configuration.
- GridViewPreference
- GridViewPreference Entity - Stores member-specific grid default selections
- ImpersonationActionLog
- Represents a single impersonation audit record created when a super user writes while impersonating.
- ImpersonationSessionLog
- Represents an impersonation session event (start/stop).
- Member
- Member Entity - Core KMP User Identity and Profile Management
- MemberQuickLoginDevice
- MemberQuickLoginDevice Entity
- MemberRole
- MemberRole Entity
- Note
- Note Entity
- Permission
- Permission Entity - KMP RBAC Permission System
- PermissionPolicy
- PermissionPolicy Entity - Dynamic Permission Authorization
- Role
- Role Entity - KMP RBAC Role Management
- RolesPermission
- RolesPermission Entity
- ServicePrincipal
- ServicePrincipal Entity - API Client Identity for Third-Party Integrations
- ServicePrincipalAuditLog
- ServicePrincipalAuditLog Entity - API Request Audit Trail
- ServicePrincipalRole
- ServicePrincipalRole Entity - Role Assignment for Service Principals
- ServicePrincipalToken
- ServicePrincipalToken Entity - API Authentication Tokens
- Warrant
- Warrant Entity - Temporal Validation for RBAC Security
- WarrantPeriod
- WarrantPeriod Entity - Warrant Period Templates
- WarrantRoster
- WarrantRoster Entity - Warrant Batch Management and Multi-Level Approval System
- WorkflowApproval
- WorkflowApproval Entity
- WorkflowApprovalResponse
- WorkflowApprovalResponse Entity
- WorkflowApprovalTriageState
- Private workflow approval triage state for one approver.
- WorkflowDefinition
- WorkflowDefinition Entity
- WorkflowExecutionLog
- WorkflowExecutionLog Entity
- WorkflowInstance
- WorkflowInstance Entity
- WorkflowInstanceMigration
- WorkflowInstanceMigration Entity
- WorkflowSchedule
- WorkflowSchedule Entity
- WorkflowTask
- WorkflowTask Entity
- WorkflowVersion
- WorkflowVersion Entity
- ActionItemLogsTable
- ActionItemLogs Table - append-only audit of action item status changes.
- ActionItemsTable
- ActionItems Table - reusable, polymorphic "to-do" / check records.
- AppSettingsTable
- AppSettings Model
- BackupsTable
- Backups Model — stores backup job metadata.
- BaseTable
- BranchesTable
- Branches Model - Hierarchical Organizational Structure Management for KMP
- DocumentsTable
- Documents Model
- EmailTemplatesTable
- EmailTemplates Model
- GatheringActivitiesTable
- GatheringActivities Model
- GatheringAttendancesTable
- GatheringAttendances Model
- GatheringScheduledActivitiesTable
- GatheringScheduledActivities Model
- GatheringsGatheringActivitiesTable
- GatheringsGatheringActivities Model
- GatheringsTable
- Gatherings Model
- GatheringStaffTable
- GatheringStaff Model
- GatheringTypeGatheringActivitiesTable
- GatheringTypeGatheringActivities Model
- GatheringTypesTable
- GatheringTypes Model
- GridViewPreferencesTable
- GridViewPreferences Table - Member-specific default view selections
- GridViewsTable
- GridViewsTable - Manage Saved Grid View Configurations
- ImpersonationActionLogsTable
- Table class providing access to impersonation audit records.
- ImpersonationSessionLogsTable
- Provides access to impersonation session events.
- MemberQuickLoginDevicesTable
- MemberQuickLoginDevices Table
- MemberRolesTable
- MemberRoles Model
- MembersTable
- Members Table - Central repository for user management.
- NotesTable
- Notes Model
- PermissionPoliciesTable
- PermissionPoliciesTable - Dynamic Permission Authorization Policies
- PermissionsTable
- PermissionsTable - KMP RBAC Permission Management
- RolesPermissionsTable
- RolesPermissions Model
- RolesTable
- RolesTable - KMP RBAC Role Management
- ServicePrincipalAuditLogsTable
- ServicePrincipalAuditLogs Table - API Request Audit Trail
- ServicePrincipalRolesTable
- ServicePrincipalRoles Table - Role Assignments for Service Principals
- ServicePrincipalsTable
- ServicePrincipals Table - API Client Management
- ServicePrincipalTokensTable
- ServicePrincipalTokens Table - API Token Management
- WarrantPeriodsTable
- WarrantPeriodsTable - Warrant Period Template Management and Administrative Tools
- WarrantRostersTable
- WarrantRostersTable - Batch Warrant Management
- WarrantsTable
- WarrantsTable - Warrant Data Management for RBAC Security
- WorkflowApprovalResponsesTable
- WorkflowApprovalResponses Model
- WorkflowApprovalsTable
- WorkflowApprovals Model
- WorkflowApprovalTriageStatesTable
- WorkflowApprovalTriageStates Model
- WorkflowDefinitionsTable
- WorkflowDefinitions Model
- WorkflowExecutionLogsTable
- WorkflowExecutionLogs Model
- WorkflowInstanceMigrationsTable
- WorkflowInstanceMigrations Model
- WorkflowInstancesTable
- WorkflowInstances Model
- WorkflowSchedulesTable
- WorkflowSchedules Model
- WorkflowTasksTable
- WorkflowTasks Model
- WorkflowVersionsTable
- WorkflowVersions Model
- ActionItemPolicy
- ActionItem entity policy.
- ActionItemsTablePolicy
- ActionItemsTable policy — table-level authorization for the to-do subsystem.
- ApprovalsControllerPolicy
- Controller-level policy for ApprovalsController.
- AppSettingPolicy
- ActivityGroups policy
- AppSettingsTablePolicy
- ActivityGroupsTable policy
- BackupPolicy
- Backup entity policy.
- BackupsTablePolicy
- BackupsTable policy — controls tenant backup self-service operations.
- BasePolicy
- BranchesTablePolicy
- BranchesTable Policy
- BranchPolicy
- Branch Entity Policy
- ControllerActionHookPolicy
- ControllerResolver
- Policy resolver that applies conventions based policy classes
for CakePHP ORM Tables, Entities and Queries.
- DocumentPolicy
- Document Policy
- EmailTemplatePolicy
- EmailTemplate Policy
- EmailTemplatesTablePolicy
- EmailTemplatesTable Policy
- GatheringActivitiesTablePolicy
- GatheringActivitiesTable policy
- GatheringActivityPolicy
- GatheringActivity Policy
- GatheringAttendancePolicy
- GatheringAttendance policy
- GatheringAttendancesTablePolicy
- GatheringAttendances Table Policy
- GatheringPolicy
- Gathering Policy
- GatheringsTablePolicy
- Gathering Policy
- GatheringTypePolicy
- GatheringType Policy
- GatheringTypesTablePolicy
- GatheringTypesTable policy
- MemberPolicy
- role policy
- MemberRolePolicy
- role policy
- MemberRolesTablePolicy
- role policy
- MembersTablePolicy
- role policy
- NotePolicy
- Note policy
- NotesTablePolicy
- NotesTable policy
- PermissionPolicy
- role policy
- PermissionsTablePolicy
- Permissions Table Policy
- ReportsControllerPolicy
- RolePolicy
- role policy
- RolesTablePolicy
- ServicePrincipalPolicy
- ServicePrincipal Entity Policy
- ServicePrincipalsTablePolicy
- ServicePrincipals Table Policy
- TableAdminControllerPolicy
- WarrantPeriodPolicy
- WarrantPeriod policy
- WarrantPeriodsTablePolicy
- WarrantPeriodTable policy
- WarrantPolicy
- Warrant policy
- WarrantRosterPolicy
- WarrantRosters policy
- WarrantRostersTablePolicy
- WarrantsTablePolicy
- WorkflowApprovalPolicy
- WorkflowApproval entity-level policy.
- WorkflowApprovalsTablePolicy
- WorkflowApprovalsTable policy — table-level authorization for approvals.
- WorkflowDefinitionPolicy
- WorkflowDefinition entity-level policy.
- WorkflowDefinitionsControllerPolicy
- Controller-level policy for WorkflowDefinitionsController.
- WorkflowDefinitionsTablePolicy
- WorkflowDefinitionsTable policy — restricts workflow admin actions to super users.
- WorkflowInstancePolicy
- WorkflowInstance entity-level policy.
- WorkflowInstancesControllerPolicy
- Controller-level policy for WorkflowInstancesController.
- WorkflowInstancesTablePolicy
- WorkflowInstancesTable policy — restricts instance monitoring to super users.
- WorkflowApprovalDeadlineTask
- Checks for expired workflow approvals and resumes their workflows.
- WorkflowResumeTask
- Asynchronously resumes a waiting workflow instance at a specific node.
- ActionItemAssigneeResolver
- ActionItemAssigneeResolver - resolves "who can act" for an action item.
- ActionItemCompletionForm
- Structured metadata for a plugin-provided action item completion form.
- ActionItemCompletionFormRegistry
- Static registry for plugin-provided ActionItem completion forms.
- ActionItemService
- ActionItemService - lifecycle operations for the reusable to-do subsystem.
- DefaultActiveWindowManager
- ApiDataRegistry
- Registry for API response data providers.
- ApprovalContext
- Value object representing display context for a pending approval.
- ApprovalContextRendererRegistry
- Static registry for approval context renderers.
- WarrantRosterApprovalContextRenderer
- Provides rich display context for warrant roster approvals
shown in the unified approvals queue.
- AuthorizationService
- Custom authorization service with KMP identity handling.
- BackupPayloadUpgradeService
- Applies ordered object-level upgrades to decoded backup payloads.
- MainToWorkflowEngineBranchBackupMigrator
- Upgrades pre-branch backup payloads to the feature/workflow-engine object model.
- BackupRestoreCompatibilityService
- Reconciles current-version derived/config data after a logical restore.
- BackupDeletionService
- Removes managed backup objects while retaining immutable operational metadata.
- BackupDownloadService
- BackupObjectStorage
- Stores encrypted backup archives through KMP's configured Flysystem backend.
- BackupReadinessService
- Reports non-sensitive backup execution prerequisites.
- BackupRecoveryKeyService
- Creates and consumes portable, backup-scoped recovery-key packages.
- BackupRetentionService
- Deletes expired encrypted objects while retaining non-sensitive metadata.
- BackupStorageFactory
- BackupStreamCipher
- Reads and writes bounded-memory, authenticated backup archive streams.
- ConfiguredPlatformDatabaseBackupStorage
- ConfiguredTenantBackupStorage
- JsonTenantBackupDumper
- Creates KMP's gzip-compressed JSON logical archive for one tenant.
- JsonTenantBackupRestorer
- Validates and restores KMP JSON logical archives inside a tenant scope.
- LegacyKmpBackupStorage
- Provides bounded, path-safe access to archives created by the former .kmpbackup workflow.
- LocalPlatformDatabaseBackupStorage
- LocalTenantBackupStorage
- PgDumpPlatformDatabaseBackupDumper
- PgRestoreTenantBackupRestorer
- PlatformDatabaseBackupEncryptor
- PlatformDatabaseBackupResult
- PlatformDatabaseBackupService
- PostgresClientEnvironment
- Apply the selected datasource's credentials and TLS policy to libpq subprocesses.
- RoutedPlatformDatabaseBackupStorage
- Writes new platform archives to configured storage while retaining historical local:// reads.
- RoutedTenantBackupStorage
- Writes new archives to configured storage while retaining historical local:// reads.
- TenantBackupDumpResult
- TenantBackupEncryptionResult
- TenantBackupEncryptor
- TenantBackupResult
- TenantBackupService
- TenantBackupStoredObject
- TenantRestoreDrillPlan
- TenantRestoreDrillResult
- TenantRestoreDrillService
- TenantRestoreResult
- TenantRestoreService
- TenantRestoreServiceDrillVerifier
- TenantSelfServiceBackupService
- Tenant-facing view of the platform-managed backup system.
- BackupSchemaManifestService
- Builds a database-neutral schema manifest for backup payloads.
- BackupService
- Database-agnostic backup and restore service.
- BackupStorageService
- Manages backup file storage using the same adapter pattern as DocumentService.
- TenantAwareCache
- Prefixes cache keys by tenant while preserving single-tenant keys without context.
- CoreNavigationProvider
- Core Navigation Provider
- CoreViewCellProvider
- Core View Cell Provider
- CsvExportService
- Standardized CSV export for query results, entity collections, and arrays.
- DatabaseSchemaResetService
- Recreates the database schema from a backup schema manifest.
- DocumentService
- Centralized document management service for file uploads, storage, and retrieval.
- EmailTemplateRendererService
- Service for rendering email templates with variable substitution
- EmailTemplateResolverService
- Resolves active email templates by stable slug identity.
- EscrowCeremonyRequest
- EscrowSensitiveValueRedactor
- EscrowVerificationRequest
- NonProductionDeterministicKekEscrowSplitter
- PlatformEscrowCeremonyTracker
- PlatformEscrowVerificationRecorder
- GatheringActivityService
- Manages gathering-activity associations: linking, unlinking, and description updates.
- GatheringCloneService
- Deep-copies a gathering including its activities, staff, and schedule items.
- GatheringScheduleService
- Manages scheduled activity CRUD for gatherings.
- GridViewService
- Business logic for managing saved grid views.
- ICalendarService
- iCalendar Service
- ImageToPdfConversionService
- Converts uploaded image files to PDF format for consistent document storage.
- ImpersonationService
- Manages impersonation session metadata for super user actions.
- MemberAuthenticationService
- Handles authentication-related business logic for members.
- MemberExpirationImportService
- Imports member expiration dates from the shared two-column CSV format.
- MemberPrivacy
- Shapes list rows after the controller has obtained a per-member policy decision.
- MemberProfileService
- Handles profile photo management for members.
- MemberRegistrationService
- Handles member registration and SCA membership card submission.
- MemberSearchService
- Handles member search and discovery queries.
- NavigationRegistry
- Centralized registry for application navigation items from core and plugins.
- NavigationService
- Navigation Service
Handles navigation-related business logic and integrates with NavigationRegistry
- OpenApiMergeService
- Merges the base OpenAPI spec with plugin-provided fragments.
- PdfProcessingService
- Handles PDF file operations for waiver uploads.
- AdministrativeDatabase
- Process-level separation for schema, provisioning, and restore jobs.
- AllowlistedPlatformScheduleDispatcher
- FileWormAuditSink
- NullWormAuditSink
- WormAuditSinkFactory
- PlatformAdminBootstrapResult
- PlatformAdminHost
- PlatformAdminJobEnqueuer
- Enqueues platform-admin initiated operations with idempotency and audit.
- PlatformAdminRecoveryService
- PlatformAuditService
- PlatformBackupPolicyService
- Reads and writes the single global backup policy (cadence + retention).
- PlatformDataConsoleService
- Executes the platform admin data console's allowlisted read-only queries.
- PlatformEmergencyLoginResult
- PlatformFleetHealthService
- Builds a privacy-safe operational snapshot of the tenant fleet.
- PlatformHealthService
- Checks platform metadata database availability with optional bounded retry.
- PlatformHealthStatus
- Safe platform metadata database health report.
- PlatformJobAlertService
- Builds diagnostics-safe alert findings from platform schedule/job metadata.
- PlatformJobEventService
- Persists operator-safe progress events for asynchronous platform jobs.
- PlatformJobRetentionService
- Prunes terminal platform jobs while preserving active work and longer-lived failures.
- PlatformJobRunner
- Drains executable Platform Admin jobs.
- PlatformQueueDrainService
- Drains the default and active-tenant Queue plugin datasources fairly.
- PlatformScheduleRunner
- PlatformTotpChallengeService
- Consume each TOTP moving factor once across login, recovery and sensitive actions.
- PlatformTotpVerifier
- PlatformWorkerService
- Runs one bounded scheduler and queue cycle for a fleet worker execution.
- PostgresRuntimePrivileges
- Reconciles existing application roles to database-local DML privileges.
- PostgresTenantMigrationLockManager
- QueueDrainService
- Runs bounded queue workers against the current default datasource.
- ReleaseCompatibilityChecker
- Enforces release manifest tenant schema compatibility before deploy or migrate.
- ReleaseManifest
- Immutable deploy manifest describing app image and tenant schema bounds.
- TenantConfigSchema
- Validates the safe, non-secret tenant_config surface exposed to platform admins.
- TenantHostResolver
- Resolves request hostnames to platform tenant metadata.
- TenantLifecycleService
- Applies guarded tenant lifecycle transitions and records them in the platform audit chain.
- TenantMigrateCommandScrubber
- Scrubs secret-like values from migration metadata before persistence.
- TenantMigrationCatalog
- Discovers the release migration set and compares it with tenant history tables.
- TenantMigrationLockException
- TenantMigrationLockHandle
- TenantMigrationMarkerResult
- Non-sensitive pre-migration checkpoint metadata.
- TenantMigrationMarkerService
- Records a pre-migration recovery marker and tags an on-demand logical backup.
- TenantMigrationResult
- TenantMigrationState
- Immutable comparison of a tenant database against the migrations in this release.
- TenantMigrationStateInspector
- Inspects migration history through an isolated tenant connection scope.
- TenantOperationalMetricsService
- Stores bounded, privacy-safe hourly tenant request aggregates.
- TenantProvisioningRequest
- Immutable tenant provisioning inputs shared by CLI and platform jobs.
- TenantProvisioningResult
- Safe tenant provisioning result data.
- TenantProvisioningService
- Provisions tenant metadata, database resources, migrations, and lifecycle state.
- UnavailablePlatformTotpVerifier
- QuickLoginDeviceService
- Manages quick-login device enrollment, metadata collection, and removal.
- RestoreStatusService
- Tracks restore lock and restore progress in shared cache.
- RetentionPolicyService
- Calculates document retention dates based on JSON retention policy definitions.
- ChainSecretStore
- DatabaseSecretStore
- EnvVarSecretStore
- FileSecretStore
- SecretStoreFactory
- SensitiveString
- Holds plaintext secret material while redacting common debug surfaces.
- MemberSessionState
- Minimal tenant-bound session credentials; authorization is always loaded afresh.
- OfflineIdentity
- Opaque current actor binding for private offline snapshots and replay.
- RateLimitResult
- Outcome of a rate-limit check.
- RequestRateLimiter
- Atomic fixed-window limits shared by every replica using the same database.
- SessionCookieConfig
- Builds session ini settings while keeping cookies host-only by default.
- TenantCsrfTokenScope
- Config hook for a future tenant-bound CSRF token rollout.
- ServiceResult
- Standardized result object for service layer operations.
- AzureBlobClientFactory
- Selects exactly the configured Azure credential; never downgrades authentication.
- AzureManagedIdentityTokenCredential
- Token credential for Azure managed identity in App Service/Container Apps or IMDS.
- TenantDocumentProvisioner
- Provision private tenant containers and their fixed, blob-only runtime grant.
- TenantDocumentStorageConfigResolver
- Resolves document blob storage settings, including tenant-specific containers.
- TenantConnectionManager
- TenantDefaultSettingsInitializer
- Ensures required tenant-scoped application settings exist for the current datasource.
- TenantMailConfigurator
- Applies a tenant's tenant_config.email overrides to the default mail
profile and transport for the duration of a tenant-bound scope.
- ViewCellRegistry
- View Cell Registry Service
- DefaultWarrantManager
- WarrantRequest
- Warrant Request Data Structure
- ActionResult
- Standard workflow action result envelope.
- CoreActions
- Core workflow actions: email, notes, entity updates, role assignment,
variable setting, and ActiveWindow temporal management.
- CoreConditions
- Core workflow condition evaluators: field comparisons, permission checks, and expressions.
- DefaultWorkflowApprovalManager
- Default implementation of WorkflowApprovalManagerInterface.
- DefaultWorkflowEngine
- Default workflow execution engine.
- DefaultWorkflowVersionManager
- Manages workflow version lifecycle: drafting, publishing, archiving,
instance migration, and version comparison.
- ExpressionEvaluator
- Safe expression evaluator for workflow templates, date arithmetic, conditionals, and math.
- OptimisticLockException
- Thrown when an optimistic lock version conflict is detected
during concurrent approval modification.
- MembersWorkflowActions
- Workflow action implementations for member lifecycle operations.
- MembersWorkflowConditions
- Workflow condition evaluators for member lifecycle checks.
- MembersWorkflowProvider
- Registers member lifecycle workflow triggers, actions, conditions, and entities.
- ScheduleWorkflowProvider
- Registers the schedule trigger type with the workflow trigger registry.
- WarrantWorkflowActions
- Workflow action implementations for warrant operations.
- WarrantWorkflowConditions
- Workflow condition evaluators for warrant operations.
- WarrantWorkflowProvider
- Registers warrant workflow triggers and actions with the workflow registries.
- StateMachineHandler
- Handles configurable state machine transitions with dual status/state tracking,
field rules, and audit logging. Designed for use by the workflow engine's
stateMachine node type but generic enough for any entity with state tracking.
- TriggerDispatcher
- Dispatches trigger events to find and start matching workflows.
- WorkflowDefinitionValidator
- Shared workflow definition graph validator for seeds, publishing, and CI checks.
- WorkflowNodeTypes
- Canonical workflow node-type catalog shared by validation and execution.
- WorkflowActionRegistry
- Workflow Action Registry
- WorkflowApproverResolverRegistry
- Workflow Approver Resolver Registry
- WorkflowConditionRegistry
- Workflow Condition Registry
- WorkflowEntityRegistry
- Workflow Entity Registry
- WorkflowPluginLoader
- Discovers and loads workflow registrations from plugins.
- WorkflowTriggerRegistry
- Workflow Trigger Registry
- AjaxView
- AJAX Response View Class
- AppView
- Application View
- KmpHelper
- KMP View Helper providing custom UI components and template utilities.
- MarkdownHelper
- Markdown Helper
- SecurityDebugHelper
- Security Debug Helper
- TimezoneHelper
- Timezone View Helper for template-friendly datetime formatting.
- ViteHelper
- Helper for resolving Vite-built assets via the build manifest.
Traits
- MemberAuthorizationsTrait
- Provides authorization-related functionality to Member entities.
- BestowalNotesSupportTrait
- Builds bestowal note text from linked recommendations.
- RecommendationMutationSupportTrait
- FlexibleStringTemplateTrait
- Adds string template functionality to any class by providing methods to
load and parse string templates.
- ClassTrait
- A trait that provides useful methods to generate bootstrap html specific
code.
- EasyIconTrait
- A trait that provides easy icon processing.
- UrlComparerTrait
- A trait that provides a method to compare url.
- LoadHelperTrait
- ServicesTrait
- DataverseGridTrait
- Unified grid processing for dataverse-style grids with saved views, filters, and sorting.
- ManagedBackupDownloadTrait
- Shared guarded-download plumbing for managed (platform-recorded) backups.
- TurboResponseTrait
- Turbo Stream responses for partial page updates (modal save, grid refresh).
- WorkflowDispatchTrait
- Workflow dispatch helpers for controllers.
- QueuedMailerAwareTrait
- Provides functionality for loading mailer classes
onto properties of the host object.
- TemplateAwareMailerTrait
- Trait for using database-stored email templates
- CrossEngineMigrationTrait
- Helper trait for migrations that embed values directly in raw SQL strings.
- WorkflowActionTrait
- Shared helpers for workflow action providers.
- WorkflowContextAwareTrait
- Shared context-resolution logic for workflow action and condition classes.
- WorkflowDefinitionFinderTrait
- Lookup helpers for global workflow definitions.
Constants
-
STDIN
: mixed = fopen('php://stdin', 'r')
STDIN
public
mixed
STDIN
= fopen('php://stdin', 'r')